Multi-factor authentication methods applied in securities trading

Abstract

The present invention discloses a multi-factor identity authentication method applied to securities trading, which belongs to the field of financial information security technology and is used to solve the problem that traditional identity authentication methods cannot comprehensively and accurately assess risks and cannot dynamically adjust the verification strength, resulting in loopholes in transaction security; the method comprises a registration and login module, an information base, a key generation module, and a securities trading security assessment module; the registration and login module processes user registration, identity authentication and login processes to ensure user information security and reasonable login; the information base stores user information; the key generation module calculates the login risk value based on the login information and determines the login verification method; the securities trading security assessment module analyzes transaction parameters to obtain a traffic safety value, divides the risk level based on the value and matches the transaction verification method, comprehensively ensures the security of the entire process of securities trading from login to transaction, and improves user experience.

Description

Technical Field

[0001] The present invention belongs to the technical field of financial information security, and in particular relates to a multi-factor identity authentication method applied in securities transactions. Background Art

[0002] With the vigorous development of the financial market, the scale and frequency of securities transactions continue to rise, and the issue of transaction security has received more and more attention; in the current securities trading environment, traditional identity authentication methods have gradually become unable to meet the increasingly complex security needs.

[0003] Existing identity authentication methods cannot comprehensively and accurately assess the various risk factors in the securities trading process, and cannot dynamically adjust the strength of account login and securities trading verification methods according to transaction risks, resulting in loopholes in transaction security. For this reason, we propose a multi-factor identity authentication method for securities trading. Summary of the invention

[0004] The purpose of the present invention is to provide a multi-factor identity authentication method applied to securities transactions to solve the problems raised in the above background technology.

[0005] To achieve the above object, the present invention provides the following technical solution: a multi-factor identity authentication method applied in securities trading, comprising the following steps:

[0006] Step 1: Register the securities trading account with user information, verify the user information, and send the verified user information to the information database for storage; after the user information is successfully verified, set the login password, and perform login verification when logging in with the password;

[0007] Step 2: Obtain user login information, analyze the login information to obtain the risk value, deviation and number of risk, conduct a comprehensive analysis of the risk value, deviation and number of risk to obtain the login risk value, divide it into three risk levels, each risk level corresponds to a login risk value interval, and each risk level corresponds to a login verification method, match the login risk value of the current login account with the login risk value interval of the risk level, output the login verification method, and complete the login verification to realize the login of the securities trading account; the login information includes: login device identification code, registration duration, login time, login address, address and name of the network access point;

[0008] Step 3: Collect the transaction parameters during securities trading and analyze them to obtain the traffic safety value, divide them into three risk levels, each risk level corresponds to a traffic safety value interval, and each risk level has a corresponding transaction verification method; match the traffic safety value during this securities transaction with the traffic safety value interval corresponding to the risk level to obtain the transaction verification method; after completing the transaction verification method, realize the securities transaction; the transaction parameters include: transaction amount, transaction type, transaction volatility, and login risk value when logging in to the account.

[0009] Preferably, the specific process of registering and verifying user information and logging in securities in step 1 is as follows:

[0010] Registration of user information: The user registers the user information on the registration and login device, verifies the user information, and stores the user information in the information database after successful verification. The user information includes: name, front and back photos of the ID card, mobile phone number, login password, real-time face video, fingerprint, securities trading password, registration login address, and the address and name of the registration network access point; the registration and login devices include: mobile phones and computers, and the identification code corresponding to the login device is stored in the information database;

[0011] User information identity verification: Use optical recognition technology to extract the name and photo information on the ID card, and compare it with the name and real-time face video collected in the information database. If the name comparison is consistent, and the facial features of the ID card photo and the real-time face video are consistent, it means that the registration identity verification is successful. After the registration identity verification is successful, the user sets the securities trading login password;

[0012] The process of determining whether the facial features of the ID card photo and the real-time face video are consistent is as follows: extracting facial feature points of the ID card photo and the real-time face video, the facial feature points include: the ratio of the distance between the eyes to the width of the face, the ratio of the shortest distance between the bridge of the nose and the eyes to the shortest distance between the bridge of the nose and the mouth, and the ratio of the shortest distance between the left ear and the left eye to the shortest distance between the right ear and the right eye;

[0013] The facial feature points in the ID card photo and the real-time face video are converted into feature vectors; the cosine similarity of the feature vectors of the two is calculated and marked as a facial feature determination value, and a facial feature determination standard value is preset; if the facial feature determination value is greater than the preset facial feature determination standard value, the facial feature comparison is determined to be consistent;

[0014] User login: When a user enters a securities trading login account to log in, the user login information is processed to obtain a login verification method. After completing the login verification method, the securities trading account is logged in.

[0015] Preferably, the specific process of processing and analyzing the login information to obtain the risk value in step 2 is:

[0016] Match the identification code of the current login device with the identification code of the registered login device stored in the information database. If they are consistent, obtain the registration time from the completion of the login device registration to the current time and the number of logins to the securities account. Divide the registration time by the number of logins to obtain the average interval between account logins, which is recorded as the normal login interval. Calculate the time interval between the current login time and the previous login time as the current login interval. Subtract the current login interval from the normal login interval and take the absolute value of the difference to obtain the login deviation interval value.

[0017] Preset the deviation level, each deviation level corresponds to a deviation interval, and each deviation level corresponds to a danger value, match the deviation interval with the deviation frequency value interval corresponding to the deviation level, and output the danger value W;

[0018] If the identification code of the current login device is inconsistent with the login device identification code stored in the information database, the number of times the current login device has logged into the securities account is obtained, and the risk login level of the unregistered login device is preset. Each risk login level corresponds to a securities account login number interval, and each risk login level corresponds to a risk value. The number of times the current login device has logged into the securities account is matched with the login number interval corresponding to the risk login level, and the corresponding risk value W is output.

[0019] Preferably, the specific process of analyzing the landing deviation and the landing risk number and analyzing the login risk value in step 2 is:

[0020] Get the distance between the account login address and the commonly used address registered in the repository, and mark it as the login distance HD, check whether the address and name of the network access point are consistent with the address and name stored in the information database, if not, get the number of security issues in the network security record of the network access point, and mark it as the login number T, if consistent, the login number is zero;

[0021] After normalizing the landing risk value W, the landing deviation distance HD and the landing risk number T, the landing risk value FX is obtained using the formula: FX=W×a1+HD×a2+T×a3; where a1, a2, and a3 are preset weight coefficients.

[0022] Preferably, in step 2, the specific process of matching the login verification method according to the size of the login risk value is:

[0023] Preset risk levels, including low risk level, medium risk level and high risk level. Each risk level corresponds to a login risk value interval, and each risk level corresponds to a login verification method. The login risk value FX is matched with the login risk value interval corresponding to the preset risk level, and the corresponding login verification method is output;

[0024] The low-risk level verification method is: randomly shuffle the layout of the secure keyboard in the input box of the login interface, and the user enters the login password in the shuffled secure keyboard according to the password set by himself. After completing this step, the securities account can be successfully logged in;

[0025] The verification method for the medium risk level is: after the user enters the set login password on the login interface, a text message verification code is sent to the user's registered mobile phone number. The user must enter the correct verification code within the preset specified time before the securities account login can be completed;

[0026] The high-risk level verification method is: users are required to enter the set login password and the correct verification code within the preset specified time and then perform face recognition verification. Only after all three verification methods are successful can the securities account login be completed.

[0027] Preferably, the specific process of collecting the transaction parameters during securities trading and analyzing them to obtain the traffic safety value in step 3 is:

[0028] Obtain the amount of this securities transaction and the amount of total assets in the account, calculate the ratio of the amount of this securities transaction to the amount of total assets in the account, and obtain the scale value S;

[0029] Transaction types are divided into: ordinary stock trading, bond trading, fund trading, options or futures trading, derivatives trading, leveraged trading; three risk types are set, including: low risk type, medium risk type, and high risk type; ordinary stock trading and bond trading are divided into low risk type, fund trading, options or futures trading are divided into medium risk type, and derivatives trading and leveraged trading are divided into high risk type. Each risk type corresponds to a risk value, and the higher the risk type, the greater the corresponding risk value. The type of this transaction is matched with the transaction type corresponding to the divided risk type to obtain the corresponding risk value F;

[0030] Obtain the historical price data of the target security traded at this time in the past month, and calculate the standard deviation of the target security price in the past month, recorded as the target security volatility value, preset several volatility risk layers, each volatility risk layer corresponds to a security volatility value interval, and each volatility risk layer corresponds to a volatility risk value, by matching the target security volatility value with the security volatility value interval of the preset volatility risk layer, output the corresponding volatility risk value B;

[0031] Get the login risk value FX when logging into this account, normalize the scale value S, risk value F, volatility risk value B and login risk value FX corresponding to this securities transaction, and use the formula: YZ=S×w1+F×w2+B×w3+FX×w4 to get the traffic safety value YZ, where w1, w2, w3, and w4 are preset weight coefficients.

[0032] Preferably, the specific process of dividing the transaction risk level in step 3 and matching the current traffic safety value with the traffic safety value interval corresponding to the risk level to obtain the transaction verification method is as follows:

[0033] Mark the verification methods used in securities trading, and mark the transaction password verification, SMS verification code verification, fingerprint verification, and face recognition verification as P1, P2, P3, and P4 respectively;

[0034] According to the size of the traffic safety value, there are three risk levels, namely low-risk transaction level, medium-risk transaction level and high-risk transaction level. Each risk level corresponds to a traffic safety value range.

[0035] At the low-risk transaction level, the transaction verification methods P1, P2, P3, and P4 are set to the same probability, specifically: P1 is (0, 0.25], P2 is (0.25, 0.5], P3 is (0.5, 0.75], and P4 is (0.75, 1];

[0036] In the transaction risk level, the transaction verification methods P1, P2, P3, and P4 are combined in pairs to obtain six verification combinations: (P1, P2), (P1, P3), (P1, P4), (P2, P3), (P2, P4), and (P3, P4). By creating a random number generation mechanism uniformly distributed from (0, 1] and dividing the interval into six equal parts, the same probability is set for the six verification combinations;

[0037] At the high-risk transaction level, the transaction verification methods P1, P2, P3, and P4 are combined in groups of three to obtain four verification combinations: (P1, P2, P3), (P1, P2, P4), (P1, P3, P4), and (P2, P3, P4). A random number generation mechanism is created that is uniformly distributed from (0, 1], and the interval is divided into four equal parts, setting the same probability for the four verification combinations;

[0038] The traffic safety value YZ is matched with the traffic safety value intervals corresponding to the three risk levels to obtain the risk level of this transaction. A random number generator is used to generate a verification random number between (0, 1] according to the uniform distribution rule, and the corresponding matching transaction verification method is output according to the verification random number. The trading operator can only conduct securities trading after completing the output transaction verification method within the preset time.

[0039] Compared with the prior art, the present invention has the following beneficial effects:

[0040] (1) This multi-factor identity authentication method used in securities trading considers information such as the login device identification code, common address, and network access point during the login process to calculate the login risk value. Whether the user logs in on a common device, changes the device, or is in a different network environment, the system can accurately assess the risk and adjust the authentication method. This ensures that transaction security can be reliably guaranteed in a variety of complex actual usage scenarios, reducing security risks caused by changes in devices and network environments.

[0041] (2) The multi-factor identity authentication method used in securities trading comprehensively evaluates the risks in the transaction process by collecting transaction amount, transaction type, transaction volatility, and login risk value transaction parameters when logging in to the account. It measures the impact of the transaction on the user's assets by considering the ratio of the transaction amount to the total assets of the account. For transaction types, it divides them into different risk layers and assigns values ​​to facilitate risk control of different types of transactions and prevents risk loopholes caused by the complexity of transaction types. At the same time, it can dynamically adjust the strength of the securities transaction verification method according to the transaction risk, thereby increasing the security of the transaction.

[0042] (3) The multi-factor identity authentication method applied to securities trading obtains a security value by comprehensively analyzing the scale value, risk assignment, volatility risk value and login risk value, and divides different transaction risk levels according to the security value. Each level corresponds to a specific transaction verification method and is assigned a corresponding probability. The transaction risk layer of the transaction is matched by matching the security value of the transaction with the transaction risk level, and a verification random number is generated by a random number generator. The verification method of the transaction is determined by combining the two. This method can not only effectively deal with transaction security at different risk levels, but also optimize user experience while ensuring security, and avoid the problem of over-verification or under-verification. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 It is a schematic diagram of the structural flow of the present invention. DETAILED DESCRIPTION

[0044] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0045] Embodiment 1

[0046] See also Figure 1, the present invention provides a multi-factor identity authentication method applied to securities trading, including a registration and login module, an information base, a key generation module, and a securities trading security assessment module;

[0047] The registration and login module includes: a registration unit, an identity authentication unit, and a login unit;

[0048] Registration unit: requires users to complete securities trading account registration of user information on the registration and login device. After successful identity authentication of user information, the user information is sent to the information database for encrypted storage. User information includes: name, front and back photos of ID card, mobile phone number, login password, real-time face video, fingerprint, securities trading password, registration login address, address and name of registration network access point; registration and login devices include: identification codes of mobile phones and computers and their corresponding recording devices;

[0049] Identity verification unit: Use optical recognition technology to extract the name and photo information on the ID card, and compare it with the name and real-time face video collected by the registration unit. If the name information is consistent, and the ID card photo and the real-time face video have the same facial features, it means that the registration identity verification is successful. At this time, the system jumps to the login information setting interface for the registrant to set the login password. The password setting rules are: the length is not less than 8 characters, including uppercase and lowercase letters, numbers and special characters;

[0050] The process of determining whether the facial features of the ID card photo and the real-time face video are consistent is as follows: extracting facial feature points of the ID card photo and the real-time face video, the facial feature points including: the ratio of the distance between the eyes to the width of the face, the ratio of the shortest distance between the bridge of the nose and the eyes to the shortest distance between the bridge of the nose and the mouth, and the ratio of the shortest distance between the left ear and the left eye to the shortest distance between the right ear and the right eye;

[0051] The facial feature points in the ID card photo and the real-time face video are converted into feature vectors; the cosine similarity of the feature vectors of the two is calculated and marked as the facial feature judgment value, and the facial feature judgment standard value is preset; if the facial feature judgment value is greater than the preset facial feature judgment standard value, the facial feature comparison is determined to be consistent.

[0052] Login unit: used to process the login process of the user's securities trading account; when the user logs in and enters the account number, the login unit obtains the user's login information and sends the login information to the key generation module. The key generation module processes the login information and generates a matching login verification method. The user completes the login verification method and can log in to the securities trading account; the login information includes: login device identification code, registration duration, login time, login address, and the address and name of the network access point;

[0053] The key generation module processes the login information and generates a matching login verification method. The specific process is as follows:

[0054] Match the identification code of the current login device with the identification code of the registered login device stored in the information database. If they are consistent, obtain the registration time from the completion of the login device registration to the current time and the number of logins to the securities account. Divide the registration time by the number of logins to obtain the average interval between account logins, which is recorded as the normal login interval. Calculate the time interval between the current login time and the previous login time as the current login interval. Subtract the current login interval from the normal login interval and take the absolute value of the difference to obtain the login deviation interval value.

[0055] Preset the deviation level, each deviation level corresponds to a deviation interval, and each deviation level corresponds to a danger value, match the deviation interval with the deviation frequency value interval corresponding to the deviation level, and output the danger value W;

[0056] If the identification code of the current login device is inconsistent with the identification code of the login device stored in the information database, the number of times the current login device has logged into the securities account is obtained, and the risk login level of the unregistered login device is preset. Each risk login level corresponds to a securities account login number interval, and each risk login level corresponds to a risk value, wherein the higher the risk login level, the larger the upper and lower bounds of the corresponding securities account login number interval, and the smaller the risk login value corresponding to the risk login level; the number of times the current login device has logged into the securities account is matched with the login number interval corresponding to the risk login level, and the corresponding risk value W is output; wherein the risk value corresponding to the login device identification code that is consistent with the login device identification code stored in the information database is less than the risk value W corresponding to the login device identification code that is inconsistent with the login device identification code stored in the information database;

[0057] The distance between the account login address and the commonly used address registered in the repository is obtained and marked as the login deviation distance HD. The address and name of the network access point are detected to be consistent with the address and name stored in the information database. If they are inconsistent, the number of security issues in the network security record of the network access point is obtained and marked as the login number T. If they are consistent, the login number is zero. The security issues include: blocked illegal access, malware attacks, and intrusions. The method of obtaining the information is to obtain the information by accessing the firewall log of the network access point. The firewall will record all network traffic information passing through it, including blocked illegal access, malware attacks, intrusion attempts and other events.

[0058] After normalizing the danger value W, the deviation distance HD, and the danger number T, the login risk value FX is obtained using the formula: FX=W×a1+HD×a2+T×a3; where a1, a2, and a3 are preset weight coefficients; it should be noted that the larger the login risk value FX is, the higher the risk of the user's current login account;

[0059] Preset risk levels, including low risk level, medium risk level and high risk level. Each risk level corresponds to a login risk value interval, and each risk level corresponds to a login verification method. The login risk value FX is matched with the login risk value interval corresponding to the preset risk level, and the corresponding login verification method is output;

[0060] The low-risk level verification method is: randomly shuffle the layout of the secure keyboard in the input box of the login interface, and the user enters the login password in the shuffled secure keyboard according to the password set by himself. After completing this step, the securities account can be successfully logged in;

[0061] The verification method for the medium risk level is: after the user enters the set login password on the login interface, a text message verification code is sent to the user's registered mobile phone number. The user must enter the correct verification code within the preset specified time before the securities account login can be completed;

[0062] The high-risk level verification method is: users are required to enter the set login password and the correct verification code within the preset specified time and then perform face recognition verification. Only after all three verification methods are successful can the securities account login be completed.

[0063] The securities trading security assessment module collects the trading parameters of securities and analyzes them to obtain the transaction safety value, and matches the transaction verification method according to the size of the transaction safety value; the transaction parameters include: transaction amount, transaction type, transaction volatility, and login risk value when logging in to the account;

[0064] Obtain the amount of this securities transaction and the amount of total assets in the account, calculate the ratio of the amount of this securities transaction to the amount of total assets in the account, and obtain the scale value S; the total assets in the account refer to the asset information on the securities trading account;

[0065] Transaction types are divided into: ordinary stock trading, bond trading, fund trading, options or futures trading, derivatives trading, leveraged trading; three risk types are set, including: low risk type, medium risk type, and high risk type; ordinary stock trading and bond trading are classified into the low risk type, fund trading, options or futures trading are classified into the medium risk type, and derivative trading and leveraged trading are classified into the high risk type. Each risk type corresponds to a risk assignment, where the higher the risk type, the greater the corresponding risk assignment. The type of this transaction is matched with the transaction type corresponding to the divided risk type to obtain the corresponding risk assignment F;

[0066] Obtain the historical price data of the target security traded at this time in the past month, calculate the standard deviation of the target security price in the most recent month, and mark it as the target security volatility value. Preset several volatility risk layers, each volatility risk layer corresponds to a security volatility value interval, and each volatility risk layer corresponds to a volatility risk value. By matching the target security volatility value with the security volatility value interval of the preset volatility risk layer, output the corresponding volatility risk value B;

[0067] Get the login risk value FX when logging in this account, and normalize the scale value S, risk value F, volatility risk value B and login risk value FX corresponding to this securities transaction, and use the formula: YZ=S×w1+F×w2+B×w3+FX×w4 to get the transaction safety value YZ, where w1, w2, w3, and w4 are preset weight coefficients; the larger the transaction safety value, the greater the risk of this transaction;

[0068] Mark the verification methods used in securities trading, and mark the transaction password verification, SMS verification code verification, fingerprint verification, and face recognition verification as P1, P2, P3, and P4 respectively;

[0069] According to the size of the traffic safety value, there are three risk levels, namely low-risk transaction level, medium-risk transaction level and high-risk transaction level. Each risk level corresponds to a traffic safety value range.

[0070] At the low-risk transaction level, the transaction verification methods P1, P2, P3, and P4 are set to the same probability; specifically: P1 is (0, 0.25], P2 is (0.25, 0.5], P3 is (0.5, 0.75], and P4 is (0.75, 1];

[0071] In the transaction risk level, the transaction verification methods P1, P2, P3, and P4 are combined in pairs to obtain six verification combinations: (P1, P2), (P1, P3), (P1, P4), (P2, P3), (P2, P4), and (P3, P4). By creating a random number generation mechanism uniformly distributed from (0, 1] and dividing the interval into six equal parts, the same probability is set for the six verification combinations;

[0072] At the high-risk transaction level, the transaction verification methods P1, P2, P3, and P4 are combined in groups of three to obtain four verification combinations: (P1, P2, P3), (P1, P2, P4), (P1, P3, P4), and (P2, P3, P4). By creating a random number generation mechanism uniformly distributed from (0, 1] and dividing the interval into four equal parts, the same probability is set for the four verification combinations;

[0073] The traffic safety value YZ is matched with the traffic safety value intervals corresponding to the three risk levels to obtain the risk level of this transaction. A random number generator is used to generate a verification random number between (0, 1] according to the uniform distribution rule, and the corresponding matching transaction verification method is output according to the verification random number. The trading operator must complete the output transaction verification method within the preset time before securities trading can be carried out.

[0074] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A multi-factor identity authentication method for securities trading, characterized in that: The following steps are involved: Step 1: Register the securities trading account with user information, verify the user information, and send the verified user information to the information database for storage; after the user information is successfully verified, set the login password, and perform login verification when logging in with the password; Step 2: Obtain user login information, analyze the login information to obtain the risk value, deviation and number of risk, conduct a comprehensive analysis of the risk value, deviation and number of risk to obtain the login risk value, divide it into three risk levels, each risk level corresponds to a login risk value interval, and each risk level corresponds to a login verification method, match the login risk value of the current login account with the login risk value interval of the risk level, output the login verification method, and complete the login verification to realize the login of the securities trading account; the login information includes: login device identification code, registration duration, login time, login address, address and name of the network access point; The specific steps for analyzing the login information to obtain the danger value, deviation distance and danger number are as follows: Compare the current login device identification code with the registered login device identification code in the information database. If they are consistent, obtain the registration time and the number of logins to the securities account from the completion of the login device registration to the current moment, divide the registration time by the number of logins to obtain the normal login interval, calculate the time interval between the current login moment and the previous login moment as the current login interval, subtract the current login interval from the normal login interval and take the absolute value of the difference to obtain the login deviation interval value; match the login deviation interval value with the login deviation frequency value interval corresponding to the login deviation level, and output the login risk value; if they are inconsistent, obtain the number of logins to the securities account of the login device, match the number of logins to the securities account of the current login device with the login number interval corresponding to the risk login level, and output the corresponding login risk value; Get the distance between the account login address and the commonly used address registered in the repository, and mark it as the login deviation distance, check whether the address and name of the network access point are consistent with the address and name stored in the information database, if not, get the number of security issues in the network security record of the network access point, and mark it as the login number, if consistent, the login number is zero; Step 3: Collect the transaction parameters during securities trading and analyze them to obtain the traffic safety value, divide them into three risk levels, each risk level corresponds to a traffic safety value interval, and each risk level is set with a corresponding transaction verification method; match the traffic safety value during this securities transaction with the traffic safety value interval corresponding to the risk level to obtain the transaction verification method; after completing the transaction verification, realize the securities transaction; the transaction parameters include: transaction amount, transaction type, transaction volatility, and login risk value when logging in to the account; The process of collecting trading parameters during securities trading and analyzing them to obtain the traffic safety value is as follows: Calculate the ratio of the amount of this securities transaction to the amount of total assets in the account to obtain the scale value; match the type of this transaction with the transaction type corresponding to the divided type risk layer to obtain the corresponding risk assignment; obtain the historical price data of the target securities traded at this time in the past month, and calculate the standard deviation of the target securities price in the past month, recorded as the target securities volatility value, and output the corresponding volatility risk value by matching the target securities volatility value with the securities volatility value range of the preset volatility risk layer; obtain the traffic safety value by normalizing the scale value, risk assignment, volatility risk value and login risk value corresponding to this securities transaction.

2. The multi-factor identity authentication method used in securities trading according to claim 1, characterized in that: The specific process of user information registration and verification and securities login in step 1 is as follows: Registration of user information: The user registers the user information on the registration and login device, verifies the user information, and stores the user information in the information database after successful verification. The user information includes: name, front and back photos of the ID card, mobile phone number, login password, real-time face video, fingerprint, securities trading password, registration login address, and the address and name of the registration network access point; the registration and login devices include: mobile phones and computers, and the identification codes corresponding to the registration and login devices are stored in the information database; User information identity verification: Use optical recognition technology to extract the name and photo information on the ID card, and compare it with the name and real-time face video collected in the information database. If the name comparison is consistent, and the facial features of the ID card photo and the real-time face video are consistent, it means that the registration identity verification is successful. After the registration identity verification is successful, the user sets the securities trading login password; The process of determining whether the facial features of the ID card photo and the real-time face video are consistent is as follows: extracting facial feature points of the ID card photo and the real-time face video, the facial feature points include: the ratio of the distance between the eyes to the width of the face, the ratio of the shortest distance between the bridge of the nose and the eyes to the shortest distance between the bridge of the nose and the mouth, and the ratio of the shortest distance between the left ear and the left eye to the shortest distance between the right ear and the right eye; The facial feature points in the ID card photo and the real-time face video are converted into feature vectors; the cosine similarity of the feature vectors of the two is calculated and marked as a facial feature determination value, and a facial feature determination standard value is preset; if the facial feature determination value is greater than the preset facial feature determination standard value, the facial feature comparison is determined to be consistent; User login: When a user enters a securities trading login account to log in, the user login information is processed to obtain a login verification method. After the login verification is completed, the securities trading account is logged in.

3. The multi-factor identity authentication method used in securities trading according to claim 2, characterized in that: The specific process of processing and analyzing the login information to obtain the risk value in step 2 is as follows: Match the identification code of the current login device with the identification code of the registered login device stored in the information database. If they are consistent, obtain the registration time from the completion of the login device registration to the current time and the number of logins to the securities account. Divide the registration time by the number of logins to obtain the average interval between account logins, which is recorded as the normal login interval. Calculate the time interval between the current login time and the previous login time as the current login interval. Subtract the current login interval from the normal login interval and take the absolute value of the difference to obtain the login deviation interval value. Preset the deviation level, each deviation level corresponds to a deviation interval, and each deviation level corresponds to a danger value, match the deviation interval with the deviation frequency value interval corresponding to the deviation level, and output the danger value W; If the identification code of the current login device is inconsistent with the login device identification code stored in the information database, the number of times the current login device has logged into the securities account is obtained, and the risk login level of the unregistered login device is preset. Each risk login level corresponds to a securities account login number interval, and each risk login level corresponds to a risk value. The number of times the current login device has logged into the securities account is matched with the login number interval corresponding to the risk login level, and the corresponding risk value W is output.

4. The multi-factor identity authentication method used in securities trading according to claim 3, characterized in that: The specific process of analyzing the landing deviation and landing risk number and the landing risk value in step 2 is as follows: Get the distance between the account login address and the commonly used address registered in the repository, and mark it as the login distance HD, check whether the address and name of the network access point are consistent with the address and name stored in the information database, if not, get the number of security issues in the network security record of the network access point, and mark it as the login number T, if consistent, the login number is zero; After normalizing the landing risk value W, the landing deviation distance HD and the landing risk number T, the landing risk value FX is obtained using the formula: FX=W×a1+HD×a2+T×a3; where a1, a2, and a3 are preset weight coefficients.

5. The multi-factor identity authentication method used in securities trading according to claim 4, characterized in that: In step 2, the specific process of matching the login verification method according to the size of the login risk value is as follows: Preset risk levels, including low risk level, medium risk level and high risk level. Each risk level corresponds to a login risk value interval, and each risk level corresponds to a login verification method. The login risk value FX is matched with the login risk value interval corresponding to the preset risk level, and the corresponding login verification method is output; The low-risk level verification method is: randomly shuffle the layout of the secure keyboard in the input box of the login interface, and the user enters the login password in the shuffled secure keyboard according to the password set by himself. After completing this step, the securities account is successfully logged in; The verification method for the medium risk level is: after the user enters the set login password on the login interface, a text message verification code is sent to the user's registered mobile phone number. After the user enters the correct verification code within the preset specified time, the securities account login is completed; The high-risk level verification method is: the user is required to enter the set login password and the correct verification code within the preset specified time and then perform face recognition verification. After all three verification methods are successful, the securities account login is completed.

6. The multi-factor identity authentication method used in securities trading according to claim 1, characterized in that: The specific process of collecting the transaction parameters of securities transactions and analyzing them to obtain the traffic safety value in step 3 is as follows: Obtain the amount of this securities transaction and the amount of total assets in the account, calculate the ratio of the amount of this securities transaction to the amount of total assets in the account, and obtain the scale value S; Transaction types are divided into: ordinary stock trading, bond trading, fund trading, options or futures trading, derivatives trading, and leveraged trading; Set up three risk layers, including: low risk layer, medium risk layer, and high risk layer; Classify ordinary stock trading and bond trading into the low-type risk layer, classify fund trading, options or futures trading into the medium-type risk layer, and classify derivative trading and leverage trading into the high-type risk layer. Each type risk layer corresponds to a risk assignment, and the higher the type risk layer, the greater the corresponding risk assignment. Match the type of this transaction with the transaction type corresponding to the divided type risk layer to obtain the corresponding risk assignment F; Obtain the historical price data of the target security traded at this time in the past month, and calculate the standard deviation of the target security price in the past month, recorded as the target security volatility value, preset several volatility risk layers, each volatility risk layer corresponds to a security volatility value interval, and each volatility risk layer corresponds to a volatility risk value, by matching the target security volatility value with the security volatility value interval of the preset volatility risk layer, output the corresponding volatility risk value B; Get the login risk value FX when logging into this account, normalize the scale value S, risk value F, volatility risk value B and login risk value FX corresponding to this securities transaction, and use the formula: YZ=S×w1+F×w2+B×w3+FX×w4 to get the traffic safety value YZ, where w1, w2, w3, and w4 are preset weight coefficients.

7. The multi-factor identity authentication method used in securities trading according to claim 6, characterized in that: In step 3, the transaction risk level is divided, and the specific process of matching the current traffic safety value with the traffic safety value interval corresponding to the risk level to obtain the transaction verification method is as follows: Mark the verification methods used in securities trading, and mark the transaction password verification, SMS verification code verification, fingerprint verification, and face recognition verification as P1, P2, P3, and P4 respectively; According to the size of the traffic safety value, there are three risk levels, namely low-risk transaction level, medium-risk transaction level and high-risk transaction level. Each risk level corresponds to a traffic safety value range. At the low-risk transaction level, the transaction verification methods P1, P2, P3, and P4 are set to the same probability, specifically: P1 is (0, 0.25], P2 is (0.25, 0.5], P3 is (0.5, 0.75], and P4 is (0.75, 1]; In the transaction risk level, the transaction verification methods P1, P2, P3, and P4 are combined in pairs to obtain six verification combinations: (P1, P2), (P1, P3), (P1, P4), (P2, P3), (P2, P4), and (P3, P4). By creating a random number generation mechanism uniformly distributed from (0, 1] and dividing the interval into six equal parts, the same probability is set for the six verification combinations; At the high-risk transaction level, the transaction verification methods P1, P2, P3, and P4 are combined in groups of three to obtain four verification combinations: (P1, P2, P3), (P1, P2, P4), (P1, P3, P4), and (P2, P3, P4). A random number generation mechanism is created that is uniformly distributed from (0, 1], and the interval is divided into four equal parts, setting the same probability for the four verification combinations; The traffic safety value YZ is matched with the traffic safety value intervals corresponding to the three risk levels to obtain the risk level of this transaction. A random number generator is used to generate a verification random number between (0, 1] according to the uniform distribution rule, and the corresponding matching transaction verification method is output according to the verification random number. After the transaction operator completes the output transaction verification method within the preset time, the securities transaction is completed.

Images