An identity verification method and device, an electronic device, and a storage medium

Abstract

Embodiments of the present application disclose an identity verification method and device, electronic equipment and a storage medium. The method comprises: obtaining pre-configured verification policy information; wherein the verification policy information comprises a target verification time period and a target verification number; if the current time belongs to the target verification time period, determining the number of verifications of the target client in the current time period; wherein the current time period is the time period between the start time of the target verification time period and the current time; based on the number of verifications, determining the necessity data of identity verification of the target client at the current time, and based on the necessity data, determining whether to start the identity verification operation of the target client at the current time. The technical scheme of the embodiments of the present application can avoid the problems of long-time non-verification or frequent verification, more reasonably and accurately determine the time when identity verification is needed, ensure security, avoid time waste caused by frequent verification, and improve access convenience.

Description

Technical Field

[0001] Embodiments of the present invention relate to the field of information security technology, and in particular to an identity verification method, device, electronic device, and storage medium. Background Art

[0002] In order to improve network information security, identity verification is usually set to improve the operational security of accessing the client and prevent abnormal access.

[0003] In the prior art, random verification is typically used, randomly determining at least one verification time for identity verification, and initiating an identity verification operation on the client at that verification time. However, during the implementation of the present invention, it was discovered that the prior art suffers from at least the following technical problems: Due to the high uncertainty of randomly determined verification times, effective monitoring is impossible, making it easy for identity verification to go unperformed for extended periods, resulting in security vulnerabilities; or frequent identity verifications can lead to cumbersome access processes and unnecessary time waste. Summary of the Invention

[0004] The embodiments of the present invention provide an identity verification method, device, electronic device and storage medium to achieve the purpose of making the distribution of the determined time for identity authentication more even, and can more reasonably and accurately determine the time when identity verification is required, ensuring security while avoiding the waste of time caused by frequent verification.

[0005] In a first aspect, an embodiment of the present invention provides an identity verification method, including:

[0006] Obtaining pre-configured verification strategy information; wherein the verification strategy information includes a target verification period and a target verification number;

[0007] If the current time falls within the target verification period, determining the number of verifications performed by the target client in the current period; wherein the current period is the period between the start time of the target verification period and the current time;

[0008] Based on the number of verifications, the necessity degree data for performing identity verification on the target client at the current moment is determined, and based on the necessity degree data, it is determined whether to start an identity verification operation on the target client at the current moment.

[0009] In a second aspect, an embodiment of the present invention further provides an identity verification device, the device comprising:

[0010] A verification strategy information acquisition module is used to obtain pre-configured verification strategy information; wherein the verification strategy information includes a target verification period and a target verification number;

[0011] a verification times determination module, configured to determine the number of verification times of the target client in the current time period if the current time period falls within the target verification time period; wherein the current time period is the period between the start time of the target verification time period and the current time period;

[0012] The necessity data determination module is used to determine the necessity data for identity verification of the target client at the current moment based on the number of verifications, and determine whether to start the identity verification operation for the target client at the current moment based on the necessity data.

[0013] In a third aspect, an embodiment of the present invention further provides an electronic device, the electronic device comprising:

[0014] one or more processors;

[0015] a storage device for storing one or more programs,

[0016] When the one or more programs are executed by the one or more processors, the one or more processors implement the identity verification method provided by any embodiment of the present invention.

[0017] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the identity verification method provided by any embodiment of the present invention.

[0018] An identity verification method provided by an embodiment of the present invention obtains pre-configured verification strategy information; wherein the verification strategy information includes a target verification period and a target number of verifications; when the current moment belongs to the target verification period, the number of times the target client has been verified in the current period is determined, thereby taking into account both the current period and the number of verifications, determining the necessary degree data for identity verification of the target client at the current moment, thereby determining whether to start the identity verification operation at the current moment based on the necessary degree data, which can make the distribution of the determined time for identity authentication more uniform; solves the problem of long-term non-verification or frequent verification when performing completely random verification in the existing technology, more reasonably and accurately determines the time when identity verification is required, ensures security, avoids time waste caused by frequent verification, and is conducive to improving access convenience.

[0019] In addition, an identity verification device, electronic device, and storage medium provided by the present invention correspond to the above method and have the same beneficial effects. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the embodiments of the present invention, the following is a brief introduction to the drawings required for use in the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0021] Figure 1 A flowchart of an identity verification method provided by an embodiment of the present invention;

[0022] Figure 2 A schematic diagram of a verification strategy information parsing process provided by an embodiment of the present invention;

[0023] Figure 3 A flowchart of another identity verification method provided by an embodiment of the present invention;

[0024] Figure 4 An identity verification framework diagram provided by an embodiment of the present invention;

[0025] Figure 5 A schematic diagram of a configuration strategy process provided by an embodiment of the present invention;

[0026] Figure 6 An execution flow chart provided for an embodiment of the present invention;

[0027] Figure 7 A probability calculation flow chart provided by an embodiment of the present invention;

[0028] Figure 8 A structural diagram of an identity verification device provided by an embodiment of the present invention;

[0029] Figure 9 A structural diagram of an electronic device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0030] The present invention will be further described in detail below with reference to the accompanying drawings and examples. It will be understood that the specific embodiments described herein are intended only to illustrate the present invention and are not intended to limit the present invention. It should also be noted that, for ease of description, the accompanying drawings only illustrate portions relevant to the present invention, not all structures.

[0031] It should be noted that before discussing exemplary embodiments in more detail, some exemplary embodiments are described as processes or methods depicted as flow charts. Although the flow charts describe the various operations (or steps) as sequential processes, many of the operations therein can be implemented in parallel, concurrently, or simultaneously. In addition, the order of the various operations can be rearranged. The process can be terminated when its operation is completed, but can also have additional steps not included in the accompanying drawings. The process can correspond to a method, function, procedure, subroutine, subprogram, etc.

[0032] In order to enable those skilled in the art to better understand the present invention, the present invention will be further described in detail below with reference to the accompanying drawings and specific implementation methods.

[0033] Before introducing the technical solution, an example description of the application scenario can be given first. This technical solution can be applied to the scenario where, when the target client accesses the server, the time for identity authentication is determined based on the pre-configured target verification times and target verification time, and identity authentication is performed at the determined time. For example, the target verification period can be from 8 a.m. to 12 p.m. every Monday, and the target verification times are 2 times, which means that the configured verification strategy is that the target client needs to be verified twice from 8 a.m. to 12 p.m. every Monday; according to the verification strategy, the time for identity verification of the target client is determined. Based on the solution of this embodiment, while ensuring access security, the distribution of the determined time for identity authentication can be made more even, avoiding the situation of no verification for a long time or frequent verification.

[0034] It should be noted that the acquisition, storage, use, and processing of information in the technical solution of this application comply with the relevant provisions of national laws and regulations.

[0035] Figure 1 This is a flow chart of an identity verification method provided in an embodiment of the present invention. This embodiment is applicable to situations where the time for performing identity verification is determined and the identity verification of a target client is performed based on the determined time. The method can be performed by an identity verification device, which can be implemented by software and / or hardware and can be configured in a terminal and / or server to implement the identity verification method in the embodiment of the present invention.

[0036] like Figure 1 As shown, the method of this embodiment may specifically include:

[0037] S110: Obtain pre-configured verification strategy information.

[0038] Among them, the verification policy information includes a target verification period and a target verification number. The target verification period is the period to which the target client's identity verification belongs, and the target verification number is the total number of times the target client's identity verification is performed during the target verification period. For example, the pre-configured verification policy information may be: during the period from 19:00 to 23:00 every day, the target client is verified twice in total, then 19:00 to 23:00 is the target verification period, and 2 times is the target verification number. Furthermore, the verification policy information also includes a target verification scenario, which is the target client's access scenario condition that needs to be met when the identity verification operation is triggered; for example, the target verification scenario may include at least one of the login scenario, sharing scenario, viewing scenario, uploading scenario, downloading scenario, deleting scenario, and creating a new scenario, that is, when the target client performs at least one of the operations of logging in, sharing, viewing, uploading, downloading, deleting, and creating a new one, it means that the scenario condition for performing identity verification on the target client has been met.

[0039] Specifically, the target verification period, target verification times, and target verification scenarios can be pre-configured in the background to generate verification policy information. This verification policy information is then stored in a policy cache container, which can be a local or remote storage container. Before identity verification is required, the verification policy information is retrieved from the policy cache container and parsed using a pre-configured parser to determine the target verification period, target verification times, and target verification scenarios.

[0040] For a detailed description of the parsing process, see Figure 2 . The configured verification policy information can be stored in the policy configuration container in the form of a policy configuration list. When it is necessary to determine the moment of identity verification, the verification policy information can be obtained from the policy configuration container in advance, and the policy configuration list corresponding to the verification policy information can be traversed and parsed to obtain data in the json (JavaScriptObjectNotation, JS object notation) format, so as to determine the policy entity based on the data, namely the target verification period, target verification times and target verification scenario. For the convenience of recording, the target verification scenario can be identified by a numerical value, such as the login scenario is identified as 0, and the deletion scenario is identified as 1. The target verification scenario can be determined by the obtained scenario value.

[0041] In this embodiment, after obtaining the pre-configured verification policy information, the method further includes: if an update instruction for updating the verification policy information is received, updating the verification policy information based on the update instruction, and storing the updated verification policy information in the policy cache container.

[0042] The update operation includes at least one of an add operation, a modify operation, and a delete operation.

[0043] In a specific implementation, based on the background update operation on the stored verification policy information, the verification policy information stored in the policy cache container can be synchronously updated. Specifically, if an update instruction for updating the verification policy information is received, the background update operation on the verification policy information, such as adding, modifying, or deleting, is determined based on the update instruction; and the verification policy information stored in the policy cache container is updated according to the determined update operation, thereby keeping the verification policy information stored in the policy cache container synchronized with the latest verification policy information configured in the background, ensuring the real-time nature of the verification policy information and enabling authentication of the target client according to the latest verification policy information.

[0044] S120: If the current time belongs to the target verification period, determine the number of verifications of the target client in the current period.

[0045] The current period is the period between the start time of the target verification period and the current time. The number of verifications completed is the number of verifications completed by the target client during the current period.

[0046] In a specific implementation, if a target verification period is set in the verification policy information, identity verification of the target client must be performed during the target verification period. To meet the requirements of this target verification period, real-time monitoring can be performed at the current time to determine whether the current time falls within the target verification period. If so, the target client's verification count during the current period can be further determined, i.e., the number of verifications between the start time of the target verification period and the current time. If not, real-time monitoring can be continued until it is determined that the current time falls within the target verification period.

[0047] Optionally, the verification policy information also includes a target verification scenario. To meet the requirements of the target verification scenario, determining the number of verifications completed by the target client in the current time period may include: determining the current operating scenario of the target client at the current moment; and if the current operating scenario belongs to the target verification scenario and the current moment belongs to the target verification time period, determining the number of verifications completed by the target client in the current time period.

[0048] In order to avoid the situation where the identity verification operation on the target client fails because the target client does not access the server when the identity verification operation on the target client is started, the target verification scenario can be set in advance to ensure that the operation scenario of the target client meets the target verification scenario before starting the identity verification operation on the target client, so as to reduce the number of times the target client skips identity verification.

[0049] Specifically, the current operation scenario of the target client at the current moment can be determined. The current operation scenario may include any one of a login scenario, a sharing scenario, a viewing scenario, an upload scenario, a download scenario, a deletion scenario, a new creation scenario, and a no-operation scenario. If the current operation scenario belongs to the target verification scenario, it means that the current operation of the target client meets the requirements of the target verification scenario. It can be further determined whether the current moment belongs to the target verification period; if it belongs to the target verification period, it means that the current moment meets the requirements of the target verification period; and a step of determining the number of times the target client has been verified can be performed. If the current operation scenario does not belong to the target verification scenario, it means that the current operation does not meet the requirements of the target verification scenario, and real-time monitoring can be continued.

[0050] For example, if the target verification scenarios include login, sharing, viewing, uploading, downloading, and deleting, and the current operation scenario is a no-operation scenario, meaning the target client has not taken any action on the server, then the current operation scenario does not fall within the target verification scenario, and real-time monitoring can continue. If the current operation scenario is a sharing scenario, then the current operation scenario falls within the target verification scenario, and further determination can be made as to whether the current moment falls within the target verification period.

[0051] By setting the target verification scenario, this embodiment can avoid the situation where the target client does not access the server when the identity verification operation on the target client is started, resulting in identity verification failure. It can reduce the number of times the target client skips identity verification and ensure the effectiveness of identity verification.

[0052] In a specific implementation, when determining the number of times the target client has been verified in the current period, the number of times the identity verification has been performed on the target client in the current period can be determined through pre-stored identity verification records.

[0053] Optionally, before determining the number of times the target client has been verified in the current time period, it also includes: using the client information of the target client as the primary key, the authentication time of the target client as the value, and storing the authentication time corresponding to the target client in the snapshot storage in the form of a key-value pair.

[0054] The snapshot storage device is a key-value storage device that supports snapshot functionality. The client information may include information such as the target client's identifier and client name. The authentication time is the time at which the target client's identity is verified. Furthermore, the authentication time and the authentication time corresponding to the target client may be stored as a key-value pair, using the target client's identity verification times as a value.

[0055] In this embodiment, to determine the number of times the target client has been verified in the current time period, the number of identity verifications stored in the snapshot memory can be directly read, and the number of identity verifications corresponding to the current time period can be determined as the number of times verified; the identity authentication moments stored in the snapshot memory can also be read; the number of moments of the identity authentication moments belonging to the current time period can be determined, and the number of moments can be determined as the number of times verified.

[0056] Specifically, if the identity verification moment falls within the current time period, it indicates that an identity verification operation was initiated for the target client during the current time period, which can be counted as one verification. Therefore, by determining the number of identity verification moments that fall within the current time period, the number of identity verifications initiated for the target client can be determined accordingly.

[0057] By storing the client information of the target client and the authentication time in correspondence in the form of a key-value pair, the number of identity verifications performed on the target client in the current period can be quickly and directly determined based on the client information of the target client.

[0058] S130: Determine the necessity level data for identity verification of the target client at the current moment based on the number of verifications completed, and determine whether to initiate an identity verification operation for the target client at the current moment based on the necessity level data.

[0059] Among them, the necessity degree data is used to indicate the necessity degree of identity verification for the target client at the current moment. The necessity degree data can be a probability value. The higher the probability value, the higher the necessity degree of identity verification for the target client at the current moment; the lower the probability value, the lower the necessity degree of identity verification for the target client at the current moment. For example, when the necessity degree data is 0%, it is not necessary to perform identity verification at the current moment; when the necessity degree data is 100%, the corresponding description indicates that identity verification can be performed at the current moment. In addition, the necessity degree data can also be expressed in decimal form, and the degree is represented by the size of the value; or, the necessity degree data can also be data representing a level, such as the necessity degree data includes level 1, level 2, level 3..., level N; N is a positive integer, and different levels represent different degrees of necessity; those skilled in the art can set the form of expression of the necessity degree data according to actual application conditions, and the embodiments of the present invention are not limited to this.

[0060] Specifically, the implementation method of determining the necessity degree data for performing identity verification on the target client at the current moment based on the number of verifications may include: determining a first ratio value of the duration of the current time period to the duration of the target verification time period; determining a second ratio value between the number of verifications and the target number of verifications; when the first ratio value is greater than or equal to the second ratio value, it means that the number of verifications completed in the current time period is relatively small. In order to ensure that each verification can be evenly distributed, the necessity degree data can be set to a probability value corresponding to the need for identity verification at the current moment, such as 100%; when the first ratio value is less than the second ratio value, it means that the number of verifications performed in the current time period is large and the frequency of identity verification is fast. The necessity degree data can be set accordingly to a probability value corresponding to the need for identity verification at the current moment, such as 0%.

[0061] An identity verification method provided by an embodiment of the present invention obtains pre-configured verification strategy information; wherein the verification strategy information includes a target verification period and a target number of verifications; when the current moment belongs to the target verification period, the number of times the target client has been verified in the current period is determined, thereby taking into account both the current period and the number of verifications, determining the necessary degree data for identity verification of the target client at the current moment, thereby determining whether to start the identity verification operation at the current moment based on the necessary degree data, which can make the distribution of the determined time for identity authentication more even; solves the problem of long-term non-verification or frequent verification when performing completely random verification in the existing technology, more reasonably and accurately determines the time when identity verification is required, ensures security, avoids time waste caused by frequent verification, and is conducive to improving access convenience.

[0062] Figure 3 A flowchart of another identity verification method provided by an embodiment of the present invention. This embodiment is optimized based on the above-mentioned technical solutions. Optionally, before determining the number of verifications, the theoretical verification period corresponding to each target verification may be determined; the implementation method for determining the necessary degree data may be: based on the current period and the theoretical verification period, determine the theoretical number of identity verification operations performed by the target client in the current period; compare the theoretical number of verifications with the number of verifications, and determine the necessary degree data based on the comparison result. Among them, the explanations of the terms that are the same as or corresponding to the above-mentioned embodiments are not repeated here.

[0063] like Figure 3 As shown, the method of this embodiment may specifically include:

[0064] S210: Obtain pre-configured verification strategy information.

[0065] The verification strategy information includes a target verification period and a target verification number.

[0066] S220 , dividing the target verification period into time periods based on the number of target verifications, and obtaining theoretical verification time periods corresponding to each target verification.

[0067] Among them, the theoretical verification period is the period that each target verification should correspond to when the target verification is performed according to the period obtained after division.

[0068] In a specific implementation, the method of dividing the target verification period based on the target verification number can be: dividing the target verification period into divided periods according to the target verification number, and determining each divided period as a theoretical verification period corresponding to each target verification according to the time sequence of the divided periods; or dividing the target verification period into M divided periods, where M is a value 2 greater than the target verification number; and sorting the divided periods according to the time sequence of the divided periods, removing the first and last divided periods, and determining the remaining divided periods as the theoretical verification periods corresponding to each target verification.

[0069] Furthermore, based on the number of target verifications, the target verification period is divided into time periods, and the implementation method for obtaining the theoretical verification time periods corresponding to each target verification can also be: determining the number of divisions based on the number of target verifications; dividing the target verification period into time periods according to preset division rules and division numbers, and obtaining the theoretical verification time periods corresponding to each target verification.

[0070] The preset division rule includes at least one of an equal division rule, an equal proportion division rule, and an equal increment division rule. The number of divisions can be equal to or greater than the target verification number.

[0071] In a specific implementation, when the preset division rule is equal division, the target verification period can be divided into the number of divided periods, and each divided period can be arranged in chronological order; each period can be determined as the theoretical verification period corresponding to each target verification in the order of arrangement. For example, if the number of target verifications is 5, the target verification period is divided into 5 divided periods, and they are arranged in chronological order to obtain period A, period B, period C, period D, and period E; then period A is the theoretical verification period corresponding to the first target verification, period B is the theoretical verification period corresponding to the second target verification, period C is the theoretical verification period corresponding to the third target verification, period D is the theoretical verification period corresponding to the fourth target verification, and period E is the theoretical verification period corresponding to the fifth target verification.

[0072] In addition, the target verification period can also be divided according to an equal proportion division rule or an equal increment division rule; the equal proportion division rule means that for each period obtained after the division, the ratios obtained by comparing two adjacent periods in chronological order are equal; the equal increment division rule means that for each period obtained after the division, the differences obtained by subtracting two adjacent periods in chronological order are equal. Those skilled in the art can set the division rule according to actual application conditions, and this embodiment of the present invention is not limited to this.

[0073] In this embodiment, by setting division rules such as an equal division rule, an equal proportion division rule, and an equal increment division rule, it is possible to quickly and accurately determine the theoretical verification time period corresponding to each target verification.

[0074] S230: If the current time belongs to the target verification period, determine the number of verifications of the target client in the current period.

[0075] S240. Based on the current period and the theoretical verification period, determine the theoretical verification times for the target client to perform identity verification operations in the current period; compare the theoretical verification times with the verified times, and determine the necessary degree data based on the comparison result.

[0076] The theoretical verification times are the number of theoretical verification periods included in the current time period. Specifically, the number of theoretical verification periods included in the duration corresponding to the current time period can be determined, and this number is determined as the theoretical verification times.

[0077] For example, the duration corresponding to the current period is 20 minutes. The theoretical verification periods are sorted in chronological order, and the resulting period sequence can be period A, period B, and period C; among them, the duration of period A is 10 minutes, the length of period B is 5 minutes, and the length of period C is 5 minutes. The duration corresponding to the current period can include the length of period A, the length of period B, and the length of period C, a total of 3 theoretical verification periods, and the theoretical number of verifications is 3.

[0078] In a specific implementation, based on the current time period and the theoretical verification time period, the method for determining the theoretical number of verification times corresponding to the target client includes: determining the number of time periods of the theoretical verification time period contained in the current time period; wherein the number of time periods includes an integer part and a remainder part; and determining the value corresponding to the integer part as the theoretical number of verification times.

[0079] For example, the duration corresponding to the current period is 20 minutes. The theoretical verification periods are sorted in chronological order, and the resulting period sequence can be period A, period B, and period C; wherein, the duration of period A is 10 minutes, the length of period B is 5 minutes, and the length of period C is 10 minutes. The duration corresponding to the current period may include the length of period A, the length of period B, and 0.5 of period C. The integer part of the number of period times is 2, and the remainder is 0.5. The value corresponding to the integer part can be determined as the theoretical number of verifications, and the theoretical number of verifications is 2.

[0080] In this embodiment, the situation where there is a remainder in the number of time periods is taken into consideration, and the value corresponding to the integer part of the number of time periods is determined as the theoretical number of verifications to avoid completing each target verification too early, which results in poor distribution uniformity of each identity verification, and helps to more accurately determine whether to perform an identity verification operation at the current moment.

[0081] In specific implementations, the theoretical verification times are compared with the actual verification times, and the necessary degree data is determined based on the comparison result. The comparison results can be categorized into three cases: 1. The theoretical verification times are less than the actual verification times; 2. The theoretical verification times are greater than the actual verification times; and 3. The theoretical verification times are equal to the actual verification times. The following describes how to determine the necessary degree data based on each of these three comparison results.

[0082] 1. If the theoretical number of verifications is less than the number of verifications performed, the necessity degree data is determined to be a first probability value; wherein the first probability value is a probability value corresponding to not initiating an identity verification operation for the target client.

[0083] It should be noted that when the theoretical number of verifications is less than the number of verifications actually performed, it means that there are more identity verification operations initiated in the current period and the time intervals are smaller. In order to make the time intervals between identity verifications more uniform and smoother from the perspective of the target verification period as a whole, the necessary degree data can be set as the probability value corresponding to not initiating identity verification operations for the target client, so as to avoid too frequent identity verification operations.

[0084] For example, the smaller the probability value, the less likely it is to initiate the identity verification operation for the target client. The first probability value for not initiating the identity verification operation for the target client can be set to 0%, and the value of the necessity data is 0%.

[0085] In this embodiment, when the theoretical number of verifications is less than the number of verifications, the necessary degree data is set to the probability value corresponding to not starting the identity verification operation for the target client to avoid excessive identity verification operations, which is conducive to making the time intervals between each identity verification more uniform and smooth.

[0086] 2. If the theoretical verification times are greater than the verified times, the necessity degree data is determined to be a second probability value; wherein the second probability value is a probability value corresponding to initiating an identity verification operation on the target client.

[0087] It should be noted that when the theoretical number of verifications is greater than the number of verifications actually performed, it means that fewer identity verification operations are initiated during the current period and the time intervals are larger. In order to make the time intervals between identity verifications more uniform and smoother from the perspective of the target verification period as a whole, the necessary degree data can be set as the probability value corresponding to when the identity verification operation is initiated for the target client, so as to avoid the situation where identity verification is not performed for a long time, resulting in reduced security of access operations.

[0088] For example, the larger the probability value, the greater the possibility of starting the identity verification operation for the target client. The second probability value of starting the identity verification operation for the target client can be set to 100%, and the value of the necessity data is 100%.

[0089] In this embodiment, when the theoretical number of verifications is greater than the number of verifications actually performed, the necessary degree data is set to the probability value corresponding to when the identity verification operation is started on the target client to avoid the situation where identity verification is not performed for a long time, which is beneficial to improving the security of the target client when performing operations.

[0090] 3. If the theoretical number of verifications is equal to the number of verifications already completed, determine the number of theoretical verification periods included in the current period; the number of periods consists of an integer part and a remainder part; based on the remainder part, determine the weight ratio of the remainder duration to the current theoretical verification period, and determine the weight ratio as the necessary degree data.

[0091] Among them, the remainder duration is the duration corresponding to the remainder part, and the current theoretical verification period is the theoretical verification period to which the current moment belongs.

[0092] In this embodiment, the value corresponding to the integer part is determined as the theoretical number of verification times. Based on the remainder part, the method of determining the weight ratio of the remainder duration to the current theoretical verification period may include: directly determining the value corresponding to the remainder part as the weight ratio; or calculating the remainder duration corresponding to the remainder part and the period duration of the current theoretical verification period, calculating the quotient of the remainder duration divided by the period duration, and determining the quotient as the weight ratio.

[0093] For example, assuming the current theoretical verification period is 10 minutes long, the integer portion of the period number is 2, and the remainder is 0.5, the theoretical verification times are equal to the value corresponding to the integer portion, which can be 2. When determining the weight ratio, the weight ratio can be directly set to 0.5; alternatively, the remainder duration corresponding to the remainder portion can be determined to be 5 minutes. The quotient obtained by dividing the remainder duration by the period duration is 0.5, and 0.5 is determined as the weight ratio. Furthermore, the weight ratio can be determined as the value of the necessary degree data, that is, the value of the necessary degree data is 0.5, or it can be expressed as 50%.

[0094] In this embodiment, when the theoretical number of verifications is equal to the number of verifications already completed, the necessary degree data is determined by the remainder. That is, when the number of identity verification operations initiated in the current period meets expectations, only the weight of the remainder duration in the current theoretical verification period is considered to determine the necessary degree data based on the duration weight. This can comprehensively consider the time factor of the current moment, and facilitate the control of the moment of initiating the identity verification operation to occur in the current theoretical verification period, so that the theoretical number of verifications continues to be equal to the number of verifications already completed, and facilitate the more uniform time intervals between each identity verification from the perspective of the target verification period as a whole.

[0095] S250: Determine whether to start an identity verification operation for the target client at the current moment based on the necessity degree data.

[0096] Optionally, the verification strategy information also includes a necessity degree data threshold; the method of determining whether to initiate an identity verification operation on the target client at the current moment based on the necessity degree data may include: if the value of the necessity degree data is greater than or equal to the necessity degree data threshold, then initiating an identity verification operation on the target client at the current moment; if the value of the necessity degree data is less than the necessity degree data threshold, then determining not to initiate an identity verification operation on the target client at the current moment.

[0097] Exemplarily, the numerical threshold value of the degree of necessity can be set to 60%. When the numerical value of the degree of necessity data is greater than or equal to 60%, the identity verification operation is started for the target client at the current moment; when the numerical value of the degree of necessity data is less than 60%, it is determined not to start the identity verification operation for the target client at the current moment. Combining the three comparison results obtained by comparing the theoretical verification times and the verified times mentioned above, it can be seen that: if the theoretical verification times are less than the verified times, the numerical value of the degree of necessity data is 0%, which is less than 60%, and it is determined not to start the identity verification operation for the target client at the current moment; if the theoretical verification times are greater than the verified times, the numerical value of the degree of necessity data is 100%, which is greater than 60%, and it is determined to start the identity verification operation for the target client at the current moment; if the theoretical verification times are equal to the verified times, the determined weight ratio is compared with 60%, and based on the comparison result, it is determined whether to perform identity verification at the current moment. It should be noted that those skilled in the art can set the numerical threshold value of the degree of necessity according to actual application conditions, and the embodiments of the present invention do not limit this.

[0098] This embodiment determines whether to start the identity verification operation for the target client at the current moment by setting a necessity degree value threshold, and can more reasonably and accurately determine the time when the identity verification is required based on the determined necessity degree value.

[0099] An identity verification method provided by an embodiment of the present invention compares the theoretical number of verifications with the number of verified times and determines the necessary degree data based on the comparison result. This method combines both the theoretical number of verifications and the number of verified times to determine the necessary degree data. The necessary degree data is then used to determine whether to perform identity verification. This method avoids long periods of inactivity and frequent verification while maintaining a certain degree of randomness, thereby improving the operational security of the target client.

[0100] The above describes in detail the embodiments corresponding to the identity verification method. In order to make those skilled in the art further understand the technical solution of this method, a specific application scenario is given below.

[0101] Figure 4 An identity verification framework diagram provided for an embodiment of the present invention includes a configuration module, a configuration cache module, a hit record cache module, a probability calculation module, a policy management module and a probability management module. Each module cooperates with each other to determine the time to start the identity verification operation.

[0102] like Figure 4As shown, the configuration module is used to pre-configure the target verification period, target verification times, and necessary degree data thresholds; the configuration cache module is used to store, update, and monitor the configured verification policy information, and can also encapsulate the verification policy information; the hit record cache module is used to record the number of identity verifications generated. The calculation module is used to obtain the identity verification policy, parse the configured parameters, and calculate the theoretical verification period; the policy management module is used to parse the policy content and cache the identity verification policy; the probability management module is used to initialize the necessary degree data and store the determined necessary degree data. Through the mutual cooperation of the configuration module, configuration cache module, hit record cache module, calculation module, policy management module, and probability management module, the algorithm engine is used to determine the necessary degree data, that is, the probability data of whether to perform identity authentication, so as to determine the time for identity authentication based on the calculated necessary degree data.

[0103] The process of configuring the policy can be as follows Figure 5 As shown, you can first configure the verification policy information, including selecting a target verification period, setting a target verification count, setting a required data threshold, and selecting a scenario. The target verification count is the number of random verifications that must occur during the target verification period. During configuration, you must select a scenario, which is identified by a scenario value and can include login, download, and deletion scenarios.

[0104] When a new policy is detected, the new operation is performed; if no new policy is added, the current configuration is saved, and the saved configuration policy is monitored for changes such as addition, modification, and deletion, and the configuration changes are captured and the cache container is updated.

[0105] After the policy configuration is complete, you can Figure 6 Authentication is performed on the target client according to the execution flow in the flow. As shown in the figure, the current operation scenario can be determined by determining whether it matches the target verification scenario to determine whether the random scenario has been hit. If the current operation scenario matches the target verification scenario, it indicates that the random scenario has been hit. If the current operation scenario does not match the target verification scenario, it indicates that the random scenario has not been hit, and authentication is not performed, allowing the target client's current operation to continue. When the random scenario has been hit, a random probability calculation can be performed, namely, the necessary degree data is calculated. If the necessary degree data is greater than or equal to the preset necessary degree data threshold, it indicates that the identity verification has been hit. If the necessary degree data is less than the preset necessary degree data threshold, it indicates that the identity verification has not been hit, and authentication is not performed, allowing the target client's current operation to continue. After the identity verification is hit, the target client can initiate an identity verification operation at the current moment. If the verification passes, the target client is allowed to operate in the current operation scenario. If the verification fails, the operation fails and cannot continue in the current operation scenario.

[0106] The probability calculation flow chart can be found in Figure 7 When performing random probability calculations, that is, calculating the necessary degree data, the unit time, that is, the theoretical verification period, can be calculated. The theoretical verification period can be obtained by evenly dividing the target verification period. The time interval is the preset target verification period for verification, which can be converted into a value in minutes. Furthermore, the current moment and the number of verifications that have been performed at the current moment can be determined; when the theoretical number of verifications is less than the number of verifications, 0 can be returned as the value corresponding to the necessary degree data to indicate that the probability of performing identity verification at the current time is 0%; when the theoretical number of verifications is greater than the number of verifications, 1 can be returned as the value corresponding to the necessary degree data to indicate that the probability of performing identity verification at the current time is 100%; when the theoretical number of verifications is equal to the number of verifications, the number of theoretical verification periods contained in the current period can be determined; wherein the number of periods consists of an integer part and a remainder part; based on the remainder part, the necessary degree data is determined, thereby determining the probability that identity verification is currently required, and returning the result.

[0107] An identity verification method provided by an embodiment of the present invention determines whether to start an identity verification operation at the current moment based on necessary degree data, which can make the distribution of the determined times for identity authentication more even; avoid the problems of long-term non-verification or frequent verification, ensure security while avoiding the waste of time caused by frequent verification.

[0108] Figure 8 This is a structural diagram of an identity verification device provided in an embodiment of the present invention, which is used to perform the identity verification method provided in any of the above embodiments. This device and the identity verification methods provided in the above embodiments are based on the same inventive concept. For details not fully described in the embodiments of the identity verification device, please refer to the embodiments of the above identity verification methods. This device may specifically include:

[0109] The verification strategy information acquisition module 10 is used to obtain pre-configured verification strategy information; wherein the verification strategy information includes a target verification period and a target verification number;

[0110] The verification times determination module 11 is configured to determine the verification times of the target client in the current time period if the current time period falls within the target verification time period; wherein the current time period is the time period between the start time of the target verification time period and the current time period;

[0111] The necessity data determination module 12 is used to determine the necessity data for identity verification of the target client at the current moment based on the number of verifications, and determine whether to start the identity verification operation for the target client at the current moment based on the necessity data.

[0112] Based on any optional technical solution in the embodiments of the present invention, the following may be optionally included:

[0113] The target verification period division module is used to divide the target verification period into time periods based on the target verification number before determining the number of verifications performed by the target client in the current period, and obtain the theoretical verification period corresponding to each target verification;

[0114] The necessity degree data determination module 12 includes:

[0115] A theoretical verification times determining unit, configured to determine a theoretical verification times for the target client to perform identity verification operations in the current time period based on the current time period and the theoretical verification time period;

[0116] The necessity degree data determining unit is configured to compare the theoretical verification times with the verified times, and determine the necessity degree data based on the comparison result.

[0117] Based on any optional technical solution in the embodiments of the present invention, optionally, a necessity degree data determining unit includes:

[0118] The first necessity degree data determining subunit is configured to determine the necessity degree data as a first probability value if the theoretical verification times are less than the verified times; wherein the first probability value is a probability value corresponding to not initiating an identity verification operation for the target client.

[0119] Based on any optional technical solution in the embodiments of the present invention, optionally, a necessity degree data determining unit includes:

[0120] The second necessity degree data determining subunit is configured to determine the necessity degree data as a second probability value if the theoretical verification times are greater than the verified times; wherein the second probability value is a probability value corresponding to initiating an identity verification operation on the target client.

[0121] Based on any optional technical solution in the embodiments of the present invention, optionally, a necessity degree data determining unit includes:

[0122] A time period number determination subunit is used to determine the number of time periods of theoretical verification time periods included in the current time period if the theoretical verification number is equal to the verified number; wherein the time period number is composed of an integer part and a remainder part;

[0123] A third necessity degree data determination subunit is configured to determine, based on the remainder portion, a weight ratio of the remainder duration to the current theoretical verification period, and determine the weight ratio as the necessity degree data;

[0124] Among them, the remainder duration is the duration corresponding to the remainder part, and the current theoretical verification period is the theoretical verification period to which the current moment belongs.

[0125] Based on any optional technical solution in the embodiment of the present invention, optionally, the verification strategy information further includes a necessity degree data threshold; the necessity degree data determination module 12 includes:

[0126] a first identity verification operation determining unit, configured to initiate an identity verification operation on the target client at a current moment if the value of the necessity degree data is greater than or equal to the necessity degree data threshold;

[0127] The second identity verification operation determining unit is configured to determine not to initiate an identity verification operation on the target client at the current moment if the value of the necessity degree data is less than the necessity degree data threshold.

[0128] Based on any optional technical solution in the embodiments of the present invention, optionally, the target verification period division module includes:

[0129] A division number determining unit, configured to determine the number of divisions based on a target number of verifications;

[0130] The time period division unit is used to divide the target verification time period into time periods according to the preset division rules and division quantity, and obtain the theoretical verification time periods corresponding to each target verification;

[0131] The preset division rule includes at least one of an equal division rule, an equal proportion division rule and an equal increment division rule.

[0132] Based on any optional technical solution in the embodiments of the present invention, optionally, the theoretical verification number determination unit includes:

[0133] The time period number determination subunit is used to determine the time period number of the theoretical verification time period included in the current time period; wherein the time period number includes an integer part and a remainder part;

[0134] The theoretical verification times determining subunit is used to determine the value corresponding to the integer part as the theoretical verification times.

[0135] Based on any optional technical solution in the embodiment of the present invention, optionally, the verification strategy information further includes a target verification scenario;

[0136] The verification times determination module 11 includes:

[0137] A current operation scenario determining unit, configured to determine the current operation scenario of the target client at the current moment;

[0138] The verified times determining unit is configured to determine the verified times of the target client in the current time period if the current operation scenario belongs to the target verification scenario and the current moment belongs to the target verification time period.

[0139] Based on any optional technical solution in the embodiments of the present invention, the following may be optionally included:

[0140] an authentication time storage module for storing the authentication time corresponding to the target client in a snapshot storage in the form of a key-value pair using the client information of the target client as a primary key and the authentication time of the target client as a value before determining the number of verifications of the target client in the current period;

[0141] The verification times determination module 11 includes:

[0142] The authentication moment reading unit is used to read the authentication moment stored in the snapshot memory;

[0143] The moment number determining unit is used to determine the moment number of identity authentication moments belonging to the current period, and determine the moment number as the number of verified times.

[0144] Based on any optional technical solution in the embodiments of the present invention, the following may be optionally included:

[0145] A verification policy information update module is configured to, after obtaining pre-configured verification policy information, update the verification policy information based on the update instruction if an update instruction for updating the verification policy information is received, and store the updated verification policy information in a policy cache container;

[0146] The update operation includes at least one of an add operation, a modify operation, and a delete operation.

[0147] The identity verification device provided by the embodiment of the present invention can execute the identity verification method provided by any embodiment of the present invention, which solves the problem of long-term non-verification or frequent verification when performing completely random verification in the existing technology, and more reasonably and accurately determines the time when identity verification is required. While ensuring security, it avoids the waste of time caused by frequent verification, which is conducive to improving access convenience.

[0148] It is worth noting that in the embodiment of the above-mentioned identity verification device, the various units and modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.

[0149] Figure 9 A schematic structural diagram of an electronic device provided by an embodiment of the present invention. Figure 9FIG2 is a block diagram of an exemplary electronic device 20 suitable for implementing an embodiment of the present invention. The electronic device 20 shown is only an example and should not limit the functionality and scope of use of the embodiments of the present invention.

[0150] like Figure 9 As shown, electronic device 20 is a general-purpose computing device. Components of electronic device 20 may include, but are not limited to, one or more processors or processing units 201, system memory 202, and a bus 203 connecting various system components (including system memory 202 and processing unit 201).

[0151] Bus 203 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor, or a local bus using any of a variety of bus architectures. Examples of these architectures include, but are not limited to, an Industry Standard Architecture (ISA) bus, a Micro Channel Architecture (MAC) bus, an Enhanced ISA bus, a Video Electronics Standards Association (VESA) local bus, and a Peripheral Component Interconnect (PCI) bus.

[0152] The electronic device 20 typically includes a variety of computer system readable media. These media can be any available media that can be accessed by the electronic device 20, including volatile and non-volatile media, removable and non-removable media.

[0153] The system memory 202 may include computer system readable media in the form of volatile memory, such as random access memory (RAM) 204 and / or cache memory 205. The electronic device 20 may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, the storage system 206 may be used to read and write to non-removable, non-volatile magnetic media. A magnetic disk drive may be provided for reading and writing to a removable non-volatile magnetic disk (e.g., a "floppy disk"), as well as an optical disk drive for reading and writing to a removable non-volatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media). In these cases, each drive may be connected to the bus 203 via one or more data media interfaces. The memory 202 may include at least one program product having a set (e.g., at least one) of program modules configured to perform the functions of various embodiments of the present invention.

[0154] A program / utility 208 having a set (at least one) of program modules 207 may be stored, for example, in memory 202. Such program modules 207 include, but are not limited to, an operating system, one or more application programs, other program modules, and program data, each of which, or some combination thereof, may include an implementation of a network environment. Program modules 207 generally perform the functions and / or methods of the embodiments described herein.

[0155] The electronic device 20 may also communicate with one or more external devices 209 (e.g., a keyboard, a pointing device, a display 210, etc.), one or more devices that enable a user to interact with the electronic device 20, and / or any device that enables the electronic device 20 to communicate with one or more other computing devices (e.g., a network card, a modem, etc.). Such communication may be performed via an input / output (I / O) interface 211. Furthermore, the electronic device 20 may also communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network, such as the Internet) via a network adapter 212. As shown, the network adapter 212 communicates with other modules of the electronic device 20 via a bus 203. It should be understood that other hardware and / or software modules may be used in conjunction with the electronic device 20, including but not limited to microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0156] The processing unit 201 executes various functional applications and data processing by running programs stored in the system memory 202 .

[0157] An electronic device provided by the present invention can implement the following method: obtaining pre-configured verification strategy information; wherein, the verification strategy information includes a target verification period and a target verification number; if the current moment belongs to the target verification period, determining the number of times the target client has been verified in the current period; wherein, the current period is the period between the start time of the target verification period and the current moment; based on the number of times verified, determining the necessary degree data for performing identity verification on the target client at the current moment, and determining whether to start the identity verification operation on the target client at the current moment based on the necessary degree data. The technical solution of the embodiment of the present invention can avoid the problem of long-term non-verification or frequent verification, and more reasonably and accurately determine the time when identity verification is required, ensuring security while avoiding the time waste caused by frequent verification, which is conducive to improving access convenience.

[0158] An embodiment of the present invention provides a storage medium containing computer-executable instructions. When the computer-executable instructions are executed by a computer processor, the computer-executable instructions are used to perform an identity verification method. The method includes:

[0159] Obtain pre-configured verification policy information; wherein, the verification policy information includes a target verification period and a target verification number; if the current moment belongs to the target verification period, determine the number of times the target client has been verified in the current period; wherein, the current period is the period between the start time of the target verification period and the current moment; based on the number of times verified, determine the necessary degree data for identity verification of the target client at the current moment, and determine whether to start the identity verification operation for the target client at the current moment based on the necessary degree data. The technical solution of the embodiment of the present invention can avoid the problem of long-term non-verification or frequent verification, more reasonably and accurately determine the time when identity verification is required, ensure security, avoid time waste caused by frequent verification, and help improve access convenience.

[0160] Of course, the computer executable instructions of the storage medium provided by the embodiment of the present invention are not limited to the operations of the method described above, but can also execute related operations in the identity verification method provided by any embodiment of the present invention.

[0161] The computer storage medium of the embodiment of the present invention can adopt any combination of one or more computer-readable media. Computer-readable media can be computer-readable signal media or computer-readable storage media. Computer-readable storage media can be, for example, but not limited to, electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or components, or any combination thereof. More specific examples (non-exhaustive list) of computer-readable storage media include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In this document, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by an instruction execution system, device or device or used in combination with it.

[0162] A computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, which carries computer-readable program code. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium that can transmit, propagate, or transport a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0163] Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0164] The computer program code for performing the operations of the embodiments of the present invention can be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0165] Note that the above are only preferred embodiments of the present invention and the technical principles employed. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments, and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments and may include many other equivalent embodiments without departing from the concept of the present invention. The scope of the present invention is determined by the scope of the appended claims.

Claims

1. An identity verification method, characterized in that: include: Obtaining pre-configured verification strategy information; wherein the verification strategy information includes a target verification period and a target verification number; Based on the target verification number, the target verification period is divided into time periods to obtain theoretical verification time periods corresponding to each target verification; If the current time falls within the target verification period, determining the number of verifications performed by the target client in the current period; wherein the current period is the period between the start time of the target verification period and the current time; Determining a theoretical number of identity verification operations that the target client should perform during the current period based on the current period and the theoretical verification period; Comparing the theoretical verification number with the verified number, and determining necessity degree data based on the comparison result; wherein the necessity degree data is used to indicate the necessity degree of identity verification of the target client at the current moment; the necessity degree data is a probability value, a decimal, a level, or a weight ratio; Based on the necessity degree data, it is determined whether to start an identity verification operation for the target client at the current moment.

2. The method according to claim 1, characterized in that The step of comparing the theoretical verification times with the verified times and determining the necessary degree data based on the comparison result comprises: If the theoretical verification times are less than the verified times, the necessity degree data is determined to be a first probability value; wherein the first probability value is a probability value corresponding to not starting the identity verification operation for the target client.

3. The method according to claim 1, characterized in that The step of comparing the theoretical verification times with the verified times and determining the necessary degree data based on the comparison result comprises: If the theoretical verification times are greater than the verified times, the necessity degree data is determined to be a second probability value; wherein the second probability value is a probability value corresponding to initiating an identity verification operation on the target client.

4. The method according to claim 1, wherein The step of comparing the theoretical verification times with the verified times and determining the necessary degree data based on the comparison result comprises: If the theoretical verification times are equal to the verified times, then determining the number of time periods of the theoretical verification time period included in the current time period; wherein the number of time periods is composed of an integer part and a remainder part; Based on the remainder, determining a weight ratio of the remainder duration to the current theoretical verification period, and determining the weight ratio as the necessary degree data; Among them, the remainder duration is the duration corresponding to the remainder part, and the current theoretical verification period is the theoretical verification period to which the current moment belongs.

5. The method according to claim 4, characterized in that The verification strategy information further includes a necessity degree data threshold; and determining whether to initiate an identity verification operation for the target client at the current moment based on the necessity degree data includes: If the value of the necessity degree data is greater than or equal to the necessity degree data threshold, initiating the identity verification operation on the target client at the current moment; If the value of the necessity degree data is less than the necessity degree data threshold, it is determined not to start the identity verification operation for the target client at the current moment.

6. The method according to claim 1, characterized in that The target verification period is divided into time periods based on the target verification number, and the theoretical verification period corresponding to each target verification occurs is obtained, including: Determining a number of divisions based on the target number of verifications; Divide the target verification period into time periods according to the preset division rule and the number of divisions, and obtain theoretical verification periods corresponding to each target verification; The preset division rule includes at least one of an equal division rule, an equal proportion division rule and an equal increment division rule.

7. The method according to claim 1, characterized in that The determining, based on the current period and the theoretical verification period, a theoretical number of verification times corresponding to the target client includes: Determine the number of time periods of the theoretical verification time period included in the current time period; wherein the number of time periods includes an integer part and a remainder part; The numerical value corresponding to the integer part is determined as the theoretical number of verification times.

8. The method according to claim 1, characterized in that The verification strategy information also includes a target verification scenario; If the current moment falls within the target verification period, determining the number of verifications of the target client in the current period includes: Determining a current operation scenario of the target client at the current moment; If the current operation scenario belongs to the target verification scenario and the current moment belongs to the target verification period, then the number of verifications of the target client in the current period is determined.

9. The method according to claim 1, characterized in that Before determining the number of verifications of the target client in the current period, the method further includes: Using the client information of the target client as a primary key and the identity authentication time of the target client as a value, storing the identity authentication time corresponding to the target client in a snapshot storage in the form of a key-value pair; Determining the number of verifications of the target client in the current period includes: Reading the identity authentication moment stored in the snapshot memory; The number of identity authentication moments belonging to the current time period is determined, and the number of moments is determined as the number of verified times.

10. The method according to claim 1, characterized in that After obtaining the pre-configured verification strategy information, the method further includes: If an update instruction for updating the verification policy information is received, updating the verification policy information based on the update instruction, and storing the updated verification policy information in a policy cache container; The update operation includes at least one of an add operation, a modify operation and a delete operation.

11. An identity verification device, characterized in that: include: A verification strategy information acquisition module is used to obtain pre-configured verification strategy information; wherein the verification strategy information includes a target verification period and a target verification number; A target verification period division module is used to divide the target verification period into time periods based on the number of target verifications, and obtain theoretical verification periods corresponding to each target verification; a verification times determination module, configured to determine the number of verification times of the target client in the current time period if the current time period falls within the target verification time period; wherein the current time period is the period between the start time of the target verification time period and the current time period; a necessity degree data determination module, configured to determine, based on the number of verifications completed, necessity degree data for performing identity verification on the target client at the current moment, and determine, based on the necessity degree data, whether to initiate an identity verification operation on the target client at the current moment; Wherein, the necessary degree data determination module includes: a theoretical verification times determining unit, configured to determine, based on the current time period and the theoretical verification time period, a theoretical verification times for the target client to perform an identity verification operation in the current time period; The necessity degree data determination unit is used to compare the theoretical number of verifications with the number of verifications, and determine the necessity degree data based on the comparison result; wherein the necessity degree data is used to indicate the necessity degree of identity verification for the target client at the current moment; the necessity degree data is a probability value, decimal, level or weight ratio.

12. An electronic device, characterized in that: include: one or more processors; a memory for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the identity verification method as described in any one of claims 1 to 10.

13. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the identity verification method according to any one of claims 1 to 10 is implemented.

Images