Multi-factor identity verification method based on customer risk level
Through risk data collection analysis and dynamic adjustment of identity verification strategies, the problems that ignore user risk differences in existing technologies have been solved, the balance and convenience of security and convenience are solved, and the user experience and transaction security is improved.
Patent Information
- Application Number
- CN202411444876.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-16
- Publication Date
- 2025-01-21
AI Technical Summary
The existing multi-factor authentication system ignores the differences in risk faced by different users, resulting in insufficient security in high-risk situations, while the verification steps in low-risk situations are cumbersome, affecting the user experience.
Through risk data collection and analysis, the identity verification strategy is dynamically adjusted according to the user's risk level, providing personalized combined verification methods, and reducing or adding verification steps to balance security and convenience.
The identity verification is implemented based on the specific risk status of the user, improving the security and user experience of the transaction, and meeting the verification needs of different users.
Smart Images
Figure CN119338468A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of identity authentication, and in particular to a multi-factor identity authentication method based on customer risk level. Background Art
[0002] With the rapid development of information technology, network security issues have become increasingly prominent, especially in the field of identity authentication. Traditional single-factor authentication (such as passwords) can no longer meet the current requirements for security and reliability. Multi-factor authentication (MFA) has gradually become the preferred solution for enterprises and service providers because it provides a higher level of security protection. However, existing multi-factor authentication systems often adopt a "one-size-fits-all" approach, that is, using the same level and type of authentication method for all users. This approach ignores the differences in risks faced by different users.
[0003] In many fields such as finance, e-commerce, and enterprise data management, the customer's risk level changes dynamically and is related to multiple factors, such as the customer's geographic location, login device, operation time, historical behavior patterns, etc.
[0004] Disadvantages of existing technology:
[0005] Disadvantages of scenario password verification code strategy
[0006] SMS verification codes may not be received by users in time due to signal problems or operator failures, and there is a risk of being intercepted by hackers or fraudulently attacked by SIM card replacement. Email verification codes may also become invalid due to phishing attacks or account hacking, and may be mistakenly intercepted due to anti-spam settings. Although telephone voice verification codes are available, they require users to wait by the phone and there is a risk of being recorded or transferred.
[0007] Mobile banking app push notifications require users to keep the app running and turn on notifications. If they miss the notification or their phone is offline, they may miss the verification code. In addition, if the phone is compromised by malware, the pushed verification code may be intercepted.
[0008] Disadvantages of fingerprint and face biometric recognition strategy
[0009] Fingerprint and face recognition technologies have significantly improved security compared to traditional password verification codes, but when these biometric technologies are uniformly applied to all scenarios, such as large-value transfers, payments, and account opening operations, their fixed modes bring a series of inconveniences and challenges. This application method does not take into account the special needs of users in different scenarios, nor does it take into account the differences in devices and network environments, resulting in the verification process being unsmooth due to the external environment.
[0010] In an environment with weak network signals, it may take multiple attempts to complete the upload and verification of biometrics; or in the case of uneven quality of device sensors, the accuracy of recognition may be affected. For users in different regions and at different risk levels, a single verification strategy lacks flexibility and is difficult to dynamically adjust according to the specific circumstances of the user, which may lead to increased security risks or a decline in user experience. Summary of the invention
[0011] In view of the above problems, the present invention is proposed to provide a multi-factor identity authentication method based on customer risk level that overcomes the above problems or at least partially solves the above problems.
[0012] According to one aspect of the present invention, a multi-factor identity authentication method based on customer risk level is provided, the identity authentication method comprising:
[0013] Collect and analyze risk data to obtain analysis results;
[0014] The decision to delegate identity security verification is made based on the analysis results.
[0015] Optionally, the risk data collection and analysis specifically includes: collecting basic user data, including user location, occupation and income information; and reporting to the server for risk level analysis before the user triggers scenario identity security verification.
[0016] Optionally, the collection of the user's basic data also includes terminals and comprehensive information required for the user's financial scenarios.
[0017] Optionally, the comprehensive information includes: network address, mobile phone model, mobile phone security level and transaction time.
[0018] Optionally, the decision-making decentralization identity security verification specifically includes:
[0019] Based on risk data collection and analysis, a security strategy is given for the user's current scenario and decentralized to the user scenario terminal. The strategy decentralized based on the risk assessment of different users is a personalized combined verification. After the user passes the verification, the scenario transaction is completed, and the system records the relationship between the verification strategy information and the scenario transaction.
[0020] Optionally, the deciding to delegate identity security verification according to the analysis result specifically includes:
[0021] Based on risk data collection and analysis, provide users with a set of security strategies in the current scenario;
[0022] The security policy is customized according to the risk assessment results of the user;
[0023] The security policy will be delegated to the user's scenario terminal;
[0024] Since each user's risk assessment results are different, a personalized combined verification method is formed;
[0025] When a user starts a scenario transaction, it goes through a pre-set verification strategy.
[0026] Optionally, the verification strategy includes multiple methods such as password input, fingerprint recognition, and facial recognition; only when the user successfully passes all verifications can the scene transaction be successfully completed.
[0027] Optionally, when the user starts to conduct a scene transaction, after passing a preset verification strategy, the method further includes: when the user completes the scene transaction, recording the applied verification strategy information and its relationship with the scene transaction.
[0028] The present invention provides a multi-factor identity authentication method based on customer risk level, the identity authentication method comprising: risk data collection and analysis to obtain analysis results; and decision-making on delegating identity security verification based on the analysis results. It balances security and convenience. It reduces verification steps for low-risk users and scenarios to simplify operations; and increases verification methods for high-risk situations to ensure transaction security. This strategy effectively meets the verification needs of different users and improves user experience and transaction security.
[0029] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are listed below. BRIEF DESCRIPTION OF THE DRAWINGS
[0030] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.
[0031] Figure 1 A flow chart of a method for risk data collection and analysis provided by an embodiment of the present invention;
[0032] Figure 2 A flow chart of a method for decision-making decentralization of identity security verification provided by an embodiment of the present invention. DETAILED DESCRIPTION
[0033] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.
[0034] The terms "comprises" and "having" and any variations thereof in the description embodiments, claims and drawings of the present invention are intended to cover non-exclusive inclusions, for example, including a series of steps or units.
[0035] The technical solution of the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments.
[0036] The overall solution is divided into two components: the first is risk data collection and analysis, and the second is decision-making and identity security verification.
[0037] First, risk data collection and analysis: mainly includes the collection of basic user data, including user location, occupation, income and other information, as well as the terminal required for the user's financial scenario, including network address, mobile phone model, mobile phone security level, transaction time and other comprehensive information. All of these must be reported to the server for risk level analysis before the user triggers the scenario identity security verification.
[0038] The second decision is to delegate identity security verification: Based on the risk data collection and analysis in the first step, a security strategy for the user's current scenario is given and delegated to the user scenario terminal. Because the strategy is delegated based on the risk assessment of different users, it is a personalized combination verification. After passing these verifications, the user completes the scenario transaction, and the system records the relationship between the verification strategy information and the scenario transaction.
[0039] like Figure 1 As shown, risk data collection and analysis:
[0040] The collection of basic user data is one of the basic tasks. This includes key information such as the user's geographic location, professional background, and income level. By understanding the user's geographic location, we can better judge the regional risks they may face, such as regional economic conditions, crime rates, etc. Professional background helps to understand the user's career stability and income source, so as to assess their repayment ability and credit risk. The income level is an important indicator of the user's economic strength, which is directly related to the user's repayment ability and financial needs.
[0041] In order to meet the needs of users in financial scenarios, it is also necessary to collect relevant information about terminal devices. This information includes network address, mobile phone model and mobile phone security level. The network address can help identify the network environment used by the user, so as to determine the network security risks he may face. The mobile phone model and security level can help understand whether the device used by the user has sufficient security to prevent information leakage or malware attacks.
[0042] The time when the transaction occurs is also an important reference factor. Different time periods may have different risk characteristics, such as nighttime transactions may be more susceptible to fraud. Recording the transaction time helps analyze the rationality and risk level of the transaction.
[0043] All information needs to be reported to the server in a timely manner for risk level analysis before the user triggers a specific scenario and needs identity security verification. The server will use advanced algorithms and models to conduct a comprehensive assessment of the user's risk level based on the collected information.
[0044] like Figure 2 As shown, the decision to delegate identity security verification is:
[0045] Based on the risk data collection and analysis, a set of security strategies is provided to users in the current scenario. The strategies are customized according to the user's risk assessment results to ensure the security of transactions. These strategies will be distributed to the user's scenario terminal for application during the transaction process.
[0046] Since the risk assessment results of each user may be different, the decentralized strategy will also vary from person to person, forming a personalized combined verification method. This method can more accurately target the user's specific risk status and improve the security and reliability of transactions.
[0047] When a user starts a scene transaction, they need to pass these pre-set verification strategies. These verifications may include password input, fingerprint recognition, facial recognition and other methods to ensure the legitimacy and security of the transaction. Only when the user successfully passes all verifications can the scene transaction be successfully completed.
[0048] When a user completes a scenario transaction, the system will record the verification strategy information applied and its relationship with the scenario transaction. This will help us better understand each user's verification needs and risk profile in different scenarios, thereby providing more accurate security strategies in future transactions.
[0049] The present invention can flexibly adjust the identity authentication strategy according to the user's comprehensive information, such as risk level, financial transaction scenario, time, and location. This adjustment method includes multiple methods such as reduced verification, combined verification, and increased verification, aiming to provide customers with more convenient and flexible scenario services.
[0050] By collecting the risk level information of users, different verification strategies are adopted for users of different risk levels. For low-risk users, verification steps are shortened to reduce unnecessary operations and improve user experience. For high-risk users, verification steps are increased to ensure the security and reliability of transactions.
[0051] The diversity of financial transaction scenarios is taken into consideration. Different verification strategies are adopted according to different transaction scenarios. For example, in large-value transactions or high-risk transaction scenarios, a combined verification method is adopted, combining multiple verification methods, such as passwords, fingerprint recognition, and facial recognition, to improve security. In small-value transactions or low-risk transaction scenarios, a simplified verification method is adopted, such as using only passwords or SMS verification codes, to provide more convenient services.
[0052] The present invention also takes into account the factors of time and place. The verification strategy is dynamically adjusted according to the transaction behavior of the user at different times and places. For example, when the transaction is conducted on the user's commonly used device, a simplified verification method is used, and the trust evaluation of the device has been performed. When the transaction is conducted on a new device or an uncommon device, an additional verification step is added to ensure the security of the transaction.
[0053] The present invention realizes dynamic identity authentication policy adjustment by comprehensively considering the user's risk level, financial transaction scenario, time and location factors. This adjustment method can not only improve the security of transactions, but also provide users with more flexible and convenient scenario services.
[0054] Beneficial effects: 1. Security and convenience: This solution balances security and convenience by dynamically adjusting the identity authentication strategy. For low-risk users and scenarios, the verification steps are reduced to simplify the operation; for high-risk situations, verification methods are added to ensure transaction security. This strategy effectively meets the verification needs of different users and improves user experience and transaction security.
[0055] 2. Personalization: Taking into account the user's risk level, transaction scenario, time, location and other information, this solution provides personalized verification services. For commonly used devices and low-risk periods, the system uses simplified verification; for new devices or high-risk environments, verification measures are strengthened. This personalized service brings users a smoother and safer financial experience.
[0056] 3. Adaptability and flexibility: This solution is highly adaptable and flexible, and can adjust the verification strategy in real time according to data and environmental changes. No matter what security threats or changes in user needs, the system can respond in time and maintain efficiency and security. This mechanism enables the software to continuously adapt to the financial environment and user needs and provide long-term and effective services.
[0057] The above specific implementation methods further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above are only specific implementation methods of the present invention and are not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.
Claims
1. A multi-factor identity authentication method based on customer risk level, characterized in that: The identity verification method includes: Collect and analyze risk data to obtain analysis results; The decision to delegate identity security verification is made based on the analysis results.
2. A multi-factor identity authentication method based on customer risk level according to claim 1, characterized in that: The risk data collection and analysis specifically includes: Collection of basic user data, including user location, occupation, and income information; Before the user triggers the scene identity security verification, report to the server for risk level analysis.
3. A multi-factor identity authentication method based on customer risk level according to claim 2, characterized in that: The collection of basic user data also includes the terminals and comprehensive information required for the user's financial scenarios.
4. A multi-factor identity authentication method based on customer risk level according to claim 3, characterized in that: The comprehensive information includes: network address, mobile phone model, mobile phone security level and transaction time.
5. A multi-factor identity authentication method based on customer risk level according to claim 1, characterized in that: The decision to delegate identity security verification specifically includes: Based on risk data collection and analysis, a security strategy is given for the user's current scenario and decentralized to the user scenario terminal. The strategy decentralized based on the risk assessment of different users is a personalized combined verification. After the user passes the verification, the scenario transaction is completed, and the system records the relationship between the verification strategy information and the scenario transaction.
6. A multi-factor identity authentication method based on customer risk level according to claim 1, characterized in that: The decision to delegate identity security verification according to the analysis result specifically includes: Based on risk data collection and analysis, provide users with a set of security strategies in the current scenario; The security policy is customized according to the risk assessment results of the user; The security policy will be delegated to the user's scenario terminal; Since each user's risk assessment results are different, a personalized combined verification method is formed; When a user starts a scenario transaction, it goes through a pre-set verification strategy.
7. A multi-factor identity authentication method based on customer risk level according to claim 6, characterized in that: The verification strategy includes password input, fingerprint recognition, and facial recognition; only when the user successfully passes all verifications can the scene transaction be successfully completed.
8. A multi-factor identity authentication method based on customer risk level according to claim 6, characterized in that: When the user starts to conduct a scene transaction, after the preset verification strategy is passed, the method also includes: when the user completes the scene transaction, recording the applied verification strategy information and its relationship with the scene transaction.