Identity verification method and device

Abstract

The embodiment of the invention provides an identity verification method and device, and the method comprises the steps: obtaining an identity verification mode of a target account within a historical time range in response to an identity verification instruction initiated by the target account; determining the current identity verification mode of the target account according to the identity verification mode of the target account in the historical time range, and obtaining a target identity verification mode; performing identity verification on the target account through the target identity verification mode; and under the condition that the verification is passed, the target account logs in the terminal. Through the method and the device, the problem that the security of the system cannot be ensured due to a single identity verification mode in related technologies is solved, and the effect of improving the security of the system is further achieved.

Description

Technical Field

[0001] The embodiments of the present invention relate to the computer field, and in particular, to a method and device for identity authentication. Background Art

[0002] The operation and maintenance security management of information systems is becoming increasingly important in the evolution of today's digital process. At present, common authentication methods such as passwords and SMS verification codes are prone to being forgotten, cracked or shared. In particular, a single verification method cannot ensure the consistency between the logged-in user and the actual operator. Although some hardware-based authentication devices, such as tokens or smart cards, have improved security to a certain extent, they may be lost, damaged or copied, are not convenient to use, and still have not overcome the consistency problem. With the increasing complexity of application scenarios, traditional single authentication methods, including dynamic tokens, user mobile phone verification codes, etc., have been unable to meet the high requirements of the operation and maintenance system for security and accuracy.

[0003] There is currently no effective solution to the above problems. Summary of the invention

[0004] The embodiment of the present invention provides a method and device for identity authentication, so as to at least solve the problem in the related art that the security of the system cannot be guaranteed due to a single identity authentication method.

[0005] According to one embodiment of the present invention, a method for identity authentication is provided, comprising: in response to an identity authentication instruction initiated by a target account, obtaining the identity authentication method of the target account within a historical time range; determining the identity authentication method of the target account this time according to the identity authentication method of the target account within the historical time range, and obtaining a target identity authentication method; authenticating the target account through the target identity authentication method; and if the authentication passes, the target account logs in to a terminal.

[0006] In an exemplary embodiment, the current identity authentication method of the target account is determined based on the identity authentication method of the target account within a historical time range to obtain the target identity authentication method, including: obtaining the identity authentication methods supported by the terminal to obtain an identity authentication method set; based on the identity authentication method of the target account within a historical time range, one or more identity authentication methods are selected from the identity authentication method set to determine as the target identity authentication method.

[0007] In an exemplary embodiment, based on the identity authentication method of the target account within a historical time range, one or more identity authentication methods are selected from the identity authentication method set and determined as the target identity authentication method, including: when the identity authentication method set contains only one of the identity authentication methods, the identity authentication method is determined as the target identity authentication method; when the identity authentication method set contains multiple identity authentication methods and there are other identity authentication methods in the identity authentication method set except the identity authentication method of the target account within the historical time range, the target identity authentication method is determined from the other identity authentication methods; when the identity authentication method set contains multiple identity authentication methods and there are no other identity authentication methods in the identity authentication method set except the identity authentication method of the target account within the historical time range, one or more identity authentication methods are selected from the identity authentication method set and determined as the target identity authentication method.

[0008] In an exemplary embodiment, when the identity authentication method set includes multiple identity authentication methods, and the identity authentication method set contains other identity authentication methods other than the identity authentication method of the target account within a historical time range, determining the target identity authentication method from the other identity authentication methods includes: randomly selecting one or more identity authentication methods from the other identity authentication methods to determine as the target identity authentication method.

[0009] In an exemplary embodiment, when the identity authentication method set includes multiple identity authentication methods, and there are no other identity authentication methods in the identity authentication method set except the identity authentication method of the target account within a historical time range, one or more identity authentication methods are selected from the identity authentication method set and determined as the target identity authentication method, including: determining the earliest identity authentication method in the identity authentication method set as the target identity authentication method; or determining the previous identity authentication method of the target account as the first identity authentication method, and determining one or more identity authentication methods randomly selected from other identity authentication methods in the identity authentication method set except the first identity authentication method as the target identity authentication method.

[0010] In an exemplary embodiment, the target account is authenticated through the target identity authentication method, including: obtaining first identity information corresponding to the target identity authentication method; obtaining second identity information of the target account in a preset database, wherein the second identity information is identity information corresponding to the target identity authentication method; and when the first identity information matches the second identity information, determining that the identity authentication of the target account is passed.

[0011] According to another embodiment of the present invention, there is provided an identity authentication device, comprising: an acquisition module, for obtaining the identity authentication method of the target account within a historical time range in response to an identity authentication instruction initiated by the target account; a determination module, for determining the identity authentication method of the target account this time according to the identity authentication method of the target account within the historical time range, and obtaining a target identity authentication method; a verification module, for authenticating the target account through the target identity authentication method; and a login module, for logging the target account into a terminal when the verification is passed.

[0012] According to yet another embodiment of the present invention, a computer-readable storage medium is provided, wherein a computer program is stored in the computer-readable storage medium, wherein the computer program implements the steps of any of the above methods when executed by a processor.

[0013] According to yet another embodiment of the present invention, there is provided an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0014] According to yet another embodiment of the present invention, a computer program product is provided, comprising a computer program, wherein when the computer program is executed by a processor, the steps of any of the above methods are implemented.

[0015] Through the present invention, in response to the identity authentication request of the target account, the identity authentication method used by the target account within a historical time range is obtained, and based on the identity authentication method used by the target account, the target identity authentication method required for the target account to authenticate this time is determined, and the target identity authentication method is used to authenticate the target account. If the authentication is successful, the target account logs in to the terminal.

[0016] Since the authentication method required this time is determined based on the authentication methods used by the target account in the historical time range, and the authentication method is used to authenticate the target account and log in to the terminal, the advantages of various biometric technologies can be fully utilized in combination with the historical authentication methods, avoiding the situation where a single authentication method cannot ensure the consistency between the logged-in user and the actual operator, greatly improving the security and accuracy of authentication. Therefore, the problem in the related technology that the security of the system cannot be guaranteed due to the single authentication method can be solved, achieving the effect of improving the security of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 is a hardware structure block diagram of a mobile terminal according to an identity authentication method of an embodiment of the present invention;

[0018] Figure 2 is a flow chart of a method for identity authentication according to an embodiment of the present invention;

[0019] Figure 3 is a flow chart of security management based on multiple biometric technologies according to an embodiment of the present invention;

[0020] Figure 4 is a logical schematic diagram of identity authentication according to an embodiment of the present invention;

[0021] Figure 5 It is a structural block diagram of an identity authentication device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0022] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings and in combination with the embodiments.

[0023] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0024] The method embodiments provided in the embodiments of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Taking running on a mobile terminal as an example, Figure 1 FIG. 1 is a hardware structure diagram of a mobile terminal of an identity authentication method according to an embodiment of the present invention. Figure 1 As shown, the mobile terminal may include one or more ( Figure 1 Only one is shown in the figure) a processor 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA) and a memory 104 for storing data, wherein the mobile terminal may also include a transmission device 106 and an input / output device 108 for communication functions. It can be understood by those skilled in the art that Figure 1 The structure shown is for illustration only and does not limit the structure of the mobile terminal. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations shown.

[0025] The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as the computer program corresponding to the identity authentication method in the embodiment of the present invention. The processor 102 executes various functional applications and data processing by running the computer program stored in the memory 104, that is, to implement the above method. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories may be connected to the mobile terminal via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0026] The transmission device 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the mobile terminal. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, referred to as NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0027] In this embodiment, a method running on the above mobile terminal or network architecture is provided. Figure 2 is a flow chart of a method for identity authentication according to an embodiment of the present invention. Figure 2 As shown, the process includes the following steps:

[0028] Step S202, in response to the identity authentication instruction initiated by the target account, obtaining the identity authentication method of the target account within a historical time range;

[0029] The above-mentioned target account can be a user name, account number, etc. for the user to log in to the terminal device or system; the above-mentioned identity authentication instruction can be a request or command instructing to verify the user's identity; the above-mentioned historical time range can be a period of time before the current moment, and the specific time range can be set according to actual conditions, such as the past month, the past three months, the past six months, etc., wherein the identity authentication method within the historical time range can be the identity authentication method used by the target account within the historical time range; the user initiates an identity authentication request through the target account, and the system responds to the identity authentication request of the target account (i.e., the identity authentication instruction) to obtain the identity authentication method of the target account within the historical time range. For example, user A initiates an identity authentication request through the target account aaa. After the system receives the identity authentication request sent by the target account aaa, it responds to the identity authentication request to obtain all identity authentication methods used by the target account aaa in the past three months.

[0030] Step S204, determining the current identity authentication method of the target account according to the identity authentication methods of the target account within a historical time range, and obtaining a target identity authentication method;

[0031] The above-mentioned target identity authentication method can be the identity authentication method that the target account needs to perform when performing this identity authentication; after obtaining the identity authentication method of the target account within the historical time range, the system determines the target identity authentication method required for this identity authentication based on the historical identity authentication method, thereby increasing the uncertainty of identity authentication, avoiding the security risks caused by the identity authentication information being easily cracked or copied due to a single identity authentication method, and improving the security and reliability of the identity authentication method.

[0032] Optionally, based on the identity authentication method of the target account within a historical time range, the identity authentication method of the target account this time is determined to obtain the target identity authentication method, including: obtaining the identity authentication methods supported by the terminal to obtain an identity authentication method set; based on the identity authentication method of the target account within a historical time range, one or more identity authentication methods are selected from the identity authentication method set to determine as the target identity authentication method.

[0033] The above-mentioned terminal can be a device for the user to log in to the target account, and the terminal can be a computer, a mobile phone, a tablet, etc.; the above-mentioned identity authentication method set can be an identity authentication method supported by the terminal. For example, if the mobile phone has a built-in camera and a fingerprint recognition device, the identity authentication method set of the mobile phone can include passwords, fingerprints, irises, facial features, etc., and if the computer only has a built-in camera device, the identity authentication set of the computer can include passwords, irises, facial features, etc.; according to the identity authentication methods used by the target account within a historical time range, the target identity authentication method required for this identity authentication is determined in the identity authentication set supported by the terminal device for logging into the target account this time, where the number of specific target identity authentication methods can be determined based on actual conditions.

[0034] Step S206, authenticating the target account through the target identity authentication method;

[0035] Specifically, first identity information corresponding to the target identity authentication method is obtained; second identity information of the target account is obtained from a preset database, wherein the second identity information is identity information corresponding to the target identity authentication method; when the first identity information matches the second identity information, it is determined that the identity authentication of the target account is passed.

[0036] The above-mentioned first identity information can be the identity information that needs to be verified by the target identity authentication method. For example, when the target identity authentication method is fingerprint or face recognition, the first identity information can be the fingerprint or face of the target account; the above-mentioned second identity information can be the identity information corresponding to the target identity authentication method and registered in advance in the system by the target account; when authenticating the target account, the first identity information of the target account (ie, the user) is collected according to the target identity authentication method, and at the same time, the second identity information corresponding to the target identity authentication method is obtained from a preset database, and the first identity information is matched with the second identity information. If the two match, it means that the identity authentication of the target account is passed.

[0037] Step S208: If the verification is successful, the target account logs into the terminal.

[0038] Optionally, the executor of the above steps may be a background processor, or other devices with similar processing capabilities, or a machine that integrates at least an image acquisition device and a data processing device, wherein the image acquisition device may include a graphics acquisition module such as a camera, and the data processing device may include a computer, a mobile phone or other terminal, but is not limited thereto.

[0039] Through the above steps, after receiving the identity authentication instruction of the target account, the identity authentication method used by the target account within the historical time range is obtained, and the target identity authentication method required for the target account during this identity authentication is determined based on the identity authentication method used by the target account, and the target identity authentication method is used to authenticate the target account. If the authentication is passed, the target account logs in to the terminal. Since the identity authentication method required this time is determined based on the identity authentication method used by the target account within the historical time range, and the target account is authenticated and logged in to the terminal using the identity authentication method, the advantages of various biometric technologies can be fully utilized in combination with the historical identity authentication methods, avoiding the situation where a single authentication method cannot ensure the consistency between the logged-in user and the actual operator, and greatly improving the security and accuracy of authentication. The problem that the security of the system cannot be guaranteed due to the single identity authentication method in the related technology is solved, and the security of the system is improved.

[0040] As an optional implementation, based on the identity authentication method of the target account within a historical time range, one or more identity authentication methods are selected from the identity authentication method set and determined as the target identity authentication method, including: when the identity authentication method set contains only one of the identity authentication methods, the identity authentication method is determined as the target identity authentication method; when the identity authentication method set contains multiple identity authentication methods and there are other identity authentication methods in the identity authentication method set except the identity authentication method of the target account within the historical time range, the target identity authentication method is determined from the other identity authentication methods; when the identity authentication method set contains multiple identity authentication methods and there are no other identity authentication methods in the identity authentication method set except the identity authentication method of the target account within the historical time range, one or more identity authentication methods are selected from the identity authentication method set and determined as the target identity authentication method.

[0041] As an optional implementation, if the authentication method set contains only one authentication method, it means that the terminal only supports one authentication method, and the authentication method is directly determined as the target authentication method required for this authentication; if the authentication method set contains multiple authentication methods, it means that the terminal supports multiple authentication methods. At this time, it is necessary to combine the authentication methods used by the target account in the historical period to determine the target authentication method required for this authentication.

[0042] Optionally, if there are other authentication methods besides the historical authentication methods in the authentication method set, the target authentication method is determined from the other authentication methods. For example, the authentication methods supported by the terminal are {password, fingerprint, iris, facial features}, and the target account has only used password and fingerprint in the historical time range, then it is necessary to determine the target authentication method required for this authentication from iris and facial features; if there are no other authentication methods besides the historical authentication methods in the authentication method set, then the target authentication method is determined from the authentication method set. For example, the authentication methods supported by the terminal are {password, fingerprint, facial features}, and the target account has only used password, fingerprint and facial features in the historical time range, then it is still necessary to determine the target authentication method required for this authentication from password, fingerprint and facial features.

[0043] By combining a variety of different biometric technologies and choosing an authentication method that is different from the historical authentication method, the possibility of identity information being copied and stolen can be reduced, a higher level of protection can be provided, and the security of the system can be improved.

[0044] As an optional implementation, when the identity authentication method set includes multiple identity authentication methods, and the identity authentication method set contains other identity authentication methods other than the identity authentication method of the target account within a historical time range, determining the target identity authentication method from the other identity authentication methods includes: randomly selecting one or more identity authentication methods from the other identity authentication methods to determine as the target identity authentication method.

[0045] As an optional implementation, when the identity authentication method set includes multiple identity authentication methods, and there is no other identity authentication method in the identity authentication method set except the identity authentication method of the target account within a historical time range, one or more identity authentication methods are selected from the identity authentication method set and determined as the target identity authentication method, including: determining the earliest identity authentication method in the identity authentication method set as the target identity authentication method; or determining the previous identity authentication method of the target account as the first identity authentication method, and determining one or more identity authentication methods randomly selected from other identity authentication methods in the identity authentication method set except the first identity authentication method as the target identity authentication method.

[0046] As an optional implementation, when there is no other authentication method other than the historical authentication method in the authentication method set, the earliest authentication method in the authentication method set, or an authentication method different from the most recent authentication method, can be selected as the target authentication method. For example, the authentication methods supported by the terminal (i.e., the authentication set) are {password, fingerprint, iris, facial features}, and the historical authentication methods of the target account are password + fingerprint - facial recognition - iris + password - fingerprint - iris, then the earliest authentication method (i.e., password + fingerprint), or one or more authentication methods in the authentication methods different from the most recent authentication method (password, fingerprint, facial recognition) can be selected as the target authentication method, thereby ensuring that different authentication methods are used for two adjacent authentications, so that even if one of the authentication methods is cracked, it is still necessary to verify by another method, thereby improving the security and protection capabilities of the system, increasing the security of the system, and protecting information security.

[0047] As an optional implementation, Figure 3 is a flowchart of security management based on multiple biometric technologies according to an embodiment of the present invention. Figure 3 As shown, the specific process is as follows:

[0048] S1: Collect the identity information of the target account:

[0049] Collect a variety of users' biometric information (i.e. identity information), such as fingerprints, finger veins, irises, facial features, voice and other key features, and pre-process the collected data through artificial intelligence algorithms to improve data quality and availability, and register and store the pre-processed biometric information in a specially constructed user biometric information database (i.e., the preset database).

[0050] S2: Create a target mapping between the target account and identity information:

[0051] Through algorithms and encryption technology, the collected user biometric information is bound to the authentication information in the operation and maintenance security management system. For example, the user's fingerprint information is associated with the user account (i.e., target account), permissions and other authentication information in the system through encoding.

[0052] S3: Target account applies for identity authentication:

[0053] The user fills in the user name (i.e. the target account) on the operation and maintenance terminal and submits the authentication application.

[0054] S4: Comprehensively analyze the identity authentication habits of the target account (i.e., the identity authentication methods within the historical time range) and terminal conditions (i.e., the target identity authentication method set), and determine the target identity authentication method:

[0055] Artificial intelligence algorithms are used to conduct a comprehensive analysis of factors such as user authentication habits and terminal conditions to determine the identification method required for this authentication (i.e., the target identity authentication method) and the corresponding operation and maintenance permissions. For example, if the current terminal has facial recognition and voice recognition peripherals, and the user has recently used fingerprint authentication, the system may require the user to perform facial and voice authentication at the same time.

[0056] S5: Collect the target account's identity information based on the target identity authentication method:

[0057] The user collects the biometric information that needs to be verified according to the identification method and permissions required for this authentication prompted by the system, and submits the login application after all the information is collected.

[0058] S6: Preprocessing the collected identity information:

[0059] After receiving the login application, the operation and maintenance security management system will hand over the collected information to the artificial intelligence operation and maintenance large model for processing, eliminate the noise of biological collected information, combat AI forgery, and finally return the authentication result.

[0060] S7: Match the preprocessed identity information with the identity information in the target mapping, and log in to the terminal if the match is successful; otherwise, the identity authentication fails and the terminal login is rejected.

[0061] S8: Monitor the operations of the target account and force logout for abnormal operations:

[0062] For users who have successfully logged in, the system still monitors and analyzes operation and maintenance operations through behavioral models. For abnormal operations, the system will force the user to log out, reduce permissions, etc.

[0063] The above specific verification process judgment logic can be as follows Figure 4 shown.

[0064] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present invention.

[0065] In this embodiment, a device for identity authentication is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0066] Figure 5 is a structural block diagram of an identity authentication device according to an embodiment of the present invention, such as Figure 5 As shown, the device includes: an acquisition module 502, which is used to respond to the identity authentication instruction initiated by the target account and obtain the identity authentication method of the target account within a historical time range; a determination module 504, which is used to determine the identity authentication method of the target account this time according to the identity authentication method of the target account within the historical time range, and obtain the target identity authentication method; a verification module 506, which is used to authenticate the target account through the target identity authentication method; and a login module 508, which is used for the target account to log in to the terminal when the verification is passed.

[0067] In an exemplary embodiment, the device is also used to obtain the identity authentication methods supported by the terminal to obtain an identity authentication method set; based on the identity authentication method of the target account within a historical time range, one or more identity authentication methods are selected from the identity authentication method set and determined as the target identity authentication method.

[0068] In an exemplary embodiment, the device is also used to determine the identity authentication method as the target identity authentication method when the identity authentication method set includes only one of the identity authentication methods; when the identity authentication method set includes multiple identity authentication methods and there are other identity authentication methods in the identity authentication method set except the identity authentication method of the target account within the historical time range, determine the target identity authentication method from the other identity authentication methods; when the identity authentication method set includes multiple identity authentication methods and there are no other identity authentication methods in the identity authentication method set except the identity authentication method of the target account within the historical time range, select one or more identity authentication methods from the identity authentication method set and determine them as the target identity authentication method.

[0069] In an exemplary embodiment, the apparatus is further configured to randomly select one or more identity authentication methods from the other identity authentication methods and determine them as the target identity authentication methods.

[0070] In an exemplary embodiment, the device is also used to determine the earliest authentication method in the authentication method set as the target authentication method; or, determine the previous authentication method of the target account as the first authentication method, and determine one or more authentication methods randomly selected from other authentication methods in the authentication method set except the first authentication method as the target authentication method.

[0071] In an exemplary embodiment, the device is also used to obtain first identity information corresponding to the target identity authentication method; obtain second identity information of the target account in a preset database, wherein the second identity information is identity information corresponding to the target identity authentication method; and when the first identity information matches the second identity information, determine that the identity authentication of the target account is passed.

[0072] It should be noted that the above modules can be implemented by software or hardware. For the latter, it can be implemented in the following ways, but not limited to: the above modules are all located in the same processor; or the above modules are located in different processors in any combination.

[0073] An embodiment of the present invention further provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the steps of any of the above methods are implemented.

[0074] In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to, various media that can store computer programs, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk.

[0075] An embodiment of the present invention further provides an electronic device, including a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0076] In an exemplary embodiment, the electronic device may further include a transmission device and an input / output device, wherein the transmission device is connected to the processor, and the input / output device is connected to the processor.

[0077] An embodiment of the present invention further provides a computer program product, including a computer program, which implements the steps of the method described in each embodiment of the present application when executed by a processor.

[0078] For specific examples in this embodiment, reference may be made to the examples described in the above embodiments and exemplary implementation modes, and this embodiment will not be described in detail herein.

[0079] Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, they can be implemented by a program code executable by a computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be executed in a different order than here, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. Thus, the present invention is not limited to any specific combination of hardware and software.

[0080] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for identity authentication, characterized in that: include: In response to an identity authentication instruction initiated by a target account, obtaining an identity authentication method of the target account within a historical time range; Determine the current identity authentication method of the target account according to the identity authentication method of the target account within a historical time range, and obtain the target identity authentication method; Authenticating the target account through the target identity authentication method; If the verification is successful, the target account logs into the terminal.

2. The method according to claim 1, characterized in that Determining the current identity authentication method of the target account according to the identity authentication method of the target account within a historical time range, and obtaining the target identity authentication method, including: Obtaining identity authentication methods supported by the terminal to obtain an identity authentication method set; According to the identity authentication method of the target account within a historical time range, one or more identity authentication methods are selected from the identity authentication method set and determined as the target identity authentication method.

3. The method according to claim 2, characterized in that According to the identity authentication method of the target account within a historical time range, one or more identity authentication methods are selected from the identity authentication method set and determined as the target identity authentication method, including: In a case where the identity authentication method set includes only one of the identity authentication methods, determining the identity authentication method as the target identity authentication method; If the identity authentication method set includes a plurality of the identity authentication methods, and the identity authentication method set includes other identity authentication methods other than the identity authentication method of the target account within the historical time range, determining the target identity authentication method from the other identity authentication methods; When the identity authentication method set includes multiple identity authentication methods, and the identity authentication method set does not contain other identity authentication methods except the identity authentication method of the target account within a historical time range, one or more identity authentication methods are selected from the identity authentication method set and determined as the target identity authentication method.

4. The method according to claim 3, characterized in that When the identity authentication method set includes a plurality of the identity authentication methods, and the identity authentication method set includes other identity authentication methods other than the identity authentication method of the target account within the historical time range, determining the target identity authentication method from the other identity authentication methods includes: One or more identity authentication methods are randomly selected from the other identity authentication methods and determined as the target identity authentication methods.

5. The method according to claim 3, characterized in that: When the identity authentication method set includes multiple identity authentication methods, and the identity authentication method set does not include other identity authentication methods other than the identity authentication method of the target account within the historical time range, one or more identity authentication methods are selected from the identity authentication method set and determined as the target identity authentication method, including: Determine the earliest identity authentication method in the identity authentication method set as the target identity authentication method; or, The previous identity authentication method of the target account is determined as the first identity authentication method, and one or more identity authentication methods randomly selected from other identity authentication methods in the identity authentication method set except the first identity authentication method are determined as the target identity authentication method.

6. The method according to claim 1, characterized in that Authentication of the target account through the target identity authentication method includes: Acquire first identity information corresponding to the target identity authentication method; Acquire the second identity information of the target account in a preset database, wherein the second identity information is the identity information corresponding to the target identity authentication method; When the first identity information matches the second identity information, it is determined that the identity authentication of the target account is passed.

7. An identity verification device, characterized in that: include: An acquisition module, configured to respond to an identity authentication instruction initiated by a target account and acquire an identity authentication method of the target account within a historical time range; A determination module, configured to determine the current identity authentication method of the target account according to the identity authentication method of the target account within a historical time range, and obtain a target identity authentication method; A verification module, used to authenticate the target account through the target identity authentication method; The login module is used for the target account to log in to the terminal when the verification is passed.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, wherein the computer program implements the steps of the method described in any one of claims 1 to 6 when executed by a processor.

9. An electronic device comprising a memory and a processor, characterized in that: A computer program is stored in the memory, and the processor is configured to run the computer program to perform the method according to any one of claims 1 to 6.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method described in any one of claims 1 to 6 are implemented.

Images