Data processing method, device, electronic device and computer readable storage medium

By predicting and behavioral verification of data requests from the data requester, the problems in the existing technology that verification methods are easily cracked, costly and inefficient, are solved, and a simple and effective account verification solution is realized to ensure the security and normal operation of the Internet platform.

CN114095191BActive Publication Date: 2025-03-21RAJAX NETWORK &TECHNOLOGY (SHANGHAI) CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202010767008.6
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2020-08-03
Publication Date
2025-03-21
Estimated Expiration
2040-08-03

AI Technical Summary

Technical Problem

When identifying and preventing spam accounts and malicious transactions, the prior art has problems such as easy to crack, high cost and low efficiency.

Method used

By prejudging the data request of the data requester, determining whether it is a preset behavior, and trajectory behavior verification and physiological feature verification are carried out to ensure the legality of the data request.

Benefits of technology

A simple, low-cost and difficult to crack account verification solution is realized, effectively identifying and preventing spam accounts and malicious transactions, and ensuring the normal operation of the Internet platform.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN114095191B_ABST
    Figure CN114095191B_ABST
Patent Text Reader

Abstract

The disclosed embodiment discloses a data processing method, device, electronic device and computer-readable storage medium, wherein the data processing method comprises: obtaining a data request sent by a data requester, and determining whether the data request is a preset behavior; when the data request is determined to be a preset behavior, performing behavior verification on the data requester, wherein the behavior verification includes trajectory behavior verification and physiological feature verification; when the data requester passes the behavior verification, the data request is confirmed. The technical solution is simple in procedure, easy to implement, low in cost and not easy to be cracked, and can effectively identify illegal network behaviors such as spam accounts, and ensure the normal operation of the Internet platform.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present disclosure relates to the field of data processing technology, and in particular to a data processing method, device, electronic device, and computer-readable storage medium. Background Art

[0002] With the development of internet technology, more and more services and information exchanges are conducted through internet platforms. However, with the increase in the amount of internet information and the number of internet transactions, the problems of script robots, zombie accounts, non-authentic users, and malicious crawlers are becoming increasingly serious. Many accounts may be junk accounts automatically registered by software and have no corresponding real, active users. This can lead to illegal online activities such as malicious transactions, which seriously interfere with the normal operation of internet platforms. In the existing technology, verification methods such as graphic verification, SMS verification, voice verification, and sliding behavior verification are commonly used to identify junk accounts. Although these verification methods can verify junk accounts to a certain extent, they have many drawbacks and shortcomings. For example, graphic verification is relatively easy to implement and low-cost, but it is easily cracked by OCR (Optical Character Recognition) technology; SMS verification and voice verification are time-consuming to implement; and sliding behavior verification involves collecting and verifying behavioral traces, so it is expensive to implement and has also been cracked. Therefore, there is an urgent need for an account verification solution that is simple to implement, low-cost, and difficult to crack. Summary of the Invention

[0003] Embodiments of the present disclosure provide a data processing method, apparatus, electronic device, and computer-readable storage medium.

[0004] In a first aspect, an embodiment of the present disclosure provides a data processing method.

[0005] Specifically, the data processing method includes:

[0006] Obtaining a data request sent by a data requester, and determining whether the data request is a preset behavior;

[0007] When it is determined that the data request is a preset behavior, performing behavior verification on the data requester, wherein the behavior verification includes trajectory behavior verification and physiological feature verification;

[0008] When the data requester passes the behavior verification, the data request is confirmed.

[0009] In conjunction with the first aspect, in a first implementation of the first aspect of the present disclosure, the performing behavior verification on the data requester includes:

[0010] Sending the trajectory behavior verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer;

[0011] When it is confirmed that the received trajectory behavior verification answer is consistent with the verification answer data, it is confirmed that the data requester has passed the behavior verification;

[0012] When it is confirmed that the received trajectory behavior verification answer is inconsistent with the verification answer data, the trajectory behavior verification data is sent again;

[0013] When the verification times reach the preset times and there is still inconsistency, it is determined that the behavior verification has failed.

[0014] In combination with the first aspect and the above-mentioned implementation manner of the first aspect, in a second implementation manner of the first aspect of the present disclosure, the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object.

[0015] In combination with the first aspect and the above-mentioned implementation manner of the first aspect, in a third implementation manner of the first aspect of the present disclosure, the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

[0016] In combination with the first aspect and the above implementation of the first aspect, in a fourth implementation of the first aspect of the present disclosure, the performing behavior verification on the data requester includes:

[0017] Sending the trajectory behavior verification data and the physiological characteristic verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputs the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer;

[0018] When it is confirmed that the received trajectory behavior verification answer and physiological feature verification answer are consistent with the verification solution data, it is confirmed that the data requester has passed the behavior verification;

[0019] When it is confirmed that any one of the received trajectory behavior verification answer and physiological feature verification answer is inconsistent with the verification solution data, the trajectory behavior verification data and / or physiological feature verification data are sent again;

[0020] When the verification times reach the preset times and there is still inconsistency, it is determined that the behavior verification has failed.

[0021] In combination with the first aspect and the above-mentioned implementation manner of the first aspect, in a fifth implementation manner of the first aspect of the present disclosure, the physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris.

[0022] In combination with the first aspect and the above-mentioned implementation manner of the first aspect, in a sixth implementation manner of the first aspect of the present disclosure, the behavior verification also includes signature verification.

[0023] In combination with the first aspect and the foregoing implementation of the first aspect, in a seventh implementation of the first aspect of the present disclosure, the performing behavior verification on the data requester includes:

[0024] Sending verification data and random signature to the data requester;

[0025] When it is confirmed that the received verification answer is consistent with the verification solution data and the received random signature is consistent with the sent random signature, it is confirmed that the data requester has passed the behavior verification; otherwise, it is confirmed that the behavior verification has failed.

[0026] In combination with the first aspect and the above-mentioned implementation manner of the first aspect, in an eighth implementation manner of the first aspect of the present disclosure, the verification is verification based on hash calculation.

[0027] In combination with the first aspect and the foregoing implementation of the first aspect, in a ninth implementation of the first aspect of the present disclosure, the performing behavior verification on the data requester includes:

[0028] Sending verification data and random signature to the data requester;

[0029] In response to receiving first hash data sent by the data requester, verifying the first hash data, wherein the first hash data is data obtained by hashing the verification answer, the random signature, and the sending timestamp by the data requester;

[0030] When the first hash data passes the verification, it is confirmed that the data requester passes the behavior verification.

[0031] In combination with the first aspect and the foregoing implementation of the first aspect, in a tenth implementation of the first aspect of the present disclosure, verifying the first hash data includes:

[0032] Acquire verification answer data corresponding to the verification data;

[0033] Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period of preset length after the sending timestamp;

[0034] Performing a hash calculation on the verification answer data, the random signature, and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp;

[0035] The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

[0036] In combination with the first aspect and the foregoing implementation of the first aspect, in an eleventh implementation of the first aspect of the present disclosure, verifying the first hash data includes:

[0037] Acquire verification answer data corresponding to the verification data;

[0038] Parsing the first hash data to obtain the verification answer, random signature, and sending timestamp;

[0039] If the verification answer is consistent with the verification solution data, the random signature is consistent with the random signature sent to the data requester, and the time difference between the sending timestamp and the data request reception time is less than the preset time difference, then the first hash data is confirmed to have passed the verification.

[0040] In combination with the first aspect and the foregoing implementation of the first aspect, in a twelfth implementation of the first aspect of the present disclosure, determining whether the data request is a preset behavior includes:

[0041] Obtaining attribute characteristics of the data request;

[0042] When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be a preset behavior.

[0043] In combination with the first aspect and the above implementation of the first aspect, the present disclosure further includes, in a thirteenth implementation of the first aspect:

[0044] When the data request is not a preset action, confirm the data request.

[0045] In combination with the first aspect and the above implementation of the first aspect, the present disclosure further includes, in a fourteenth implementation of the first aspect:

[0046] When the data requester fails to pass the behavior verification, the data request is rejected.

[0047] In combination with the first aspect and the above implementation of the first aspect, the present disclosure further includes, in a fifteenth implementation of the first aspect:

[0048] When the data request is confirmed, sending a verification pass message to the data requester;

[0049] When the data request is not confirmed, a verification failure message is sent to the data requester.

[0050] In a second aspect, an embodiment of the present disclosure provides a data processing method.

[0051] Specifically, the data processing method includes:

[0052] Sending data request to the data processing server;

[0053] In response to receiving the verification data sent by the data processing server, generating a verification answer based on the verification data, and sending the verification answer to the data processing server so that it performs behavior verification based on the verification answer, wherein the behavior verification includes trajectory behavior verification and physiological feature verification;

[0054] Receive a verification notification message sent by the data processing server.

[0055] In conjunction with the second aspect, in a first implementation of the second aspect of the present disclosure, the verification data is trajectory behavior verification data, and the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object;

[0056] The step of generating a verification answer based on the verification data in response to receiving the verification data sent by the data processing server is implemented as follows:

[0057] In response to receiving the trajectory behavior verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer;

[0058] In response to receiving the trajectory behavior verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer.

[0059] In combination with the second aspect and the above-mentioned implementation manner of the second aspect, in a second implementation manner of the second aspect of the present disclosure, the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

[0060] In combination with the second aspect and the above-mentioned implementation manner of the second aspect, in a third implementation manner of the second aspect of the present disclosure, the verification data includes trajectory behavior verification data and physiological feature verification data, the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data for indicating how to perform the trajectory behavior on the trajectory behavior operation object, the physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris;

[0061] The step of generating a verification answer based on the verification data in response to receiving the verification data sent by the data processing server is implemented as follows:

[0062] In response to receiving the trajectory behavior verification data and the physiological characteristic verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputting the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer;

[0063] In response to receiving the trajectory behavior verification data and physiological feature verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and the physiological feature data is input again according to the physiological feature verification data to form a physiological feature verification answer.

[0064] In combination with the second aspect and the above-mentioned implementation manner of the second aspect, in a fourth implementation manner of the second aspect of the present disclosure, the behavior verification also includes signature verification.

[0065] In combination with the second aspect and the above implementation of the second aspect, the fifth implementation of the second aspect of the present disclosure further includes:

[0066] The random signature sent by the data processing server is received, and in response to the generation of the verification answer, the verification answer and the random signature are sent to the data processing server.

[0067] In combination with the second aspect and the above-mentioned implementation manner of the second aspect, in a sixth implementation manner of the second aspect of the present disclosure, the verification is verification based on hash calculation.

[0068] In combination with the second aspect and the above-mentioned implementation manner of the second aspect, in a seventh implementation manner of the second aspect of the present disclosure, in response to receiving the verification data sent by the data processing server, generating a verification answer based on the verification data, and sending the verification answer to the data processing server so that the data processing server performs behavior verification based on the verification answer is implemented as follows:

[0069] In response to receiving the verification data and the random signature sent by the data processing server, generating a verification answer based on the verification data;

[0070] Determine the sending timestamp;

[0071] Performing a hash calculation based on the verification answer, the random signature, and the sending timestamp to obtain first hash data;

[0072] The first hash data is sent to the data processing server, so that the server performs behavior verification based on the first hash data.

[0073] In combination with the second aspect and the above implementation of the second aspect, an eighth implementation of the second aspect of the present disclosure further includes:

[0074] In response to receiving the verification pass message sent by the data processing server, a preset operation is performed.

[0075] In a third aspect, an embodiment of the present disclosure provides a data processing method.

[0076] Specifically, the data processing method includes:

[0077] The data requester sends a data request to the data processing server;

[0078] In response to receiving the data request, the data processing server determines whether the data request is a preset behavior;

[0079] When the data processing server determines that the data request is a preset behavior, it performs behavior verification on the data requester, and when the data requester passes the behavior verification, it confirms the data request, wherein the behavior verification includes trajectory behavior verification and physiological feature verification.

[0080] In conjunction with the third aspect, in a first implementation of the third aspect of the present disclosure, the performing behavior verification on the data requester includes:

[0081] The data processing server sends trajectory behavior verification data to the data requester, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object;

[0082] The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server;

[0083] When the data processing server confirms that the trajectory behavior verification answer is consistent with the verification answer data, it confirms that the data requester has passed the behavior verification. When it confirms that the trajectory behavior verification answer is inconsistent with the verification answer data, it resends the trajectory behavior verification data.

[0084] The data requester repeats the behavior trajectory again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server;

[0085] When the data processing server still confirms inconsistency after the number of verifications reaches a preset number, it is determined that the behavior verification has failed.

[0086] In combination with the third aspect and the above-mentioned implementation manner of the third aspect, in a second implementation manner of the third aspect of the present disclosure, the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

[0087] In combination with the third aspect and the above implementation of the third aspect, in a third implementation of the third aspect of the present disclosure, the performing behavior verification on the data requester includes:

[0088] The data processing server sends trajectory behavior verification data and physiological feature verification data to the data requester, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to perform the trajectory behavior on the trajectory behavior operation object, and the physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris;

[0089] The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, inputs physiological feature data according to the physiological feature verification data to form a physiological feature verification answer, and sends the trajectory behavior verification answer and the physiological feature verification answer to the data processing server;

[0090] When the data processing server confirms that the trajectory behavior verification answer and the physiological feature verification answer are both consistent with the verification answer data, it confirms that the data requester has passed the behavior verification. When it confirms that any one of the trajectory behavior verification answer and the physiological feature verification answer is inconsistent with the verification answer data, it resends the trajectory behavior verification data and / or the physiological feature verification data;

[0091] The data requester repeats the behavior trajectory again according to the trajectory behavior verification data and / or physiological feature verification data to form a trajectory behavior verification answer or inputs physiological feature data to form a physiological feature verification answer, and sends the trajectory behavior verification answer and / or physiological feature verification answer to the data processing server;

[0092] When the data processing server still confirms inconsistency after the number of verifications reaches a preset number, it is determined that the behavior verification has failed.

[0093] In combination with the third aspect and the above implementation of the third aspect, in a fourth implementation of the third aspect of the present disclosure, the behavior verification further includes signature verification;

[0094] The performing behavior verification on the data requester includes:

[0095] The data processing server sends verification data and a random signature to the data requester;

[0096] The data requester generates a verification answer based on the verification data, and sends the verification answer and the random signature to the data processing server;

[0097] When the data processing server confirms that the received verification answer is consistent with the verification solution data and the received random signature is consistent with the sent random signature, it is confirmed that the data requester has passed the behavior verification; otherwise, it is confirmed that the behavior verification has failed.

[0098] In combination with the third aspect and the above implementation of the third aspect, in a fifth implementation of the third aspect of the present disclosure, the verification is verification based on hash calculation;

[0099] The performing behavior verification on the data requester includes:

[0100] The data processing server sends verification data and a random signature to the data requester;

[0101] The data requester generates a verification answer based on the verification data, determines a sending timestamp, performs a hash calculation based on the verification answer, the random signature, and the sending timestamp to obtain first hash data, and sends the first hash data to the data processing server;

[0102] The data processing server verifies the first hash data, and when the first hash data passes the verification, it confirms that the data requester passes the behavior verification.

[0103] In combination with the third aspect and the above implementation of the third aspect, in a sixth implementation of the third aspect of the present disclosure, the data processing server verifies the first hash data, including:

[0104] Acquire verification answer data corresponding to the verification data;

[0105] Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period of preset length after the sending timestamp;

[0106] Performing a hash calculation on the verification answer data, the random signature, and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp;

[0107] The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

[0108] In combination with the third aspect and the above implementation of the third aspect, in a seventh implementation of the third aspect of the present disclosure, the data processing server verifies the first hash data, including:

[0109] Acquire verification answer data corresponding to the verification data;

[0110] Parsing the first hash data to obtain the verification answer, random signature, and sending timestamp;

[0111] If the verification answer is consistent with the verification solution data, the random signature is consistent with the random signature sent to the data requester, and the time difference between the sending timestamp and the data request reception time is less than the preset time difference, then the first hash data is confirmed to have passed the verification.

[0112] In combination with the third aspect and the above implementation of the third aspect, in an eighth implementation of the third aspect of the present disclosure, the data processing server determines whether the data request is a preset behavior, including:

[0113] Obtaining attribute characteristics of the data request;

[0114] When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be a preset behavior.

[0115] In combination with the third aspect and the above implementation of the third aspect, the ninth implementation of the third aspect of the present disclosure further includes:

[0116] When the data processing server determines that the data request is not a preset behavior, confirming the data request and sending a verification pass message to the data requester;

[0117] When the data processing server determines that the data requester fails the behavior verification, it rejects the data request and sends a verification failure message to the data requester.

[0118] In a fourth aspect, an embodiment of the present disclosure provides a data processing device.

[0119] Specifically, the data processing device includes:

[0120] a determination module, configured to obtain a data request sent by a data requester and determine whether the data request is a preset behavior;

[0121] a verification module configured to, when determining that the data request is a preset behavior, perform behavior verification on the data requester, wherein the behavior verification includes trajectory behavior verification and physiological feature verification;

[0122] A confirmation module is configured to confirm the data request when the data requester passes the behavior verification.

[0123] In conjunction with the fourth aspect, in a first implementation of the fourth aspect of the present disclosure, the portion of the verification module that performs behavior verification on the data requester is configured to:

[0124] Sending the trajectory behavior verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer;

[0125] When it is confirmed that the received trajectory behavior verification answer is consistent with the verification answer data, it is confirmed that the data requester has passed the behavior verification;

[0126] When it is confirmed that the received trajectory behavior verification answer is inconsistent with the verification answer data, the trajectory behavior verification data is sent again;

[0127] When the verification times reach the preset times and there is still inconsistency, it is determined that the behavior verification has failed.

[0128] In combination with the fourth aspect and the above-mentioned implementation manner of the fourth aspect, in a second implementation manner of the fourth aspect of an embodiment of the present disclosure, the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data for indicating how to implement the trajectory behavior on the trajectory behavior operation object.

[0129] In combination with the fourth aspect and the above-mentioned implementation manner of the fourth aspect, in a third implementation manner of the fourth aspect of an embodiment of the present disclosure, the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

[0130] In combination with the fourth aspect and the above implementation of the fourth aspect, in a fourth implementation of the fourth aspect of the embodiment of the present disclosure, the part of the verification module that performs behavior verification on the data requester is configured as follows:

[0131] Sending the trajectory behavior verification data and the physiological characteristic verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputs the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer;

[0132] When it is confirmed that the received trajectory behavior verification answer and physiological feature verification answer are consistent with the verification solution data, it is confirmed that the data requester has passed the behavior verification;

[0133] When it is confirmed that any one of the received trajectory behavior verification answer and physiological feature verification answer is inconsistent with the verification solution data, the trajectory behavior verification data and / or physiological feature verification data are sent again;

[0134] When the verification times reach the preset times and there is still inconsistency, it is determined that the behavior verification has failed.

[0135] In combination with the fourth aspect and the above-mentioned implementation of the fourth aspect, in a fifth implementation of the fourth aspect of an embodiment of the present disclosure, the physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris.

[0136] In combination with the fourth aspect and the above-mentioned implementation manner of the fourth aspect, in a sixth implementation manner of the fourth aspect of the embodiment of the present disclosure, the behavior verification also includes signature verification.

[0137] In combination with the fourth aspect and the above implementation manner of the fourth aspect, in a seventh implementation manner of the fourth aspect of the embodiment of the present disclosure, the part of the verification module that performs behavior verification on the data requester is configured as follows:

[0138] Sending verification data and random signature to the data requester;

[0139] When it is confirmed that the received verification answer is consistent with the verification solution data and the received random signature is consistent with the sent random signature, it is confirmed that the data requester has passed the behavior verification; otherwise, it is confirmed that the behavior verification has failed.

[0140] In combination with the fourth aspect and the above-mentioned implementation manner of the fourth aspect, in an eighth implementation manner of the fourth aspect of an embodiment of the present disclosure, the verification is verification based on hash calculation.

[0141] In combination with the fourth aspect and the above implementation manner of the fourth aspect, in a ninth implementation manner of the fourth aspect of the embodiment of the present disclosure, the part of the verification module that performs behavior verification on the data requester is configured as follows:

[0142] Sending verification data and random signature to the data requester;

[0143] In response to receiving first hash data sent by the data requester, verifying the first hash data, wherein the first hash data is data obtained by hashing the verification answer, the random signature, and the sending timestamp by the data requester;

[0144] When the first hash data passes the verification, it is confirmed that the data requester passes the behavior verification.

[0145] In combination with the fourth aspect and the foregoing implementation of the fourth aspect, in a tenth implementation of the fourth aspect of the embodiment of the present disclosure, the part for verifying the first hash data is configured as follows:

[0146] Acquire verification answer data corresponding to the verification data;

[0147] Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period of preset length after the sending timestamp;

[0148] Performing a hash calculation on the verification answer data, the random signature, and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp;

[0149] The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

[0150] In combination with the fourth aspect and the foregoing implementation of the fourth aspect, in an eleventh implementation of the fourth aspect of the embodiment of the present disclosure, the part for verifying the first hash data is configured as follows:

[0151] Acquire verification answer data corresponding to the verification data;

[0152] Parsing the first hash data to obtain the verification answer, random signature, and sending timestamp;

[0153] If the verification answer is consistent with the verification solution data, the random signature is consistent with the random signature sent to the data requester, and the time difference between the sending timestamp and the data request reception time is less than the preset time difference, then the first hash data is confirmed to have passed the verification.

[0154] In combination with the fourth aspect and the foregoing implementation of the fourth aspect, in a twelfth implementation of the fourth aspect of the embodiment of the present disclosure, the part of the determination module that determines whether the data request is a preset behavior is configured as follows:

[0155] Obtaining attribute characteristics of the data request;

[0156] When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be a preset behavior.

[0157] In combination with the fourth aspect and the foregoing implementation of the fourth aspect, in a thirteenth implementation of the fourth aspect of the embodiment of the present disclosure, the confirmation module is further configured to:

[0158] When the data request is not a preset action, confirm the data request.

[0159] In combination with the fourth aspect and the foregoing implementation of the fourth aspect, in a fourteenth implementation of the fourth aspect of the embodiment of the present disclosure, the confirmation module is further configured to:

[0160] When the data requester fails to pass the behavior verification, the data request is rejected.

[0161] In combination with the fourth aspect and the foregoing implementation of the fourth aspect, the embodiment of the present disclosure, in a fifteenth implementation of the fourth aspect, further includes:

[0162] The first sending module is configured to: send a verification success message to the data requester when the data request is confirmed; and send a verification failure message to the data requester when the data request is not confirmed.

[0163] In a fifth aspect, a data processing device is provided in an embodiment of the present disclosure.

[0164] Specifically, the data processing device includes:

[0165] a second sending module, configured to send a data request to a data processing server;

[0166] a generation module configured to, in response to receiving the verification data sent by the data processing server, generate a verification answer based on the verification data, and send the verification answer to the data processing server so that the data processing server performs behavior verification based on the verification answer, wherein the behavior verification includes trajectory behavior verification and physiological feature verification;

[0167] The receiving module is configured to receive the verification notification message sent by the data processing server.

[0168] In conjunction with the fifth aspect, in a first implementation of the fifth aspect of the present disclosure, the verification data is trajectory behavior verification data, and the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object;

[0169] The part of the generation module that generates a verification answer based on the verification data in response to receiving the verification data sent by the data processing server is configured to:

[0170] In response to receiving the trajectory behavior verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer;

[0171] In response to receiving the trajectory behavior verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer.

[0172] In combination with the fifth aspect and the above-mentioned implementation manner of the fifth aspect, in a second implementation manner of the fifth aspect of the present disclosure, the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

[0173] In combination with the fifth aspect and the above implementation manner of the fifth aspect, in a third implementation manner of the fifth aspect of the present disclosure, the verification data includes trajectory behavior verification data and physiological feature verification data, the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data for indicating how to perform the trajectory behavior on the trajectory behavior operation object, the physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris;

[0174] The part of the generation module that generates a verification answer based on the verification data in response to receiving the verification data sent by the data processing server is configured to:

[0175] In response to receiving the trajectory behavior verification data and the physiological characteristic verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputting the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer;

[0176] In response to receiving the trajectory behavior verification data and physiological feature verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and the physiological feature data is input again according to the physiological feature verification data to form a physiological feature verification answer.

[0177] In combination with the fifth aspect and the above-mentioned implementation manner of the fifth aspect, in a fourth implementation manner of the fifth aspect of the present disclosure, the behavior verification also includes signature verification.

[0178] In combination with the fifth aspect and the foregoing implementation of the fifth aspect, in a fifth implementation of the fifth aspect of the present disclosure, the generating module is further configured to:

[0179] The random signature sent by the data processing server is received, and in response to the generation of the verification answer, the verification answer and the random signature are sent to the data processing server.

[0180] In combination with the fifth aspect and the above-mentioned implementation of the fifth aspect, in a sixth implementation of the fifth aspect of the present disclosure, the verification is verification based on hash calculation.

[0181] In combination with the fifth aspect and the foregoing implementation of the fifth aspect, in a seventh implementation of the fifth aspect of the present disclosure, the generating module is configured as follows:

[0182] In response to receiving the verification data and the random signature sent by the data processing server, generating a verification answer based on the verification data;

[0183] Determine the sending timestamp;

[0184] Performing a hash calculation based on the verification answer, the random signature, and the sending timestamp to obtain first hash data;

[0185] The first hash data is sent to the data processing server, so that the server performs behavior verification based on the first hash data.

[0186] In combination with the fifth aspect and the above implementation of the fifth aspect, the eighth implementation of the fifth aspect of the present disclosure further includes:

[0187] The execution module is configured to execute a preset operation in response to receiving a verification pass message sent by the data processing server.

[0188] In a sixth aspect, a data processing device is provided in an embodiment of the present disclosure.

[0189] Specifically, the data processing device includes:

[0190] A data requester is configured to send a data request to a data processing server;

[0191] The data processing server is configured to, in response to receiving the data request, determine whether the data request is a preset behavior; when it is determined that the data request is a preset behavior, perform behavior verification on the data requester; and when the data requester passes the behavior verification, confirm the data request, wherein the behavior verification includes trajectory behavior verification and physiological feature verification.

[0192] In conjunction with the sixth aspect, in a first implementation of the sixth aspect of the present disclosure, the portion for performing behavior verification on the data requester is configured as follows:

[0193] The data processing server sends trajectory behavior verification data to the data requester, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object;

[0194] The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server;

[0195] When the data processing server confirms that the trajectory behavior verification answer is consistent with the verification answer data, it confirms that the data requester has passed the behavior verification. When it confirms that the trajectory behavior verification answer is inconsistent with the verification answer data, it resends the trajectory behavior verification data.

[0196] The data requester repeats the behavior trajectory again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server;

[0197] When the data processing server still confirms inconsistency after the number of verifications reaches a preset number, it is determined that the behavior verification has failed.

[0198] In combination with the sixth aspect and the above-mentioned implementation manner of the sixth aspect, in a second implementation manner of the sixth aspect of the present disclosure, the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

[0199] In combination with the sixth aspect and the above implementation of the sixth aspect, in a third implementation of the sixth aspect of the present disclosure, the part for performing behavior verification on the data requester is configured as follows:

[0200] The data processing server sends trajectory behavior verification data and physiological feature verification data to the data requester, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to perform the trajectory behavior on the trajectory behavior operation object, and the physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris;

[0201] The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, inputs physiological feature data according to the physiological feature verification data to form a physiological feature verification answer, and sends the trajectory behavior verification answer and the physiological feature verification answer to the data processing server;

[0202] When the data processing server confirms that the trajectory behavior verification answer and the physiological feature verification answer are both consistent with the verification answer data, it confirms that the data requester has passed the behavior verification. When it confirms that any one of the trajectory behavior verification answer and the physiological feature verification answer is inconsistent with the verification answer data, it resends the trajectory behavior verification data and / or the physiological feature verification data;

[0203] The data requester repeats the behavior trajectory again according to the trajectory behavior verification data and / or physiological feature verification data to form a trajectory behavior verification answer or inputs physiological feature data to form a physiological feature verification answer, and sends the trajectory behavior verification answer and / or physiological feature verification answer to the data processing server;

[0204] When the data processing server still confirms inconsistency after the number of verifications reaches a preset number, it is determined that the behavior verification has failed.

[0205] In combination with the sixth aspect and the above implementation of the sixth aspect, in a fourth implementation of the sixth aspect of the present disclosure, the behavior verification further includes signature verification;

[0206] The part for performing behavior verification on the data requester is configured to:

[0207] The data processing server sends verification data and a random signature to the data requester;

[0208] The data requester generates a verification answer based on the verification data, and sends the verification answer and the random signature to the data processing server;

[0209] When the data processing server confirms that the received verification answer is consistent with the verification solution data and the received random signature is consistent with the sent random signature, it is confirmed that the data requester has passed the behavior verification; otherwise, it is confirmed that the behavior verification has failed.

[0210] In combination with the sixth aspect and the above implementation of the sixth aspect, in a fifth implementation of the sixth aspect of the present disclosure, the verification is verification based on hash calculation;

[0211] The part for performing behavior verification on the data requester is configured to:

[0212] The data processing server sends verification data and a random signature to the data requester;

[0213] The data requester generates a verification answer based on the verification data, determines a sending timestamp, performs a hash calculation based on the verification answer, the random signature, and the sending timestamp to obtain first hash data, and sends the first hash data to the data processing server;

[0214] The data processing server verifies the first hash data, and when the first hash data passes the verification, it confirms that the data requester passes the behavior verification.

[0215] In combination with the sixth aspect and the above implementation of the sixth aspect, in a sixth implementation of the sixth aspect of the present disclosure, the part of the data processing server that verifies the first hash data is configured as follows:

[0216] Acquire verification answer data corresponding to the verification data;

[0217] Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period of preset length after the sending timestamp;

[0218] Performing a hash calculation on the verification answer data, the random signature, and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp;

[0219] The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

[0220] In combination with the sixth aspect and the above implementation of the sixth aspect, in a seventh implementation of the sixth aspect of the present disclosure, the part of the data processing server that verifies the first hash data is configured as follows:

[0221] Acquire verification answer data corresponding to the verification data;

[0222] Parsing the first hash data to obtain the verification answer, random signature, and sending timestamp;

[0223] If the verification answer is consistent with the verification solution data, the random signature is consistent with the random signature sent to the data requester, and the time difference between the sending timestamp and the data request reception time is less than the preset time difference, then the first hash data is confirmed to have passed the verification.

[0224] In combination with the sixth aspect and the foregoing implementation of the sixth aspect, in an eighth implementation of the sixth aspect of the present disclosure, the part of determining whether the data request is a preset behavior is configured as follows:

[0225] Obtaining attribute characteristics of the data request;

[0226] When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be a preset behavior.

[0227] In combination with the sixth aspect and the above implementation of the sixth aspect, in a ninth implementation of the sixth aspect of the present disclosure, the data processing server is further configured as follows:

[0228] When it is determined that the data request is not a preset behavior, confirming the data request and sending a verification pass message to the data requester;

[0229] When it is determined that the data requester fails the behavior verification, the data request is rejected and a verification failure message is sent to the data requester.

[0230] In the seventh aspect, an embodiment of the present disclosure provides an electronic device, comprising a memory and at least one processor, wherein the memory is used to store one or more computer instructions, and wherein the one or more computer instructions are executed by the at least one processor to implement the method steps of the above-mentioned data processing method.

[0231] In an eighth aspect, an embodiment of the present disclosure provides a computer-readable storage medium for storing computer instructions used by a data processing device, which includes computer instructions involved in the data processing device for executing the above-mentioned data processing method.

[0232] The technical solutions provided by the embodiments of the present disclosure may have the following beneficial effects:

[0233] This technical solution pre-judges the data requester's data request, first determining whether the request aligns with a pre-defined behavior, then conducts behavioral verification on data requests that align with the pre-defined behavior. Only data requests that pass behavioral verification are confirmed. This technical solution is simple to implement, easy to implement, low-cost, and difficult to crack. It effectively identifies illegal online activities such as spam accounts and ensures the normal operation of internet platforms.

[0234] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0235] Other features, objectives and advantages of the present disclosure will become more apparent through the following detailed description of non-limiting embodiments in conjunction with the accompanying drawings. In the accompanying drawings:

[0236] Figure 1 A flowchart showing a data processing method according to an embodiment of the present disclosure is shown;

[0237] Figure 2A A schematic diagram of circle nine-square grid trajectory behavior verification data according to an embodiment of the present disclosure is shown;

[0238] Figure 2B A schematic diagram of a nine-square grid trajectory behavior verification data according to an embodiment of the present disclosure is shown;

[0239] Figure 2C A schematic diagram of triangular nine-square grid trajectory behavior verification data according to an embodiment of the present disclosure is shown;

[0240] Figure 2D A schematic diagram of nine-square grid trajectory behavior verification data with random identification information according to an embodiment of the present disclosure is shown;

[0241] Figure 3A A schematic diagram showing a correct behavior verification answer according to an embodiment of the present disclosure;

[0242] Figure 3B A schematic diagram showing an erroneous behavior verification answer according to an embodiment of the present disclosure;

[0243] Figure 3C FIG1 shows a schematic diagram of verification answer data according to an embodiment of the present disclosure;

[0244] Figure 4A A schematic diagram of a verification pass message according to an embodiment of the present disclosure is shown;

[0245] Figure 4B A schematic diagram of a verification failure message according to an embodiment of the present disclosure is shown;

[0246] Figure 5 A flowchart showing a data processing method according to another embodiment of the present disclosure;

[0247] Figure 6 A flowchart showing a data processing method according to another embodiment of the present disclosure;

[0248] Figure 7 A schematic diagram showing an application scenario of a data processing method according to an embodiment of the present disclosure;

[0249] Figure 8 A structural block diagram of a data processing device according to an embodiment of the present disclosure is shown;

[0250] Figure 9 A structural block diagram showing a data processing device according to another embodiment of the present disclosure;

[0251] Figure 10 A structural block diagram of a data processing device according to another embodiment of the present disclosure is shown;

[0252] Figure 11 A structural block diagram of an electronic device according to an embodiment of the present disclosure is shown;

[0253] Figure 12 It is a structural diagram of a computer system suitable for implementing a data processing method according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0254] Hereinafter, exemplary embodiments of the present disclosure will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily implement them. In addition, for the sake of clarity, parts not related to the description of the exemplary embodiments are omitted in the accompanying drawings.

[0255] In the present disclosure, it should be understood that terms such as "include" or "have" are intended to indicate the presence of features, numbers, steps, actions, components, parts, or combinations thereof disclosed in the present specification, and are not intended to exclude the possibility that one or more other features, numbers, steps, actions, components, parts, or combinations thereof exist or are added.

[0256] It should also be noted that, in the absence of conflict, the embodiments and features of the embodiments of the present disclosure may be combined with each other. The present disclosure will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0257] The technical solution provided by the disclosed embodiments pre-judges the data requester's data request, first determining whether the request corresponds to a pre-set behavior, then performing behavior verification on the data request that corresponds to the pre-set behavior. Only data requests that pass behavior verification are confirmed. This technical solution is simple to implement, easy to implement, low-cost, and difficult to crack. It can effectively identify illegal online activities such as spam accounts and ensure the normal operation of the internet platform.

[0258] Figure 1 A flow chart showing a data processing method according to an embodiment of the present disclosure is shown as follows: Figure 1 As shown, the data processing method includes the following steps S101-S103:

[0259] In step S101, a data request sent by a data requester is obtained, and it is determined whether the data request is a preset behavior;

[0260] In step S102, when it is determined that the data request is a preset behavior, a behavior verification is performed on the data requester, wherein the behavior verification includes trajectory behavior verification and physiological feature verification;

[0261] In step S103, when the data requester passes the behavior verification, the data request is confirmed.

[0262] As mentioned above, with the development of internet technology, more and more services and information exchanges are conducted through internet platforms. However, with the increase in the amount of internet information and the number of transactions, the problem of script bots, zombie accounts, fake users, and malicious crawlers has become increasingly serious. Many accounts may be junk accounts automatically registered by software and have no corresponding real, active users. This can lead to illegal online activities such as malicious transactions, which seriously interfere with the normal operation of internet platforms. Existing technologies typically use verification methods such as graphic verification, SMS verification, voice verification, and sliding behavior verification to identify junk accounts. While these verification methods can verify junk accounts to a certain extent, they have many drawbacks and shortcomings. For example, graphic verification is relatively easy to implement and low-cost, but it is easily cracked by OCR technology; SMS verification and voice verification are time-consuming to implement; and sliding behavior verification, because it involves collecting and verifying behavioral traces, is expensive to implement and has also been cracked. Therefore, there is an urgent need for an account verification solution that is simple to implement, low-cost, and difficult to crack.

[0263] In light of these shortcomings, this embodiment proposes a data processing method that pre-judges a data request from a data requester to determine whether the request corresponds to a pre-defined behavior. This method then performs behavior verification on data requests that correspond to the pre-defined behavior. Only data requests that pass behavior verification are confirmed. This technical solution is simple to implement, easy to implement, low-cost, and difficult to crack. It effectively identifies illegal online activities such as spam accounts and ensures the normal operation of internet platforms.

[0264] In one embodiment of the present disclosure, the data processing method may be applicable to computers, computing devices, electronic devices, servers, service clusters, etc. that process data.

[0265] In one embodiment of the present disclosure, the data requester refers to the party that issues a data request. For example, the data requester may be a computer, a handheld device such as a mobile phone, or other devices that can issue data requests.

[0266] In one embodiment of the present disclosure, the data request refers to a user registration or login request. By judging and verifying the user registration or login request, abnormal or illegal users or accounts such as script robots, zombie accounts, non-real users, and spam accounts can be accurately identified.

[0267] In one embodiment of the present disclosure, the preset behavior refers to suspected abnormal or illegal account behavior that meets the pre-set data requirements, wherein the data requirements may, for example, be sending the data request using a proxy address, sending the data request using a jailbroken device, the data requester or the device to which it belongs having forged identification features such as fingerprints, the data requester or the device to which it belongs having invalid identification features such as fingerprints, the data requester or the device to which it belongs having loaded malicious applications within a preset historical time period, the data requester or the device to which it belongs having engaged in illegal behavior within a preset historical time period, etc.

[0268] When the data request is determined to be a preset behavior, that is, the data request meets the above-mentioned data requirements, then the data request is considered to be likely to be an abnormal or illegal account behavior. At this time, it is necessary to further conduct behavior verification on the data requester to ultimately determine whether the data request is indeed an abnormal or illegal account behavior based on the behavior verification result, and whether the data request should be confirmed or rejected.

[0269] In one embodiment of the present disclosure, the step of performing behavior verification on the data requester in step S102 may include the following steps:

[0270] Sending the trajectory behavior verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer;

[0271] When it is confirmed that the received trajectory behavior verification answer is consistent with the verification answer data, it is confirmed that the data requester has passed the behavior verification;

[0272] When it is confirmed that the received trajectory behavior verification answer is inconsistent with the verification answer data, the trajectory behavior verification data is sent again;

[0273] When the verification times reach the preset times and there is still inconsistency, it is determined that the behavior verification has failed.

[0274] The trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object.

[0275] In order to achieve effective behavior verification for the data requester, in this embodiment, trajectory behavior verification data is first sent to the data requester, so that after receiving the trajectory behavior verification data, the data requester can repeat the behavior trajectory on the trajectory behavior operation object according to the trajectory behavior indication data, thereby forming a trajectory behavior verification answer corresponding to the trajectory behavior verification data, and sending the trajectory behavior verification answer back; then confirming whether the received trajectory behavior verification answer is consistent with the previously preset or stored verification answer data, if consistent, it is confirmed that the data requester has passed the behavior verification, if inconsistent, in order to avoid the data requester from making an erroneous operation, etc., the trajectory behavior verification data is sent to the data requester again for trajectory behavior verification; if there is still inconsistency until the verification times reach a preset number, it can be confirmed that the behavior verification has failed, wherein the specific value of the preset number can be set according to the needs of the actual application, for example, it can be set to 3 times, etc.

[0276] In one embodiment of the present disclosure, the trajectory behavior verification data may be nine-square trajectory behavior verification data, such as Figure 2A As shown, Figure 2A The nine circles in the figure form a nine-square grid, which is also the object of trajectory operation. Figure 2A The text above and the arrows embedded in the nine-square grid are trajectory behavior instruction data indicating how to repeat the behavior trajectory on the trajectory behavior operation object. Assuming that the trajectory behavior instruction data is: "Please slide in the direction indicated by the arrows in sequence", the data requester needs to slide one or more of the nine circles in the direction indicated by the arrows embedded in the nine-square grid in sequence. After the operation is completed, a trajectory behavior verification answer containing a coherent behavior trajectory corresponding to the trajectory behavior verification data can be generated, such as Figure 3A and Figure 3B As shown, Figure 3A Verify the answer for the correct trajectory behavior, that is, verify the solution data, Figure 3B Verify the answer for the wrong trajectory behavior. Of course, the nine-square grid pattern can also be composed of other sub-graphs, such as squares, triangles, etc. Figure 2B and Figure 2C As shown, the present disclosure does not impose any specific restrictions on the sub-graphs that make up the nine-square grid. In addition, the trajectory behavior operation object is not limited to the above-mentioned nine-square grid, and can also be other graphics composed of one or more sub-graphs on which trajectory behavior operations can be performed.

[0277] In one embodiment of the present disclosure, the trajectory behavior operation object is provided with random identification information, for example, Figure 2AEach time the 9 circles that form the nine-square grid are sent to the data requester, different identification information can be randomly set for each circle, such as Figure 2D As shown, in this way, a more secure trajectory behavior verification answer can be generated based on the random identification information and the behavior trajectory of the data requester.

[0278] In another embodiment of the present disclosure, the trajectory behavior verification and the physiological feature verification are performed simultaneously, that is, the step of performing behavior verification on the data requester in step S102 may include the following steps:

[0279] Sending the trajectory behavior verification data and the physiological characteristic verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputs the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer;

[0280] When it is confirmed that the received trajectory behavior verification answer and physiological feature verification answer are consistent with the verification solution data, it is confirmed that the data requester has passed the behavior verification;

[0281] When it is confirmed that any one of the received trajectory behavior verification answer and physiological feature verification answer is inconsistent with the verification solution data, the trajectory behavior verification data and / or physiological feature verification data are sent again;

[0282] When the verification times reach the preset times and there is still inconsistency, it is determined that the behavior verification has failed.

[0283] The physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris.

[0284] In order to further ensure the validity of the behavior verification of the data requester, in this embodiment, the trajectory behavior verification and physiological feature verification are performed on the data requester at the same time. Specifically, the trajectory behavior verification data and the physiological feature verification data are first sent to the data requester, so that after receiving the trajectory behavior verification data, the data requester can repeat the behavior trajectory on the trajectory behavior operation object according to the trajectory behavior indication data to form a trajectory behavior verification answer corresponding to the trajectory behavior verification data, and can also input the physiological feature data according to the physiological feature verification data to form a physiological feature verification answer, and send the trajectory behavior verification answer and the physiological feature verification answer back; when it is confirmed that the received trajectory behavior verification answer and the physiological feature verification answer are consistent with the previously preset or stored verification answer data, the data requester is confirmed. The data requester is confirmed to have passed the behavioral verification. If any of the verification answers is inconsistent with the verification answer data, in order to avoid erroneous operations by the data requester, the trajectory behavior verification data and / or physiological feature verification data are sent to the data requester again for behavioral verification. For example, if only the trajectory behavior verification answer is inconsistent with the verification answer data, only the trajectory behavior verification data needs to be resent and the trajectory behavior verification needs to be re-performed. If only the physiological feature verification answer is inconsistent with the verification answer data, only the physiological feature verification data needs to be resent and the physiological feature verification needs to be re-performed. If both the trajectory behavior verification answer and the physiological feature verification answer are inconsistent with the verification answer data, both the trajectory behavior verification data and the physiological feature verification data need to be resent to re-perform trajectory behavior verification and physiological feature verification. If there is still inconsistency after the verification times reach a preset number, it can be determined that the behavioral verification has failed.

[0285] In another embodiment of the present disclosure, the behavior verification also includes signature verification. In this embodiment, the step of performing behavior verification on the data requester in step S102 may include the following steps:

[0286] Sending verification data and random signature to the data requester;

[0287] When it is confirmed that the received verification answer is consistent with the verification solution data and the received random signature is consistent with the sent random signature, it is confirmed that the data requester has passed the behavior verification; otherwise, it is confirmed that the behavior verification has failed.

[0288] In order to enhance the reliability of the behavior verification of the data requester, in this embodiment, a signature verification scheme is also set up, that is, when sending the verification data to the data requester, a random signature is also sent, so that the data requester can send back the random signature it received when returning the verification answer, wherein the random signature refers to a signature document with randomness, which is used to ensure the security of information transmission and prevent tampering. Usually, the random signature has a time limit, such as being valid once; then, when it is confirmed that the received verification answer is consistent with the verification answer data and the received random signature is also consistent with the sent random signature, it can be confirmed that the data requester has passed the behavior verification, otherwise, it is confirmed that the behavior verification has failed.

[0289] In one embodiment of the present disclosure, an H5 page may be used to load a JS (javascript) script with the random signature to send the random signature to the data requester.

[0290] In order to ensure that the verification operation is not tampered with and further improve the security and reliability of behavior verification, in one embodiment of the present disclosure, the verification is set to be based on hash calculation. In this embodiment, the step of performing behavior verification on the data requester in step S102 may include the following steps:

[0291] Sending verification data and random signature to the data requester;

[0292] In response to receiving first hash data sent by the data requester, verifying the first hash data, wherein the first hash data is data obtained by hashing the verification answer, the random signature, and the sending timestamp by the data requester;

[0293] When the first hash data passes the verification, it is confirmed that the data requester passes the behavior verification.

[0294] In this embodiment, verification data and a random signature are first sent to the data requester. After generating a verification answer, the data requester may perform a hash calculation on the verification answer, the random signature and the sending timestamp to obtain a hash calculation result, i.e., the first hash data, and send the first hash data back, wherein the sending timestamp refers to the timestamp determined by the data requester when the data request is sent; after receiving the first hash data sent by the data requester, the first hash data may be verified to obtain a verification result for the data requester, i.e., when the first hash data passes the verification, the data request may be considered to be a normal and legal request, and the data requester may be a normal and legal requester, which can confirm that the data requester has passed the behavior verification.

[0295] In one embodiment of the present disclosure, the step of verifying the first hash data may include the following steps:

[0296] Acquire verification answer data corresponding to the verification data;

[0297] Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period of preset length after the sending timestamp;

[0298] Performing a hash calculation on the verification answer data, the random signature, and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp;

[0299] The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

[0300] In this embodiment, the verification of the first hash data can be completed without parsing the first hash data. Specifically, first, the verification answer data corresponding to the verification data is obtained, wherein the verification answer data can be stored in the data processing subject or in other storage devices that can communicate with the data processing subject. The verification answer data corresponding to the verification data can be obtained based on the verification data, such as Figure 3CAs shown, taking trajectory behavior verification as an example, similar to the trajectory behavior verification answer, the trajectory behavior verification answer data contains a coherent behavior trajectory and corresponds to the trajectory behavior verification data; then, within a preset time length, one or more candidate timestamps are determined at a preset time interval, wherein the preset time length is a time period with a preset length after the sending timestamp, and the setting of the preset time length is also to verify the validity of the first hash data, because the time interval between sending the verification data and the random signature to the data requester and receiving the first hash data sent by the data requester is usually within a time range. If it exceeds this time range, that is, the data requester reacts too slowly, it means that the data requester may be an abnormal or illegal requester, and the data request may be an abnormal or illegal requester. Therefore, it is necessary to determine one or more candidate timestamps within the preset time length to participate in the subsequent hash calculation, wherein the preset time interval can be set according to the needs of the actual application and the characteristics of the verification data; then the verification answer data, random signature and candidate timestamp are hashed to obtain one or more second hash data corresponding to the candidate timestamp; finally, the first hash data is compared with the one or more second hash data. If there is data consistent with the first hash data in the one or more second hash data, that is, the verification answer, random signature and sending timestamp in the first hash data match the verification answer data, random signature and a candidate timestamp in the second hash data, then the first hash data is considered to be valid, and it can be confirmed that the first hash data has passed the verification.

[0301] In another embodiment of the present disclosure, the step of verifying the first hash data may include the following steps:

[0302] Acquire verification answer data corresponding to the verification data;

[0303] Parsing the first hash data to obtain the verification answer, random signature, and sending timestamp;

[0304] If the verification answer is consistent with the verification solution data, the random signature is consistent with the random signature sent to the data requester, and the time difference between the sending timestamp and the data request reception time is less than the preset time difference, then the first hash data is confirmed to have passed the verification.

[0305] In this embodiment, the verification of the first hash data is completed by parsing the first hash data and verifying the components of the first hash data respectively. Specifically, the verification answer data corresponding to the verification data is first obtained; then the first hash data is parsed to obtain the verification answer, random signature, and sending timestamp; then the above three components are verified separately, that is, whether the verification answer is consistent with the verification answer data, whether the random signature is consistent with the random signature previously sent to the data requester, and whether the time difference between the sending timestamp and the data request reception time is less than a preset time difference. If the above judgment results are all yes, then the first hash data is considered to be valid, and it can be confirmed that the first hash data has passed the verification.

[0306] In one embodiment of the present disclosure, the step of determining whether the data request is a preset behavior in step S101 may include the following steps:

[0307] Obtaining attribute characteristics of the data request;

[0308] When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be a preset behavior.

[0309] As mentioned above, the preset behavior refers to suspected abnormal or illegal account behavior that meets the pre-set data requirements, wherein the data requirements may, for example, be sending the data request using a proxy address, sending the data request using a jailbroken device, the data requester or the device to which it belongs has forged identification features such as fingerprints, the fingerprints or other identification features of the data requester or the device to which it belongs are invalid, the data requester or the device to which it belongs has loaded malicious applications within a preset historical time period, the data requester or the device to which it belongs has committed illegal behavior within a preset historical time period, etc. Therefore, in this embodiment, the attribute characteristics of the data request are first obtained, wherein, based on the data request, the attribute characteristics may include one or more of the following characteristics: whether the data request is sent using a proxy address, whether the data request is sent using a jailbroken device, whether the identification characteristics such as fingerprints of the data requester or the device to which it belongs are forged, whether the identification characteristics such as fingerprints of the data requester or the device to which it belongs are invalid, whether the data requester or the device to which it belongs has loaded a malicious application within a preset historical time period, whether the data requester or the device to which it belongs has committed any illegal behavior within a preset historical time period, etc.; then, it is determined whether the attribute characteristics of the data request match the attribute characteristics of the preset behavior. If they do, it is determined that the data request is a preset behavior, wherein, also based on the data request, the preset behavior attribute characteristics may include one or more of the following characteristics: sending the data request using a proxy address, sending the data request using a jailbroken device, whether the identification characteristics such as fingerprints of the data requester or the device to which it belongs are forged, whether the identification characteristics such as fingerprints of the data requester or the device to which it belongs are invalid, whether the data requester or the device to which it belongs has loaded a malicious application within a preset historical time period, whether the data requester or the device to which it belongs has committed any illegal behavior within a preset historical time period, etc. That is to say, as long as at least one of the attribute characteristics of the data request matches the attribute characteristics of the preset behavior, the data request is considered to be a preset behavior.

[0310] In one embodiment of the present disclosure, the method further comprises the following steps:

[0311] When the data request is not a preset action, confirm the data request.

[0312] In this embodiment, when it is determined that the data request is not a preset behavior, that is, the data request does not meet the conditions of suspected abnormal or illegal account behavior, that is, the data request is a normal and legal account behavior, then a confirmation operation can be directly made for the data request.

[0313] In one embodiment of the present disclosure, the method further comprises the following steps:

[0314] When the data requester fails to pass the behavior verification, the data request is rejected.

[0315] In this embodiment, when the data requester fails the behavior verification, it is considered that the data requester has abnormal or illegal account behavior, so the data request can be rejected. Afterwards, in order to further verify the legitimacy of the data requester, verification data and random signature can be sent to the data requester again for behavior verification again until the number of verification repetitions reaches a preset number.

[0316] Furthermore, in one embodiment of the present disclosure, the method further comprises the following steps:

[0317] When the data request is confirmed, sending a verification pass message to the data requester;

[0318] When the data request is not confirmed, a verification failure message is sent to the data requester.

[0319] In this embodiment, a verification notification message is also sent to the data requester according to the confirmation result of the data request. For example, when the data request is confirmed, a verification pass message is sent to the data requester. Figure 4A As shown, when the data request is not confirmed, a verification failure message is sent to the data requester, such as Figure 4B As shown, the data requester is informed of the processing and verification results of the data request.

[0320] Figure 5 A flow chart showing a data processing method according to another embodiment of the present disclosure is shown as follows: Figure 5 As shown, the data processing method includes the following steps S501-S503:

[0321] In step S501, a data request is sent to a data processing server;

[0322] In step S502, in response to receiving the verification data sent by the data processing server, generating a verification answer based on the verification data, and sending the verification answer to the data processing server, so that the data processing server performs behavior verification based on the verification answer, wherein the behavior verification includes trajectory behavior verification and physiological feature verification;

[0323] In step S503, a verification notification message sent by the data processing server is received.

[0324] As mentioned above, with the development of internet technology, more and more services and information exchanges are conducted through internet platforms. However, with the increase in the amount of internet information and the number of transactions, the problem of script bots, zombie accounts, fake users, and malicious crawlers has become increasingly serious. Many accounts may be junk accounts automatically registered by software and have no corresponding real, active users. This can lead to illegal online activities such as malicious transactions, which seriously interfere with the normal operation of internet platforms. Existing technologies typically use verification methods such as graphic verification, SMS verification, voice verification, and sliding behavior verification to identify junk accounts. While these verification methods can verify junk accounts to a certain extent, they have many drawbacks and shortcomings. For example, graphic verification is relatively easy to implement and low-cost, but it is easily cracked by OCR technology; SMS verification and voice verification are time-consuming to implement; and sliding behavior verification, because it involves collecting and verifying behavioral traces, is expensive to implement and has also been cracked. Therefore, there is an urgent need for an account verification solution that is simple to implement, low-cost, and difficult to crack.

[0325] To address these shortcomings, this implementation proposes a data processing method that generates a behavior verification answer based on behavior verification data and performs a hash calculation on the behavior verification answer, a random signature, and a transmission timestamp to verify behavior for data requests. This technical solution is simple to program, easy to implement, low-cost, and difficult to crack. It effectively identifies illegal online activity such as spam accounts and ensures the normal operation of internet platforms.

[0326] In one embodiment of the present disclosure, the data processing method may be applicable to a data requester such as a computer, a computing device, an electronic device, etc. that processes data.

[0327] In one embodiment of the present disclosure, the verification data is trajectory behavior verification data, which includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object. In this embodiment, the step of generating a verification answer based on the verification data in response to receiving the verification data sent by the data processing server in step S502 can be implemented as follows:

[0328] In response to receiving the trajectory behavior verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer;

[0329] In response to receiving the trajectory behavior verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer.

[0330] In order to perform effective behavior verification, after receiving the trajectory behavior verification data sent by the data processing server, the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer. However, considering that the data requester may make mistakes, if the trajectory behavior verification answer is confirmed to be inconsistent with the pre-set or stored verification answer data, the data processing server will send the trajectory behavior verification data to the data requester again. At this time, the data requester needs to repeat the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer.

[0331] In one embodiment of the present disclosure, the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

[0332] In another embodiment of the present disclosure, the verification data includes trajectory behavior verification data and physiological characteristic verification data. The trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object. The physiological characteristic verification data includes physiological characteristic input area indication information, and the physiological characteristic is a fingerprint and / or iris. In this embodiment, the step of generating a verification answer based on the verification data in response to receiving the verification data sent by the data processing server in step S502 can be implemented as follows:

[0333] In response to receiving the trajectory behavior verification data and the physiological characteristic verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputting the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer;

[0334] In response to receiving the trajectory behavior verification data and physiological feature verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and the physiological feature data is input again according to the physiological feature verification data to form a physiological feature verification answer.

[0335] In order to further ensure the effectiveness of behavior verification, in this embodiment, trajectory behavior verification and physiological feature verification are performed simultaneously. Specifically, after receiving the trajectory behavior verification data and physiological feature verification data sent by the data processing server, the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputs the physiological feature data according to the physiological feature verification data to form a physiological feature verification answer. However, considering that the data requester may make mistakes, if the trajectory behavior verification answer and / or the physiological feature verification answer are confirmed to be inconsistent with the pre-set or stored verification answer data, the data processing server will send the trajectory behavior verification data and / or the physiological feature verification data to the data requester again. At this time, the data requester needs to repeat the behavior trajectory again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and / or input the physiological feature data again according to the physiological feature verification data to form a physiological feature verification answer.

[0336] In another embodiment of the present disclosure, the behavior verification also includes signature verification. In this embodiment, the method further includes the following steps:

[0337] The random signature sent by the data processing server is received, and in response to the generation of the verification answer, the verification answer and the random signature are sent to the data processing server.

[0338] In order to enhance the reliability of the behavior verification of the data requester, a signature verification scheme is also set up in this embodiment, that is, when the data processing server sends the verification data to the data requester, it also sends a random signature. When the data requester returns the verification answer, it needs to send the random signature it receives to the data processing server.

[0339] To ensure that the verification operation is tamper-proof and further improve the security and reliability of behavior verification, in one embodiment of the present disclosure, the verification is based on hash calculation. In this embodiment, step S502, i.e., in response to receiving the verification data sent by the data processing server, generating a verification answer based on the verification data, and sending the verification answer to the data processing server so that it performs behavior verification based on the verification answer, can be implemented as follows:

[0340] In response to receiving the verification data and the random signature sent by the data processing server, generating a verification answer based on the verification data;

[0341] Determine the sending timestamp;

[0342] Performing a hash calculation based on the verification answer, the random signature, and the sending timestamp to obtain first hash data;

[0343] The first hash data is sent to the data processing server, so that the server performs behavior verification based on the first hash data.

[0344] In this embodiment, after receiving the verification data and random signature sent by the data processing server, the data requester generates a verification answer based on the verification data, and performs a hash calculation on the verification answer, random signature and the determined sending timestamp to obtain a hash calculation result, i.e., the first hash data, and sends the first hash data to the data processing server so that it performs behavior verification based on the first hash data.

[0345] In one embodiment of the present disclosure, the following steps are also included:

[0346] In response to receiving the verification pass message sent by the data processing server, a preset operation is performed.

[0347] In this embodiment, if a verification pass message is received from the data processing server, it means that the data processing server confirms that the data request is a normal and legal request, and the data requester is a normal and legal requester. After that, the data requester can perform other subsequent preset operations, such as browsing web pages, generating transaction data, etc.

[0348] In the above embodiment, the data requester first sends a data request to the data processing server; if the verification data and random signature sent by the data processing server are received, the corresponding required behavioral operation is performed based on the verification data, a verification answer is generated, the sending timestamp when the data request is sent is determined, and a hash calculation is performed based on the generated verification answer, the received random signature and the determined sending timestamp to obtain the first hash data; the obtained first hash data is then sent to the data processing server, so that it performs behavioral verification on the data request and the data requester based on the first hash data to determine whether the data request is a normal and legal request, and whether the data requester is a normal and legal requester. Only after the behavioral verification is passed can the data requester perform other subsequent operations.

[0349] Figure 5 The technical terms and technical features involved in the embodiments shown and related Figure 1 - The technical terms and technical features shown in FIG4 and in the related embodiments are the same or similar. Figure 5 The explanation and description of the technical terms and technical features involved in the embodiments shown and related can refer to the above Figure 1 - The explanation of the embodiment shown in FIG4 and the related embodiments will not be repeated here.

[0350] Figure 6 A flow chart showing a data processing method according to another embodiment of the present disclosure is shown as follows: Figure 6 As shown, the data processing method includes the following steps S601-S603:

[0351] In step S601, the data requester sends a data request to the data processing server;

[0352] In step S602, in response to receiving the data request, the data processing server determines whether the data request is a preset behavior;

[0353] In step S603, when the data processing server determines that the data request is a preset behavior, it performs behavior verification on the data requester, and when the data requester passes the behavior verification, it confirms the data request, wherein the behavior verification includes trajectory behavior verification and physiological feature verification.

[0354] As mentioned above, with the development of internet technology, more and more services and information exchanges are conducted through internet platforms. However, with the increase in the amount of internet information and the number of transactions, the problem of script bots, zombie accounts, fake users, and malicious crawlers has become increasingly serious. Many accounts may be junk accounts automatically registered by software and have no corresponding real, active users. This can lead to illegal online activities such as malicious transactions, which seriously interfere with the normal operation of internet platforms. Existing technologies typically use verification methods such as graphic verification, SMS verification, voice verification, and sliding behavior verification to identify junk accounts. While these verification methods can verify junk accounts to a certain extent, they have many drawbacks and shortcomings. For example, graphic verification is relatively easy to implement and low-cost, but it is easily cracked by OCR technology; SMS verification and voice verification are time-consuming to implement; and sliding behavior verification, because it involves collecting and verifying behavioral traces, is expensive to implement and has also been cracked. Therefore, there is an urgent need for an account verification solution that is simple to implement, low-cost, and difficult to crack.

[0355] In light of these shortcomings, this embodiment proposes a data processing method that pre-judges a data request from a data requester to determine whether the request corresponds to a pre-defined behavior. This method then performs behavior verification on data requests that correspond to the pre-defined behavior. Only data requests that pass behavior verification are confirmed. This technical solution is simple to implement, easy to implement, low-cost, and difficult to crack. It effectively identifies illegal online activities such as spam accounts and ensures the normal operation of internet platforms.

[0356] In one embodiment of the present disclosure, the data processing method may be applicable to a system including a data requester and a data processing server.

[0357] In one embodiment of the present disclosure, the performing behavior verification on the data requester includes:

[0358] The data processing server sends trajectory behavior verification data to the data requester, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object;

[0359] The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server;

[0360] When the data processing server confirms that the trajectory behavior verification answer is consistent with the verification answer data, it confirms that the data requester has passed the behavior verification. When it confirms that the trajectory behavior verification answer is inconsistent with the verification answer data, it resends the trajectory behavior verification data.

[0361] The data requester repeats the behavior trajectory again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server;

[0362] When the data processing server still confirms inconsistency after the number of verifications reaches a preset number, it is determined that the behavior verification has failed.

[0363] In one embodiment of the present disclosure, the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

[0364] In one embodiment of the present disclosure, the performing behavior verification on the data requester includes:

[0365] The data processing server sends trajectory behavior verification data and physiological feature verification data to the data requester, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to perform the trajectory behavior on the trajectory behavior operation object, and the physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris;

[0366] The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, inputs physiological feature data according to the physiological feature verification data to form a physiological feature verification answer, and sends the trajectory behavior verification answer and the physiological feature verification answer to the data processing server;

[0367] When the data processing server confirms that the trajectory behavior verification answer and the physiological feature verification answer are both consistent with the verification answer data, it confirms that the data requester has passed the behavior verification. When it confirms that any one of the trajectory behavior verification answer and the physiological feature verification answer is inconsistent with the verification answer data, it resends the trajectory behavior verification data and / or the physiological feature verification data;

[0368] The data requester repeats the behavior trajectory again according to the trajectory behavior verification data and / or physiological feature verification data to form a trajectory behavior verification answer or inputs physiological feature data to form a physiological feature verification answer, and sends the trajectory behavior verification answer and / or physiological feature verification answer to the data processing server;

[0369] When the data processing server still confirms inconsistency after the number of verifications reaches a preset number, it is determined that the behavior verification has failed.

[0370] In one embodiment of the present disclosure, the behavior verification further includes signature verification;

[0371] The performing behavior verification on the data requester includes:

[0372] The data processing server sends verification data and a random signature to the data requester;

[0373] The data requester generates a verification answer based on the verification data, and sends the verification answer and the random signature to the data processing server;

[0374] When the data processing server confirms that the received verification answer is consistent with the verification solution data and the received random signature is consistent with the sent random signature, it is confirmed that the data requester has passed the behavior verification; otherwise, it is confirmed that the behavior verification has failed.

[0375] In one embodiment of the present disclosure, the verification is based on hash calculation;

[0376] The performing behavior verification on the data requester includes:

[0377] The data processing server sends verification data and a random signature to the data requester;

[0378] The data requester generates a verification answer based on the verification data, determines a sending timestamp, performs a hash calculation based on the verification answer, the random signature, and the sending timestamp to obtain first hash data, and sends the first hash data to the data processing server;

[0379] The data processing server verifies the first hash data, and when the first hash data passes the verification, it confirms that the data requester passes the behavior verification.

[0380] In one embodiment of the present disclosure, the data processing server verifies the first hash data, including:

[0381] Acquire verification answer data corresponding to the verification data;

[0382] Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period of preset length after the sending timestamp;

[0383] Performing a hash calculation on the verification answer data, the random signature, and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp;

[0384] The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

[0385] In one embodiment of the present disclosure, the data processing server verifies the first hash data, including:

[0386] Acquire verification answer data corresponding to the verification data;

[0387] Parsing the first hash data to obtain the verification answer, random signature, and sending timestamp;

[0388] If the verification answer is consistent with the verification solution data, the random signature is consistent with the random signature sent to the data requester, and the time difference between the sending timestamp and the data request reception time is less than the preset time difference, then the first hash data is confirmed to have passed the verification.

[0389] In one embodiment of the present disclosure, the data processing server determines whether the data request is a preset behavior, including:

[0390] Obtaining attribute characteristics of the data request;

[0391] When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be a preset behavior.

[0392] In one embodiment of the present disclosure, it further includes:

[0393] When the data processing server determines that the data request is not a preset behavior, confirming the data request and sending a verification pass message to the data requester;

[0394] When the data processing server determines that the data requester fails the behavior verification, it rejects the data request and sends a verification failure message to the data requester.

[0395] Figure 6 The technical terms and technical features involved in the embodiments shown and related Figure 1-Figure 5 The technical terms and technical features mentioned in the embodiments shown and related are the same or similar. Figure 6 The explanation and description of the technical terms and technical features involved in the embodiments shown and related can refer to the above Figure 1-Figure 5 The explanations of the illustrated and related embodiments will not be repeated here.

[0396] Figure 7 A schematic diagram showing an application scenario of a data processing method according to an embodiment of the present disclosure is shown in FIG. Figure 7 As shown, in this scenario, the data request is an account registration request, and the data requester sends an account registration request to the data processing server; the data processing server determines that the account registration request is likely to be an automatic registration request based on the attribute characteristics of the data request, and then sends the trajectory behavior verification data and random signature to the data requester. Figure 2A Similar to the graphic shown, the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data, wherein the trajectory behavior operation object is a nine-square grid graphic composed of 9 circles, the trajectory behavior indication data is an arrow embedded in the nine-square grid graphic, and the text above the nine-square grid graphic "Please slide in the direction indicated by the arrow"; the data requester repeats the behavior trajectory on the trajectory behavior operation object according to the trajectory behavior indication data, and generates a trajectory behavior verification answer corresponding to the trajectory behavior verification data, and the trajectory behavior verification answer is the same as the Figure 3A or Figure 3BSimilar to the figure shown, the data requester then performs a hash calculation on the trajectory behavior verification answer together with the received random signature and the determined sending timestamp, and sends the obtained first hash data to the data processing server. If the data processing server verifies that the first hash data passes the verification, it is considered that the data request is a normal and legal request, and the data requester is a normal and legal requester. At this time, a confirmation decision can be made for the data request, and a verification notification message such as a verification pass message can be sent to the data requester. Figure 4A Similar to the figure shown, on the contrary, a rejection decision is made for the data request, and a verification notification message such as a verification failure message is sent to the data requester, which is similar to Figure 4B The graphics shown are similar.

[0397] The data processing method can also be applied to the detection of malicious crawler accounts. For example, when a suspected malicious crawler account attempts to call the interface for obtaining business information, it is first determined whether it is a suspected malicious crawler request based on its attribute characteristics. If so, the nine-square trajectory behavior verification data and random signature are sent to the data requester. If the data requester can pass the nine-square behavior verification, the account is allowed to call the interface for obtaining business information. If the data requester fails to pass the nine-square behavior verification, the account is denied from calling the interface for obtaining business information.

[0398] The following are embodiments of the apparatus of the present disclosure, which can be used to execute embodiments of the method of the present disclosure.

[0399] Figure 8 FIG1 shows a structural block diagram of a data processing device according to an embodiment of the present disclosure. The device can be implemented as part or all of an electronic device through software, hardware, or a combination of both. Figure 8 As shown, the data processing device includes:

[0400] The determination module 801 is configured to obtain a data request sent by a data requester and determine whether the data request is a preset behavior;

[0401] The verification module 802 is configured to perform behavior verification on the data requester when determining that the data request is a preset behavior, wherein the behavior verification includes trajectory behavior verification and physiological feature verification;

[0402] The confirmation module 803 is configured to confirm the data request when the data requester passes the behavior verification.

[0403] As mentioned above, with the development of internet technology, more and more services and information exchanges are conducted through internet platforms. However, with the increase in the amount of internet information and the number of transactions, the problem of script bots, zombie accounts, fake users, and malicious crawlers has become increasingly serious. Many accounts may be junk accounts automatically registered by software and have no corresponding real, active users. This can lead to illegal online activities such as malicious transactions, which seriously interfere with the normal operation of internet platforms. Existing technologies typically use verification methods such as graphic verification, SMS verification, voice verification, and sliding behavior verification to identify junk accounts. While these verification methods can verify junk accounts to a certain extent, they have many drawbacks and shortcomings. For example, graphic verification is relatively easy to implement and low-cost, but it is easily cracked by OCR technology; SMS verification and voice verification are time-consuming to implement; and sliding behavior verification, because it involves collecting and verifying behavioral traces, is expensive to implement and has also been cracked. Therefore, there is an urgent need for an account verification solution that is simple to implement, low-cost, and difficult to crack.

[0404] In light of these shortcomings, this embodiment proposes a data processing device that pre-judges a data request from a data requester to determine whether the request corresponds to a pre-defined behavior. It then performs behavior verification on data requests that correspond to the pre-defined behavior. Only data requests that pass behavior verification are confirmed. This technical solution is simple to program, easy to implement, low-cost, and difficult to crack. It effectively identifies illegal online activities such as spam accounts and ensures the normal operation of internet platforms.

[0405] In one embodiment of the present disclosure, the data processing device may be implemented as a computer, a computing device, an electronic device, a server, a service cluster, etc. for processing data.

[0406] In one embodiment of the present disclosure, the data requester refers to the party that issues a data request. For example, the data requester may be a computer, a handheld device such as a mobile phone, or other devices that can issue data requests.

[0407] In one embodiment of the present disclosure, the data request refers to a user registration or login request. By judging and verifying the user registration or login request, abnormal or illegal users or accounts such as script robots, zombie accounts, non-real users, and spam accounts can be accurately identified.

[0408] In one embodiment of the present disclosure, the preset behavior refers to suspected abnormal or illegal account behavior that meets the pre-set data requirements, wherein the data requirements may, for example, be sending the data request using a proxy address, sending the data request using a jailbroken device, the data requester or the device to which it belongs having forged identification features such as fingerprints, the data requester or the device to which it belongs having invalid identification features such as fingerprints, the data requester or the device to which it belongs having loaded malicious applications within a preset historical time period, the data requester or the device to which it belongs having engaged in illegal behavior within a preset historical time period, etc.

[0409] When the data request is determined to be a preset behavior, that is, the data request meets the above-mentioned data requirements, then the data request is considered to be likely to be an abnormal or illegal account behavior. At this time, it is necessary to further conduct behavior verification on the data requester to ultimately determine whether the data request is indeed an abnormal or illegal account behavior based on the behavior verification result, and whether the data request should be confirmed or rejected.

[0410] In one embodiment of the present disclosure, the part of the verification module 802 that performs behavior verification on the data requester may be configured as follows:

[0411] Sending the trajectory behavior verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer;

[0412] When it is confirmed that the received trajectory behavior verification answer is consistent with the verification answer data, it is confirmed that the data requester has passed the behavior verification;

[0413] When it is confirmed that the received trajectory behavior verification answer is inconsistent with the verification answer data, the trajectory behavior verification data is sent again;

[0414] When the verification times reach the preset times and there is still inconsistency, it is determined that the behavior verification has failed.

[0415] The trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object.

[0416] In order to achieve effective behavior verification for the data requester, in this embodiment, trajectory behavior verification data is first sent to the data requester, so that after receiving the trajectory behavior verification data, the data requester can repeat the behavior trajectory on the trajectory behavior operation object according to the trajectory behavior indication data, thereby forming a trajectory behavior verification answer corresponding to the trajectory behavior verification data, and sending the trajectory behavior verification answer back; then confirming whether the received trajectory behavior verification answer is consistent with the previously preset or stored verification answer data, if consistent, it is confirmed that the data requester has passed the behavior verification, if inconsistent, in order to avoid the data requester from making an erroneous operation, etc., the trajectory behavior verification data is sent to the data requester again for trajectory behavior verification; if there is still inconsistency until the verification times reach a preset number, it can be confirmed that the behavior verification has failed, wherein the specific value of the preset number can be set according to the needs of the actual application, for example, it can be set to 3 times, etc.

[0417] In one embodiment of the present disclosure, the trajectory behavior verification data may be nine-square trajectory behavior verification data, such as Figure 2A As shown, Figure 2A The nine circles in the figure form a nine-square grid, which is also the object of trajectory operation. Figure 2A The text above and the arrows embedded in the nine-square grid are trajectory behavior instruction data indicating how to repeat the behavior trajectory on the trajectory behavior operation object. Assuming that the trajectory behavior instruction data is: "Please slide in the direction indicated by the arrows in sequence", the data requester needs to slide one or more of the nine circles in the direction indicated by the arrows embedded in the nine-square grid in sequence. After the operation is completed, a trajectory behavior verification answer containing a coherent behavior trajectory corresponding to the trajectory behavior verification data can be generated, such as Figure 3A and Figure 3B As shown, Figure 3A Verify the answer for the correct trajectory behavior, that is, verify the solution data, Figure 3B Verify the answer for the wrong trajectory behavior. Of course, the nine-square grid pattern can also be composed of other sub-graphs, such as squares, triangles, etc. Figure 2B and Figure 2C As shown, the present disclosure does not impose any specific restrictions on the sub-graphs that make up the nine-square grid. In addition, the trajectory behavior operation object is not limited to the above-mentioned nine-square grid, and can also be other graphics composed of one or more sub-graphs on which trajectory behavior operations can be performed.

[0418] In one embodiment of the present disclosure, the trajectory behavior operation object is provided with random identification information, for example, Figure 2AEach time the 9 circles that form the nine-square grid are sent to the data requester, different identification information can be randomly set for each circle, such as Figure 2D As shown, in this way, a more secure trajectory behavior verification answer can be generated based on the random identification information and the behavior trajectory of the data requester.

[0419] In another embodiment of the present disclosure, trajectory behavior verification and physiological feature verification are performed simultaneously, that is, the part of the verification module 802 that performs behavior verification on the data requester can be configured as follows:

[0420] Sending the trajectory behavior verification data and the physiological characteristic verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputs the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer;

[0421] When it is confirmed that the received trajectory behavior verification answer and physiological feature verification answer are consistent with the verification solution data, it is confirmed that the data requester has passed the behavior verification;

[0422] When it is confirmed that any one of the received trajectory behavior verification answer and physiological feature verification answer is inconsistent with the verification solution data, the trajectory behavior verification data and / or physiological feature verification data are sent again;

[0423] When the verification times reach the preset times and there is still inconsistency, it is determined that the behavior verification has failed.

[0424] The physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris.

[0425] In order to further ensure the validity of the behavior verification of the data requester, in this embodiment, the trajectory behavior verification and physiological feature verification are performed on the data requester at the same time. Specifically, the trajectory behavior verification data and the physiological feature verification data are first sent to the data requester, so that after receiving the trajectory behavior verification data, the data requester can repeat the behavior trajectory on the trajectory behavior operation object according to the trajectory behavior indication data to form a trajectory behavior verification answer corresponding to the trajectory behavior verification data, and can also input the physiological feature data according to the physiological feature verification data to form a physiological feature verification answer, and send the trajectory behavior verification answer and the physiological feature verification answer back; when it is confirmed that the received trajectory behavior verification answer and the physiological feature verification answer are consistent with the previously preset or stored verification answer data, the data requester is confirmed. The data requester is confirmed to have passed the behavioral verification. If any of the verification answers is inconsistent with the verification answer data, in order to avoid erroneous operations by the data requester, the trajectory behavior verification data and / or physiological feature verification data are sent to the data requester again for behavioral verification. For example, if only the trajectory behavior verification answer is inconsistent with the verification answer data, only the trajectory behavior verification data needs to be resent and the trajectory behavior verification needs to be re-performed. If only the physiological feature verification answer is inconsistent with the verification answer data, only the physiological feature verification data needs to be resent and the physiological feature verification needs to be re-performed. If both the trajectory behavior verification answer and the physiological feature verification answer are inconsistent with the verification answer data, both the trajectory behavior verification data and the physiological feature verification data need to be resent to re-perform trajectory behavior verification and physiological feature verification. If there is still inconsistency after the verification times reach a preset number, it can be determined that the behavioral verification has failed.

[0426] In another embodiment of the present disclosure, the behavior verification also includes signature verification. In this embodiment, the part of the verification module 802 that verifies the behavior of the data requester can be configured as follows:

[0427] Sending verification data and random signature to the data requester;

[0428] When it is confirmed that the received verification answer is consistent with the verification solution data and the received random signature is consistent with the sent random signature, it is confirmed that the data requester has passed the behavior verification; otherwise, it is confirmed that the behavior verification has failed.

[0429] In order to enhance the reliability of the behavior verification of the data requester, in this embodiment, a signature verification scheme is also set up, that is, when sending the verification data to the data requester, a random signature is also sent, so that the data requester can send back the random signature it received when returning the verification answer, wherein the random signature refers to a signature document with randomness, which is used to ensure the security of information transmission and prevent tampering. Usually, the random signature has a time limit, such as being valid once; then, when it is confirmed that the received verification answer is consistent with the verification answer data and the received random signature is also consistent with the sent random signature, it can be confirmed that the data requester has passed the behavior verification, otherwise, it is confirmed that the behavior verification has failed.

[0430] In one embodiment of the present disclosure, an H5 page may be used to load a JS (javascript) script with the random signature to send the random signature to the data requester.

[0431] In order to ensure that the verification operation is not tampered with and further improve the security and reliability of behavior verification, in one embodiment of the present disclosure, the verification is set to be based on hash calculation. In this embodiment, the part of the verification module 802 that verifies the behavior of the data requester can be configured as follows:

[0432] Sending verification data and random signature to the data requester;

[0433] In response to receiving first hash data sent by the data requester, verifying the first hash data, wherein the first hash data is data obtained by hashing the verification answer, the random signature, and the sending timestamp by the data requester;

[0434] When the first hash data passes the verification, it is confirmed that the data requester passes the behavior verification.

[0435] In this embodiment, verification data and a random signature are first sent to the data requester. After generating a verification answer, the data requester may perform a hash calculation on the verification answer, the random signature and the sending timestamp to obtain a hash calculation result, i.e., the first hash data, and send the first hash data back, wherein the sending timestamp refers to the timestamp determined by the data requester when the data request is sent; after receiving the first hash data sent by the data requester, the first hash data may be verified to obtain a verification result for the data requester, i.e., when the first hash data passes the verification, the data request may be considered to be a normal and legal request, and the data requester may be a normal and legal requester, which can confirm that the data requester has passed the behavior verification.

[0436] In one embodiment of the present disclosure, the portion for verifying the first hash data may be configured as follows:

[0437] Acquire verification answer data corresponding to the verification data;

[0438] Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period of preset length after the sending timestamp;

[0439] Performing a hash calculation on the verification answer data, the random signature, and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp;

[0440] The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

[0441] In this embodiment, the verification of the first hash data can be completed without parsing the first hash data. Specifically, first, the verification answer data corresponding to the verification data is obtained, wherein the verification answer data can be stored in the data processing subject or in other storage devices that can communicate with the data processing subject. The verification answer data corresponding to the verification data can be obtained based on the verification data, such as Figure 3CAs shown, taking trajectory behavior verification as an example, similar to the trajectory behavior verification answer, the trajectory behavior verification answer data contains a coherent behavior trajectory and corresponds to the trajectory behavior verification data; then, within a preset time length, one or more candidate timestamps are determined at a preset time interval, wherein the preset time length is a time period with a preset length after the sending timestamp, and the setting of the preset time length is also to verify the validity of the first hash data, because the time interval between sending the verification data and the random signature to the data requester and receiving the first hash data sent by the data requester is usually within a time range. If it exceeds this time range, that is, the data requester reacts too slowly, it means that the data requester may be an abnormal or illegal requester, and the data request may be an abnormal or illegal requester. Therefore, it is necessary to determine one or more candidate timestamps within the preset time length to participate in the subsequent hash calculation, wherein the preset time interval can be set according to the needs of the actual application and the characteristics of the verification data; then the verification answer data, random signature and candidate timestamp are hashed to obtain one or more second hash data corresponding to the candidate timestamp; finally, the first hash data is compared with the one or more second hash data. If there is data consistent with the first hash data in the one or more second hash data, that is, the verification answer, random signature and sending timestamp in the first hash data match the verification answer data, random signature and a candidate timestamp in the second hash data, then the first hash data is considered to be valid, and it can be confirmed that the first hash data has passed the verification.

[0442] In another embodiment of the present disclosure, the portion for verifying the first hash data may be configured as follows:

[0443] Acquire verification answer data corresponding to the verification data;

[0444] Parsing the first hash data to obtain the verification answer, random signature, and sending timestamp;

[0445] If the verification answer is consistent with the verification solution data, the random signature is consistent with the random signature sent to the data requester, and the time difference between the sending timestamp and the data request reception time is less than the preset time difference, then the first hash data is confirmed to have passed the verification.

[0446] In this embodiment, the verification of the first hash data is completed by parsing the first hash data and verifying the components of the first hash data respectively. Specifically, the verification answer data corresponding to the verification data is first obtained; then the first hash data is parsed to obtain the verification answer, random signature, and sending timestamp; then the above three components are verified separately, that is, whether the verification answer is consistent with the verification answer data, whether the random signature is consistent with the random signature previously sent to the data requester, and whether the time difference between the sending timestamp and the data request reception time is less than a preset time difference. If the above judgment results are all yes, then the first hash data is considered to be valid, and it can be confirmed that the first hash data has passed the verification.

[0447] In one embodiment of the present disclosure, the part of the determination module 801 that determines whether the data request is a preset behavior may be configured as follows:

[0448] Obtaining attribute characteristics of the data request;

[0449] When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be a preset behavior.

[0450] As mentioned above, the preset behavior refers to suspected abnormal or illegal account behavior that meets the pre-set data requirements, wherein the data requirements may, for example, be sending the data request using a proxy address, sending the data request using a jailbroken device, the data requester or the device to which it belongs has forged identification features such as fingerprints, the fingerprints or other identification features of the data requester or the device to which it belongs are invalid, the data requester or the device to which it belongs has loaded malicious applications within a preset historical time period, the data requester or the device to which it belongs has committed illegal behavior within a preset historical time period, etc. Therefore, in this embodiment, the attribute characteristics of the data request are first obtained, wherein, based on the data request, the attribute characteristics may include one or more of the following characteristics: whether the data request is sent using a proxy address, whether the data request is sent using a jailbroken device, whether the identification characteristics such as fingerprints of the data requester or the device to which it belongs are forged, whether the identification characteristics such as fingerprints of the data requester or the device to which it belongs are invalid, whether the data requester or the device to which it belongs has loaded a malicious application within a preset historical time period, whether the data requester or the device to which it belongs has committed any illegal behavior within a preset historical time period, etc.; then, it is determined whether the attribute characteristics of the data request match the attribute characteristics of the preset behavior. If they do, it is determined that the data request is a preset behavior, wherein, also based on the data request, the preset behavior attribute characteristics may include one or more of the following characteristics: sending the data request using a proxy address, sending the data request using a jailbroken device, whether the identification characteristics such as fingerprints of the data requester or the device to which it belongs are forged, whether the identification characteristics such as fingerprints of the data requester or the device to which it belongs are invalid, whether the data requester or the device to which it belongs has loaded a malicious application within a preset historical time period, whether the data requester or the device to which it belongs has committed any illegal behavior within a preset historical time period, etc. That is to say, as long as at least one of the attribute characteristics of the data request matches the attribute characteristics of the preset behavior, the data request is considered to be a preset behavior.

[0451] In one embodiment of the present disclosure, the confirmation module 803 may also be configured to:

[0452] When the data request is not a preset action, confirm the data request.

[0453] In this embodiment, when it is determined that the data request is not a preset behavior, that is, the data request does not meet the conditions of suspected abnormal or illegal account behavior, that is, the data request is a normal and legal account behavior, then a confirmation operation can be directly made for the data request.

[0454] In one embodiment of the present disclosure, the confirmation module 803 may also be configured to:

[0455] When the data requester fails to pass the behavior verification, the data request is rejected.

[0456] In this embodiment, when the data requester fails the behavior verification, it is considered that the data requester has abnormal or illegal account behavior, so the data request can be rejected. Afterwards, in order to further verify the legitimacy of the data requester, verification data and random signature can be sent to the data requester again for behavior verification again until the number of verification repetitions reaches a preset number.

[0457] Furthermore, in one embodiment of the present disclosure, the device further includes:

[0458] The first sending module is configured to: send a verification success message to the data requester when the data request is confirmed; and send a verification failure message to the data requester when the data request is not confirmed.

[0459] In this embodiment, a verification notification message is also sent to the data requester according to the confirmation result of the data request. For example, when the data request is confirmed, a verification pass message is sent to the data requester. Figure 4A As shown, when the data request is not confirmed, a verification failure message is sent to the data requester, such as Figure 4B As shown, the data requester is informed of the processing and verification results of the data request.

[0460] Figure 9 FIG2 shows a structural block diagram of a data processing device according to another embodiment of the present disclosure. The device can be implemented as part or all of an electronic device through software, hardware, or a combination of both. Figure 9 As shown, the data processing device includes:

[0461] The second sending module 901 is configured to send a data request to a data processing server;

[0462] a generation module 902 configured to, in response to receiving the verification data sent by the data processing server, generate a verification answer based on the verification data, and send the verification answer to the data processing server so that the data processing server performs behavior verification based on the verification answer, wherein the behavior verification includes trajectory behavior verification and physiological feature verification;

[0463] The receiving module 903 is configured to receive the verification notification message sent by the data processing server.

[0464] As mentioned above, with the development of internet technology, more and more services and information exchanges are conducted through internet platforms. However, with the increase in the amount of internet information and the number of transactions, the problem of script bots, zombie accounts, fake users, and malicious crawlers has become increasingly serious. Many accounts may be junk accounts automatically registered by software and have no corresponding real, active users. This can lead to illegal online activities such as malicious transactions, which seriously interfere with the normal operation of internet platforms. Existing technologies typically use verification methods such as graphic verification, SMS verification, voice verification, and sliding behavior verification to identify junk accounts. While these verification methods can verify junk accounts to a certain extent, they have many drawbacks and shortcomings. For example, graphic verification is relatively easy to implement and low-cost, but it is easily cracked by OCR technology; SMS verification and voice verification are time-consuming to implement; and sliding behavior verification, because it involves collecting and verifying behavioral traces, is expensive to implement and has also been cracked. Therefore, there is an urgent need for an account verification solution that is simple to implement, low-cost, and difficult to crack.

[0465] To address these shortcomings, this embodiment proposes a data processing device that generates a behavior verification answer based on behavior verification data and performs a hash calculation on the behavior verification answer, a random signature, and a transmission timestamp to verify behavior for data requests. This technical solution is simple to program, easy to implement, low-cost, and difficult to crack. It can effectively identify illegal online activities such as spam accounts and ensure the normal operation of internet platforms.

[0466] In one embodiment of the present disclosure, the data processing device may be implemented as a data requester such as a computer, a computing device, an electronic device, etc. that processes data.

[0467] In one embodiment of the present disclosure, the verification data is trajectory behavior verification data, which includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object. In this embodiment, the part of the generation module 902 that generates a verification answer based on the verification data in response to receiving the verification data sent by the data processing server can be configured as follows:

[0468] In response to receiving the trajectory behavior verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer;

[0469] In response to receiving the trajectory behavior verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer.

[0470] In order to perform effective behavior verification, after receiving the trajectory behavior verification data sent by the data processing server, the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer. However, considering that the data requester may make mistakes, if the trajectory behavior verification answer is confirmed to be inconsistent with the pre-set or stored verification answer data, the data processing server will send the trajectory behavior verification data to the data requester again. At this time, the data requester needs to repeat the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer.

[0471] In one embodiment of the present disclosure, the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

[0472] In another embodiment of the present disclosure, the verification data includes trajectory behavior verification data and physiological characteristic verification data. The trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object. The physiological characteristic verification data includes physiological characteristic input area indication information, and the physiological characteristic is a fingerprint and / or iris. In this embodiment, the portion of the generation module 902 that generates a verification answer based on the verification data in response to receiving the verification data sent by the data processing server can be configured as follows:

[0473] In response to receiving the trajectory behavior verification data and the physiological characteristic verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputting the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer;

[0474] In response to receiving the trajectory behavior verification data and physiological feature verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and the physiological feature data is input again according to the physiological feature verification data to form a physiological feature verification answer.

[0475] In order to further ensure the effectiveness of behavior verification, in this embodiment, trajectory behavior verification and physiological feature verification are performed simultaneously. Specifically, after receiving the trajectory behavior verification data and physiological feature verification data sent by the data processing server, the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputs the physiological feature data according to the physiological feature verification data to form a physiological feature verification answer. However, considering that the data requester may make mistakes, if the trajectory behavior verification answer and / or the physiological feature verification answer are confirmed to be inconsistent with the pre-set or stored verification answer data, the data processing server will send the trajectory behavior verification data and / or the physiological feature verification data to the data requester again. At this time, the data requester needs to repeat the behavior trajectory again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and / or input the physiological feature data again according to the physiological feature verification data to form a physiological feature verification answer.

[0476] In another embodiment of the present disclosure, the behavior verification also includes signature verification. In this embodiment, the generation module 902 is further configured to:

[0477] The random signature sent by the data processing server is received, and in response to the generation of the verification answer, the verification answer and the random signature are sent to the data processing server.

[0478] In order to enhance the reliability of the behavior verification of the data requester, a signature verification scheme is also set up in this embodiment, that is, when the data processing server sends the verification data to the data requester, it also sends a random signature. When the data requester returns the verification answer, it needs to send the random signature it receives to the data processing server.

[0479] In order to ensure that the verification operation is not tampered with and further improve the security and reliability of behavior verification, in one embodiment of the present disclosure, the verification is based on hash calculation. In this embodiment, the generation module 902 can be configured as follows:

[0480] In response to receiving the verification data and the random signature sent by the data processing server, generating a verification answer based on the verification data;

[0481] Determine the sending timestamp;

[0482] Performing a hash calculation based on the verification answer, the random signature, and the sending timestamp to obtain first hash data;

[0483] The first hash data is sent to the data processing server, so that the server performs behavior verification based on the first hash data.

[0484] In this embodiment, after receiving the verification data and random signature sent by the data processing server, the data requester generates a verification answer based on the verification data, and performs a hash calculation on the verification answer, random signature and the determined sending timestamp to obtain a hash calculation result, i.e., the first hash data, and sends the first hash data to the data processing server so that it performs behavior verification based on the first hash data.

[0485] In one embodiment of the present disclosure, it further includes:

[0486] The execution module is configured to execute a preset operation in response to receiving a verification pass message sent by the data processing server.

[0487] In this embodiment, if a verification pass message is received from the data processing server, it means that the data processing server confirms that the data request is a normal and legal request, and the data requester is a normal and legal requester. After that, the data requester can perform other subsequent preset operations, such as browsing web pages, generating transaction data, etc.

[0488] In the above embodiment, the data requester first sends a data request to the data processing server; if the verification data and random signature sent by the data processing server are received, the corresponding required behavioral operation is performed based on the verification data, a verification answer is generated, the sending timestamp when the data request is sent is determined, and a hash calculation is performed based on the generated verification answer, the received random signature and the determined sending timestamp to obtain the first hash data; the obtained first hash data is then sent to the data processing server, so that it performs behavioral verification on the data request and the data requester based on the first hash data to determine whether the data request is a normal and legal request, and whether the data requester is a normal and legal requester. Only after the behavioral verification is passed can the data requester perform other subsequent operations.

[0489] Figure 9 The technical terms and technical features involved in the embodiments shown and related Figure 8 The technical terms and technical features mentioned in the embodiments shown and related are the same or similar. Figure 9 The explanation and description of the technical terms and technical features involved in the embodiments shown and related can refer to the above Figure 8 The explanations of the illustrated and related embodiments will not be repeated here.

[0490] Figure 10FIG2 shows a structural block diagram of a data processing device according to another embodiment of the present disclosure. The device can be implemented as part or all of an electronic device through software, hardware, or a combination of both. Figure 10 As shown, the data processing device includes:

[0491] The data requester 1001 is configured to send a data request to the data processing server;

[0492] The data processing server 1002 is configured to, in response to receiving the data request, determine whether the data request is a preset behavior; when it is determined that the data request is a preset behavior, perform behavior verification on the data requester; and when the data requester passes the behavior verification, confirm the data request, wherein the behavior verification includes trajectory behavior verification and physiological feature verification.

[0493] As mentioned above, with the development of internet technology, more and more services and information exchanges are conducted through internet platforms. However, with the increase in the amount of internet information and the number of transactions, the problem of script bots, zombie accounts, fake users, and malicious crawlers has become increasingly serious. Many accounts may be junk accounts automatically registered by software and have no corresponding real, active users. This can lead to illegal online activities such as malicious transactions, which seriously interfere with the normal operation of internet platforms. Existing technologies typically use verification methods such as graphic verification, SMS verification, voice verification, and sliding behavior verification to identify junk accounts. While these verification methods can verify junk accounts to a certain extent, they have many drawbacks and shortcomings. For example, graphic verification is relatively easy to implement and low-cost, but it is easily cracked by OCR technology; SMS verification and voice verification are time-consuming to implement; and sliding behavior verification, because it involves collecting and verifying behavioral traces, is expensive to implement and has currently been cracked. Therefore, there is an urgent need for an account verification solution that is simple to implement, low-cost, and difficult to crack.

[0494] In light of these shortcomings, this embodiment proposes a data processing device that pre-judges a data request from a data requester to determine whether the request corresponds to a pre-defined behavior. It then performs behavior verification on data requests that correspond to the pre-defined behavior. Only data requests that pass behavior verification are confirmed. This technical solution is simple to program, easy to implement, low-cost, and difficult to crack. It effectively identifies illegal online activities such as spam accounts and ensures the normal operation of internet platforms.

[0495] In one embodiment of the present disclosure, the data processing device may be implemented as a system including a data requester and a data processing server.

[0496] In one embodiment of the present disclosure, the part of performing behavior verification on the data requester may be configured as follows:

[0497] The data processing server sends trajectory behavior verification data to the data requester, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object;

[0498] The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server;

[0499] When the data processing server confirms that the trajectory behavior verification answer is consistent with the verification answer data, it confirms that the data requester has passed the behavior verification. When it confirms that the trajectory behavior verification answer is inconsistent with the verification answer data, it resends the trajectory behavior verification data.

[0500] The data requester repeats the behavior trajectory again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server;

[0501] When the data processing server still confirms inconsistency after the number of verifications reaches a preset number, it is determined that the behavior verification has failed.

[0502] In one embodiment of the present disclosure, the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

[0503] In one embodiment of the present disclosure, the part of performing behavior verification on the data requester may be configured as follows:

[0504] The data processing server sends trajectory behavior verification data and physiological feature verification data to the data requester, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior instruction data for indicating how to perform the trajectory behavior on the trajectory behavior operation object, and the physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris;

[0505] The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, inputs physiological feature data according to the physiological feature verification data to form a physiological feature verification answer, and sends the trajectory behavior verification answer and the physiological feature verification answer to the data processing server;

[0506] When the data processing server confirms that the trajectory behavior verification answer and the physiological feature verification answer are both consistent with the verification answer data, it confirms that the data requester has passed the behavior verification. When it confirms that any one of the trajectory behavior verification answer and the physiological feature verification answer is inconsistent with the verification answer data, it resends the trajectory behavior verification data and / or the physiological feature verification data;

[0507] The data requester repeats the behavior trajectory again according to the trajectory behavior verification data and / or physiological feature verification data to form a trajectory behavior verification answer or inputs physiological feature data to form a physiological feature verification answer, and sends the trajectory behavior verification answer and / or physiological feature verification answer to the data processing server;

[0508] When the data processing server still confirms inconsistency after the number of verifications reaches a preset number, it is determined that the behavior verification has failed.

[0509] In one embodiment of the present disclosure, the behavior verification further includes signature verification;

[0510] The part of performing behavior verification on the data requester may be configured as follows:

[0511] The data processing server sends verification data and a random signature to the data requester;

[0512] The data requester generates a verification answer based on the verification data, and sends the verification answer and the random signature to the data processing server;

[0513] When the data processing server confirms that the received verification answer is consistent with the verification solution data and the received random signature is consistent with the sent random signature, it is confirmed that the data requester has passed the behavior verification; otherwise, it is confirmed that the behavior verification has failed.

[0514] In one embodiment of the present disclosure, the verification is based on hash calculation;

[0515] The part of performing behavior verification on the data requester may be configured as follows:

[0516] The data processing server sends verification data and a random signature to the data requester;

[0517] The data requester generates a verification answer based on the verification data, determines a sending timestamp, performs a hash calculation based on the verification answer, the random signature, and the sending timestamp to obtain first hash data, and sends the first hash data to the data processing server;

[0518] The data processing server verifies the first hash data, and when the first hash data passes the verification, it confirms that the data requester passes the behavior verification.

[0519] In one embodiment of the present disclosure, the part of the data processing server that verifies the first hash data may be configured as follows:

[0520] Acquire verification answer data corresponding to the verification data;

[0521] Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period of preset length after the sending timestamp;

[0522] Performing a hash calculation on the verification answer data, the random signature, and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp;

[0523] The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

[0524] In one embodiment of the present disclosure, the part of the data processing server that verifies the first hash data may be configured as follows:

[0525] Acquire verification answer data corresponding to the verification data;

[0526] Parsing the first hash data to obtain the verification answer, random signature, and sending timestamp;

[0527] If the verification answer is consistent with the verification solution data, the random signature is consistent with the random signature sent to the data requester, and the time difference between the sending timestamp and the data request reception time is less than the preset time difference, then the first hash data is confirmed to have passed the verification.

[0528] In one embodiment of the present disclosure, the data processing server determines whether the data request is part of a preset behavior and may be configured to:

[0529] Obtaining attribute characteristics of the data request;

[0530] When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be a preset behavior.

[0531] In one embodiment of the present disclosure, the data processing server may be further configured to:

[0532] When it is determined that the data request is not a preset behavior, confirming the data request and sending a verification pass message to the data requester;

[0533] When it is determined that the data requester fails the behavior verification, the data request is rejected and a verification failure message is sent to the data requester.

[0534] Figure 10 The technical terms and technical features involved in the embodiments shown and related Figure 8-Figure 9 The technical terms and technical features mentioned in the embodiments shown and related are the same or similar. Figure 10 The explanation and description of the technical terms and technical features involved in the embodiments shown and related can refer to the above Figure 8-Figure 9 The explanations of the illustrated and related embodiments will not be repeated here.

[0535] The present disclosure also discloses an electronic device, Figure 11 A structural block diagram of an electronic device according to an embodiment of the present disclosure is shown. Figure 11 As shown, the electronic device 1100 includes a memory 1101 and a processor 1102; wherein,

[0536] The memory 1101 is used to store one or more computer instructions, wherein the one or more computer instructions are executed by the processor 1102 to implement the above method steps.

[0537] Figure 12 It is a structural diagram of a computer system suitable for implementing a data processing method according to an embodiment of the present disclosure.

[0538] like Figure 12 As shown, the computer system 1200 includes a processing unit 1201, which can execute various processes in the above-mentioned embodiments according to a program stored in a read-only memory (ROM) 1202 or a program loaded from a storage unit 1208 into a random access memory (RAM) 1203. Various programs and data required for the operation of the system 1200 are also stored in the RAM 1203. The processing unit 1201, the ROM 1202, and the RAM 1203 are connected to each other via a bus 1204. An input / output (I / O) interface 1205 is also connected to the bus 1204.

[0539] The following components are connected to the I / O interface 1205: an input section 1206 including a keyboard, a mouse, etc.; an output section 1207 including a cathode ray tube (CRT), a liquid crystal display (LCD), a speaker, etc.; a storage section 1208 including a hard disk, etc.; and a communication section 1209 including a network interface card such as a LAN card, a modem, etc. The communication section 1209 performs communication processing via a network such as the Internet. A drive 1210 is also connected to the I / O interface 1205 as needed. A removable medium 1211, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 1210 as needed so that a computer program read therefrom can be installed into the storage section 1208 as needed. Among them, the processing unit 1201 can be implemented as a processing unit such as a CPU, a GPU, a TPU, an FPGA, or an NPU.

[0540] The flowcharts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the diagram or block diagram can represent a module, program segment or part of the code, and the module, program segment or part of the code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in an order different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flow chart, as well as the combination of boxes in the block diagram and / or flow chart, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or can be implemented using a combination of dedicated hardware and computer instructions.

[0541] The units or modules described in the embodiments of the present disclosure may be implemented in software or hardware. The units or modules described may also be provided in a processor, and the names of these units or modules do not, in certain circumstances, limit the units or modules themselves.

[0542] As another aspect, the present disclosure further provides a computer-readable storage medium. This computer-readable storage medium may be included in the apparatus described in the above embodiments, or may be a standalone computer-readable storage medium not incorporated into the apparatus. The computer-readable storage medium stores one or more programs, which are used by one or more processors to execute the methods described in the present disclosure.

[0543] The above description is merely a preferred embodiment of the present disclosure and an illustration of the technical principles employed. Those skilled in the art should understand that the scope of the invention herein is not limited to the technical solutions formed by the specific combination of the above-mentioned technical features, but also encompasses other technical solutions formed by any combination of the above-mentioned technical features or their equivalents without departing from the inventive concept. For example, a technical solution formed by replacing the above-mentioned features with (but not limited to) technical features with similar functions disclosed in this disclosure.

Claims

1. A data processing method, comprising: Obtaining a data request sent by a data requester, and determining whether the data request is a preset behavior; When it is determined that the data request is a preset behavior, a behavior verification is performed on the data requester, wherein the behavior verification includes trajectory behavior verification and physiological feature verification, the trajectory behavior verification data includes a trajectory behavior operation object, and each time the trajectory behavior verification data is sent to the data requester, identification information is randomly set for each trajectory behavior operation object; When the data requester passes the behavior verification, confirming the data request; The step of performing behavior verification on the data requester includes: Sending verification data and a random signature to the data requester; In response to receiving first hash data sent by the data requester, verifying the first hash data, wherein the first hash data is data obtained by the data requester through hash calculation of a verification answer, a random signature, and a sending timestamp, and the sending timestamp refers to a timestamp determined by the data requester when the data request is sent; When the first hash data passes the verification, confirming that the data requester passes the behavior verification; The verifying the first hash data includes: Acquire verification answer data corresponding to the verification data; Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period with a preset length after the sending timestamp; Performing hash calculation on the verification answer data, the random signature and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp; The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

2. According to the method of claim 1, the performing behavior verification on the data requester comprises: Sending the trajectory behavior verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer; When it is confirmed that the received trajectory behavior verification answer is consistent with the verification answer data, it is confirmed that the data requester has passed the behavior verification; When it is confirmed that the received trajectory behavior verification answer is inconsistent with the verification answer data, the trajectory behavior verification data is sent again; When the verification times reach the preset times and there is still inconsistency, it is confirmed that the behavior verification fails. 3 . The method according to claim 2 , wherein the trajectory behavior verification data comprises a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object. 4 . The method according to claim 1 , wherein the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

5. The method according to claim 1, wherein the performing behavior verification on the data requester comprises: Sending the trajectory behavior verification data and the physiological feature verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputs the physiological feature data according to the physiological feature verification data to form a physiological feature verification answer; When it is confirmed that the received trajectory behavior verification answer and physiological feature verification answer are consistent with the verification answer data, it is confirmed that the data requester has passed the behavior verification; When it is confirmed that any one of the received trajectory behavior verification answer and physiological feature verification answer is inconsistent with the verification answer data, the trajectory behavior verification data and / or physiological feature verification data are sent again; When the verification times reach the preset times and there is still inconsistency, it is confirmed that the behavior verification fails.

6. According to the method of claim 5, the physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris.

7. According to any one of claims 1 to 6, the determining whether the data request is a preset behavior comprises: Obtaining attribute characteristics of the data request; When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be the preset behavior.

8. The method according to any one of claims 1 to 6, further comprising: When the data request is not a preset action, confirm the data request.

9. The method according to any one of claims 1 to 6, further comprising: When the data requester fails to pass the behavior verification, the data request is rejected.

10. The method according to any one of claims 1 to 6, further comprising: When the data request is confirmed, sending a verification pass message to the data requester; When the data request is not confirmed, a verification failure message is sent to the data requester.

11. A data processing method, comprising: Sending a data request to a data processing server; In response to receiving the verification data sent by the data processing server, generating a verification answer based on the verification data, and sending the verification answer to the data processing server, so that it performs behavior verification based on the verification answer, wherein the behavior verification includes trajectory behavior verification and physiological feature verification, and the trajectory behavior verification data includes a trajectory behavior operation object, and the trajectory behavior operation object is provided with random identification information; Receiving a verification pass message sent by the data processing server; Wherein, in response to receiving the verification data sent by the data processing server, generating a verification answer based on the verification data, and sending the verification answer to the data processing server so that the data processing server performs behavior verification based on the verification answer, comprises: In response to receiving the verification data and the random signature sent by the data processing server, generating a verification answer based on the verification data; Determine a sending timestamp, where the sending timestamp refers to a timestamp determined by the data requester when sending the data request; Performing a hash calculation based on the verification answer, the random signature and the sending timestamp to obtain first hash data; Sending the first hash data to the data processing server so that it performs behavior verification based on the first hash data; Among them, the behavior verification is performed by comparing the first hash data with one or more second hash data, and the one or more second hash data are obtained by hashing the verification answer data, the random signature and the candidate timestamp. The candidate timestamp is one or more candidate timestamps determined at a preset time interval within a preset time length, and the preset time length is a time period with a preset length after the sending timestamp.

12. The method according to claim 11, wherein: The verification data is trajectory behavior verification data, and the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data for indicating how to implement the trajectory behavior on the trajectory behavior operation object; In response to receiving the verification data sent by the data processing server, generating a verification answer based on the verification data is implemented as follows: In response to receiving the trajectory behavior verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer; In response to receiving the trajectory behavior verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer. 13 . The method according to claim 11 , wherein the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

14. The method according to claim 11, wherein: The verification data includes trajectory behavior verification data and physiological feature verification data, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data for indicating how to implement the trajectory behavior on the trajectory behavior operation object, and the physiological feature verification data includes physiological feature input area indication information, wherein the physiological feature is a fingerprint and / or an iris; In response to receiving the verification data sent by the data processing server, generating a verification answer based on the verification data is implemented as follows: In response to receiving the trajectory behavior verification data and the physiological characteristic verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputting the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer; In response to receiving the trajectory behavior verification data and physiological feature verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and the physiological feature data is input again according to the physiological feature verification data to form a physiological feature verification answer.

15. The method according to any one of claims 11 to 14, further comprising: In response to receiving a verification pass message sent by the data processing server, a preset operation is performed.

16. A data processing method, comprising: The data requester sends a data request to the data processing server; In response to receiving the data request, the data processing server determines whether the data request is a preset behavior; When the data processing server determines that the data request is a preset behavior, the data processing server performs behavior verification on the data requester, and when the data requester passes the behavior verification, confirms the data request, wherein the behavior verification includes trajectory behavior verification and physiological feature verification; The step of performing behavior verification on the data requester includes: The data processing server sends verification data and a random signature to the data requester; The data requester generates a verification answer based on the verification data, determines a sending timestamp, performs a hash calculation based on the verification answer, the random signature and the sending timestamp to obtain first hash data, and sends the first hash data to the data processing server, where the sending timestamp refers to the timestamp determined by the data requester when sending the data request; The data processing server verifies the first hash data, and when the first hash data passes the verification, confirms that the data requester passes the behavior verification; The data processing server verifies the first hash data, including: Acquire verification answer data corresponding to the verification data; Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period with a preset length after the sending timestamp; Performing hash calculation on the verification answer data, the random signature and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp; The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

17. The method according to claim 16, wherein the performing behavior verification on the data requester comprises: The data processing server sends the trajectory behavior verification data to the data requester, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data for indicating how to implement the trajectory behavior on the trajectory behavior operation object; The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server; When the data processing server confirms that the trajectory behavior verification answer is consistent with the verification answer data, it confirms that the data requester has passed the behavior verification, and when it confirms that the trajectory behavior verification answer is inconsistent with the verification answer data, it sends the trajectory behavior verification data again; The data requester repeats the behavior trajectory again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server; When the data processing server still confirms inconsistency after the verification times reach the preset times, it is confirmed that the behavior verification has failed.

18. The method according to claim 17, wherein the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

19. The method according to claim 16, wherein the performing behavior verification on the data requester comprises: The data processing server sends the trajectory behavior verification data and the physiological feature verification data to the data requester, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data for indicating how to implement the trajectory behavior on the trajectory behavior operation object, and the physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris; The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, inputs the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer, and sends the trajectory behavior verification answer and the physiological characteristic verification answer to the data processing server; When the data processing server confirms that the trajectory behavior verification answer and the physiological feature verification answer are both consistent with the verification answer data, it confirms that the data requester has passed the behavior verification, and when it confirms that any one of the trajectory behavior verification answer and the physiological feature verification answer is inconsistent with the verification answer data, it resends the trajectory behavior verification data and / or the physiological feature verification data; The data requesting party repeats the behavior trajectory again to form a trajectory behavior verification answer or inputs the physiological characteristic data to form a physiological characteristic verification answer according to the trajectory behavior verification data and / or the physiological characteristic verification data, and sends the trajectory behavior verification answer and / or the physiological characteristic verification answer to the data processing server; When the data processing server still confirms inconsistency after the verification times reach the preset times, it is confirmed that the behavior verification has failed.

20. The method according to any one of claims 16 to 19, wherein the data processing server determines whether the data request is a preset behavior, comprising: Obtaining attribute characteristics of the data request; When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be the preset behavior.

21. The method according to any one of claims 16 to 19, further comprising: When the data processing server determines that the data request is not a preset behavior, confirming the data request, and sending a verification pass message to the data requester; When the data processing server determines that the data requester has not passed the behavior verification, it rejects the data request and sends a verification failure message to the data requester.

22. A data processing device, comprising: A determination module is configured to obtain a data request sent by a data requester and determine whether the data request is a preset behavior; A verification module, configured to perform behavior verification on the data requester when determining that the data request is a preset behavior, wherein the behavior verification includes trajectory behavior verification and physiological feature verification; a confirmation module, configured to confirm the data request when the data requester passes the behavior verification; The part of the verification module that performs behavior verification on the data requester is further configured to: Sending verification data and a random signature to the data requester; In response to receiving first hash data sent by the data requester, verifying the first hash data, wherein the first hash data is data obtained by the data requester through hash calculation of a verification answer, a random signature, and a sending timestamp, and the sending timestamp refers to a timestamp determined by the data requester when the data request is sent; When the first hash data passes the verification, confirming that the data requester passes the behavior verification; The part for verifying the first hash data is configured as follows: Acquire verification answer data corresponding to the verification data; Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period with a preset length after the sending timestamp; Performing hash calculation on the verification answer data, the random signature and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp; The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

23. The apparatus according to claim 22, wherein the part of the verification module that performs behavior verification on the data requester is further configured to: Sending the trajectory behavior verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer; When it is confirmed that the received trajectory behavior verification answer is consistent with the verification answer data, it is confirmed that the data requester has passed the behavior verification; When it is confirmed that the received trajectory behavior verification answer is inconsistent with the verification answer data, the trajectory behavior verification data is sent again; When the verification times reach the preset times and there is still inconsistency, it is confirmed that the behavior verification fails. 24 . The apparatus according to claim 23 , wherein the trajectory behavior verification data comprises a trajectory behavior operation object and trajectory behavior instruction data for indicating how to implement the trajectory behavior on the trajectory behavior operation object. 25 . The device according to claim 22 , wherein the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

26. The apparatus according to claim 22, wherein the part of the verification module that performs behavior verification on the data requester is further configured to: Sending the trajectory behavior verification data and the physiological feature verification data to the data requester, so that the data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputs the physiological feature data according to the physiological feature verification data to form a physiological feature verification answer; When it is confirmed that the received trajectory behavior verification answer and physiological feature verification answer are consistent with the verification answer data, it is confirmed that the data requester has passed the behavior verification; When it is confirmed that any one of the received trajectory behavior verification answer and physiological feature verification answer is inconsistent with the verification answer data, the trajectory behavior verification data and / or physiological feature verification data are sent again; When the verification times reach the preset times and there is still inconsistency, it is confirmed that the behavior verification fails.

27. The device according to claim 26, wherein the physiological feature verification data comprises physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris.

28. The apparatus according to any one of claims 22 to 27, wherein the part of the determination module that determines whether the data request is a preset behavior is configured to: Obtaining attribute characteristics of the data request; When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be the preset behavior.

29. According to any one of claims 22 to 27, the confirmation module is further configured to: When the data request is not a preset action, confirm the data request.

30. According to any one of claims 22 to 27, the confirmation module is further configured to: When the data requester fails to pass the behavior verification, the data request is rejected.

31. The apparatus according to any one of claims 22 to 26, further comprising: A first sending module is configured to: when the data request is confirmed, send a verification pass message to the data requester; When the data request is not confirmed, a verification failure message is sent to the data requester.

32. A data processing device, comprising: A second sending module is configured to send a data request to a data processing server; a generating module, configured to generate a verification answer based on the verification data in response to receiving the verification data sent by the data processing server, and send the verification answer to the data processing server so that it performs behavior verification based on the verification answer, wherein the behavior verification includes trajectory behavior verification and physiological feature verification, the trajectory behavior verification data includes a trajectory behavior operation object, and the trajectory behavior operation object is provided with random identification information; A receiving module, configured to receive a verification pass message sent by the data processing server; Wherein, the generating module is further configured to: In response to receiving the verification data and the random signature sent by the data processing server, generating a verification answer based on the verification data; Determine a sending timestamp, where the sending timestamp refers to a timestamp determined by the data requester when sending the data request; Performing a hash calculation based on the verification answer, the random signature and the sending timestamp to obtain first hash data; Sending the first hash data to the data processing server so that it performs behavior verification based on the first hash data; Among them, the behavior verification is performed by comparing the first hash data with one or more second hash data, and the one or more second hash data are obtained by hashing the verification answer data, the random signature and the candidate timestamp. The candidate timestamp is one or more candidate timestamps determined at a preset time interval within a preset time length, and the preset time length is a time period with a preset length after the sending timestamp.

33. The device according to claim 32, wherein: The verification data is trajectory behavior verification data, and the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data for indicating how to implement the trajectory behavior on the trajectory behavior operation object; The part of the generation module that generates a verification answer based on the verification data in response to receiving the verification data sent by the data processing server is further configured to: In response to receiving the trajectory behavior verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer; In response to receiving the trajectory behavior verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer.

34. The device according to claim 32, wherein the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

35. The device according to claim 32, wherein: The verification data includes trajectory behavior verification data and physiological feature verification data, wherein the trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data for indicating how to implement the trajectory behavior on the trajectory behavior operation object, and the physiological feature verification data includes physiological feature input area indication information, wherein the physiological feature is a fingerprint and / or an iris; The part of the generation module that generates a verification answer based on the verification data in response to receiving the verification data sent by the data processing server is further configured to: In response to receiving the trajectory behavior verification data and the physiological characteristic verification data sent by the data processing server, repeating the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and inputting the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer; In response to receiving the trajectory behavior verification data and physiological feature verification data sent by the data processing server again, the behavior trajectory is repeated again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and the physiological feature data is input again according to the physiological feature verification data to form a physiological feature verification answer.

36. The apparatus according to any one of claims 32 to 35, further comprising: The execution module is configured to execute a preset operation in response to receiving a verification pass message sent by the data processing server.

37. A data processing device, comprising: A data requester is configured to send a data request to a data processing server; a data processing server configured to, in response to receiving the data request, determine whether the data request is a preset behavior, and when it is determined that the data request is a preset behavior, perform behavior verification on the data requester, and when the data requester passes the behavior verification, confirm the data request, wherein the behavior verification includes trajectory behavior verification and physiological feature verification; Wherein, the part for verifying the behavior of the data requester is further configured as follows: The data processing server sends verification data and a random signature to the data requester; The data requester generates a verification answer based on the verification data, determines a sending timestamp, performs a hash calculation based on the verification answer, the random signature and the sending timestamp to obtain first hash data, and sends the first hash data to the data processing server, where the sending timestamp refers to the timestamp determined by the data requester when sending the data request; The data processing server verifies the first hash data, and when the first hash data passes the verification, confirms that the data requester passes the behavior verification; The part of the data processing server that verifies the first hash data is configured as follows: Acquire verification answer data corresponding to the verification data; Determine one or more candidate timestamps at preset time intervals within a preset duration, wherein the preset duration is a time period with a preset length after the sending timestamp; Performing hash calculation on the verification answer data, the random signature and the candidate timestamp to obtain one or more second hash data corresponding to the candidate timestamp; The first hash data is compared with the one or more second hash data. If data consistent with the first hash data exists in the second hash data, it is confirmed that the first hash data has passed the verification.

38. The apparatus according to claim 37, wherein the part for performing behavior verification on the data requester is further configured to: The data processing server sends the trajectory behavior verification data to the data requester, wherein: The trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data for indicating how to implement the trajectory behavior on the trajectory behavior operation object; The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server; When the data processing server confirms that the trajectory behavior verification answer is consistent with the verification answer data, it confirms that the data requester has passed the behavior verification, and when it confirms that the trajectory behavior verification answer is inconsistent with the verification answer data, it sends the trajectory behavior verification data again; The data requester repeats the behavior trajectory again according to the trajectory behavior verification data to form a trajectory behavior verification answer, and sends the trajectory behavior verification answer to the data processing server; When the data processing server still confirms inconsistency after the verification times reach the preset times, it is confirmed that the behavior verification has failed.

39. The device according to claim 37, wherein the trajectory behavior operation object is provided with random identification information, and the trajectory behavior verification answer is data composed of the random identification information.

40. The apparatus according to claim 37, wherein the part for performing behavior verification on the data requester is further configured to: The data processing server sends the trajectory behavior verification data and the physiological feature verification data to the data requester, wherein: The trajectory behavior verification data includes a trajectory behavior operation object and trajectory behavior indication data for indicating how to implement the trajectory behavior on the trajectory behavior operation object, and the physiological feature verification data includes physiological feature input area indication information, and the physiological feature is a fingerprint and / or an iris; The data requester repeats the behavior trajectory according to the trajectory behavior verification data to form a trajectory behavior verification answer, inputs the physiological characteristic data according to the physiological characteristic verification data to form a physiological characteristic verification answer, and sends the trajectory behavior verification answer and the physiological characteristic verification answer to the data processing server; When the data processing server confirms that the trajectory behavior verification answer and the physiological feature verification answer are both consistent with the verification answer data, it confirms that the data requester has passed the behavior verification, and when it confirms that any one of the trajectory behavior verification answer and the physiological feature verification answer is inconsistent with the verification answer data, it resends the trajectory behavior verification data and / or the physiological feature verification data; The data requesting party repeats the behavior trajectory again to form a trajectory behavior verification answer or inputs the physiological characteristic data to form a physiological characteristic verification answer according to the trajectory behavior verification data and / or the physiological characteristic verification data, and sends the trajectory behavior verification answer and / or the physiological characteristic verification answer to the data processing server; When the data processing server still confirms inconsistency after the verification times reach the preset times, it is confirmed that the behavior verification has failed.

41. The apparatus according to any one of claims 37 to 40, wherein the part of determining whether the data request is a preset behavior is configured to: Obtaining attribute characteristics of the data request; When the attribute characteristics of the data request match the attribute characteristics of the preset behavior, the data request is determined to be the preset behavior.

42. According to any one of claims 37-40, the data processing server is further configured to: When it is determined that the data request is not a preset behavior, confirming the data request, and sending a verification pass message to the data requester; When it is determined that the data requester has not passed the behavior verification, the data request is rejected and a verification failure message is sent to the data requester.

43. An electronic device, characterized in that: Comprises a memory and at least one processor; wherein the memory is used to store one or more computer instructions, wherein the one or more computer instructions are executed by the at least one processor to implement the method steps described in any one of claims 1-21.

44. A computer-readable storage medium having computer instructions stored thereon, characterized in that: When the computer instructions are executed by a processor, the method steps described in any one of claims 1-21 are implemented.

Citation Information

Patent Citations

  • Identifying code generating method, safety identification method, safety identification device and safety identification system

    CN105471808A

  • Method, device and system for limited multiplexing of shared resources and computer readable medium

    CN110224992A