Authentication method based on key feature, computer device and computer readable storage medium
By recording and calculating the characteristic values of user keys, the problem of authentication failure of digital identity authentication method when the PIN code or SMS verification code is leaked is solved, and the identity verification in the case of leakage is realized, which enhances the security of digital identity authentication and accuracy.
Patent Information
- Application Number
- CN202211378542.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-11-04
- Publication Date
- 2024-12-31
- Estimated Expiration
- 2042-11-04
AI Technical Summary
Existing digital identity authentication methods, such as PIN codes and SMS verification codes, pose risks of deciphering, stealing and leaking. Especially when PIN codes or SMS verification codes are leaked, user identity verification will be invalid, especially vigilance and identification of mobile Internet. People with lower abilities cause property damage.
By recording and calculating the characteristic values of the user's keys, including the pressing time and order of the preset key group and the current key, calculate the average time interval and the weighted average time interval, determine whether the characteristic value is within the preset range, and determine whether the authentication is successful or Failed to enhance the security of digital identity authentication.
Even if the PIN code or SMS verification code is leaked, identity verification can still be carried out, enhancing the effect of digital identity authentication without improving hardware, simple calculation method and wide application range, improving the security and accuracy of identity authentication.
Smart Images

Figure CN115842631B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of identity authentication, and in particular to an identity authentication method based on key features, a computer device and a computer-readable storage medium. Background Art
[0002] With the advent of the digital age, mobile phones and other terminal devices are becoming more and more popular, and the methods of user identity authentication are gradually diversified. There are two main methods of user identity authentication: one is digital identity authentication, such as PIN code and SMS verification code, and the second is biometrics, such as fingerprints, sound waves, irises and facial recognition. For biometrics, since they need to be associated with terminal devices and background devices, and different merchants provide different authentication methods, their universality is general. As for digital identity authentication, due to its good portability, operability and universality, it is the current mainstream identity authentication method, especially when it comes to some terminal devices, such as POS machines, which can only use digital identity authentication.
[0003] PIN codes generally consist of six digits. The main risks are as follows: (1) Risk of cracking. Since the PIN code needs to be memorized by the user and is often related to the user's ID number, birthday, and other numbers, there is a risk of cracking it through exhaustive attacks, dictionary attacks, and social tool attacks. (2) Risk of theft. When a user makes a transaction at an unsafe terminal, the terminal can record the PIN code entered by the user. (3) Risk of leakage. When the user enters the PIN code for a transaction, the PIN code may be leaked due to being spied on.
[0004] The SMS verification code is generally a 4-digit or 6-digit dynamic password in the form of a text message. The value sent by the system background is compared with the value entered by the user when logging in or authenticating a transaction. When the two are consistent, it is determined that the user has passed the verification. Its main risks are as follows: (1) SMS Trojan risk, which uses illegal links or illegal QR codes to induce users to download and install Trojan programs, thereby stealing the user's SMS verification code; (2) Wireless monitoring risk, which uses fake base stations to monitor users and obtain the user's SMS content, thereby stealing the user's SMS verification code; (3) The risk of third-party leakage, which is to obtain the user's identity authentication SMS verification code through deception.
[0005] The PIN code authentication method faces the risk of decryption, theft and exposure. To increase its security, the commonly used methods include storing the PIN code in a security chip, regularly modifying the PIN code, limiting the maximum number of attempts for incorrect PIN codes, and preventing IC card cloning. The SMS verification code authentication method faces the risk of SMS Trojans, wireless monitoring, and third-party leakage. To increase its security, mobile terminal App management software, mobile phone pseudo base station interception function, superimposed SMS verification code and PIN code login, and SMS verification code validity limit are usually used.
[0006] However, in the event of a PIN code leak or SMS verification code leak, the current user identity authentication method is ineffective, especially for people with low vigilance and discernment of mobile Internet, who often suffer financial losses due to the leakage of SMS verification codes or PIN codes. Summary of the invention
[0007] The first object of the present invention is to provide a key feature-based identity authentication method that can enhance digital identity authentication.
[0008] The second object of the present invention is to provide a computer device applied to the above-mentioned identity authentication method based on key feature.
[0009] A third object of the present invention is to provide a computer-readable storage medium storing the above-mentioned identity authentication method based on key features.
[0010] In order to achieve the above-mentioned first purpose, the present invention provides an identity authentication method based on key features, which includes: recording the time and order of pressing the preset keys of each preset key group; calculating the first average time interval between pressing two preset keys with adjacent serial numbers in the preset key group according to the time and order of pressing the preset keys of each preset key group; judging whether the first time interval between pressing two preset keys with specific serial numbers in each preset key group matches the first average time interval, and determining the first characteristic value according to the matching result; judging whether the first characteristic value is greater than the first preset threshold value, if so, recording the first characteristic value as the preset key characteristic value, and determining the preset key characteristic range according to the preset key characteristic value; recording the time and order of pressing the current key; calculating the second average time interval between pressing two current keys with adjacent serial numbers according to the time and order of pressing the current key; judging whether the second time interval between pressing any two current keys with different serial numbers matches the second average time interval, and determining the second characteristic value according to the matching result, and recording the second characteristic value as the current key characteristic value; judging whether the current key characteristic value is within the preset key characteristic range, if so, determining that the identity authentication is successful.
[0011] As can be seen from the above scheme, the present invention can determine the preset key feature range through the user's preset key feature value, and judge whether the current key feature value is within the preset key feature range, so as to determine whether the user's identity authentication is passed according to the judgment result. Even if the PIN code or SMS verification code is leaked, the present invention can still perform identity authentication, which can enhance the effect of digital identity authentication. In addition, the present invention does not require hardware improvement, and the calculation method for the user's key features is simple, and has a wide range of applications.
[0012] A further solution is that after calculating the first average time interval, the following steps are also performed: calculating the weighted average time interval between pressing two preset buttons in the preset button group; determining whether the weighted average time interval matches the first average time interval, and determining a third eigenvalue based on the matching result; determining whether the sum of the first eigenvalue and the third eigenvalue is greater than a first preset threshold, and if so, recording the sum of the first eigenvalue and the second eigenvalue as the preset button eigenvalue.
[0013] It can be seen from this that the acquired keystroke features of the user can be made more obvious.
[0014] A further solution is to determine whether the current key feature value is within the preset key feature range, and whether the current key feature value is within the preset key feature range adjusted by the sensitivity adjustment value. If so, determine that the identity authentication is successful.
[0015] It can be seen that by setting the sensitivity adjustment value, the result of matching the current key features of the user with the pre-recorded key features can be made more accurate.
[0016] A further solution is to record the key value of the preset key when recording the time and order in which the preset keys of each preset key group are pressed; record the key value of the current key when recording the time and order in which the current key is pressed; and determine whether the key value of the current key is equal to the key value of the preset key. If not, determine that identity authentication has failed.
[0017] It can be seen that, during the process of the user setting the PIN code and confirming it, the preset key characteristic value can be calculated simultaneously, making the application of the present invention more convenient.
[0018] A further solution is that, if it is confirmed that the key value of the current key is not equal to the key value of the preset key, it is further determined whether the current input times are greater than the maximum number of incorrect attempts. If so, it is determined that the identity authentication has failed.
[0019] This shows that the security of identity authentication can be enhanced.
[0020] A further solution is to send a text message verification code before recording the time and order in which the current button is pressed; record the key value of the preset button when recording the time and order in which the preset buttons of each preset button group are pressed; determine whether the content of the text message verification code is equal to the key value of the current button. If not, further determine whether the current time is still within the valid input time range. If not, determine that the identity authentication has failed.
[0021] This shows that the security of identity authentication can be enhanced.
[0022] In order to achieve the above-mentioned second purpose, the computer device provided by the present invention includes a processor and a memory, wherein: the memory stores a computer program, and when the computer program is executed by the processor, the above-mentioned key feature-based identity authentication method is implemented.
[0023] In order to achieve the third objective mentioned above, the present invention provides a computer-readable storage medium on which a computer program is stored, wherein: when the computer program is run, the identity authentication method based on key features of the above claims is implemented. BRIEF DESCRIPTION OF THE DRAWINGS
[0024] Figure 1 It is a flow chart of the identity authentication method based on key features of the present invention.
[0025] Figure 2 It is a flow chart of collecting user data in the identity authentication method based on key features of the present invention.
[0026] Figure 3 It is a schematic diagram of user keystroke data collected in the first embodiment of the identity authentication method based on keystroke features of the present invention.
[0027] Figure 4 This is a flow chart of performing identity authentication based on user characteristics in the first embodiment of the identity authentication method based on key features of the present invention.
[0028] Figure 5 This is a flow chart of performing identity authentication based on user characteristics in the second embodiment of the identity authentication method based on key feature of the present invention.
[0029] The present invention is further described below in conjunction with the accompanying drawings and embodiments. DETAILED DESCRIPTION
[0030] The present invention determines whether the current key feature value obtained by the key value currently input by the user is within a preset key feature range, thereby determining whether the identity authentication is passed.
[0031] The first embodiment of the identity authentication method based on key features:
[0032] The key feature-based identity authentication method of this embodiment is implemented by a computer program and runs on a computer. In this embodiment, the identity authentication method is described in terms of a PIN code. Figure 1 First, execute step S1 to collect user keystroke data, then execute step S2 to determine user characteristics based on the keystroke data, and finally execute step S3 to perform identity authentication based on the user characteristics.
[0033] Specifically, see Figure 2When executing step S1, firstly, step S11 is executed to prompt the user to sample the sample data, that is, to prompt the user to enter the PIN code to be set, which is a 6-digit PIN code in this embodiment.
[0034] Then, step S12 is executed to obtain sample data, that is, to obtain a set of key data input by the user, that is, a set of preset key groups. A set of preset key groups includes the time when the preset keys are pressed, the order of the preset keys, and the values of the preset keys.
[0035] Then, step S13 is executed to determine whether the sampling is successful. The first sampling is successful by default. For the subsequent sampling of another set of preset key groups, it is necessary to compare with the preset key group sampled for the first time. When the time when the preset keys are pressed, the order of the preset keys, and the values of the preset keys are the same as the results of the first sampling, the sampling is determined to be successful.
[0036] If the result of executing step S13 is no, the sampling fails, and step S16 is continued to be executed to accumulate the number of sampling failures. Then step S17 is executed to determine whether the number of failures is less than the second target threshold. In this embodiment, the second target threshold is 5 times. If the accumulated number of failures does not exceed 5 times, the process returns to step S11. If the accumulated number of failures exceeds 5 times, it means that the collection of the current user key data has failed, and sampling needs to be started again from the first preset key group.
[0037] If the result of executing step S13 is yes, the sampling is successful, and step S14 is continued to be executed to accumulate the number of successful sampling. Then step S15 is executed to determine whether the number of successful sampling is less than the first target threshold. In this embodiment, the first target threshold is 10 times. If the accumulated number of successful sampling does not exceed 10 times, then return to step S11. If the accumulated number of successful sampling exceeds 10 times, it means that the sampling of the user's key data is successful.
[0038] Reference to successfully sampled user key data Figure 3 , which records the values of the keys entered by the user multiple times in the order of cumulative serial numbers and the time when the keys are pressed. Since the user needs to enter the PIN code set by him multiple times, the values of the keys with the same serial number in each preset key group are the same.
[0039] After the user key data is acquired, step S2 is then executed to determine the user characteristics according to the key data.
[0040] Specifically, first, according to the time when the preset keys of each preset key group are pressed, the first average time interval between the pressing of the preset keys with adjacent serial numbers in the preset key group is calculated, that is:
[0041] DV=[(T16-T11)+(T26-T21)+(T36-T31)+…+(Tn6-Tn1)] / (5*n).
[0042] Next, a first weighted average time interval DxVy between pressing two preset keys in the preset key group is calculated. The weighted average time interval DxVy represents a first weighted average time interval from sequence number x to sequence number y.
[0043] Specifically, the numbers from sequence number 1 to sequence number 2, sequence number 1 to sequence number 3, sequence number 1 to sequence number 4, sequence number 1 to sequence number 5, and sequence number 1 to sequence number 6 are calculated respectively, as follows:
[0044] D1V1=((T12-T11)+(T22-T21)+…+(Tn2-Tn1)) / n;
[0045] D1V2=((T13-T11)+(T23-T21)+…+(Tn3-Tn1)) / (2*n);
[0046] D1V3=((T14-T11)+(T24-T21)+…+(Tn4-Tn1)) / (3*n);
[0047] D1V4=((T15-T11)+(T25-T21)+…+(Tn5-Tn2)) / (4*n);
[0048] D1V5=((T16-T11)+(T26-T21)+…+(Tn6-Tn2)) / (5*n).
[0049] Then calculate the weighted average time intervals from sequence number 2 to sequence number 3, sequence number 2 to sequence number 4, sequence number 2 to sequence number 5, and sequence number 2 to sequence number 6, as follows:
[0050] D2V1=((T13-T12)+(T23-T22)+…+(Tn3-Tn2)) / n;
[0051] D2V2=((T14-T12)+(T24-T22)+…+(Tn4-Tn2)) / (2*n);
[0052] D2V3=((T15-T12)+(T25-T22)+…+(Tn5-Tn2)) / (3*n);
[0053] D2V4=((T16-T12)+(T26-T22)+…+(Tn6-Tn2)) / (4*n).
[0054] Then calculate the weighted average time intervals from sequence number 3 to sequence number 4, sequence number 3 to sequence number 5, and sequence number 3 to sequence number 6, as follows:
[0055] D3V1 = ((T14 - T13) + (T24 - T23) + … + (Tn4 - Tn3)) / n;
[0056] D3V2 = ((T15 - T13) + (T25 - T23) + … + (Tn5 - Tn3)) / (2 * n);
[0057] D3V3 = ((T16 - T13) + (T26 - T23) + … + (Tn6 - Tn3)) / (3 * n).
[0058] Then calculate the weighted average time intervals from serial number 4 to serial number 5, and from serial number 4 to serial number 6 respectively, as follows:
[0059] D4V1 = ((T15 - T14) + (T25 - T24) + … + (Tn5 - Tn4)) / n;
[0060] D4V2 = ((T16 - T14) + (T26 - T24) + … + (Tn6 - Tn4)) / (2 * n).
[0061] Then calculate the weighted average time interval from serial number 5 to serial number 6, as follows:
[0062] D5V1 = ((T16 - T15) + (T26 - T25) + … + (Tn6 - Tn5)) / n.
[0063] After calculating the weighted average time interval between the presses of two preset buttons, determine whether the weighted average time interval matches the first average time interval, and determine the third eigenvalue according to the matching result. Specifically, the initial value of the third eigenvalue P3 is 0. Compare the calculated DxVy with DV in turn. If DxVy < DV, the value of P3 is incremented by 1. Thus, the value range of P3 is a natural number from 0 to 15.
[0064] Then calculate the first time interval between the presses of two preset buttons with specific serial numbers in each preset button group, and determine whether each first time interval matches the first average time interval. Determine the first eigenvalue P1 according to the matching result. The initial value of the first eigenvalue P1 is 0. The specific serial numbers refer to that in each calculation, for each preset button group, the serial numbers of the two preset buttons calculated are the same.
[0065] Specifically, calculate the moment when the preset button with serial number 2 is pressed minus the moment when the preset button with serial number 1 is pressed in each preset button group, that is, the first time interval. If the first time interval in each preset button group is less than (2 - 1) * DV, the value of the first eigenvalue P1 is incremented by 10, and record the button time interval from serial number 2 to serial number 1 as a characteristic data of the user.
[0066] Then, in each preset button group, the time when the preset button No. 3 is pressed minus the time when the preset button No. 1 is pressed is calculated. If the first time interval in each preset button group is less than (3-1)*DV, the first characteristic value P1 is added by 10, and the time interval from the key press of No. 2 to No. 1 is recorded as a characteristic data of the user.
[0067] Then, in each preset button group, the time when the preset button No. 4 is pressed minus the time when the preset button No. 1 is pressed is calculated. If the first time interval in each preset button group is less than (4-1)*DV, the first characteristic value P1 is added by 10, and the time interval from the key press of No. 2 to No. 1 is recorded as a characteristic data of the user.
[0068] By analogy, for each preset button group, the first time interval between the moment when the preset button number 5 is pressed and the moment when the preset button number 1 is pressed, and the first time interval between the moment when the preset button number 6 is pressed and the moment when the preset button number 1 is pressed can all be calculated using the above-mentioned method and compared with the corresponding DV to determine whether to accumulate the first characteristic value P1.
[0069] Similarly, for each preset button group, the first time interval between the moment when the preset buttons No. 3, No. 4, No. 5 and No. 6 are pressed and the moment when the preset button No. 2 is pressed, as well as the first time interval between the moment when the preset buttons No. 4, No. 5 and No. 6 are pressed and the moment when the preset button No. 3 is pressed, as well as the first time interval between the moment when the preset buttons No. 5 and No. 6 are pressed and the moment when the preset button No. 4 is pressed, and the first time interval between the moment when the preset button No. 6 is pressed and the moment when the preset button No. 5 is pressed, can all be determined in the above manner and compared with the corresponding DV to determine the first characteristic value P1 accumulated as 10.
[0070] Therefore, there are 15 matching results between the first time interval and DV, the value range of P1 can be any one of {0, 10, 20, 30, 40, 50, 60, 70, 80, 90, 100, 110, 120, 130, 140, 150}, and there are at most 15 types of characteristic data of the user.
[0071] Then, it is determined whether the sum of the first characteristic value P1 and the third characteristic value P3 is greater than the first preset threshold value. The first preset threshold value can be set according to actual needs. The larger the first preset threshold value is and the first characteristic value P1 is greater than the first preset threshold value, the stronger the regularity of the user pressing the key at this time. For example, the first preset threshold value is 33. When the sum of the first characteristic value P1 and the third characteristic value P3 is greater than 33, it means that the user has at least 2 characteristic data and the regularity of the user's key press is obvious. The sum of the first characteristic value P1 and the third characteristic value P3 can be used as the preset key characteristic value and recorded as a credential for the subsequent identity authentication process. When the sum of the first characteristic value P1 and the third characteristic value P3 is less than 33, it is considered that the regularity of the user's key press is not obvious, and the first characteristic value P1 cannot be recorded as the preset key characteristic value, that is, the user does not meet the conditions for identity authentication through the preset key characteristic value. For another example, the first preset threshold is 10. When the sum of the first characteristic value P1 and the third characteristic value P3 is less than 10, since the third characteristic value P3 is at least accumulated to 10, it means that the current third characteristic value P3 = 0, which means that there is no characteristic data and the regularity of the user's key press is not obvious. Therefore, the preset key characteristic range can be determined by the preset key characteristic value. The preset key characteristic range includes the preset key characteristic value. For example, when the preset key characteristic value is 45, the preset key characteristic range can be the interval [44, 46]. In this embodiment, the preset key characteristic range only includes the specific value of the preset key characteristic value.
[0072] Therefore, after the preset key feature range is used as the user's key feature, step S3 can be executed to perform identity authentication according to the user's feature. Figure 4 First, step S31 is executed to obtain the PIN code input by the user. Specifically, the time and sequence of pressing the current key and the key value of the current key are obtained.
[0073] Then, step S32 is executed to determine whether the PIN code content verification has passed. That is, it is determined whether the key value of the current key corresponds to the key value of the preset key one by one, and whether the order in which the key value of the current key is pressed is the same as the order in which the preset keys corresponding to its key value are pressed. If both are yes, for example, the key values of the preset keys are arranged as 172111 in the order in which the preset keys are pressed, and the key value of the current key is arranged as 172111 in the order in which the current keys are pressed, then it is determined that the PIN code content verification has passed, and step S33 is continued. Otherwise, step S36 is executed to determine whether the current input times are greater than the maximum number of wrong attempts. The maximum number of wrong attempts is the number of times the user is allowed to re-enter the PIN code for verification in the current identity authentication. In this embodiment, it is set to 3 times. If not, it means that the PIN code can be re-entered for verification, and then it returns to step S31. If so, the current identity authentication fails, and then a restriction can be set to prohibit the user from performing identity authentication again within a certain period of time in the future.
[0074] Then, step S33 is executed to determine the current key feature value. Specifically, the second average time interval between pressing two current keys with adjacent serial numbers is calculated based on the time and order of pressing the current keys. Specifically, the calculation method is the same as the first average time interval. Since there is only one group of current key input, n=1.
[0075] Then calculate the second time interval between any two current keys with different serial numbers being pressed, and determine whether the second time interval matches the second average time interval, determine the second characteristic value according to the matching result, and use the second characteristic value as the current key characteristic value. Calculating the second time interval between any two current keys with different serial numbers being pressed means that for two current keys with different serial numbers that can be combined from all current keys, it is necessary to calculate the second time interval between the two current keys being pressed. Specifically, the calculation method of the second time interval is the same as the first time interval, and the method of determining whether the second time interval matches the second average time interval is the same as the method of determining whether the first time interval matches the first average time interval, and the initial value of the second characteristic value P2 is 0. For example, the difference between the time when the current key with serial number 6 is pressed and the time when the current key with serial number 2 is pressed is calculated as the second time interval, and determine whether the second time interval is less than (6-2)*the second average time interval. If so, the second characteristic value P2 is accumulated by 10. Then the value range of the second characteristic value P2 can be any one of {0, 10, 20, 30, 40, 50, 60, 70, 80, 90, 100, 110, 120, 130, 140, 150}. The second characteristic value P2 finally obtained is used as the current user characteristic value PU.
[0076] Then, step S34 is executed to determine whether the current user characteristic value is within the range of the preset key characteristic range adjusted by the sensitivity adjustment value. Specifically, the sensitivity adjustment value AD can be set on the computer implementing this embodiment according to the user's habitual sensitivity. Thus, it can be determined whether PU<(P1+P3+AD) and PU>(P1+P3-AD) are established. If established, it means that the identity authentication is passed, and step S35 can be executed. If not established, it means that the PIN code entered by the current user is wrong, and the process returns to step S36.
[0077] Finally, step S35 is executed to return authentication success information. Subsequent operations can then be performed according to the usage scenario. For example, this embodiment is applied to the process of online transactions. The computer that implements the method of identity authentication based on key features of this embodiment runs a bank backend system. When the user enters the PIN code through the keyboard provided by the smart phone, the bank backend system confirms the user's identity based on the entered PIN code, and then interacts by sending transaction instructions.
[0078] Second embodiment of the identity authentication method based on key features:
[0079] This example uses a text message verification code to perform identity authentication. Figure 1 and Figure 2 The identity authentication method based on key features in this embodiment also first executes step S1 to collect user key data, then executes step S2 to determine user features based on the key data, and finally executes step S3 to perform identity authentication based on the user features.
[0080] The difference between this embodiment and the first embodiment is that when executing step S11, instead of the user inputting the PIN code set by himself, multiple groups of different preset key groups are provided to prompt the user to select a group to input. This embodiment provides 10 groups of preset key groups, and the key value of the preset key corresponding to a serial number is different for different preset key groups. When executing step S13, it is necessary to determine whether the group of preset key groups input by the user is the same as one of the unselected preset key groups. When executing step S15, if the cumulative number of successes exceeds 10 times, it means that the user has successfully input all the multiple groups of preset key groups provided, and the user characteristics are subsequently determined based on the multiple groups of preset key groups.
[0081] When the present embodiment executes step S2, the process of determining the user characteristics according to the key data is the same as the first embodiment described above, and will not be described in detail here.
[0082] When executing step S3, this embodiment first executes step S41 to obtain the SMS verification code input by the user. The SMS verification code is sent to the user by a computer that implements the identity authentication method of this embodiment. The SMS verification code obtained by the computer includes the content of the SMS verification code and the time when each current key is pressed. The content of the SMS verification code includes the order in which the current keys are pressed and the value of the SMS verification code.
[0083] Then execute step S42 to determine whether the SMS verification code content verification has passed. Specifically, determine whether the content of the SMS verification code received from the user is consistent with the content of the recorded SMS verification code. For example, if the SMS verification code recorded by the computer implementing the identity authentication method of this embodiment is 2568, and the received SMS verification code input by the user is also 2568, then it is determined that the SMS verification code content verification has passed, and continue to execute step S43, which is responsible for executing step S46 to determine whether the current time is still within the valid input time. In this embodiment, the valid input time range is within 5 minutes of the computer implementing the identity authentication method of this embodiment sending the SMS verification code. If the user does not enter the correct SMS verification code within 5 minutes, the SMS verification code will be invalid and this identity authentication will fail.
[0084] If the result of step S42 is yes, step S43 is executed to determine the current key feature value. The method of determining the current key feature value is the same as the first embodiment, and the subsequent steps S44 and S45 are also the same as the first embodiment, which will not be repeated here.
[0085] It should be noted that the first time interval matches the first average time interval, the second time interval matches the second average time interval, and the weighted average time interval matches the first average time interval in the above embodiment, all mean that the first time interval is less than the first average time interval, the second time interval is less than the second average time interval, and the weighted average time interval is less than the first average time interval. It can be understood that in different embodiments, the above "less than" can be changed to "greater than", for example, the first time interval matches the first average time interval means that the first time interval is greater than the first average time interval, which is not specifically limited in this embodiment.
[0086] Computer device embodiment:
[0087] The computer device of this embodiment includes a processor and a memory. The memory stores a computer program. When the processor executes the computer program, each step of the above-mentioned identity authentication method based on key feature is implemented.
[0088] The computer device may include but is not limited to a processor and a memory. Those skilled in the art will appreciate that the computer device may include more or fewer components, or a combination of certain components, or different components, for example, the computer device may also include input and output devices, network access devices, buses, etc.
[0089] For example, the processor may be a central processing unit (CPU), other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microcontroller or any conventional processor, etc. The processor is the control center of a computer device, and uses various interfaces and lines to connect various parts of the entire computer device.
[0090] The memory can be used to store computer programs and / or modules. The controller realizes various functions of the computer device by running or executing the computer programs and / or modules stored in the memory, and calling the data stored in the memory. For example, the memory can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, an application required for at least one function (such as a sound receiving function, a sound conversion to text function, etc.), etc.; the data storage area can store data created according to the use of the mobile phone (such as audio data, text data, etc.), etc. In addition, the memory can include a high-speed random access memory, and can also include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (FlashCard), at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.
[0091] Computer readable storage medium embodiment:
[0092] If the module integrated in the computer device of the above embodiment is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the implementation of all or part of the process in the embodiment of the identity authentication method based on key features can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium. When the computer program is executed by the controller, the steps of the above-mentioned identity authentication method embodiment based on key features can be implemented. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The storage medium may include: any entity or device capable of carrying computer program code, recording medium, U disk, mobile hard disk, disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium. It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, the computer-readable medium does not include electric carrier signals and telecommunication signals.
[0093] In summary, the present invention can determine the preset key feature value by calculating the first average time interval and the first time interval at the moment when the preset key is pressed, and determine the current user feature value by calculating the second average time interval and the second time interval at the moment when the current key is pressed, and then determine whether the current key feature value is within the preset key range determined by the preset key feature value, thereby determining whether the user's identity authentication is passed according to the comparison result. The present invention can still perform identity authentication even in the event of a PIN code or SMS verification code leak, which can enhance the effect of digital identity authentication. In addition, the present invention does not require hardware improvements, and the method for calculating the user's key features is simple and has a wide range of applications. The present invention also provides a computer device and a computer-readable storage medium for the above-mentioned key feature-based identity authentication method.
Claims
1. An identity authentication method based on key features, characterized in that: include: Record the time and order in which the preset keys of each preset key group are pressed; Calculate a first average time interval between pressing of two preset keys with adjacent sequence numbers in the preset key group according to the time and order in which the preset keys of each preset key group are pressed; Determine whether a first time interval between pressing two preset keys with specific serial numbers in each preset key group matches the first average time interval, and determine a first characteristic value according to the matching result; Determine whether the first characteristic value is greater than a first preset threshold value, and if so, record the first characteristic value as a preset key characteristic value, and determine a preset key characteristic range according to the preset key characteristic value; Record the time and order in which the current keys are pressed; Calculate a second average time interval between pressing of two current keys with adjacent sequence numbers according to the time and sequence of pressing of the current keys; Determine whether a second time interval between pressing any two current keys with different serial numbers matches the second average time interval, determine a second characteristic value according to the matching result, and record the second characteristic value as the current key characteristic value; It is determined whether the current key feature value is within the preset key feature range, and if so, it is determined that the identity authentication is successful.
2. The identity authentication method based on key features as claimed in claim 1, characterized in that: After calculating the first average time interval, the following steps are further performed: Calculating a weighted average time interval between pressing two preset buttons in the preset button group; Determining whether the weighted average time interval matches the first average time interval, and determining a third eigenvalue according to the matching result; Determine whether the sum of the first feature value and the third feature value is greater than the first preset threshold, and if so, record the sum of the first feature value and the second feature value as the preset key feature value.
3. The identity authentication method based on key features as claimed in claim 1, wherein: When determining whether the current key feature value is within the preset key feature range, determine whether the current key feature value is within the preset key feature range adjusted by the sensitivity adjustment value. If so, determine that the identity authentication is successful.
4. The identity authentication method based on key features according to any one of claims 1 to 3, characterized in that: When recording the time and order of pressing the preset key of each preset key group, recording the key value of the preset key; When recording the time and order of pressing the current key, record the key value of the current key; Determine whether the key value of the current key is equal to the key value of the preset key, and if not, determine that the identity authentication fails.
5. The identity authentication method based on key features as claimed in claim 4, characterized in that: If it is confirmed that the key value of the current key is not equal to the key value of the preset key, it is further determined whether the current number of inputs is greater than the maximum number of incorrect attempts. If so, it is determined that the identity authentication has failed.
6. The identity authentication method based on key features according to any one of claims 1 to 3, characterized in that: Before recording the time and order of the current buttons being pressed, send a text message verification code; When recording the time and order of pressing the current key, recording the key value of the preset key; Determine whether the content of the SMS verification code is equal to the key value of the current key. If not, further determine whether the current time is still within the valid input time range. If not, determine that the identity authentication has failed.
7. A computer device comprising a processor and a memory, characterized in that: The memory stores a computer program, and when the computer program is executed by the processor, the identity authentication method based on key features as described in any one of claims 1 to 6 above is implemented.
8. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is running, the key feature-based identity authentication method described in any one of claims 1 to 6 is implemented.
