A security authentication method, device, equipment and storage medium

Abstract

The present application discloses a security authentication method, apparatus, device and storage medium, which obtains the user's first number and second number, the third number corresponding to the target terminal, the device identification code corresponding to the target terminal and the current base station corresponding to the target terminal by responding to the user's request instruction for security authentication at the target terminal; based on the first number, the second number and the third number, the user is subjected to target authentication and it is determined whether the user has passed the target authentication; when the user passes the target authentication, the reserved device identification code corresponding to the first number and each resident base station corresponding to the first number are obtained according to the first number; the analysis result is obtained according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each resident base station; if the analysis result meets the preset conditions, the security authentication is successful. This scheme can improve the accuracy of security authentication, and is also beneficial to the security of user personal information.

Description

Technical Field

[0001] The present application relates to the field of Internet technology, and in particular to a security authentication method, apparatus, device and storage medium. Background Art

[0002] Password-free authentication is an authentication method used by operators based on mobile traffic networks. Its principle is to identify the user's account information, such as the user's mobile phone number, etc., when the user accesses the operator's network gateway, and encrypt the information and transparently transmit it to the operator's authentication system via HTTP / HTTPS. The operator's authentication system performs security authentication on the user through the user's account information to ensure the security of the user's personal information.

[0003] However, this security authentication method only uses relatively little information such as the user's mobile phone number to authenticate the user, which has low confidentiality and is not conducive to the security of the user's personal information. Summary of the invention

[0004] In view of this, the present application provides a security authentication method, apparatus, device and storage medium, which are used to solve the problem that the existing security authentication method only uses less information such as the user's mobile phone number to authenticate the user, which has low confidentiality and is not conducive to the security of the user's personal information.

[0005] To achieve the above objectives, the proposed solution is as follows:

[0006] In a first aspect, a security authentication method includes:

[0007] In response to a request instruction from a user to perform security authentication at a target terminal, obtaining a first number and a second number of the user, a third number corresponding to the target terminal, a device identification code corresponding to the target terminal, and a current base station corresponding to the target terminal;

[0008] Based on the first number, the second number and the third number, target authentication is performed on the user and whether the user passes the target authentication;

[0009] When the user passes the target authentication, obtaining, according to the first number, a reserved device identification code corresponding to the first number and each resident base station corresponding to the first number;

[0010] Obtaining an analysis result according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each permanent base station;

[0011] If the analysis result meets the preset conditions, the security authentication is successful.

[0012] Preferably, the performing target authentication on the user based on the first number, the second number and the third number and determining whether the user passes the target authentication includes:

[0013] respectively determining whether the first number and the second number are the same as the third number;

[0014] If at least one of the first number and the second number is the same as the third number, the user target authentication is successful.

[0015] Preferably, the acquiring, according to the first number, a reserved device identification code corresponding to the first number and each resident base station corresponding to the first number includes:

[0016] Based on the first number, determining a target verification code corresponding to the first number;

[0017] Using the target verification code as a request parameter;

[0018] The request parameter is used to send a request instruction to the established label library, so that the label library returns the reserved device identification code corresponding to the first number and each resident base station corresponding to the first number.

[0019] Preferably, obtaining the analysis result according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each resident base station includes:

[0020] Comparing the device identification code corresponding to the target terminal with the reserved device identification code corresponding to the first number to obtain a first comparison result;

[0021] Compare the current base station corresponding to the target terminal with each resident base station corresponding to the first number to obtain a second comparison result;

[0022] Comprehensively analyze the first comparison result and the second comparison result to obtain an analysis result.

[0023] Preferably, the comparing the current base station corresponding to the target terminal with each resident base station corresponding to the first number to obtain a second comparison result includes:

[0024] If the current base station is the same as one of the permanent base stations, comparison success information is obtained, and the comparison success information is used as the second comparison result;

[0025] If the current base station is different from each of the permanent base stations, a first distance is obtained based on the current base station and each of the permanent base stations, and the first distance is used as the second comparison result.

[0026] Preferably, obtaining the first distance based on the current base station and each of the permanent base stations includes:

[0027] Determine, from each of the permanent base stations, a target base station that is closest to the current base station;

[0028] A distance difference between the current base station and the target base station is calculated, and the distance difference is used as a first distance.

[0029] Preferably, the comprehensive analysis of the first comparison result and the second comparison result to obtain the analysis result includes:

[0030] Based on a preset result evaluation standard, the first comparison result and the second comparison result are respectively evaluated to obtain a first score for the first comparison result and a second score for the second comparison result;

[0031] The first score and the second score are added together to obtain a total score, and the total score is used as the analysis result.

[0032] In a second aspect, a security authentication device includes:

[0033] A first acquisition module, configured to obtain, in response to a request instruction from a user for security authentication at a target terminal, a first number and a second number of the user, a third number corresponding to the target terminal, a device identification code corresponding to the target terminal, and a current base station corresponding to the target terminal;

[0034] A target authentication module, used to perform target authentication on the user based on the first number, the second number and the third number and determine whether the user has passed the target authentication;

[0035] A second acquisition module is used to acquire, according to the first number, a reserved device identification code corresponding to the first number and each resident base station corresponding to the first number when the user passes the target authentication;

[0036] An analysis result obtaining module, used to obtain an analysis result according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each resident base station;

[0037] The security authentication success module is used to determine if the analysis result meets the preset conditions, indicating that the security authentication is successful.

[0038] In a third aspect, a security authentication device includes a memory and a processor;

[0039] The memory is used to store programs;

[0040] The processor is used to execute the program to implement the various steps of the security authentication method as described in the first aspect.

[0041] In a fourth aspect, a storage medium stores a computer program thereon, and when the computer program is executed by a processor, the various steps of the security authentication method as described in the first aspect are implemented.

[0042] It can be seen from the above technical scheme that the present application obtains the first number and the second number of the user, the third number corresponding to the target terminal, the device identification code corresponding to the target terminal, and the current base station corresponding to the target terminal by responding to the user's request instruction for security authentication at the target terminal; based on the first number, the second number and the third number, the user is subjected to target authentication and it is determined whether the user has passed the target authentication; when the user passes the target authentication, the reserved device identification code corresponding to the first number and each resident base station corresponding to the first number are obtained according to the first number; the analysis result is obtained according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each resident base station; if the analysis result meets the preset conditions, the security authentication is successful. The scheme verifies the user in multiple links by obtaining the user's first number, the second number and the third number corresponding to the target terminal, the device identification code and the base station, etc., so as to improve the accuracy of security authentication and also facilitate the security of the user's personal information. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0044] Figure 1 An optional flow chart of a security authentication method provided in an embodiment of the present application;

[0045] Figure 2 An optional flow chart of another security authentication method provided in an embodiment of the present application;

[0046] Figure 3 A schematic diagram of the structure of a security authentication device provided in an embodiment of the present application;

[0047] Figure 4 A schematic diagram of the structure of a security authentication device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0048] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0049] Password-free authentication is an authentication method used by operators based on mobile traffic networks. Its principle is to identify the user's account information, such as the user's mobile phone number, etc., when the user accesses the operator's network gateway, and encrypt the information and transparently transmit it to the operator's authentication system via HTTP / HTTPS. The operator's authentication system performs security authentication on the user through the user's account information to ensure the security of the user's personal information.

[0050] However, this security authentication method only uses relatively little information such as the user's mobile phone number to authenticate the user, which has low confidentiality and is not conducive to the security of the user's personal information.

[0051] Based on the above defects, an embodiment of the present invention provides a security authentication method. The present invention can be applied to various computer terminals or smart terminals. The execution subject can be a processor or server of the computer terminal or smart terminal. The method flow chart of the method is as follows: Figure 1 As shown, specifically including:

[0052] S1: In response to a user's request instruction for security authentication at a target terminal, obtain the user's first number and second number, a third number corresponding to the target terminal, a device identification code corresponding to the target terminal, and a current base station corresponding to the target terminal.

[0053] In the present application, the target terminal may be a user terminal, such as a mobile phone, tablet, computer or other terminal device.

[0054] Optionally, in one example, the user switches to data traffic on a mobile phone terminal and requests to log in to a certain software on the terminal interface. After the server or mobile phone terminal receives the request instruction sent by the user, it enters a first number, such as a mobile phone number, on the mobile terminal interface; at the same time, the second number saved by the user in the target terminal in advance, as well as the third number corresponding to the target terminal, the device identification code and the current base station are obtained, and the user is securely authenticated by obtaining this information.

[0055] In addition, the target terminal needs the user to open the data network when acquiring the user's first number and second number, but does not need to open the data network when acquiring the reserved device identification code corresponding to the first number and each resident base station. Therefore, the switching time between WIFI and data can be reduced, more information can be obtained faster, and the user's time can be saved.

[0056] S2: Based on the first number, the second number and the third number, target authentication is performed on the user and it is determined whether the user has passed the target authentication.

[0057] The process of target authentication based on the first number, the second number, and the third number may include:

[0058] The first number can be a mobile phone number input by the user, the second number can be a mobile phone number reserved by the user in the target terminal, and the first number and the second number can be the same or different. The third number can be compared with the first number and the second number respectively, that is, the user identity of the first number and the second number can be obtained. If the user identity of the two numbers coincides with the user identity of the third number, the comparison is successful and the user target authentication is passed.

[0059] S3: When the user passes the target authentication, the reserved device identification code corresponding to the first number and each resident base station corresponding to the first number are obtained according to the first number.

[0060] If the user passes the target authentication, it means that the security authentication has passed. However, it is not accurate to determine that the security authentication has passed only if the target authentication has passed. Therefore, multiple authentications are required to ensure the accuracy of the authentication, which is also beneficial to the security of user information.

[0061] Therefore, in this step, the reserved device identification code (IMEI) corresponding to the first number in the target terminal is obtained. The device identification code can represent the model of the target terminal, such as "XX mobile phone 13th generation", "XXX tablet S7", etc., or the production number of the device, such as "1234567", etc., which is not limited in this embodiment. At the same time, each resident base station corresponding to the first number is obtained. The base station is a public mobile communication base station, which is an interface device for mobile devices to access the Internet. It is also a form of radio station, which refers to a radio transceiver station that transmits information between mobile phone terminals through a mobile communication exchange center in a certain radio coverage area. It can be understood that users will have needs for work, home and business trips, so the user's resident base station may not be only one, that is, there may be one or more base stations corresponding to the same target terminal, and the base stations corresponding to target terminals in different areas are different.

[0062] S4: Obtain analysis results according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each permanent base station.

[0063] S5: If the analysis result meets the preset conditions, the security authentication is successful.

[0064] Based on the above steps, the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each permanent base station are obtained, and the analysis result is obtained based on this information. If the analysis result meets the preset conditions, the security authentication is successful.

[0065] It can be seen from the above technical scheme that the present application obtains the first number and the second number of the user, the third number corresponding to the target terminal, the device identification code corresponding to the target terminal, and the current base station corresponding to the target terminal by responding to the user's request instruction for security authentication at the target terminal; based on the first number, the second number and the third number, the user is subjected to target authentication and it is determined whether the user has passed the target authentication; when the user passes the target authentication, the reserved device identification code corresponding to the first number and each resident base station corresponding to the first number are obtained according to the first number; the analysis result is obtained according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each resident base station; if the analysis result meets the preset conditions, the security authentication is successful. The scheme verifies the user in multiple links by obtaining the user's first number, the second number and the third number corresponding to the target terminal, the device identification code and the base station, etc., so as to improve the accuracy of security authentication and also facilitate the security of the user's personal information.

[0066] In the method provided in the embodiment of the present invention, the specific description of performing target authentication on the user and determining whether the user passes the target authentication based on the first number, the second number and the third number is as follows:

[0067] Before target authentication, the user will enter the risk control link, which is divided into tangible verification and non-tangible verification. In the tangible verification link, a window pops up on the target terminal interface for the user to enter the first number; in the non-tangible verification link, the terminal background obtains the user's second number. The second number can be the number bound to the account used by the user to log in, or it can be the user's personal mobile phone number pre-stored in the terminal.

[0068] Next, it is determined whether the first number and the second number are the same as the third number. If at least one of the first number and the second number is the same as the third number, the user target authentication is passed.

[0069] The above embodiment describes how to perform target authentication on the user and determine whether the user has passed the target authentication based on the first number, the second number and the third number in this application. The following describes in detail how to obtain the reserved device identification code corresponding to the first number and the various permanent base stations corresponding to the first number based on the first number in this application.

[0070] S31: Based on the first number, determine a target verification code corresponding to the first number.

[0071] In one example, the first number is a mobile phone number entered by the user, such as "11122223333", then the target verification code corresponding to the mobile phone number can be the last four digits of the mobile phone number, that is, "3333", or the middle four digits, that is, "2222", or a special number evolved from the mobile phone number. This embodiment is not limited to this.

[0072] S32: Use the target verification code as a request parameter.

[0073] In this step, the target verification code is used as a request parameter, and the above example in which the target verification code is the last four digits of the mobile phone number is used, that is, the request parameter is "3333".

[0074] S33: Sending a request instruction to the established label library using the request parameter, so that the label library returns the reserved device identification code corresponding to the first number and each resident base station corresponding to the first number.

[0075] Specifically, the first number corresponds to a unique request parameter, and the label library stores reserved device identification codes and permanent base stations corresponding to various parameters. Therefore, by sending a request instruction with the determined request parameters to the established label library, the reserved device identification code corresponding to the first number and the permanent base stations corresponding to the first number can be obtained.

[0076] Optionally, the reserved device identification code corresponding to the second number and each permanent base station corresponding to the second number may also be obtained according to the second number. It is understandable that after the user target authentication is passed, the reserved device identification code and each permanent base station obtained using the first number are the same as the reserved device identification code and each permanent base station obtained using the second number.

[0077] In one embodiment provided in the present application, in step S4, according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each resident base station, the process of obtaining the analysis result may include:

[0078] S41: Compare the device identification code corresponding to the target terminal with the reserved device identification code corresponding to the first number to obtain a first comparison result.

[0079] The device identification code comparison process can be: determine whether the device identification code corresponding to the target terminal is the same as the reserved device identification code corresponding to the first number. If they are the same, the first comparison result is "comparison successful"; if the device identification code corresponding to the target terminal is not the same as the reserved device identification code corresponding to the first number, the first comparison result is "comparison failed", and it can be determined that the security authentication has failed.

[0080] S42: Compare the current base station corresponding to the target terminal with each permanent base station corresponding to the first number to obtain a second comparison result.

[0081] This step may include the following processes:

[0082] If the current base station is the same as one of the permanent base stations, comparison success information is obtained and the comparison success information is used as the second comparison result. At the same time, it can also be considered that the security authentication is successful at this time.

[0083] If the current base station is different from each of the permanent base stations, a first distance is obtained based on the current base station and each of the permanent base stations, and the first distance is used as the second comparison result.

[0084] The first distance obtaining process may include:

[0085] A target base station that is closest to the current base station is determined from each of the permanent base stations, and then a distance difference between the current base station and the target base station is calculated, and the distance difference is used as the first distance.

[0086] S43: Comprehensively analyzing the first comparison result and the second comparison result to obtain an analysis result.

[0087] S431: The first comparison result and the second comparison result may be judged based on a preset result judging standard to obtain a first score for the first comparison result and a second score for the second comparison result.

[0088] Optionally, if the first comparison result is "comparison successful", the first score of the first comparison result is full marks; if the first comparison result is "comparison failed", the first score of the first comparison result is zero.

[0089] If, in the second comparison result, the first distance is less than the first preset threshold, the first score of the second result is relatively high; if the first distance is greater than the first preset threshold, the first score of the second result is relatively low.

[0090] S432: Add the first score and the second score to obtain a total score, and use the total score as the analysis result.

[0091] After obtaining the analysis result, it can be determined whether the user has successfully completed the security authentication according to the analysis result. If the total score is lower than the second preset threshold, it can be determined that the security authentication has failed, and if the total score is higher than the second preset threshold, it can be determined that the security authentication has succeeded.

[0092] In the above technical solution, the present application increases the security of user personal information by increasing the comparison of device identification code and base station information, and prevents the problem of inaccurate security authentication caused by WIFI hotspot serial number, etc. The security authentication process provided by the present application can also be as follows Figure 2 shown.

[0093] The security authentication method provided in this application can be applied to the risk control business of the financial industry. It provides protection against account theft through the security authentication process, ensuring that users avoid financial losses due to account privacy leakage or phishing attacks. It can also be applied to online transactions through electronic payment channels. The identity of the user is confirmed through the security authentication process to ensure the security of the transaction. In online activities such as point gift redemption, multi-dimensional authentication can be achieved through the security authentication process provided by this method to safeguard the interests of users.

[0094] and Figure 1 Corresponding to the method described above, the embodiment of the present invention further provides a security authentication device for Figure 1 In the specific implementation of the method, the security authentication device provided by the embodiment of the present invention can be used in a computer terminal or various mobile devices, combined with Figure 3 , introduce the security authentication device, such as Figure 3 As shown, the device may include:

[0095] The first acquisition module 10 is used to respond to a request instruction from a user to perform security authentication at a target terminal, and obtain the first number and the second number of the user, the third number corresponding to the target terminal, the device identification code corresponding to the target terminal, and the current base station corresponding to the target terminal.

[0096] The target authentication module 20 is used to perform target authentication on the user based on the first number, the second number and the third number and determine whether the user has passed the target authentication.

[0097] The second acquisition module 30 is used to acquire, according to the first number, a reserved device identification code corresponding to the first number and each permanent base station corresponding to the first number when the user passes the target authentication.

[0098] The analysis result obtaining module 40 is used to obtain the analysis result according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each permanent base station.

[0099] The security authentication success module 50 is used to determine that the security authentication is successful if the analysis result meets a preset condition.

[0100] It can be seen from the above technical scheme that the present application obtains the first number and the second number of the user, the third number corresponding to the target terminal, the device identification code corresponding to the target terminal, and the current base station corresponding to the target terminal by responding to the user's request instruction for security authentication at the target terminal; based on the first number, the second number and the third number, the user is subjected to target authentication and it is determined whether the user has passed the target authentication; when the user passes the target authentication, the reserved device identification code corresponding to the first number and each resident base station corresponding to the first number are obtained according to the first number; the analysis result is obtained according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each resident base station; if the analysis result meets the preset conditions, the security authentication is successful. The scheme verifies the user in multiple links by obtaining the user's first number, the second number and the third number corresponding to the target terminal, the device identification code and the base station, etc., so as to improve the accuracy of security authentication and also facilitate the security of the user's personal information.

[0101] In one example, the target authentication module 20 may include:

[0102] The judging module is used to judge whether the first number and the second number are the same as the third number.

[0103] The target authentication passing module is used for passing the user target authentication if at least one of the first number and the second number is the same as the third number.

[0104] In one example, the second acquisition module 30 may include:

[0105] The target verification code determination module is used to determine a target verification code corresponding to the first number based on the first number.

[0106] The parameter request determination module is used to use the target verification code as a request parameter.

[0107] The request module is used to send a request instruction to the established label library using the request parameter, so that the label library returns the reserved device identification code corresponding to the first number and each resident base station corresponding to the first number.

[0108] In one example, the analysis result obtaining module 40 may include:

[0109] The first comparison module is used to compare the device identification code corresponding to the target terminal with the reserved device identification code corresponding to the first number to obtain a first comparison result.

[0110] The second comparison module is used to compare the current base station corresponding to the target terminal with each permanent base station corresponding to the first number to obtain a second comparison result.

[0111] The analysis module is used to comprehensively analyze the first comparison result and the second comparison result to obtain an analysis result.

[0112] In one example, the second comparison module may include:

[0113] The comparison success module is used to obtain comparison success information if the current base station is the same as one of the permanent base stations, and use the comparison success information as the second comparison result.

[0114] The first distance obtaining module is used to obtain a first distance based on the current base station and each of the permanent base stations if the current base station is different from each of the permanent base stations, and use the first distance as a second comparison result.

[0115] In one example, the first distance obtaining module may include:

[0116] The target base station determination module is used to determine the target base station that is closest to the current base station from each of the permanent base stations.

[0117] The distance difference calculation module is used to calculate the distance difference between the current base station and the target base station, and use the distance difference as the first distance.

[0118] In one example, the analysis module may include:

[0119] The judging module is used to judge the first comparison result and the second comparison result respectively based on a preset result judging standard to obtain a first score for the first comparison result and a second score for the second comparison result.

[0120] The adding module is used to add the first score and the second score to obtain a total score, and use the total score as the analysis result.

[0121] Furthermore, the embodiment of the present application provides a security authentication device. Optionally, Figure 4 The hardware structure diagram of the security authentication device is shown in FIG. Figure 4 The hardware structure of the security authentication device may include: at least one processor 01, at least one communication interface 02, at least one memory 03 and at least one communication bus 04.

[0122] In the embodiment of the present application, the number of the processor 01 , the communication interface 02 , the memory 03 , and the communication bus 04 is at least one, and the processor 01 , the communication interface 02 , and the memory 03 communicate with each other through the communication bus 04 .

[0123] The processor 01 may be a central processing unit (CPU), or an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention.

[0124] The memory 03 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), etc., such as at least one disk memory.

[0125] The memory stores a program, and the processor can call the program stored in the memory, and the program is used to execute the following security authentication method, including:

[0126] In response to a request instruction from a user to perform security authentication at a target terminal, obtaining a first number and a second number of the user, a third number corresponding to the target terminal, a device identification code corresponding to the target terminal, and a current base station corresponding to the target terminal;

[0127] Based on the first number, the second number and the third number, target authentication is performed on the user and whether the user passes the target authentication;

[0128] When the user passes the target authentication, obtaining, according to the first number, a reserved device identification code corresponding to the first number and each resident base station corresponding to the first number;

[0129] Obtaining an analysis result according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each permanent base station;

[0130] If the analysis result meets the preset conditions, the security authentication is successful.

[0131] Optionally, the detailed functions and extended functions of the program may refer to the description of the security authentication method in the method embodiment.

[0132] The embodiment of the present application further provides a storage medium, which may store a program suitable for execution by a processor, and when the program is running, controls the device where the storage medium is located to execute the following security authentication method, including:

[0133] In response to a request instruction from a user to perform security authentication at a target terminal, obtaining a first number and a second number of the user, a third number corresponding to the target terminal, a device identification code corresponding to the target terminal, and a current base station corresponding to the target terminal;

[0134] Based on the first number, the second number and the third number, target authentication is performed on the user and whether the user passes the target authentication;

[0135] When the user passes the target authentication, obtaining, according to the first number, a reserved device identification code corresponding to the first number and each resident base station corresponding to the first number;

[0136] Obtaining an analysis result according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each permanent base station;

[0137] If the analysis result meets the preset conditions, the security authentication is successful.

[0138] Specifically, the storage medium may be a computer-readable storage medium, and the computer-readable storage medium may be an electronic memory such as a flash memory, an EEPROM (Electrically Erasable Programmable Read-Only Memory), an EPROM, a hard disk or a ROM.

[0139] Optionally, the detailed functions and extended functions of the program may refer to the description of the security authentication method in the method embodiment.

[0140] In addition, the functional modules in the various embodiments of the present disclosure can be integrated together to form an independent part, or each module can exist separately, or two or more modules can be integrated to form an independent part. If the function is implemented in the form of a software functional module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present disclosure is essentially or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes a number of instructions for a computer device (which can be a personal computer, a live broadcast device, or a network device, etc.) to perform all or part of the steps of the methods of the various embodiments of the present disclosure.

[0141] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0142] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0143] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A security authentication method, characterized in that: include: In response to a request instruction from a user for security authentication at a target terminal, obtaining a first number and a second number of the user, a third number corresponding to the target terminal, a device identification code corresponding to the target terminal, and a current base station corresponding to the target terminal; wherein the first number is a mobile phone number input by the user at the target terminal, the second number is a mobile phone number reserved by the user at the target terminal, and the first number is the same as or different from the second number; Based on the first number, the second number and the third number, target authentication is performed on the user and whether the user passes the target authentication; When the user passes the target authentication, obtaining, according to the first number, a reserved device identification code corresponding to the first number and each resident base station corresponding to the first number; Obtaining an analysis result according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each permanent base station; including: comparing the device identification code corresponding to the target terminal with the reserved device identification code corresponding to the first number to obtain a first comparison result; if the current base station is the same as one of the permanent base stations, obtaining comparison success information, and using the comparison success information as a second comparison result; if the current base station is different from each of the permanent base stations, obtaining a first distance based on the current base station and each of the permanent base stations, and using the first distance as a second comparison result; comprehensively analyzing the first comparison result and the second comparison result to obtain an analysis result; If the analysis result meets the preset conditions, the security authentication is successful.

2. The method according to claim 1, characterized in that The performing target authentication on the user based on the first number, the second number and the third number and determining whether the user passes the target authentication includes: respectively determining whether the first number and the second number are the same as the third number; If at least one of the first number and the second number is the same as the third number, the user target authentication is successful.

3. The method according to claim 1, characterized in that The acquiring, according to the first number, a reserved device identification code corresponding to the first number and each resident base station corresponding to the first number includes: Based on the first number, determining a target verification code corresponding to the first number; Using the target verification code as a request parameter; The request parameter is used to send a request instruction to the established label library, so that the label library returns the reserved device identification code corresponding to the first number and each resident base station corresponding to the first number.

4. The method according to claim 1, characterized in that The obtaining a first distance based on the current base station and each of the permanent base stations includes: Determine, from each of the permanent base stations, a target base station that is closest to the current base station; A distance difference between the current base station and the target base station is calculated, and the distance difference is used as a first distance.

5. The method according to claim 1, characterized in that The comprehensive analysis of the first comparison result and the second comparison result to obtain the analysis result includes: Based on a preset result evaluation standard, the first comparison result and the second comparison result are respectively evaluated to obtain a first score for the first comparison result and a second score for the second comparison result; The first score and the second score are added together to obtain a total score, and the total score is used as the analysis result.

6. A security authentication device, characterized in that: include: A first acquisition module, configured to, in response to a request instruction from a user for security authentication at a target terminal, acquire a first number and a second number of the user, a third number corresponding to the target terminal, a device identification code corresponding to the target terminal, and a current base station corresponding to the target terminal; wherein the first number is a mobile phone number input by the user at the target terminal, the second number is a mobile phone number reserved by the user at the target terminal, and the first number is the same as or different from the second number; A target authentication module, used to perform target authentication on the user based on the first number, the second number and the third number and determine whether the user has passed the target authentication; A second acquisition module is used to acquire, according to the first number, a reserved device identification code corresponding to the first number and each resident base station corresponding to the first number when the user passes the target authentication; The analysis result obtaining module is used to obtain the analysis result according to the device identification code corresponding to the target terminal and the current base station, the reserved device identification code corresponding to the first number and each permanent base station; including: comparing the device identification code corresponding to the target terminal with the reserved device identification code corresponding to the first number to obtain a first comparison result; if the current base station is the same as one of the permanent base stations, then obtaining comparison success information, and using the comparison success information as a second comparison result; if the current base station is different from each of the permanent base stations, then obtaining a first distance based on the current base station and each of the permanent base stations, and using the first distance as a second comparison result; comprehensively analyzing the first comparison result and the second comparison result to obtain the analysis result; The security authentication success module is used to determine if the analysis result meets the preset conditions, indicating that the security authentication is successful.

7. A security authentication device, characterized in that: including memory and processor; The memory is used to store programs; The processor is used to execute the program to implement each step of the security authentication method as claimed in any one of claims 1 to 5.

8. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, each step of the security authentication method according to any one of claims 1 to 5 is implemented.

Images