Identity authentication method and device

Abstract

The embodiments of the present specification provide an identity authentication method and device, wherein the identity authentication method comprises: collecting an identity code of a to-be-authenticated user applying for a service of a merchant by using an IoT device of the merchant; obtaining user data of the to-be-authenticated user according to the identity code and obtaining merchant data of the merchant; inputting the user data and the merchant data into a preset scoring model to perform behavior scoring; based on a scoring result of the behavior scoring, inputting the user data and the merchant data into a preset risk strategy to perform risk identification and obtain a risk rating; in a case where the risk rating meets a rating condition, after the merchant passes an identity verification of the to-be-authenticated user based on the user data, confirming that the identity authentication of the to-be-authenticated user is passed.

Description

[0001] This application is a divisional application of the China Invention Patent Application with the application date of November 16, 2020, the application number of CN202011278274.9, and the name of "Identity Authentication Method and Device". TECHNICAL FIELD

[0002] The present document relates to the technical field of data processing, in particular to an identity authentication method and device. BACKGROUND

[0003] With the continuous development of online commercialization, the popularity of network space real name / real person / real evidence authentication methods, and the development trend of electronic certificates. However, the existing authentication methods have great limitations. There are many groups, such as young people without bank cards, and no facial information in the information database of related institutions. Therefore, the above two authentication methods (facial recognition and bank cards) have limitations for special groups (minors and overseas users). SUMMARY

[0004] One or more embodiments of the present specification provide an identity authentication method. The identity authentication method comprises: collecting, by an IoT machine of a merchant, an identity code of a to-be-authenticated user applying for a business of the merchant. Obtaining user data of the to-be-authenticated user according to the identity code, and obtaining merchant data of the merchant. Inputting the user data and the merchant data into a preset scoring model to perform behavior scoring. Based on the scoring result of the behavior scoring, inputting the user data and the merchant data into a preset risk strategy to perform risk identification and obtain a risk rating. In the case that the risk rating meets a rating condition, after the merchant passes the identity verification of the to-be-authenticated user based on the user data, confirming that the identity authentication of the to-be-authenticated user is passed.

[0005] One or more embodiments of the present specification provide an identity authentication device, comprising: a collection module configured to collect, by an IoT machine of a merchant, an identity code of a to-be-authenticated user applying for a business of the merchant. An obtaining module configured to obtain user data of the to-be-authenticated user according to the identity code, and obtain merchant data of the merchant. A scoring module configured to input the user data and the merchant data into a preset scoring model to perform behavior scoring. A rating module configured to input the user data and the merchant data into a preset risk strategy based on the scoring result of the behavior scoring to perform risk identification and obtain a risk rating. A confirmation module configured to, in the case that the risk rating meets a rating condition, after the merchant passes the identity verification of the to-be-authenticated user based on the user data, confirm that the identity authentication of the to-be-authenticated user is passed.

[0006] The one or more embodiments of the specification provide an identity authentication device, comprising: a processor; and a memory configured to store computer executable instructions which, when executed, cause the processor to: collect an identity code of a to-be-authenticated user applying for a business of a merchant by using an IoT machine of the merchant. Obtain user data of the to-be-authenticated user according to the identity code, and obtain merchant data of the merchant. Input the user data and the merchant data into a preset scoring model to perform behavior scoring. Based on a scoring result of the behavior scoring, input the user data and the merchant data into a preset risk strategy to perform risk identification and obtain a risk rating. In a case where the risk rating meets a rating condition, after the merchant passes an identity verification of the to-be-authenticated user based on the user data, confirm that the identity authentication of the to-be-authenticated user is passed.

[0007] The one or more embodiments of the specification provide a storage medium for storing computer executable instructions which, when executed, implement the following processes: collecting an identity code of a to-be-authenticated user applying for a business of a merchant by using an IoT machine of the merchant. Obtaining user data of the to-be-authenticated user according to the identity code, and obtaining merchant data of the merchant. Input the user data and the merchant data into a preset scoring model to perform behavior scoring. Based on a scoring result of the behavior scoring, input the user data and the merchant data into a preset risk strategy to perform risk identification and obtain a risk rating. In a case where the risk rating meets a rating condition, after the merchant passes an identity verification of the to-be-authenticated user based on the user data, confirm that the identity authentication of the to-be-authenticated user is passed. BRIEF DESCRIPTION OF DRAWINGS

[0008] In order to more clearly illustrate the technical solutions in the one or more embodiments of the specification or the prior art, the drawings needed in the embodiment or prior art description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments described in the specification, and those skilled in the art can also obtain other drawings according to these drawings without creative labor.

[0009] Figure 1 A flow chart of an identity authentication method provided by the one or more embodiments of the specification is provided.

[0010] Figure 2 A flow chart of an identity authentication method applied to a business scenario provided by the one or more embodiments of the specification is provided.

[0011] Figure 3 A schematic diagram of an identity authentication device provided by the one or more embodiments of the specification is provided.

[0012] Figure 4 A structural diagram of an identity authentication device is provided for one or more embodiments of the present specification. DETAILED DESCRIPTION

[0013] In order for those skilled in the art to better understand the technical solutions in one or more embodiments of the present specification, the technical solutions in one or more embodiments of the present specification will be described clearly and completely in conjunction with the drawings in one or more embodiments of the present specification. Obviously, the described embodiments are only a part of the embodiments of the present specification, not all. Based on one or more embodiments of the present specification, all other embodiments obtained by those skilled in the art without creative labor should belong to the protection scope of the present document.

[0014] An embodiment of an identity authentication method provided by the present specification is provided.

[0015] Reference Figure 1 , which shows a flow chart of an identity authentication method provided by the present embodiment, reference Figure 2 , which shows a flow chart of an identity authentication method applied to a business scenario provided by the present embodiment.

[0016] Reference Figure 1 The identity authentication method provided by the present embodiment specifically includes the following steps S102 to S110.

[0017] Step S102, using the IoT machine of the merchant to collect the identity code of the user to be authenticated who applies for a business to the merchant.

[0018] In practical application, there are certain limitations in the process of identity authentication. There are many groups, such as young people without bank cards, and overseas users do not have face information in the information database of related institutions.

[0019] The identity authentication method provided in the embodiment enables the user to be authenticated to complete identity authentication through the merchant passing the access detection in actual business by issuing an IoT device to the merchant passing the access detection. Specifically, first, the identity of the user to be authenticated is scanned by using the IoT device of the merchant, the user identifier of the user to be authenticated is obtained by analyzing the identity identifier, the user data is obtained according to the user identifier, the merchant data of the merchant to which the IoT device belongs is obtained, and then the merchant data and the user data are input into a preset scoring model for behavior scoring. When the scoring result of the behavior scoring meets the preset scoring condition, the user data and the merchant data are input into a preset risk strategy based on the behavior scoring for risk identification, and a risk rating is obtained. In the case that the risk rating meets the rating condition, the user data is desensitized, and the desensitized user data and the risk rating are displayed to the merchant, so that the merchant verifies the identity credential and the biological characteristics of the user to be authenticated. In the case that the merchant verifies successfully, a confirmation instruction submitted by the merchant is obtained, the identity authentication state of the user to be authenticated is changed to an authenticated state according to the confirmation instruction, and a certain resource reward is issued to the merchant. In this way, the business group is expanded, and the user to be authenticated can also be authenticated when the information database of the related institution is incomplete.

[0020] The merchant provided in the embodiment includes a merchant passing access detection on merchant data of the merchant, and the merchant passing the access detection. For example, a hotel, a convenience store, etc. Optionally, before the IoT device is issued to the merchant, the access detection is performed on the merchant data of the merchant. In the case that the access detection passes, the IoT device for collecting the identity identifier in the identity identifier authentication process is issued to the merchant. The IoT device includes a device capable of collecting the identity identifier of the user to be authenticated. For example, a device capable of scanning a code through a camera.

[0021] The user to be authenticated includes a user in an unauthenticated state. Optionally, the user to be authenticated is determined in the following manner: in the case that the user fails to apply for a service to the merchant, an application result is obtained. If the error code returned by the application result is that the identity is not authenticated, the user is determined as the user to be authenticated. The identity identifier includes an identity identifier generated according to the identity information filled in by the user to be authenticated.

[0022] In specific implementation, before the identity identifier of the user to be authenticated is collected by using the IoT device of the merchant, in order to ensure that the merchant is an access merchant and improve the reliability of identity authentication, in an optional implementation manner provided in the embodiment, before the identity identifier is scanned by using the IoT device, the following operation is performed on the merchant:

[0023] The merchant data of the merchant is subjected to access detection.

[0024] In the case that the access detection passes, the IoT device for collecting the identity code in the identity code authentication process is issued to the merchant.

[0025] Similarly, before the IoT device for collecting the identity code in the identity code authentication process is issued to any merchant, the merchant data of the merchant is subjected to access detection, and in the case that the access detection passes, the IoT device for collecting the identity code in the identity code authentication process is issued to the merchant.

[0026] In actual application, the IoT device is issued to the merchant, which is equivalent to that the merchant is enabled to have the qualification of identity code authentication. In order to improve the user experience of the to-be-authenticated user, when it is determined that the identity authentication state of the to-be-authenticated user is not authenticated, the to-be-authenticated user can select an authentication mode by himself. In an optional implementation provided by the embodiment, in order to enable the to-be-authenticated user to select an authentication mode by himself, after it is determined that the identity state of the to-be-authenticated user is not authenticated, the following steps are performed:

[0027] a page of authentication modes is displayed on the user terminal of the to-be-authenticated user;

[0028] in the case that the to-be-authenticated user triggers an authentication interface corresponding to the identity code, an information collection page is displayed on the user terminal;

[0029] an identity code is generated according to the identity information filled in the information collection page by the to-be-authenticated user;

[0030] a display page carrying the identity code is issued to the user terminal.

[0031] In specific implementation, after the identity of the to-be-authenticated user is determined, a page including authentication modes is displayed on the user terminal of the to-be-authenticated user. In the case that the to-be-authenticated user selects an identity code authentication mode, an information collection page is displayed on the user terminal of the to-be-authenticated user. The to-be-authenticated user fills in his own identity information on the information collection page. An identity code of the to-be-authenticated user is generated according to the identity information filled in by the to-be-authenticated user. A display page carrying the identity code is issued to the user terminal of the to-be-authenticated user. In order to further improve the perception degree of the user, the display page is optionally configured with an exit control. In the case that the exit control is detected to be triggered, the authentication process is terminated. In addition, the page including authentication modes and the information collection page are both configured with an exit control. In the case that the exit control is triggered by the to-be-authenticated user, the authentication process is terminated. The IoT device and / or the user terminal of the to-be-authenticated user displays a prompt of termination of the authentication process or a prompt of authentication through other modes.

[0032] For example, the user fails to apply for a business of a hotel in a business application process, and determines that the user is a to-be-authenticated user through an error code returned by an application result. The hotel has issued an IoT device for collecting an identity code in an identity authentication process through an access detection. In order to enable the to-be-authenticated user to smoothly apply for the business, a selection page of an authentication mode is displayed on a user terminal of the to-be-authenticated user, wherein the selection page of the authentication mode can include bank card authentication, face scanning authentication, identity code authentication and the like. In a case where the to-be-authenticated user triggers an authentication interface corresponding to the identity code, that is, selects to use the identity code for identity authentication, an information collection page is displayed to the to-be-authenticated user, wherein the to-be-authenticated user needs to fill in a name and an ID number. Then, a corresponding identity code is generated according to the name and the ID number filled in by the to-be-authenticated user through the information collection page. The name and the ID number can be obtained after the identity code is parsed. A display page carrying the identity code is issued to the user terminal of the to-be-authenticated user. In the above process, the to-be-authenticated user can terminate the identity code authentication process at any time by triggering an exit control configured on the page of the user terminal or use other ways for identity authentication.

[0033] In addition, the user confirms that the identity authentication state of the user is an unauthenticated state, and can go to a merchant that has passed the access detection and issued the IoT device to perform identity recognition and complete real-name authentication.

[0034] In step S104, user data of the to-be-authenticated user and merchant data of the merchant are obtained according to the identity code.

[0035] The user data includes identity data, device data, transaction data and / or social data of the to-be-authenticated user, and the merchant data includes credential data, subject data, operating content data and / or operator data of the merchant.

[0036] In a specific implementation, in order to ensure the accuracy of the obtained user data and the merchant data, in an optional implementation of the embodiment, the user data and the merchant data are obtained in the following manner:

[0037] The identity code is parsed to obtain a user identifier of the to-be-authenticated user.

[0038] The user data of the to-be-authenticated user is obtained based on the user identifier, and the merchant data is obtained through the IoT device.

[0039] It should be noted that when the IoT device is configured to the merchant, the merchant and the IoT device are bound.

[0040] For example, the user to be authenticated performs identity authentication through the identity identifier of the IoT device of the hotel. After the IoT device scans the identity identifier of the user terminal of the user to be authenticated, the identity identifier is decoded to obtain the identity information of the user to be authenticated, including the name and the ID number. According to the name and the ID number of the user to be authenticated, the device data, the transaction data and the social data of the user to be authenticated are obtained as the user data of the user to be authenticated together with the identity information data. Meanwhile, the credential data, the principal data, the business content data and the business person data of the hotel are obtained through the IoT device.

[0041] In addition, the user to be authenticated can directly fill in the identity information through the IoT device. The user data and the merchant data are obtained in the following manner. First, when the identity authentication space of the identity identifier of the IoT device is triggered, an information collection page is displayed to the IoT device. Then, the identity information filled in the information collection page by the user to be authenticated is obtained. Finally, the user information is obtained based on the identity information, and the merchant data is obtained through the IoT device.

[0042] In step S106, the user data and the merchant data are input into a preset scoring model for behavior scoring.

[0043] The preset scoring model refers to a model for scoring the user data of the user to be authenticated and the merchant data of the merchant.

[0044] In specific implementation, the user data and the merchant data are input into the preset scoring model. The preset scoring model scores the identity identifier authentication behavior based on the user data and the merchant data. The identity data, the device data, the transaction data and the social data in the user data and the credential data, the principal data, the business content data and the business person data in the merchant data are scored.

[0045] Specifically, based on the user data, the basic information, the behavior path, the daily environment, the social association, the sense of security and / or the security penalty of the user to be authenticated are evaluated. Based on the merchant data, the basic information, the business status, the business environment, the user group, the risk concentration and / or the administrative penalty of the merchant are evaluated.

[0046] In actual application, before the IoT machine is issued to the merchant, access detection is performed on the merchant data of the merchant, and the IoT machine is issued to the merchant when the access detection is passed. Although the access detection is performed on the merchant before the IoT machine is issued, in order to enhance the effectiveness of the identity code authentication of the merchant, the risk control is further performed on the merchant when the merchant performs the identity code authentication.

[0047] In specific implementation, in order to ensure that the behavior of the to-be-authenticated user and the merchant is credible and further improve the credibility of the identity authentication, the behavior score of the to-be-authenticated user and the merchant is needed. In an optional implementation provided by the embodiment, after the score result of the behavior score is obtained:

[0048] It is judged whether the score result of the behavior score meets a preset score condition.

[0049] If yes, the step of inputting the user data and the merchant data into a preset risk strategy for risk identification and obtaining a risk rating based on the score result of the behavior score is performed.

[0050] If no, a reminder of terminating the authentication process or adopting other authentication modes is displayed.

[0051] For example, the to-be-authenticated user performs identity authentication of an identity code through an IoT machine of a hotel. After the user data of the to-be-authenticated user and the merchant data of the hotel are obtained, the user data and the merchant data are input into a preset score model. The preset score model performs behavior scoring on the identity authentication of the to-be-authenticated user through the IoT machine of the hotel according to the user data and the merchant data. After the score result of the behavior score is obtained, the score result is judged. It is judged whether the score result meets a preset score condition. If yes (the score result is greater than a preset threshold), the user data and the merchant data are further identified for risk. If no, the identity authentication fails. A reminder of terminating the authentication process or adopting other authentication modes is displayed on the user terminal of the to-be-authenticated user and the IoT machine of the hotel.

[0052] In step S108, the user data and the merchant data are input into a preset risk strategy for risk identification and obtaining a risk rating based on the score result of the behavior score.

[0053] In actual application, there is a phenomenon that a merchant makes illegal profits for large-scale authentication of to-be-authenticated users. There is a phenomenon that a user performs illegal behavior through batch authentication. For example, the merchant collects certain funds for identity authentication to make the user perform certain illegal activities (such as minors entering an Internet bar). In specific implementation, in order to exclude batch, aggregation, and malicious emergent risks, in an optional implementation provided by the embodiment, the following method is specifically used for risk identification:

[0054] inputting the user data and the merchant data into the preset risk strategy; the preset risk strategy identifies a first risk that the merchant exists in batch authentication, and identifies a second risk that the to-be-authenticated user exists in illegal authentication;

[0055] obtaining a risk rating determined by the preset risk strategy based on the first risk and the second risk.

[0056] In specific implementation, on the basis that the score result of the behavior score meets the preset score condition, the risk identification strategy identifies the first risk that the merchant exists in batch authentication and the second risk that the to-be-authenticated user exists in illegal authentication, and determines a risk rating based on the first risk and the second risk. In addition, the risk identification strategy can also identify one of the first risk and the second risk, and accordingly, the risk rating can be determined according to one of the first risk and the second risk.

[0057] For example, a to-be-authenticated user performs identity authentication of an identity code through an IoT device of a hotel, a preset score model generates a score result of a behavior score that meets a preset score condition, on the basis of which, user data of the to-be-authenticated user and merchant data of the hotel are input into a preset risk strategy, the preset risk strategy identifies a first risk that the hotel exists in batch authentication and a second risk that the to-be-authenticated user exists in illegal authentication, and determines a risk rating according to the first risk and the second risk.

[0058] In addition, in the process of identifying risks of the user data and the merchant data, on the basis that the score result of the behavior score meets the preset score condition, the score result is taken as the center to identify risks of equipment abnormality, high-risk subject, environmental focus, black / grey list, and batch triggering of the user data and the merchant data; wherein, a risk identification result of the risk identification of the merchant data is referred to as a first risk, a risk identification result of the risk identification of the user data is referred to as a second risk, and a risk rating is generated according to the first risk and the second risk.

[0059] In a specific implementation, to further control the risk, in an optional implementation provided by the embodiment, after obtaining the risk rating, it is determined whether the risk rating meets the rating condition. If not, the user terminal of the to-be-authenticated user and the IoT machine tool display a prompt to terminate the authentication process or adopt other authentication methods. If yes, the step of confirming that the identity authentication of the to-be-authenticated user is passed after the merchant passes the identity verification of the to-be-authenticated user based on the user data is performed. For example, when the risk rating is A, B, and C, it is determined that the risk rating meets the rating condition, and when the risk rating is D, it is determined that the risk rating does not meet the rating condition.

[0060] In step S110, in the case where the risk rating meets the rating condition, after the merchant passes the identity verification of the to-be-authenticated user based on the user data, it is confirmed that the identity authentication of the to-be-authenticated user is passed.

[0061] The identity verification refers to that the business personnel of the merchant performs offline verification on the to-be-authenticated user.

[0062] In a specific implementation, to improve the effectiveness of the verification and further improve the reliability of the identity code authentication, in an optional implementation provided by the embodiment, after the merchant passes the identity verification of the to-be-authenticated user based on the user data, the process of confirming that the identity authentication of the to-be-authenticated user is passed is implemented as follows:

[0063] The user data is desensitized, and the desensitized user data and the risk rating are displayed to the merchant.

[0064] The confirmation instruction submitted by the business personnel of the merchant through the IoT machine tool to pass the identity verification of the to-be-authenticated user is obtained.

[0065] Based on the confirmation instruction, the identity authentication state of the to-be-authenticated user is changed to an authenticated state.

[0066] Specifically, in an optional implementation provided by the embodiment, after the desensitized user data is displayed to the merchant, the business personnel of the merchant performs identity verification on the identity credentials and biological features of the to-be-authenticated user based on the desensitized user data, and in the case where the identity verification is passed, submits the confirmation instruction through the IoT machine tool. In the case where the identity verification is not passed, the verification failure instruction submitted by the business personnel through the IoT machine tool is obtained, and based on the verification failure instruction, a prompt to terminate the verification process or adopt other authentication methods is displayed to the IoT machine tool and / or the user terminal.

[0067] For example, the user to be authenticated performs identity authentication through the IoT device of the hotel, the user data of the user to be authenticated and the risk rating obtained after the hotel data of the hotel are subjected to risk identification, the user data is subjected to desensitization processing according to a preset desensitization rule, and the desensitized user data and the risk rating are displayed to the hotel. Specifically, the desensitized user data and the risk rating can be displayed to the IoT device of the hotel, or can be displayed to the user terminal of the user to be authenticated, or can be displayed to both the user terminal and the IoT device. The business personnel of the hotel compares the identity credentials and the biometric features of the user to be authenticated according to the displayed desensitized user data and the risk rating, and judges whether the current user to be authenticated holds the identity credentials of the user to be authenticated for identity status authentication. When the name, the identity card number, the entity identity credentials and the live face are all matched, the business personnel of the hotel submits a confirmation instruction through the IoT device. According to the received confirmation instruction, the identity authentication state of the user to be authenticated is changed to an authenticated state. It should be noted that before the business personnel of the hotel submits the confirmation instruction through the IoT device, the user to be authenticated can terminate the authentication process through the exit control of the page configured on the user terminal or in other ways.

[0068] In actual application, although the merchant has successfully issued the IoT device through the access detection, the user to be authenticated is refused to be authenticated due to complex process or other reasons, or the user to be authenticated is authenticated only when the error code of the application result of the business application of the user to be authenticated to the merchant is an unauthenticated user. In order to encourage the merchant to authenticate the user to be authenticated and improve the perception of the user to the related business, in an optional implementation provided by the embodiment, after the user to be authenticated is authenticated through the IoT device and successfully changes the identity authentication state to an authenticated state, the following operation is further performed:

[0069] Based on the change of the identity authentication state, the merchant is rewarded with resources according to a preset reward rule.

[0070] It should be noted that the form of the resource reward is not limited here. In actual implementation, after the identity authentication state of the user to be authenticated is changed to an authenticated state, the user to be authenticated is determined as an authenticated user, and a business application of the authenticated user to the merchant is performed.

[0071] In the above example, after it is detected that the identity authentication state of the user to be authenticated has been changed to an authenticated state, the hotel is rewarded with resources according to a preset reward rule. Specifically, a specific identifier can be displayed to the IoT device of the hotel, and the specific identifier can be accumulated to the historical specific identifier of the IoT device according to the confirmation operation of the business personnel of the hotel to the specific identifier. When the specific identifier is accumulated to a certain value, a specified product can be exchanged.

[0072] The identity authentication method provided in the embodiment is further described below with reference to the application of the identity authentication method provided in the embodiment in a business scenario. Figure 2 The identity authentication method applied in the business scenario specifically includes steps S202 to S220. Figure 2 The identity authentication method applied in the business scenario specifically includes steps S202 to S220.

[0073] In step S202, an IoT device of a merchant is used to collect an identity code of a user to be authenticated who applies for a service to the merchant.

[0074] Before the identity code is collected, the merchant needs to be detected for access, and the merchant is issued with the IoT device if the access detection is passed.

[0075] In step S204, user data of the user to be authenticated is obtained according to the identity code, and merchant data is obtained through the IoT device.

[0076] In step S206, the user data and the merchant data are input into a preset scoring model for behavior scoring.

[0077] In step S208, it is determined whether the scoring result of the behavior scoring meets a preset scoring condition.

[0078] If yes, steps S210 to S214 are performed.

[0079] If no, a prompt of terminating the authentication process or taking other authentication methods is displayed.

[0080] In step S210, the user data and the merchant data are input into a preset risk policy based on the scoring result of the behavior scoring.

[0081] In step S212, a risk rating determined by the preset risk policy is obtained.

[0082] The preset risk policy identifies a first risk of batch authentication of the merchant and a second risk of illegal authentication of the user to be authenticated, and determines the risk rating according to the first risk and the second risk.

[0083] In step S214, it is determined whether the risk rating meets a rating condition.

[0084] If yes, steps S216 to S220 are performed.

[0085] If no, a prompt of terminating the authentication process or taking other authentication methods is displayed.

[0086] In step S216, the user data is desensitized, and the desensitized user data and the risk rating are displayed to the merchant.

[0087] Wherein, after the desensitized user data and the risk rating are displayed to the merchant, the business personnel of the merchant verifies the identity of the identity credential and the biometric feature of the to-be-authenticated user based on the desensitized user data, and submits a confirmation instruction through the IoT machine in the case of verification passing.

[0088] Step S218, obtaining the confirmation instruction of the business personnel of the merchant through the IoT machine that the identity verification of the to-be-authenticated user is passed.

[0089] Step S220, based on the confirmation instruction, changing the identity authentication state of the to-be-authenticated user to the authenticated state.

[0090] In summary, the identity authentication method provided by the embodiment first uses the IoT machine of the merchant to collect the identity identification code of the to-be-authenticated user applying for business to the merchant; according to the identity identification code, the user data of the to-be-authenticated user is obtained, and the merchant data is obtained through the IoT machine; then the user data and the merchant data are input into the preset scoring model for behavior scoring, and in the case that the scoring result of the behavior scoring meets the preset scoring condition, the user data and the merchant data are input into the preset risk strategy based on the scoring result for risk identification and obtaining a risk rating, and in the case that the risk rating meets the rating condition, after the identity verification of the to-be-authenticated user by the merchant based on the user data is passed, the identity authentication of the to-be-authenticated user is confirmed. To this end, the convenience and flexibility of identity authentication are improved; the security is improved while the business group is expanded.

[0091] The identity authentication device provided by the present specification implements, for example:

[0092] In the above embodiment, an identity authentication method is provided, and a corresponding identity authentication device is also provided, which will be described below with reference to the accompanying drawings.

[0093] Reference Figure 3 which shows a schematic diagram of an identity authentication device provided by the present embodiment.

[0094] Since the device embodiment corresponds to the method embodiment, the description is relatively simple, and the related parts can refer to the corresponding description of the above-provided method embodiment. The device embodiments described below are only illustrative.

[0095] The present embodiment provides an identity authentication device, comprising:

[0096] The collection module 302 is configured to use the IoT machine of the merchant to collect the identity identification code of the to-be-authenticated user applying for business to the merchant;

[0097] The acquisition module 304 is configured to acquire user data of the user to be authenticated according to the identity identifier, and acquire merchant data of the merchant;

[0098] The scoring module 306 is configured to input the user data and the merchant data into a preset scoring model to perform behavior scoring.

[0099] The rating module 308 is configured to input the user data and the merchant data into a preset risk strategy based on a scoring result of the behavior scoring to perform risk identification and obtain a risk rating.

[0100] The confirmation module 310 is configured to confirm that the identity authentication of the user to be authenticated is passed when the risk rating meets a rating condition and the merchant passes the identity verification of the user to be authenticated based on the user data.

[0101] Optionally, the confirmation module 310 comprises:

[0102] The desensitization sub-module is configured to perform desensitization processing on the user data, and display the desensitized user data and the risk rating to the merchant.

[0103] The confirmation instruction acquisition sub-module is configured to acquire a confirmation instruction of passing the identity verification of the user to be authenticated submitted by a business personnel of the merchant through the IoT machine.

[0104] The change sub-module is configured to change an identity authentication state of the user to be authenticated to an authenticated state based on the confirmation instruction.

[0105] Optionally, after the desensitized user data is displayed to the merchant, the business personnel of the merchant performs identity verification on identity credentials and biological characteristics of the user to be authenticated based on the desensitized user data, and submits the confirmation instruction through the IoT machine when the identity verification is passed.

[0106] Optionally, the identity authentication apparatus further comprises:

[0107] The access detection module is configured to perform access detection on the merchant data of the merchant.

[0108] The machine issuance module is configured to issue an IoT machine for collecting an identity identifier in an identity identifier authentication process to the merchant when the merchant data passes the access.

[0109] Optionally, the confirmation module 310 further comprises:

[0110] The reward issuing module is configured to issue a resource reward to the merchant according to a preset reward rule based on the change of the identity authentication state.

[0111] Optionally, the rating module 308 comprises:

[0112] The identification sub-module is configured to input the user data and the merchant data into the preset risk policy; the preset risk policy identifies a first risk that the merchant exists batch authentication, and / or identifies a second risk that the user exists illegal authentication;

[0113] The risk rating acquisition sub-module is configured to acquire a risk rating determined by the preset risk policy based on the first risk and / or the second risk.

[0114] Optionally, the to-be-authenticated user is determined by running the following modules:

[0115] The business application module is configured to acquire an application result in a case where the user fails to apply for a business to the merchant;

[0116] The to-be-authenticated user determination module is configured to determine the user as a to-be-authenticated user if an error code returned by the application result is identity unauthenticated.

[0117] Optionally, the identity authentication apparatus further comprises:

[0118] The authentication mode display module is configured to display an authentication mode page on a user terminal of the to-be-authenticated user;

[0119] The information collection page display module is configured to display an information collection page on the user terminal in a case where the to-be-authenticated user triggers an authentication interface corresponding to the identity identification code;

[0120] The identity identification code generation module is configured to generate an identity identification code according to identity information filled by the to-be-authenticated user through the information collection page;

[0121] The display page issuing module is configured to issue a display page carrying the identity identification code to the user terminal.

[0122] Optionally, the display page is configured with an exit control, and the authentication process is terminated in a case where the exit control is detected to be triggered.

[0123] Optionally, the acquisition module 304 comprises:

[0124] The analysis sub-module is configured to analyze the identity identification code to acquire a user identifier of the to-be-authenticated user;

[0125] The data acquisition submodule is configured to acquire the user data of the user to be authenticated based on the user identifier, and acquire the merchant data through the IoT device.

[0126] Optionally, the identity authentication device further includes:

[0127] A scoring judgment module is configured to judge whether the scoring result of the behavior scoring satisfies a preset scoring condition;

[0128] If yes, run the scoring module;

[0129] If not, a termination display module is run, wherein the termination display module is configured to display a reminder to terminate the authentication process or adopt other authentication methods.

[0130] Optionally, the identity authentication device further includes:

[0131] The rating judgment module is configured to display a reminder to terminate the authentication process or adopt other authentication methods when the risk rating does not meet the rating conditions.

[0132] An embodiment of an identity authentication device provided in this specification is as follows:

[0133] Corresponding to the identity authentication method described above, based on the same technical concept, one or more embodiments of this specification also provide an identity authentication device, which is used to perform the above-mentioned identity authentication method. Figure 4 A schematic diagram of the structure of an identity authentication device provided in one or more embodiments of this specification.

[0134] like Figure 4 As shown, the identity authentication device may have relatively large differences due to different configurations or performances, and may include one or more processors 401 and memory 402, and the memory 402 may store one or more storage applications or data. Among them, the memory 402 can be a temporary storage or a permanent storage. The application stored in the memory 402 may include one or more modules (not shown in the figure), and each module may include a series of computer executable instructions in the identity authentication device. Furthermore, the processor 401 can be configured to communicate with the memory 402 to execute a series of computer executable instructions in the memory 402 on the identity authentication device. The identity authentication device may also include one or more power supplies 403, one or more wired or wireless network interfaces 404, one or more input and output interfaces 405, one or more keyboards 406, etc.

[0135] In a specific embodiment, the identity authentication device includes a memory and one or more programs, wherein the one or more programs are stored in the memory, and the one or more programs may include one or more modules, and each module may include a series of computer-executable instructions in the identity authentication device, and the one or more programs are configured to be executed by one or more processors, including computer-executable instructions for performing the following:

[0136] Using the merchant's IoT device to collect the identity code of the user to be authenticated who applies for business from the merchant;

[0137] Acquire user data of the user to be authenticated according to the identity identification code, and acquire merchant data of the merchant;

[0138] Inputting the user data and the merchant data into a preset scoring model to perform behavior scoring;

[0139] Based on the scoring result of the behavior scoring, the user data and the merchant data are input into a preset risk strategy to perform risk identification and obtain a risk rating;

[0140] In the case that the risk rating meets the rating conditions, after the merchant verifies the identity of the user to be authenticated based on the user data and passes the identity authentication, it is confirmed that the identity authentication of the user to be authenticated is passed.

[0141] Optionally, after the desensitized user data is displayed to the merchant, the merchant's business personnel verify the identity credentials and biometrics of the user to be authenticated based on the desensitized user data, and submit the confirmation instruction through the IoT device if the verification is passed.

[0142] Optionally, when the computer executable instructions are executed, they further include:

[0143] Performing access detection on the merchant data of the merchant;

[0144] When the merchant data access is approved, the IoT device that collects the identity code during the identity code authentication process is issued to the merchant.

[0145] An embodiment of a storage medium provided in this specification is as follows:

[0146] Corresponding to the identity authentication method described above, based on the same technical concept, one or more embodiments of this specification also provide a storage medium.

[0147] The storage medium provided in this embodiment is used to store computer-executable instructions. When the computer-executable instructions are executed, the following process is implemented:

[0148] collecting, by an IoT device of a merchant, an identity code of a to-be-authenticated user applying for a service of the merchant;

[0149] obtaining user data of the to-be-authenticated user according to the identity code, and obtaining merchant data of the merchant;

[0150] inputting the user data and the merchant data into a preset scoring model to perform behavior scoring;

[0151] based on a scoring result of the behavior scoring, inputting the user data and the merchant data into a preset risk strategy to perform risk identification and obtain a risk rating;

[0152] in a case where the risk rating meets a rating condition, confirming that identity authentication of the to-be-authenticated user is passed after the merchant passes identity verification of the to-be-authenticated user based on the user data.

[0153] Optionally, after the desensitized user data is displayed to the merchant, a service personnel of the merchant verifies identity credentials and biological features of the to-be-authenticated user based on the desensitized user data, and submits the confirmation instruction through the IoT device in a case where the verification is passed.

[0154] Optionally, the computer executable instructions, when executed, further implement the following process:

[0155] performing access detection on merchant data of the merchant;

[0156] in a case where the merchant data access is passed, issuing, to the merchant, an IoT device that collects an identity code in an identity code authentication process.

[0157] It should be noted that the embodiments of the storage medium in the present specification are based on the same inventive concept as the embodiments of the user resource processing method in the present specification, and therefore the specific implementation of this embodiment can be referred to the implementation of the corresponding method described above, and the repeated parts will not be described herein.

[0158] The above describes the embodiments of the present specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims can be performed in a different order than the order in which they are recited and still achieve desirable results. In addition, the processes depicted in the figures do not necessarily require the particular order shown, or sequential order, to achieve the desired results. In certain implementations, multitasking and parallel processing can be advantageous.

[0159] In the 1930s, it was clear to distinguish whether an improvement in a technology was in hardware (e.g., improvement in circuit structure of diodes, transistors, switches, etc.) or in software (e.g., improvement in method flow). However, as technology has evolved, many improvements in method flow today can be considered as direct improvements in hardware circuit structure. Designers almost always obtain the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that an improvement in a method flow cannot be implemented by a hardware entity module. For example, a programmable logic device (PLD) (e.g., a field programmable gate array (FPGA)) is an integrated circuit whose logic function is determined by user programming of the device. A digital system is "integrated" on a PLD by the designer programming it, rather than by ordering a chip manufacturer to design and fabricate a custom integrated circuit chip. Moreover, instead of manually fabricating an integrated circuit chip, this programming is now mostly implemented by "logic compiler" software, which is similar to software compilers used in program development, and the original code before compilation is written in a characteristic programming language, which is called a hardware description language (HDL), and there are many such languages, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc., and the most commonly used are VHDL (Very-High-Speed Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art should be aware that, as long as the method flow is logically programmed in the above-mentioned hardware description languages and programmed into an integrated circuit, a hardware circuit that implements the logical method flow can be easily obtained.

[0160] The controller can be implemented in any suitable way, for example, the controller can take the form of a microprocessor or processor and a computer readable medium storing computer readable program code, such as software or firmware, executable by the (micro)processor, logic gates, switches, an application specific integrated circuit (ASIC), a programmable logic controller and an embedded microcontroller, examples of which include but are not limited to the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20 and Silicone Labs C8051F320, the memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art will also know that, in addition to implementing the controller purely in terms of computer readable program code, it is possible to implement the controller to perform the same functions using logic gates, switches, application specific integrated circuits, programmable logic controllers and embedded microcontrollers, by logically programming the method steps. The controller can therefore be considered a hardware component, and the means for performing the various functions comprised therein can be considered structures within the hardware component. Alternatively, or even additionally, the means for performing the various functions can be considered both software modules which implement the method and structures within the hardware component.

[0161] The systems, apparatuses, modules or units illustrated by the above embodiments can be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer can be a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0162] For the sake of description, the above apparatuses are described in various units with functions respectively. Of course, the functions of the units can be implemented in one or more software and / or hardware in implementing the embodiments of the present specification.

[0163] Those skilled in the art will appreciate that one or more embodiments of the present specification can be provided as a method, a system or a computer program product. Therefore, one or more embodiments of the present specification can take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware aspects. Moreover, the present specification can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage etc.) containing computer-usable program code.

[0164] The specification is presented with reference to flow diagrams and / or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the specification. It will be understood that each block of the flow diagrams and / or block diagrams, and combinations of blocks in the flow diagrams and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processing element or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 The flow diagram and / or block diagram in the flow diagrams and / or block diagrams can represent one or more of any appropriate circuitry configured to perform the specified functions. In this regard, one or more circuit elements can be accepted by a processor as a hardware abstraction layer of virtualization, configured by the appropriate software executed by the processor, and manipulated by the software in an Accurate manner consistent with the hardware's capability. Figure 1 The flow diagram and / or block diagram in the flow diagrams and / or block diagrams can represent one or more of any appropriate circuitry configured to perform the specified functions. In this regard, one or more circuit elements can be accepted by a processor as a hardware abstraction layer of virtualization, configured by the appropriate software executed by the processor, and manipulated by the software in an Accurate manner consistent with the hardware's capability.

[0165] The computer program instructions can also be loaded into a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 The flow diagram and / or block diagram in the flow diagrams and / or block diagrams can represent one or more of any appropriate circuitry configured to perform the specified functions. In this regard, one or more circuit elements can be accepted by a processor as a hardware abstraction layer of virtualization, configured by the appropriate software executed by the processor, and manipulated by the software in an Accurate manner consistent with the hardware's capability. Figure 1 The flow diagram and / or block diagram in the flow diagrams and / or block diagrams can represent one or more of any appropriate circuitry configured to perform the specified functions. In this regard, one or more circuit elements can be accepted by a processor as a hardware abstraction layer of virtualization, configured by the appropriate software executed by the processor, and manipulated by the software in an Accurate manner consistent with the hardware's capability.

[0166] The computer program instructions can also be loaded into a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flow diagrams and / or block diagrams block or blocks. Figure 1 The flow diagram and / or block diagram in the flow diagrams and / or block diagrams can represent one or more of any appropriate circuitry configured to perform the specified functions. In this regard, one or more circuit elements can be accepted by a processor as a hardware abstraction layer of virtualization, configured by the appropriate software executed by the processor, and manipulated by the software in an Accurate manner consistent with the hardware's capability. Figure 1 The flow diagram and / or block diagram in the flow diagrams and / or block diagrams can represent one or more of any appropriate circuitry configured to perform the specified functions. In this regard, one or more circuit elements can be accepted by a processor as a hardware abstraction layer of virtualization, configured by the appropriate software executed by the processor, and manipulated by the software in an Accurate manner consistent with the hardware's capability.

[0167] In a typical configuration, a computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory.

[0168] The memory can include non-persistent memory and / or volatile memory, such as random access memory (RAM) and / or cache memory, non-volatile memory, such as read-only memory (ROM), EPROM, and / or flash memory, etc. The memory is an example of computer-readable media.

[0169] Computer-readable media includes permanent and non-permanent, movable and non-movable media that can be implemented by any method or technology to store information. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information accessible to a computing device. According to the definition herein, computer-readable media does not include transitory media such as modulated data signals and carriers.

[0170] It should also be noted that the terms "comprising", "containing", or any other variant thereof are intended to cover non-exclusive inclusion, such that a process, method, article or apparatus that comprises a list of elements does not only include those elements, but also includes other elements not explicitly listed or inherent to such a process, method, article or apparatus. Without more limitations, the element defined by the statement "comprising a" does not exclude the presence of additional identical elements in the process, method, article or apparatus that includes the element.

[0171] One or more embodiments of the present specification can be described in the general context of computer-executable instructions being executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, and the like that perform specific tasks or implement specific abstract data types. One or more embodiments of the present specification can also be practiced in a distributed computing environment, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in both local and remote computer storage media, including storage devices.

[0172] Each embodiment in the present specification is described in a progressive manner, and the same or similar parts between each embodiment can be referred to each other, and each embodiment focuses on the difference from other embodiments. In particular, for system embodiments, since they are basically similar to method embodiments, the description is relatively simple, and the relevant parts can be referred to the part of the method embodiment.

[0173] The above merely provides the example of the present document and is not intended to limit the present document. For those skilled in the art, the present document can have various modifications and changes. Any modification, equivalent replacement, improvement, etc. within the spirit and principle of the present document shall be included in the scope of claims of the present document.

Claims

1. An identity authentication method, comprising: collecting, by an IoT device of a merchant, an identity code of a user to be authenticated who applies for a service to the merchant; obtaining user data of the user to be authenticated according to the identity code and obtaining merchant data of the merchant; inputting the user data and the merchant data into a preset scoring model to perform behavior scoring; based on a scoring result of the behavior scoring, inputting the user data and the merchant data into a preset risk strategy to perform risk identification and obtain a risk rating; the risk rating is determined based on a first risk of batch authentication existing in the merchant and / or a second risk of illegal authentication existing in the user to be authenticated; in a case where the risk rating does not satisfy a rating condition, a reminder of terminating an authentication process or adopting other authentication modes is displayed.

2. The identity authentication method of claim 1, further comprising: in a case where the risk rating satisfies the rating condition, confirming that the identity authentication of the user to be authenticated is passed after the merchant passes an identity verification of the user to be authenticated based on the user data; wherein, after the merchant passes the identity verification of the user to be authenticated based on the user data, confirming that the identity authentication of the user to be authenticated is passed, comprises: performing desensitization processing on the user data, and displaying the desensitized user data and the risk rating to the merchant; obtaining a confirmation instruction of passing the identity verification of the user to be authenticated submitted by a service personnel of the merchant through the IoT device; based on the confirmation instruction, changing an identity authentication state of the user to be authenticated to a authenticated state.

3. The identity authentication method of claim 2, after the desensitized user data is displayed to the merchant, the service personnel of the merchant verifies an identity credential and a biological feature of the user to be authenticated based on the desensitized user data, and submits the confirmation instruction through the IoT device in a case where the verification is passed.

4. The identity authentication method of claim 1, before the step of collecting, by an IoT device of a merchant, an identity code of a user to be authenticated who applies for a service to the merchant is performed, further comprising: performing access detection on the merchant data of the merchant; in a case where the access detection is passed, issuing an IoT device for collecting an identity code in an identity code authentication process to the merchant.

5. The identity authentication method of claim 2, after the identity authentication state of the user to be authenticated is changed to the authenticated state by the confirmation of the merchant, further comprising: based on the change of the identity authentication state, issuing a resource reward to the merchant according to a preset reward rule.

6. The identity authentication method of claim 1, wherein the step of inputting the user data and the merchant data into a preset risk strategy to perform risk identification and obtain a risk rating comprises: inputting the user data and the merchant data into the preset risk strategy; the preset risk strategy identifies a first risk of batch authentication existing in the merchant and / or a second risk of illegal authentication existing in the user to be authenticated; The preset risk strategy is acquired based on the risk rating determined by the first risk and / or the second risk. 7.The identity authentication method of claim 1, wherein the user to be authenticated is determined in the following manner: In the case that the user fails to apply for a service from the merchant, an application result is acquired; If the error code returned by the application result is that the identity is not authenticated, the user is determined as the user to be authenticated. 8.The identity authentication method of claim 7, wherein before the step of collecting the identity code of the user to be authenticated applying for a service from the merchant by the IoT device of the merchant, the method further comprises: displaying an authentication method page on a user terminal of the user to be authenticated; in the case that the user to be authenticated triggers the authentication interface corresponding to the identity code, displaying an information collection page on the user terminal; generating the identity code according to the identity information filled by the user to be authenticated through the information collection page; issuing a display page carrying the identity code to the user terminal. 9.The identity authentication method of claim 8, wherein the display page is configured with a quit control, and in the case that the quit control is detected to be triggered, the authentication process is terminated. 10.The identity authentication method of claim 1, wherein the step of acquiring the user data of the user to be authenticated and the merchant data of the merchant according to the identity code comprises: parsing the identity code to acquire a user identifier of the user to be authenticated; acquiring the user data of the user to be authenticated based on the user identifier and acquiring the merchant data through the IoT device. 11.The identity authentication method of claim 1, wherein after the step of inputting the user data and the merchant data into a preset scoring model for behavior scoring, and before the step of inputting the user data and the merchant data into a preset risk strategy based on the scoring result of the behavior scoring for risk identification and obtaining a risk rating, the method further comprises: determining whether the scoring result of the behavior scoring meets a preset scoring condition; if yes, performing the step of inputting the user data and the merchant data into a preset risk strategy based on the scoring result of the behavior scoring for risk identification and obtaining a risk rating; if no, displaying a prompt of terminating the authentication process or taking other authentication methods. 12.An identity authentication method, comprising: collecting an identity code of a user to be authenticated applying for a service from a merchant by an IoT device of the merchant having an identity code authentication qualification; acquiring user data of the user to be authenticated and merchant data of the merchant according to the identity code; inputting the user data and the merchant data into a preset scoring model for behavior scoring; if the scoring result of the behavior scoring does not meet a preset scoring condition, displaying a prompt of terminating the authentication process or taking other authentication methods. 13.An identity authentication device, comprising: a collection module configured to collect an identity code of a user to be authenticated applying for a service from a merchant by an IoT device of the merchant; an acquisition module configured to acquire user data of the user to be authenticated and merchant data of the merchant according to the identity code; a scoring module configured to input the user data and the merchant data into a preset scoring model to perform behavior scoring; a rating module configured to input the user data and the merchant data into a preset risk strategy based on a scoring result of the behavior scoring to perform risk identification and obtain a risk rating; the risk rating is determined based on a first risk of batch authentication of the merchant and / or a second risk of irregular authentication of the user to be authenticated; a rating judgment module configured to, in a case where the risk rating does not satisfy a rating condition, display a prompt of terminating an authentication process or adopting other authentication manners.

14. An identity authentication device, comprising: a processor; and a memory configured to store computer executable instructions which, when executed, cause the processor to: collect an identity code of a user to be authenticated applying for a business of a merchant by using an IoT tool of the merchant; acquire user data of the user to be authenticated and merchant data of the merchant according to the identity code; input the user data and the merchant data into a preset scoring model to perform behavior scoring; input the user data and the merchant data into a preset risk strategy based on a scoring result of the behavior scoring to perform risk identification and obtain a risk rating; the risk rating is determined based on a first risk of batch authentication of the merchant and / or a second risk of irregular authentication of the user to be authenticated; in a case where the risk rating does not satisfy a rating condition, display a prompt of terminating an authentication process or adopting other authentication manners.

15. A storage medium for storing computer executable instructions which, when executed, implement the following processes: collect an identity code of a user to be authenticated applying for a business of a merchant by using an IoT tool of the merchant; acquire user data of the user to be authenticated and merchant data of the merchant according to the identity code; input the user data and the merchant data into a preset scoring model to perform behavior scoring; input the user data and the merchant data into a preset risk strategy based on a scoring result of the behavior scoring to perform risk identification and obtain a risk rating; the risk rating is determined based on a first risk of batch authentication of the merchant and / or a second risk of irregular authentication of the user to be authenticated; in a case where the risk rating does not satisfy a rating condition, display a prompt of terminating an authentication process or adopting other authentication manners.

Images