Identity authentication method, device, equipment and medium

Abstract

The application provides an identity authentication method and device, equipment and medium, relates to the technical field of computers, and is used for reducing the problem that the management object in the group is relatively cumbersome when the to-be-joined object joins the group. The method can provide a graphic code for a first object to be joined in a group, so as to invite a second object in the target group to authenticate the first object, and directly display first prompt information for indicating that the first object has joined the corresponding target group after the authentication of the first object is passed. Since the management object does not need to enter a large amount of information of the first object, the operation of the management object is relatively simplified.

Description

Technical Field

[0001] This application relates to the field of computer technology, and in particular to an identity authentication method, apparatus, device, and medium. Background Technology

[0002] Enterprise instant messaging (EIM) applications are tools and services for enterprise end-users, enabling online marketing, online communication, and content management. Users can communicate in real-time with other users within the enterprise and manage enterprise content. Real-time communication includes website, text, interface, voice, video, and file sharing. Before a user can communicate with other users in a group, they must first join that group.

[0003] Currently, the main method for a candidate to join a group is as follows: the administrator with management privileges obtains the candidate's account information, imports it into the group's address book, and notifies the candidate to log in. Finally, the candidate can join the group after logging in. While this method can guarantee the identity of the candidate to some extent, it requires a significant amount of work from the administrator, making it quite cumbersome. Summary of the Invention

[0004] This application provides an identity authentication method, apparatus, device, and medium to solve the problem that the management of objects in a group is cumbersome when an object to be added joins a group.

[0005] On the one hand, an identity authentication method is provided, including:

[0006] In response to a target group joining request triggered by a first object, a graphic code corresponding to the first object is displayed for scanning by at least one second object that has joined the target group;

[0007] In response to the authentication confirmation operation triggered after the second object scans the graphic code, a first prompt message is displayed, wherein the first prompt message is used to indicate that the first object has joined the target group.

[0008] On the one hand, an identity authentication method is provided, including:

[0009] In response to a scanning operation triggered by a graphical code provided by a second object to a first object, at least one candidate group to which the second object belongs is displayed;

[0010] In response to the authentication confirmation operation triggered by the second object for the target group in the at least one candidate group, authentication confirmation information is fed back to the first object, wherein the authentication confirmation information is used to indicate that the second object has confirmed that the first object has joined the target group.

[0011] On the one hand, an identity authentication method is provided, including:

[0012] Receive authentication confirmation information from the second object, wherein the authentication confirmation information is used to indicate that the second object has confirmed that the first object has joined the target group based on the graphic code provided by the first object, and the second object is an object that has joined the target group;

[0013] Based on the authentication confirmation information, if the first object has met the preset authentication conditions, an authentication success notification is sent to the first object. The authentication success notification is used to instruct the first object to join the target group. N is a positive integer. The preset authentication conditions include N second objects confirming that the first object has joined the target group.

[0014] On the one hand, an identity authentication device is provided, comprising:

[0015] The first display module is configured to display a graphic code corresponding to the first object in response to a target group joining request triggered by the first object, so as to provide at least one second object that has joined the target group for scanning;

[0016] The second display module is used to display a first prompt message in response to an authentication confirmation operation triggered after the second object scans the graphic code, wherein the first prompt message is used to indicate that the first object has joined the target group.

[0017] In one possible embodiment, the first display module is specifically used for:

[0018] In response to a keyword input operation triggered by the first object, or in response to a login operation triggered by the first object, the join control is displayed;

[0019] In response to the confirmation operation triggered by the first object on the added control, the graphic code is displayed.

[0020] In one possible embodiment, the first display module is specifically used for:

[0021] In response to the keyword input operation triggered by the first object, the target keyword corresponding to the keyword input operation is obtained;

[0022] If it is determined that there is no group identifier matching the target keyword among the preset group identifiers, the join control is displayed; or, the target keyword is sent to the server. If a matching failure result is received from the server, the join control is displayed. The matching failure result is sent by the server after determining that there is no group identifier matching the target keyword.

[0023] In one possible embodiment, the second object includes at least one of the following:

[0024] At least one second object in the target group has a first permission level, wherein the first permission level represents permissions for managing various objects in the target group; and,

[0025] At least one second object in the target group has a second permission level, wherein the second permission level represents the permission used to assist the authentication object in joining the target group.

[0026] In one possible embodiment, the second display module is specifically used for:

[0027] If the authentication success notification is received from the server, the first prompt information is displayed. The authentication success notification is sent by the server after receiving authentication confirmation information from N second objects. The authentication confirmation information indicates that the corresponding second object has confirmed that the first object has joined the target group based on the graphic code, where N is a positive integer.

[0028] In one possible embodiment, the second display module is specifically used for:

[0029] Establish a long-lived communication link with the server and obtain the unique identifier of the long-lived communication link;

[0030] Using the unique identifier, an authentication result request is sent to the server in a polling manner, wherein the authentication result request is used to request the authentication result of the first object;

[0031] If the authentication success notification in response to the authentication result request is received, the first prompt message is displayed.

[0032] In one possible embodiment, during the process of sending authentication result requests to the server in a polling manner using the unique identifier, the time interval between the sending time of the (i+1)th round authentication result request and the sending time of the (i+2)th round authentication result request is greater than the time interval between the sending time of the ith round authentication result request and the sending time of the (i+1)th round authentication result request, where i is an integer greater than 1.

[0033] In one possible embodiment, if the second object is N objects, where N is a positive integer; the second display module is specifically used for:

[0034] Each time an authentication confirmation operation is triggered after a third object scans the graphic code, a corresponding second prompt message is displayed. The second prompt message is used to indicate that the corresponding third object has confirmed that the first object has been authenticated based on the graphic code. The third object is any one of the second objects among the N second objects that have confirmed the identity of the first object in the target group from the 1st to the (N-1th)th second object.

[0035] Upon receiving the authentication confirmation operation triggered after the Nth second object scans the graphic code, the first prompt message is displayed.

[0036] On the one hand, an identity authentication device is provided, including:

[0037] The display module is used to display at least one candidate group to which the second object belongs in response to a scanning operation triggered by a graphic code provided by the second object to the first object.

[0038] The feedback module is configured to respond to the authentication confirmation operation triggered by the second object for the target group in the at least one candidate group, and to provide authentication confirmation information to the first object, wherein the authentication confirmation information is used to indicate that the second object has confirmed that the first object has joined the target group.

[0039] In one possible embodiment, the target group is a group in a first application; the display module is specifically used for:

[0040] In response to the second object's scanning operation of the graphic code in the second application, a login authorization control is displayed, wherein the first application and the second application are different applications;

[0041] In response to a login operation triggered by the login authorization control, the system authorizes login to the first application based on the identity information of the second object in the second application, and displays the at least one candidate group to which the second object belongs in the first application.

[0042] On the one hand, an identity authentication device is provided, including:

[0043] The receiving module is used to receive authentication confirmation information fed back by the second object, wherein the authentication confirmation information is used to indicate that the second object has confirmed that the first object has joined the target group based on the graphic code provided by the first object, and the second object is an object that has joined the target group;

[0044] The feedback module is used to send an authentication success notification to the first object based on the authentication confirmation information if the first object has met the preset authentication conditions. The authentication success notification is used to instruct the first object to join the target group, N is a positive integer, and the preset authentication conditions are used to indicate that N second objects have confirmed that the first object has joined the target group.

[0045] This application provides a computer device, including:

[0046] At least one processor, and

[0047] A memory that is communicatively connected to the at least one processor;

[0048] The memory stores instructions that can be executed by the at least one processor, which implements the authentication method described above by executing the instructions stored in the memory.

[0049] This application provides a computer storage medium storing computer instructions that, when executed on a computer, cause the computer to perform any of the authentication methods described above.

[0050] Since the embodiments of this application adopt the above-described technical solution, they have at least the following technical effects:

[0051] In this embodiment, a graphical code for identity authentication can be provided to the first object. Other second objects already in the target group can be invited to authenticate the first object. After the first object's authentication is successful, a first prompt message is displayed. This simplifies the management process for group administrators, eliminating the need for extensive operations. Furthermore, it provides a way for the first object to proactively join the group, increasing the initiative and flexibility of joining. Since the second object still authenticates the first object's identity, it prevents unauthorized individuals from joining the group arbitrarily, thus ensuring the security of identity authentication. Attached Figure Description

[0052] Figure 1A A scenario diagram provided for an embodiment of this application;

[0053] Figure 1B This is another scenario illustration provided for an embodiment of this application;

[0054] Figure 1C Provided for the embodiments of this application Figure 1A or Figure 1B The diagram shows the architecture of the first server.

[0055] Figure 2 A flowchart illustrating an identity authentication method provided in this application embodiment;

[0056] Figure 3 An example diagram illustrating the interface changes for generating graphic codes, provided as an embodiment of this application;

[0057] Figure 4 An example diagram of a group chat interface provided in an embodiment of this application;

[0058] Figure 5A Example diagram of the process of generating the authentication interface provided in the embodiments of this application;

[0059] Figure 5B Example diagrams illustrating interface changes for generating graphic codes provided in embodiments of this application;

[0060] Figure 6 A flowchart illustrating a method for requesting authentication results based on a long-connection communication link, as provided in this application embodiment;

[0061] Figure 7 An example diagram of an interface for displaying a second prompt message is provided in an embodiment of this application;

[0062] Figure 8 A flowchart illustrating an identity authentication method provided in this application embodiment. Figure 2 ;

[0063] Figure 9 A flowchart illustrating an identity authentication method provided in this application embodiment. Figure 3 ;

[0064] Figure 10 Example diagram of the process for generating at least one candidate group provided in the embodiments of this application;

[0065] Figure 11 A flowchart illustrating an identity authentication method provided in this application embodiment. Figure 4 ;

[0066] Figure 12 Provided for the embodiments of this application Figure 1A A schematic diagram illustrating the interactions between various devices in the diagram;

[0067] Figure 13 This is a schematic diagram illustrating the interaction between a first terminal and a first server provided in an embodiment of this application.

[0068] Figure 14 A flowchart illustrating an identity authentication method provided in this application embodiment. Figure 4 ;

[0069] Figure 15A schematic diagram of the structure of an identity authentication device provided in this application embodiment;

[0070] Figure 16 A schematic diagram of the structure of an identity authentication device provided in this application embodiment. Figure 2 ;

[0071] Figure 17 A schematic diagram of the structure of an identity authentication device provided in this application embodiment. Figure 3 ;

[0072] Figure 18 This is a schematic diagram of the structure of a computer device provided in an embodiment of this application. Detailed Implementation

[0073] To better understand the technical solutions provided in the embodiments of this application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0074] To facilitate a better understanding of the technical solutions of this application by those skilled in the art, the terms involved in this application are introduced below.

[0075] 1. Instant Messaging (IM) is a system that enables real-time communication over an internet, allowing two or more people to instantly exchange text messages, files, voice messages, or video messages. With the continuous development of instant messaging technology, enterprise instant messaging applications and personal instant messaging applications have gradually emerged. Enterprise instant messaging applications can also be called team instant messaging applications.

[0076] 2. First Object and Second Object: "Object" can be understood as an account or user. The first object generally refers to the object that needs to join a group. The second object refers to the object that has already joined the first object and is waiting to join a group. A group can be understood as a group already registered on an application. For example, if object A wants to join company X, object A can invite objects B and C, who are already joined with company X, to help with their verification.

[0077] 3. A graphic code refers to information recorded in graphic form. In this embodiment, the graphic code includes the identity information of the first object. The identity information includes, for example, at least one of the first object's name, profile picture, or mobile phone number. The first object can use the graphic code to invite a second object already in the group to authenticate and join the group. A graphic code, such as a QR code, can be understood as a QR code representation of information.

[0078] 4. Preset authentication conditions: In this document, these refer to the authentication conditions that must be met to join the group. In other words, a candidate must meet these preset authentication conditions to join the group. The preset authentication conditions include that N second objects have confirmed the first object's joining of the target group based on the image code, where N is a positive integer. In addition, the preset authentication conditions may also include that the group the first object requests to join and the group to which the second object invited by the first object to help with authentication belong are the same group.

[0079] 5. The first notification message is used to indicate that the first person has joined the group. The first notification message can take many forms. For example, the first notification message can be displayed in the group chat window indicating that the first person has joined, or it can be displayed in the group chat window, or it can be displayed in a child window.

[0080] 6. Group identifier, used to represent a group. The group identifier can be represented by one or both of the following: group name or group number.

[0081] 7. First permission level and second permission level refer to the different permission levels set in the target group. The first permission level represents the permissions used to manage each object in the target group, while the second permission level represents the permissions used to assist in authenticating objects joining the target group. A second object with the first permission level can also be called a managed object, an administrator, or a managed user; a second object with the second permission level can also be called a regular object, a regular member, or a regular user.

[0082] 8. Groups: These can be understood as teams registered in the first application. Each group has its unique group identifier. A group can be a chat group or a group of companies, etc. Members within a group can communicate with each other.

[0083] 9. Cloud technology: A general term encompassing network technologies, information technologies, integration technologies, management platform technologies, and application technologies based on cloud computing business models. It can form resource pools, providing flexible and convenient on-demand access. Cloud computing technology will become a crucial support. Backend services of technical network systems require substantial computing and storage resources, such as video websites, image websites, and many portal websites. With the rapid development and application of the internet industry, every item may have its own identification mark in the future, requiring transmission to backend systems for logical processing. Data at different levels will be processed separately, and various industry data will require robust system support, which can only be achieved through cloud computing.

[0084] 10. Cloud computing: A computing model that distributes computing tasks across a large pool of computers, enabling various application systems to access computing power, storage space, and information services as needed. The network providing these resources is called the "cloud." From the user's perspective, resources in the "cloud" appear infinitely scalable, readily available, on-demand, and expandable, with payment based on usage.

[0085] 11. Artificial Intelligence (AI) is the theory, methods, technology, and application systems that use digital computers or machines controlled by digital computers to simulate, extend, and expand human intelligence, perceive the environment, acquire knowledge, and use that knowledge to obtain optimal results. In other words, AI is a comprehensive technology within computer science that attempts to understand the essence of intelligence and produce a new kind of intelligent machine that can react in a way similar to human intelligence. AI studies the design principles and implementation methods of various intelligent machines, enabling them to have perception, reasoning, and decision-making capabilities. AI technology is a comprehensive discipline involving a wide range of fields, encompassing both hardware and software technologies. Fundamental AI technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing, operating / interactive systems, and mechatronics. AI software technologies mainly include computer vision, speech processing, natural language processing, and machine learning / deep learning. Natural language processing involves techniques such as fuzzy matching.

[0086] With the research and advancement of artificial intelligence (AI) technology, AI is being studied and applied in various fields, such as smart homes, smart wearable devices, virtual assistants, smart speakers, smart marketing, autonomous driving, drones, robots, smart healthcare, smart customer service, vehicle networking, and intelligent transportation. It is believed that with the development of technology, AI will be applied in more fields and play an increasingly important role.

[0087] In addition, in the embodiments of this application, "at least one" can mean one or more, and "multiple" means two or more.

[0088] To address the cumbersome operations required by group administrators when members join a group, this application provides an authentication method. This method offers a proactive entry point for a first member to join the group. Through this entry point, the first member can trigger a group join request, generating a graphical code. The first member can then invite a second member already in the group to authenticate them using this code. Upon successful authentication, a notification indicating that the first member has joined the group is displayed. This eliminates the need for administrators to input the first member's account information or notify them to log in, resolving the cumbersome management process and improving the efficiency of group joining. Furthermore, it provides an alternative way for members to proactively join a group. Since the second member authenticates the first member, the security of the authentication is ensured, and the flexibility of joining a group is enhanced, facilitating proactive group applications.

[0089] The application scenarios of the identity authentication method in the embodiments of this application are described below.

[0090] Please refer to Figure 1A This is a schematic diagram of an application scenario provided by an embodiment of this application. The schematic diagram includes multiple terminals and a first server 120. Each terminal can run a first application 111, and each terminal corresponds to one user. The first server 120 can be a backend server corresponding to the first application 111. The first application 111 can be an application pre-installed on the terminal, a sub-application embedded in a third-party application, or a web application; this application does not impose any restrictions on this. The first application 111 can be a social application or a content service application; social applications include, for example, enterprise instant messaging applications or personal instant messaging applications.

[0091] Figure 1A Taking multiple terminals, including the first terminal 110-1, the second terminal 110-2, and the third terminal 110-3, as an example, the first user corresponds to the first terminal 110-1, the second user corresponds to the second terminal 110-2, and the third user corresponds to the third terminal 110-3.

[0092] The following section provides a brief explanation of the functions of each device, using the first user as the first object to be added to the target group and the second and third users as the second objects already added to the target group.

[0093] For example, the first terminal 110-1 can generate a graphical code for the first user. The second terminal 110-2 and the third terminal 110-3 can authenticate the first user based on the graphical code. The first server 120 can determine whether the first user has been successfully authenticated based on the authentication results of the second terminal 110-2 and the third terminal 110-3. If it is determined that the first user has been successfully authenticated, the first user will be added to the target group. The identity authentication process involved will be described below.

[0094] Please refer to Figure 1B This is a schematic diagram of another application scenario provided by the embodiments of this application. The schematic diagram of the application scenario includes multiple terminals, a first server 120 and a second server 130.

[0095] and Figure 1A The difference is that the second terminal 110-2 corresponding to the second user can run the second application 112, and the second server 130 is the backend server corresponding to the second application 112. The second application is a different application from the first application 111. The second application 112 can be a social application, such as a personal instant messaging application. Of course, the second terminal 110-2 can run the first application 111 independently of the second application 112, or it can run the first application 111 within the second application; this application does not impose any restrictions on this.

[0096] The functions of each device are briefly described below.

[0097] For example, the first terminal 110-1 can generate a graphical code for the first user. The first terminal 110-1 can send this graphical code to the second application 112 in the second terminal 110-2 and the first application 111 in the third terminal 110-3. The second terminal 110-2 can log in to the first application 111 using the account information of the second application 112, thereby authenticating the first user based on the graphical code. The first server 120 can determine whether the first user has been successfully authenticated based on the authentication results of the second terminal 110-2 and the third terminal 110-3. The identity authentication process involved will be described below.

[0098] Please refer to Figure 1C Provided for the embodiments of this application Figure 1A or Figure 1B This is a schematic diagram of the architecture of the first server in the system. The first server includes a communication module, an authentication module, and a storage module. A module can be understood as a functional module within the first server, such as a process or service. For example, the communication module can be implemented using wwgapproxy, the authentication module can be implemented using wwloginlogic, and the storage module can be implemented using wwpromotesvr. Figure 1CThis example uses a communication module, an authentication module, and a storage module; the actual functionality of each module is not limited. The functions of each module are briefly explained below.

[0099] The communication module is used to establish communication between the first server and other devices, such as establishing communication between the first server and the first terminal. The authentication module is used to detect the login status or authentication status of an object. The storage module is used to store the identity information or authentication results of the corresponding object.

[0100] It should be noted that the identity authentication method in this application embodiment can be applied to various specific application scenarios, such as virtual reality, augmented reality, autonomous driving, smart furniture, smart office, smart wearables, smart transportation, smart cities, drones, robots, and other application scenarios involving identity authentication. This application does not impose any restrictions on this.

[0101] In one possible application scenario, to reduce communication latency or for load balancing, different first servers 120 can serve the regions corresponding to each terminal. Similarly, to reduce communication latency or for load balancing, different second servers 130 can serve the regions corresponding to each terminal. The following description uses the deployment of multiple first servers 120 as an example.

[0102] Multiple first servers 120 share data through blockchain, and the multiple first servers 120 are equivalent to a data sharing system composed of multiple first servers 120. For example, the first terminal 110-1 is located at location a and communicates with the first server 120, while the second terminal 110-2 is located at location b and communicates with other first servers 120.

[0103] Each first server 120 in the data sharing system has a corresponding node identifier. Each server 120 can also store the node identifiers of other first servers 120 in the data sharing system, so that the generated blocks can be broadcast to the other first servers 120 in the data sharing system based on their node identifiers. Each first server 120 can maintain a node identifier list as shown in the table below, storing the first server 120 name and node identifier in the corresponding node identifier list. The node identifier can be an Internet Protocol (IP) address or any other information that can be used to identify the node.

[0104] The first terminal 110-1, the second terminal 110-2, and the third terminal 110-3 mentioned above are all electronic devices used by users. These electronic devices can be smartphones, tablets, laptops, desktop computers, smart speakers, smartwatches, gaming devices, smart TVs, or smart wearable devices—computer devices with a certain computing power that run applications. Furthermore, the first server 120 and the second server 130 can both be independent physical servers, or server clusters or distributed systems composed of multiple physical servers. They can also be cloud servers providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery networks (CDNs), and big data and artificial intelligence platforms. Optionally, the first server 120 and the second server 130 can be implemented using cloud technology.

[0105] The following describes the identity authentication method provided by exemplary embodiments of this application in conjunction with the application scenarios described above and with reference to the accompanying drawings. It should be noted that the above application scenarios are only shown to facilitate understanding of the spirit and principles of this application, and the embodiments of this application are not limited in any way in this respect.

[0106] The solutions provided in this application involve technologies such as fuzzy matching in artificial intelligence, which will be described in detail in the following embodiments.

[0107] under Figure 1A or Figure 1B Taking the first terminal executing the authentication method in this application embodiment as an example, with the first object as the first user, and N objects including the second object as the second user and the third user as an example, combined with Figure 2 The diagram shown illustrates an identity authentication method, which will be used to introduce the identity authentication method in the embodiments of this application.

[0108] S21, in response to the target group joining request triggered by the first object, display the graphic code corresponding to the first object to provide at least one second object that has joined the target group for scanning.

[0109] The meaning of the graphic code can be found in the previous text.

[0110] When the first user has never joined any group in the first application, or has not joined a specific group in the first application, the first user can trigger a target group request. For example, if the first user clicks the login button, a join control for requesting to join a group is displayed. Clicking this join control is equivalent to initiating a target group request. This target group request is used to request to join a group. In response to this target group join request, the first terminal displays the first user's graphical code, which includes the first user's identity information.

[0111] The first terminal can generate a graphic code based on the identity information of the first user, or the first terminal can send an authentication information request to the first server to request the generation of a graphic code. The authentication information request can also carry the account of the first user. The first server can respond to the authentication information request and generate a graphic code, and then the first server will send the graphic code back to the first terminal.

[0112] For example, please refer to Figure 3 This is an example diagram illustrating the interface changes for generating a graphic code, provided in an embodiment of this application. After a first user logs in to a first application, the first terminal displays the following: Figure 3 When the first user clicks the add control 301 shown in (1), it is equivalent to triggering a confirmation operation on the add control, which is equivalent to triggering a target group request. The first terminal displays the following based on the target group request: Figure 3 The interface shown in (2) includes a QR code 302, which is an example of a graphic code.

[0113] It should be noted that, for ease of explanation, in Figure 3 The corresponding content may be circled with an elliptical dashed line in the illustration below, but the corresponding elliptical dashed line may not be displayed on the actual display interface.

[0114] S22, in response to the authentication confirmation operation triggered after the second object scans the graphic code, a first prompt message is displayed, wherein the first prompt message is used to indicate that the first object has joined the target group.

[0115] The first terminal can display a graphic code for scanning by a second or third terminal, or it can share the graphic code with a second or third terminal in response to a sharing operation by a first user. Taking a second user as an example, the second user can scan the graphic code and perform an authentication confirmation operation. The second terminal can then send the authentication confirmation information corresponding to this operation back to the first terminal. Based on this authentication confirmation information, the first terminal displays a first prompt message, which is equivalent to the first terminal responding to the second user's authentication confirmation operation and displaying the first prompt message.

[0116] For example, after the second user scans the graphic code, an authentication confirmation operation can be triggered, which is equivalent to authenticating the first user. The second terminal can generate authentication confirmation information and send it back to the first server, which then sends the authentication confirmation information back to the first terminal.

[0117] As one embodiment, the first server can determine whether the first object meets the preset authentication conditions based on the authentication confirmation information. If the preset authentication conditions are met, the server can send an authentication success notification to the first terminal. The first terminal receives the authentication success notification and displays a first prompt message. Alternatively, after the second user authenticates the first user, the first terminal can determine whether the first object meets the preset authentication conditions. If the preset authentication conditions are met, the first prompt message can be displayed. The meaning of the preset authentication conditions can be found above.

[0118] For example, continue with Figure 3 For example, the first user can click Figure 3 The sharing control 303 in the code shares the graphic code with a second and a third user. If the preset authentication condition is that two second objects successfully authenticate the first object, then after the second and third users authenticate the first object, the first server can determine that the first object has been successfully authenticated and send an authentication success notification to the first terminal. The first terminal displays the following: Figure 4 The group chat window shown includes a first prompt message 400, which is specifically as follows: Figure 4 The first user shown has joined the group chat.

[0119] exist Figure 2 In the illustrated embodiment, a first object can automatically trigger a target group join request. In response to this request, a first terminal can generate a graphical code. The first terminal can then use this code to invite other second objects already in the target group to authenticate the first object's identity. This provides a method suitable for first objects to actively join a group. Since administrators do not need to input large amounts of account information for first objects, the administrator's operations are simplified. Furthermore, because this method authenticates the first object based on multiple second objects, unauthorized group joining is avoided, ensuring the security of the identity authentication process.

[0120] exist Figure 2 Based on the embodiments shown, the following is a summary of... Figure 2 The implementation methods for each step are illustrated below. First, the implementation method for displaying the graphic code in S21 will be introduced.

[0121] Method 1:

[0122] In response to a keyword input action triggered by the first object, the added control is displayed;

[0123] In response to the confirmation action triggered by adding the control to the first object, a graphical code is displayed.

[0124] The first user can enter keywords for the group they want to join on the first terminal, which is equivalent to performing a keyword input operation. The first terminal responds to this keyword input operation by displaying a join control. The join control can take many forms, and this application does not limit it.

[0125] The first user can click or touch the added control, which is equivalent to confirming the addition. The first terminal can then obtain the first user's identity information. This identity information can be account-related information associated with the first user in the first application, such as at least one of the first user's name, mobile phone number, profile picture, or ID card number. The first terminal generates and displays a graphic code based on the first user's identity information. Alternatively, the first terminal can obtain the graphic code from the first server.

[0126] As an example, the first terminal can determine whether there is a group identifier matching the target keyword from a pre-stored pool of group identifiers, based on the target keyword input by the first user. Alternatively, the first terminal can send the target keyword to the first server, which can then determine whether there is a first group identifier matching the target keyword from a pre-stored pool of group identifiers.

[0127] Furthermore, if a first group identifier matching the target keyword exists, the first terminal, in response to the first user's trigger operation targeting that first group identifier, requests authentication of the first user from the management object of the group corresponding to the first group identifier. If no first group identifier matching the target keyword exists, the first terminal can display a join control. In this embodiment, if the first user has already explicitly joined a group, authentication can be directly initiated to the management object of that group, thus improving the authentication progress of the first user in a targeted manner.

[0128] As an example, when displaying the first group identifier, the first terminal may also display at least one of the following: group member information of the group the first user is about to join, target contact information, and sharing prompt information. The group member information includes, for example, the number of members in the group and the avatars of each member. The target contact information refers to information about members who belong to the group the first user is about to join and who are also the first user's contacts. A contact belonging to the first user can be understood as a contact of the first user in the first application, or a contact of the first user in the second application. Target contact information includes, for example, one or more of the contact's avatar or name. The sharing prompt information prompts the first user to share the graphic code to the target application, such as either the first application or the second application.

[0129] For example, please refer to Figure 5A When a first group identifier matching the target keyword exists, the authentication interface displayed on the first terminal, upon the first user clicking login, is as follows: Figure 5A The login interface shown in (1) requires the first user to enter their mobile phone number, work email address, and target keyword 501. The target keyword 501 is as follows: Figure 5A (1) The input "A". When the first user clicks Figure 5A After the next step shown in (1), the first terminal displays as follows: Figure 5A The group join control 502 shown in Figure 5(2) displays that the group the first user needs to join is "Company A". When the group join control 502 is displayed, the first terminal can also display group member information 504 and target contact information 503. The group member information 504 is specifically shown in Figure 5(2) as "30 members have joined", and the target contact information 503 is specifically shown in Figure 5(2) as "Zhang San, Fourth, and 15 other second application friends are also in this company". When the first user clicks the group join control 502, it is equivalent to triggering the first group identifier.

[0130] Alternatively, in another possible embodiment, if a first group identifier matching the target keyword exists, then a join control and the first group identifier can be displayed. If no first group identifier matching the target keyword exists, then a join control can be displayed. In this embodiment, in either case, the first user can invite a second object to authenticate for them.

[0131] In this example, the first terminal can display information about the groups the first user wants to join, allowing the user to selectively invite members of those groups to verify their identity. The first terminal can also display target contact information, enabling the user to quickly find friends who can verify their identity, increasing the success rate. Furthermore, the first terminal can display sharing prompts, allowing the user to invite other users to help with verification through various means.

[0132] Furthermore, the first terminal or the first server can use fuzzy matching to determine whether there is a first group that matches the target keyword. The following example, using the execution of the first terminal, illustrates the process of fuzzy matching.

[0133] S1.1, Obtain the target keyword input by the first user.

[0134] S1.2 Match the target keyword with multiple pre-stored group identifiers and obtain the similarity between the target keyword and the multiple group identifiers.

[0135] Specifically, the first terminal can convert the target keywords and various group identifiers into vector representations and determine the similarity between the vector representations.

[0136] S1.3 Sort the similarity scores in descending order.

[0137] S1.4, if the similarity score of the first-ranked similarity among the sorted similarities is greater than or equal to a preset similarity threshold, it indicates that the first user is very likely to join the group corresponding to the first group identifier. In this case, the first terminal can display the first group identifier. In response to the first user's trigger operation on the first group identifier information, the first terminal notifies the second object with the first permission level to authenticate the first object. If the similarity score of the first-ranked similarity among the sorted similarities is less than the preset similarity threshold, the first terminal displays a graphic code.

[0138] Specifically, if the similarity score of the highest-ranked similarity score in the sorted similarity ranking is greater than or equal to a preset similarity threshold, then a group identifier matching the target keyword is determined to exist. If the similarity score of the highest-ranked similarity score in the sorted similarity ranking is less than the preset similarity threshold, then no group identifier matching the target keyword is determined to exist.

[0139] For example, please refer to Figure 5B This is an example diagram showing the interface changes for generating a graphic code. The first terminal responds to the first user's input. Figure 5A When the input operation shown in (1) is performed, if the first terminal determines that there is no group identifier matching the target keyword, it will display the following: Figure 5BThe interface shown in Figure (1) displays the addition control 505. The first terminal, in response to the first user's trigger operation on the addition control 505, displays as shown in Figure (1). Figure 5B The interface shown in Figure 5(2) includes the first user's graphic code 506 and the sharing prompt information 507, which is sent to the second application as shown in Figure 5(2).

[0140] In Method 1, the first terminal can determine which group the first user needs to join by using fuzzy matching based on the target keywords entered by the first user. This simplifies the first user's input and allows for quick determination of the group the first user needs to join.

[0141] Method 2:

[0142] In response to the login action triggered by the first object, display the join control;

[0143] In response to the confirmation action triggered by adding the control to the first object, a graphical code is displayed.

[0144] The first user can enter their account information and click login, which is equivalent to logging in. If the first terminal determines that the first user has not joined any group, it can display a join control. The first user can confirm the join control; the meaning of the confirmation operation is as described above. The first terminal obtains the first user's identity information; the meaning of the identity information is as described above. The first terminal can generate and display the graphic code based on the first user's identity information. Alternatively, the first terminal can obtain the graphic code from the first server.

[0145] The following section provides an example of how the first terminal determines that the first user has not joined any group.

[0146] First, the first terminal can determine whether the account information of the first user is associated with any group based on the previously stored account information of the first user. If it is not associated with any group, it is determined that the first user has not joined any group.

[0147] In this method, the first terminal can determine on its own whether the first user has joined the corresponding group, thereby reducing the interaction between the first terminal and the first server.

[0148] Second, the first terminal can send the account information entered by the first user to the first server. The first server determines whether the account information is associated with a group and feeds back the determination result to the first terminal.

[0149] In this method, the first server determines whether the first user has joined the group, which can obtain a more accurate judgment result.

[0150] After executing S21, as discussed above, the first terminal can share the graphic code with the second and third terminals through the target application, or the first terminal can display the graphic code so that the second and third terminals can authenticate the first user based on the graphic code.

[0151] The target group can be associated with preset authentication conditions, which include N second objects having determined that the first object has been authenticated based on the graphic code. The following describes how the first server determines whether the first object has been authenticated when N takes different values.

[0152] When N is 1, for example, after the first user invites the second user to authenticate for them, the second terminal can send authentication confirmation information to the first server. This authentication confirmation information indicates that the second object has confirmed the first object's authentication based on the graphic code. The authentication confirmation information may include at least one of the second object's identity information and the group identifier of the group the second object authenticated for the first object. After receiving the authentication confirmation information, the first server determines that the first object meets the preset authentication conditions, generates an authentication success notification, and sends the authentication success notification to the first terminal, which then displays a first prompt message. The meanings of the preset authentication conditions and the first prompt message can be found above.

[0153] When N is a positive integer greater than 1, after the first server receives the authentication confirmation information from the Nth second object, it determines that the first object meets the preset authentication conditions, generates an authentication success notification, and sends the authentication success notification to the first terminal, which then displays the first prompt information.

[0154] The first terminal cannot determine when the first server will send the authentication result. Therefore, the first terminal needs to be ready to obtain the authentication result from the first server in real time. However, this will result in a large burden on the first terminal. Therefore, in this embodiment of the application, the first terminal can establish a long-term communication link with the first server. The first terminal requests the authentication result from the first server in a polling manner through the long-term communication link.

[0155] The following is combined with Figure 6 The flowchart shown illustrates the process of requesting authentication results from the first terminal based on a long-connection communication link.

[0156] S61 establishes a long-lived communication link with the first server and obtains the unique identifier of the long-lived communication link.

[0157] S62, the first terminal sends an authentication result request to the first server using a unique identifier and a polling method. The authentication result request is used to request the authentication result of the first object.

[0158] S63, if an authentication success notification is received in response to the authentication result request, the first prompt message is displayed.

[0159] If the first server determines that the first user's authentication is successful, it can send an authentication success notification to the first client via a long-lived communication link. Upon receiving the authentication success notification, the first terminal displays the first notification message.

[0160] Furthermore, since polling can put significant processing pressure on the first server, especially if malicious actors exploit this method to attack it, it could cause immense stress. Therefore, in this embodiment, the time interval can be controlled by the first server. This time interval refers to the time between two authentication result requests sent by the first client, also known as the polling time interval. This makes it difficult for malicious actors to attack the first server by shortening the polling time, thus ensuring the server's security.

[0161] As an example, the first server can control the polling frequency by dynamically adjusting the time interval. For instance, when the first terminal sends authentication result requests to the first server using a unique identifier and a polling method, the time interval between the sending time of the (i+1)th round of authentication result requests and the sending time of the (i+2)th round of authentication result requests is greater than the time interval between the sending time of the ith round of authentication result requests and the sending time of the (i+1)th round of authentication result requests, where i is an integer greater than 1. Dynamically adjusting the time interval can reduce the load on the first server and also prevent server downtime caused by frequent authentication result requests from unauthorized individuals.

[0162] As an example, a specific formula for calculating the polling time is shown below:

[0163] S=((t1–t0) / 600+1)*5

[0164] Where S represents the time interval, t1 refers to the time when the first terminal sends the authentication result request, and t0 refers to the time when the first terminal first sends the authentication result request to the first server.

[0165] Furthermore, if N is an integer greater than 1, the first user may not be able to know the authentication progress during the authentication process; for example, the first user may not know how many second objects have been authenticated for them. Therefore, in this embodiment, the first terminal displays a corresponding second prompt message each time it receives authentication confirmation information from a third object. The first terminal may receive the authentication confirmation information from the third object through a first server. The second prompt message indicates that the corresponding third object has confirmed the first object's authentication based on the graphic code. The third object is any one of the second objects from the 1st to the (N-1th)th of the N objects that confirmed the first object's identity in the target group; that is, the third object is the first (N-1) second objects from the N second objects that authenticated the first object.

[0166] In this embodiment, the first terminal can display corresponding second prompt information based on the authentication confirmation information returned by the second object that has been authenticated for it, so that the first user can promptly determine the authentication progress and invite more second objects to authenticate for it, which helps to improve the efficiency of authentication.

[0167] For example, please refer to Figure 7 This is an example diagram of an interface for displaying a second prompt message provided in an embodiment of this application. After the first user invites Li Si from the target group to authenticate for him, the first terminal receives the authentication confirmation information corresponding to Li Si and can display the following: Figure 7 The second prompt message 700 shown is as follows: Figure 7 The message shown is "Li Si has confirmed that you have joined 'Company A'". Similarly, after Li Liu authenticates as the first user, the first terminal can display something like this. Figure 7 The statement shown is "Li Liu has confirmed that you have joined 'Company A'".

[0168] The above example uses the preset authentication conditions, which include N second objects authenticating the first object. However, the actual preset authentication conditions can include a variety of specific conditions. The following is an example of a preset authentication condition.

[0169] The first type:

[0170] Objects with the highest level of access within the target group.

[0171] For groups with high security requirements, a second object with a first-level permission can be configured to authenticate the first user joining the group. The first-level permission represents the permissions used to manage various objects within the target group. In other words, only when an object with a first-level permission authenticates the first user joining the group can the preset authentication conditions be met. For example, the preset authentication condition could be that there are N objects with a first-level permission in the target group.

[0172] The second type:

[0173] Objects with the second level of access in the target group.

[0174] For some groups with low security requirements, and since objects with the first level of access are often few, it's sufficient to set a second object with the second level of access as the first object for authentication. Therefore, the first level of access represents the permissions used to manage each object in the target group. Only when an object with the first level of access authenticates the first user to join can the preset authentication conditions be met. For example, the preset authentication condition could be that there are N objects with the second level of access in the target group.

[0175] The third type:

[0176] Objects with second-level permissions in the target group, and objects with first-level permissions in the target group.

[0177] Some groups have certain security requirements, but have few objects with the first level of access. In this case, we can set up (NM) second objects with the first level of access among N second objects, and M second objects with the second level of access to authenticate the first object, where M is a positive integer.

[0178] Furthermore, in the third preset authentication condition, the authentication order of the second object with the second permission level and the second object with the first permission level for authenticating the identity of the first user can be further set. For example, the authentication order of the second object with the second permission level is earlier than the authentication order of the first object with the first permission level.

[0179] When an authentication order is set, the first user can invite various second objects according to the authentication order set in the preset authentication conditions. However, the first user may find it difficult to invite objects according to the preset authentication order. Therefore, in this embodiment, after determining that M second objects with second permission levels have authenticated the first object, the first server can send auxiliary authentication requests to (NM) second objects with first permission levels. These auxiliary authentication requests are used to request authentication of the first object and can carry the identity information of the first object. In this embodiment, the first server triggers the authentication request to (NM) second objects with first permission levels, which can relatively reduce the operations of the first user and improve the user experience.

[0180] As an example, when the first terminal determines the first group identifier and displays the first group identifier and the add control, the preset authentication conditions also include that the group indicated by the first group identifier is the target group where the second object is located.

[0181] In this embodiment, the preset authentication conditions not only restrict the number and permission level of the second objects, but also restrict the groups that the first user needs to join and the groups where the second objects invited by the first user belong are the same. As discussed above, in some cases, the first user has already entered the groups they want to join. In this case, the first server or the first terminal needs to determine whether the group entered by the first user is the same as the group where the second objects invited by the first user belong. If they are not the same, it means that the group entered by the first user is incorrect, or the first user has not correctly invited the corresponding second objects, and it can be determined that the first user has not been authenticated. If the group entered by the first user is the same as the group where the second objects invited by the first user belong, and N second objects have confirmed that the first object has been authenticated, then it can be determined that the first object has been successfully authenticated.

[0182] As an example, different groups may have different default authentication conditions. Administrators can set different default authentication conditions for each group. Different default authentication conditions mean that at least one condition must be different.

[0183] It should be noted that the above is an example of preset authentication conditions. In practice, the preset authentication conditions can be flexibly set according to the needs of each group.

[0184] To more clearly illustrate the identity authentication process involved in the embodiments of this application, the following is combined with... Figure 8 The flowchart of the identity authentication method shown below describes the identity authentication process in the embodiments of this application.

[0185] S81, the first terminal logs into the first application.

[0186] The first terminal can log in to the first application based on the first user's login operation in the first application. Alternatively, the first terminal can log in to the first user based on the first user's authorized login operation in the second application.

[0187] S82, determine whether the first user has joined the group.

[0188] The first terminal can determine whether the first user has joined a group based on the first user's login information. If the first user has joined a group, then execute S83, which displays the chat window of that group; if the first user has not joined a group, then execute S84, which obtains the input identity information and target keywords.

[0189] S85: Based on the target keyword, perform fuzzy matching of groups and determine whether there are any successfully matched groups.

[0190] The specific method of fuzzy matching can be found in the previous text. If a successfully matched group is found, S86 is executed, displaying the "Join Enterprise" option. After the first user clicks "Join Group," the first terminal notifies the second object with the first permission level in that group to authenticate the first user. If no successfully matched group is found, S87 is executed, displaying the graphic code and the return control. When the first user clicks the return control, S88 is executed, displaying the "Create Group" interface.

[0191] When the first object provides the graphic code to the second object, the second object can authenticate the first object. When the first terminal determines that the first object has been successfully authenticated, it executes S89, that is, the authentication is successful, and the first prompt message is displayed.

[0192] Based on the same inventive concept, embodiments of this application also provide an identity authentication method, which can be executed by the terminal corresponding to the second object.

[0193] The following example uses the first object as the first user and the second object as the second user. Figure 1A or Figure 1B Taking the second terminal in the embodiment of this application executing the identity authentication method as an example, combined with Figure 9 The flowchart shown illustrates an identity authentication method, which introduces the identity authentication method in the embodiments of this application.

[0194] S91, in response to a scanning operation triggered by a graphic code provided by the second object to the first object, at least one candidate group to which the second object belongs is displayed.

[0195] The first terminal can send the graphic code to the second terminal through the first server. Alternatively, the second terminal can scan the graphic code displayed on the first terminal. The meaning and format of the graphic code can be found in the preceding text.

[0196] When a second object wants to authenticate a first object, the second object can scan the graphic code. For example, when the graphic code is a QR code, the second object can scan the graphic code. Based on the scanning operation, the second terminal can obtain at least the identity information in the graphic code and display at least one candidate group to which the second object belongs.

[0197] The second terminal can determine at least one group to which the second object belongs based on the identity information of the second object. For ease of distinction, at least one group is referred to as at least one candidate group. At the same time, the second terminal can also display the identity information of the first user in the graphic code, or other information in the graphic code.

[0198] S92, in response to the authentication confirmation operation triggered by the second object for the target group in at least one candidate group, authentication confirmation information is fed back to the first object, wherein the authentication confirmation information is used to indicate that the second object has confirmed that the first object has joined the target group.

[0199] For example, if the second object selects a target group from at least one candidate group, it is equivalent to performing an authentication and confirmation operation on the target group. The second terminal determines that the second object has authenticated that the first object belongs to the target group, that is, it confirms that the first object has joined the target group. Therefore, the second terminal can generate authentication and confirmation information, the meaning of which can be referred to the previous text.

[0200] Furthermore, the second terminal can send authentication confirmation information back to the first server. If the first server determines, based on the authentication confirmation information, that the first object meets the preset authentication conditions, it will send an authentication success notification to the first terminal. If, based on the authentication confirmation information, the first server determines that the first object does not yet meet the preset authentication conditions, it can either not perform any operation or send the authentication confirmation information to the first terminal, in which case the first terminal can display a second prompt message. The meanings of the preset authentication conditions, the authentication success notification, and the second prompt message can be found above.

[0201] For example, please refer to Figure 10 This is an example diagram illustrating the process of displaying at least one candidate group provided in an embodiment of this application. For example, a second user scans a graphic code displayed on a first terminal, and the second terminal, in response to the scanning operation, obtains... Figure 10 The identity information 1001 in the graphic code shown in (1) includes the name of the first user and an avatar in the first application. The first terminal may also display authentication prompt information 1002, which prompts the user to authenticate the first object, specifically as follows: Figure 10 The text in (1) shows "Confirm that she is your colleague. After confirmation, she will join Company A".

[0202] When the second user clicks as shown Figure 10 The confirmation control 1003 shown in (1) is equivalent to a scan operation, and displays as shown in the image. Figure 10 The second user shown in (2) belongs to at least one group 1004, specifically including Figure 10 Company A and Company B in (2)

[0203] In one possible embodiment, the second terminal can scan the graphic code through the first application. In this case, the second terminal can directly determine at least one candidate group to which the second user belongs through the first server of the first application. Alternatively, the second terminal can also scan the graphic code through the second application. In this case, it involves how the second terminal obtains at least one candidate group to which the second object belongs in the first application, which is illustrated below with examples.

[0204] The second terminal can display a login authorization control in response to the second object's scanning operation of the graphic code in the second application, and in response to the login operation triggered by the login authorization control, authorize login to the first application based on the identity information of the second object in the second application, thereby displaying at least one candidate group to which the second object belongs.

[0205] In this embodiment, the second terminal can send the identity information of the second user in the second application to the second server based on the scanning operation triggered by the second object in the second application. The second server then sends the identity information in the second application to the first server. After confirming that the identity information is legitimate, the first server sends feedback to the second terminal about at least one candidate group to which the second object belongs. The second terminal then displays the at least one candidate group.

[0206] In one possible embodiment, the preset authentication conditions for certain target groups may be that only invitations from second objects with a first permission level are allowed to join, or the preset authentication conditions for certain groups may require invitations from second objects with a first permission level to join. However, when a second user scans a graphic code, they may not be aware of whether they can be authenticated. Therefore, in this embodiment, when the second terminal responds to an authentication confirmation operation triggered by a second object for a target group in at least one candidate group, the specific steps executed by the second terminal will differ depending on the specific content of the preset authentication conditions. The following describes the execution by the second terminal. Figure 11 Taking the flowchart shown as an example, and taking the second user as a user with the second permission level as an example, the specific steps executed by the second terminal are illustrated.

[0207] S111, in response to the second user's scanning operation of the graphic code, displays at least one candidate group to which the second user belongs.

[0208] The first scenario.

[0209] S112, in response to the authentication confirmation operation triggered by the second user for the target group in at least one candidate group, and the preset condition is that only the second object with the first permission level is allowed to join, then the second terminal can periodically request authentication information from the first server.

[0210] The authentication request information includes the identity information of the first object, used to request the first user to join the group. After scanning the graphic code, the second user can generate authentication request information and send it to the first server. The first server can forward the authentication request information to the second object in the group who has the first permission level, so that even if the second user does not have the first permission level, it can still assist the first user in authentication.

[0211] The second scenario.

[0212] S113, in response to the authentication confirmation operation triggered by the second user for a target group in at least one candidate group, and the preset condition is that the second object with a first permission level is authenticated and joined, then the second terminal can send authentication confirmation information to the first server so that the first server sends a graphic code to the second object with the first permission level.

[0213] The third scenario.

[0214] S114, in response to the authentication confirmation operation triggered by the second user for the target group in at least one candidate group, and the preset authentication conditions include the authentication joining of the second object with the second permission level, then the second terminal can send authentication confirmation information to the first server so that the first server confirms that the first object meets the preset authentication conditions.

[0215] The following is based on Figure 1A or Figure 1B The application scenario shown uses the first object as the first user and N second objects, including the second user and the third user, as an example to illustrate the identity authentication method in this application. Please refer to... Figure 12 This is a schematic diagram illustrating the interaction between a first server, a first terminal, and a third terminal, provided in an embodiment of this application.

[0216] S1201, the first terminal responds to the target group join request triggered by the first user and displays the first user's graphic code.

[0217] The meanings of the target group join request and the image code can be found in the previous text.

[0218] S1202, the first terminal sends the graphic code to the second terminal.

[0219] S1203, the first terminal sends the graphic code to the third terminal.

[0220] The execution order of S1202 and S1203 can be arbitrary, and this application does not impose any restrictions on it.

[0221] S1204, in response to the second user's scanning operation triggered by the graphic code, the second terminal displays at least one candidate group to which the second user belongs.

[0222] The meanings of scanning operations and candidate groups can be found in the preceding text.

[0223] S1205, the second terminal generates authentication confirmation information in response to the authentication confirmation operation triggered by the second user for a target group in at least one candidate group.

[0224] The meanings of authentication confirmation operations and authentication confirmation information can be found in the preceding text.

[0225] S1206, the second terminal sends the authentication confirmation information to the first server.

[0226] S1207, the first server sends the authentication confirmation information to the first terminal.

[0227] S1208, the first terminal displays the second prompt message.

[0228] The meaning and display method of the second prompt message can be found in the previous text.

[0229] S1209, the third terminal responds to the scanning operation triggered by the third user on the graphic code and displays at least one candidate group to which the third user belongs.

[0230] In this case, at least one candidate group to which the second user belongs can be different from at least one candidate group to which the third user belongs. Different means that there is at least one different group.

[0231] S1210, the third terminal generates authentication confirmation information in response to the third user's selection operation of a target group from at least one candidate group.

[0232] S1211, the third terminal sends the authentication confirmation information to the first server.

[0233] S1212, the first server determines that the first user meets the preset authentication conditions and generates an authentication success notification.

[0234] S1213, the first server sends a successful authentication notification to the first terminal.

[0235] S1214, the first terminal displays the first prompt message.

[0236] The meaning and display method of the first prompt message can be found in the previous text.

[0237] As one embodiment, S1207 or S1208 described above are optional steps.

[0238] To more clearly illustrate the interaction between the first terminal and the first server, based on Figure 1C The diagram below shows the architecture of the first server. Figure 13 The interaction process between the first server and the first terminal is illustrated using a QR code as an example.

[0239] S1301, A long-term communication link is established between the first terminal and the communication module.

[0240] S1302, the first terminal obtains the unique identifier of the long-link communication link from the communication module.

[0241] S1303, the first terminal responds to the target group join request triggered by the first user and generates a QR code request.

[0242] This QR code request is an example of an authentication information request. The QR code request may carry the identity information of the first user.

[0243] S1304, the first terminal sends a QR code request to the authentication module.

[0244] S1305, the authentication module requests the identity information of the first user from the storage module.

[0245] S1306, the authentication module generates a QR code based on the identity information.

[0246] This QR code is an example of a graphic code.

[0247] S1307, the authentication module sends the QR code to the first terminal.

[0248] S1308, the first terminal sends the authentication result request to the authentication module.

[0249] S1309, the authentication module requests the authentication result from the storage module.

[0250] It should be noted that S1308-S1309 are executed in a polling manner, that is, the first terminal polls the first server for the authentication result.

[0251] As an example, the graphic code has an expiration date, i.e. Figure 13 The QR code has an expiration date. When the authentication module determines that the QR code has expired, it can send an updated QR code to the first terminal to prevent the QR code from being leaked. Furthermore, updating the QR code will not affect the validity of QR codes previously shared by the first user, meaning that other second objects can still authenticate the first user using the QR codes previously shared by the first user.

[0252] S1310, the authentication module sends an authentication success notification to the first terminal.

[0253] The meaning of the authentication success notification can be found in the previous text.

[0254] The following is based on Figure 1A , Figure 1B or Figure 1C Taking the first server in the embodiment of this application executing the identity authentication method as an example, combined with Figure 14 The flowchart shown illustrates an identity authentication method, which introduces the identity authentication method in the embodiments of this application.

[0255] S1401, Receive authentication confirmation information from the second object, wherein the authentication confirmation information is used to indicate that the second object has confirmed that the first object has joined the target group based on the graphic code provided by the first object, and the second object is an object that has joined the target group.

[0256] The meaning of the second object and authentication confirmation information can be found in the previous text.

[0257] S1402, based on the authentication confirmation information, if the first object has met the preset authentication conditions, then an authentication success notification is sent to the first object. The authentication success notification is used to instruct the first object to join the target group. N is a positive integer. The preset authentication conditions are used to indicate that N second objects have confirmed that the first object has joined the target group.

[0258] After receiving the authentication confirmation information, the first server can determine whether the first object has met the preset authentication conditions. If the first object has met the preset authentication conditions, the first server can send an authentication success notification to the first object, allowing the first terminal to display the first prompt message. The meanings of the preset authentication conditions and the first prompt message can be found above.

[0259] The first server can also execute any of the above authentication methods, which will not be elaborated here.

[0260] Based on the same inventive concept, embodiments of this application provide an identity authentication device that can realize the functions of the first terminal mentioned above, or the functions of the first application in the first terminal. Please refer to... Figure 15 The device includes:

[0261] The first display module 1501 is used to display a graphic code corresponding to the first object in response to a target group joining request triggered by the first object, so as to provide at least one second object that has joined the target group for scanning.

[0262] The second display module 1502 is used to display a first prompt message in response to an authentication confirmation operation triggered after the second object scans the graphic code. The first prompt message indicates that the first object has been added to the target group.

[0263] In one possible embodiment, the first display module 1501 is specifically used for:

[0264] In response to a keyword input action triggered by the first object, or in response to a login action triggered by the first object, display the join control;

[0265] In response to the confirmation action triggered by adding the control to the first object, a graphical code is displayed.

[0266] In one possible embodiment, the first display module 1501 is specifically used for:

[0267] In response to a keyword input operation triggered by the first object, obtain the target keyword corresponding to the keyword input operation;

[0268] If it is determined that there is no group identifier that matches the target keyword among the preset group identifiers, the add control is displayed. Alternatively, the target keyword is sent to the server. If a matching failure result is received from the server, the add control is displayed. The matching failure result is sent by the server after determining that there is no group identifier that matches the target keyword.

[0269] In one possible embodiment, the second object includes at least one of the following:

[0270] At least one second object in the target group having a first permission level, wherein the first permission level represents the permission used to manage the various objects in the target group; and,

[0271] At least one second object in the target group has a second permission level, wherein the second permission level represents the permission used to assist the authenticated object in joining the target group.

[0272] In one possible embodiment, the second display module 1502 is specifically used for:

[0273] If a successful authentication notification is received from the server, the first prompt message will be displayed. The successful authentication notification is sent by the server after receiving authentication confirmation messages from N second objects. The authentication confirmation messages indicate that the corresponding second object has confirmed that the first object has joined the target group based on the graphic code, where N is a positive integer.

[0274] In one possible embodiment, the second display module 1502 is specifically used for:

[0275] Establish a long-lived communication link with the server and obtain the unique identifier of the long-lived communication link;

[0276] Using a unique identifier, an authentication result request is sent to the server in a round-robin manner. The authentication result request is used to request the authentication result of the first object.

[0277] If an authentication success notification is received in response to the authentication result request, the first prompt message will be displayed.

[0278] In one possible embodiment, during the process of sending authentication result requests to the server in a polling manner using a unique identifier, the time interval between the sending time of the (i+1)th round authentication result request and the sending time of the (i+2)th round authentication result request is greater than the time interval between the sending time of the ith round authentication result request and the sending time of the (i+1)th round authentication result request, where i is an integer greater than 1.

[0279] In one possible embodiment, if the second object is N second objects, where N is a positive integer; the second display module 1502 is specifically used for:

[0280] Each time an authentication confirmation operation is triggered after a third object scans a graphic code, a corresponding second prompt message is displayed. The second prompt message indicates that the corresponding third object has confirmed the first object's authentication based on the graphic code. The third object is any one of the second objects among N second objects that have confirmed the first object's identity in the target group, from the 1st to the (N-1st)th second object.

[0281] Upon receiving the Nth second object scan graphic code, the authentication confirmation operation is triggered, and the first prompt message is displayed.

[0282] It should be noted that, Figure 15 The device shown can also implement any of the authentication methods discussed above, which will not be elaborated here.

[0283] Based on the same inventive concept, embodiments of this application provide an identity authentication device. This device can realize the functions of the second or third terminal mentioned above, or the functions of the first or second application. Please refer to [link / reference]. Figure 16 The device includes:

[0284] Display module 1601 is used to display at least one candidate group to which the second object belongs in response to a scanning operation triggered by a graphic code provided by the second object to the first object.

[0285] Feedback module 1602 is used to respond to an authentication confirmation operation triggered by a second object for a target group in at least one candidate group, and to provide authentication confirmation information to the first object, wherein the authentication confirmation information is used to indicate that the second object has confirmed that the first object has joined the target group.

[0286] In one possible embodiment, the target group is a group in the first application; the display module 1601 is specifically used for:

[0287] In response to a second object scanning a graphic code in a second application, a login authorization control is displayed, wherein the first application and the second application are different applications;

[0288] In response to a login operation triggered by a login authorization control, the system authorizes login to the first application based on the identity information of the second object in the second application, and displays at least one candidate group to which the second object belongs in the first application.

[0289] It should be noted that, Figure 16 The device shown can also implement any of the authentication methods discussed above, which will not be elaborated here.

[0290] Based on the same inventive concept, embodiments of this application provide an identity authentication device that can realize the function of the first server mentioned above. Please refer to... Figure 17 The device includes:

[0291] The receiving module 1701 is used to receive authentication confirmation information fed back by the second object, wherein the authentication confirmation information is used to indicate that the second object has confirmed that the first object has joined the target group based on the graphic code provided by the first object, and the second object is an object that has joined the target group;

[0292] The feedback module 1702 is used to send an authentication success notification to the first object based on the authentication confirmation information if the first object has met the preset authentication conditions. The authentication success notification is used to instruct the first object to join the target group. N is a positive integer. The preset authentication conditions include N second objects confirming that the first object has joined the target group.

[0293] It should be noted that, Figure 17 The device shown can also implement any of the authentication methods discussed above, which will not be elaborated here.

[0294] Based on the same inventive concept, this application also provides a computer device that can realize the functions of the first terminal, second terminal, third terminal or first server mentioned above, and can be an electronic device such as a smartphone, tablet computer, server, laptop computer or PC.

[0295] Please refer to Figure 18 The computer device includes a display unit 1840, a processor 1880, and a memory 1820. The display unit 1840 includes a display panel 1841, used to display information input by the game player or information provided to the game player, as well as various operating interfaces of the computer device. In this embodiment, it is mainly used to display the interfaces and shortcut windows of applications installed on the computer device. Optionally, the display panel 1841 can be configured using an LCD (Liquid Crystal Display) or OLED (Organic Light-Emitting Diode) display.

[0296] The processor 1880 is used to read a computer program and then execute the methods defined by the computer program. For example, the processor 1880 reads a first application or a second application, thereby running the application on the computer device and displaying the application's interface on the display unit 1840. The processor 1880 may include one or more general-purpose processors, and may also include one or more DSPs (Digital Signal Processors) for performing related operations to implement the technical solutions provided in the embodiments of this application.

[0297] The memory 1820 generally includes main memory and secondary storage. Main memory can be random access memory (RAM), read-only memory (ROM), and cache, etc. Secondary storage can be a hard disk, optical disk, USB flash drive, floppy disk, or tape drive, etc. The memory 1820 is used to store computer programs and other data. The computer programs include application programs, and the other data may include data generated after the operating system or application programs are run, including system data (e.g., operating system configuration parameters) and game player data. In this embodiment, program instructions are stored in the memory 1820, and the processor 1880 executes the program instructions in the memory 1820 to implement the authentication method described above.

[0298] In addition, the computer device may also include a display unit 1840 for receiving input digital information, character information, or contact touch operations / non-contact gestures, as well as generating signal inputs related to the gamer settings and function control of the computer device. Specifically, in this embodiment, the display unit 1840 may include a display panel 1841. The display panel 1841, for example, is a touch screen, which can collect touch operations of the gamer on or near it (such as the user's operation on or on the display panel 1841 using a finger, stylus, or any suitable object or accessory), and drive the corresponding connection device according to a pre-set program. Optionally, the display panel 1841 may include two parts: a touch detection device and a touch controller. The touch detection device detects the player's touch position and the signal generated by the touch operation, and transmits the signal to the touch controller; the touch controller receives touch information from the touch detection device, converts it into touch point coordinates, sends it to the processor 1880, and can receive and execute commands from the processor 1880.

[0299] The display panel 1841 can be implemented using various methods, including resistive, capacitive, infrared, and surface acoustic wave technologies. In addition to the display unit 1840, the computer device may also include an input unit 1830, which may include, but is not limited to, one or more of a physical keyboard, function keys (such as volume control buttons, power buttons, etc.), a trackball, a mouse, and a joystick. For example, during the operation of the first application, the user can operate it by touching the display panel 1841 or by using the input unit 1830, such as by using the corresponding shortcut keys on the physical keyboard.

[0300] In addition to the above, the computer device may also include a power supply 1890 for powering other modules, an audio circuit 1860, a near-field communication module 1870, and an RF circuit 1810. The computer device may also include one or more sensors 1850, such as an accelerometer, a light sensor, a pressure sensor, etc. The audio circuit 1860 specifically includes a speaker 1861 and a microphone 1862, etc. For example, when the user does not perform touch or button operations, the computer device can collect the user's voice through the microphone 1862 and perform voice control operations.

[0301] As one embodiment, the computer device can also implement any of the authentication methods mentioned above, which will not be described in detail here.

[0302] Based on the same inventive concept, embodiments of this application provide a computer storage medium storing computer instructions that, when executed on a computer, cause the computer to perform any of the authentication methods discussed above.

[0303] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0304] Based on the same inventive concept, embodiments of this application provide a computer program product, which includes computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the computer device to perform the aforementioned authentication method.

[0305] Those skilled in the art will understand that all or part of the steps of the above method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it performs the steps of the above method embodiments. The aforementioned storage medium includes various media capable of storing program code, such as mobile storage devices, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0306] Alternatively, if the integrated units described above are implemented as software functional modules and sold or used as independent products, they can also be stored in a computer-readable storage medium. Based on this understanding, the technical solutions of the embodiments of this application, or the parts that contribute to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as mobile storage devices, ROM, RAM, magnetic disks, or optical disks.

[0307] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if such modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include such modifications and variations.

Claims

1. An identity authentication method, characterized in that, include: In response to a target group joining request triggered by a first object, a graphic code corresponding to the first object is displayed for scanning by at least one second object that has joined the target group; In response to the authentication confirmation operation triggered after the second object scans the graphic code, if an authentication success notification is received from the server, a first prompt message is displayed, wherein the first prompt message indicates that the first object has joined the target group; the authentication success notification is sent by the server after receiving authentication confirmation messages from N second objects and confirming that the first object has met the preset authentication conditions based on the authentication confirmation messages, wherein the authentication confirmation messages indicate that the corresponding second object has confirmed that the first object has joined the target group; the preset authentication conditions include one of the following: N second objects with a first permission level authenticate the first object; N second objects with a second permission level authenticate the first object; M second objects with a second permission level and (NM) second objects with a first permission level jointly authenticate the first object; M and N are positive integers; The authentication process for the first object by the second object with the first permission level is as follows: the second object with the second permission level scans a graphic code, generates and sends an authentication request to the server, and the server forwards the authentication request to the second object with the first permission level in the target group; the first permission level represents the permission used to manage each object in the target group, and the second permission level represents the permission used to assist the authenticated object in joining the target group; During joint authentication, the authentication order of the second object with the second permission level takes precedence over the authentication order of the first object with the first permission level.

2. The method as described in claim 1, characterized in that, In response to a target group join request triggered by a first object, a graphical code corresponding to the first object is displayed, including: In response to a keyword input operation triggered by the first object, or in response to a login operation triggered by the first object, the join control is displayed; In response to the confirmation operation triggered by the first object on the added control, the graphic code is displayed.

3. The method as described in claim 2, characterized in that, In response to a keyword input operation triggered by the first object, a control is displayed, including: In response to the keyword input operation triggered by the first object, the target keyword corresponding to the keyword input operation is obtained; If it is determined that there is no group identifier matching the target keyword among the preset group identifiers, the join control is displayed; or, the target keyword is sent to the server. If a matching failure result is received from the server, the join control is displayed. The matching failure result is sent by the server after determining that there is no group identifier matching the target keyword.

4. The method as described in claim 1, characterized in that, The second object includes at least one of the following: At least one second object with a first permission level in the target group; and, At least one second object with a second permission level in the target group.

5. The method as described in claim 1, characterized in that, If the authentication success notification is received from the server, the first prompt message will be displayed, including: Establish a long-lived communication link with the server and obtain the unique identifier of the long-lived communication link; Using the unique identifier, an authentication result request is sent to the server in a polling manner, wherein the authentication result request is used to request the authentication result of the first object; If the authentication success notification in response to the authentication result request is received, the first prompt message is displayed.

6. The method as described in claim 5, characterized in that, During the process of sending authentication result requests to the server in a polling manner using the unique identifier, the time interval between the sending time of the (i+1)th round authentication result request and the sending time of the (i+2)th round authentication result request is greater than the time interval between the sending time of the ith round authentication result request and the sending time of the (i+1)th round authentication result request, where i is an integer greater than 1.

7. The method as described in claim 4, characterized in that, If the second object is N times the second object; In response to the authentication confirmation operation triggered after the second object scans the graphic code, a first prompt message is displayed, including: Each time an authentication confirmation operation is triggered after a third object scans the graphic code, a corresponding second prompt message is displayed. The second prompt message is used to indicate that the corresponding third object has confirmed that the first object has been authenticated based on the graphic code. The third object is any one of the second objects among the N second objects that have confirmed the identity of the first object in the target group from the 1st to the (N-1th)th second object. Upon receiving the authentication confirmation operation triggered after the Nth second object scans the graphic code, the first prompt message is displayed.

8. An identity authentication method, characterized in that, include: In response to a scanning operation triggered by a graphical code provided by a second object to a first object, at least one candidate group to which the second object belongs is displayed; In response to the authentication confirmation operation triggered by the second object for the target group in the at least one candidate group, authentication confirmation information is fed back to the first object. This authentication confirmation information indicates that the second object has confirmed that the first object has joined the target group. The server receives authentication confirmation information from N second objects, and after confirming that the first object has met preset authentication conditions based on the authentication confirmation information, sends an authentication success notification to the first object. The preset authentication conditions include one of the following: N second objects with a first permission level authenticate the first object; N second objects with a second permission level authenticate the first object; M second objects with a second permission level and (NM) second objects with a first permission level jointly authenticate the first object; M and N are positive integers. When the preset authentication condition is that N second objects with a first permission level authenticate a first object, the step of responding to the authentication confirmation operation triggered by the second object for the target group in the at least one candidate group and feeding back authentication confirmation information to the first object includes: responding to the authentication confirmation operation triggered by the second object with a second permission level for the target group, generating and sending application authentication information to the server, so that the server forwards the application authentication information to the second object with the first permission level in the target group, so that the second object with the first permission level feeds back authentication confirmation information to the first object; the first permission level represents the permission used to manage each object in the target group, and the second permission level represents the permission used to assist the authenticated object in joining the target group; During joint authentication, the authentication order of the second object with the second permission level takes precedence over the authentication order of the first object with the first permission level.

9. The method as described in claim 8, characterized in that, The target group is a group in the first application; In response to a scanning operation triggered by a graphical code provided by a second object to a first object, at least one candidate group to which the second object belongs is displayed, including: In response to the second object's scanning operation of the graphic code in the second application, a login authorization control is displayed, wherein the first application and the second application are different applications; In response to a login operation triggered by the login authorization control, the system authorizes login to the first application based on the identity information of the second object in the second application, and displays the at least one candidate group to which the second object belongs in the first application.

10. An identity authentication method, characterized in that, include: Receive authentication confirmation information from the second object, wherein the authentication confirmation information is used to indicate that the second object has confirmed that the first object has joined the target group based on the graphic code provided by the first object, and the second object is an object that has joined the target group; Based on the authentication confirmation information, if the first object has met the preset authentication conditions, an authentication success notification is sent to the first object. The authentication success notification is used to instruct the first object to join the target group. N is a positive integer. The preset authentication conditions include N second objects confirming that the first object has joined the target group. The preset authentication conditions include one of the following: N second objects with a first permission level authenticate the first object; N second objects with a second permission level authenticate the first object; M second objects with a second permission level and (NM) second objects with a first permission level jointly authenticate the first object; M and N are positive integers. When the preset authentication condition is that N second objects with a first permission level authenticate the first object, receiving the authentication confirmation information fed back by the second objects includes: receiving the scanned graphic code from the second objects with the second permission level, generating and sending the application authentication information, and forwarding the application authentication information to the second objects with the first permission level in the target group, so that the second objects with the first permission level forward the application authentication information and feed back the authentication confirmation information; the first permission level represents the permission used to manage each object in the target group, and the second permission level represents the permission used to assist the authenticated object in joining the target group; During joint authentication, the authentication order of the second object with the second permission level takes precedence over the authentication order of the first object with the first permission level.

11. An identity authentication device, characterized in that, include: The first display module is configured to display a graphic code corresponding to the first object in response to a target group joining request triggered by the first object, so as to provide at least one second object that has joined the target group for scanning; The second display module is used to respond to the authentication confirmation operation triggered after the second object scans the graphic code. If an authentication success notification is received from the server, a first prompt message is displayed, wherein the first prompt message indicates that the first object has joined the target group. The authentication success notification is sent by the server after receiving authentication confirmation messages from N second objects and confirming that the first object has met the preset authentication conditions. The authentication confirmation messages indicate that the corresponding second object has confirmed that the first object has joined the target group. The preset authentication conditions include one of the following: N second objects with a first permission level authenticate the first object; N second objects with a second permission level authenticate the first object; M second objects with a second permission level and (NM) second objects with a first permission level jointly authenticate the first object; M and N are positive integers. The authentication process for the first object by the second object with the first permission level is as follows: the second object with the second permission level scans a graphic code, generates and sends an authentication request to the server, and the server forwards the authentication request to the second object with the first permission level in the target group; the first permission level represents the permission used to manage each object in the target group, and the second permission level represents the permission used to assist the authenticated object in joining the target group; During joint authentication, the authentication order of the second object with the second permission level takes precedence over the authentication order of the first object with the first permission level.

12. An identity authentication device, characterized in that, include: The display module is used to display at least one candidate group to which the second object belongs in response to a scanning operation triggered by a graphic code provided by the second object to the first object. A feedback module is used to respond to the authentication confirmation operation triggered by the second object for the target group in the at least one candidate group, and to send authentication confirmation information back to the first object. The authentication confirmation information indicates that the second object has confirmed that the first object has joined the target group. This allows the server to receive authentication confirmation information from N second objects, and after confirming that the first object has met preset authentication conditions based on the authentication confirmation information, to send an authentication success notification back to the first object. The preset authentication conditions include one of the following: N second objects with a first permission level authenticate the first object; N second objects with a second permission level authenticate the first object; M second objects with a second permission level and (NM) second objects with a first permission level jointly authenticate the first object; M and N are positive integers. When the preset authentication condition is that N second objects with a first permission level authenticate the first object, the feedback module is specifically used to: generate and send application authentication information to the server in response to the authentication confirmation operation triggered by the second object with a second permission level for the target group, so that the server forwards the application authentication information to the second object with the first permission level in the target group, and so that the second object with the first permission level feeds back authentication confirmation information to the first object; the first permission level represents the permission used to manage each object in the target group, and the second permission level represents the permission used to assist the authenticated object in joining the target group; During joint authentication, the authentication order of the second object with the second permission level takes precedence over the authentication order of the first object with the first permission level.

13. An identity authentication device, characterized in that, include: The receiving module is used to receive authentication confirmation information fed back by the second object, wherein the authentication confirmation information is used to indicate that the second object has confirmed that the first object has joined the target group based on the graphic code provided by the first object, and the second object is an object that has joined the target group; The feedback module is used to send an authentication success notification to the first object based on the authentication confirmation information if the first object has met the preset authentication conditions. The authentication success notification instructs the first object to join the target group. N is a positive integer. The preset authentication conditions include N second objects confirming that the first object has joined the target group. The preset authentication conditions include one of the following: N second objects with a first permission level authenticate the first object; N second objects with a second permission level authenticate the first object; M second objects with a second permission level and (NM) second objects with a first permission level jointly authenticate the first object; M and N are positive integers. When the preset authentication condition is that N second objects with a first permission level authenticate the first object, the receiving module is specifically used to: receive the scanned graphic code of the second object with a second permission level, generate and send the application authentication information, and forward the application authentication information to the second objects with the first permission level in the target group, so that the second objects with the first permission level forward the application authentication information and provide feedback authentication confirmation information; the first permission level represents the permission used to manage each object in the target group, and the second permission level represents the permission used to assist the authenticated object in joining the target group; During joint authentication, the authentication order of the second object with the second permission level takes precedence over the authentication order of the first object with the first permission level.

14. A computer device, characterized in that, include: At least one processor, and A memory that is communicatively connected to the at least one processor; The memory stores instructions executable by the at least one processor, which implements the method as described in any one of claims 1-7, 8-9, or 10 by executing the instructions stored in the memory.

15. A computer storage medium, characterized in that, The computer storage medium stores computer instructions that, when executed on the computer, cause the computer to perform the method as described in any one of claims 1-7, 8-9, or 10.

Images