An identity information verification method, device, equipment, medium and program product
By dynamically adjusting the weight and priority of authentication methods, the problem of a single authentication method in existing technologies is solved, achieving higher security and pass rate, and improving user experience and work efficiency.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-11-23
- Publication Date
- 2026-03-24
AI Technical Summary
Existing identity verification methods such as SMS verification, facial recognition verification, or fingerprint verification are too simplistic and cannot meet the requirements for security and pass rate, thus affecting the progress of business processing.
The system dynamically adjusts the weight values of security verification methods based on the verification information sent by the client and the enabled security verification methods. It calculates the product of the weight values to determine the priority and instructs the client to verify the identity information.
While ensuring verification security, it improved the security verification pass rate and user experience, and increased work efficiency.
Smart Images

Figure CN116132053B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of big data intelligent analysis technology, and in particular to a method, apparatus, device, medium and program product for verifying identity information. Background Technology
[0002] In recent years, with the rapid development of smartphones and mobile networks, completing relevant business transactions via mobile phones has become a trend.
[0003] Currently, to ensure the safety of customers' funds during financial transactions, security verification is required before any transaction is conducted. Common security verification methods for financial transactions include SMS verification, facial recognition verification, or fingerprint verification.
[0004] In the process of developing this invention, the inventors discovered the following defects in existing methods: SMS verification, facial recognition verification, or fingerprint verification are generally too simple and cannot meet the requirements of security and pass rate, thus affecting the progress of business processing. Summary of the Invention
[0005] This invention provides a method, apparatus, device, medium, and program product for verifying identity information, which can dynamically adjust security verification methods to meet security and pass rate requirements.
[0006] In a first aspect, embodiments of the present invention provide a method for verifying identity information, the method comprising:
[0007] Based on the verification information sent by the client and the enabled security verification methods, determine the weight value corresponding to each security verification method and each type of verification information;
[0008] Determine the product of the weight values of the same security verification method corresponding to different verification information, and determine the priority of each security verification method based on the product;
[0009] According to the priority, a target security verification method is sent to the client to instruct the client to verify its identity information according to the target security verification method.
[0010] Secondly, embodiments of the present invention also provide an identity information verification device, the device comprising:
[0011] The weight value determination module is used to determine the weight value corresponding to each security verification method and each type of verification information based on the verification information sent by the client and the enabled security verification methods.
[0012] The priority determination module is used to determine the product of the weight values of the same security verification method corresponding to different verification information, and to determine the priority of each security verification method based on the product.
[0013] The verification method sending module is used to send a target security verification method to the client according to the priority, so as to instruct the client to verify the identity information according to the target security verification method.
[0014] Thirdly, embodiments of the present invention also provide an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement an identity information verification method as described in any of the embodiments of the present invention.
[0015] Fourthly, embodiments of the present invention also provide a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the identity information verification method as described in any of the embodiments of the present invention.
[0016] Fifthly, this embodiment provides a computer product, including a computer program, characterized in that the computer program, when executed by a processor, implements an identity information verification method as described in any of the embodiments of the present invention.
[0017] In this embodiment of the invention, the weight values corresponding to the same security verification method and each type of verification information are obtained by using the verification information sent by the client and the enabled security verification methods. The weight values corresponding to the same security verification method and different verification information are multiplied together, and the priority of each security verification method is determined based on the product. The target security verification method is sent to the client according to the priority, instructing the client to verify the identity information according to the target security verification method. This realizes the dynamic adjustment of security verification methods under different verification conditions, which reduces the amount of computation while ensuring verification security, improving the security verification pass rate and user experience, and improving work efficiency. Attached Figure Description
[0018] To more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. It should be understood that the following drawings only show some embodiments of the present invention and should not be regarded as a limitation on the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.
[0019] Figure 1 A flowchart of an identity information verification method provided in an embodiment of the present invention;
[0020] Figure 2 A flowchart of another identity information verification method provided in an embodiment of the present invention;
[0021] Figure 3A flowchart illustrating another identity information verification method provided in an embodiment of the present invention;
[0022] Figure 4 A flowchart illustrating another identity information verification method provided in an embodiment of the present invention;
[0023] Figure 5a A structural block diagram of an identity information verification device provided in an embodiment of the present invention;
[0024] Figure 5b A structural block diagram of an identity information verification system provided in an embodiment of the present invention;
[0025] Figure 6 This is a schematic diagram of the structure of an electronic device that can be used to implement an embodiment of the present invention. Detailed Implementation
[0026] The present invention will now be described in further detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and not intended to limit it. Furthermore, it should be noted that, for ease of description, the accompanying drawings show only the parts relevant to the present invention, and not all of the structures.
[0027] It should be noted that similar reference numerals and letters in the following figures indicate similar items; therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures. Furthermore, in the description of this invention, terms such as "first," "second," etc., are used only for distinguishing descriptions and should not be construed as indicating or implying relative importance. The acquisition, storage, use, and processing of data in the technical solutions of this application all comply with the relevant provisions of national laws and regulations.
[0028] Figure 1 This is a flowchart illustrating an identity verification method provided by an embodiment of the present invention. This method is applicable to situations where identity verification is required during financial transactions on a mobile device. The method can be executed by an identity verification device, which can be implemented in hardware and / or software and is typically located in an electronic device. For example, the electronic device can be a server or a server cluster. Figure 1 As shown, the method includes:
[0029] S110. Based on the verification information sent by the client and the enabled security verification methods, determine the weight value corresponding to each security verification method and each type of verification information.
[0030] The verification information may include: amount information, environmental noise information, environmental brightness information, and user attribute information, etc.; further, the user attribute information may include: customer age, customer transaction habits, and customer type, etc.; further, the customer age may be extracted from the personal information stored when the user activates mobile banking; the transaction type may be a customer level, which may be determined by the user's stored value, for example, the user type may be divided into diamond card users, black card users, and platinum card users, etc.
[0031] The security verification methods may include: local phone number authentication, SMS and facial recognition authentication, voiceprint authentication, and authentication methods combining the above methods. Furthermore, the enabled security verification methods can be those enabled by the user through the client. For example, the client supports local phone number authentication, SMS authentication, facial recognition authentication, voiceprint authentication, voiceprint + facial recognition authentication, and local phone number + SMS authentication. However, if the user has only enabled local phone number authentication, SMS authentication, and facial recognition authentication, then the enabled security verification methods are local phone number authentication, SMS authentication, and facial recognition authentication.
[0032] The weight value can represent the importance of a factor or indicator relative to a certain thing; further, in this embodiment, the weight value can represent the probability of each security verification method being used under different verification information conditions.
[0033] Optionally, before basing the verification information sent by the client and the enabled security verification methods, the following may also be included:
[0034] Obtain the verification information sent by the client, which includes amount information, ambient noise information, ambient brightness information, and user attribute information;
[0035] Get the activation status of security verification methods, and get the enabled security verification methods based on the activation status.
[0036] The amount information can be the change in the amount of the user's financial transaction.
[0037] The environmental noise information can be the noise level generated by the surrounding social life when the user uses the client, which can be collected through the user's client and uploaded to the server cloud for analysis; similarly, the environmental brightness information can be the brightness of the surrounding environment when the user uses the client, which can be collected through the user's client and uploaded to the server cloud for analysis.
[0038] The enabled security verification methods can refer to all security verification methods that the user has already activated on the client. It should be noted that the enabled security verification methods can be some or all of the security verification methods provided by the client.
[0039] Optionally, a matching policy generation rule is generated based on the verification information sent by the client and the enabled security verification methods; wherein the policy generation rule includes a mapping relationship between verification information, security verification methods and weight values; and the weight value corresponding to each security verification method and each type of verification information is determined based on the matching result.
[0040] The mapping relationship in the strategy generation rules can be preset manually, and different weight values are assigned to security verification methods of different security levels according to the security requirements of the verification scenario, with the weight values ranging from (0,1). For example, for verification scenarios requiring high security, security verification methods with higher security levels can be assigned a weight value close to 1, while security verification methods with lower security levels can be assigned a weight value close to 0.
[0041] The mapping refers to the correspondence between elements in two sets of elements; in this embodiment, the mapping relationship can be the correspondence between verification information, security verification methods and weight values.
[0042] S120. Determine the product of the weight values of the same security verification method corresponding to different verification information, and determine the priority of each security verification method based on the product.
[0043] For example, for each enabled security verification method, the product of the weight value corresponding to the current security verification method and the amount information, the weight value corresponding to the current security verification method and the environmental noise information, the weight value corresponding to the current security verification method and the environmental brightness information, and the weight value corresponding to the current security verification method and the user attribute information is calculated.
[0044] The product can be used to reflect the probability that the current security verification method is used in the current financial transaction. Furthermore, since high-security verification scenarios require high security, the weight value of higher-security verification methods is close to 1, while the weight value of lower-security verification methods is close to 0. This ensures that under high transaction amounts, the weight value of lower-security verification methods is smaller under the verification information conditions, while the weight value of higher-security verification methods is larger. By using the product, the priority of higher-security verification methods can be increased, thereby improving the security of verification under high transaction amounts.
[0045] Optionally, the score of each security verification method is determined based on the product, and the priority of each security verification method is determined based on the product of the scores. For example, a relationship table between the product and the score range is pre-set. The score of the corresponding security verification method is determined by looking up the product of the weight values of the same security verification method corresponding to different verification information. The higher the score, the higher the priority.
[0046] Optionally, the products are compared, and the priority of each security verification method is determined based on the comparison results.
[0047] The larger the product, the higher the priority of the current security verification method. For example, if the amount is set to 10,000 and the enabled security verification methods are mobile phone number verification and SMS verification, the weight values of each security verification method in this case are shown in Table 1.
[0048] Table 1: Weight Value Table
[0049] Amount information Environmental noise information Ambient brightness information User attribute information Phone number verification <![CDATA[N1]]> <![CDATA[N2]]> <![CDATA[N3]]> <![CDATA[N4]]> SMS verification <![CDATA[K1]]> <![CDATA[K2]]> <![CDATA[K3]]> <![CDATA[K4]]>
[0050] As shown in Table 1, in this case, the score for local number verification is N1*N2*N3*N4, and the score for SMS verification is K1*K2*K3*K4. If N1*N2*N3*N4 is greater than K1*K2*K3*K4, then local number verification has a higher priority in this case.
[0051] The solution provided in this embodiment assigns different weights to various security verification methods under different transaction scenarios. Furthermore, for transactions with lower risk, lower-security verification methods have higher weights, while for transactions with higher risk, higher-security verification methods have higher weights. This solution automatically strengthens or weakens transaction security requirements based on the transaction's risk level, automatically adjusting security verification methods to improve security pass rates and user experience while ensuring security, thus increasing work efficiency.
[0052] S130. Send the target security verification method to the client according to the priority, so as to instruct the client to verify the identity information according to the target security verification method.
[0053] Among them, the target security verification method is generally one or several methods with the highest priority.
[0054] Optionally, the enabled security verification methods can be sorted in descending order according to their respective priorities.
[0055] Based on the sorting results, select at least one target security verification method from the enabled security verification methods and send at least one target security verification method to the client.
[0056] The descending order arrangement is based on the priority of each security verification method, from the highest priority security verification method to the lowest priority security verification method.
[0057] If there is more than one target security verification method, they are sent to the client in order of priority. The next security verification method will only be received when the user passes the verification of the previous target security verification method, until all the target security verification methods have been passed. It should be noted that when there is more than one target security verification method, the security verification is successful when the user passes all the target security verification methods, otherwise the verification fails.
[0058] The technical solution provided in this embodiment obtains a weight value corresponding to each type of verification information through the verification information sent by the client and the enabled security verification methods. The priority of each security verification method is determined by the weight value, and the client is instructed to verify the identity information according to the target security verification method sent according to the priority. The system can dynamically calculate and output the security verification method that best meets the user's security level based on the verification information. This enables users to adjust the security verification method under different verification information conditions, which improves the security verification pass rate and user experience while ensuring verification security and improving work efficiency.
[0059] Figure 2 This is a flowchart illustrating another identity verification method provided by an embodiment of the present invention. This embodiment is a refinement of the steps in the above embodiment. Specifically, in this embodiment, determining the weight value corresponding to each security verification method and each type of verification information based on the verification information sent by the client and the enabled security verification methods includes: matching policy generation rules based on the verification information sent by the client and the enabled security verification methods, wherein the policy generation rules include the mapping relationship between verification information, security verification methods, and weight values; and determining the weight value corresponding to each security verification method and each type of verification information based on the matching results.
[0060] Correspondingly, such as Figure 2 As shown, the method includes:
[0061] S210. Generate rules by matching the verification information sent by the client with the enabled security verification methods.
[0062] The policy generation rules include the mapping relationship between verification information, security verification methods and weight values;
[0063] Optionally, the policy generation rules may also be determined in the following manner:
[0064] Generate an amount table based on the amount, security verification methods, and weight values;
[0065] An environmental noise table is generated based on environmental noise levels, safety verification methods, and weighting values.
[0066] An ambient brightness table is generated based on ambient brightness values, safety verification methods, and weight values.
[0067] Generate a user attribute table based on user attribute information, security verification methods, and weight values;
[0068] The strategy generation rules are determined based on the amount table, environmental noise table, environmental brightness table, and user attribute table.
[0069] For example, taking the verification information as monetary information and the security verification methods as mobile phone number authentication, SMS authentication and facial recognition authentication, voiceprint authentication, and a combination of voiceprint and facial recognition authentication, the table of verification information, security verification methods, and weight values can be as shown in Table 2:
[0070] Table 2: Amount Table
[0071]
[0072] It should be noted that Table 2 only represents one scenario of the mapping relationship between verification information, security verification methods, and weight values. The specific data size and data types can be preset and adjusted according to the actual usage situation.
[0073] The strategy generation rules include all information from the amount table, environmental noise table, environmental brightness table, and user attribute table.
[0074] S220. Determine the weight value of each security verification method and each type of verification information based on the matching results.
[0075] For example, based on the results of matching the amount table with the enabled security verification methods and the amount information in the verification information, the weight value corresponding to each enabled security verification method and the amount information is determined;
[0076] Based on the results of matching the environmental noise information in the activated security verification methods and verification information with the environmental noise table, determine the weight value corresponding to each activated security verification method and environmental noise information.
[0077] Based on the results of matching the ambient brightness information in the activated security verification methods and verification information with the ambient brightness table, determine the weight value corresponding to each activated security verification method and the ambient brightness information.
[0078] Based on the results of matching the enabled security verification methods with the user attribute information in the user information table, determine the weight value corresponding to each enabled security verification method and user attribute information.
[0079] For example, taking the determination of the weight value corresponding to each enabled security verification method and the amount information as an example, if the security verification method is set to face recognition authentication and the amount information is 8000 yuan, it can be seen from the information in Table 2 that the weight value is 1 in this case, that is, the weight value of the security verification method face recognition authentication is 1 when the amount information is 8000 yuan; similarly, the weight values of the above-mentioned security verification methods under different verification information can be obtained by querying the preset table.
[0080] S230. Determine the product of the weight values of the same security verification method corresponding to different verification information, and determine the priority of each security verification method based on the product.
[0081] S240. Send the target security verification method to the client according to the priority, so as to instruct the client to verify the identity information according to the target security verification method.
[0082] The technical solution provided in this embodiment obtains a weight value corresponding to each type of verification information through the verification information sent by the client and the enabled security verification methods. The priority of each security verification method is determined by the weight value, and the client is instructed to verify the identity information according to the target security verification method sent according to the priority. The system can dynamically calculate and output the security verification method that best meets the user's security level based on the verification information. This enables users to adjust the security verification method under different verification information conditions, which improves the security verification pass rate and user experience while ensuring verification security and improving work efficiency.
[0083] Figure 3 This is a flowchart of another identity information verification method provided by an embodiment of the present invention. This embodiment supplements the steps of the above embodiments. Specifically, in this embodiment, after sending the target security verification method to the client according to priority, the method further includes: obtaining the number of times the client performs identity information verification based on the target security verification method; if the number of verifications exceeds a set threshold, re-determining the target security verification method from the remaining security verification methods according to priority, and sending the newly determined target security verification method to the client.
[0084] Correspondingly, such as Figure 3 As shown, the method includes:
[0085] S310. Based on the verification information sent by the client and the enabled security verification methods, determine the weight value corresponding to each security verification method and each type of verification information.
[0086] S320. Determine the product of the weight values of the same security verification method corresponding to different verification information, and determine the priority of each security verification method based on the product.
[0087] S330. Send the target security verification method to the client according to the priority, so as to instruct the client to verify the identity information according to the target security verification method.
[0088] S340. Obtain the number of times the client performs identity verification based on the target security verification method.
[0089] In this embodiment, the initial value of the verification count is set to 0. Each failure of the target security verification method is recorded as verification count 1, and the count is accumulated upwards based on the number of verification failures. If the verification is successful, the count is not accumulated. For example, when the target security verification method is used to verify identity information, if all target security verification methods pass on the first try, the verification count is recorded as 0. If there are two verification failures, the verification count is recorded as 2.
[0090] S350. If the number of verification attempts exceeds the set threshold, the target security verification method is re-determined from the remaining security verification methods according to priority, and the newly determined target security verification method is sent to the client.
[0091] The threshold value can be preset manually and adjusted according to actual usage.
[0092] The newly determined target security verification method can be at least one of all remaining security verification methods after removing the target security verification method from the enabled security verification methods sent by the client in S310.
[0093] For example, if the threshold is set to 3, and the enabled security verification methods are prioritized as facial recognition, SMS verification, and phone number verification, then the target security verification method is facial recognition, which has the highest priority. If a user fails to enable facial recognition three times on the client, the fourth time, SMS verification will be enabled based on priority. If a user fails to enable SMS verification three times on the client, the seventh time, phone number verification will be enabled.
[0094] Optionally, if verification has been successful before the number of verification attempts reaches the set threshold, the number of verification attempts will be reset to zero, and the relevant operations after successful identity verification will be performed.
[0095] The technical solution provided in this embodiment obtains a weight value corresponding to each type of verification information through the verification information sent by the client and the enabled security verification methods. The priority of each security verification method is determined by the weight value, and the client is instructed to send the target security verification method according to the priority to verify the identity information. If the number of verifications exceeds a set threshold, the target security verification method is re-determined from the remaining security verification methods according to the priority and the security verification is performed again. This ensures the security of verification while preventing the user from being unable to complete the transaction due to verification failure caused by system problems. It improves the security verification pass rate and user experience, and increases work efficiency.
[0096] Figure 4 This is a flowchart illustrating another identity verification method provided by an embodiment of the present invention. This embodiment supplements the steps of the above embodiments. Specifically, in this embodiment, after sending the target security verification method to the client according to priority, the method further includes: obtaining the number of times the client performs identity verification based on the target security verification method; if the number of verifications exceeds a set threshold, sending the remaining security verification methods to the client to instruct the client to display a security verification method selection page based on the remaining security verification methods.
[0097] Correspondingly, such as Figure 4 As shown, the method includes:
[0098] S410. Based on the verification information sent by the client and the enabled security verification methods, determine the weight value corresponding to each of the security verification methods and each type of verification information.
[0099] S420. Determine the product of the weight values of the same security verification method corresponding to different verification information, and determine the priority of each security verification method based on the product.
[0100] S430. Send the target security verification method to the client according to the priority, so as to instruct the client to verify the identity information according to the target security verification method.
[0101] S440. Obtain the number of times the client performs identity verification based on the target security verification method.
[0102] In this embodiment, the initial value of the verification count is set to 0. Each failure of the target security verification method is recorded as verification count 1, and the count is accumulated upwards based on the number of verification failures. If the verification is successful, the count is not accumulated. For example, when the target security verification method is used to verify identity information, if all target security verification methods pass on the first try, the verification count is recorded as 0. If there are two verification failures, the verification count is recorded as 2.
[0103] S450: If the number of verification attempts exceeds the set threshold, send the remaining security verification methods to the client to instruct the client to display the security verification method selection page based on the remaining security verification methods.
[0104] The threshold value can be preset manually and adjusted according to actual usage.
[0105] The newly determined target security verification method can be at least one of all remaining security verification methods after removing the target security verification method from the enabled security verification methods sent by the client in S310.
[0106] For example, if the threshold is set to 3, and the enabled security verification methods are prioritized as facial recognition, SMS verification, and phone number verification, then the target security verification method is facial recognition, which has the highest priority. When a user fails to enable facial recognition three times on the client, the client will push a security verification method selection interface to the system on the fourth attempt. The interface includes two options: SMS verification and phone number verification. The user needs to select one of the options to continue the verification process.
[0107] Optionally, if verification has been successful before the number of verification attempts reaches the set threshold, the number of verification attempts will be reset to zero, and the relevant operations after successful identity verification will be performed.
[0108] The technical solution provided in this embodiment obtains a weight value corresponding to each type of verification information through the verification information sent by the client and the enabled security verification methods. The priority of each security verification method is determined by the weight value, and the client is instructed to send the target security verification method according to the priority to verify the identity information. If the number of verifications exceeds a set threshold, the client is instructed to display a security verification method selection page to continue the security verification operation according to the remaining security verification methods. This ensures the security of verification while preventing the user from being unable to complete the transaction due to verification failure caused by system problems, thereby improving the security verification pass rate and user experience, and improving work efficiency.
[0109] Figure 5a This is a structural block diagram of an identity information verification device provided in an embodiment of the present invention. The device can be implemented in hardware and / or software and can execute the identity information verification method provided in any embodiment of the present invention. The device is typically configured in a mobile server connected to a mobile application (client). Figure 5a As shown, the device includes: a weight value determination module 510, a priority determination module 520, and a verification means sending module 530.
[0110] The weight value determination module 510 is used to determine the weight value corresponding to each security verification method and each type of verification information based on the verification information sent by the client and the enabled security verification methods.
[0111] The priority determination module 520 is used to determine the product of the weight values of the same security verification method corresponding to different verification information, and to determine the priority of each security verification method based on the product.
[0112] The verification method sending module 530 is used to send a target security verification method to the client according to the priority, so as to instruct the client to verify the identity information according to the target security verification method.
[0113] In this embodiment of the invention, the weight value corresponding to each type of verification information is obtained by the verification information sent by the client and the enabled security verification methods. The priority of each security verification method is determined by the weight value, and the client is instructed to send the target security verification method according to the priority to verify the identity information. This realizes the adjustment of the security verification method for users under different verification information conditions. While ensuring the security of verification, it improves the security verification pass rate and user experience, and improves the efficiency of the operation.
[0114] Based on the above embodiments, the weight value determination module 510 includes:
[0115] The matching strategy generation rule unit is used to match strategy generation rules based on the verification information sent by the client and the enabled security verification methods. The strategy generation rules include the mapping relationship between verification information, security verification methods and weight values.
[0116] The weight value calculation unit is used to determine the weight value corresponding to each of the security verification methods and each of the verification information based on the matching results.
[0117] Based on the above embodiments, the weight value determination module 510 further includes:
[0118] The strategy generation rule determination unit is used to generate an amount table based on the amount, security verification method, and weight value; generate an environmental noise table based on the environmental noise value, security verification method, and weight value; generate an environmental brightness table based on the environmental brightness value, security verification method, and weight value; generate a user attribute table based on user attribute information, security verification method, and weight value; and determine the strategy generation rule based on the amount table, environmental noise table, environmental brightness table, and user attribute table.
[0119] Optionally, the weight value calculation unit is specifically used to: determine the weight value corresponding to each enabled security verification method and the amount information in the verification information by matching the amount table with the enabled security verification method and the amount information;
[0120] Based on the results of matching the environmental noise information in the activated security verification methods and verification information with the environmental noise table, determine the weight value corresponding to each activated security verification method and environmental noise information.
[0121] Based on the results of matching the ambient brightness information in the activated security verification methods and verification information with the ambient brightness table, determine the weight value corresponding to each activated security verification method and the ambient brightness information.
[0122] Based on the results of matching the enabled security verification methods with the user attribute information in the user information table, the weight values corresponding to each enabled security verification method and user attribute information are determined.
[0123] Based on the above embodiments, the priority determination module 520 includes:
[0124] The score comparison unit is used to determine the score of each of the security verification methods based on the product, and to determine the priority of each of the security verification methods based on the score and the product.
[0125] Optionally, the priority determination module 520 includes:
[0126] The product comparison unit is used to compare the products and determine the priority of each security verification method based on the comparison result.
[0127] Based on the above embodiments, the priority determination module 520 is further configured to:
[0128] For each enabled security verification method, calculate the product of the weight value corresponding to the current security verification method and the amount information, the weight value corresponding to the current security verification method and the environmental noise information, the weight value corresponding to the current security verification method and the environmental brightness information, and the weight value corresponding to the current security verification method and the user attribute information.
[0129] Based on the above embodiments, the verification means sending module 530 includes:
[0130] The descending sorting unit is used to sort the enabled security verification methods in descending order according to the priority of each security verification method.
[0131] The target security verification method sending unit is used to select at least one target security verification method from the enabled security verification methods according to the sorting result, and send the at least one target security verification method to the client.
[0132] Optionally, this embodiment further includes: an information acquisition module, used for:
[0133] Obtain the verification information sent by the client, wherein the verification information includes amount information, ambient noise information, ambient brightness information and user attribute information;
[0134] Obtain the activation status of security verification methods, and obtain the enabled security verification methods based on the activation status.
[0135] Optionally, this embodiment further includes: a newly determined target sending module, used to: obtain the number of times the client performs identity information verification based on the target security verification method;
[0136] If the number of verification attempts exceeds a set threshold, a new target security verification method is determined from the remaining security verification methods according to the priority, and the newly determined target security verification method is sent to the client.
[0137] Based on the above embodiments, the newly determined target sending module is also used for:
[0138] Obtain the number of times the client performs identity verification based on the target security verification method;
[0139] If the number of verification attempts exceeds a set threshold, the remaining security verification methods are sent to the client to instruct the client to display a security verification method selection page based on the remaining security verification methods.
[0140] Figure 5b This is a structural block diagram of an identity information verification system provided in an embodiment of the present invention. Figure 5b As shown, the system includes a mobile application and a mobile server, with the mobile application communicating with the mobile server. The mobile server includes a dynamic security rule configuration module, a security verification method management module, a weight value determination module, a priority determination module, and a verification method sending module. The dynamic security rule configuration module is used to configure and save policy generation rules. Configurable content includes tables such as an amount table, an ambient noise table, an ambient brightness table, and a user attribute table. Each table can be configured with a weight value for each security verification method under different values of various verification information (amount, ambient noise value, ambient brightness value, and user attribute information).
[0141] Specifically, determine the security verification methods that the mobile application can support, such as phone number authentication, SMS, facial recognition, voiceprint, and facial recognition + voiceprint. Identify possible verification information, such as monetary value, ambient noise level, ambient brightness level, and user attribute information. Configure the weight value for each security verification method under different values of verification information.
[0142] The security verification method management module is used to save and query the security verification methods enabled by the user, as well as the security verification methods that the user has previously enabled. For example, it can save all the security verification methods that the user has enabled in the mobile application.
[0143] The weight value determination module is used to determine the weight value corresponding to each security verification method and each type of verification information based on the verification information sent by the client and the enabled security verification methods.
[0144] The priority determination module is used to determine the product of the weight values of the same security verification method corresponding to different verification information, and to determine the priority of each security verification method based on the product.
[0145] The verification method sending module is used to send a target security verification method to the client according to the priority, so as to instruct the client to verify the identity information according to the target security verification method.
[0146] Specifically, the mobile application collects and uploads various verification information (amount, ambient noise level, ambient brightness level, and user attribute information) to the weight determination module. The weight determination module queries the security verification method management module to obtain the security verification methods enabled by the user. Based on the verification information, the weight determination module queries the dynamic security rule configuration module to obtain the weight value of each enabled security verification method in each verification information table. The priority determination module multiplies each weight value to obtain the priority of each enabled security verification method, and returns the highest-priority target security verification method to the mobile application.
[0147] Figure 6 A schematic diagram of an electronic device 10, which can be used to implement embodiments of the present invention, is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.
[0148] like Figure 6As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 11. The memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 may also store various programs and data required for the operation of the electronic device 10. The processor 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.
[0149] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.
[0150] Processor 11 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 11 performs the various methods and processes described above, such as methods for verifying identity information.
[0151] This includes:
[0152] Based on the verification information sent by the client and the enabled security verification methods, determine the weight value corresponding to each security verification method and each type of verification information;
[0153] Determine the product of the weight values of the same security verification method corresponding to different verification information, and determine the priority of each security verification method based on the product;
[0154] According to the priority, a target security verification method is sent to the client to instruct the client to verify its identity information according to the target security verification method.
[0155] In some embodiments, the identity verification method may be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the identity verification method described above may be performed. Alternatively, in other embodiments, processor 11 may be configured to perform the identity verification method by any other suitable means (e.g., by means of firmware).
[0156] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.
[0157] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.
[0158] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.
[0159] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).
[0160] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or computing systems that include middleware components (e.g., application servers), or computing systems that include frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.
[0161] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.
[0162] Embodiment 7 of the present invention also provides a computer program product, including a computer program that, when executed by a processor, implements the identity information verification method provided in any embodiment of this application.
[0163] In implementing the computer program product, computer program code for performing the operations of this invention can be written in one or more programming languages or a combination thereof. Programming languages include object-oriented programming languages such as Java, Smalltalk, and C++, as well as conventional procedural programming languages such as C or similar languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).
[0164] Note that the above description is merely a preferred embodiment of the present invention and the technical principles employed. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and various obvious changes, readjustments, and substitutions can be made without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments, and may include many other equivalent embodiments without departing from the concept of the present invention, the scope of which is determined by the scope of the appended claims.
Claims
1. A method for verifying identity information, characterized in that, include: Based on the verification information sent by the client and the enabled security verification methods, determine the weight value corresponding to each security verification method and each type of verification information. The verification information includes: amount information, environmental noise information, environmental brightness information and user attribute information. The user attribute information includes: customer age, customer transaction habits and customer type. The product of the weight values of the same security verification method corresponding to different verification information is determined, and the priority of each security verification method is determined according to the product, wherein the product is used to reflect the probability that the current security verification method is used in the current financial transaction; According to the priority, a target security verification method is sent to the client to instruct the client to verify the identity information according to the target security verification method; The step of determining the product of the weight values of the same security verification method corresponding to different verification information includes: for each enabled security verification method, calculating the product of the weight value corresponding to the current security verification method and the amount information, the weight value corresponding to the current security verification method and the environmental noise information, the weight value corresponding to the current security verification method and the environmental brightness information, and the weight value corresponding to the current security verification method and the user attribute information.
2. The method according to claim 1, characterized in that, The step of determining the weight value corresponding to each security verification method and each type of verification information based on the verification information sent by the client and the enabled security verification methods includes: The policy generation rules are matched based on the verification information sent by the client and the enabled security verification methods. The policy generation rules include the mapping relationship between verification information, security verification methods and weight values. The weight values corresponding to each security verification method and each type of verification information are determined based on the matching results.
3. The method according to claim 2, characterized in that, This also includes determining the policy generation rules in the following ways: Generate an amount table based on the amount, security verification methods, and weight values; An environmental noise table is generated based on environmental noise levels, safety verification methods, and weighting values. An ambient brightness table is generated based on ambient brightness values, safety verification methods, and weight values. Generate a user attribute table based on user attribute information, security verification methods, and weight values; The strategy generation rules are determined based on the aforementioned amount table, environmental noise table, environmental brightness table, and user attribute table.
4. The method according to claim 3, characterized in that, The step of determining the weight value corresponding to each security verification method and each type of verification information based on the matching result includes: Based on the results of matching the amount information in the enabled security verification methods and verification information with the amount table, determine the weight value corresponding to each enabled security verification method and amount information. Based on the results of matching the environmental noise information in the activated security verification methods and verification information with the environmental noise table, determine the weight value corresponding to each activated security verification method and environmental noise information. Based on the results of matching the ambient brightness information in the activated security verification methods and verification information with the ambient brightness table, determine the weight value corresponding to each activated security verification method and the ambient brightness information. Based on the results of matching the enabled security verification methods and user attribute information in the verification information with the user attribute table, determine the weight value corresponding to each enabled security verification method and user attribute information.
5. The method according to claim 1, characterized in that, The step of determining the priority of each security verification method based on the product includes: The score of each security verification method is determined based on the product, and the priority of each security verification method is determined based on the score.
6. The method according to claim 1, characterized in that, The step of determining the priority of each security verification method based on the product includes: The product is compared, and the priority of each security verification method is determined based on the comparison result.
7. The method according to claim 1, characterized in that, Sending the target security verification method to the client according to the priority includes: The enabled security verification methods are arranged in descending order according to their respective priorities. Based on the sorting results, at least one target security verification method is selected from the enabled security verification methods, and the at least one target security verification method is sent to the client.
8. The method according to any one of claims 1-7, characterized in that, After sending the target security verification method to the client according to the priority, the method further includes: Obtain the number of times the client performs identity verification based on the target security verification method; If the number of verification attempts exceeds a set threshold, a new target security verification method is determined from the remaining security verification methods according to the priority, and the newly determined target security verification method is sent to the client.
9. The method according to any one of claims 1-7, characterized in that, After sending the target security verification method to the client according to the priority, the method further includes: Obtain the number of times the client performs identity verification based on the target security verification method; If the number of verification attempts exceeds a set threshold, the remaining security verification methods are sent to the client to instruct the client to display a security verification method selection page based on the remaining security verification methods.
10. The method according to claim 1, characterized in that, Before considering the verification information sent by the client and the enabled security verification methods, the process also includes: Obtain the verification information sent by the client, wherein the verification information includes amount information, ambient noise information, ambient brightness information and user attribute information; Obtain the activation status of security verification methods, and obtain the enabled security verification methods based on the activation status.
11. A device for verifying identity information, characterized in that, include: The weight value determination module is used to determine the weight value of each security verification method and each type of verification information based on the verification information sent by the client and the enabled security verification methods. The verification information includes: amount information, environmental noise information, environmental brightness information and user attribute information. The user attribute information includes: customer age, customer transaction habits and customer type. The priority determination module is used to determine the product of the weight values of the same security verification method corresponding to different verification information, and to determine the priority of each security verification method according to the product, wherein the product is used to reflect the probability that the current security verification method is used in the current financial transaction; The verification method sending module is used to send a target security verification method to the client according to the priority, so as to instruct the client to verify the identity information according to the target security verification method; Specifically, the priority determination module is used to: for each enabled security verification method, calculate the product of the weight value corresponding to the current security verification method and the amount information, the weight value corresponding to the current security verification method and the environmental noise information, the weight value corresponding to the current security verification method and the environmental brightness information, and the weight value corresponding to the current security verification method and the user attribute information.
12. The apparatus according to claim 11, characterized in that, The weight value determination module includes: The matching strategy generation rule unit is used to match strategy generation rules based on the verification information sent by the client and the enabled security verification methods. The strategy generation rules include the mapping relationship between verification information, security verification methods and weight values. The weight value calculation unit is used to determine the weight value corresponding to each of the security verification methods and each of the verification information based on the matching results. The strategy generation rule determination unit is used to generate an amount table based on the amount, security verification method, and weight value; generate an environmental noise table based on the environmental noise value, security verification method, and weight value; generate an environmental brightness table based on the environmental brightness value, security verification method, and weight value; generate a user attribute table based on user attribute information, security verification method, and weight value; and determine the strategy generation rule based on the amount table, environmental noise table, environmental brightness table, and user attribute table.
13. The apparatus according to claim 12, characterized in that, The weight value calculation unit is specifically used for: Based on the results of matching the amount information in the enabled security verification methods and verification information with the amount table, determine the weight value corresponding to each enabled security verification method and amount information. Based on the results of matching the environmental noise information in the activated security verification methods and verification information with the environmental noise table, determine the weight value corresponding to each activated security verification method and environmental noise information. Based on the results of matching the ambient brightness information in the activated security verification methods and verification information with the ambient brightness table, determine the weight value corresponding to each activated security verification method and the ambient brightness information. Based on the results of matching the enabled security verification methods and user attribute information in the verification information with the user attribute table, determine the weight value corresponding to each enabled security verification method and user attribute information.
14. The apparatus according to any one of claims 11-13, characterized in that, Also includes: The newly determined target sending module is used to obtain the number of times the client performs identity verification based on the target security verification method after sending the target security verification method to the client according to the priority. If the number of verification attempts exceeds a set threshold, a new target security verification method is determined from the remaining security verification methods according to the priority, and the newly determined target security verification method is sent to the client.
15. The apparatus according to claim 14, characterized in that, The newly determined target sending module is also used for: If the number of verification attempts exceeds a set threshold, the remaining security verification methods are sent to the client to instruct the client to display a security verification method selection page based on the remaining security verification methods.
16. An electronic device, characterized in that, The invention includes a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, when the processor executes the computer program, it implements a method for verifying identity information as described in any one of claims 1-10.
17. A computer-readable storage medium having a computer program stored thereon, characterized in that, When executed by a processor, the program implements the identity verification method as described in any one of claims 1-10.
18. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the method for verifying identity information as described in any one of claims 1-10.
Citation Information
Patent Citations
Login authentication method and device of application program, equipment and medium
CN113343220A