User identity authentication method, device, computing equipment and computer storage medium

Abstract

The present invention discloses a user identity authentication method, device, computing equipment and computer storage medium. The method includes: receiving a user identity authentication request sent by a user terminal; obtaining business service usage data of the user terminal within a first historical time window; determining the authentication method corresponding to the user identity authentication request according to the business service usage data; wherein the authentication method includes: at least one of local database authentication and unified identity authentication. This solution avoids the technical drawbacks of high load on the authentication end and slow or inability to process authentication requests caused by authentication by a single authentication end, and improves the stability of the authentication service; and this solution obtains and determines the authentication method corresponding to the user identity authentication request according to the business service usage data of the request initiator, thereby improving the matching degree between the authentication method and the user identity authentication request, and improving the authentication efficiency and authentication accuracy.

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a user identity authentication method, device, computing equipment and computer storage medium. Background Art

[0002] With the continuous development of science and technology and society, the business services provided by Internet products have greatly enriched people's work and life. In order to ensure the security of user data and the stable operation of business services, it is usually necessary to authenticate the user's identity before using the business services.

[0003] However, the inventors found that the prior art has the following defects during implementation: the existing user identity authentication method is to send the received user identity authentication request to an identity authentication system. In this way, when the request frequency is high, the identity authentication system will be overloaded, resulting in authentication delays or failures, and the authentication service is unstable. Summary of the invention

[0004] In view of the above problems, the present invention is proposed to provide a user identity authentication method, device, computing device and computer storage medium that overcome the above problems or at least partially solve the above problems.

[0005] According to a first aspect of the present invention, there is provided a user identity authentication method, comprising:

[0006] Receiving a user identity authentication request sent by a user terminal;

[0007] Acquire business service usage data of the user terminal within a first historical time window;

[0008] Determining an authentication method corresponding to the user identity authentication request according to the business service usage data;

[0009] Wherein, the authentication method includes: at least one of local database authentication and unified identity authentication.

[0010] In an optional implementation, determining the authentication method corresponding to the user identity authentication request according to the business service usage data further includes:

[0011] Determine the target business service corresponding to the unified identity authentication;

[0012] Determining whether there are multiple usage records of different target business services in the business service usage data;

[0013] If so, it is determined that the authentication method corresponding to the user identity authentication request is unified identity authentication.

[0014] In an optional implementation, determining the authentication method corresponding to the user identity authentication request according to the business service usage data further includes:

[0015] If there are no usage records of multiple different target business services in the business service usage data, an authentication method is randomly selected from the local database authentication and the unified identity authentication as the authentication method corresponding to the user identity authentication request.

[0016] In an optional implementation, determining the authentication method corresponding to the user identity authentication request according to the business service usage data further includes:

[0017] If there are no usage records of multiple different target business services in the business service usage data, counting a first number of user identity authentication requests whose authentication method is unified identity authentication within the second historical time window;

[0018] If the first number is greater than a first preset number, the authentication method corresponding to the user identity authentication request is determined as local database authentication; if the first number is less than or equal to the first preset number, the authentication method corresponding to the user identity authentication request is determined as unified identity authentication.

[0019] In an optional implementation, determining the authentication method corresponding to the user identity authentication request according to the business service usage data further includes:

[0020] If there are no usage records of multiple different target business services in the business service usage data, counting a second number of user identity authentication requests whose authentication method is local database authentication within the second historical time window;

[0021] If the second number is greater than the second preset number, the authentication method corresponding to the user identity authentication request is determined as unified identity authentication; if the second number is less than or equal to the second preset number, the authentication method corresponding to the user identity authentication request is determined as local database authentication.

[0022] In an optional implementation, after receiving the user identity authentication request sent by the user terminal, the method further includes:

[0023] Determining whether a third number of user identity authentication requests received within a third historical time window is greater than or equal to a third preset number;

[0024] If so, a prompt message indicating that authentication is currently unsuccessful is fed back to the user terminal.

[0025] In an optional implementation, after determining the authentication mode corresponding to the user identity authentication request according to the business service usage data, the method further includes:

[0026] If the authentication method corresponding to the user identity authentication request is local database authentication, the user identity authentication request is sent to the local database, and the authentication result fed back by the local database is sent to the user terminal.

[0027] In an optional embodiment, the method further includes:

[0028] If the authentication result fed back by the local database is authentication failure, the user identity authentication request is sent to a unified identity authentication server, and the authentication result fed back by the unified identity authentication server is sent to the user terminal.

[0029] In an optional implementation, after determining the authentication mode corresponding to the user identity authentication request according to the business service usage data, the method further includes:

[0030] If the authentication method corresponding to the user identity authentication request is unified identity authentication, the user identity authentication request is sent to a unified identity authentication server, and the authentication result fed back by the unified identity authentication server is sent to the user terminal.

[0031] In an optional embodiment, the method further includes:

[0032] If the authentication result fed back by the unified identity authentication server is authentication failure, the user identity authentication request is sent to the local database, and the authentication result fed back by the local database is sent to the user terminal.

[0033] In an optional implementation, the unified identity authentication is LADP authentication.

[0034] According to a second aspect of the present invention, there is provided a user identity authentication device, comprising:

[0035] A receiving module, used for receiving a user identity authentication request sent by a user terminal;

[0036] An acquisition module, used to acquire business service usage data of the user terminal within a first historical time window;

[0037] A determination module, used to determine the authentication method corresponding to the user identity authentication request according to the business service usage data;

[0038] Wherein, the authentication method includes: at least one of local database authentication and unified identity authentication.

[0039] In an optional implementation, the determination module is further used to: determine the target business service corresponding to the unified identity authentication;

[0040] Determining whether there are multiple usage records of different target business services in the business service usage data;

[0041] If so, it is determined that the authentication method corresponding to the user identity authentication request is unified identity authentication.

[0042] In an optional implementation, the determination module is further used to: if there are no usage records of multiple different target business services in the business service usage data, randomly select an authentication method from the local database authentication and the unified identity authentication as the authentication method corresponding to the user identity authentication request.

[0043] In an optional implementation, the determination module is further used to: if there are no usage records of multiple different target business services in the business service usage data, count a first number of user identity authentication requests whose authentication method is unified identity authentication within the second historical time window;

[0044] If the first number is greater than a first preset number, the authentication method corresponding to the user identity authentication request is determined as local database authentication; if the first number is less than or equal to the first preset number, the authentication method corresponding to the user identity authentication request is determined as unified identity authentication.

[0045] In an optional implementation, the determination module is further used to: if there are no usage records of multiple different target business services in the business service usage data, count the second number of user identity authentication requests whose authentication method is local database authentication within the second historical time window;

[0046] If the second number is greater than the second preset number, the authentication method corresponding to the user identity authentication request is determined as unified identity authentication; if the second number is less than or equal to the second preset number, the authentication method corresponding to the user identity authentication request is determined as local database authentication.

[0047] In an optional implementation, the device further includes: a prompting module, configured to determine whether a third number of user identity authentication requests received within a third historical time window is greater than or equal to a third preset number after the user identity authentication request sent by the receiving user terminal is received;

[0048] If so, a prompt message indicating that authentication is currently unsuccessful is fed back to the user terminal.

[0049] In an optional implementation, the device further includes a sending module, which is used to send the user identity authentication request to the local database if the authentication method corresponding to the user identity authentication request is local database authentication, and send the authentication result fed back by the local database to the user terminal.

[0050] In an optional implementation, the sending module is further configured to: if the authentication result fed back by the local database is authentication failure, send the user identity authentication request to a unified identity authentication server, and send the authentication result fed back by the unified identity authentication server to the user terminal.

[0051] In an optional implementation, the device further includes a sending module, which is used to send the user identity authentication request to a unified identity authentication server if the authentication method corresponding to the user identity authentication request is unified identity authentication, and send the authentication result fed back by the unified identity authentication server to the user terminal.

[0052] In an optional implementation, the sending module is further configured to: if the authentication result fed back by the unified identity authentication server is authentication failure, send the user identity authentication request to a local database, and send the authentication result fed back by the local database to the user terminal.

[0053] In an optional implementation, the unified identity authentication is LADP authentication.

[0054] According to a third aspect of the present invention, there is provided a computing device, comprising: a processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface communicate with each other via the communication bus;

[0055] The memory is used to store at least one executable instruction, and the executable instruction enables the processor to execute operations corresponding to the above-mentioned user identity authentication method.

[0056] According to a fourth aspect of the present invention, there is provided a computer storage medium, wherein the storage medium stores at least one executable instruction, wherein the executable instruction enables a processor to perform operations corresponding to the above-mentioned user identity authentication method.

[0057] The user identity authentication method, apparatus, computing device and computer storage medium disclosed in the embodiments of the present invention: receiving a user identity authentication request sent by a user terminal; obtaining business service usage data of the user terminal within a first historical time window; determining the authentication method corresponding to the user identity authentication request based on the business service usage data; wherein the authentication method includes: at least one of local database authentication and unified identity authentication. This scheme avoids the technical drawbacks of high load on the authentication end and slow or inability to process authentication requests caused by authentication by a single authentication end, and improves the stability of the authentication service; and this scheme obtains and determines the authentication method corresponding to the user identity authentication request based on the business service usage data of the request initiator, thereby improving the matching degree between the authentication method and the user identity authentication request, and improving the authentication efficiency and authentication accuracy.

[0058] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present invention. Moreover, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0060] Figure 1 A schematic diagram of a process flow of a user identity authentication method provided by Embodiment 1 of the present invention is shown;

[0061] Figure 2 A schematic diagram of a process flow of a user identity authentication method provided by Embodiment 2 of the present invention is shown;

[0062] Figure 3 A schematic diagram of a process flow of a user identity authentication method provided by Embodiment 3 of the present invention is shown;

[0063] Figure 4 A schematic diagram of the flow of a user identity authentication request provided by Embodiment 3 of the present invention is shown;

[0064] Figure 5 A schematic diagram of the structure of a user identity authentication device provided by a fourth embodiment of the present invention is shown;

[0065] Figure 6 A schematic diagram of the structure of a computing device provided in Embodiment 6 of the present invention is shown. DETAILED DESCRIPTION

[0066] The exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present invention are shown in the accompanying drawings, it should be understood that the present invention can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present invention and to enable the scope of the present invention to be fully communicated to those skilled in the art.

[0067] Embodiment 1

[0068] Figure 1 FIG. 1 is a flow chart of a user identity authentication method provided by Embodiment 1 of the present invention. Figure 1 As shown, the method comprises the following steps:

[0069] Step S110: receiving a user identity authentication request sent by a user terminal.

[0070] Before using a certain service in the user terminal, the user needs to initiate a user identity authentication request. For example, when the user wants to use the service of mailbox application A, the user needs to initiate a user identity authentication request to use the service of mailbox application A. The user identity authentication request can be a real-name authentication request or a non-real-name authentication request, which is not limited here.

[0071] Step S120: Acquire business service usage data of the user terminal within the first historical time window.

[0072] Different from the prior art, the embodiment of the present invention does not directly authenticate the user identity authentication request by the authentication end after receiving the user identity authentication request. Instead, it further obtains the business service usage data of the user terminal in the first historical time window, so as to determine the authentication method that best matches the current user identity authentication request based on the business service usage data.

[0073] The first historical time window is specifically a certain historical period. For example, the first historical time window may be the most recent day, the most recent week, etc. The business service usage data is specifically the usage time of each business service recorded by the user terminal, etc. It should be understood here that the business service usage data related to the user in the embodiment of the present invention is only obtained with the authorization of the user and is only used for the identity authentication of the user himself.

[0074] Step S130, determining an authentication method corresponding to the user identity authentication request according to the business service usage data; wherein the authentication method includes: at least one of local database authentication and unified identity authentication.

[0075] Local database authentication specifically refers to the use of the local database on the server side of the business service corresponding to the user authentication request to perform authentication. For example, when a user wants to use the business service of mailbox application A, he must first initiate a user authentication request to use the business service of mailbox application A. Then, local database authentication is the local database on the server side of the business service of mailbox application A processing the user authentication request for authentication.

[0076] Unified identity authentication specifically refers to using a unified identity authentication server to process user identity authentication requests for authentication. Among them, the unified identity authentication server can be responsible for the identity authentication of multiple different business services. For example, the unified identity authentication server can provide user identity authentication for mailbox application A business service, social software B business service, etc.

[0077] It can be seen that the embodiment of the present invention provides users with two identity authentication methods: local database authentication and unified identity authentication, avoiding the technical disadvantages of high authentication end load and slow or impossible authentication request processing caused by authentication by a single authentication end, thereby improving the stability of the authentication service; and the embodiment of the present invention obtains and determines the authentication method corresponding to the user identity authentication request based on the business service usage data of the request initiator, thereby improving the matching degree between the authentication method and the user identity authentication request, and improving the authentication efficiency and authentication accuracy.

[0078] Embodiment 2

[0079] Figure 2 FIG. 2 shows a flow chart of a user identity authentication method provided by Embodiment 2 of the present invention. Figure 2 As shown, the method comprises the following steps:

[0080] Step S210: receiving a user identity authentication request sent by a user terminal.

[0081] In an optional implementation, after receiving the user identity authentication request sent by the user terminal, it can be determined whether the number of user identity authentication requests received in the current third historical time window is greater than or equal to the third preset number; if so, a prompt message indicating that the current authentication is unavailable is fed back to the user terminal (the prompt message may be "Please try again later"). If not, the subsequent steps are executed.

[0082] Step S220: Acquire business service usage data of the user terminal within the first historical time window.

[0083] Step S230, determining the target business service corresponding to the unified identity authentication.

[0084] The unified identity authentication server can be responsible for the identity authentication of multiple different business services, and the multiple different business services are target business services. For example, the unified identity authentication server can provide user identity authentication for mailbox application A business service, social software B business service, etc., and the mailbox application A business service and social software B business service are target business services.

[0085] Step S240, determining whether there are multiple usage records of different target business services in the business service usage data; if so, executing step S250; if not, executing step S260 or step S270 or step S280.

[0086] The business service usage data records the usage of business services in the user terminal. By processing the business service usage data, the business services used by the user in the first historical time window can be determined. If the user has used multiple different target business services in the first historical time window (that is, there are multiple different target business service usage records in the business service usage data), step S250 is executed; if there are no multiple different target business service usage records in the business service usage data, the authentication method corresponding to the user identity authentication request can be determined by any one of steps S260, S270, and S280.

[0087] Step S250: determine that the authentication method corresponding to the user identity authentication request is unified identity authentication.

[0088] When the user has used multiple different target business services within the first historical time window, it indicates that the user has the need to use these multiple target business services in the future. In this case, the authentication method corresponding to the user identity authentication request is determined to be a unified identity authentication. Through this unified identity authentication, the user can use multiple different target business services through one authentication, thereby improving the user experience.

[0089] Step S260: randomly select an authentication method from the local database authentication and the unified identity authentication as the authentication method corresponding to the user identity authentication request.

[0090] If there are no usage records of multiple different target business services in the business service usage data, a random number can be generated and the corresponding authentication method can be randomly selected according to the random number. For example, if the random number is 0, local database authentication is selected; if the random number is 1, unified identity authentication is selected.

[0091] Step S270, counting a first number of user identity authentication requests whose authentication method is unified identity authentication within a second historical time window, and determining an authentication method corresponding to the user identity authentication request according to the first number.

[0092] Specifically, if the first number of unified identity authentication in the second historical time window is greater than the first preset number, it indicates that the current unified identity authentication server has a high authentication pressure, and the authentication method corresponding to the user identity authentication request is determined as local database authentication to reduce the load on the unified identity authentication server. If the first number of unified identity authentication in the second historical time window is less than or equal to the first preset number, the authentication method corresponding to the user identity authentication request is determined as unified identity authentication.

[0093] Step S280, counting a second number of user identity authentication requests whose authentication method is local database authentication within a second historical time window, and determining an authentication method corresponding to the user identity authentication request according to the second number.

[0094] Specifically, if the number of local database authentication methods within the second historical time window is greater than the second preset number, it indicates that the current local database authentication load is high, and the authentication method corresponding to the user identity authentication request is determined as unified identity authentication to reduce the local database authentication load; if the second number of local database authentication methods within the second historical time window is less than or equal to the second preset number, the authentication method corresponding to the user identity authentication request is determined as local database authentication.

[0095] It can be seen that, in the embodiment of the present invention, when it is determined that there are multiple usage records of different target business services in the business service usage data, the authentication method corresponding to the user identity authentication request is determined to be a unified identity authentication, so that when the user has the use requirements of multiple target business services, the unified identity authentication can be used to achieve the purpose of using multiple different target business services through one authentication, thereby improving the user experience and authentication efficiency; and when it is determined that there are no usage records of multiple different target business services, the authentication method corresponding to the user identity authentication request is determined by a random determination method, thereby improving the determination efficiency of the authentication method; or, when it is determined that there are no usage records of multiple different target business services, the authentication method corresponding to the user identity authentication request is determined according to the number of authentication requests corresponding to the unified identity authentication or the local database authentication within the second historical time window, thereby avoiding overloading of the unified identity authentication server or the local database.

[0096] Embodiment 3

[0097] Figure 3 FIG. 1 is a flow chart of a user identity authentication method provided by Embodiment 3 of the present invention. Figure 3 As shown, the method comprises the following steps:

[0098] Step S310: receiving a user identity authentication request sent by a user terminal.

[0099] The embodiment of the present invention may be executed by a preset middleware.

[0100] Step S320: Acquire the business service usage data of the user terminal within the first historical time window.

[0101] Step S330, determining the authentication method corresponding to the user identity authentication request according to the business service usage data; if the authentication method is local database authentication, executing step S340; if the authentication method is unified identity authentication, executing step S350.

[0102] Step S340: Send the user identity authentication request to the local database, and send the authentication result fed back by the local database to the user terminal.

[0103] If the authentication method corresponding to the user authentication request is local database authentication, the user authentication request is sent to the local database. The local database matches the stored data information with the information carried in the user authentication request, and determines whether the authentication is passed based on the matching result. The authentication result is fed back to the user terminal via the middleware.

[0104] In an optional implementation, if an authentication failure message is received from a local database, the user identity authentication request is sent to a unified identity authentication server for re-authentication, and the authentication result fed back by the unified identity authentication server is sent to the user terminal, thereby improving the authentication accuracy. If the re-authentication result of the unified identity authentication server is a failure, a corresponding authentication failure message is fed back to the user terminal; if the re-authentication result of the unified identity authentication server is a success, a corresponding authentication success message is fed back to the user terminal.

[0105] Step S350: Send the user identity authentication request to the unified identity authentication server, and send the authentication result fed back by the unified identity authentication server to the user terminal.

[0106] If the authentication method corresponding to the user identity authentication request is unified identity authentication, the user identity authentication request is sent to the unified identity authentication server, and the unified identity authentication server processes the request to perform user identity authentication. Among them, the unified identity authentication in the embodiment of the present invention can be LADP authentication, and the unified identity authentication server is a LADP authentication server, which is a lightweight unified authentication server. The authentication result fed back by the unified identity authentication server is further sent to the user terminal.

[0107] In an optional implementation, if an authentication failure message is received from the unified identity authentication server, the user identity authentication request is sent to the local database, and the local database performs re-authentication, and the authentication result fed back by the local database is sent to the user terminal. If the re-authentication result is a failure, a message of authentication failure is fed back to the user terminal, and if the re-authentication result is a success, a message of authentication success is fed back to the user terminal.

[0108] by Figure 4 For example, the user authentication request initiated by the user terminal is first sent to the middleware, and the middleware determines the authentication method of the current user authentication request. If it is determined that the authentication method of the user authentication request is local database authentication, the user authentication request is sent to the local database; if the authentication method of the user authentication request is unified authentication, the user authentication request is sent to the unified authentication server. The middleware will also feed back the authentication results fed back by the local database and the unified authentication server to the user terminal.

[0109] It can be seen that in the embodiment of the present invention, the middleware receives the user identity authentication request, and after determining the corresponding authentication method, sends the request to the corresponding authentication end for authentication, thereby avoiding the technical disadvantages of high authentication end load and slow or unprocessed authentication request processing caused by authentication by a single authentication end, and improving the stability of the authentication service.

[0110] Embodiment 4

[0111] Figure 5 FIG. 4 shows a schematic diagram of the structure of a user identity authentication device provided by Embodiment 4 of the present invention. Figure 5 As shown, the device 500 includes: a receiving module 510, an acquiring module 520 and a determining module 530.

[0112] Receiving module 510, used to receive a user identity authentication request sent by a user terminal;

[0113] An acquisition module 520 is used to acquire the business service usage data of the user terminal within the first historical time window;

[0114] A determination module 530, configured to determine an authentication method corresponding to the user identity authentication request according to the business service usage data;

[0115] Wherein, the authentication method includes: at least one of local database authentication and unified identity authentication.

[0116] In an optional implementation, the determination module 530 is further used to: determine the target business service corresponding to the unified identity authentication;

[0117] Determining whether there are multiple usage records of different target business services in the business service usage data;

[0118] If so, it is determined that the authentication method corresponding to the user identity authentication request is unified identity authentication.

[0119] In an optional implementation, the determination module 530 is further used to: if there are no usage records of multiple different target business services in the business service usage data, randomly select an authentication method from the local database authentication and the unified identity authentication as the authentication method corresponding to the user identity authentication request.

[0120] In an optional implementation, the determination module 530 is further used to: if there are no usage records of multiple different target business services in the business service usage data, count a first number of user identity authentication requests whose authentication method is unified identity authentication within the second historical time window;

[0121] If the first number is greater than a first preset number, the authentication method corresponding to the user identity authentication request is determined as local database authentication; if the first number is less than or equal to the first preset number, the authentication method corresponding to the user identity authentication request is determined as unified identity authentication.

[0122] In an optional implementation, the determination module 530 is further used to: if there are no usage records of multiple different target business services in the business service usage data, count a second number of user identity authentication requests whose authentication method is local database authentication within the second historical time window;

[0123] If the second number is greater than the second preset number, the authentication method corresponding to the user identity authentication request is determined as unified identity authentication; if the second number is less than or equal to the second preset number, the authentication method corresponding to the user identity authentication request is determined as local database authentication.

[0124] In an optional implementation, the device further includes: a prompt module (not shown in the figure), configured to determine whether a third number of user identity authentication requests received within a third historical time window is greater than or equal to a third preset number after the user identity authentication request sent by the receiving user terminal is received;

[0125] If so, a prompt message indicating that authentication is currently unsuccessful is fed back to the user terminal.

[0126] In an optional embodiment, the device also includes a sending module (not shown in the figure), which is used to send the user identity authentication request to the local database if the authentication method corresponding to the user identity authentication request is local database authentication, and send the authentication result fed back by the local database to the user terminal.

[0127] In an optional implementation, the sending module is further configured to: if the authentication result fed back by the local database is authentication failure, send the user identity authentication request to a unified identity authentication server, and send the authentication result fed back by the unified identity authentication server to the user terminal.

[0128] In an optional implementation, the device further includes a sending module, which is used to send the user identity authentication request to a unified identity authentication server if the authentication method corresponding to the user identity authentication request is unified identity authentication, and send the authentication result fed back by the unified identity authentication server to the user terminal.

[0129] In an optional implementation, the sending module is further configured to: if the authentication result fed back by the unified identity authentication server is authentication failure, send the user identity authentication request to a local database, and send the authentication result fed back by the local database to the user terminal.

[0130] In an optional implementation, the unified identity authentication is LADP authentication.

[0131] The specific implementation process of each module in this device can refer to the corresponding description in the method embodiment, which will not be repeated here.

[0132] It can be seen that this solution avoids the technical drawbacks of high authentication end load and slow or impossible authentication request processing caused by authentication by a single authentication end, thereby improving the stability of the authentication service; and this solution obtains and determines the authentication method corresponding to the user identity authentication request based on the business service usage data of the request initiator, thereby improving the matching degree between the authentication method and the user identity authentication request, and improving authentication efficiency and authentication accuracy.

[0133] Embodiment 5

[0134] Embodiment 5 of the present invention provides a non-volatile computer storage medium, wherein the computer storage medium stores at least one executable instruction, and the computer executable instruction can execute the user identity authentication method in any of the above method embodiments.

[0135] Embodiment 6

[0136] Figure 6The schematic diagram of the structure of a computing device provided by Embodiment 6 of the present invention is shown. The specific embodiment of the present invention does not limit the specific implementation of the computing device.

[0137] like Figure 6 As shown, the computing device may include: a processor (processor) 602 , a communication interface (Communications Interface) 604 , a memory (memory) 606 , and a communication bus 608 .

[0138] The processor 602, the communication interface 604, and the memory 606 communicate with each other via the communication bus 608. The communication interface 604 is used to communicate with other devices such as a client or other server network elements. The processor 602 is used to execute the program 610, which can specifically execute the relevant steps in the above-mentioned user identity authentication method embodiment.

[0139] Specifically, the program 610 may include program codes, which include computer operation instructions.

[0140] The processor 602 may be a central processing unit (CPU), or an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention. The one or more processors included in the computing device may be processors of the same type, such as one or more CPUs; or processors of different types, such as one or more CPUs and one or more ASICs.

[0141] The memory 606 is used to store the program 610. The memory 606 may include a high-speed RAM memory, and may also include a non-volatile memory, such as at least one disk memory. The program 610 may be specifically used to enable the processor 602 to execute the user identity authentication method in any of the above method embodiments.

[0142] The algorithm or display provided herein is not inherently related to any particular computer, virtual system or other equipment. Various general purpose systems can also be used together with the teachings based on this. According to the above description, it is obvious to construct the structure required for this type of system. In addition, the embodiment of the present invention is not directed to any specific programming language yet. It should be understood that various programming languages ​​can be utilized to realize the content of the present invention described herein, and the description made to specific languages ​​above is for disclosing the best mode of the present invention.

[0143] In the description provided herein, a large number of specific details are described. However, it is understood that embodiments of the present invention can be practiced without these specific details. In some instances, well-known methods, structures and techniques are not shown in detail so as not to obscure the understanding of this description.

[0144] Similarly, it should be understood that in order to streamline the present invention and aid in understanding one or more of the various inventive aspects, in the above description of exemplary embodiments of the present invention, the various features of the embodiments of the present invention are sometimes grouped together into a single embodiment, figure, or description thereof. However, this disclosed method should not be interpreted as reflecting the following intention: that the claimed invention requires more features than the features explicitly recited in each claim. More specifically, as reflected in the claims below, inventive aspects lie in less than all the features of the individual embodiments disclosed above. Therefore, the claims that follow the specific embodiment are hereby expressly incorporated into the specific embodiment, with each claim itself serving as a separate embodiment of the present invention.

[0145] Those skilled in the art will appreciate that the modules in the devices in the embodiments may be adaptively changed and arranged in one or more devices different from the embodiments. The modules or units or components in the embodiments may be combined into one module or unit or component, and in addition they may be divided into a plurality of submodules or subunits or subcomponents. Except that at least some of such features and / or processes or units are mutually exclusive, all features disclosed in this specification (including the accompanying claims, abstracts and drawings) and all processes or units of any method or device disclosed in this manner may be combined in any combination. Unless otherwise expressly stated, each feature disclosed in this specification (including the accompanying claims, abstracts and drawings) may be replaced by an alternative feature providing the same, equivalent or similar purpose.

[0146] In addition, those skilled in the art will appreciate that, although some embodiments herein include certain features included in other embodiments but not other features, the combination of features of different embodiments is meant to be within the scope of the present invention and form different embodiments. For example, in the claims below, any one of the claimed embodiments may be used in any combination.

[0147] The various component embodiments of the present invention can be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. It should be understood by those skilled in the art that a microprocessor or digital signal processor (DSP) can be used in practice to implement some or all functions of some or all components according to embodiments of the present invention. The present invention can also be implemented as a device or apparatus program (e.g., computer program and computer program product) for executing part or all of the methods described herein. Such a program implementing the present invention can be stored on a computer-readable medium, or can have the form of one or more signals. Such a signal can be downloaded from an Internet website, or provided on a carrier signal, or provided in any other form.

[0148] It should be noted that the above embodiments illustrate the present invention rather than limit it, and that those skilled in the art may devise alternative embodiments without departing from the scope of the appended claims. In the claims, any reference symbol between brackets shall not be construed as a limitation on the claims. The word "comprising" does not exclude the presence of elements or steps not listed in the claims. The word "one" or "an" preceding an element does not exclude the presence of a plurality of such elements. The present invention may be implemented by means of hardware comprising a number of different elements and by means of a suitably programmed computer. In a unit claim enumerating a number of devices, several of these devices may be embodied by the same hardware item. The use of the words first, second, and third, etc. does not indicate any order. These words may be interpreted as names. The steps in the above embodiments, unless otherwise specified, should not be understood as limitations on the order of execution.

Claims

1. A user identity authentication method, characterized in that: The method comprises: Receiving a user identity authentication request sent by a user terminal; Acquire business service usage data of the user terminal within a first historical time window; Determine the target business service corresponding to the unified identity authentication; Determining whether there are multiple usage records of different target business services in the business service usage data; If so, determining that the authentication method corresponding to the user identity authentication request is unified identity authentication; If not, determine the authentication method corresponding to the user identity authentication request according to the number of authentication requests corresponding to the unified identity authentication or the local database authentication within the second historical time window; wherein the authentication method includes: at least one of the local database authentication and the unified identity authentication.

2. The method according to claim 1, characterized in that The step of determining the authentication method corresponding to the user identity authentication request according to the number of authentication requests corresponding to the unified identity authentication or the local database authentication within the second historical time window further includes: If there are no usage records of multiple different target business services in the business service usage data, then count the first number of user identity authentication requests whose authentication method is unified identity authentication within the second historical time window; if the first number is greater than a first preset number, determine the authentication method corresponding to the user identity authentication request as local database authentication; if the first number is less than or equal to the first preset number, determine the authentication method corresponding to the user identity authentication request as unified identity authentication; and / or, If there are no usage records of multiple different target business services in the business service usage data, the second number of user identity authentication requests whose authentication method is local database authentication within the second historical time window is counted; if the second number is greater than the second preset number, the authentication method corresponding to the user identity authentication request is determined to be unified identity authentication; if the second number is less than or equal to the second preset number, the authentication method corresponding to the user identity authentication request is determined to be local database authentication.

3. The method according to claim 1, characterized in that After receiving the user identity authentication request sent by the user terminal, the method further includes: Determining whether a third number of user identity authentication requests received within a third historical time window is greater than or equal to a third preset number; If so, a prompt message indicating that authentication is currently unsuccessful is fed back to the user terminal.

4. The method according to any one of claims 1 to 3, characterized in that The method further includes: if the authentication mode corresponding to the user identity authentication request is local database authentication, sending the user identity authentication request to the local database, and sending the authentication result fed back by the local database to the user terminal; and / or, If the authentication result fed back by the local database is authentication failure, the user identity authentication request is sent to a unified identity authentication server, and the authentication result fed back by the unified identity authentication server is sent to the user terminal.

5. The method according to any one of claims 1 to 3, characterized in that: The method further comprises: If the authentication method corresponding to the user identity authentication request is unified identity authentication, the user identity authentication request is sent to a unified identity authentication server, and the authentication result fed back by the unified identity authentication server is sent to the user terminal; and / or, If the authentication result fed back by the unified identity authentication server is authentication failure, the user identity authentication request is sent to the local database, and the authentication result fed back by the local database is sent to the user terminal.

6. The method according to any one of claims 1 to 3, characterized in that The unified identity authentication is LADP authentication.

7. A user identity authentication device, characterized in that: include: A receiving module, used for receiving a user identity authentication request sent by a user terminal; An acquisition module, used to acquire business service usage data of the user terminal within a first historical time window; A determination module is used to determine the target business service corresponding to the unified identity authentication; determine whether there are multiple different target business service usage records in the business service usage data; if so, determine that the authentication method corresponding to the user identity authentication request is unified identity authentication; if not, determine the authentication method corresponding to the user identity authentication request based on the number of authentication requests corresponding to unified identity authentication or local database authentication within a second historical time window; wherein the authentication method includes: at least one of local database authentication and unified identity authentication.

8. A computing device, characterized in that include: A processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface communicate with each other via the communication bus; The memory is used to store at least one executable instruction, and the executable instruction enables the processor to perform an operation corresponding to the user identity authentication method as described in any one of claims 1-6.

9. A computer storage medium, characterized in that The storage medium stores at least one executable instruction, and the executable instruction enables the processor to execute an operation corresponding to the user identity authentication method as described in any one of claims 1-6.

Images