Business access processing method and device based on identity authentication

Abstract

The present application provides a business access processing method and device based on identity authentication, which can be applied to the fields of artificial intelligence, the Internet of Things, the mobile Internet or the financial field. When a user is not logged in to an account and uses a client to access any preset type of business (recorded as a target business), an access request for the target business and an identity authentication request for the target business requester can be initiated, and the business server responds at the same time, executes the access response task and the identity authentication task in parallel, obtains the business configuration data of the target business, and authenticates the requester based on the target identity information storage table and the identity information to be authenticated. After determining that the identity authentication is qualified, the obtained business configuration data is fed back to the client, so that the client outputs the business operation interface of the target business based on the business configuration data, meets the business access needs of the requester, and improves the business response efficiency.

Description

Technical Field

[0001] The present application relates to the field of identity recognition applications, and specifically to a service access processing method and device based on identity authentication. Background Art

[0002] At present, identity recognition technologies such as fingerprint recognition, face recognition, and voiceprint recognition have been widely used in various fields to improve the security of access to resources, equipment, and other objects, as well as the convenience and reliability of identity authentication.

[0003] When a user uses a bank client and uses fingerprint recognition for identity authentication, the client can send the fingerprint data entered by the user to the backend service server and store it as reference fingerprint data for user authentication. In this way, when the user triggers certain services in the client (such as transfer, financial management, account, etc.), the fingerprint recognition interface can be output. After the user enters the fingerprint, the service server can match the currently entered fingerprint data with the stored reference fingerprint data. If the match is successful, it can respond to the operation instructions of the triggered service to successfully enter the service operation interface. However, this service access processing method requires the user to wait for the response, which reduces the service response efficiency and user experience. Summary of the invention

[0004] In order to solve the above problems, the embodiments of the present application provide the following technical solutions:

[0005] On the one hand, the present application proposes a service access processing method based on identity authentication, the method comprising:

[0006] Receive an access request for a target service sent by a client, and an identity authentication request for a requestor requesting access to the target service; wherein the target service is any preset type of service, the access request includes a service identifier of the target service, and the identity authentication request includes identity information to be authenticated input in an identity authentication interface output by the client, and a table identifier stored by the client;

[0007] Responding to the access request and the identity authentication request at the same time, acquiring the service configuration data of the target service, and performing authentication processing on the identity information to be authenticated based on the target identity information storage table corresponding to the table identifier;

[0008] It is determined that the identity authentication is qualified, and the service configuration data is fed back to the client, so that the client outputs the service operation interface of the target service based on the service configuration data.

[0009] Optionally, the target identity information storage table records the target identity information and predicted response time of each of a plurality of registered users; the target identity information includes a target fingerprint feature and / or a target face feature, and the predicted response time refers to an average response time corresponding to the registered user using the client to select access to each preset type of service;

[0010] The performing authentication processing on the identity information to be authenticated based on the target identity information storage table corresponding to the table identifier includes:

[0011] Query the target identity information storage table corresponding to the table identifier;

[0012] Based on the target identity information recorded in the target identity information storage table, the identity information to be authenticated is authenticated to obtain a corresponding identity authentication result, and the authentication time spent in the authentication process is recorded;

[0013] If the identity authentication result is authentication passed, determining whether the authentication time is less than the corresponding predicted response time;

[0014] The qualified identity authentication includes: the identity information to be authenticated is authenticated, and the authentication time is less than the predicted response time.

[0015] Optionally, the predicted response time is updated according to a preset time period, including:

[0016] Acquire first historical operation data of a first registered user on the client and first attribute information of the first registered user; the first registered user is any registered user among the multiple registered users;

[0017] Based on a pre-trained response time prediction model, the first historical operation data and the first attribute information are processed to obtain a predicted response time of the first registered user selecting to access the preset type of service on the client within the current preset time period; the response time prediction model is trained based on a decision tree algorithm;

[0018] Querying the last constructed identity information storage table for the historical predicted response time corresponding to the target identity information of the first registered user;

[0019] Obtaining a response time difference between the currently obtained predicted response time and the historical predicted response time;

[0020] Determine that the response time difference is greater than a time threshold, construct a new identity information storage table, and write the target identity information of the first registered user and the currently obtained predicted response time into the new identity information storage table for associated storage;

[0021] The table identifier of the new identity information storage table is fed back to the client of the first registered user for update and storage.

[0022] Optionally, in the case where it is determined that the response time difference is greater than a time threshold, the method further includes:

[0023] Setting a to-be-deleted flag for the predicted response time corresponding to the current identity information storage table;

[0024] Counting the number of predicted response times to be deleted with the to-be-deleted flag in the same identity information storage table;

[0025] Obtaining the ratio between the number of records to be deleted and the total number of records in the identity information storage table;

[0026] If the ratio reaches the ratio threshold, the predicted response time and the corresponding target identity information that are not configured with the to-be-deleted mark in the identity information storage table are stored in the new identity information storage table.

[0027] Optionally, the method for constructing any of the identity information storage tables includes:

[0028] Obtaining an average access response time of each of a plurality of services of the preset type;

[0029] Comparing a plurality of the average access response times to determine a maximum average access response time;

[0030] Based on the maximum average access response time, determining the total number of records in the identity information storage table to be constructed, so that the authentication search time for any target identity information in the identity information storage table is less than or equal to the maximum average access response time;

[0031] An identity information storage table having blank record rows of the total number of records is constructed to store the target identity information and predicted response time of any of the registered users obtained within the current preset time period.

[0032] Optionally, the target identity information and predicted response time of each of the multiple registered users recorded in any identity information storage table are sorted according to the predicted response time.

[0033] Optionally, the pre-trained response time prediction model is used to process the first historical operation data and the first attribute information to obtain a predicted response time for the first registered user to select access to the preset type of service on the client within the current preset time period, including:

[0034] Analyze the first historical operation data and the first attribute information acquired within the current preset time period to determine a predicted probability that the first registered user chooses to access any preset type of service on the client;

[0035] Obtaining access response time of each of the plurality of preset type services;

[0036] A weighted operation is performed on the predicted probabilities and access response times of each of the plurality of preset types of services to obtain a predicted response time for the first registered user to choose to access the preset type of service on the client within the current preset time period.

[0037] On the other hand, the present application also proposes a service access processing device based on identity authentication, the device comprising:

[0038] A request receiving module, used to receive an access request and an identity authentication request for a target service sent by a client; wherein the access request includes a service identifier of the target service, and the identity authentication request includes identity information to be authenticated input in an identity authentication interface output by the client, and a table identifier stored by the client;

[0039] A request response module, used to respond to the access request and the identity authentication request at the same time, obtain the business configuration data of the target business, and perform authentication processing on the identity information to be authenticated based on the target identity information storage table corresponding to the table identifier;

[0040] The service configuration data feedback module is used to determine whether the identity authentication is qualified and to feed back the service configuration data to the client so that the client outputs the service operation interface of the target service based on the service configuration data.

[0041] In another aspect, the present application further provides a computer device, the computer device comprising:

[0042] Communication module;

[0043] A memory, used to store a program for implementing the above-mentioned service access processing method based on identity authentication;

[0044] The processor is used to load and execute the program stored in the memory to implement the above-mentioned service access processing method based on identity authentication.

[0045] On the other hand, the present application also proposes a computer-readable storage medium, characterized in that a plurality of computer instructions are stored thereon, and the computer instructions are loaded and executed by a processor to implement the above-mentioned business access processing method based on identity authentication.

[0046] It can be seen that the present application provides a business access processing method and device based on identity authentication. When a user is not logged in to an account and uses a client to access any preset type of business (recorded as a target business), an access request for the target business and an identity authentication request for the target business requester can be generated and sent to the background business server. The business server will respond to the received access request and identity authentication request at the same time, execute the access response task and the identity authentication task in parallel, obtain the business configuration data of the target business, and authenticate the requester based on the target identity information storage table and the identity information to be authenticated. After determining that the identity authentication is qualified, the obtained business configuration data is fed back to the client, so that the client can output the business operation interface of the target business based on the business configuration data, thereby meeting the business access needs of the requester and improving the business response efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0048] Figure 1 A flowchart of an optional example of a service access processing method based on identity authentication proposed in this application;

[0049] Figure 2 A flowchart of another optional example of the service access processing method based on identity authentication proposed in this application;

[0050] Figure 3 A flowchart of another optional example of the service access processing method based on identity authentication proposed in this application;

[0051] Figure 4 A schematic diagram of the structure of an optional example of a service access processing device based on identity authentication proposed in this application;

[0052] Figure 5 A schematic diagram of the structure of another optional example of the service access processing device based on identity authentication proposed in this application;

[0053] Figure 6 A schematic diagram of the hardware structure of an optional example of a computer device applicable to the service access processing method based on identity authentication proposed in this application;

[0054] Figure 7 The system structure diagram of an optional example applicable to the application environment of the business access processing method based on identity authentication proposed in this application. DETAILED DESCRIPTION

[0055] In response to the description in the background technology section, in order to reduce user waiting time, it is proposed that when a user triggers the operation entry mark of a certain service on the bank client (that is, a type of service that requires identity authentication before the user is allowed to operate), the identity authentication process and the business response process can be executed in parallel. In this way, when the identity authentication is passed, the client has obtained the relevant data of the business, and the client can quickly enter the business operation interface without waiting, thereby improving business response efficiency and user interaction experience.

[0056] Moreover, in order to improve the efficiency of identity recognition, it is proposed to associate the user's identity recognition information with the service response time and store it, and use the service response time as the basis for identity recognition information query. Therefore, when using the client to activate any one or more identity authentication methods such as fingerprint authentication, the response time of the user's use of the service in the client can be predicted by analyzing the user's operating behavior habits on the client and the user's basic attribute information, and it can be managed and stored with the corresponding identity recognition information to ensure the rationality of the storage and management of the identity recognition information and improve the efficiency of subsequent identity authentication.

[0057] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. It can be understood that the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0058] Reference Figure 1 , is a flowchart of an optional example of a service access processing method based on identity authentication proposed in this application, which can be executed by a computer device, such as a service server or a terminal device with certain data processing capabilities, such as Figure 1 As shown, the method may include:

[0059] Step S11, receiving an access request for a target service sent by a client, and an identity authentication request for a requester requesting access to the target service;

[0060] In actual applications, after the user opens the client and enters the operation homepage, he triggers any preset type of business (recorded as target business, such as transfer, account inquiry, financial management, etc.) output by the operation homepage. For example, when clicking the business identifier of the target business (such as the target business name, icon, etc.) and requesting to access the target business, since it belongs to the preset type of business that requires identity authentication to be accessed, the client will output an identity authentication interface to instruct the user to enter identity information, authenticate the user, obtain the identity information to be authenticated entered in the identity authentication interface, and generate a corresponding identity authentication request.

[0061] In combination with the above description of the technical solution of the present application, an identity information storage table will be pre-constructed to store the target identity information of each registered user using the bank client, such as fingerprint data, face image, voiceprint data and other at least one biometric data entered by each registered user using the client, which will be used as the target identity information representing the identity authentication standard of the registered user. The present application does not impose any restrictions on the type of target identity information and its entry implementation method.

[0062] Among them, the background business server configures a corresponding table identifier, such as a unique serial number, for each identity information storage table constructed, and sends the table identifier to the client used by the registered user corresponding to each target identity information contained in the identity information storage table for storage. In this way, before any user uses the client to access the business, after entering the identity information to be verified, the identity information to be verified and the table identifier stored by the client can be used to generate a corresponding identity authentication request, which is sent to the business server so that the business server can authenticate the user requesting to access the business accordingly.

[0063] It can be seen that the above-mentioned access request may include the business identifier of the target business, the client identifier, etc.; the identity authentication request may include the identity information to be authenticated entered in the identity authentication interface output by the client, and the table identifier stored by the client, etc. This application does not limit the generation method and content of the above-mentioned access request and identity authentication request, which may be determined according to the circumstances.

[0064] Step S12, responding to the access request and the identity authentication request at the same time, obtaining the business configuration data of the target business, and performing authentication processing on the identity information to be authenticated based on the target identity information storage table corresponding to the table identifier;

[0065] In order to improve the efficiency of business response, when a user accesses a preset type of business, this application will simultaneously execute two processing processes, business access and identity authentication, such as creating two processing threads to respond to the received access request and identity authentication request respectively. One thread can obtain the business configuration data of the target business, and the other thread can authenticate the user requesting access to the business. Since these two threads are processed in parallel, compared with the processing method of first completing identity authentication and then responding to the access request to obtain the business configuration data, it greatly saves business response time and improves business response efficiency.

[0066] It should be noted that the implementation process of how to respond to access requests, obtain the business configuration data of the target business, and respond to identity authentication requests, use the target identity information in the target identity information storage table, and perform legitimacy verification processing on the identity information to be authenticated are not described in detail in the embodiments of the present application and can be determined based on the business type and identity authentication method.

[0067] Step S13, determining that the identity authentication is qualified, and feeding back the service configuration data to the client, so that the client outputs the service operation interface of the target service based on the service configuration data.

[0068] According to the above method, the user who currently requests to access the target service is authenticated, and the user is determined to be a registered user of the client, that is, after the identity authentication is qualified, the service configuration data of the target service is fed back to the client, so that it outputs the service operation interface, that is, opens the target service. Of course, the service configuration data can also be fed back to the client, but the client temporarily prohibits responding to the service configuration data and will not output the service operation interface. It will respond to output the service operation interface only after receiving the corresponding identity authentication notification.

[0069] On the contrary, if the identity authentication of the user requesting the target service fails, the obtained service configuration data is prohibited from being fed back to the client. At this time, the authentication result of the failed identity authentication can be fed back to the client to prompt the user to re-enter the identity information for secondary identity authentication. The authentication process is similar and will not be described in detail in this embodiment. After so many identity authentications, the identity authentication of the user's identity information to be authenticated still fails, that is, the number of consecutive identity authentication failures reaches a preset number (such as three times, 5 times, etc.), the client account can be locked, and the user is prohibited from accessing various preset types of services of the client within a preset time. This application does not limit the processing method after the identity authentication fails, which can be determined according to the situation.

[0070] In summary, when the user is not logged in to the account and uses the client to access any preset type of business (recorded as the target business), an access request for the target business and an identity authentication request for the target business requester can be generated and sent to the background business server. The business server will respond to the received access request and identity authentication request at the same time, execute the access response task and the identity authentication task in parallel, obtain the business configuration data of the target business, and authenticate the requester based on the target identity information storage table and the identity information to be authenticated. After determining that the identity authentication is qualified, the obtained business configuration data is fed back to the client, so that the client can output the business operation interface of the target business based on the business configuration data, thereby meeting the business access needs of the requester and improving the business response efficiency.

[0071] Reference Figure 2 , which is a flow chart of another optional example of the service access processing method based on identity authentication proposed in this application, the method can still be executed by a computer device, and this embodiment can be an optional implementation of the service access processing method based on identity authentication proposed in the above embodiment, such as Figure 2 As shown, the method may include:

[0072] Step S21, receiving an access request for a target service sent by a client, and an identity authentication request for a requester requesting access to the target service;

[0073] Step S22, responding to the access request and obtaining service configuration data of the target service;

[0074] Step S23, when responding to the access request, responding to the identity authentication request at the same time, obtaining the identity information to be authenticated and the table identifier stored by the client;

[0075] Step S24, querying the target identity information storage table corresponding to the table identifier;

[0076] In an embodiment of the present application, the target identity information storage table may record the target identity information and predicted response time of multiple registered users; the target identity information may include target fingerprint features and / or target facial features, and may also include other biometric features, which may be determined according to the identity authentication method that is activated. The predicted response time may refer to the average response time of the corresponding registered user using the client to select access to each preset type of service, which may be determined based on a pre-trained response time prediction model. The present application does not limit the method for obtaining the predicted response time or the training method for the response time prediction model.

[0077] Among them, the storage space of each identity information storage table is limited, and the number of target identity information and predicted response times of registered users that can be stored is limited, but the number of registered users using the client may continue to increase. Therefore, when the registered user enters the target identity information, a separate table storage method can be used to achieve the storage of target identity information and predicted response time of all registered users, and configure a corresponding table identifier for each identity information storage table. The method for constructing the identity information storage table is not described in detail in the embodiment of this application.

[0078] Step S25, based on the target identity information recorded in the target identity information storage table, perform authentication processing on the identity information to be authenticated, obtain the corresponding identity authentication result, and record the authentication time spent in the authentication processing process;

[0079] Step S26, if the identity authentication result is authentication passed, determine whether the authentication time is less than the corresponding predicted response time;

[0080] Step S27, determining that the authentication time is less than the corresponding predicted response time, and feeding back the service configuration data to the client, so that the client outputs a service operation interface of the target service based on the service configuration data.

[0081] Since this application executes the two processing processes of business response and identity authentication in parallel, the time spent on identity authentication needs to be less than or equal to the business response time, so as to avoid directly feeding back business configuration information before the identity authentication is completed, thereby reducing the security of business access. Therefore, in order to reduce the data storage volume of the identity information storage table and improve the efficiency of target identity information query and identity authentication, as described above for the predicted response time, the response time of the user's choice to access the target business can be predicted, that is, the predicted response time, and during the identity authentication process, the time spent on the entire authentication process is counted and recorded as the authentication time.

[0082] In this way, the identity of the requester who requests access to the target business is authenticated, including authentication processing of the identity information to be authenticated and determination processing of whether the counted authentication time is less than the corresponding predicted response time. Therefore, qualified identity authentication includes successful matching of the identity information to be authenticated (i.e., authentication passed) and the authentication time is less than the corresponding predicted response time; unqualified identity authentication includes failure to match the identity information to be authenticated, and / or the authentication time is greater than or equal to the corresponding predicted response time. Regarding the matching processing method of the identity information to be authenticated and the target identity information, this application does not impose any restrictions. For example, a suitable similarity algorithm can be used for matching processing. If the obtained similarity reaches the preset similarity threshold, it can be considered that the authentication is passed; otherwise, the authentication of the identity information to be authenticated fails.

[0083] Reference Figure 3, which is a flowchart of another optional example of the service access processing method based on identity authentication proposed in this application. This embodiment can describe the acquisition and update process of the predicted response time contained in the above identity information storage table. In actual application, the predicted response time can be updated according to a preset time period. This application does not limit the duration of the preset time period. This application takes the update method of the predicted response time corresponding to any registered user (recorded as the first registered user) as an example to illustrate, such as Figure 3 As shown, the method may include but is not limited to:

[0084] Step S31, obtaining first historical operation data of a first registered user on a client, and first attribute information of the first registered user;

[0085] In the embodiment of the present application, the identity management module of the business server can collect the basic information of the registered user and the historical operation data of each preset type of business (the registered user can access the business without logging in to the account, but the identity authentication is required first) on the client. Exemplarily, the business list {Tran1, Tran2, .., TranN} of the preset type of business can be pre-identified, and the monthly (it can be recorded as a preset time period, but is not limited to one month) average number of visits (such as the number of transactions of the transaction type business) cnt, the monthly average business interaction volume (such as the average monthly transaction amount, etc.) amt, and the time interval between the last business visit period (such as the last transaction interval), that is, cnt, for each business on the business list of the first registered user are counted. Tran1 、amt Tran1 、period Tran1 、cnt Tran2 、amt Tran2 、period Tran2 、……、cnt TranN 、amt TranN 、period TranN Etc. This application does not elaborate on the statistical implementation methods of the above-mentioned operation data.

[0086] Optionally, the attribute information of a registered user may include but is not limited to basic information such as age, occupation, gender, and marital status. It can be determined through the information entered by the user when registering an account, or the attribute information of the registered user can be obtained through a third-party platform. This application does not limit the content and acquisition method of the attribute information, which can be determined depending on the circumstances.

[0087] Step S32, based on the pre-trained response time prediction model, the first historical operation data and the first attribute information are processed to obtain a predicted response time for the first registered user to select access to a preset type of service within a current preset time period;

[0088] Among them, the response time prediction model can be trained based on the decision tree algorithm. During the model training process, referring to the method for obtaining historical operation data and attribute information described above, the historical operation data generated by multiple registered users on the client and the attribute information of multiple registered users can be obtained. The implementation process will not be described in detail.

[0089] In addition, the present application can also collect the access response time of each preset type of service in the service list of the client, that is, the time between any registered user triggering the preset type of service and responding to the triggering operation to enter the service operation interface of the service. The present application does not limit its value. Afterwards, the access response time of each preset type of service that has been counted for multiple visits can be averaged to obtain the average access time of the corresponding preset type of service. The training sample set of the model is constructed by combining it with the above-mentioned historical operation data and attribute information, and the initial decision tree model is trained and learned to obtain a response time prediction model for predicting the response time of the registered user's choice of accessing the preset type of service using the client this time (recorded as the predicted response time, that is, the target value of the model training). The present application does not elaborate on the model training implementation process.

[0090] It can be understood that for the above-mentioned response time prediction model, the subsequent statistical response time can be used for carrying optimization to improve the prediction accuracy of the response time prediction model and improve the reliability and accuracy of identity authentication. The implementation process is not described in detail in the embodiments of this application.

[0091] Based on the above training description method of the response time prediction model, when the first registered user first activates the authentication function of the preset identity authentication method, the historical operation data and attribute information of the first registered user are obtained according to the above method, and are input into the response time prediction model for processing to obtain the predicted response time of the first registered user who chooses to access the preset type of service within the current preset time period. The prediction implementation process is not described in detail in this embodiment of the application.

[0092] Optionally, the implementation method of the above-mentioned step S32 may include but is not limited to: the present application may use a decision tree algorithm to analyze the first historical operation data and the first attribute information obtained within the current preset time period, determine the predicted probability of the first registered user choosing to access any preset type of service on the client, and after obtaining the access response time of each of the multiple preset type services, the predicted probability and access response time of each of the multiple preset type services may be weighted to obtain the predicted response time of the first registered user choosing to access the preset type service within the current preset time period.

[0093] It should be understood that since the historical operation data of the same registered user may change during different preset time periods, the predicted response time for selecting to access preset types of services obtained according to this prediction method may also change. Therefore, in order to ensure the reliability and accuracy of identity authentication, the predicted response time of each registered user can be periodically updated according to the above method. The implementation process will not be described in detail with examples.

[0094] Step S33, querying the identity information storage table constructed last time for the historical predicted response time corresponding to the target identity information of the first registered user;

[0095] Step S34, obtaining the response time difference between the currently obtained predicted response time and the historical predicted response time;

[0096] Step S35, determining that the response time difference is greater than the time threshold, constructing a new identity information storage table, and writing the target identity information of the first registered user and the currently obtained predicted response time into the new identity information storage table for associated storage;

[0097] Step S36, feeding back the table identifier of the new identity information storage table to the client of the first registered user for update and storage;

[0098] In some embodiments, the present application can directly write the predicted response time to the corresponding position in the identity information storage table, such as storing it in association with the target identity information of the corresponding registered user. The present application does not limit the data storage method recorded in the identity information storage table. Optionally, the target identity information and predicted response time of each of the multiple registered users recorded in any identity information storage table are stored in order of the predicted response time, but are not limited to this storage method.

[0099] In some other embodiments, any identity information storage table has a fixed total number of records, that is, the number of records of the target identity information and predicted response time of registered users. If the target identity information and predicted response time of a registered user are represented as a record row, the total number of records may refer to the total number of record rows, but is not limited to this.

[0100] Based on this, when the first registered user activates identity authentication (such as fingerprint authentication or face authentication, etc.), after obtaining the target identity information and predicted response time according to the above method, before storing them in the current identity information data table, if it is determined that the data content has been recorded in each position, it means that the number of data records in the current identity information data table has reached the total number of records, and it is necessary to rebuild an identity information data table, write the registered user's target identity information and predicted response time into the corresponding position in the new identity information data table for storage, and update the serial number of the new identity information data table to the client used by the registered user, so that when the registered user uses the client to access the preset type of service, the new identity information data table can be queried according to the table identifier for identity authentication.

[0101] In some other embodiments, in order to improve the accuracy of each predicted response time recorded in the identity information data table and improve the reliability of the identity authentication implemented thereby, the predicted response times recorded in the identity information data table can be periodically updated, such as updating according to a preset time period, that is, within each preset time period, the registered user who has enabled identity authentication can be re-obtained according to the response time prediction method described above for the current preset time period, and compared with the corresponding historical predicted response time obtained in the previous preset time period to determine whether the response time has changed significantly. If the above-mentioned response time difference is greater than the time threshold (the present application does not impose any restriction on its value), the target identity information of the registered user and the newly obtained predicted response time can be written into the newly constructed identity information storage table, but it is not limited to the update implementation method proposed in the present application.

[0102] In conjunction with the above description of the identity information storage table, in some embodiments, the identity information storage table construction implementation method may include but is not limited to the following steps:

[0103] Obtain the average access response time of multiple preset types of services, compare the multiple average access response times, and determine the maximum average access response time t max ; Based on the maximum average access response time t max , determine the total number of records in the identity information storage table to be constructed, so that the authentication search time for any target identity information in the identity information storage table is less than or equal to the maximum average access response time t max ; Afterwards, an identity information storage table with a blank record row of the total number of records can be constructed to store the target identity information and predicted response time of any registered user obtained within the current preset time period.

[0104] Step S37, determining that the response time difference between the currently obtained predicted response time and the historical predicted response time is greater than a time threshold, and configuring a to-be-deleted flag for the corresponding predicted response time in the current identity information storage table;

[0105] Step S38, counting the number of predicted response times to be deleted with a to-be-deleted flag in the identity information storage table;

[0106] Step S39, obtaining the ratio between the number of records to be deleted and the total number of records in the identity information storage table;

[0107] Step S310: If the ratio reaches the ratio threshold, the predicted response time and the corresponding target identity information in the identity information storage table that is not configured with a to-be-deleted flag are stored in a new identity information storage table.

[0108] In some other embodiments, the present application proposes that for the predicted response time recorded in any identity information storage table, if most of the number has been updated to the new identity information storage table, in order to save storage space, the remaining predicted response time that has not been updated can be updated to the corresponding new identity information storage table, such as by migration or synchronous update, which is not elaborated in the present application.

[0109] Based on this, for the predicted response time with a large response time change, a to-be-deleted flag can be configured for the predicted response time in the original identity information storage table, indicating that the predicted response time has been updated and can be directly deleted. If the number of predicted response times with to-be-deleted flags configured in an identity information storage table exceeds 80% of the total number of records (but not limited to this ratio threshold), the predicted response time in this identity information storage table that is not configured with a to-be-deleted flag can be moved according to the above method. Otherwise, monitoring can continue according to the above method.

[0110] It can be seen that this application stores the target identity information of registered users in separate tables based on the predicted response time of each registered user choosing to access the preset type of service on the client, which ensures the rationality of the identity information storage, and also helps to quickly and accurately find the required target identity information and predicted response time during identity authentication to complete the identity authentication process, thereby improving the efficiency and reliability of identity authentication, and further improving the response efficiency of the preset type of service.

[0111] Reference Figure 4 , is a schematic diagram of an optional example of a service access processing device based on identity authentication proposed in this application, such as Figure 4 As shown, the device may include:

[0112] The request receiving module 41 is used to receive the access request and identity authentication request for the target service sent by the client;

[0113] The access request includes the service identifier of the target service, and the identity authentication request includes the identity information to be authenticated input in the identity authentication interface output by the client, and the table identifier stored by the client.

[0114] A request response module 42, used to respond to the access request and the identity authentication request at the same time, obtain the business configuration data of the target business, and perform authentication processing on the identity information to be authenticated based on the target identity information storage table corresponding to the table identifier;

[0115] The service configuration data feedback module 43 is used to determine whether the identity authentication is qualified and feed back the service configuration data to the client, so that the client outputs the service operation interface of the target service based on the service configuration data.

[0116] Optionally, the target identity information storage table records the target identity information and predicted response time of each of the multiple registered users; the target identity information includes target fingerprint features and / or target face features, and the predicted response time refers to the average response time of the registered user using the client to select access to each preset type of service. Based on this, the request response module 42 may include:

[0117] A query unit, used for querying a target identity information storage table corresponding to the table identifier;

[0118] An authentication processing unit, configured to perform authentication processing on the identity information to be authenticated based on the target identity information recorded in the target identity information storage table, and obtain a corresponding identity authentication result;

[0119] A time recording unit, used to record the authentication time spent in the authentication process;

[0120] A first determining unit, configured to determine whether the authentication time is less than the corresponding predicted response time when the identity authentication result is authentication passed;

[0121] Based on this, the above-mentioned identity authentication is qualified including: the identity information to be authenticated is authenticated successfully, and the authentication time is less than the predicted response time.

[0122] Optionally, the predicted response time described above may be updated according to a preset time period, such as Figure 5 As shown, the above device may include:

[0123] The data acquisition module 44 is used to acquire first historical operation data of a first registered user on the client and first attribute information of the first registered user; the first registered user is any registered user among the multiple registered users;

[0124] The time prediction model 45 is used to process the first historical operation data and the first attribute information based on a pre-trained response time prediction model to obtain a predicted response time of the first registered user selecting to access the preset type of service on the client within the current preset time period; the response time prediction model is trained based on a decision tree algorithm;

[0125] A time query module 46, used to query the last constructed identity information storage table for the historical predicted response time corresponding to the target identity information of the first registered user;

[0126] A response time difference obtaining module 47 is used to obtain a response time difference between the currently obtained predicted response time and the historical predicted response time;

[0127] An updating storage module 48 is used to determine that the response time difference is greater than a time threshold, construct a new identity information storage table, and write the target identity information of the first registered user and the currently obtained predicted response time into the new identity information storage table for associated storage;

[0128] The table identifier update feedback module 49 is used to feed back the table identifier of the new identity information storage table to the client of the first registered user for update storage.

[0129] Optionally, when it is determined that the response time difference is greater than a time threshold, Figure 5 As shown, the above device may also include:

[0130] An identification configuration module 410 is used to configure a to-be-deleted flag for the predicted response time corresponding to the current identity information storage table;

[0131] A statistics module 411 is used to count the number of predicted response times to be deleted with the to-be-deleted flag in the same identity information storage table;

[0132] A ratio acquisition module 412 is used to acquire the ratio between the number of records to be deleted and the total number of records in the identity information storage table;

[0133] The migration module 413 is configured to store the predicted response time and the corresponding target identity information in the identity information storage table that is not configured with the to-be-deleted flag into the new identity information storage table if the ratio reaches the ratio threshold.

[0134] In some further embodiments, the above device may further include:

[0135] A construction module, used for constructing an identity information storage table;

[0136] Optionally, the building blocks may include:

[0137] An average access response time acquisition unit, used to acquire the average access response time of each of the plurality of preset types of services;

[0138] A comparison unit, configured to compare a plurality of the average access response times to determine a maximum average access response time;

[0139] A total record number determination unit, used to determine the total number of records in the identity information storage table to be constructed based on the maximum average access response time, so that the authentication search time for any target identity information in the identity information storage table is less than or equal to the maximum average access response time;

[0140] A construction unit is used to construct an identity information storage table with blank record rows of the total number of records, so as to store the target identity information and predicted response time of any registered user obtained within a current preset time period.

[0141] Wherein, the target identity information and predicted response time of each of the multiple registered users recorded in any identity information storage table are sorted according to the predicted response time.

[0142] In some further embodiments, the time prediction model 45 may include:

[0143] A prediction probability determination unit, configured to analyze the first historical operation data and the first attribute information acquired within the current preset time period to determine a prediction probability that the first registered user chooses to access any preset type of service on the client;

[0144] An access response time acquisition unit, used to acquire the access response time of each of the plurality of preset types of services;

[0145] A weighted operation unit is used to perform weighted operation on the predicted probability and access response time of each of the multiple preset types of services to obtain the predicted response time of the preset type of service selected by the first registered user to access the client within the current preset time period.

[0146] It should be noted that the various modules, units, etc. in the above-mentioned device embodiments can be stored in the memory as program modules, and the above-mentioned program modules stored in the memory can be executed by the processor to implement the corresponding functions, or they can be implemented by combining the program model and hardware. Regarding the functions implemented by each program module and its combination, as well as the technical effects achieved, please refer to the description of the corresponding parts of the above-mentioned method embodiments, which will not be repeated in this embodiment.

[0147] The embodiment of the present application also provides a computer-readable storage medium on which a computer program is stored. The computer program is loaded and executed by a processor to implement the steps of the above-mentioned identity authentication-based business access processing method. The specific implementation process can refer to the description of the corresponding part of the above-mentioned embodiment, which will not be repeated in this embodiment.

[0148] Reference Figure 6 As shown, it is a schematic diagram of the hardware structure of an optional example of a computer device applicable to the service access processing method based on identity authentication proposed in this application, such as Figure 6 As shown, the computer device may include but is not limited to: a communication module 61, a memory 62 and a processor 63, wherein:

[0149] The number of each of the communication module 61, the memory 62 and the processor 63 can be at least one, and the communication module 61, the memory 62 and the processor 63 can be connected to a communication bus, through which data interaction can be achieved between each other and between other structural components of the computer device. The specific details can be determined according to actual needs and will not be described in detail in this application.

[0150] The communication module 61 includes a communication module that can use a wireless communication network to realize data interaction, such as a WIFI module, a 5G / 6G (fifth generation mobile communication network / sixth generation mobile communication network) module, a GPRS module, etc. Figure 7 As shown in the system structure diagram, the computer device can communicate with the client of each registered user to meet the service access and identity authentication communication requirements. The implementation process is not described in detail in this application. It should be understood that the communication module 61 can also include a communication interface for realizing data interaction between the internal components of the computer device, such as a USB interface, a serial / parallel port, an I / O, etc. The specific content of the communication module 61 is not limited in this application.

[0151] The memory 62 can be used to store a program for implementing the business access processing method based on identity authentication described in the above-mentioned method embodiments; the processor 63 can load and execute the program stored in the memory to implement the various steps of the business access processing method based on identity authentication described in the above-mentioned corresponding method embodiments. The specific implementation process can refer to the description of the corresponding part of the above-mentioned embodiment and will not be repeated here.

[0152] In the embodiment of the present application, the memory 62 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device or other volatile solid-state storage device. The processor 63 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, etc.

[0153] It should be understood that Figure 6 The structure of the computer device shown does not constitute a limitation on the computer device in the embodiment of the present application. In practical applications, the computer device may include Figure 6 More components shown, or combinations of certain components, are not listed one by one in this application.

[0154] It should be noted that the business access processing method and device based on identity authentication provided by the present invention can be used in the fields of artificial intelligence, blockchain, Internet of Things, mobile Internet or finance. The above is only an example and does not limit the application field of the business access processing method and device based on identity authentication provided by the present invention.

[0155] In addition, with respect to the above embodiments, unless the context clearly indicates an exception, the words "a", "an", "a kind" and / or "the" do not specifically refer to the singular, but may also include the plural. Generally speaking, the terms "include" and "comprise" only indicate the inclusion of clearly identified steps and elements, and these steps and elements do not constitute an exclusive list, and the method or device may also include other steps or elements. The elements defined by the sentence "includes a..." do not exclude the existence of other identical elements in the process, method, commodity or device that includes the elements.

[0156] In the description of the embodiments of the present application, unless otherwise specified, " / " means or, for example, A / B can mean A or B; "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, in the description of the embodiments of the present application, "multiple" means two or more than two.

[0157] The terms such as "first", "second", etc. used in this application are only used for descriptive purposes to distinguish one operation, unit or module from another operation, unit or module, and do not necessarily require or imply any actual relationship or order between these units, operations or modules. They cannot be understood as indicating or implying relative importance or implicitly indicating the number of indicated technical features. Therefore, the features defined as "first" or "second" may explicitly or implicitly include one or more of the features.

[0158] In this specification, each embodiment is described in a progressive or parallel manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the devices, computer equipment, systems, and storage media disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the description is relatively simple, and the relevant parts can be referred to the method part.

[0159] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design preconditions of the technical solution. Professional and technical personnel may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0160] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the core idea or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A service access processing method based on identity authentication, characterized in that: The method comprises: Receive an access request for a target service sent by a client, and an identity authentication request for a requestor requesting access to the target service; wherein the target service is any preset type of service, the access request includes a service identifier of the target service, and the identity authentication request includes identity information to be authenticated input in an identity authentication interface output by the client, and a table identifier stored by the client; Responding to the access request and the identity authentication request at the same time, executing the access response task and the identity authentication task in parallel, acquiring the business configuration data of the target business, and authenticating the identity information to be authenticated based on the target identity information storage table corresponding to the table identifier; It is determined that the identity authentication is qualified, and the service configuration data is fed back to the client, so that the client outputs the service operation interface of the target service based on the service configuration data.

2. The method according to claim 1, characterized in that The target identity information storage table records the target identity information and predicted response time of each of the multiple registered users; the target identity information includes target fingerprint features and / or target face features, and the predicted response time refers to the average response time corresponding to the registered user using the client to select access to each preset type of service; The performing authentication processing on the identity information to be authenticated based on the target identity information storage table corresponding to the table identifier includes: Query the target identity information storage table corresponding to the table identifier; Based on the target identity information recorded in the target identity information storage table, the identity information to be authenticated is authenticated to obtain a corresponding identity authentication result, and the authentication time spent in the authentication process is recorded; If the identity authentication result is authentication passed, determining whether the authentication time is less than the corresponding predicted response time; The qualified identity authentication includes: the identity information to be authenticated is authenticated, and the authentication time is less than the predicted response time.

3. The method according to claim 2, characterized in that The predicted response time is updated according to a preset time period, including: Acquire first historical operation data of a first registered user on the client and first attribute information of the first registered user; the first registered user is any registered user among the multiple registered users; Based on a pre-trained response time prediction model, the first historical operation data and the first attribute information are processed to obtain a predicted response time of the first registered user selecting to access the preset type of service on the client within the current preset time period; the response time prediction model is trained based on a decision tree algorithm; Querying the last constructed identity information storage table for the historical predicted response time corresponding to the target identity information of the first registered user; Obtaining a response time difference between the currently obtained predicted response time and the historical predicted response time; Determine that the response time difference is greater than a time threshold, construct a new identity information storage table, and write the target identity information of the first registered user and the currently obtained predicted response time into the new identity information storage table for associated storage; The table identifier of the new identity information storage table is fed back to the client of the first registered user for update and storage.

4. The method according to claim 3, characterized in that In the case where it is determined that the response time difference is greater than a time threshold, the method further includes: Setting a to-be-deleted flag for the predicted response time corresponding to the current identity information storage table; Counting the number of predicted response times to be deleted with the to-be-deleted flag in the same identity information storage table; Obtaining the ratio between the number of records to be deleted and the total number of records in the identity information storage table; If the ratio reaches the ratio threshold, the predicted response time and the corresponding target identity information that are not configured with the to-be-deleted mark in the identity information storage table are stored in the new identity information storage table.

5. The method according to claim 4, characterized in that The method for constructing any of the identity information storage tables comprises: Obtaining an average access response time of each of a plurality of services of the preset type; Comparing a plurality of the average access response times to determine a maximum average access response time; Based on the maximum average access response time, determining the total number of records in the identity information storage table to be constructed, so that the authentication search time for any target identity information in the identity information storage table is less than or equal to the maximum average access response time; An identity information storage table having blank record rows of the total number of records is constructed to store the target identity information and predicted response time of any of the registered users obtained within the current preset time period.

6. The method according to any one of claims 1 to 5, characterized in that: The target identity information and predicted response time of each of the multiple registered users recorded in any identity information storage table are sorted according to the predicted response time.

7. The method according to claim 3, characterized in that The pre-trained response time prediction model processes the first historical operation data and the first attribute information to obtain a predicted response time for the first registered user to select access to the preset type of service on the client within the current preset time period, including: Analyze the first historical operation data and the first attribute information acquired within the current preset time period to determine a predicted probability that the first registered user chooses to access any preset type of service on the client; Obtaining access response time of each of the plurality of preset type services; A weighted operation is performed on the predicted probabilities and access response times of the plurality of preset types of services to obtain a predicted response time for the first registered user to choose to access the preset type of service on the client within the current preset time period.

8. A service access processing device based on identity authentication, characterized in that: The device comprises: A request receiving module, configured to receive an access request and an identity authentication request for a target service sent by a client; wherein the access request includes a service identifier of the target service, and the identity authentication request includes identity information to be authenticated input in an identity authentication interface output by the client, and a table identifier stored by the client; A request response module, used to respond to the access request and the identity authentication request at the same time, execute the access response task and the identity authentication task in parallel, obtain the business configuration data of the target business, and perform authentication processing on the identity information to be authenticated based on the target identity information storage table corresponding to the table identifier; The service configuration data feedback module is used to determine whether the identity authentication is qualified and to feed back the service configuration data to the client so that the client outputs the service operation interface of the target service based on the service configuration data.

9. A computer device, characterized in that: The computer device comprises: Communication module; A memory, used to store a program for implementing the service access processing method based on identity authentication as described in any one of claims 1 to 7; A processor is used to load and execute the program stored in the memory to implement the service access processing method based on identity authentication as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: A plurality of computer instructions are stored thereon, and the computer instructions are loaded and executed by a processor to implement the service access processing method based on identity authentication as described in any one of claims 1 to 7.

Images