Method and device for transition nuclear body, storage medium and electronic equipment

Abstract

The embodiment of the invention discloses a transition verification method and device, a storage medium and electronic equipment, and the method comprises the steps: receiving a transition verification request corresponding to a target transition service sent by first user equipment, and generating corresponding transition information based on the transition verification request, the transition information comprises target link information used for arousing a first verification module; the transition information is sent to second user equipment, the second user equipment calls the first identity verification module based on the target link information, so that a second user executes a first identity verification operation based on the first identity verification module, and the identity verification main body user comprises the second user; and obtaining a first identity verification result corresponding to the first identity verification operation, and sending the first identity verification result to the first user equipment, so that the first user equipment determines whether to continue the target transition service based on the first identity verification result.

Description

Technical Field

[0001] The present invention relates to computer technology, and in particular to a method, device, storage medium and electronic device for transition verification. Background Art

[0002] The traditional authentication scenario is to directly authenticate in the business process, and the products are all positioned for the identity recognition of the authentication subject. As the business complexity deepens, there are situations where multiple roles use the same payment account and different terminals use the payment account, that is, the authentication initiator and the verification terminal are separated from each other. The traditional authentication capability can only be called and rendered in real time on the terminal and complete the verification, so it cannot be performed in such business processes.

[0003] Traditional identity verification solutions are all focused on the current person's identity recognition. However, with the development of business, there has emerged a business interaction form in which the identity verification initiator and the verification end are separated. Taking the "electronic work badge" business as an example, the operator performs the business process, but the legal person / person in charge needs to perform face verification, and the business process can only be continued after the verification is passed. In this business scenario, the traditional identity verification solution can only verify the operator performing the business, and thus cannot promote the business process. Summary of the invention

[0004] The purpose of the embodiments of this specification is to provide a method, device, storage medium and electronic device for transition authentication.

[0005] The embodiment of this specification provides a method for transition authentication, which is applied to network devices. The shortcomings of the traditional authentication method are overcome by decoupling and asynchronizing the initiating end and the verifying end in the authentication service. The decoupling is to add a transition module to separate the two steps of authentication initiation and authentication rendering, so as to realize the cross-end output of authentication capabilities and solve the problem of how to perform identity verification when the authentication initiating end and the authentication end are separated. The asynchronization is to complete the interaction of authentication context and authentication results between ends through asynchronous notification of messages, so as to realize the authentication interaction even if the service initiating end and the authentication end are not on the same end or account, and can meet the requirements of transition integrity and real-time performance in different business scenarios. The method includes:

[0006] Receiving a transition authentication request corresponding to a target transition service sent by a first user device, and generating corresponding transition information based on the transition authentication request, wherein the transition information includes target link information for invoking a first authentication module, and the first authentication module is used to verify the identity of an authentication subject user corresponding to the target transition service;

[0007] The transition information is sent to a second user device, wherein the second user device invokes the first identity verification module based on the target link information, so that the second user performs a first identity verification operation based on the first identity verification module, and the identity verification subject user includes the second user;

[0008] A first identity verification result corresponding to the first identity verification operation is obtained, and the first identity verification result is sent to the first user equipment, so that the first user equipment determines whether to continue the target transition service based on the first identity verification result.

[0009] Further, the causing the transition information to be sent to the second user equipment includes:

[0010] The transition information is sent to the second user equipment.

[0011] Further, the causing the transition information to be sent to the second user equipment includes:

[0012] The transition information is returned to the first user equipment, so that the first user equipment sends the transition information to the second user equipment.

[0013] Further, the receiving a scene transition authentication request corresponding to the target scene transition service sent by the first user equipment, and generating corresponding scene transition information based on the scene transition authentication request, includes:

[0014] Receiving a transition authentication request corresponding to a target transition service sent by a first user equipment, and generating corresponding service identification information;

[0015] Generate corresponding transition information based on the service identification information.

[0016] Further, the generating corresponding service identification information includes:

[0017] By initializing the target transition service, corresponding service identification information and transition initialization information are generated;

[0018] The generating corresponding transition information based on the service identification information includes:

[0019] Based on the service identification information and the transition initialization information, corresponding transition information is generated.

[0020] Furthermore, the transition initialization information includes authentication subject user identification information, and the first authentication module is used to verify the identity of the second user based on the authentication subject user identification information.

[0021] Furthermore, the transition initialization information also includes business operation user identification information;

[0022] Wherein, the generating corresponding transition information based on the service identification information and the transition initialization information includes:

[0023] enabling the first user equipment to invoke a second identity verification module corresponding to the target transition service, so that the first user performs a second identity verification operation based on the second verification module;

[0024] A second identity verification result corresponding to the second identity verification operation is obtained, and if the second identity verification result indicates that the first user has passed the identity verification, corresponding transition information is generated based on the service identification information and the transition initialization information.

[0025] Furthermore, the method further comprises:

[0026] receiving a request for invoking a verification module sent by the second user equipment based on the target link information, and determining whether the target link information is available;

[0027] If so, enable the second user equipment to wake up the first core module.

[0028] Further, the determining whether the target link information is available includes:

[0029] Whether the target link information is available is determined by judging whether the target link information has expired and / or has been verified.

[0030] Furthermore, the method further comprises:

[0031] If the target link information is unavailable, unavailable reason information corresponding to the target link information is sent to the second user equipment and / or the first user equipment.

[0032] The embodiment of this specification also provides a method for scene transition authentication, which is applied to a first user equipment, and the method includes:

[0033] In response to a transition authentication trigger operation performed by a first user for a target transition service, a corresponding transition authentication request is generated, and the transition authentication request is sent to a network device, so that the network device generates corresponding transition information based on the transition authentication request, so that the transition information is sent to a second user device, wherein the transition information includes target link information for invoking a first authentication module, the first authentication module is used to perform identity verification on an authentication subject user corresponding to the target transition service, the second user device invokes the first authentication module based on the target link information, so that the second user performs a first identity verification operation based on the first authentication module, and the authentication subject user includes the second user;

[0034] A first identity verification result corresponding to the first identity verification operation sent by the network device is received, and based on the first identity verification result, it is determined whether to continue the target transition service.

[0035] The embodiment of this specification also provides a method for scene transition authentication, which is applied to a second user equipment, and the method includes:

[0036] Receive transition information corresponding to a target transition service, wherein the transition information is generated by a network device according to a transition authentication request corresponding to the target transition service sent by the first user device, so that the transition information is sent to the second user device, wherein the transition information includes target link information for invoking a first authentication module, and the first authentication module is used to verify the identity of an authentication subject user corresponding to the target transition service, and the authentication subject user includes a second user;

[0037] In response to the access trigger operation performed by the second user on the target link information, the first identity verification module is invoked, and in response to the first identity verification operation performed by the second user based on the first identity verification module, the network device sends the first identity verification result corresponding to the first identity verification operation to the first user device, so that the first user device determines whether to continue the target transition service based on the first identity verification result.

[0038] The embodiment of this specification also provides a device for transition verification, including:

[0039] A transition information generation module, used to receive a transition authentication request corresponding to a target transition service sent by a first user device, and generate corresponding transition information based on the transition authentication request, wherein the transition information includes target link information for invoking a first authentication module, and the first authentication module is used to verify the identity of an authentication subject user corresponding to the target transition service;

[0040] an identity verification module, configured to enable the transition information to be sent to a second user device, wherein the second user device invokes the first identity verification module based on the target link information, so that the second user performs a first identity verification operation based on the first identity verification module, and the identity verification subject user includes the second user;

[0041] The identity verification result obtaining module is used to obtain the first identity verification result corresponding to the first identity verification operation, and send the first identity verification result to the first user equipment, so that the first user equipment determines whether to continue the target transition service based on the first identity verification result.

[0042] The embodiment of this specification also provides a device for transition verification, including:

[0043] A transition authentication request sending module, used to generate a corresponding transition authentication request in response to a transition authentication trigger operation performed by a first user for a target transition service, and send the transition authentication request to a network device, so that the network device generates corresponding transition information based on the transition authentication request, so that the transition information is sent to a second user device, wherein the transition information includes target link information for invoking a first authentication module, the first authentication module is used to verify the identity of an authentication subject user corresponding to the target transition service, the second user device invokes the first authentication module based on the target link information, so that the second user performs a first identity verification operation based on the first authentication module, and the authentication subject user includes the second user;

[0044] The identity verification result receiving module is used to receive the first identity verification result corresponding to the first identity verification operation sent by the network device, and determine whether to continue the target transition service based on the first identity verification result.

[0045] The embodiment of this specification also provides a device for transition verification, including:

[0046] A transition information receiving module, used for receiving transition information corresponding to a target transition service, wherein the transition information is generated by a network device according to a transition authentication request corresponding to the target transition service sent by the first user device, so that the transition information is sent to the second user device, wherein the transition information includes target link information for invoking a first authentication module, and the first authentication module is used for performing identity verification on an authentication subject user corresponding to the target transition service, and the authentication subject user includes a second user;

[0047] The authentication invocation module is used to invoke the first authentication module in response to an access trigger operation performed by the second user on the target link information, and in response to a first identity verification operation performed by the second user based on the first authentication module, enable the network device to send a first identity verification result corresponding to the first identity verification operation to the first user device, so that the first user device determines whether to continue the target transition service based on the first identity verification result.

[0048] The embodiments of the present specification also provide a computer program product, wherein the computer program product stores at least one instruction, and the at least one instruction is suitable for being loaded by a processor and executing the above method steps.

[0049] The embodiments of the present specification also provide a storage medium, wherein the storage medium stores a computer program, and the computer program is suitable for being loaded by a processor and executing the steps of the above method.

[0050] An embodiment of the present specification also provides an electronic device, comprising: a processor and a memory; wherein the memory stores a computer program, and the computer program is suitable for being loaded by the processor and executing the steps of the above method.

[0051] In the embodiments of this specification, the shortcomings of the traditional authentication method are overcome by decoupling and asynchronizing the initiating end and the verifying end in the authentication business. The decoupling is to add a transition module to separate the two steps of authentication initiation and authentication rendering, thereby realizing cross-end output of authentication capabilities, and solving the problem of how to perform identity verification when the authentication initiating end and the verification end are separated. The asynchronization is to complete the interaction of authentication context and authentication results between ends through asynchronous notification of messages, thereby realizing that the service initiating end and the identity authentication end can complete the authentication interaction even if they are not on the same end or account, and can meet the requirements of transition integrity and real-time performance in different business scenarios. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 A flowchart of a method for transition authentication applied to a network device provided in an embodiment of this specification;

[0053] Figure 2 A flowchart of a method for transition authentication applied to a first user equipment provided in an embodiment of this specification;

[0054] Figure 3 A flowchart of a method for transition authentication applied to a second user equipment provided in an embodiment of this specification;

[0055] Figure 4 A flowchart of a method for transition verification provided as an example in an embodiment of this specification;

[0056] Figure 5 A schematic diagram of the structure of a device for transitioning a core provided in an embodiment of this specification;

[0057] Figure 6 A schematic diagram of the structure of a device for transitioning a core provided in an embodiment of this specification;

[0058] Figure 7 A schematic diagram of the structure of a device for transitioning a core provided in an embodiment of this specification;

[0059] Figure 8 A schematic diagram of the structure of an electronic device provided in an embodiment of this specification. DETAILED DESCRIPTION

[0060] In order to make the purpose, technical solutions and advantages of this specification more clear, the technical solutions of this specification will be clearly and completely described below in combination with the specific embodiments of this specification and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of this specification, not all of them. Based on the embodiments in this specification, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this specification.

[0061] The devices referred to in this application include but are not limited to user devices, network devices, or devices formed by integrating user devices and network devices through a network. The user devices include but are not limited to any mobile electronic products that can interact with users (for example, interact with users through a touchpad), such as smart phones, tablet computers, etc. The mobile electronic products can use any operating system, such as Android operating system, iOS operating system, etc. Among them, the network device includes an electronic device that can automatically perform numerical calculations and information processing according to pre-set or stored instructions, and its hardware includes but is not limited to microprocessors, application specific integrated circuits (Application Specific Integrated Circuit, ASIC), programmable logic devices (Programmable Logic Device, PLD), field programmable gate arrays (Field Programmable Gate Array, FPGA), digital signal processors (Digital Signal Processor, DSP), embedded devices, etc. The network devices include but are not limited to computers, network hosts, single network servers, multiple network server sets or multiple servers. The cloud is composed of a large number of computers or network servers based on cloud computing (Cloud Computing), wherein cloud computing is a type of distributed computing, a virtual supercomputer composed of a group of loosely coupled computer sets. The network includes but is not limited to the Internet, a wide area network, a metropolitan area network, a local area network, a VPN network, a wireless self-organizing network (Ad Hoc network), etc. Preferably, the device may also be a program running on the user device, the network device, or a device formed by integrating the user device and the network device, the network device, the touch terminal, or the network device and the touch terminal through a network.

[0062] Of course, those skilled in the art should understand that the above-mentioned devices are only examples, and other existing or future devices that are applicable to the present application should also be included in the scope of protection of the present application and are included here by reference.

[0063] In the description of the present application, “plurality” means two or more, unless otherwise clearly and specifically defined.

[0064] See also Figure 1 , is a flowchart of a method for field transition authentication applied to a network device provided in an embodiment of this specification. In an embodiment of this specification, the method for field transition authentication is applied to a device for field transition authentication in a network device (hereinafter referred to as "first field transition authentication device") or an electronic device equipped with the first field transition authentication device. Figure 1 The process shown is described in detail, and the method for transition verification may specifically include the following steps:

[0065] S102, receiving a transition authentication request corresponding to a target transition service sent by a first user device, and generating corresponding transition information based on the transition authentication request, wherein the transition information includes target link information for invoking a first authentication module, and the first authentication module is used to verify the identity of the authentication subject user corresponding to the target transition service.

[0066] In some embodiments, a transition service refers to a service that can only be continued after transition verification. The operating user corresponding to the service is the first user (for example, a service operator). The service requires the identity of the authenticated user other than the first user to be verified before the first user can continue to perform the service. Here, transition services corresponding to any business type and any business content can be included in the protection scope of this specification, and this specification does not impose any restrictions on this.

[0067] In some embodiments, the identity verification subject user refers to the user whose identity needs to be verified for the transition business. In some embodiments, the identity verification subject user may be pre-set for the transition business, or may also be determined based on the business type and / or business content of the transition business. In some embodiments, the identity verification subject user includes but is not limited to a legal person, a person in charge, etc. It should be noted that the above-mentioned identity verification subject user is only an example and not a limitation. Those skilled in the art should understand that any identity verification subject user can be included in the protection scope of this specification, and this specification does not limit this. In some embodiments, the relationship between the first user and the identity verification subject user includes but is not limited to a non-personal relationship, a relationship between an operator and a legal person, a relationship between a payee and a payee, etc.

[0068] In some embodiments, transition authentication refers to an authentication method that separates the initiator and the verifier through SMS, messages, QR codes, etc., that is, a user initiates a transition authentication on his user device for authenticating another user on another user device. The initiator and the verifier of the transition authentication are respectively located on two unused user devices. The initiator and the verifier of the transition authentication are two different users, and the corresponding identity authentication result of the verifier will also be provided to the initiator, so that the initiator can determine whether to continue the corresponding transition service based on the identity authentication result.

[0069] In some embodiments, the target transition service on the first user device requires the corresponding authentication subject user to pass identity authentication before the target transition service can continue. If the first user wants to continue the target transition service, the first user can perform a transition authentication trigger operation on the first user device for the target transition service. The first user device will generate a corresponding transition authentication request and send it to the network device. The network device will generate corresponding transition information based on the transition authentication request. At this time, the target transition service will wait for the corresponding identity verification result of the authentication subject user, for example, generate corresponding transition information based on the necessity parameters for accessing the target transition service, wherein the relevant service information includes but is not limited to the service type and service content of the target transition service, the user information of the authentication subject user corresponding to the service (for example, user identification information), the user information of the service operation user (that is, the user information of the first user who initiated the target transition service, for example, the user identification information of the first user), access method, etc.

[0070] In some embodiments, the transition information includes target link information for invoking a first authentication module on a user device. When the user performs an access trigger operation (for example, a click operation) on the target link information on the user device, the first authentication module will be invoked on the user device. The first authentication module is used to verify the identity of the authentication subject user corresponding to the target transition business, that is, the target transition business can only continue after the authentication subject user corresponding to the target transition business passes the identity authentication. The authentication module may include an authentication page, and invoking the authentication module includes entering the authentication page on the user device so that the corresponding authentication subject user can perform identity authentication on the authentication page. If the running subject corresponding to the authentication page (for example, an application, a mini-program, a browser, etc.) is not currently opened, the running subject will be opened first (for example, opening the authentication App, opening the authentication mini-program, opening the browser, etc.), and then entering the authentication page on the running subject. Alternatively, the authentication module may also include at least one authentication function related to authenticating the authentication subject user, and invoking the authentication module also includes loading or running the at least one authentication function on the user device.

[0071] In some embodiments, in addition to the target link information for invoking the first core module, the transition information also includes corresponding transition initialization information, which includes but is not limited to the business type of the target transition business, business key description information, user information of the core subject user corresponding to the target transition business (for example, user identification information), the generation time of the transition information, the user information of the business operation user who initiates the target transition business, that is, the first user (for example, user identification information), transition context information (including but not limited to transition context unique identifier, access scenario, execution status and other business information), core context information (including but not absorbing core context unique identifier, core method, core scenario and other business information), transition core relationship and at least one of them. In some embodiments, the transition information will not directly include the corresponding transition initialization information, but will save the transition initialization information in the network device, and establish an association relationship between the target link (or part of the content in the target link) in the transition information and the transition initialization information, so that the network device can subsequently obtain the transition initialization information through the target link (or part of the content in the target link).

[0072] In some embodiments, the information type corresponding to the transition information includes but is not limited to text messages, messages, graphic codes (including but not limited to bar codes, QR codes, etc.), etc. It should be noted here that the above transition information is only an example and not a limitation. Those skilled in the art should understand that transition information corresponding to any information content and information type can be included in the protection scope of this specification, and this specification does not impose any restrictions on this.

[0073] S104, so that the transition information is sent to the second user device, wherein the second user device invokes the first identity verification module based on the target link information, so that the second user performs a first identity verification operation based on the first identity verification module, and the identity verification subject user includes the second user.

[0074] In some embodiments, the network device will send the transition information directly to the core user corresponding to the target transition service. Since the core user includes the second user, the network device will send the transition information directly to the second user device. Alternatively, the network device will first return the transition information to the first user device and present the transition information to the first user on the first user device. The first user can perform a sending operation on the first user device, so that the first user device sends the transition information to the second user device used by the second user. This example embodiment does not specifically limit the method for sending the transition information.

[0075] In some embodiments, the authenticated main user corresponding to the target transition service includes a second user. If the authenticated main user includes only one user, the target transition service on the first user device can continue only if the second user passes the identity verification regarding the target transition service. If the authenticated main user includes multiple users including the second user, the first user needs to send the transition information to the multiple users respectively, and the multiple users need to pass the identity verification regarding the target transition service before the target transition service on the first user device can continue. Alternatively, the first user can choose to send the transition information to at least one user among the multiple users (for example, to the second user), and the target transition service on the first user device can continue only if at least a preset number of users among the multiple users pass the identity verification regarding the target transition service.

[0076] In some embodiments, after receiving the transition information, in response to the access trigger operation (e.g., a click operation) performed by the second user on the target link information in the transition information, the second user device will call up the first authentication module. For example, the second user device will enter the corresponding authentication page in the first authentication module, or the second user device will first open the corresponding running subject of the authentication page (e.g., open the authentication App, open the authentication applet, open the browser, etc.), and then enter the authentication page on the running subject. In some embodiments, the second user performs a first identity verification operation based on the first authentication module. For example, the second user performs a first identity verification operation on the corresponding authentication page in the first authentication module. The first identity verification operation includes but is not limited to a password verification operation, a face verification operation, a fingerprint verification operation, a text message verification code verification operation, etc. This example embodiment does not specifically limit this. In some embodiments, the network device will verify the identity verification factors entered by the second user in the first identity verification operation, for example, verifying whether the second user is himself, or verifying whether the second user is the authenticated subject user corresponding to the target transition service, wherein the identity verification factors include but are not limited to password information, face information, fingerprint information, SMS verification code information, etc., and this example embodiment does not specifically limit this.

[0077] S106: Obtain a first identity verification result corresponding to the first identity verification operation, and send the first identity verification result to the first user equipment, so that the first user equipment determines whether to continue the target transition service based on the first identity verification result.

[0078] In some embodiments, the network device obtains a first identity verification result corresponding to a first identity verification operation based on a first identity verification operation performed by the second user on the second user device. The first identity verification result is used to indicate whether the second user is verified as the authenticated subject user corresponding to the target transition service. The network device then sends the first identity verification result to the first user device, so that the first user determines whether to continue the target transition service based on the first identity verification result. For example, if the first identity verification result indicates that the second user is verified and the second user is the authenticated subject user corresponding to the target transition service, the first user device can continue with the target transition service. Otherwise, if the first identity verification result indicates that the second user is not verified and the second user is not the authenticated subject user corresponding to the target transition service, the first user device will still not continue with the target transition service.

[0079] In some embodiments, the network device will also send the first identity verification result to the second user device, and present the first identity verification result to the second user on the second user device. For example, the second user device presents the first identity verification result on the corresponding authentication page in the first authentication module, or the second user device jumps from the authentication page to the verification result page and presents the first identity verification result on the authentication result page.

[0080] In the embodiments of this specification, the shortcomings of the traditional authentication method are overcome by decoupling and asynchronizing the initiating end and the verifying end in the authentication business. The decoupling is to add a transition module to separate the two steps of authentication initiation and authentication rendering, thereby realizing cross-end output of authentication capabilities, and solving the problem of how to perform identity verification when the authentication initiating end and the verification end are separated. The asynchronization is to complete the interaction of authentication context and authentication results between ends through asynchronous notification of messages, thereby realizing that the service initiating end and the identity authentication end can complete the authentication interaction even if they are not on the same end or account, and can meet the requirements of transition integrity and real-time performance in different business scenarios.

[0081] In some embodiments, the transition information is sent to the second user device, including: sending the transition information to the second user device. In some embodiments, after generating the transition information, the network device will automatically send the transition information to the core user corresponding to the target transition business. At this time, the network device needs to first obtain the user identification information of the core user corresponding to the target transition business, for example, obtain the core user identification information from the relevant business information corresponding to the target transition business. In some embodiments, since the core user corresponding to the target transition business includes the second user, the network device will directly send the transition information to the second user device. In some embodiments, the network device will first send the transition information to the first user device to present it to the first user, and the first user will confirm the transition information. After the first user confirms it, the first user device will send the corresponding confirmation through the indication information to the network device. After receiving the confirmation through the indication information, the network device will send the transition information to the second user device.

[0082] In some embodiments, causing the transition information to be sent to the second user device includes: returning the transition information to the first user device so that the first user device sends the transition information to the second user device. In some embodiments, the network device will first return the transition information to the first user device, present the transition information to the first user on the first user device, and the first user can perform a sending operation on the first user device for the transition information, so that the first user device sends the transition information to the second user device used by the second user. In some embodiments, the first user will first confirm the transition information, and only after the confirmation is passed will the transition information be sent to the second user device used by the second user. In some embodiments, the first user can directly send the transition information to the second user device in the current application (i.e., the application that receives the transition information), or can also send the transition information to the second user device via text message, or can also send the transition information to the second user device in other applications other than the current application (for example, social applications, IM applications, team collaboration tool applications, etc.), for example, directly enter the transition information in other applications, or copy the transition information in the current application and paste the transition information in other applications, or store the transition information locally on the first user device in the current application and select the transition information in other applications. It should be noted here that the above-mentioned method of sending the transition information is only an example and not a limitation. Those skilled in the art should understand that any method of sending the transition information can be included in the protection scope of this specification, and this specification does not limit this.

[0083] In some embodiments, the receiving of the transition authentication request corresponding to the target transition service sent by the first user device, and the generation of corresponding transition information based on the transition authentication request, include: receiving the transition authentication request corresponding to the target transition service sent by the first user device, and generating corresponding service identification information; generating corresponding transition information based on the service identification information. In some embodiments, the receiving of the transition authentication request corresponding to the target transition service sent by the first user device, and the generation of corresponding service identification information based on the transition authentication request, for example, randomly generated or generated according to a preset generation algorithm, this example embodiment does not specifically limit the specific generation method, wherein the service identification information is used to uniquely identify the target transition service, and the service operation user corresponding to the target transition service is the first user, for example, the service identification information can be a character string of a preset length, it should be noted that the above service identification information is only for example, not for limitation, and those skilled in the art should understand that service identification information of any content can be included in the protection scope of this specification, and this specification does not limit this. In some embodiments, the corresponding transition information is generated based on the service identification information, and the generated transition information may include the service identification information (or encrypted service identification information). Alternatively, an association relationship between the generated transition information and the service identification information may be established in the network device, so that the network device can subsequently obtain the service identification information through the transition information or part of the content in the transition information (for example, target link information), thereby locating the target transition service, so as to further obtain the transition initialization information corresponding to the target transition service, wherein the transition initialization information has been described in detail in the previous text and will not be repeated here.

[0084] In some embodiments, the generating of the corresponding service identification information includes: generating the corresponding service identification information and transition initialization information by initializing the target transition service; wherein, the generating of the corresponding transition information based on the service identification information includes: generating the corresponding transition information based on the service identification information and the transition initialization information. In some embodiments, the target transition service will also be initialized, and the initialization operation is not limited to generating transition context information (including but not limited to business information such as transition context unique identifier, access scenario, execution status, etc.), generating authentication context information (including but not limited to business information such as authentication context unique identifier, authentication method, authentication scenario, etc.), constructing a transition-authentication relationship, generating the service identification information corresponding to the target transition service, and the like. In some embodiments, by initializing the target transition service, the service identification information and transition initialization information corresponding to the target transition service will be generated, and the transition initialization information has been described in detail in the previous text, and will not be repeated here. In some embodiments, corresponding transition information is generated based on the service identification information and the corresponding transition initialization information, wherein the generated transition information may directly include the service identification information and / or the transition initialization information (or the encrypted service identification information and / or the encrypted transition initialization information), or, an association relationship between a target link in the transition information (or part of the content in the target link) and the service identification information and / or the transition initialization information may be established in a network device, so that the network device may subsequently obtain the service identification information and / or the transition initialization information through the target link (or part of the content in the target link).

[0085] In some embodiments, the transition initialization information includes the authentication subject user identification information, and the first authentication module is used to verify the identity of the second user based on the authentication subject user identification information. In some embodiments, the transition initialization information includes the authentication subject user identification information, and the authentication subject user identification information is used to uniquely identify the authentication subject user corresponding to the target transition service. When the second user performs the first identity verification operation based on the first authentication module on the second user device, the network device can obtain the preset identity authentication elements of the authentication subject user based on the authentication subject user identification information (the identity authentication elements include but are not limited to password information, face information, fingerprint information, SMS verification code information, etc.), and verify the identity of the second user by matching the identity authentication elements input by the second user when performing the first identity verification operation with the preset identity authentication elements of the authentication subject user, or verify whether the second user is the authentication subject user corresponding to the target transition service.

[0086] In some embodiments, the transition initialization information also includes business operation user identification information; wherein, generating corresponding transition information based on the business identification information and the transition initialization information includes: enabling the first user device to invoke a second identity verification module corresponding to the target transition business, so that the first user performs a second identity verification operation based on the second verification module; obtaining a second identity verification result corresponding to the second identity verification operation, and if the second identity verification result indicates that the first user has passed the identity verification, generating corresponding transition information based on the business identification information and the transition initialization information. In some embodiments, the transition initialization information also includes business operation user identification information corresponding to the target transition business. The business operation user identification information is used to uniquely identify the business operation user corresponding to the target transition business. After the initialization is completed, the first user device will first call up the second identity verification module corresponding to the target transition business. The second identity verification module is used to verify the identity of the business operation user corresponding to the target transition business. The first user performs a second identity verification operation on the first user device based on the second verification module. The second identity verification operation includes but is not limited to a password verification operation, a face verification operation, a fingerprint verification operation, an SMS verification code verification operation, etc. This example embodiment does not specifically limit this. The network device will verify the identity of the first user based on the second identity verification operation performed by the first user to verify whether the first user is himself, or to verify whether the first user is the business operation user corresponding to the target transition business. The network device will obtain a second identity verification result corresponding to the second identity verification operation. The second identity verification result is used to indicate whether the first user is verified as the business operation user corresponding to the target transition business. Only when the second identity verification result indicates that the first user has passed the identity verification, the corresponding transition information will be generated based on the business identification information and the transition initialization information.

[0087] In some embodiments, the method further includes: receiving a nucleus module invocation request sent by the second user device based on the target link information, determining whether the target link information is available; if so, causing the second user device to invoke the first nucleus module. In some embodiments, the second user device, in response to an access trigger operation (e.g., a click operation) performed by the second user on the target link information, will first generate a nucleus module invocation request corresponding to the target link information and send it to the network device. After receiving the nucleus module invocation request, the network device determines whether the target link information is available. If available, the corresponding available indication information will be returned to the second user device. The second user device will only invoke the first nucleus module if it receives the available indication information corresponding to the nucleus module invocation request. In some embodiments, the operation of determining whether the target link information is available includes but is not limited to determining whether the target link information has expired, determining whether the target link information has been verified, determining whether the parameters in the transition initialization information corresponding to the target link information are complete, and whether the business parameters match. Verification operations.

[0088] In some embodiments, the determination of whether the target link information is available includes: determining whether the target link information is available by judging whether the target link information has expired and / or has been verified. In some embodiments, after receiving the core module wake-up request, the network device will judge whether the target link information has expired according to the current time. For example, when the network device generates the transition information, it will save the generation time corresponding to the transition information. After receiving the core module wake-up request, it will judge whether the target link information has expired according to whether the time interval between the current time and the generation time is greater than or equal to the preset duration threshold. For another example, the network device obtains the transition context information and / or the core context information corresponding to the target transition service through the target link information, and determines whether the target link information has expired by judging whether the transition context information and / or the core context information has expired. In some embodiments, after receiving the nucleus module wake-up request, the network device will determine whether the target link information has been verified based on whether there is a historical verification record corresponding to the target link information in the network device. If there is a historical verification record corresponding to the target link information, it is determined that the target link information has been verified. If there is no historical verification record corresponding to the target link information, it is determined that the target link information has not been verified. In some embodiments, whether the target link information is available is determined based on whether the target link information has expired. If the target link information has not expired, the target link information is available. In some embodiments, whether the target link information is available is determined based on whether the target link information has been verified. If the target link information has not been verified, the target link information is available. In some embodiments, whether the target link information is available is determined based on whether the target link information has been verified. If the target link information has not been verified, the target link information is available. In some embodiments, whether the target link information is available is determined based on whether the target link information has expired and whether it has been verified. If the target link information has not expired and has not been verified, the target link information is available.

[0089] In some embodiments, the method further includes: if the target link information is unavailable, sending the unavailable reason information corresponding to the target link information to the second user device and / or the first user device. In some embodiments, if the target link information is unavailable, the network device will generate unavailable reason information corresponding to the target link information, and the unavailable reason information includes but is not limited to expired, verified, etc., and then the network device will send the unavailable reason information to the second user device and / or the first user device, so as to present the unavailable reason information to the second user on the second user device and / or present the unavailable reason information to the first user on the first user device. In some embodiments, if the target link information is unavailable, the network device will also regenerate new transition information, and the new transition information includes new target link information for evoked the first core module. The network device will return the regenerated new transition information to the first user device, and present the new transition information to the first user on the first user device, so that the first user can resend the new transition information to the second user.

[0090] Figure 2 A flowchart of a method for field transition authentication applied to a first user device provided in an embodiment of this specification. In an embodiment of this specification, the method for field transition authentication is applied to a device for field transition authentication in a first user device (hereinafter referred to as a "second field transition authentication device") or an electronic device equipped with a second field transition authentication device. Figure 2 The process shown is described in detail, and the method for transition verification may specifically include the following steps:

[0091] S202, in response to the transition authentication trigger operation performed by the first user for the target transition service, a corresponding transition authentication request is generated, and the transition authentication request is sent to the network device, so that the network device generates corresponding transition information based on the transition authentication request, so that the transition information is sent to the second user device, wherein the transition information includes target link information for invoking the first authentication module, the first authentication module is used to verify the identity of the authentication subject user corresponding to the target transition service, and the second user device invokes the first authentication module based on the target link information, so that the second user performs a first identity verification operation based on the first authentication module, and the authentication subject user includes the second user. Step S202 has been described in detail above and will not be repeated here.

[0092] S204, receiving a first identity verification result corresponding to the first identity verification operation sent by the network device, and determining whether to continue the target transition service based on the first identity verification result. Step S204 has been described in detail above and will not be repeated here.

[0093] Figure 3 A flowchart of a method for field transition authentication applied to a second user device provided in an embodiment of this specification. In an embodiment of this specification, the method for field transition authentication is applied to a device for field transition authentication in a second user device (hereinafter referred to as a "third field transition authentication device") or an electronic device equipped with a third field transition authentication device. Figure 3 The process shown is described in detail, and the method for transition verification may specifically include the following steps:

[0094] S302, receiving the transition information corresponding to the target transition service, wherein the transition information is generated by the network device according to the transition authentication request corresponding to the target transition service sent by the first user device, so that the transition information is sent to the second user device, wherein the transition information includes the target link information for invoking the first authentication module, and the first authentication module is used to verify the identity of the authentication subject user corresponding to the target transition service, and the authentication subject user includes the second user. Step S302 has been described in detail above and will not be repeated here.

[0095] S304, in response to the access trigger operation performed by the second user on the target link information, the first identity verification module is invoked, and in response to the first identity verification operation performed by the second user based on the first identity verification module, the network device sends the first identity verification result corresponding to the first identity verification operation to the first user device, so that the first user device determines whether to continue the target transition service based on the first identity verification result. Step S304 has been described in detail above and will not be repeated here.

[0096] Figure 4 A flowchart of an example method for transition verification provided in an embodiment of this specification.

[0097] like Figure 4 As shown, user A (operator) calls up the transition module in the business system. The transition module obtains the transition code, performs initialization, and displays the transition information. The transition information can be sent by the system to user B or by user A to user B (authentication subject). After user A confirms sending the transition information, the business system waits for the corresponding transition result. User B receives the transition information and opens the transition applet based on the link in the transition information. The system makes an availability judgment on the transfer link. If available, the authentication module is invoked to authenticate user B, and the corresponding authentication result is displayed on the authentication result page, and the corresponding transition result is returned to the business system, and the process ends. If the link is unavailable (expired or verified), the corresponding unavailable reason (link expiration reminder or link verification reminder) is notified to the business system, and the process ends.

[0098] Figure 5 A schematic diagram of a structure of a device for transition authentication in a network device provided in an embodiment of this specification, the device for transition authentication in a network device (hereinafter referred to as "first transition authentication device 1") can be implemented as all or part of an electronic device through software, hardware or a combination of both. According to some embodiments, the first transition authentication device 1 includes a transition information generation module 11, an authentication invocation module 12 and an identity verification result acquisition module 13.

[0099] The transition information generation module 11 is used to receive a transition authentication request corresponding to a target transition service sent by a first user device, and generate corresponding transition information based on the transition authentication request, wherein the transition information includes target link information for invoking a first authentication module, and the first authentication module is used to verify the identity of the authentication subject user corresponding to the target transition service.

[0100] The authentication invocation module 12 is used to enable the transition information to be sent to the second user device, wherein the second user device invokes the first authentication module based on the target link information so that the second user performs a first identity verification operation based on the first authentication module, and the authentication subject user includes the second user.

[0101] The identity verification result obtaining module 13 is used to obtain a first identity verification result corresponding to the first identity verification operation, and send the first identity verification result to the first user equipment, so that the first user equipment determines whether to continue the target transition service based on the first identity verification result.

[0102] In some embodiments, causing the transition information to be sent to the second user equipment includes:

[0103] The transition information is sent to the second user equipment.

[0104] In some embodiments, causing the transition information to be sent to the second user equipment includes:

[0105] The transition information is returned to the first user equipment, so that the first user equipment sends the transition information to the second user equipment.

[0106] In some embodiments, the receiving a transition authentication request corresponding to a target transition service sent by a first user equipment, and generating corresponding transition information based on the transition authentication request, includes:

[0107] Receiving a transition authentication request corresponding to a target transition service sent by a first user equipment, and generating corresponding service identification information;

[0108] Generate corresponding transition information based on the service identification information.

[0109] In some embodiments, generating corresponding service identification information includes:

[0110] By initializing the target transition service, corresponding service identification information and transition initialization information are generated;

[0111] The generating corresponding transition information based on the service identification information includes:

[0112] Based on the service identification information and the transition initialization information, corresponding transition information is generated.

[0113] In some embodiments, the transition initialization information includes authentication subject user identification information, and the first authentication module is used to verify the identity of the second user based on the authentication subject user identification information.

[0114] In some embodiments, the transition initialization information further includes business operation user identification information;

[0115] Wherein, the generating corresponding transition information based on the service identification information and the transition initialization information includes:

[0116] enabling the first user equipment to invoke a second identity verification module corresponding to the target transition service, so that the first user performs a second identity verification operation based on the second verification module;

[0117] A second identity verification result corresponding to the second identity verification operation is obtained, and if the second identity verification result indicates that the first user has passed the identity verification, corresponding transition information is generated based on the service identification information and the transition initialization information.

[0118] In some embodiments, the first transition verification device 1 is further used for:

[0119] receiving a request for invoking a verification module sent by the second user equipment based on the target link information, and determining whether the target link information is available;

[0120] If so, enable the second user equipment to wake up the first core module.

[0121] In some embodiments, determining whether the target link information is available includes:

[0122] Whether the target link information is available is determined by judging whether the target link information has expired and / or has been verified.

[0123] In some embodiments, the first transition verification device 1 is further used for:

[0124] If the target link information is unavailable, unavailable reason information corresponding to the target link information is sent to the second user equipment and / or the first user equipment.

[0125] Figure 6 A schematic diagram of the structure of a device for field transition authentication in a first user device provided in an embodiment of this specification, the device for field transition authentication in the first user device (hereinafter referred to as "second field transition authentication device 2") can be implemented as all or part of an electronic device through software, hardware, or a combination of both. According to some embodiments, the second field transition authentication device 2 includes a field transition authentication request sending module 21 and an identity verification result receiving module 22.

[0126] The transition authentication request sending module 21 is used to generate a corresponding transition authentication request in response to a transition authentication trigger operation performed by a first user for a target transition service, and send the transition authentication request to a network device, so that the network device generates corresponding transition information based on the transition authentication request, so that the transition information is sent to a second user device, wherein the transition information includes target link information for invoking the first authentication module, and the first authentication module is used to verify the identity of the authentication subject user corresponding to the target transition service, and the second user device invokes the first authentication module based on the target link information, so that the second user performs a first identity verification operation based on the first authentication module, and the authentication subject user includes the second user.

[0127] The identity verification result receiving module 22 is used to receive the first identity verification result corresponding to the first identity verification operation sent by the network device, and determine whether to continue the target transition service based on the first identity verification result.

[0128] Figure 7 A schematic diagram of the structure of a device for transition authentication in a second user device provided in an embodiment of this specification, the device for transition authentication in the second user device (hereinafter referred to as "third transition authentication device 3") can be implemented as all or part of the electronic device through software, hardware or a combination of both. According to some embodiments, the third transition authentication device 3 includes a transition information receiving module 31 and an authentication invoking module 32.

[0129] The transition information receiving module 31 is used to receive transition information corresponding to the target transition service, wherein the transition information is generated by the network device according to the transition authentication request corresponding to the target transition service sent by the first user device, so that the transition information is sent to the second user device, wherein the transition information includes target link information for invoking the first authentication module, and the first authentication module is used to verify the identity of the authentication subject user corresponding to the target transition service, and the authentication subject user includes the second user.

[0130] The authentication invocation module 32 is used to invoke the first authentication module in response to an access trigger operation performed by the second user on the target link information, and in response to a first identity verification operation performed by the second user based on the first authentication module, enable the network device to send a first identity verification result corresponding to the first identity verification operation to the first user device, so that the first user device determines whether to continue the target transition service based on the first identity verification result.

[0131] The above device embodiments correspond to the method embodiments. For specific descriptions, please refer to the description of the method embodiments, which will not be repeated here. The device embodiments are obtained based on the corresponding method embodiments and have the same technical effects as the corresponding method embodiments. For specific descriptions, please refer to the corresponding method embodiments.

[0132] The embodiment of the present specification also provides a computer storage medium, which can store multiple instructions, and the instructions are suitable for being loaded by a processor to execute the method of the embodiment of the present specification.

[0133] The embodiments of the present specification also provide a computer program product, which stores at least one instruction, and the at least one instruction is loaded by the processor to execute the method of the embodiments of the present specification.

[0134] The embodiments of this specification also provide Figure 8 The structural diagram of the electronic device shown in FIG. Figure 8 At the hardware level, the electronic device includes a processor, an internal bus, a network interface, a memory, and a non-volatile memory, and may also include hardware required for other services. The processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it to implement the above-mentioned voice activity detection method.

[0135] Of course, in addition to software implementation, this specification does not exclude other implementation methods, such as logic devices or a combination of software and hardware, etc., that is to say, the executor of the following processing flow is not limited to each logic unit, but can also be hardware or logic devices.

[0136] In the 1990s, improvements to a technology could be clearly distinguished as hardware improvements (for example, improvements to the circuit structure of diodes, transistors, switches, etc.) or software improvements (improvements to the method flow). However, with the development of technology, many improvements to the method flow today can be regarded as direct improvements to the hardware circuit structure. Designers almost always obtain the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that an improvement in a method flow cannot be implemented using a hardware entity module. For example, a programmable logic device (PLD) (such as a field programmable gate array (FPGA)) is such an integrated circuit whose logical function is determined by the user's programming of the device. Designers can "integrate" a digital system on a PLD by programming it themselves, without having to ask a chip manufacturer to design and produce a dedicated integrated circuit chip. Moreover, nowadays, instead of manually making integrated circuit chips, this kind of programming is mostly implemented by "logic compiler" software, which is similar to the software compiler used when developing and writing programs, and the original code before compilation must also be written in a specific programming language, which is called hardware description language (HDL). There is not only one HDL, but many kinds, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used ones are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art should also know that it is only necessary to program the method flow slightly in the above-mentioned hardware description languages ​​and program it into the integrated circuit, and then it is easy to obtain the hardware circuit that implements the logic method flow.

[0137] The controller can be implemented in any appropriate manner, for example, the controller can take the form of a microprocessor or processor and a computer-readable medium storing a computer-readable program code (such as software or firmware) that can be executed by the (micro)processor, a logic gate, a switch, an application-specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320. The memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art also know that in addition to implementing the controller in a purely computer-readable program code manner, the controller can be implemented in the form of a logic gate, a switch, an application-specific integrated circuit, a programmable logic controller, and an embedded microcontroller by logically programming the method steps. Therefore, this controller can be considered as a hardware component, and the devices included therein for implementing various functions can also be regarded as structures within the hardware component. Or even, the devices for implementing various functions can be regarded as both software modules for implementing the method and structures within the hardware component.

[0138] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0139] For the convenience of description, the above device is described in various units according to their functions. Of course, when implementing this specification, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0140] Those skilled in the art will appreciate that the embodiments of this specification may be provided as methods, systems, or computer program products. Therefore, this specification may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, this specification may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0141] This specification is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of this specification. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0142] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0143] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0144] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0145] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0146] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0147] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0148] Those skilled in the art will appreciate that the embodiments of this specification may be provided as methods, systems or computer program products. Therefore, this specification may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, this specification may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0149] This specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. This specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0150] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0151] The above description is only an embodiment of the present specification and is not intended to limit the present specification. For those skilled in the art, the present specification may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present specification shall be included in the scope of the claims of the present specification.

Claims

1. A method for transition authentication, applied to a network device, comprising: Receiving a transition authentication request corresponding to a target transition service sent by a first user device, and generating corresponding transition information based on the transition authentication request, wherein the transition information includes target link information for invoking a first authentication module, and the first authentication module is used to verify the identity of an authentication subject user corresponding to the target transition service; The transition information is sent to a second user device, wherein the second user device invokes the first identity verification module based on the target link information, so that the second user performs a first identity verification operation based on the first identity verification module, and the identity verification subject user includes the second user; A first identity verification result corresponding to the first identity verification operation is obtained, and the first identity verification result is sent to the first user equipment, so that the first user equipment determines whether to continue the target transition service based on the first identity verification result.

2. The method according to claim 1, wherein causing the transition information to be sent to the second user equipment comprises: The transition information is sent to the second user equipment.

3. The method according to claim 1, wherein the step of causing the transition information to be sent to the second user equipment comprises: The transition information is returned to the first user equipment, so that the first user equipment sends the transition information to the second user equipment.

4. The method according to claim 1, wherein receiving a transition authentication request corresponding to a target transition service sent by a first user equipment, and generating corresponding transition information based on the transition authentication request comprises: Receiving a transition authentication request corresponding to a target transition service sent by a first user equipment, and generating corresponding service identification information; Generate corresponding transition information based on the service identification information.

5. According to the method of claim 4, the generating of the corresponding service identification information comprises: By initializing the target transition service, corresponding service identification information and transition initialization information are generated; The generating corresponding transition information based on the service identification information includes: Based on the service identification information and the transition initialization information, corresponding transition information is generated.

6. According to the method of claim 5, the transition initialization information includes authentication subject user identification information, and the first authentication module is used to verify the identity of the second user based on the authentication subject user identification information.

7. The method according to claim 6, wherein the transition initialization information further includes business operation user identification information; in, The generating corresponding transition information based on the service identification information and the transition initialization information includes: enabling the first user equipment to invoke a second identity verification module corresponding to the target transition service, so that the first user performs a second identity verification operation based on the second verification module; A second identity verification result corresponding to the second identity verification operation is obtained, and if the second identity verification result indicates that the first user has passed the identity verification, corresponding transition information is generated based on the service identification information and the transition initialization information.

8. The method according to any one of claims 1 to 7, further comprising: receiving a request for invoking a verification module sent by the second user equipment based on the target link information, and determining whether the target link information is available; If so, enable the second user equipment to wake up the first core module.

9. The method according to claim 8, wherein determining whether the target link information is available comprises: Whether the target link information is available is determined by judging whether the target link information has expired and / or has been verified.

10. The method according to claim 8, further comprising: If the target link information is unavailable, unavailable reason information corresponding to the target link information is sent to the second user equipment and / or the first user equipment.

11. A method for scene transition authentication, applied to a first user device, comprising: In response to a transition authentication trigger operation performed by a first user for a target transition service, a corresponding transition authentication request is generated, and the transition authentication request is sent to a network device, so that the network device generates corresponding transition information based on the transition authentication request, so that the transition information is sent to a second user device, wherein the transition information includes target link information for invoking a first authentication module, the first authentication module is used to perform identity verification on an authentication subject user corresponding to the target transition service, the second user device invokes the first authentication module based on the target link information, so that the second user performs a first identity verification operation based on the first authentication module, and the authentication subject user includes the second user; A first identity verification result corresponding to the first identity verification operation sent by the network device is received, and based on the first identity verification result, it is determined whether to continue the target transition service.

12. A method for scene transition authentication, applied to a second user device, comprising: Receive transition information corresponding to a target transition service, wherein the transition information is generated by a network device according to a transition authentication request corresponding to the target transition service sent by the first user device, so that the transition information is sent to the second user device, wherein the transition information includes target link information for invoking a first authentication module, and the first authentication module is used to verify the identity of an authentication subject user corresponding to the target transition service, and the authentication subject user includes a second user; In response to the access trigger operation performed by the second user on the target link information, the first identity verification module is invoked, and in response to the first identity verification operation performed by the second user based on the first identity verification module, the network device sends the first identity verification result corresponding to the first identity verification operation to the first user device, so that the first user device determines whether to continue the target transition service based on the first identity verification result.

13. A device for transition verification, comprising: A transition information generation module, used to receive a transition authentication request corresponding to a target transition service sent by a first user device, and generate corresponding transition information based on the transition authentication request, wherein the transition information includes target link information for invoking a first authentication module, and the first authentication module is used to verify the identity of an authentication subject user corresponding to the target transition service; an identity verification module, configured to enable the transition information to be sent to a second user device, wherein the second user device invokes the first identity verification module based on the target link information, so that the second user performs a first identity verification operation based on the first identity verification module, and the identity verification subject user includes the second user; The identity verification result obtaining module is used to obtain the first identity verification result corresponding to the first identity verification operation, and send the first identity verification result to the first user equipment, so that the first user equipment determines whether to continue the target transition service based on the first identity verification result.

14. A device for transition verification, comprising: A transition authentication request sending module, used to generate a corresponding transition authentication request in response to a transition authentication trigger operation performed by a first user for a target transition service, and send the transition authentication request to a network device, so that the network device generates corresponding transition information based on the transition authentication request, so that the transition information is sent to a second user device, wherein the transition information includes target link information for invoking a first authentication module, the first authentication module is used to verify the identity of an authentication subject user corresponding to the target transition service, the second user device invokes the first authentication module based on the target link information, so that the second user performs a first identity verification operation based on the first authentication module, and the authentication subject user includes the second user; The identity verification result receiving module is used to receive the first identity verification result corresponding to the first identity verification operation sent by the network device, and determine whether to continue the target transition service based on the first identity verification result.

15. A device for transition verification, comprising: A transition information receiving module, used for receiving transition information corresponding to a target transition service, wherein the transition information is generated by a network device according to a transition authentication request corresponding to the target transition service sent by the first user device, so that the transition information is sent to the second user device, wherein the transition information includes target link information for invoking a first authentication module, and the first authentication module is used for performing identity verification on an authentication subject user corresponding to the target transition service, and the authentication subject user includes a second user; The authentication invocation module is used to invoke the first authentication module in response to an access trigger operation performed by the second user on the target link information, and in response to a first identity verification operation performed by the second user based on the first authentication module, enable the network device to send a first identity verification result corresponding to the first identity verification operation to the first user device, so that the first user device determines whether to continue the target transition service based on the first identity verification result.

16. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 12 are implemented.

17. An electronic device, characterized in that: include: A processor and a memory; wherein the memory stores a computer program, and the computer program is suitable for being loaded by the processor and executing the steps of the method as claimed in any one of claims 1 to 12.

18. A computer program product having at least one instruction stored thereon, characterized in that: When the at least one instruction is executed by the processor, the steps of the method described in any one of claims 1 to 12 are implemented.

Images