Identity authentication method based on multiple recognition

Abstract

The invention relates to the technical field of identity authentication, and particularly discloses an identity authentication method based on multiple recognition, which comprises the following steps of: S1, collecting various identity information types of a user, and combining the identity information types to form a plurality of identity authentication combinations; setting an information strength grade for each combination so as to form an information strength set; acquiring all applications on a mobile device of a user for identity authentication, and setting security strength levels to form a security strength level table; s2, real-time and historical position information of a user is obtained based on the mobile device of the user; establishing a virtual coordinate system, and generating an action track route of the user by connecting the historical position coordinates; all real-time position coordinates of the user are collected in a collection period, and coordinate points are connected according to a time sequence to form a real-time action route of the user; and S3, calculating to obtain an authentication intensity index, determining an optimal identity authentication combination, and using the combination to complete a multi-identity authentication process.

Description

Technical Field

[0001] The present invention relates to the technical field of identity authentication, and in particular to an identity authentication method based on multiple identifications. Background Art

[0002] Identity authentication is a process of confirming the claims of a user or entity by verifying the credentials and attributes provided by the user to determine the authenticity and legitimacy of the claimed identity. There are many types of identity authentication methods, including multi-factor authentication.

[0003] Multi-factor authentication is a security measure that improves the security of identity verification by adding multiple verification steps during the identity verification process; it increases the difficulty for attackers to gain access to an account, and even if one of the factors is compromised, the other factors can still protect the account security.

[0004] In the current technological environment, users often need to go through complex multi-identity authentication when using important functions. Although this security measure improves the security of the account, it may cause users to spend a lot of time to complete the authentication process in some emergency situations. For example, in an emergency, when important files need to be accessed immediately or key operations need to be performed, users may miss the opportunity because they cannot quickly pass the multi-identity authentication. Therefore, how to improve the efficiency of multi-identity authentication while ensuring security has become a problem that needs to be solved urgently. Summary of the invention

[0005] The purpose of the present invention is to provide an identity authentication method based on multiple identifications to solve the above technical problems.

[0006] The purpose of the present invention can be achieved through the following technical solutions:

[0007] An identity authentication method based on multiple identifications comprises the following steps:

[0008] Step S1: obtaining the user's identity information type, the identity information type including facial information, fingerprint information and mobile phone number; combining the identity information types to obtain a number of identity authentication combinations, and presetting the information strength level for each identity authentication combination to obtain an information strength set;

[0009] Obtain an authentication device, which is a mobile device used by a user for identity authentication; obtain all applications on the authentication device, and preset security strength levels for all applications to obtain a security strength grading table;

[0010] Step S2: obtaining the user's location information based on the authentication device, wherein the location information includes real-time location coordinates and historical location coordinates, and the historical location data is all the user's historical location coordinates;

[0011] Establish a virtual coordinate system according to the map, place the historical position coordinates in the virtual coordinate system, and on the virtual coordinate system; obtain the acquisition time of all the position coordinates in the historical position coordinates, and connect all the position coordinates in the historical position coordinates in sequence according to the acquisition time to obtain the action trajectory route;

[0012] Step S3: setting a collection period, acquiring all real-time position coordinates within the collection period, and sequentially connecting the real-time position coordinates according to the acquisition time of the real-time position coordinates to obtain a real-time action route;

[0013] When a user enters an application and performs multiple identity authentications, the information strength index and security strength index at that time are obtained according to the information strength set and the security strength grading table; the authentication strength index at that time is obtained according to the real-time action route, action trajectory route and security strength index; the optimal identity authentication combination is obtained according to the authentication strength index and the security strength index, and the identity authentication combination is used for multiple identity authentications.

[0014] As a further solution of the present invention: the process of combining various identity information types includes:

[0015] The number of identity information types in the identity authentication combination is recorded as the number of types within the group, and the minimum number of types within the group of the identity authentication combination is set to 2, and the maximum number of types within the group is set to m. max , and m max ≥2; when the number of types in the group is 2, all identity information types are combined in pairs to obtain several identity authentication combinations; when the number of types in the group is 3, all identity information types are combined in sequence every three to obtain several identity authentication combinations; and so on.

[0016] As a further solution of the present invention, the process of presetting the information strength level for each identity authentication combination includes:

[0017] Set the information strength level of each identity information type, and the information strength levels are A1, A2, ..., An from high to low, where n is the total number of identity information types; if there is an identity authentication combination with m types in the group, and the information strength levels of the identity information types in the identity authentication combination are S1, S2, ..., Sm, respectively, the information strength level in the identity authentication combination is And i∈[1,m] and i is a positive integer.

[0018] As a further solution of the present invention: the setting range of the acquisition period is [0.5h, 4h].

[0019] As a further solution of the present invention: the process of obtaining the information strength index and the security strength index includes:

[0020] Set the information strength coefficient J, and J ≥ 0, and set the strength value k of the information strength level 1 , when the information intensity level is A1, k 1 =1, when the information strength level is A2, k 1 =2, and so on; then the information intensity index of each information intensity level is Jk 1 ;

[0021] Set a security strength coefficient K, and 0≤K<J, the information strength levels are B1, B2, ..., Bp from high to low, where p is the total number of applications; and set the security strength value k of the security strength level 2 , when the security strength level is B1, k 2 =1, when the security strength level is B2, k 2 =2, and so on; then the security strength index of each security strength level is Kk 2 .

[0022] As a further solution of the present invention: the process of obtaining the authentication strength index includes:

[0023] In the virtual coordinate system, obtain the expression L1 corresponding to the real-time action route, and obtain the expression L2 corresponding to the action trajectory route; obtain the number of solutions when L1=L2, recorded as Sn; then obtain the authentication strength index CSI=μ*Sn+Kk 2 , where μ is a preset correction coefficient and 0<μ<1.

[0024] As a further solution of the present invention: the process of obtaining the optimal identity authentication combination includes:

[0025] According to the information strength index of each identity authentication combination, the information strength index set {(Jk 1 ) 1 , (Jk 1 ) 2 , ..., (Jk 1 ) N}, where (Jk 1 ) N represents the information strength index of the Nth identity authentication combination, where N is the total number of identity authentication combinations; according to the information strength index set, the difference value set W = {|(Jk 1 ) 1 -CSI|,|(Jk 1 ) 2 -CSI|,...,|(Jk 1) N -CSI|}; select the minimum value of the difference set, recorded as Min(W), obtain the identity authentication combination corresponding to Min(W), and record it as the optimal identity authentication combination.

[0026] As a further solution of the present invention: the process of obtaining the optimal identity authentication combination further includes:

[0027] Obtain historical authentication data, the historical authentication data including the time consumed when each identity information type is used alone for identity authentication; obtain the average consumption time of each identity information type according to the historical authentication data; if there are m identity information types in the identity authentication combination, and the average consumption time of the m identity information types is T1, T2, ..., Tm respectively, then obtain the consumption time of the identity authentication combination

[0028] If there are several identical minimum values ​​in the difference set, the consumption time of the identity authentication combination corresponding to each minimum value is obtained, and the identity authentication combination with the shortest consumption time is selected and recorded as the best identity authentication combination.

[0029] Beneficial effects of the present invention:

[0030] The present invention adjusts the authentication strength according to the user's real-time location and historical action trajectory. This method can dynamically adapt to the user's behavior pattern and environmental changes; this adaptive ability makes the identity authentication process more flexible and reliable; by presetting different security strength levels for different applications and determining the best authentication combination based on the user's information strength set and security strength classification table, personalized security protection can be provided for each user; this ensures that sufficient security can be provided even in high-risk environments; using the analysis of historical location data and real-time location coordinates, abnormal behavior can be identified more accurately, thereby reducing false positives and missed positives; the present invention is seamlessly integrated with existing mobile devices and applications, without the need for large-scale infrastructure modifications; at the same time, with the development of technology and the emergence of new identity authentication technologies, it is also easy to upgrade and expand. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The present invention will be further described below in conjunction with the accompanying drawings.

[0032] Figure 1 It is a flow chart of an identity authentication method based on multiple identifications of the present invention. DETAILED DESCRIPTION

[0033] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0034] See also Figure 1 As shown, the present invention is an identity authentication method based on multiple identifications, comprising the following steps:

[0035] Step S1: obtaining the user's identity information type, the identity information type including facial information, fingerprint information and mobile phone number; combining the identity information types to obtain a number of identity authentication combinations, and presetting the information strength level for each identity authentication combination to obtain an information strength set;

[0036] Obtain an authentication device, which is a mobile device used by a user for identity authentication; obtain all applications on the authentication device, and preset security strength levels for all applications to obtain a security strength grading table;

[0037] It can be understood that, first, various types of identity information of the user are collected, including facial information, fingerprint information and mobile phone number; all types of identity information are combined into multiple different authentication combinations; each combination is preset with an information strength level, thus forming an information strength set; the principle of this step is based on the combination of multiple biometric features and technical identifiers to increase the accuracy and security of identity authentication; next, the mobile device used by the user for identity authentication is obtained, and all applications running on the device are analyzed; a security strength level is preset for each application, thus forming a security strength grading table; the principle of this step is to evaluate the security of devices and applications, and ensure that the tools and environment used in the authentication process are safe and reliable;

[0038] As a preferred embodiment of the present invention, the process of combining various identity information types includes:

[0039] The number of identity information types in the identity authentication combination is recorded as the number of types within the group, and the minimum number of types within the group of the identity authentication combination is set to 2, and the maximum number of types within the group is set to m. max , and m max ≥2; when the number of types in the group is 2, all identity information types are combined in pairs to obtain several identity authentication combinations; when the number of types in the group is 3, all identity information types are combined in sequence every three to obtain several identity authentication combinations; and so on;

[0040] It is understood that each identity authentication combination contains at least two different types of identity information and can contain up to m max When the number of types in a group is 2, all identity information types are combined in pairs; for example, if there are three types of identity information, namely facial information, fingerprint information and mobile phone number, the results of the two-by-two combinations will be: a combination of facial information and fingerprint information, a combination of facial information and mobile phone number, and a combination of fingerprint information and mobile phone number; this will result in several identity authentication combinations; when the number of types in a group increases to 3, all identity information types are combined in sequence every three; using the example of the above three types of identity information, there is only one possible combination of three in a group, namely the combination of facial information, fingerprint information and mobile phone number; if there are more types of identity information, such as voice information, there will be more possible combinations; for more types of identity information, continue to combine according to the above rules; add one identity information type to the combination each time until the maximum number of types in the group, m, is reached max ; Through the above steps, multiple different identity authentication combinations can be obtained, which contain different quantities and types of identity information; such a combination method is intended to provide a variety of verification methods to adapt to different security needs and scenarios;

[0041] As a preferred embodiment of the present invention, the process of presetting the information strength level for each identity authentication combination includes:

[0042] Set the information strength level of each identity information type, and the information strength levels are A1, A2, ..., An from high to low, where n is the total number of identity information types; if there is an identity authentication combination with m types in the group, and the information strength levels of the identity information types in the identity authentication combination are S1, S2, ..., Sm, respectively, the information strength level in the identity authentication combination is And i∈[1,m] and i is a positive integer;

[0043] It is understandable that after obtaining several identity authentication combinations, an information strength level is preset for each combination. This level reflects the security and reliability of the combination; for example, a combination containing more identity information types may have a higher information strength level; all identity authentication combinations and their corresponding information strength levels are aggregated to form an information strength set; this set can be used to evaluate and select the most suitable identity authentication method for the current situation; in the actual identity authentication process, the appropriate identity authentication combination can be selected from the information strength set for verification as needed. This helps to improve the accuracy and security of identity authentication;

[0044] Step S2: obtaining the user's location information based on the authentication device, wherein the location information includes real-time location coordinates and historical location coordinates, and the historical location data is all the user's historical location coordinates;

[0045] Establish a virtual coordinate system according to the map, place the historical position coordinates in the virtual coordinate system, and on the virtual coordinate system; obtain the acquisition time of all the position coordinates in the historical position coordinates, and connect all the position coordinates in the historical position coordinates in sequence according to the acquisition time to obtain the action trajectory route;

[0046] It is understandable that a virtual coordinate system is established using map data, and the virtual coordinate system is used to accurately represent the user's location on the map; the collected historical location coordinates are placed in the previously established virtual coordinate system; this is done to ensure that all data are in the same reference frame, which is convenient for subsequent processing and analysis; the timestamp of each historical location coordinate is obtained, and the historical location coordinates are connected in chronological order according to these timestamps; this connection method can form a continuous line, which represents the user's movement trajectory; through the above steps, a detailed movement trajectory route map of the user can be obtained; the virtual coordinate system not only shows the user's location changes within a specific time period, but also reflects the user's activity patterns and habits; the user's movement trajectory route finally obtained can be used as part of identity authentication;

[0047] Step S3: setting a collection period, acquiring all real-time position coordinates within the collection period, and sequentially connecting the real-time position coordinates according to the acquisition time of the real-time position coordinates to obtain a real-time action route;

[0048] When a user enters an application and performs multiple identity authentication, the information strength index and security strength index at that time are obtained according to the information strength set and the security strength classification table; the authentication strength index at that time is obtained according to the real-time action route, action trajectory route and security strength index; the optimal identity authentication combination is obtained according to the authentication strength index and security strength index, and the multiple identity authentication is performed using the identity authentication combination;

[0049] It can be understood that within the set collection period, the real-time location coordinates of the user are continuously acquired in real time, and the real-time location coordinates represent the actual movement of the user within the time period; then these coordinates are connected in sequence according to the acquisition time to form the real-time action route of the user; this route can intuitively show the movement trajectory of the user in a short period of time; when the user tries to access an application and performs multiple identity authentication, the information strength index and security strength index of the current situation are determined according to the previously generated information strength set and security strength grading table; these two indexes reflect the user's current identity authentication needs and the security of the environment; the information strength index is determined based on the user's identity information type (such as facial recognition, fingerprint, etc.) and its combination; the security strength index is evaluated based on the security of the device and application used by the user; an authentication strength index is calculated by combining the user's real-time action route, historical action trajectory and security strength index; the authentication strength index comprehensively considers the user's behavior pattern and the security of the environment to determine the most appropriate identity authentication method; based on the calculated authentication strength index and security strength index, the system will select the identity authentication combination that best suits the current situation; this combination may include a combination of multiple identity authentication methods to ensure the accuracy and security of identity authentication;

[0050] As a preferred embodiment of the present invention, the setting range of the acquisition period is [0.5h, 4h];

[0051] It is understandable that the collection period refers to the time interval for continuously collecting the user's real-time location coordinates within a certain period of time; the range of the collection period is selected based on the following considerations:

[0052] 1. Data accuracy: A shorter collection cycle (such as 0.5 hours) can provide more detailed location data, which helps to more accurately reflect the user's behavior pattern; 2. Resource consumption: A longer collection cycle (such as 4 hours) can reduce frequent data collection, thereby reducing the system's resource consumption and processing pressure; 3. Balanced requirements: By setting a reasonable range, a balance can be found between data accuracy and system performance to meet the needs of different scenarios; this setting method is suitable for scenarios that require dynamic adjustment of identity authentication strength; for example, in applications with high security requirements, a shorter collection cycle can be selected to obtain more accurate user behavior data; and in scenarios with lower security requirements, a longer collection cycle can be selected to reduce the collection burden;

[0053] As a preferred embodiment of the present invention, the process of obtaining the information strength index and the security strength index includes:

[0054] Set the information strength coefficient J, and J ≥ 0, and set the strength value k of the information strength level1 , when the information intensity level is A1, k 1 =1, when the information strength level is A2, k 1 =2, and so on; then the information intensity index of each information intensity level is Jk 1 ;

[0055] Set a security strength coefficient K, and 0≤K<J, the information strength levels are B1, B2, ..., Bp from high to low, where p is the total number of applications; and set the security strength value k of the security strength level 2 , when the security strength level is B1, k 2 =1, when the security strength level is B2, k 2 =2, and so on; then the security strength index of each security strength level is Kk 2 ;

[0056] It can be understood that the information strength coefficient is used to measure the importance of different information strength levels; as the information strength level increases, the corresponding strength value also increases accordingly; the security strength coefficient is used to measure the security of different security strength levels; as the security strength level increases, the corresponding security strength value also increases accordingly;

[0057] As a preferred embodiment of the present invention, the process of obtaining the authentication strength index includes:

[0058] In the virtual coordinate system, obtain the expression L1 corresponding to the real-time action route, and obtain the expression L2 corresponding to the action trajectory route; obtain the number of solutions when L1=L2, recorded as Sn; then obtain the authentication strength index CSI=μ*Sn+Kk 2 , where μ is the preset correction coefficient, and 0<μ<1;

[0059] It can be understood that the above two expressions represent the user's behavior patterns in a short period of time and in a long period of time; the number of solutions to the equation L1=L2 is obtained in order to find the similarity or matching degree between the user's current behavior and the historical behavior; the authentication strength index comprehensively considers the matching degree between the user's current behavior and the historical behavior and the security of the environment; this method can be used to dynamically adjust the strictness of identity authentication; for example, if the user's current behavior is highly consistent with his or her historical behavior and is in a high-security environment, the system may reduce the difficulty of identity authentication; on the contrary, if the two are greatly different or the security of the environment is low, the difficulty of verification will be increased; this method improves the accuracy and flexibility of identity authentication and can better adapt to different security needs and risk levels;

[0060] As a preferred embodiment of the present invention, the process of obtaining the optimal identity authentication combination includes:

[0061] According to the information strength index of each identity authentication combination, the information strength index set {(Jk 1 ) 1 , (Jk 1 ) 2 , ..., (Jk 1 ) N}, where (Jk 1 ) N represents the information strength index of the Nth identity authentication combination, where N is the total number of identity authentication combinations; according to the information strength index set, the difference value set W = {|(Jk 1 ) 1 -CSI|,|(Jk 1 ) 2 -CSI|,...,|(Jk 1 ) N -CSI|}; select the minimum value of the difference set, recorded as Min(W), obtain the identity authentication combination corresponding to Min(W), and record it as the best identity authentication combination;

[0062] It can be understood that by comprehensively considering the difference between the information strength index of the authentication combination and the authentication strength index in the current environment, as well as the consumption time of different authentication combinations, the most suitable authentication combination for the current situation is dynamically selected; the purpose of this is to improve the efficiency of identity authentication and user experience while ensuring security;

[0063] As a preferred embodiment of the present invention, the process of obtaining the optimal identity authentication combination further includes:

[0064] Obtain historical authentication data, the historical authentication data including the time consumed when each identity information type is used alone for identity authentication; obtain the average consumption time of each identity information type according to the historical authentication data; if there are m identity information types in the identity authentication combination, and the average consumption time of the m identity information types is T1, T2, ..., Tm respectively, then obtain the consumption time of the identity authentication combination

[0065] If there are several identical minimum values ​​in the difference set, the consumption time of the identity authentication combination corresponding to each minimum value is obtained, and the identity authentication combination with the shortest consumption time is selected and recorded as the best identity authentication combination.

[0066] The above is a detailed description of an embodiment of the present invention, but the content is only a preferred embodiment of the present invention and cannot be considered to limit the scope of implementation of the present invention. All equivalent changes and improvements made within the scope of the present invention should still fall within the scope of the patent coverage of the present invention.

Claims

1. An identity authentication method based on multiple identifications, characterized in that: The following steps are involved: Step S1: Obtain the user's identity information type, which includes facial information, fingerprint information and mobile phone number; Combining each identity information type to obtain a number of identity authentication combinations, and presetting an information strength level for each identity authentication combination to obtain an information strength set; Obtaining an authentication device, where the authentication device is a mobile device used by a user for identity authentication; Obtain all applications on the authentication device, and preset security strength levels for all applications to obtain a security strength grading table; Step S2: obtaining the user's location information based on the authentication device, wherein the location information includes real-time location coordinates and historical location coordinates, and the historical location data is all the user's historical location coordinates; Establish a virtual coordinate system according to the map, place the historical position coordinates in the virtual coordinate system, and on the virtual coordinate system; obtain the acquisition time of all the position coordinates in the historical position coordinates, and connect all the position coordinates in the historical position coordinates in sequence according to the acquisition time to obtain the action trajectory route; Step S3: setting a collection period, acquiring all real-time position coordinates within the collection period, and sequentially connecting the real-time position coordinates according to the acquisition time of the real-time position coordinates to obtain a real-time action route; When a user enters an application and performs multiple identity authentications, the information strength index and security strength index at that time are obtained according to the information strength set and the security strength grading table; the authentication strength index at that time is obtained according to the real-time action route, action trajectory route and security strength index; the optimal identity authentication combination is obtained according to the authentication strength index and the security strength index, and the identity authentication combination is used for multiple identity authentications.

2. According to claim 1, a method for identity authentication based on multiple identifications is characterized in that: In step S1, the process of combining various identity information types includes: The number of identity information types in the identity authentication combination is recorded as the number of types within the group, and the minimum number of types within the group of the identity authentication combination is set to 2, and the maximum number of types within the group is set to m. max , and m max ≥2; when the number of types in the group is 2, all identity information types are combined in pairs to obtain several identity authentication combinations; when the number of types in the group is 3, all identity information types are combined in sequence every three to obtain several identity authentication combinations; and so on.

3. The identity authentication method based on multiple identification according to claim 1, characterized in that: In step S1, the process of presetting the information strength level for each identity authentication combination includes: Set the information strength level of each identity information type, and the information strength levels are A1, A2, ..., An from high to low, where n is the total number of identity information types; if there is an identity authentication combination with m types in the group, and the information strength levels of the identity information types in the identity authentication combination are S1, S2, ..., Sm, respectively, the information strength level in the identity authentication combination is And i∈[1,m] and i is a positive integer.

4. The identity authentication method based on multiple identification according to claim 1, characterized in that: In step S3, the setting range of the acquisition period is [0.5h, 4h].

5. The identity authentication method based on multiple identification according to claim 1, characterized in that: In step S3, the process of obtaining the information strength index and the security strength index includes: Set the information strength coefficient J, and J ≥ 0, and set the strength value k1 of the information strength level. When the information strength level is A1, k1 = 1, when the information strength level is A2, k1 = 2, and so on; then the information strength index of each information strength level is Jk1; A security strength coefficient K is set, and 0≤K<J. The information strength levels are B1, B2, ..., Bp from high to low, where p is the total number of applications; and a security strength value k2 of the security strength level is set. When the security strength level is B1, k2=1, when the security strength level is B2, k2=2, and so on; the security strength index of each security strength level is Kk2.

6. The identity authentication method based on multiple identification according to claim 1, characterized in that: In step S3, the process of obtaining the authentication strength index includes: In the virtual coordinate system, obtain the expression L1 corresponding to the real-time action route, and obtain the expression L2 corresponding to the action trajectory route; obtain the number of solutions when L1=L2, recorded as Sn; then obtain the authentication strength index CSI=μ*Sn+Kk2, where μ is the preset correction coefficient, and 0<μ<1.

7. The identity authentication method based on multiple identification according to claim 5, characterized in that: In step S3, the process of obtaining the optimal identity authentication combination includes: According to the information strength index of each identity authentication combination, the information strength index set {(Jk1)1, (Jk1)2, ..., (Jk1) N }, where (Jk1) N represents the information strength index of the Nth identity authentication combination, where N is the total number of identity authentication combinations; according to the information strength index set, a difference set W = {|(Jk1)1-CSI|, |(Jk1)2-CSI|, ..., |(Jk1) N -CSI|}; select the minimum value of the difference set, recorded as Min(W), obtain the identity authentication combination corresponding to Min(W), and record it as the optimal identity authentication combination.

8. The identity authentication method based on multiple identification according to claim 7, characterized in that: In step S3, the process of obtaining the optimal identity authentication combination further includes: Obtain historical authentication data, the historical authentication data including the time consumed when each identity information type is used alone for identity authentication; obtain the average consumption time of each identity information type according to the historical authentication data; if there are m identity information types in the identity authentication combination, and the average consumption time of the m identity information types is T1, T2, ..., Tm respectively, then obtain the consumption time of the identity authentication combination If there are several identical minimum values ​​in the difference set, the consumption time of the identity authentication combination corresponding to each minimum value is obtained, and the identity authentication combination with the shortest consumption time is selected and recorded as the best identity authentication combination.

Images