Account login methods, devices, electronic devices, media, and computer program products

Abstract

This application provides an account login method, apparatus, electronic device, medium, and computer program product, belonging to the field of information security technology. The method includes: obtaining a login request for a first account; determining, based on the login request, whether the terminal using the first account to log in is a terminal associated with the first account; if the terminal is not associated with the first account, then using various verification methods in a first combination to verify the login of the first account; if all verification methods in the first combination pass verification, then associating the terminal with the first account and outputting an account login interface, the account login interface being used for logging in to the first account. This method increases the difficulty of cracking or bypassing account login verification methods, making it difficult for malicious actors to log in even if they obtain account information, thus preventing damage to users' assets.

Description

Technical Field

[0001] This application relates to information security technology, and more particularly to an account login method, device, electronic device, medium, and computer program product. Background Technology

[0002] With the development of internet technology, more and more offline services can be handled online through applications. Users can log in with their account and password to conduct business or browse services.

[0003] When logging into an account on a different device, verification of the new device is required. However, logging into an account on a different device could allow malicious actors to obtain account information and attempt to log in on the new device.

[0004] In the example technology, the account is logged in on a new device by using the account password or SMS message. This verification method is simple and easy to be cracked or bypassed, making it easy for the account to be logged in on the new device, which in turn makes the user's property vulnerable to damage. Summary of the Invention

[0005] This application provides an account login method, device, electronic device, medium, and computer program product to address the problem that users' property is easily damaged.

[0006] On the one hand, this application provides an account login method applied to a terminal, the account login method including:

[0007] Obtain the login request of the first account, and determine whether the terminal that the first account is logging in is the terminal associated with the first account based on the login request;

[0008] If the terminal is not the terminal associated with the first account, then the first account is logged in using each of the verification methods in the first combination. The first combination includes at least two of the following verification methods: biometric verification, user identification verification, user question verification, user password verification, and friend verification.

[0009] If all verification methods in the first combination pass the verification, the terminal is associated with the first account, and an account login interface is output. The account login interface is used to log in to the first account.

[0010] On the other hand, this application also provides an account login device, including:

[0011] The acquisition module is used to acquire the login request of the first account and determine whether the terminal on which the first account logs in is the terminal associated with the first account based on the login request.

[0012] The verification module is used to verify the login of the first account by using various verification methods in the first combination if the terminal is not the terminal associated with the first account. The first combination includes at least two verification methods among biometric verification, user identification verification, user question verification, user password verification, and friend verification.

[0013] The association module is used to associate the terminal with the first account and output an account login interface if all verification methods in the first combination pass the verification, the account login interface being used to log in to the first account.

[0014] On the other hand, this application also provides an electronic device, including: a processor, and a memory communicatively connected to the processor;

[0015] The memory stores computer-executed instructions;

[0016] The processor executes computer execution instructions stored in the memory to implement the method described above.

[0017] On the other hand, this application also provides a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, are used to implement the method described above.

[0018] On the other hand, this application also provides a computer program product, including a computer program that, when executed by a processor, implements the method described above.

[0019] The account login method, device, electronic device, medium, and computer program product provided in this application determine whether the account is logging into a new device by checking if the terminal is the device associated with the account. If the account is logging into a new device, it is verified through multiple authentication methods. After the multiple authentication methods are passed, the account is associated with the terminal, allowing the account to log in on the terminal. In other words, when this application detects that an account is logging into a new device, it verifies the new device through multiple authentication methods, which greatly increases the difficulty of the authentication methods being cracked or bypassed. Even if criminals obtain account information, it is difficult for them to log into the account, thus preventing damage to the user's property. Attached Figure Description

[0020] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0021] Figure 1 A schematic diagram illustrating the scenarios involved in the account login method provided in this application;

[0022] Figure 2 A flowchart illustrating the first embodiment of the account login method provided in this application;

[0023] Figure 3 A flowchart illustrating a second embodiment of the account login method provided in this application;

[0024] Figure 4 A flowchart illustrating the third embodiment of the account login method provided in this application;

[0025] Figure 5 A flowchart illustrating the fourth embodiment of the account login method provided in this application;

[0026] Figure 6 A flowchart illustrating the fifth embodiment of the account login method provided in this application;

[0027] Figure 7 This is a schematic diagram of the modules of the account login device of the present invention;

[0028] Figure 8 This is a schematic diagram of the account login device of the present invention.

[0029] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0030] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0031] The account login method provided in this application can be applied to Figure 1 The scene diagram shown is as follows. Figure 1As shown, user 100 logs in to an account on terminal device 200. Terminal device 200 sends an account login request to account login device 300 based on the login operation. The account login request carries the identifier of terminal device 200 and the account to be logged in. Account login device 300 checks whether the account is associated with terminal device 200 based on the identifier. If the account is not associated with terminal device 200, account login device 300 determines that the account is being logged in on a new device, meaning terminal device 200 is not the login device bound to the account. Account login device 300 then needs to verify the login using multiple authentication methods. If all authentication methods pass, it associates terminal device 200 with the account and sends an account login interface to terminal device 200 to allow the account to log in.

[0032] It should be noted that terminal device 200 can be any device acting as a client, such as a mobile phone or a computer. Account login device 300 can be any device acting as a server.

[0033] The technical solution of this application and how the technical solution of this application solves the above-mentioned technical problems are described in detail below with specific embodiments. These specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of this application will now be described with reference to the accompanying drawings.

[0034] Reference Figure 2 , Figure 2 This is a flowchart illustrating the first embodiment of the account login method of this application. The account login method includes the following steps:

[0035] Step S201: Obtain the login request of the first account, and determine whether the terminal used by the first account to log in is the terminal associated with the first account based on the login request.

[0036] In this embodiment, the execution entity is the account login device. The account login device acts as a server and communicates with the terminal device, which acts as a client. For ease of description, the term "device" will be used to refer to the account login device, and "terminal" will be used to refer to the terminal device.

[0037] The terminal can display a local account login interface, where users can enter their account information to log in. The terminal then obtains its own device identifier and generates a login request based on the device identifier and the account information, before sending the login request to the device. The account can be an account belonging to any application. For example, the account can be an account belonging to a financial institution's application, such as a mobile banking account. In this embodiment, the entered account is defined as the first account.

[0038] Upon receiving a login request, the device parses the request to obtain a first account and the device identifier of the terminal using that account to log in. The device stores the device identifier associated with the first account. After obtaining the first account and the device identifier of the terminal using that account to log in based on the login request, the device determines whether the device identifier of the terminal using that account to log in is the same as the device identifier associated with the first account.

[0039] Step S202: If the terminal is not the terminal associated with the first account, then the first account is logged in using each of the verification methods in the first combination. The first combination includes at least two of the following verification methods: biometric verification, user identification verification, user question verification, user password verification, and friend verification.

[0040] If the device identifier of the terminal used to log in with the first account is not the same as the device identifier associated with the first account, it can be determined that the terminal used to log in with the first account is not the terminal associated with the first account. In other words, the user logged in with the first account on a new device, and the device determines that the login of the first account poses a risk. In response, the device uses each of the verification methods in the first combination to verify the login of the first account.

[0041] The first combination includes at least two of the following verification methods: biometric verification, user identification verification, user question verification, user password verification, and friend verification.

[0042] Biometric verification refers to a verification method that compares a user's facial features, voiceprint features, and other biometric features with preset biometric features associated with the primary account.

[0043] User identification verification refers to a verification method that compares the unique identifier of a user, such as their ID card or phone number, with a preset identifier associated with the primary account.

[0044] User password verification refers to a verification method that compares the password of an account other than the primary account entered by the user with the password associated with the primary account.

[0045] Friend verification refers to a verification method that requires a friend to perform a specified action. This specified action could be, for example, the friend sending a specified verification code, text message, or other information via their associated device.

[0046] Each verification method can be assigned a priority, and the verification methods in the first group are selected in descending order of priority. For example, the top five verification methods can be used as the first group. The priority can be set based on the verification methods used by the first account when linking other devices. For instance, if the first account uses the user ID verification method most frequently when linking multiple other devices, then the user ID verification method should have the lowest priority. This setting ensures that when linking a new device, the first account prioritizes less frequently used verification methods. If the new device is used by unauthorized individuals, it increases the difficulty for them to break the verification methods, making it harder for unauthorized individuals to log into the first account.

[0047] Step S203: If all verification methods in the first combination pass the verification, then associate the terminal with the first account and output the account login interface, which is used to log in to the first account.

[0048] Once all authentication methods in the first combination pass verification, the device associates the terminal with the first account and sends an account login interface to the terminal. The user can then log in to the first account through the terminal's account login interface.

[0049] In existing technologies, hackers and other criminals use methods such as password brute-force attacks and credential stuffing attacks to crack account login passwords, and then use the cracked accounts and passwords to log in, thereby threatening users' financial security. Credential stuffing attacks refer to situations where users use the same account and password on different websites, allowing hackers to obtain these passwords and attempt to log in. Password brute-force attacks involve hackers combining a user's initials, birthday, phone number, patterned alphanumeric combinations, or previously cracked passwords to attempt login.

[0050] When criminals use cracked accounts and passwords to log in to accounts, they will log in to the account on a new device. When the device detects that the account is logging in on a new device, it uses multiple verification methods to verify the account login, thereby preventing criminals from logging in to the account and threatening the user's property.

[0051] In this embodiment, when an account logs in, it is determined whether the terminal is the device associated with the account to determine whether the account is logging into a new device. If the account is logging into a new device, it is verified through multiple verification methods. After the multiple verification methods are passed, the account and the terminal are associated so that the account can log in on the terminal. That is, when this application discovers that the account is logging into a new device, it verifies the new device through multiple verification methods, which greatly increases the difficulty of the verification methods being broken or bypassed. Even if criminals obtain account information, it is difficult for them to log into the account, thus avoiding damage to the user's property.

[0052] Reference Figure 3 , Figure 3 This is a flowchart illustrating the second embodiment of the account login method of this application. Based on the first embodiment, after step S202, it further includes:

[0053] Step S301: If the verification method in the first combination passes the verification, the value of the flag bit corresponding to the verification method in the first combination is set to a preset value, and it is determined whether each verification method in the first combination has a corresponding flag. The preset value is used to indicate that the verification method of the corresponding flag bit passes the verification.

[0054] In this embodiment, after determining the first combination, the device sets corresponding flag bits for each verification method in the first combination. After detecting that a verification method in the first combination has passed verification, the device sets the flag bit corresponding to that verification method in the first combination to a preset value. The preset value of the flag bit indicates that the verification method corresponding to that flag bit has passed verification.

[0055] Step S302: If the values ​​of the flag bits corresponding to each verification method in the first combination are all preset values, then it is determined that each verification method in the first combination has passed the verification.

[0056] The device determines whether the flag bits corresponding to each verification method in the first combination are all preset values. If the flag bits corresponding to each verification method in the first combination are all preset values, it can be determined that each verification method in the first combination has passed verification.

[0057] For example, the first combination includes facial recognition verification (biometric verification), trusted mobile phone SMS verification (friend verification), and bank card password verification (user password verification). When facial recognition verification passes, i.e., when the facial image of the user logging into the first account matches the facial image associated with the first account, the value of the FaceCheeFlag flag for facial recognition verification is set to 1 (1 is a default value). When trusted mobile phone SMS verification passes, i.e., when a trusted mobile phone sends a specified verification code or information to the device, the value of the MobileCheeFlag flag for trusted mobile phone SMS verification is set to 1 (1 is a default value). When bank card password verification passes, i.e., when the device detects that the entered bank card password is correct, the value of the CardCheeFlag flag for bank card password verification is set to 1 (1 is a default value).

[0058] In this embodiment, when the device detects that the verification method has passed verification, it sets the value of the flag bit corresponding to the verification method to a preset value, thereby quickly determining whether the verification method has passed verification by the value of the flag bit corresponding to the verification method.

[0059] Reference Figure 4 , Figure 4This is a third embodiment of the account login method of this application. Based on the first or second embodiment, after step S202, it further includes:

[0060] Step S401: If any verification method in the first combination fails, then the first account is logged in using each verification method in the second combination. The second combination includes at least two verification methods from the following: biometric verification method, user identification verification method, user question verification method, user password verification method, and friend verification method.

[0061] In this embodiment, if any verification method in the first combination fails, the device needs to re-verify the login of the first account. During re-verification, the device determines a second combination based on the various verification methods. The second combination includes at least two of the following verification methods: biometric verification, user identification verification, user question verification, user password verification, and friend verification. It is understood that the first combination and the second combination can be the same or different.

[0062] The verification methods in the second combination can be determined based on the verification methods in the first combination.

[0063] In one example, the verification methods in the first combination include mandatory verification methods. For example, biometric verification and user identification verification are mandatory. If the preset verification method in the first combination (the mandatory verification method) fails, the verification methods in the second combination, including the preset verification method, prevent unauthorized individuals from bypassing the verification methods to log in to the first account.

[0064] In another example, the verification methods in the first combination include auxiliary verification methods, which are not mandatory verification methods, such as user-provided questions. If the auxiliary verification method fails, it may be because the user has forgotten the corresponding information, and in this case, the verification methods in the second combination do not include that auxiliary verification method.

[0065] Step S402: If all verification methods in the second combination pass the verification, then associate the terminal with the first account and output the account login interface.

[0066] If all verification methods in the second combination pass verification, the terminal will be associated with the first account, and an account login interface will be displayed for the user to log in to the first account.

[0067] In this embodiment, if any verification method in the first combination fails, the verification methods in the second combination are used to verify the login of the first account, so that the user to whom the first account belongs has an additional opportunity to log in to the first account.

[0068] In one embodiment, step S402 includes:

[0069] If any verification method in the first combination fails, update the number of terminal association failures.

[0070] If the preset number of attempts is not reached, the first account will be logged in using the various verification methods in the second combination.

[0071] In this embodiment, if any verification method in the first combination fails, verification of other verification methods in the first combination is terminated, and the number of terminal association failures is updated. The updated number is, for example, the number before the update plus 1.

[0072] The device stores a preset number of attempts. This preset number refers to the maximum number of times the terminal association process can fail. After updating the number of attempts, the device checks whether the preset number has been reached. If the number has not reached the preset number, it can be determined that the terminal association failures have not reached the maximum number, and the device then uses the various verification methods in the second combination to verify the login of the first account.

[0073] Once the number of updates reaches a preset limit, it can be determined that the maximum number of terminal association failures has been reached. The device can add the terminal's identifier to a blacklist and / or prohibit the terminal from associating with the first account during a preset time period. Terminals corresponding to identifiers added to the blacklist are prohibited from associating with accounts; that is, terminals corresponding to identifiers included in the blacklist are prohibited from associating with accounts. Prohibiting the terminal from associating with the first account during a preset time period, for example, prohibiting the terminal from logging into the first account on the same day.

[0074] If the number of times the updated login attempts reach a preset limit, the device will determine the number of times the terminal and account login have been blocked. If the number of attempts is high, meaning it is greater than or equal to a preset threshold, the device will determine that the terminal has attempted to log in with multiple unfamiliar accounts and will add the terminal's identifier to a blacklist, thus marking the terminal as a device prohibited from associating with accounts. If the number of attempts is less than the preset threshold, the device will block the terminal from associating with the first account within a preset time period.

[0075] In this embodiment, the device determines whether to allow the first account to perform login verification based on the number of terminal association failures, thereby avoiding the first account from performing login verification frequently.

[0076] Reference Figure 5 , Figure 5 This is the fourth embodiment of the account login method of this application. Based on any one of the first to third embodiments, after step S202, it further includes:

[0077] Step S501: If the target verification method in the first combination fails to verify, the reason for the failure of the target verification method is determined. The target verification method is any verification method in the first combination.

[0078] In this embodiment, when the target verification method in the first combination fails, the device needs to determine the reason for the failure. The target verification method can be any verification method in the first combination.

[0079] In step S502, if the verification fails because the verification was skipped, the terminal's identifier is added to the blacklist. The identifiers included in the blacklist are used to prohibit the corresponding terminal from being associated with the account.

[0080] When verification fails due to skipped verification, it indicates that the user is attempting to bypass verification to log in to the primary account. The device can then determine that the user is an unauthorized user attempting to log in to the primary account. In response, the device adds the terminal's identifier to a blacklist, thereby preventing the terminal from being associated with any accounts.

[0081] Furthermore, the verification methods include a preset verification method and an auxiliary verification method. If the target verification method is the preset verification method and the verification fails due to skipping verification, the terminal's identifier is added to the blacklist. If the target verification method is an auxiliary verification method, the various verification methods in the second combination are used to verify the login of the first account. The second combination does not include the target verification method.

[0082] In this embodiment, if the target verification method in the first combination fails and the reason for the failure is skipping verification, the terminal's identifier is added to the blacklist to reduce the risk of account attacks.

[0083] In one embodiment, after step S202, the method further includes:

[0084] If any verification method in the first combination fails, a communication connection is established between the terminal and the authentication terminal, and a verification request is sent to the authentication terminal. The verification request is used to request the authentication terminal to perform immediate verification of the user.

[0085] If the user passes the instant verification, the terminal will be associated with the first account, and the account login interface will be displayed.

[0086] In this embodiment, if any verification method in the first combination fails, it may be due to network instability or terminal malfunction. To address this, the device establishes a communication connection between the terminal and the authentication terminal and sends a verification request to the authentication terminal. The verification request is used to request the terminal to perform immediate verification of the user.

[0087] Specifically, if the facial recognition verification method in the first combination fails, it may be due to an unclear facial image captured by the terminal or other reasons. If the bank card password verification method or trusted mobile SMS verification method in the first combination experiences a delay, it may be due to poor communication quality. In response, the device requests the authentication terminal to establish a communication connection with the terminal and sends a verification request to the authentication terminal, enabling video communication between the two terminals and allowing the authentication terminal to conduct manual verification. Furthermore, the verification request may include the identification information uploaded by the terminal; the authentication terminal parses the verification request to obtain the identification information for immediate verification of the user's identification.

[0088] The authentication terminal will send the authentication result to the device. If the authentication result is that the user has passed the instant authentication, then the user belongs to the first account. The device will then associate the terminal with the first account and output an account login interface for the first account to log in.

[0089] In this embodiment, if the verification method in the first combination fails, the user is verified by real-time verification to avoid the user being unable to log in to the account on the new device due to poor terminal network quality or other reasons.

[0090] Reference Figure 6 , Figure 6 This is the fifth embodiment of the account login method of this application. Based on any one of the first to fourth embodiments, step S203 includes:

[0091] Step S601: Obtain user behavior information and determine behavior characteristics based on the behavior information.

[0092] Traditional verification methods such as SMS verification codes and password verification are at risk of being stolen and leaked, while verification methods such as facial recognition have certain flaws. For example, criminals can use photo animation technology, or use videos and masks to crack facial recognition verification methods.

[0093] To increase the difficulty of cracking the verification method, the behavior information of non-sponsors is collected as negative samples, and the behavior information of users is collected as positive samples. The deep neural network is trained by learning from the positive and negative samples.

[0094] When all verification methods in the first combination pass verification, the device acquires the user's behavioral information during the authentication process. This behavioral information is obtained by capturing video of the user authenticating using the terminal's camera. In other words, during authentication, the device requires the terminal to capture video of the user authenticating. The device then uses a deep neural network to extract behavioral features from the behavioral information.

[0095] Step S602: Classify the behavioral features to obtain classification results.

[0096] The device uses the SVM algorithm to classify behavioral features and obtain classification results. The classification results include abnormal behavior and normal behavior.

[0097] Deep neural networks can also be set up on an artificial intelligence platform. The deep neural network on the artificial intelligence platform extracts behavioral features from behavioral information, and then the artificial intelligence platform uses the SVM algorithm to classify the behavioral features to obtain classification results. Finally, the classification results are sent to the device.

[0098] Step S603: If the user's behavior is determined not to be abnormal based on the classification results, then the terminal is associated with the first account.

[0099] If the classification result is not abnormal behavior but normal behavior, the device can determine that it is the user associated with the first account logging in with the first account on the new device, rather than a criminal logging in with the first account on the new device, and the device will then associate the terminal with the first account.

[0100] In this embodiment, the device acquires the user's behavior information and determines the behavior characteristics based on the behavior information. If it is determined that the user's behavior is not abnormal based on the behavior characteristics, the first account is associated with the terminal, thus ensuring the user's property security.

[0101] In one embodiment, the verification method includes a user password verification method, and the verification of the user password verification method specifically includes:

[0102] Multiple secondary accounts recorded in the output terminal;

[0103] If any second account selection information is received, a password verification interface will be displayed.

[0104] If the password entered on the password verification interface matches the password of the second account corresponding to the selected information, then the user's password verification method is confirmed to be successful.

[0105] In this embodiment, the second account can be the account of various applications in the terminal, such as a bank card number. If the terminal is a new device for the user, the applications in the terminal can be cloned from the old device, so the second account recorded on the terminal is the same as the second account recorded on the old device. The old device is the terminal associated with the first account, and the device can store the second account and corresponding password recorded on the old device.

[0106] When verifying a user's password, the device outputs multiple secondary accounts recorded by the terminal. Each secondary account can be set in a list. The user can select a secondary account from the list displayed on the terminal for password verification. The secondary accounts in the list are arranged in descending order of their usage frequency. By selecting a secondary account from the list, the user ensures that the selected secondary account is legitimate and valid.

[0107] After the terminal selects a second account, it sends selection information to the device, which includes the second account selected by the user. The device then outputs a password verification interface for the selected second account to the terminal.

[0108] Users can enter their password on the password verification interface. The device retrieves the entered password based on the password verification interface. If the entered password matches the password of the second account corresponding to the selected information, the user's password verification method is deemed successful. The password of the second account corresponding to the selected information is stored in the device.

[0109] In this embodiment, the device verifies the login of the first account by using the user's password. That is, the device uses the passwords of the user's other accounts to verify the login of the first account, which increases the difficulty for unauthorized individuals to log in to the first account.

[0110] In one embodiment, the verification method includes a friend verification method, and the verification of the friend verification method specifically includes:

[0111] Output multiple communication numbers;

[0112] Send a verification message to the selected communication number. The verification message is used to instruct the user corresponding to the communication number to perform a specified operation.

[0113] If the user corresponding to the communication number is detected to have completed the specified operation, then the friend verification method is deemed successful.

[0114] In this embodiment, the verification method includes a friendly verification method. In this embodiment, the communication number can be a phone number in the communication list of the terminal. If the terminal is a new device for the user, the communication list in the terminal can be cloned from the old device. If the terminal is a new device for the user, the general number in the terminal is the communication number recorded on the old device. The old device is the terminal associated with the first account, and the device can store the communication numbers recorded on the old device.

[0115] When verifying a friend's identity, the device outputs multiple contact numbers stored in the terminal. These contact numbers can be set in a list. Users can select a contact number from the list displayed on the terminal for friend verification. The contact numbers in the list are arranged in descending order of the number of times they have been contacted. By selecting a contact number from the list, the user ensures that the selected contact number is legitimate and valid.

[0116] After selecting a communication number, the terminal sends selection information to the device, which includes the selected communication number. The device then sends verification information to the communication number. This verification information instructs the user corresponding to the communication number to perform a specified operation. For example, the specified operation might request the user of the communication number to send a specified verification code to the device; this verification code is included in the verification information. It's important to note that the verification information describes the terminal's user requesting the user corresponding to the communication number to perform the specified operation. If the user corresponding to the communication number cannot identify the user based on the verification information, the specified operation will not be completed, meaning the friend verification will fail. The device determines that the friend verification method has been successfully verified once it detects that the user corresponding to the communication number has completed the specified operation.

[0117] In this embodiment, the device verifies the login of the first account through friend verification, which increases the difficulty for unauthorized individuals to log in to the first account.

[0118] In one embodiment, when the device determines that the terminal is not associated with the first account, the device determines whether the blacklist includes the terminal's identifier. If the blacklist includes the terminal's identifier, it can be determined that the terminal is a prohibited device, meaning the terminal is likely a device belonging to an unauthorized individual. In this case, the device refuses to associate the terminal with the first account. If the blacklist does not include the terminal's identifier, it can be preliminarily determined that the terminal is not a device belonging to an unauthorized individual, and the device then uses each verification method in the first combination to verify the login of the first account.

[0119] Furthermore, when the blacklist does not include the terminal's identifier, the device determines whether the number of times the terminal has failed to associate has reached a preset number. If not, it uses each of the verification methods in the first combination to verify the login of the first account.

[0120] In this embodiment, the device determines whether the blacklist includes the identifier of the terminal, thereby determining whether the terminal is a terminal device belonging to an illegal individual based on the blacklist.

[0121] The present invention also provides an account login device, as described above. Figure 7 The account login device 700 includes:

[0122] The acquisition module 710 is used to acquire the login request of the first account and determine whether the terminal used by the first account to log in is the terminal associated with the first account based on the login request.

[0123] The verification module 720 is used to verify the login of the first account by using various verification methods in the first combination if the terminal is not the terminal associated with the first account. The first combination includes at least two verification methods among biometric verification method, user identification verification method, user question verification method, user password verification method and friend verification method.

[0124] The association module 730 is used to associate the terminal with the first account and output the account login interface if all the verification methods in the first combination pass the verification. The account login interface is used to log in to the first account.

[0125] In one embodiment, the account login device 700 further includes:

[0126] The setting module is used to set the value of the flag bit corresponding to the verification method in the first combination to a preset value if the verification method in the first combination passes the verification, and to determine whether each verification method in the first combination has a corresponding flag. The preset value is used to indicate that the verification method corresponding to the flag bit has passed the verification.

[0127] The determination module is used to determine that each verification method in the first combination has passed verification if the values ​​of the flag bits corresponding to each verification method in the first combination are all preset values.

[0128] In one embodiment, the account login device 700 further includes:

[0129] The verification module 720 is used to verify the login of the first account by using each verification method in the second combination if any verification method in the first combination fails. The second combination includes at least two verification methods among biometric verification, user identification verification, user question verification, user password verification, and friend verification.

[0130] The association module 730 is used to associate the terminal with the first account and output the account login interface if all the verification methods in the second combination pass the verification.

[0131] In one embodiment, the account login device 700 further includes:

[0132] The update module is used to update the number of terminal association failures if any verification method in the first combination fails.

[0133] The verification module 720 is used to verify the login of the first account by using various verification methods in the second combination if the number of attempts has not reached the preset number.

[0134] In one embodiment, the account login device 700 further includes:

[0135] The module adds a terminal identifier to a blacklist and / or prohibits the terminal from associating with the first account within a preset time period if the number of attempts reaches a preset limit. The identifiers included in the blacklist are used to prohibit the corresponding terminal from associating with the account.

[0136] In one embodiment, the account login device 700 further includes:

[0137] The determination module is used to determine the reason for the failure of the target verification method if the target verification method in the first combination fails. The target verification method is any verification method in the first combination.

[0138] Add a module to add the terminal's identifier to the blacklist if the verification fails due to skipping verification. The blacklist includes identifiers used to prohibit the corresponding terminal from being associated with the account.

[0139] In one embodiment, the account login device 700 further includes:

[0140] The module is used to establish a communication connection between the terminal and the authentication terminal if any verification method in the first combination fails, and to send a verification request to the authentication terminal. The verification request is used to request the authentication terminal to perform immediate verification of the user.

[0141] The association module 730 is used to associate the terminal with the first account and output the account login interface if the user passes the instant verification.

[0142] In one embodiment, the account login device 700 further includes:

[0143] The acquisition module 710 is used to acquire user behavior information and determine behavior characteristics based on the behavior information;

[0144] The classification module is used to classify behavioral features and obtain classification results;

[0145] The association module 730 is used to associate the terminal with the first account if it is determined from the classification results that the user's behavior is not abnormal.

[0146] In one embodiment, the account login device 700 further includes:

[0147] The output module is used to output multiple secondary accounts recorded by the terminal;

[0148] The output module is used to output a password verification interface if it receives selection information for any second account.

[0149] The determination module is used to determine if the password entered on the password verification interface matches the password of the second account corresponding to the selected information, and if so, that the user's password verification method has passed the verification.

[0150] In one embodiment, the account login device 700 further includes:

[0151] The output module is used to output multiple communication numbers;

[0152] Send Mika, used to send verification information to the selected communication number. The verification information is used to instruct the user corresponding to the communication number to perform a specified operation.

[0153] The determination module is used to determine whether the friend verification method is successful if the user corresponding to the communication number completes the specified operation.

[0154] In one embodiment, the account login device 700 further includes:

[0155] The determination module is used to determine whether the blacklist includes the identifier of the terminal;

[0156] The verification module 720 is used to verify the login of the first account by using the various verification methods in the first combination if the blacklist does not include the terminal identifier.

[0157] Figure 8 This is a hardware structure diagram of an account login device according to an exemplary embodiment.

[0158] The account login device 800 may include: a processor 81, such as a CPU, a memory 82, and a transceiver 83. Those skilled in the art will understand that... Figure 8 The structure shown does not constitute a limitation on the account login device and may include more or fewer components than illustrated, or combine certain components, or have different component arrangements. Memory 82 may be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk.

[0159] The processor 81 can call computer programs stored in the memory 82 or execute computer instructions to complete all or part of the steps of the account login method described above.

[0160] Transceiver 83 is used to receive information sent by external devices and to send information to external devices.

[0161] An electronic device includes: a processor, and a memory communicatively connected to the processor;

[0162] The memory stores the instructions that the computer executes;

[0163] The processor executes computer execution instructions stored in memory to implement the account login method as described in any of the above embodiments.

[0164] A non-transitory computer-readable storage medium, wherein instructions (computer-executable instructions) in the storage medium are executed by a processor of an account login device, enabling the account login device to perform the aforementioned account login method.

[0165] A computer program product includes a computer program that, when executed by a processor of an account login device, enables the account login device to perform the aforementioned account login method.

[0166] It should be noted that the account login method, device, electronic device, medium, and computer program products provided in this application can be used in the financial field, and also in any field other than finance.

[0167] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This invention is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the following claims.

[0168] It should be understood that this disclosure is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this disclosure is limited only by the appended claims.

Claims

1. An account login method, characterized in that, include: Obtain the login request of the first account, and determine whether the terminal that the first account is logging in is the terminal associated with the first account based on the login request; If the terminal is not the terminal associated with the first account, then the first account is logged in using each of the verification methods in the first combination. The first combination includes at least two of the following verification methods: biometric verification, user identification verification, user question verification, user password verification, and friend verification. If all verification methods in the first combination pass the verification, the terminal is associated with the first account, and an account login interface is output. The account login interface is used to log in to the first account. Associating the terminal with the first account includes: The system acquires user behavior information and determines behavioral characteristics based on the behavior information; the behavior information is obtained by capturing video of the user authenticating using the terminal's camera. The behavioral characteristics are classified to obtain classification results; If the user's behavior is determined not to be abnormal based on the classification result, then the terminal is associated with the first account; After verifying the login of the first account using each verification method in the first combination, the method further includes: If any verification method in the first combination fails, then the first account will be logged in using the verification methods in the second combination. The second combination includes at least two of the following verification methods: biometric verification, user identification verification, user question verification, user password verification, and friend verification. Each verification method in the second combination includes at least one of the mandatory verification methods in the first combination. If all verification methods in the second combination pass the verification, then the terminal is associated with the first account, and the account login interface is output. The method further includes: if the target verification method in the first combination fails to verify, then determining the reason for the verification failure of the target verification method, wherein the target verification method is any verification method in the first combination; If the verification failure is due to skipping verification, the identifier of the terminal is added to the blacklist. The identifiers included in the blacklist are used to prohibit the corresponding terminal from being associated with the account. The method further includes: if any verification method in the first combination fails, establishing a communication connection between the terminal and the authentication terminal, and sending a verification request to the authentication terminal, so that the authentication terminal and the terminal can conduct video communication for manual review; the verification request is used to request the authentication terminal to perform real-time verification of the user; If the user passes the instant verification, the terminal is associated with the first account, and the account login interface is displayed.

2. The account login method according to claim 1, characterized in that, Also includes: If the verification method in the first combination passes the verification, the value of the flag bit corresponding to the verification method in the first combination is set to a preset value, and it is determined whether each verification method in the first combination has a corresponding flag. The preset value is used to indicate that the verification method of the corresponding flag bit passes the verification. If the values ​​of the flag bits corresponding to each verification method in the first combination are all preset values, then it is determined that each verification method in the first combination has passed the verification.

3. The account login method according to claim 1, characterized in that, If any verification method in the first combination fails, then the first account will be logged in using each verification method in the second combination, including: If any verification method in the first combination fails, then update the number of terminal association failures; If the preset number of attempts is not reached, the first account will be logged in using the various verification methods in the second combination.

4. The account login method according to claim 3, characterized in that, After updating the number of times the terminal association failed, the method further includes: If the number of times reaches a preset number, the identifier of the terminal will be added to the blacklist and / or the terminal will be prohibited from associating with the first account within a preset time period. The identifiers included in the blacklist are used to prohibit the corresponding terminal from associating with the account.

5. The account login method according to any one of claims 1-4, characterized in that, The verification method includes a user password verification method, and the verification of the user password verification method specifically includes: Output the multiple second accounts recorded by the terminal; If any selection information for the second account is received, a password verification interface will be displayed. If the password entered on the password verification interface matches the password of the second account corresponding to the selected information, then the user password verification method is deemed to have passed verification.

6. The account login method according to any one of claims 1-4, characterized in that, The verification method includes a friend verification method, and the verification of the friend verification method specifically includes: Output multiple communication numbers; Send verification information to the selected communication number, the verification information being used to instruct the user corresponding to the communication number to perform a specified operation; If it is detected that the user corresponding to the communication number has completed the specified operation, then the friend verification method is deemed to have passed verification.

7. The account login method according to any one of claims 1-4, characterized in that, The method of using each verification method in the first combination to verify the login of the first account includes: Determine whether the blacklist includes the identifier of the terminal; If the blacklist does not include the identifier of the terminal, then the first account is logged in using each of the verification methods in the first combination.

8. An account login device, characterized in that, include: The acquisition module is used to acquire the login request of the first account and determine whether the terminal on which the first account logs in is the terminal associated with the first account based on the login request. The verification module is used to verify the login of the first account by using various verification methods in the first combination if the terminal is not the terminal associated with the first account. The first combination includes at least two verification methods among biometric verification, user identification verification, user question verification, user password verification, and friend verification. The association module is used to associate the terminal with the first account and output an account login interface if all verification methods in the first combination pass the verification. The account login interface is used to log in to the first account. The association module is specifically used to acquire user behavior information and determine behavior characteristics based on the behavior information; the behavior information is obtained by capturing video of the user authenticating through the terminal's camera; the behavior characteristics are classified to obtain a classification result; if the user's behavior is determined not to be abnormal based on the classification result, the terminal is associated with the first account; The verification module is further configured to, if any verification method in the first combination fails, use each verification method in the second combination to verify the login of the first account, wherein the second combination includes at least two verification methods selected from biometric verification, user identification verification, user question verification, user password verification, and friend verification; wherein each verification method in the second combination includes at least the verification method in the first combination that must be verified. The association module is also used to associate the terminal with the first account and output the account login interface if all the verification methods in the second combination pass the verification. The determination module is used to determine the reason for the failure of the target verification method if the target verification method in the first combination fails to verify, wherein the target verification method is any verification method in the first combination; An add module is used to add the terminal's identifier to a blacklist if the verification failure reason is skipping verification. The blacklist includes identifiers used to prohibit the corresponding terminal from being associated with accounts. The module is configured to establish a communication connection between the terminal and the authentication terminal if any verification method in the first combination fails, and send a verification request to the authentication terminal, so that the authentication terminal and the terminal can conduct video communication for manual review; the verification request is used to request the authentication terminal to perform real-time verification of the user; The association module is further configured to associate the terminal with the first account and output an account login interface if the user passes the instant verification.

9. An electronic device, characterized in that, include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executed instructions; The processor executes computer execution instructions stored in the memory to implement the method as described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the method as described in any one of claims 1 to 7.

11. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the method of any one of claims 1-7.

Images