User identity authentication method and device, storage medium and electronic equipment

Abstract

The invention discloses a user identity authentication method and device, a storage medium and electronic equipment, and the method comprises the steps: a user side initiates a student identity authentication request for a target application, and outputs a guide access operation instruction for a trusted school roll website to the user side, monitoring the guide access operation of the user side to access the trusted school roll website based on the guide access operation instruction, collecting school roll website access data aiming at the user side, determining identity recognition verification data aiming at the user side based on the school roll website access data, and performing student identity authentication on the user side based on the identity recognition verification data, and obtaining a student identity authentication result for the user side.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a user identity authentication method, device, storage medium and electronic device. Background Art

[0002] With the popularization of computers and the Internet, as well as the rapid development of communication technology, society has gradually entered the information age. At present, when service providers provide services to users, they often need to verify the user's specified type of identity. For example, when a service provider needs to authenticate a user's student identity, it often needs to request the user's student identity information from the student status verification service interface provided by a trusted student status institution (such as China Higher Education Student Information and Career Center) and a third-party data source, thereby authenticating the user's student identity based on the obtained student identity information. Summary of the invention

[0003] This specification provides a user identity authentication method, device, storage medium and electronic device, and the technical solution is as follows:

[0004] In a first aspect, this specification provides a user identity authentication method, the method comprising:

[0005] In response to a student identity authentication request from a user terminal for a target application, outputting a guided access operation instruction for a trusted student status website to the user terminal;

[0006] Monitoring the guided access operation of the user terminal to the trusted student status website based on the guided access operation instruction;

[0007] Collect student registration website access data for the user terminal, determine identity recognition and verification data for the user terminal based on the student registration website access data, perform student identity authentication on the user terminal based on the identity recognition and verification data, and obtain a student identity authentication result for the user terminal.

[0008] In a second aspect, this specification provides a user identity authentication device, the device comprising:

[0009] The request authentication module is used to respond to the student identity authentication request of the user terminal for the target application and output a guided access operation instruction for the trusted student status website to the user terminal;

[0010] An operation monitoring module, used for monitoring the guided access operation of the user terminal to the trusted student status website based on the guided access operation instruction;

[0011] The student authentication module is used to collect student registration website access data for the user terminal, determine identity recognition and verification data for the user terminal based on the student registration website access data, perform student identity authentication on the user terminal based on the identity recognition and verification data, and obtain a student identity authentication result for the user terminal.

[0012] In a third aspect, the present specification provides a computer storage medium, wherein the computer storage medium stores at least one instruction, wherein the instruction is suitable for being loaded by a processor and executing the method steps of one or more embodiments of the present specification.

[0013] In a fourth aspect, the present specification provides a computer program product, wherein the computer program product stores at least one instruction, wherein the instruction is suitable for being loaded by a processor and executing the method steps of one or more embodiments of the present specification.

[0014] In a fifth aspect, the present specification provides an electronic device, which may include: a processor and a memory; wherein the memory stores a computer program, and the computer program is suitable for being loaded by the processor and executing the method steps of one or more embodiments of the present specification.

[0015] The beneficial effects brought by the technical solutions provided by some embodiments of this specification include at least:

[0016] In one or more embodiments of the present specification, the user terminal initiates a student identity authentication request for the target application, at which time the electronic device outputs a guided access operation instruction for the trusted student status website to the user terminal, monitors the guided access operation of the user terminal to access the trusted student status website based on the guided access operation instruction, collects the student status website access data for the user terminal, and determines the identity recognition and verification data for the user terminal to perform student identity authentication on the user terminal to obtain the student identity authentication result for the user terminal. By dividing the student identity authentication process into user guidance, operation monitoring, data collection and verification based on the user access to the trusted student status website, the high cost and instability problem when the traditional target application relies on the student status verification service interface is solved, and the interface dependence is bypassed by the user guiding the access to the trusted student status website, which effectively improves the flexibility and robustness of the system; and, by collecting the student status website access data of the user accessing the student status website and generating the identity recognition and verification data, the accuracy and security of the authentication are guaranteed. In addition, the solution takes into account the user experience, provides clear operation guidance, ensures the smooth verification process, and reduces the operating cost of the authentication process, which is suitable for student identity authentication needs in various scenarios. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in this specification or the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 This is a scenario diagram of a user identity authentication system provided in this manual;

[0019] Figure 2 It is a flowchart of a user identity authentication method provided in this manual;

[0020] Figure 3 This is a schematic diagram of a collection authorization security verification scenario provided in this manual;

[0021] Figure 4 This is a flow chart of data collection provided in this manual;

[0022] Figure 5 This is a flowchart of a video frame processing for accessing a website provided in this manual;

[0023] Figure 6 This is a schematic diagram of a scenario for video recording and collecting student information provided in this manual;

[0024] Figure 7 This is a flow chart of student identity authentication provided in this manual;

[0025] Figure 8 This is a schematic diagram of a scenario for verifying the academic credentials provided in this manual;

[0026] Fig. 9 It is a structural diagram of a user identity authentication device provided in this specification;

[0027] Fig.10 It is a structural schematic diagram of an electronic device provided in this manual. DETAILED DESCRIPTION

[0028] The following will be combined with the drawings in this specification to clearly and completely describe the technical solutions in this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Based on the embodiments in this specification, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this specification.

[0029] In the description of this specification, it should be understood that the terms "first", "second", etc. are only used for descriptive purposes and cannot be understood as indicating or implying relative importance. In the description of this specification, it should be noted that, unless otherwise clearly specified and limited, "including" and "having" and any of their variations are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally also includes steps or units that are not listed, or optionally also includes other steps or units inherent to these processes, methods, products or devices. For those of ordinary skill in the art, the specific meanings of the above terms in this specification can be understood in specific circumstances. In addition, in the description of this specification, unless otherwise specified, "multiple" refers to two or more. "And / or" describes the association relationship of associated objects, indicating that there can be three relationships, for example, A and / or B, which can represent: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the associated objects before and after are an "or" relationship.

[0030] In the related art, when a service provider provides a user with convenient services under the student identity, it is usually necessary to verify the user's student identity. Student identity authentication is highly dependent on the student status verification service interface provided by third-party data sources such as China Higher Education Student Information and Career Center. For example, when a service provider needs to authenticate a user's student identity, it is often necessary to request the user's student identity information from the official institution's student status verification service interface, thereby relying on the obtained user's student identity information to authenticate the user's student identity in order to provide the user with corresponding services. Since this identity authentication method is heavily dependent on the data services provided by the student status verification service interface of other institutions, the student status verification service interface in many cases is unstable and the interface fee of the student status verification service interface is expensive, resulting in high costs for the entire verification process.

[0031] The present specification is described in detail below with reference to specific embodiments.

[0032] See also Figure 1 , is a schematic diagram of a scenario of a user identity authentication system provided in this specification. Figure 1 As shown, the user identity authentication system may include at least a client cluster and a service platform 100 .

[0033] The client cluster may include at least one client, such as Figure 1 As shown, it specifically includes client 1 corresponding to user 1, client 2 corresponding to user 2, ..., client n corresponding to user n, where n is an integer greater than 0.

[0034] Each client in the client cluster may be an electronic device with communication function, including but not limited to: wearable device, handheld device, personal computer, tablet computer, vehicle-mounted device, smart phone, computing device or other processing device connected to wireless modem, etc. Electronic devices may be called different names in different networks, such as: user equipment, access terminal, user unit, user station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, electronic device, wireless communication device, user agent or user device, cellular phone, cordless phone, personal digital assistant (PDA), electronic device in 5G network or future evolution network, etc.

[0035] The service platform 100 can be a separate server device, such as a rack-mounted, blade, tower, or cabinet-mounted server device, or a workstation, mainframe computer, or other hardware device with strong computing power; it can also be a server cluster composed of multiple servers, and the servers in the service cluster can be composed in a symmetrical manner, wherein each server has equivalent functions and status in the transaction link, and each server can provide services to the outside independently, and the independent service can be understood as not requiring the assistance of other servers.

[0036] In one or more embodiments of the present specification, the service platform 100 may establish a communication connection with at least one client in the client cluster, and complete the data interaction during the user identity authentication process based on the communication connection.

[0037] For example, the client can initiate a student identity authentication request for a target application to the service platform 100; output a guide access operation instruction for a trusted student status website to the user terminal;

[0038] The service platform 100 monitors the guided access operation of the user terminal to the trusted student registration website based on the guided access operation instruction, collects the student registration website access data for the user terminal, determines the identity recognition and verification data for the user terminal based on the student registration website access data, performs student identity authentication on the user terminal based on the identity recognition and verification data, and obtains the student identity authentication result for the user terminal.

[0039] It should be noted that the service platform 100 and at least one client in the client cluster establish a communication connection through a network for interactive communication, wherein the network can be a wireless network or a wired network, the wireless network includes but is not limited to a cellular network, a wireless local area network, an infrared network or a Bluetooth network, and the wired network includes but is not limited to Ethernet, a universal serial bus (USB) or a controller local area network. In one or more embodiments of the specification, technologies and / or formats including Hyper Text Mark-up Language (HTML), Extensible Markup Language (XML), etc. are used to represent data (such as a target compressed package) exchanged through a network. In addition, conventional encryption technologies such as Secure Socket Layer (SSL), Transport Layer Security (TLS), Virtual Private Network (VPN), Internet Protocol Security (IPsec), etc. can also be used to encrypt all or some links. In other embodiments, customized and / or dedicated data communication technologies can also be used to replace or supplement the above data communication technologies.

[0040] The user identity authentication system embodiment provided in this specification and the user identity authentication method in one or more embodiments belong to the same concept. The execution subject corresponding to the user identity authentication method involved in one or more embodiments of the specification can be an electronic device, and the electronic device can be the above-mentioned service platform 100; the execution subject corresponding to the user identity authentication method involved in one or more embodiments of the specification can also be an electronic device corresponding to the client, which is determined based on the actual application environment. The implementation process of the user identity authentication system embodiment can be found in the following method embodiment, which will not be repeated here.

[0041] based on Figure 1 The scenario diagram is shown, and the user identity authentication method provided by one or more embodiments of this specification is introduced in detail below.

[0042] See also Figure 2 , a flowchart of a user identity authentication method is provided for one or more embodiments of the present specification, the method can be implemented by a computer program and can be run on a user identity authentication device based on the von Neumann system. The computer program can be integrated into an application or run as an independent tool application. The user identity authentication device can be an electronic device.

[0043] Specifically, the user identity authentication method includes:

[0044] S102: In response to a student identity authentication request from a user terminal for a target application, outputting a guided access operation instruction for a trusted student status website to the user terminal;

[0045] Background of user identity authentication: When a user needs certain specific services, such as applying for educational discounts or student-exclusive services, the target application usually needs to verify whether the user has student status. The traditional method relies on the interface to call the student database for verification. This method is limited by the stability of the student status verification service interface provided by the trusted student status website (such as China Higher Education Student Information and Career Center) and the interface verification cost. By guiding users to directly access the student status website (such as China Higher Education Student Information and Career Center), not only can the student status verification service interface be bypassed, but the security and transparency of the authentication process can also be improved. The entire process of user identity authentication in the target application is visible to the user and is no longer a black box verification.

[0046] Target application: the platform application or service application where the user initiates the identity authentication request, such as online education application, library management system application, shopping application, payment application, etc. It should be noted that the target application and the trusted student status website are independent of each other.

[0047] Guided access operation instructions: pre-defined preset user access operation guides for trusted student status websites, used to guide users to complete access to trusted student status websites. For example: click a specific link to visit the China Higher Education Student Information and Career Center website, and follow the specified steps to query student status information.

[0048] Exemplarily, the user triggers a student identity authentication request in the target application, for example, by clicking a "student authentication" button in the education discount service of the target application.

[0049] The electronic device identifies the user's student identity authentication request and determines that the user needs to visit a trusted student status website such as China Higher Education Student Information and Career Center to complete the student identity authentication. In order to avoid the instability and interface verification cost of the student status verification service interface provided by the trusted student status website to the target application

[0050] The electronic device generates a series of guiding access operation instructions for accessing the China Higher Education Student Information and Career Center website, such as: access link or QR code, login operation steps (such as entering user name and password), and query guidance for verification information.

[0051] The electronic device transmits these guided access operation instructions to the user end. It can be presented in the form of page display, pop-up window prompt or notification. The user end needs to access the trusted student status website according to the preset guided access operation and perform the preset guided access operation;

[0052] For example, Xiao Ming applies for a student discount course on a certain online learning platform application (ie, the target application).

[0053] User trigger: Xiao Ming clicks the "Student Authentication" button to initiate an authentication request.

[0054] System response: The system determines that Xiao Ming's authentication requires access to China Higher Education Student Information and Career Center, and generates instructions to guide access operations:

[0055] “Please click the following link in the target application to visit the China Higher Education Student Information and Career Center: www.chsi.com.cn.”

[0056] "After logging in, select the 'Online Student Status Verification' service."

[0057] These guided access operation instructions are displayed via a pop-up window on Xiao Ming’s mobile phone.

[0058] In a feasible implementation, the student status verification service status of the trusted student status website service interface corresponding to the target application can be detected first. If the student status verification service status is an abnormal service status, the step of outputting guidance information for accessing the trusted student status website to the user terminal is executed.

[0059] The above implementation method proposes an intelligent processing mechanism, which determines the subsequent operation process by detecting the status of the trusted student status website service interface of the target application. Specifically, if the interface service status is abnormal, an alternative method of guiding the user to directly access the student status website is adopted. The following is a detailed explanation of this method:

[0060] This is mainly because traditional student identity authentication relies on the interface service provided by a trusted student website. However, in actual operation, the following limitations may be encountered: Abnormal interface service status: such as delayed interface response, service downtime, or data return error. Interface call cost: Frequent interface calls will result in high costs, especially in large-scale verification scenarios. Degraded user experience: Interface abnormalities may prevent users from completing the verification process, affecting the experience.

[0061] By detecting the interface service status at the beginning of the process, it can be determined whether it is necessary to switch to the backup plan (guiding users to directly access the student status website) to improve the robustness of the process.

[0062] Specifically, the student status verification service status of the trusted student status website service interface corresponding to the target application is detected. The trusted student status website service interface corresponding to the target application refers to the target application calling the China Higher Education Student Information and Career Center or other trusted student status database API to verify the user's student identity. The student status verification service status indicates the working status of the interface, which can be divided into at least normal (available) and abnormal (unavailable).

[0063] If the student status verification service status is an abnormal service status, the step of outputting guidance information for accessing a trusted student status website is executed;

[0064] Optionally, if the student status verification service status is normal service status, the trusted student status website service interface is called to perform student identity authentication on the user end.

[0065] It is understandable that the interface service status detection mechanism is introduced in the above way, and the interface is switched to the user guidance mode when the interface is abnormal, which effectively improves the flexibility and stability of the authentication process. By guiding users to directly access the student registration website, the interface restrictions can be bypassed to ensure a smooth authentication process, while reducing the system's dependency risk and cost.

[0066] S104: monitoring the guided access operation of the user terminal to access the trusted student status website based on the guided access operation instruction;

[0067] To ensure that users can complete student status verification according to the steps, electronic devices need to monitor whether users have correctly performed the guidance operation. This can not only help detect abnormal behavior (such as failure to complete verification), but also provide data basis for subsequent authentication.

[0068] Guided access operation: Users follow the guided access operation instructions to gradually complete the access process of the trusted student information website. For example, after the user clicks to enter the verification, the user is guided to open the student information page and prompted to click the "Start Collection" button to enter the information collection process.

[0069] For example, the student registration website access data collection part is a very important part of this solution. The purpose is to guide the user to perform designated guided access operations on the trusted student registration website through effective guided access operation instructions. In this process, the student registration website access data is collected through the monitoring mechanism. For example, after the user clicks to enter the verification, the system guides the user to open the student registration information page and prompts the user to click the "Start Collection" button to enter the information collection process. In the collection process, the user's screen is recorded and the video stream is transmitted to the server in real time for effective video frame extraction.

[0070] Furthermore, the system monitors the user's guided access operations through the following monitoring mechanisms:

[0071] 1) Network log analysis: record whether the user has visited the specified link.

[0072] 2) Embedded code: embed code in the landing page to track actions, such as capturing button click events.

[0073] 3) User-authorized data collection: Collect user page access records on trusted student registration websites.

[0074] Furthermore, the system analyzes the user's website access trajectory to check whether it complies with the preset guidelines corresponding to the guided access operation instructions, for example:

[0075] Whether you clicked the China Higher Education Student Information and Career Center link.

[0076] Whether the login is completed.

[0077] Whether to enter the student status verification page.

[0078] If the user does not follow the steps, the system can issue a reminder or interrupt the authentication process.

[0079] For example: Xiao Ming accesses the China Higher Education Student Information and Career Center website according to the instructions. Operation monitoring:

[0080] The system recorded that Xiao Ming clicked the “China Higher Education Student Information and Career Center login link”.

[0081] Page tracking record: Xiao Ming visited the homepage of www.chsi.com.cn and logged in successfully.

[0082] The timestamp and status code show that Xiao Ming stayed on the "Student Status Verification" page for 10 seconds.

[0083] System judgment result: The system confirms that Xiao Ming correctly performs the guided access operation to the trusted student status website.

[0084] S106: Collect student registration website access data for the user terminal, determine identity recognition and verification data for the user terminal based on the student registration website access data, perform student identity authentication on the user terminal based on the identity recognition and verification data, and obtain a student identity authentication result for the user terminal.

[0085] Considering that the traditional student identity authentication process directly relies on the return data of the third-party interface, this solution collects data such as user visits to the trusted student registration website (such as page access records, submitted student registration number), analyzes its authenticity and generates identity verification data. This not only bypasses the high-cost interface call, but also improves the controllability and stability of the process.

[0086] Student registration website access data: behavioral data generated when users verify on a trusted student registration website, such as page access paths, input fields, etc.

[0087] Identity verification data: key information extracted from student registration website access data, such as name, student registration number, etc.

[0088] Student identity authentication result: The final student authentication result, including whether the student is a student, and detailed status (such as authentication passed, authentication failed).

[0089] In a feasible implementation, the user's student registration website access data on the trusted student registration website is collected through the user authorization interface or back-end log. The student registration website access data includes but is not limited to the user's login time, the page path visited, the submitted form field, the website user's student registration information, and the user's visited website page feature information. 、 One or more types of user biometric information.

[0090] Then, data analysis is performed on the student registration website access data: the extracted data is at least the website user's student registration information, such as name, ID number, and student registration number, and the extracted data is compared with the system's pre-stored student authentication verification rules or database to confirm consistency.

[0091] Then an authentication judgment is made: if the data is consistent and complies with the rules, a "student authentication successful" result is generated; if the data is missing, inconsistent or abnormal, a "student authentication failed" result is generated.

[0092] In a feasible implementation, the device environment information of the user terminal can be obtained first, and a device security risk detection can be performed based on the device environment information to obtain a security risk detection result. Based on the security risk detection result, the step of collecting the student website access data for the user terminal is executed.

[0093] For example, Figure 3 As shown, Figure 3 This is a schematic diagram of a collection authorization security verification scenario. Figure 3 The figure shows the security and authorization management steps in a student identity verification process, which mainly include collection authorization & environment security detection: ensuring that the user's device and permissions meet security requirements to ensure the reliability and security of subsequent operations. Guide users to visit the student status verification website: after the device and authorization checks are passed, guide users to open the student status verification page and start the student identity verification task.

[0094] Exemplary, collection authorization, specifically, guides users to authorize video recording permissions and information collection permissions. During the verification process, users may be required to record videos or upload materials. In order to obtain these resources, the system needs to obtain user authorization. Information collection permissions are used to record user behavior logs or collect student status verification results to ensure the integrity of the authentication process. Optional implementation method: When the user initiates a verification request, the system pops up a window to prompt authorization information. The prompt content includes a description of the purpose of video recording permissions and information collection permissions. After the user agrees, the system checks whether the permission status is normal.

[0095] Exemplarily, environmental security detection is to obtain the device environment information of the user terminal, and perform device security risk detection based on the device environment information to obtain security risk detection results; device security risk detection is to ensure that the device environment used by the user is safe and reliable, for example: detect whether there are potential threats to the device (such as being rooted or jailbroken), detect whether the device uses system proxy software, confirm whether the network environment is stable, whether the recommended network environment (such as a cellular network environment) is used, and ensure the integrity of data transmission. If the security risk detection result indicates that there is a risk in the device or environment, the student identity authentication process can be interrupted or the user can be guided to switch to a secure device. If the security risk detection result indicates that the environment is safe, the system will guide the user to the next stage of the student status authentication process, that is, open a trusted student status verification website for operation. By guiding the operation, the user's confusion is reduced and the authentication success rate is improved.

[0096] Through the above methods, the user's equipment and network security are ensured through permission collection and device environment detection, and unauthorized interference or data leakage during the authentication process is avoided. After confirming that the user's equipment and authorization status are normal, the system will continue to verify, improving the stability and accuracy of the student identity authentication process. Provide clear guidance operations to avoid authentication failures due to improper operation, and enhance the sense of security through necessary prompts.

[0097] In one or more embodiments of the present specification, the user terminal initiates a student identity authentication request for the target application, at which time the electronic device outputs a guided access operation instruction for the trusted student status website to the user terminal, monitors the guided access operation of the user terminal to access the trusted student status website based on the guided access operation instruction, collects the student status website access data for the user terminal, and determines the identity recognition and verification data for the user terminal to perform student identity authentication on the user terminal to obtain the student identity authentication result for the user terminal. By dividing the student identity authentication process into user guidance, operation monitoring, data collection and verification based on the user access to the trusted student status website, the high cost and instability problem when the traditional target application relies on the student status verification service interface is solved, and the interface dependence is bypassed by the user guiding the access to the trusted student status website, which effectively improves the flexibility and robustness of the system; and, by collecting the student status website access data of the user accessing the student status website and generating the identity recognition and verification data, the accuracy and security of the authentication are guaranteed. In addition, the solution takes into account the user experience, provides clear operation guidance, ensures the smooth verification process, and reduces the operating cost of the authentication process, which is suitable for student identity authentication needs in various scenarios.

[0098] See also Figure 4 , Figure 4This is a flow chart of data collection proposed in one or more embodiments of this specification. To specifically collect the student registration website access data for the user terminal and determine the identity verification data for the user terminal based on the student registration website access data, refer to the following implementation method.

[0099] S202: Recording a video of a user visiting a website for the guided access operation, and extracting a website access video frame from the video of the user visiting the website;

[0100] Video of user accessing the website: A dynamic video that records the user's operations in the process of accessing the student registration website, reflecting their actual operation behaviors, including mouse clicks, page browsing, information input, etc.

[0101] Visit website Video frames: Still image frames extracted from recorded videos. Videos can be decomposed into continuous sequences of pictures for subsequent analysis and processing.

[0102] In an illustrative manner, when a user visits a trusted student status website, the electronic device system starts the video recording function to record the user's website access video for the guided access operation, and records the user operation in real time. The website access video frame is extracted from the user's website access video, and irrelevant content video frames are removed, retaining the website access video frame with key information.

[0103] S204: performing identification processing on the video frame of the visited website to obtain identity identification verification data for the user terminal.

[0104] Identification processing: By adopting computer vision technology (such as OCR text recognition, QR code decoding, image content analysis, etc.), graphic code decoding technology, graphic analysis technology, etc., the information in the video frames of the visited website is extracted and analyzed to generate structured data.

[0105] Identity verification data: key information related to the user's identity extracted from the video frame of the website visited, such as name, student ID, school name, etc., for subsequent identity verification and matching. In some embodiments, the identity verification data may include website user student information, user visit website page feature information, and visiting user biometric information.

[0106] In a feasible implementation manner, the identification processing of the video frame of the visited website to obtain the identity verification data for the user terminal may refer to one or more fittings of the following methods:

[0107] 1. Perform website student status information recognition processing on the video frame of the visited website to obtain the website user student status information for the user terminal;

[0108] Website user student information: key user student information related to the user's identity generated by identifying the video frames of the website visited.

[0109] For example, extract video frames of visiting websites containing student status information, such as the "Student Status Verification Report" page, use OCR (optical character recognition) to recognize the text information in the page, and store the recognized student status information in a structured manner to obtain the website user's student status information.

[0110] 2. Performing website page feature recognition processing on the website access video frame to obtain feature information of the website page accessed by the user;

[0111] Website page feature recognition: Use computer vision technology to identify the unique page features of the school website in the video frame, such as page layout, color style, button location, etc.

[0112] Website page characteristic information: characteristic data reflecting whether the website visited by the user is a genuine and credible academic website.

[0113] In some embodiments, the subsequent combination of website page feature recognition and verification can prevent users from modifying student status web page data. The server will compare the extracted web page information, including frame structure, website address, title, sponsor, copyright and other website page feature information, to determine whether it is consistent with the trusted student status official website information retained by the system. In this way, some abnormal web pages can be preliminarily identified.

[0114] In an illustrative manner, website page feature information is extracted from the video frames of the visited website, such as page structure (HTML DOM structure), visual features of page elements (such as logo, specific button position). Subsequently, these website page feature information can be compared with the pre-stored page feature templates of the trusted student status website to verify whether the website visited by the user is an official certified page and detect whether there are abnormal page features (such as fake pages or phishing websites).

[0115] Optionally, the webpage verification method can also be carried out by carrying the MD5 signature of the current HTML template and the public key matching the private key used for the signature in the HTML student status page when the HTML template is sent from the server. When the HTML student status page is running on the client side, the value obtained by performing MD5 again on the HTML student status webpage is compared with the MD5 value generated by the server after the public key decryption signature to ensure that the HTML student status webpage as a whole has not been modified by the page.

[0116] 3. Perform user biometric identification processing on the video frame of the visited website to obtain biometric information of the visiting user.

[0117] User biometric identification: By analyzing the user's face, voice or other biometric features in the video frame of the website being visited, it is verified whether the operation is performed by the real user.

[0118] Access user biometric information: biometric data that reflects the user's identity, such as facial feature points, voice features, etc.

[0119] In an illustrative manner, the user's biometric features, such as the user's facial features and the user's voice information (if any), are extracted from the access video frame. The extracted biometric information of the access user is matched with the pre-stored user biometric data (such as a facial feature template) to verify the identity of the operating user and detect biometric anomalies, such as video fraud or disguise operations.

[0120] In this manual, the above method can solve the problems of unreliable data, forged pages, and false operations in traditional authentication methods. It is particularly suitable for scenarios with high requirements for authentication accuracy and security. In scenarios with high security requirements, student information recognition, page feature recognition, and biometric recognition can be combined to ensure the source of data and authenticity of operations.

[0121] See also Figure 5 , Figure 5 This is a flowchart of a website access video frame processing proposed by one or more embodiments of this specification. After performing the extraction of the website access video frame from the user's website access video, the following method can also be referred to:

[0122] S3002: Performing image anti-counterfeiting detection on the video frame of the visited website to obtain a video anti-counterfeiting detection result;

[0123] During the student identity authentication process, users may submit forged video frames, such as by taking screenshots, reshooting the screen, or modifying the image content to pretend to be real operations. Directly extracting student information using forged frames may lead to authentication failure or data fraud risks. Through image anti-counterfeiting detection, forged frame data is filtered to ensure that subsequent identity information extraction is based on real and credible user operation records, thereby improving the security of authentication and the credibility of data.

[0124] Image anti-counterfeiting detection: Use computer vision and image processing technology to analyze the authenticity of the video frames of the visited website and determine whether the frames are forged images. For example, detect whether there are screenshots, composite images, screen reshoots, etc.

[0125] Video anti-counterfeiting detection result: The result of the anti-counterfeiting detection indicates whether the video frame is generated by a real user visiting the student registration website, and may include categories such as "real", "forged", and "suspected forged".

[0126] like Figure 6 As shown, Figure 6 It is a scene diagram of video recording and academic information collection; schematically, the user screen image analysis is performed on the video frame of the visited website, and the image feature values ​​such as the optical characteristics, resolution, texture and format of the image are extracted. Forgery feature detection is performed based on image feature detection, including but not limited to screenshot feature detection: analyzing image features such as resolution and image edge clarity in the frame to determine whether it is a screenshot; remake feature detection: identifying features such as screen reflection and moiré fringes in the remake image; synthesis detection: by analyzing the compression characteristics and texture consistency of the image, detect whether there is content tampering or splicing. Each frame is given an anti-counterfeiting result label, such as "real", "forged", or "suspected forged", and the results are stored for subsequent screening.

[0127] S3004: Filtering the non-forged type of the visited website video frames based on the video anti-counterfeiting detection result;

[0128] Video anti-counterfeiting detection result: The anti-counterfeiting detection result generated in the previous step indicates the authenticity status of each frame.

[0129] Filter non-forged types: Based on the anti-counterfeiting detection results, filter out video frames that are judged to be forged and retain the real frames for subsequent processing.

[0130] In an illustrative manner, the anti-counterfeiting detection results are read, and the anti-counterfeiting result labels (such as "real" and "forged") of each frame are obtained, and the frame list is traversed to retain only the frames labeled "real". All frames labeled "forged" or "suspected forged" are eliminated, and the filtered frame list is returned for subsequent identity information extraction.

[0131] In this manual, forged frames are removed through anti-counterfeiting detection, and only real frames are processed later to ensure that the extracted identity information is from a reliable source. This prevents users from forging identities through screenshots or reshoots, reduces the risk of authentication fraud, and enhances authentication security. By screening, the processing burden of invalid frames is reduced, and the efficiency of the authentication process is improved. The system can efficiently filter forged frames, ensure the authenticity and security of identity authentication, and provide reliable protection for student status verification.

[0132] S3006: performing abnormal access operation identification on the website access video frame to obtain an abnormal access operation identification result;

[0133] Abnormal access operation identification: Use behavioral analysis and video frame content detection technology to identify whether users have abnormal behavior when accessing the student registration website, such as operations that do not comply with the guidance process, not logging into the website, or attempting illegal operations. Figure 6 The shown method dynamically detects abnormal user operations to identify abnormal access.

[0134] Abnormal access operation identification results: The system's identification results of user behavior are usually divided into "normal behavior" and "abnormal behavior". Abnormal behavior may include skipping login, forging page access, not completing operations according to instructions, etc.

[0135] Considering that the student status verification process requires users to strictly follow the instructions, some users may have abnormal operating behaviors, such as skipping key steps (for example, failing to complete the loading of the student status verification page), simulating or forging student status verification scenarios (for example, simulating access through scripts), interrupting the operation process or erroneous behaviors.

[0136] Based on this, the authenticity and integrity of the authentication process can be ensured by identifying abnormalities in user access behavior. If abnormal behavior is found, the user operation will be interrupted or redirected in a timely manner to ensure the security and accuracy of the authentication process.

[0137] Illustratively, the video frame of the website being visited is analyzed to determine whether the user operation steps are in line with expectations. For example, whether the correct student status verification page is visited, and whether the login operation is completed. By performing anomaly detection on the video frame of the website being visited, preset abnormal behaviors are detected, such as failure to log in to the student status website, skipping important verification steps, page access to non-student status websites, and page features that do not match the trusted page template (such as forged pages), and then the results of the preset abnormal behavior detection are marked as "normal" or "abnormal";

[0138] Optionally, page feature recognition technology (such as SIFT feature point matching) can be used to verify whether the page the user visits is a student status verification page. If the page features do not match the expected template, it is determined to be abnormal.

[0139] Optionally, a behavior model (such as a user path analysis model) is used to detect whether the user completes the steps according to the normal operation process. If the user path is significantly different from the expected path, it is marked as an abnormality.

[0140] S3008: If the abnormal access operation identification result is an abnormal behavior type, interrupt the user's website access video recording and / or output re-student identity authentication prompt information and execute the step of outputting access to the trusted student website guidance information to the user terminal.

[0141] Interrupt video recording of users visiting websites: After detecting abnormal behavior, the system immediately stops recording the user's video operations to avoid continuing to process invalid or forged data.

[0142] Re-authentication prompt for student identity: The system sends a prompt message to the user, informing him / her of abnormal operation and guiding him / her to restart the student status verification process.

[0143] Output guidance information for accessing the trusted student status website: Provide users with operational guidance for accessing the student status website again to ensure that they can complete the authentication process correctly.

[0144] Understandably, if there are abnormal behaviors during the user operation, continuing to record or process related data may lead to authentication failure or unnecessary waste of resources. By interrupting abnormal operations in time and redirecting users to complete the correct authentication process, not only can system resources be saved, but also the user experience can be optimized and the success rate of authentication can be increased.

[0145] Indicatively, if the abnormal access operation identification result is an abnormal behavior type, the system immediately triggers a response, interrupts the current video recording, and stops subsequent data analysis and processing. Alternatively, the system sends a re-student identity authentication prompt message to the user, an abnormal prompt message, and explains the abnormal reason, for example: "You have not completed the login operation, please restart the authentication." "Access page abnormality is detected, please confirm and re-operate." Then output a clear re-student identity authentication prompt message, and execute the step of outputting the guidance information for accessing the trusted student status website to the user terminal.

[0146] In this manual, abnormal behaviors in user operations are discovered and corrected in a timely manner to avoid forged or invalid data affecting the authentication results, thereby improving the robustness of the authentication process; interrupting the recording and processing of abnormal operations to save system computing resources; preventing malicious operations and data falsification through abnormal behavior detection and re-authentication guidance; abnormal prompts and redirection ensure that users understand the cause of the error and complete the verification according to the correct process to improve the success rate of authentication. The system can effectively detect abnormal behaviors, quickly respond and guide users to complete the correct student status verification process, and ensure the reliability and security of authentication.

[0147] See also Figure 7 , Figure 7 This is a flow chart of a student identity authentication process proposed in one or more embodiments of this specification. The student identity authentication of the user terminal based on the identity recognition and verification data is performed to obtain the student identity authentication result for the user terminal. One or more of the following methods may be used for fitting. Specifically:

[0148] S4002: determining the website user's student information from the identity recognition verification data based on the student information verification process, performing student information verification processing on the user terminal based on the website user's student information, and obtaining a student information verification result;

[0149] Student information verification process: extract student information (such as name, student ID number, school name, etc.) from the user's identity verification data, and compare it with the system's pre-stored data or rules to verify the authenticity of the student information.

[0150] Student information verification result: indicates the final result of the student information verification, which is usually "verification passed" or "verification failed". In some embodiments, the student information verification result includes a first student information verification result, a second student information verification result, a third student information verification result, and a fourth student information verification result;

[0151] In a feasible implementation manner, the student status information verification process of the user terminal based on the student status information of the website user is performed to obtain the student status information verification result, which can refer to one or more of the following fitting methods:

[0152] S2: determining the historical verification records corresponding to the same student user based on the student information of the website user, performing a verification frequency test based on the historical verification records to obtain a user verification frequency test result, performing a student information consistency test based on the historical verification records to obtain an information consistency test result, and obtaining a first student information verification result based on the user verification frequency test result and the information consistency test result;

[0153] In the verification of student information, the authenticity of the user's identity may not be fully determined by the current verification data alone. By introducing historical verification records, the system can further verify the user's student information from two dimensions: verification frequency and information consistency, thereby enhancing the depth and accuracy of authentication.

[0154] Verification frequency detection: detect abnormal verification behavior, such as high-frequency verification, which may indicate identity abuse or data falsification.

[0155] Information consistency check: Ensure that the user's academic information remains consistent during multiple verifications to eliminate the possibility of data tampering or identity fraud.

[0156] Comprehensive judgment of multi-dimensional results: By combining frequency and consistency results, a more comprehensive first-level student information verification result is generated.

[0157] Historical verification records: the user’s previous academic verification data in the system, including verification time, verification times, verification success or failure status, and corresponding academic information.

[0158] Verification frequency detection: Detect the frequency of users' verification records, such as submitting verification requests multiple times in a short period of time, which may indicate abnormal behavior.

[0159] Student information consistency check: Compare the student information submitted by the user in the historical verification records to determine whether they are consistent. If the information is inconsistent, it may indicate identity fraud or tampering.

[0160] First, the student information verification result: the final judgment based on the user's verification frequency and the student information consistency test results indicates whether the user's student information is credible.

[0161] In an illustrative manner, firstly, the historical verification records corresponding to the same student user are determined based on the website user's student information, including: querying the historical verification records in the system through the user's key fields (such as student ID number or ID number), and extracting all the verification data of the user, including verification time, submission information and verification results.

[0162] Then, we conduct verification frequency detection based on historical verification records, including analyzing the frequency of user verification records, for example: Short-term high frequency: the same user submits verification multiple times within 1 day. Long-term abnormality: the total number of verifications of a certain user far exceeds the average of other users.

[0163] Secondly, determine whether the frequency is abnormal to obtain a comprehensive frequency detection result, normal: the frequency is lower than the preset threshold, abnormal: the frequency exceeds the threshold.

[0164] Again, the consistency check of student information is performed based on historical verification records to obtain consistency check results, including extracting student information fields (such as name, student ID number, school) in the user's historical verification records, and comparing whether the information submitted each time in the historical data is completely consistent. The consistency check results are consistent: there is no difference in the information in all records; the consistency check results are inconsistent: some fields in the historical records have changed.

[0165] Finally, the frequency detection results and consistency detection results are combined to generate the first student information verification result through logical rules. If the frequency is normal and the information is consistent, the first student information verification result that passes the verification is generated. If the frequency is abnormal or the information is inconsistent, the first student information verification result that fails the verification is generated.

[0166] Indicatively, it is detected whether the current user has any illegal historical verification records and identifies risky users. The main rule of the S2 step is to identify whether the same identity has been verified multiple times using different student codes and school information. When designing the system, a historical verification data management unit will be designed accordingly to store the verification records and verification data of a certain user identity. During each verification frequency detection, the system will verify the user's identity information, query the historical verification data, and compare it. If it is identified that the user identity has undergone multiple identity verifications (that is, the verification frequency detection process), and the provided academic information is inconsistent (that is, the student information consistency detection process), then an inconsistent type of information consistency detection result is generated. Furthermore, the subsequent system will judge it as a risky user based on the inconsistent type of information consistency detection result and interrupt the student identity verification process.

[0167] S4: Based on the website user's student status information, an official verification service is used to verify the student status identity information to obtain a second student status information verification result;

[0168] In an illustrative manner, key student information, such as name, student ID number, and school name, is extracted from the identity verification data, and the extracted key student information is matched with the pre-stored data in the system (such as the student database) to check whether there are data inconsistencies, field missing, or data falsification. If the comparison results are consistent, the second student information verification result of "student identity information verification passed" is returned; if there is an inconsistency, the second student information verification result of "student identity information verification failed" is returned.

[0169] S6: performing a student graduation status check based on the website user's student status information to obtain a third student status information verification result;

[0170] The student graduation status detection can be understood as identifying whether the current user is enrolled. The enrollment information, year of admission, and length of study are extracted from the website user's student information. Based on the extracted information, it is calculated whether the current user has graduated to obtain the third student information verification result. For users who have already graduated, this identity verification can be directly rejected.

[0171] S8: Obtain student registration code identification information based on the student registration identification code in the website user student registration information, and perform student registration information consistency check on the website user student registration information and the student registration code identification information to obtain a fourth student registration information verification result.

[0172] Indicatively, based on the student identification code in the student information of the website user, the student identification code can be identified to obtain the student code identification information, and the website user student information and the student code identification information can be checked for consistency to obtain a fourth student information verification result. That is, a secondary verification is performed. The server will obtain the student information data from the website by accessing or crawling the student information code collected from the China Higher Education Student Information and Career Center; in some cases, the student information corresponding to the student information code may be in an anonymized form, and the data can be compared for consistency through fuzzy matching. The data involved in the comparison include user name, ID number, school, student number, enrollment date, education form, school system, and student status. In the case where at least one comparison fails, the student identity verification is directly rejected.

[0173] Then, by integrating at least one of the first student information verification result, the second student information verification result, the third student information verification result and the fourth student information verification result, the student information verification result can be obtained.

[0174] S4004: determining characteristic information of the website page visited by the user from the identity recognition verification data based on the student status webpage verification process, performing student status webpage verification processing based on the characteristic information of the website page visited by the user, and obtaining a student status webpage verification result;

[0175] Student status web page verification process: By analyzing the characteristic information of the website pages visited by the user, confirm whether the user has visited the real student status verification page and verify the compliance of the page operation.

[0176] Verification result of the student status webpage: the result of verifying the authenticity of the page and the operation behavior, usually "verification passed" or "verification failed".

[0177] In schematic form, page features (such as page structure, button layout, logo position, etc.) are extracted from the user's video frame to determine whether the page is a credible student status website, and the page features are matched with pre-stored student status web page templates to check whether the page layout and content are consistent. If the page features are completely consistent with expectations, the student status web page verification result of "student status web page verification passed" is returned; if the features are abnormal (such as a forged page or an erroneous access), the student status web page verification result of "student status web page verification failed" is returned.

[0178] By verifying the authenticity and compliance of the pages accessed by users, the authenticity of the operations is further guaranteed, which is suitable for preventing forged pages or abnormal behaviors.

[0179] In a feasible implementation, in the student identity authentication process, verifying whether the user has visited a genuine and credible student website is a key step. Forged pages or illegal redirections may cause the authentication results to be tampered with or invalid. Therefore, it is necessary to compare the characteristics of the page visited by the user with the characteristics of the trusted website page to ensure the authenticity and security of the access process. By verifying the page characteristics, it is verified whether the user is visiting the official student website to prevent phishing pages or forged pages from affecting the authentication results; specifically, the student page verification process based on the characteristic information of the user visiting the website page is performed to obtain the student page verification result, which can be referred to the following method:

[0180] A2: Obtaining the trusted website page feature information stored for the access to the trusted student status website;

[0181] Trusted website page feature information: pre-stored feature data of trusted student registration website pages, such as page layout (such as HTML DOM structure), page image elements (such as logo image features), page text content (such as title, prompt text), and interactive behavior of page elements (such as button click feedback);

[0182] Schematically, during the authentication process configuration phase, the system collects page feature information (such as HTML structure, image features (such as Logo or other static content), page dynamic features (such as AJAX requests, button behaviors)) from the trusted student registration website in advance, and then stores the extracted trusted website page feature information in a structured form in a database or folder;

[0183] A4: Performing page feature verification processing on the characteristic information of the website page visited by the user and the characteristic information of the page of the trusted website to obtain a student status webpage verification result;

[0184] Feature information of website pages visited by users: page features extracted from video frames or network data of user operations, such as page content, layout or dynamic behavior.

[0185] Page feature verification processing: Compare the features of the page the user visits with the features of the trusted page, detect whether the pages match, and confirm the authenticity of the page the user visits.

[0186] Verification result of student status web page: the result of page feature comparison, usually "verification passed" or "verification failed".

[0187] Schematically, feature information of website pages visited by users is extracted: page features are extracted from user access records or video frames, and the extracted features include static information (such as title, logo) and dynamic behaviors (such as button operations).

[0188] Then compare the feature information of the website page visited by the user with the feature information of the trusted website page: 1. Static feature comparison: verify whether the page title, logo features, element layout, etc. are consistent with the trusted page. 2. Dynamic feature comparison: verify whether the response behavior of the page is in line with expectations (such as loading the verification page after clicking a button).

[0189] Generate student status webpage verification result: If the user page features are completely consistent with the trusted page, a student status webpage verification result of passing the verification is generated. If there are differences in features (such as forged pages, content tampering), a student status webpage verification result of failing the verification is generated.

[0190] Indicatively, feature verification is used to ensure that the page visited by the user is a genuine and credible student registration website, and dynamic behavior verification is used to detect abnormal operations (such as button behavior on a forged page). This can effectively verify the authenticity and legitimacy of the page visited by the user, providing comprehensive and reliable technical support for student registration web page verification.

[0191] S4006: Determine the biometric information of the accessing user from the identity recognition and verification data based on the real user verification process, perform real user verification based on the user biometric information, and obtain a user identity verification result;

[0192] In identity authentication, it may be difficult to fully confirm the authenticity of the user's identity only through student information and page feature verification. For example, student information may be used by others, and page feature verification cannot rule out the possibility of forged operations. Therefore, introducing user biometric information (such as facial features or behavioral features) for real user verification is an important supplement to the identity authentication process. Through biometric verification, it is confirmed that the operation process is indeed completed by the target user; illegal behaviors such as substitution operation or video forgery are excluded; and through a multi-dimensional verification mechanism, the risk of fraud in identity authentication is reduced.

[0193] Real user verification process: Based on the user's biometric information (such as face, voice, and behavioral characteristics), verify whether the operating user is the target user.

[0194] Access to user biometric information: user biometric data collected during the operation, such as facial feature points (such as the geometric relationship between eyes, nose, and mouth), sound features (such as frequency, speech rhythm), and behavioral features (such as mouse clicks and touch screen sliding patterns).

[0195] User identity verification result: The result after verifying the user's biometrics, usually "verification passed" or "verification failed".

[0196] Schematically, user biometric information is extracted from identity verification data, and the collected biometric data is denoised and standardized to be converted into a structured user biometric vector.

[0197] The user's biometric vector is then compared with the target user's biometric template. The system can call the biometric template saved when the target user registered and calculate the similarity through the feature matching algorithm. The verification rule can be to set a similarity threshold. If the similarity is higher than the threshold, the verification is passed; otherwise, the verification fails.

[0198] Then the user identity verification result is generated: if the comparison result meets the preset rules, "Verification passed" is returned. If the comparison fails, "Verification failed" is returned and the user is prompted to re-operate.

[0199] Through the above method, real user verification is achieved, ensuring that the operation process is completed by the target user, preventing impersonation or forgery of operations, enhancing data credibility, and improving authentication security. Automatic collection and comparison of biometrics can optimize user experience, support multimodal biometric verification such as face, voice, and behavior, and adapt to different devices and scenarios. The system can effectively verify the user's true identity and provide higher security and accuracy for the student authentication process.

[0200] In a feasible implementation manner, the real user verification process based on the user biometric information is performed to obtain a user identity verification result, which can refer to the following method:

[0201] B2: Acquire the student facial image and the user facial image in the user biometric information;

[0202] B4: Perform facial matching on the student facial image and the user facial image to obtain a user identity verification result;

[0203] Exemplarily, facial matching can be a face comparison to see if it is the real person. The student status page collects information including the user's facial photo, name, and ID number. By extracting the facial photo and combining it with related facial comparison services, it can be verified whether the current identity information and photo belong to the same person. If they are not the same person, the student identity verification can be directly rejected.

[0204] S4008: Based on at least one of the student status information verification result, the student status webpage verification result and the user identity verification result, obtain a student identity authentication result for the user terminal.

[0205] Single-dimensional verification methods (such as student information verification) may have limitations, such as data forgery, page tampering, or user identity fraud. By combining multiple verification results (such as student information verification, student webpage verification, and user identity verification), the system can verify user identities in multiple dimensions to improve the security and accuracy of student identity authentication. Combining multiple verification results provides a more comprehensive authentication judgment, reduces the possibility of misjudgment in a single verification, and enhances authentication accuracy. In the absence of certain verification results (such as biometric verification), the system can still generate authentication conclusions based on available results, reduce fraud risks through multi-dimensional authentication, and ensure the reliability of the authentication process.

[0206] In a feasible implementation manner, if at least one of the student status information verification result, the student status webpage verification result, and the user identity verification result is authenticated, a student identity authentication result of authentication passing is generated; otherwise, if at least one of the student status information verification result, the student status webpage verification result, and the user identity verification result is authenticated unsuccessfully, a student identity authentication result of authentication unsuccessfully is generated.

[0207] like Figure 8 As shown, Figure 8 This is a schematic diagram of the scenario of academic credentials verification. Specifically:

[0208] 1. Combine multiple OCR results, extract OCR data from user video frames multiple times to ensure data integrity and accuracy, and integrate OCR data extracted from different frames to obtain student website access data;

[0209] 2. Extract identity verification data from the OCR result - student registration website access data;

[0210] 3. Perform multi-dimensional student identity verification and obtain student identity authentication results:

[0211] 1) First, identify the basic elements of the page frame and compare them with the China Higher Education Student Information and Career Center page to verify whether the page accessed by the user is a credible China Higher Education Student Information and Career Center page. That is, execute S4004: determine the characteristic information of the website page accessed by the user from the identity recognition and verification data based on the student status webpage verification process, perform student status webpage verification based on the characteristic information of the website page accessed by the user, and obtain the student status webpage verification result;

[0212] 2) Verify the student name and student ID number extracted by OCR, and verify whether the user student information extracted by OCR is consistent with the pre-stored data in the system. That is, execute S4002: determine the website user student information from the identity verification data based on the student information verification process, perform student information verification processing on the user terminal based on the website user student information, and obtain the student information verification result;

[0213] 3) Identify whether the extracted student status code is used under different identities; that is, execute S2: determine the historical verification record corresponding to the same student status user based on the student status information of the website user, perform a verification frequency test based on the historical verification record to obtain a user verification frequency test result, perform a student status information consistency test based on the historical verification record to obtain an information consistency test result, and obtain a first student status information verification result based on the user verification frequency test result and the information consistency test result;

[0214] 4) Check the student status and identity legitimacy, that is, determine whether the current identity is enrolled;

[0215] 5) Determine whether you have graduated based on the year of admission and the length of study;

[0216] That is, executing S6: performing a student graduation status detection based on the website user's student status information to obtain a third student status information verification result;

[0217] 6) Extracting the student user's photo for face verification; that is, executing S4006: determining the access user's biometric information from the identity verification data based on the real user verification process, performing real user verification processing based on the user's biometric information, and obtaining a user identity verification result;

[0218] 7) Extract school information and compare it with education network crawler data;

[0219] In this manual, the student identity is fully verified by combining student information, web page features and user biometrics, supporting the adjustment of weights or result judgment logic according to scenarios and data conditions, improving authentication security, multi-dimensional verification to reduce single-point verification errors or fraud risks, enhancing the robustness of the authentication system, and being able to output reliable authentication conclusions even when some results are missing, optimizing user experience, automatic comprehensive verification, reducing repeated operations, and improving authentication efficiency. The system can generate student identity authentication results based on multi-dimensional verification results, providing strong support for identity authentication scenarios with high security requirements;

[0220] The following will be combined Fig. 9 , the user identity authentication device provided in this specification is introduced in detail. It should be noted that, Fig. 9 The user identity authentication device shown is used to execute this instruction Figures 1 to 8 For the convenience of explanation, only the parts related to this specification are shown. For the specific technical details not disclosed, please refer to this specification. Figures 1 to 8 The embodiment shown.

[0221] See also Fig. 9 , which shows a schematic diagram of the structure of the user identity authentication device of this specification. The user identity authentication device 1 can be implemented as all or part of the user electronic device through software, hardware or a combination of both. According to some embodiments, the user identity authentication device 1 includes a request authentication module 11, an operation monitoring module 12 and a student authentication module 13, which are specifically used to:

[0222] The request authentication module 11 is used to respond to the student identity authentication request of the user terminal for the target application and output a guide access operation instruction for the trusted student status website to the user terminal;

[0223] An operation monitoring module 12, used for monitoring the guided access operation of the user terminal to the trusted student status website based on the guided access operation instruction;

[0224] The student authentication module 13 is used to collect student registration website access data for the user terminal, determine identity recognition and verification data for the user terminal based on the student registration website access data, perform student identity authentication on the user terminal based on the identity recognition and verification data, and obtain a student identity authentication result for the user terminal.

[0225] The collecting of student registration website access data for the user terminal and determining identity verification data for the user terminal based on the student registration website access data includes:

[0226] Recording a video of a user visiting a website for the guided access operation, and extracting a website access video frame from the video of the user visiting the website;

[0227] The video frame of the visited website is identified and processed to obtain identity verification data for the user terminal.

[0228] In a feasible implementation manner, the step of performing identification processing on the video frame of the visited website to obtain identity verification data for the user terminal includes:

[0229] Performing website student status information identification processing on the video frame of the visited website to obtain website user student status information for the user terminal; and / or,

[0230] Performing website page feature recognition processing on the website access video frame to obtain feature information of the website page accessed by the user; and / or,

[0231] The user biometric feature identification process is performed on the video frame of the visited website to obtain the visiting user biometric feature information.

[0232] In a feasible implementation manner, after extracting the website visiting video frame from the website visiting video of the user, the method further includes:

[0233] Performing image anti-counterfeiting detection on the video frames of the visited website to obtain video anti-counterfeiting detection results, and screening the video frames of the visited website that are not forged based on the video anti-counterfeiting detection results; and / or,

[0234] Abnormal access operation identification is performed on the website access video frame to obtain an abnormal access operation identification result. If the abnormal access operation identification result is an abnormal behavior type, the user's website access video recording is interrupted and / or a student identity re-authentication prompt message is output, and the step of outputting guidance information for accessing a trusted student website to the user terminal is executed.

[0235] In a feasible implementation manner, performing student identity authentication on the user terminal based on the identity recognition verification data to obtain a student identity authentication result for the user terminal includes:

[0236] Determine the website user's student information from the identity verification data based on the student information verification process, perform student information verification processing on the user terminal based on the website user's student information, and obtain a student information verification result; and / or,

[0237] Determine characteristic information of the website page visited by the user from the identity recognition verification data based on the student status webpage verification process, perform student status webpage verification processing based on the characteristic information of the website page visited by the user, and obtain a student status webpage verification result; and / or,

[0238] Determine the biometric information of the accessing user from the identity verification data based on the real user verification process, perform real user verification processing based on the user biometric information, and obtain a user identity verification result;

[0239] Based on at least one of the student status information verification result, the student status webpage verification result and the user identity verification result, a student identity authentication result for the user terminal is obtained.

[0240] In a feasible implementation manner, the performing of student status webpage verification processing based on the characteristic information of the website page visited by the user to obtain the student status webpage verification result includes: obtaining the trusted website page characteristic information saved for the visit to the trusted student status website, performing page characteristic verification processing on the characteristic information of the website page visited by the user and the characteristic information of the trusted website page to obtain the student status webpage verification result;

[0241] The real user verification process based on the user biometric information to obtain the user identity verification result includes: obtaining a student facial image and a user facial image in the user biometric information, and performing facial matching on the student facial image and the user facial image to obtain the user identity verification result;

[0242] The student information verification process is performed on the user terminal based on the student information of the website user to obtain a student information verification result, including: determining the historical verification record corresponding to the same student user based on the student information of the website user, performing a verification frequency test based on the historical verification record to obtain a user verification frequency test result, performing a student information consistency test based on the historical verification record to obtain an information consistency test result, and obtaining a first student information verification result based on the user verification frequency test result and the information consistency test result; and / or, based on the student information of the website user, using an official verification service to verify the student identity information to obtain a second student information verification result; and / or, based on the student information of the website user, performing a student graduation status test to obtain a third student information verification result; obtaining student code identification information based on the student identification code in the student information of the website user, and performing a student information consistency check on the website user student information and the student code identification information to obtain a fourth student information verification result.

[0243] In a feasible embodiment, the device is also used for:

[0244] Acquiring device environment information of the user terminal, performing device security risk detection based on the device environment information to obtain a security risk detection result, and executing the step of collecting student status website access data for the user terminal based on the security risk detection result; and / or,

[0245] Detect the student status verification service status of the trusted student status website service interface corresponding to the target application. If the student status verification service status is an abnormal service status, execute the step of outputting guidance information for accessing the trusted student status website to the user terminal. It should be noted that when the user identity authentication device provided in the above embodiment executes the user identity authentication method, only the division of the above functional modules is used as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. In addition, the user identity authentication device provided in the above embodiment belongs to the same concept as the user identity authentication method embodiment. The implementation process thereof is detailed in the method embodiment, which will not be repeated here.

[0246] The above serial numbers in this specification are for description only and do not represent the advantages or disadvantages of the embodiments.

[0247] The present specification also provides a computer storage medium, which can store multiple instructions, which are suitable for being loaded and executed by a processor as described above. Figures 1 to 8 The user identity authentication method of the embodiment shown in the figure can be specifically executed by referring to Figures 1 to 8 The specific description of the illustrated embodiment will not be repeated here.

[0248] The present specification also provides a computer program product, which stores at least one instruction, and the at least one instruction is loaded and executed by the processor as described above. Figures 1 to 8 The user identity authentication method of the embodiment shown in the figure can be specifically executed by referring to Figures 1 to 8 The specific description of the illustrated embodiment will not be repeated here.

[0249] Please refer to Fig.10 , is a block diagram of a structure of an electronic device provided in an embodiment of this specification. The electronic device in this specification may include one or more of the following components: a processor 1010, a memory 1020, an input device 1030, an output device 1040, and a bus 1050. The processor 1010, the memory 1020, the input device 1030, and the output device 1040 may be connected via a bus 1050.

[0250] The processor 1010 may include one or more processing cores. The processor 1010 uses various interfaces and lines to connect various parts of the entire electronic device, and executes various functions of the electronic device and processes data by running or executing instructions, programs, code sets or instruction sets stored in the memory 1020, and calling data stored in the memory 1020. Optionally, the processor 1010 can be implemented in at least one hardware form of digital signal processing (DSP), field-programmable gate array (FPGA), and programmable logic array (PLA). The processor 1010 can integrate one or a combination of a central processing unit (CPU), a graphics processing unit (GPU), and a modem. Among them, the CPU mainly processes the operating system, user interface, and application programs; the GPU is responsible for rendering and drawing display content; and the modem is used to process wireless communications. It can be understood that the above-mentioned modem may not be integrated into the processor 1010, but may be implemented separately through a communication chip.

[0251] The memory 1020 may include a random access memory (RAM) or a read-only memory (ROM). Optionally, the memory 1020 includes a non-transitory computer-readable storage medium. The memory 1020 may be used to store instructions, programs, codes, code sets, or instruction sets.

[0252] The input device 1030 is used to receive input instructions or data, and the input device 1030 includes but is not limited to a keyboard, a mouse, a camera, a microphone or a touch device. The output device 1040 is used to output instructions or data, and the output device 1040 includes but is not limited to a display device and a speaker. In the embodiment of this specification, the input device 1030 can be a temperature sensor for obtaining the operating temperature of the electronic device. The output device 1040 can be a speaker for outputting audio signals.

[0253] In addition, those skilled in the art will appreciate that the structure of the electronic device shown in the above drawings does not constitute a limitation on the electronic device, and the electronic device may include more or fewer components than shown, or combine certain components, or arrange the components differently. For example, the electronic device also includes a radio frequency circuit, an input unit, a sensor, an audio circuit, a wireless fidelity (WIFI) module, a power supply, a Bluetooth module and other components, which will not be described in detail here.

[0254] In the embodiments of this specification, the execution subject of each step may be the electronic device described above. Optionally, the execution subject of each step is the operating system of the electronic device. The operating system may be an Android system, an IOS system, or other operating systems, which is not limited in the embodiments of this specification.

[0255] exist Fig.10 In the electronic device, the processor 1010 can be used to call the program stored in the memory 1020 and execute it to implement the user identity authentication method as described in the various method embodiments of this specification.

[0256] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing related hardware through a computer program, and the program can be stored in a computer-readable storage medium, and when the program is executed, it can include the processes of the embodiments of the above-mentioned methods. The storage medium can be a disk, an optical disk, a read-only storage memory, or a random access memory, etc.

[0257] It should be noted that the information (including but not limited to user device information, user personal information, etc.), data (including but not limited to data used for analysis, stored data, displayed data, etc.) and signals involved in the embodiments of this specification are all authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of relevant countries and regions. For example, the student registration website access data and identity verification data involved in this specification are all obtained with full authorization.

[0258] The above disclosure is only the preferred embodiment of this specification, which certainly cannot be used to limit the scope of rights of this specification. Therefore, equivalent changes made according to the claims of this specification are still within the scope covered by this specification.

Claims

1. A user identity authentication method, the method comprising: In response to a student identity authentication request from a user terminal for a target application, outputting a guided access operation instruction for a trusted student status website to the user terminal; Monitoring the guided access operation of the user terminal to the trusted student status website based on the guided access operation instruction; Collect student registration website access data for the user terminal, determine identity recognition and verification data for the user terminal based on the student registration website access data, perform student identity authentication on the user terminal based on the identity recognition and verification data, and obtain a student identity authentication result for the user terminal.

2. According to the method of claim 1, the collecting of student registration website access data for the user terminal and determining identity verification data for the user terminal based on the student registration website access data comprises: Recording a video of a user visiting a website for the guided access operation, and extracting a website access video frame from the video of the user visiting the website; The video frame of the visited website is identified and processed to obtain identity verification data for the user terminal.

3. According to the method of claim 2, the step of performing identification processing on the video frame of the visited website to obtain identity verification data for the user terminal comprises: Performing website student status information recognition processing on the video frame of the visited website to obtain website user student status information for the user terminal; and / or, Performing website page feature recognition processing on the website access video frame to obtain feature information of the website page accessed by the user; and / or, The user biometric feature recognition process is performed on the video frame of the visited website to obtain the visiting user biometric feature information.

4. The method according to claim 2, after extracting the website visiting video frame from the user's website visiting video, further comprises: Performing image anti-counterfeiting detection on the video frames of the visited website to obtain video anti-counterfeiting detection results, and screening the non-forged types of the video frames of the visited website based on the video anti-counterfeiting detection results; and / or, Abnormal access operation identification is performed on the website access video frame to obtain an abnormal access operation identification result. If the abnormal access operation identification result is an abnormal behavior type, the user's website access video recording is interrupted and / or a student identity re-authentication prompt message is output, and the step of outputting guidance information for accessing a trusted student website to the user terminal is executed.

5. According to the method of claim 1, the step of performing student identity authentication on the user terminal based on the identity verification data to obtain a student identity authentication result for the user terminal comprises: Determine the website user's student information from the identity verification data based on the student information verification process, perform student information verification processing on the user terminal based on the website user's student information, and obtain a student information verification result; and / or, Determine characteristic information of the website page visited by the user from the identity recognition verification data based on the student status webpage verification process, perform student status webpage verification processing based on the characteristic information of the website page visited by the user, and obtain a student status webpage verification result; and / or, Determine the biometric information of the accessing user from the identity verification data based on the real user verification process, perform real user verification processing based on the user biometric information, and obtain a user identity verification result; Based on at least one of the student status information verification result, the student status webpage verification result and the user identity verification result, a student identity authentication result for the user terminal is obtained.

6. The method according to claim 5, The student status webpage verification process is performed based on the characteristic information of the website page visited by the user to obtain the student status webpage verification result, including: Acquire the trusted website page feature information saved for the trusted student status website visited, and perform page feature verification processing on the user's website page feature information and the trusted website page feature information to obtain the student status webpage verification result; The real user verification process based on the user biometric information to obtain the user identity verification result includes: obtaining a student facial image and a user facial image in the user biometric information, and performing facial matching on the student facial image and the user facial image to obtain the user identity verification result; The student information verification process is performed on the user terminal based on the student information of the website user to obtain a student information verification result, including: determining the historical verification record corresponding to the same student user based on the student information of the website user, performing a verification frequency test based on the historical verification record to obtain a user verification frequency test result, performing a student information consistency test based on the historical verification record to obtain an information consistency test result, and obtaining a first student information verification result based on the user verification frequency test result and the information consistency test result; and / or, based on the student information of the website user, using an official verification service to verify the student identity information to obtain a second student information verification result; and / or, based on the student information of the website user, performing a student graduation status test to obtain a third student information verification result; obtaining student code identification information based on the student identification code in the student information of the website user, and performing a student information consistency check on the website user student information and the student code identification information to obtain a fourth student information verification result.

7. The method according to claim 1, further comprising: Acquire device environment information of the user terminal, perform device security risk detection based on the device environment information to obtain a security risk detection result, and perform the step of collecting student status website access data for the user terminal based on the security risk detection result; and / or, The student status verification service status of the trusted student status website service interface corresponding to the target application is detected. If the student status verification service status is an abnormal service status, the step of outputting the guidance information for accessing the trusted student status website to the user terminal is executed.

8. A user identity authentication device, the device comprising: The request authentication module is used to respond to the student identity authentication request of the user terminal for the target application and output a guided access operation instruction for the trusted student status website to the user terminal; An operation monitoring module, used for monitoring the guided access operation of the user terminal to the trusted student status website based on the guided access operation instruction; The student authentication module is used to collect student registration website access data for the user terminal, determine identity recognition and verification data for the user terminal based on the student registration website access data, perform student identity authentication on the user terminal based on the identity recognition and verification data, and obtain a student identity authentication result for the user terminal.

9. A computer storage medium storing a plurality of instructions, wherein the instructions are suitable for being loaded by a processor and executing the method steps according to any one of claims 1 to 7.

10. A computer program product, wherein the computer program product stores at least one instruction, wherein the at least one instruction is loaded by a processor and executes the method steps according to any one of claims 1 to 7.

11. An electronic device, comprising: A processor and a memory; wherein the memory stores a computer program, and the computer program is suitable for being loaded by the processor and executing the method steps as claimed in any one of claims 1 to 7.

Images