An identity authentication method based on multiple identification

Abstract

The present invention relates to the technical field of identity authentication, and specifically discloses an identity authentication method based on multiple identifications, comprising the following steps: step S1: collecting various types of identity information of a user and combining them to form multiple identity authentication combinations; setting an information strength level for each combination to form an information strength set; obtaining all applications on a mobile device used by the user for identity authentication, and setting a security strength level to form a security strength grading table; step S2: obtaining the real-time and historical location information of the user based on the mobile device; establishing a virtual coordinate system, and generating the user's movement trajectory route by connecting the historical location coordinates; collecting all the real-time location coordinates of the user within a collection period, and connecting these coordinate points in chronological order to form the user's real-time movement route; step S3: calculating an authentication strength index, determining the optimal identity authentication combination, and using this combination to complete the multiple identity authentication process.

Description

Technical Field

[0001] The present invention relates to the technical field of identity authentication, and in particular to an identity authentication method based on multiple identifications. Background Art

[0002] Identity authentication is the process of confirming the claims of a user or entity by verifying the credentials and attributes provided to determine the authenticity and legitimacy of the claimed identity. There are many types of identity authentication methods, including multi-factor authentication.

[0003] Multi-factor authentication is a security measure that improves the security of identity verification by adding multiple verification steps to the identity verification process; it makes it more difficult for attackers to gain access to an account, and even if one factor is compromised, the others can still protect the account.

[0004] In the current technological environment, users often need to complete complex multi-identity authentication when using important functions. Although this security measure improves account security, it may cause users to spend a lot of time to complete the authentication process in some emergency situations. For example, in an emergency, when they need to immediately access important files or perform critical operations, they may miss the opportunity because they cannot quickly complete multi-identity authentication. Therefore, how to improve the efficiency of multi-identity authentication while ensuring security has become a pressing issue. Summary of the Invention

[0005] The purpose of the present invention is to provide an identity authentication method based on multiple identifications to solve the above technical problems.

[0006] The purpose of the present invention can be achieved through the following technical solutions:

[0007] An identity authentication method based on multiple identifications comprises the following steps:

[0008] Step S1: Obtain the user's identity information type, which includes facial information, fingerprint information, and mobile phone number; combine the identity information types to obtain several identity authentication combinations, and preset information strength levels for each identity authentication combination to obtain an information strength set;

[0009] Obtain an authentication device, which is a mobile device used by a user for identity authentication; obtain all applications on the authentication device, and preset security strength levels for all applications to obtain a security strength grading table;

[0010] Step S2: obtaining the user's location information based on the authentication device, wherein the location information includes real-time location coordinates and historical location coordinates, wherein the historical location coordinates are all the user's historical location coordinates;

[0011] Establishing a virtual coordinate system according to the map, placing the historical position coordinates in the virtual coordinate system, and on the virtual coordinate system; obtaining the acquisition time of all position coordinates in the historical position coordinates, and sequentially connecting all position coordinates in the historical position coordinates according to the acquisition time to obtain a movement trajectory route;

[0012] Step S3: setting a collection period, acquiring all real-time position coordinates within the collection period, and sequentially connecting the real-time position coordinates according to the acquisition time of the real-time position coordinates to obtain a real-time action route;

[0013] When a user enters an application and performs multiple identity authentications, the information strength index and security strength index at that time are obtained according to the information strength set and security strength grading table; the authentication strength index at that time is obtained according to the real-time action route, action trajectory route and security strength index; the optimal identity authentication combination is obtained according to the authentication strength index and security strength index, and the identity authentication combination is used for multiple identity authentications.

[0014] As a further solution of the present invention, the process of combining the identity information types includes:

[0015] The number of identity information types in the identity authentication combination is recorded as the number of types within the group. The minimum number of types within the group of the identity authentication combination is set to 2, and the maximum number of types within the group is set to m. max , and m max ≥2; when the number of types in the group is 2, all identity information types are combined in pairs to obtain several identity authentication combinations; when the number of types in the group is 3, all identity information types are combined in sequence of three to obtain several identity authentication combinations; and so on.

[0016] As a further solution of the present invention, the process of presetting the information strength level for each identity authentication combination includes:

[0017] Set the information strength level of each identity information type, and the information strength levels are A1, A2, ..., An from high to low, where n is the total number of identity information types; if there is an identity authentication combination with m types in the group, and the information strength levels of the identity information types in the identity authentication combination are S1, S2, ..., Sm, respectively, the information strength level in the identity authentication combination is , and i∈[1,m] and i is a positive integer.

[0018] As a further solution of the present invention: the setting range of the acquisition period is [0.5h, 4h].

[0019] As a further solution of the present invention: the process of obtaining the information strength index and the security strength index includes:

[0020] Set the information intensity coefficient J, and J ≥ 0, and set the intensity value k1 of the information intensity level. When the information intensity level is A1, k1 = 1, when the information intensity level is A2, k1 = 2, and so on; then the information intensity index of each information intensity level is Jk1;

[0021] A security strength coefficient K is set, and 0≤K<J. The security strength levels are B1, B2, ..., Bp from high to low, where p is the total number of applications. A security strength value k2 of the security strength level is set. When the security strength level is B1, k2=1; when the security strength level is B2, k2=2, and so on. The security strength index of each security strength level is Kk2.

[0022] As a further solution of the present invention: the process of obtaining the authentication strength index includes:

[0023] In the virtual coordinate system, obtain the expression L1 corresponding to the real-time action route, and obtain the expression L2 corresponding to the action trajectory route; obtain the number of solutions when L1=L2, recorded as Sn; then obtain the authentication strength index CSI=μ*Sn+Kk2, where μ is the preset correction coefficient, and 0<μ<1.

[0024] As a further solution of the present invention: the process of obtaining the optimal identity authentication combination includes:

[0025] According to the information strength index of each identity authentication combination, the information strength index set {(Jk1)1, (Jk1)2, ..., (Jk1) N}, where (Jk1) N represents the information strength index of the Nth identity authentication combination, where N is the total number of identity authentication combinations; based on the information strength index set, the difference set W = {|(Jk1)1-CSI|, |(Jk1)2-CSI|, ..., |(Jk1) N -CSI|}; select the minimum value of the difference set, record it as Min(W), obtain the identity authentication combination corresponding to Min(W), and record it as the optimal identity authentication combination.

[0026] As a further solution of the present invention: the process of obtaining the optimal identity authentication combination further includes:

[0027] Obtain historical authentication data, including the time consumed when using each identity information type for identity authentication separately; obtain the average consumption time of each identity information type based on the historical authentication data; if there are m identity information types in the identity authentication combination, and the average consumption time of the m identity information types is T1, T2, ..., Tm respectively, then obtain the consumption time of the identity authentication combination ;

[0028] If there are several identical minimum values ​​in the difference set, the consumption time of the identity authentication combination corresponding to each minimum value is obtained, and the identity authentication combination with the minimum consumption time is selected and recorded as the best identity authentication combination.

[0029] Beneficial effects of the present invention:

[0030] The present invention adjusts the authentication strength according to the user's real-time location and historical movement trajectory. This method can dynamically adapt to the user's behavior patterns and environmental changes; this adaptive capability makes the identity authentication process more flexible and reliable; by presetting different security strength levels for different applications and determining the best authentication combination based on the user's information strength set and security strength classification table, personalized security protection can be provided for each user; this ensures that sufficient security can be provided even in high-risk environments; using the analysis of historical location data and real-time location coordinates, abnormal behavior can be identified more accurately, thereby reducing false alarms and missed alarms; the present invention seamlessly integrates with existing mobile devices and applications, without the need for large-scale infrastructure modifications; at the same time, with the development of technology and the emergence of new identity authentication technologies, it is also easy to upgrade and expand. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The present invention will be further described below with reference to the accompanying drawings.

[0032] Figure 1 It is a flow chart of an identity authentication method based on multiple identifications of the present invention. DETAILED DESCRIPTION

[0033] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making any creative efforts shall fall within the scope of protection of the present invention.

[0034] See also Figure 1 As shown, the present invention is an identity authentication method based on multiple identifications, comprising the following steps:

[0035] Step S1: Obtain the user's identity information type, which includes facial information, fingerprint information, and mobile phone number; combine the identity information types to obtain several identity authentication combinations, and preset information strength levels for each identity authentication combination to obtain an information strength set;

[0036] Obtain an authentication device, which is a mobile device used by a user for identity authentication; obtain all applications on the authentication device, and preset security strength levels for all applications to obtain a security strength grading table;

[0037] It can be understood that first, various types of user identity information are collected, including facial information, fingerprint information, and mobile phone number; all types of identity information are combined into multiple different authentication combinations; each combination is preset with an information strength level, thus forming an information strength set; the principle of this step is based on the combination of multiple biometric features and technical identifiers to increase the accuracy and security of identity authentication; next, the user's mobile device used for identity authentication is obtained and all applications running on the device are analyzed; a security strength level is preset for each application, thus forming a security strength grading table; the principle of this step is to evaluate the security of devices and applications to ensure that the tools and environment used in the authentication process are safe and reliable;

[0038] In a preferred embodiment of the present invention, the process of combining the identity information types includes:

[0039] The number of identity information types in the identity authentication combination is recorded as the number of types within the group. The minimum number of types within the group of the identity authentication combination is set to 2, and the maximum number of types within the group is set to m. max , and m max ≥2; when the number of types in a group is 2, all identity information types are combined in pairs to obtain several identity authentication combinations; when the number of types in a group is 3, all identity information types are combined in sequence in groups of three to obtain several identity authentication combinations; and so on;

[0040] It is understood that each identity authentication combination contains at least two different types of identity information and can contain up to m maxWhen the number of types in a group is 2, all identity information types are combined in pairs; for example, if there are three types of identity information: facial information, fingerprint information, and mobile phone number, the results of the pairwise combination will be: a combination of facial information and fingerprint information, a combination of facial information and mobile phone number, and a combination of fingerprint information and mobile phone number; this will result in several identity authentication combinations; when the number of types in a group increases to 3, all identity information types are combined in sequence every three; using the example of the three identity information types mentioned above, there is only one possible combination of three, namely the combination of facial information, fingerprint information, and mobile phone number; if there are more identity information types, such as voice information, there will be more possible combinations; for more identity information types, continue to combine according to the above rules; add one identity information type to the combination each time until the maximum number of types in the group, m, is reached max Through the above steps, multiple different identity authentication combinations can be obtained, which contain different amounts and types of identity information. This combination method is intended to provide diverse verification methods to adapt to different security needs and scenarios.

[0041] In a preferred embodiment of the present invention, the process of presetting the information strength level for each identity authentication combination includes:

[0042] Set the information strength level of each identity information type, and the information strength levels are A1, A2, ..., An from high to low, where n is the total number of identity information types; if there is an identity authentication combination with m types in the group, and the information strength levels of the identity information types in the identity authentication combination are S1, S2, ..., Sm, respectively, the information strength level in the identity authentication combination is , and i∈[1,m] and i is a positive integer;

[0043] It is understandable that after obtaining several identity authentication combinations, an information strength level is preset for each combination. This level reflects the security and reliability of the combination; for example, a combination containing more identity information types may have a higher information strength level; all identity authentication combinations and their corresponding information strength levels are aggregated to form an information strength set; this set can be used to evaluate and select the identity authentication method that best suits the current situation; in the actual identity authentication process, the appropriate identity authentication combination can be selected from the information strength set for verification as needed. This helps to improve the accuracy and security of identity authentication;

[0044] Step S2: obtaining the user's location information based on the authentication device, wherein the location information includes real-time location coordinates and historical location coordinates, wherein the historical location coordinates are all the user's historical location coordinates;

[0045] Establishing a virtual coordinate system according to the map, placing the historical position coordinates in the virtual coordinate system, and on the virtual coordinate system; obtaining the acquisition time of all position coordinates in the historical position coordinates, and sequentially connecting all position coordinates in the historical position coordinates according to the acquisition time to obtain a movement trajectory route;

[0046] It is understood that a virtual coordinate system is established using map data, and the virtual coordinate system is used to accurately represent the user's location on the map; the collected historical location coordinates are placed in the previously established virtual coordinate system; this is done to ensure that all data are in the same reference frame, which is convenient for subsequent processing and analysis; the timestamp of each historical location coordinate is obtained, and the historical location coordinates are connected in chronological order based on these timestamps; this connection method can form a continuous line, which represents the user's movement trajectory; through the above steps, a detailed movement trajectory route map of the user can be obtained; the virtual coordinate system not only shows the user's location changes within a specific time period, but also reflects the user's activity patterns and habits; the user's movement trajectory route finally obtained can be used as part of identity verification;

[0047] Step S3: setting a collection period, acquiring all real-time position coordinates within the collection period, and sequentially connecting the real-time position coordinates according to the acquisition time of the real-time position coordinates to obtain a real-time action route;

[0048] When a user enters an application and performs multiple identity authentication, the information strength index and security strength index at that time are obtained based on the information strength set and the security strength grading table; the authentication strength index at that time is obtained based on the real-time action route, action trajectory route and security strength index; the optimal identity authentication combination is obtained based on the authentication strength index and security strength index, and the multiple identity authentication is performed using the identity authentication combination;

[0049] It is understood that within a set collection period, the user's real-time location coordinates are continuously acquired in real time, and the real-time location coordinates represent the user's actual movement during that time period. These coordinates are then linked in sequence according to the time they were acquired to form the user's real-time movement route. This route can intuitively display the user's movement trajectory in a short period of time. When a user attempts to access an application and performs multiple identity authentication, the information strength index and security strength index of the current situation are determined based on the previously generated information strength set and security strength grading table. These two indices reflect the user's current identity authentication needs and the security of the environment. The information strength index is determined based on the user's identity information type (such as facial recognition, fingerprint, etc.) and its combination. The security strength index is evaluated based on the security of the device and application used by the user. An authentication strength index is calculated by combining the user's real-time movement route, historical movement trajectory, and security strength index. The authentication strength index comprehensively considers the user's behavior pattern and the security of the environment to determine the most appropriate authentication method. Based on the calculated authentication strength index and security strength index, the system will select the identity authentication combination that best suits the current situation. This combination may include a combination of multiple authentication methods to ensure the accuracy and security of authentication.

[0050] As a preferred embodiment of the present invention, the setting range of the acquisition period is [0.5h, 4h];

[0051] It is understood that the collection period refers to the time interval for continuously collecting the user's real-time location coordinates within a certain period of time; the range of the collection period is selected based on the following considerations:

[0052] 1. Data accuracy: A shorter collection cycle (such as 0.5 hours) can provide more detailed location data, helping to more accurately reflect user behavior patterns. 2. Resource consumption: A longer collection cycle (such as 4 hours) can reduce the frequency of data collection, thereby reducing system resource consumption and processing pressure. 3. Balancing needs: By setting a reasonable range, a balance can be found between data accuracy and system performance to meet the needs of different scenarios. This setting method is suitable for scenarios that require dynamic adjustment of authentication strength. For example, in applications with high security requirements, a shorter collection cycle can be selected to obtain more accurate user behavior data; while in scenarios with lower security requirements, a longer collection cycle can be selected to reduce the collection burden.

[0053] As a preferred embodiment of the present invention, the process of obtaining the information strength index and the security strength index includes:

[0054] Set the information intensity coefficient J, and J ≥ 0, and set the intensity value k1 of the information intensity level. When the information intensity level is A1, k1 = 1, when the information intensity level is A2, k1 = 2, and so on; then the information intensity index of each information intensity level is Jk1;

[0055] A security strength coefficient K is set, and 0≤K<J. The security strength levels are B1, B2, ..., Bp from high to low, where p is the total number of applications. A security strength value k2 is set for the security strength level. When the security strength level is B1, k2=1; when the security strength level is B2, k2=2, and so on. The security strength index of each security strength level is Kk2.

[0056] It is understood that the information strength coefficient is used to measure the importance of different information strength levels; as the information strength level increases, the corresponding strength value also increases accordingly; the security strength coefficient is used to measure the security of different security strength levels; as the security strength level increases, the corresponding security strength value also increases accordingly;

[0057] As a preferred embodiment of the present invention, the process of obtaining the authentication strength index includes:

[0058] In the virtual coordinate system, obtain the expression L1 corresponding to the real-time action route and the expression L2 corresponding to the action trajectory route; obtain the number of solutions when L1=L2, recorded as Sn; then obtain the authentication strength index CSI=μ*Sn+Kk2, where μ is a preset correction coefficient and 0<μ<1;

[0059] It can be understood that the above two expressions represent the user's behavior patterns over a short period of time and over a long period of time. The number of solutions to the equation L1=L2 is obtained to find the similarity or degree of match between the user's current behavior and historical behavior. The authentication strength index comprehensively considers the degree of match between the user's current behavior and historical behavior as well as the security of the environment. This method can be used to dynamically adjust the strictness of identity authentication. For example, if the user's current behavior is highly consistent with their historical behavior and they are in a high-security environment, the system may reduce the difficulty of identity authentication. Conversely, if the two are significantly different or the environment is less secure, the verification difficulty will be increased. This method improves the accuracy and flexibility of identity authentication and can better adapt to different security needs and risk levels.

[0060] As a preferred embodiment of the present invention, the process of obtaining the optimal identity authentication combination includes:

[0061] According to the information strength index of each identity authentication combination, the information strength index set {(Jk1)1, (Jk1)2, ..., (Jk1) N}, where (Jk1) N represents the information strength index of the Nth identity authentication combination, where N is the total number of identity authentication combinations; based on the information strength index set, the difference set W = {|(Jk1)1-CSI|, |(Jk1)2-CSI|, ..., |(Jk1) N -CSI|}; select the minimum value of the difference set, recorded as Min(W), obtain the identity authentication combination corresponding to Min(W), and record it as the optimal identity authentication combination;

[0062] It is understood that by comprehensively considering the difference between the information strength index of the authentication combination and the authentication strength index in the current environment, as well as the time consumed by different authentication combinations, the most suitable authentication combination for the current situation is dynamically selected. This is done to improve authentication efficiency and user experience while ensuring security.

[0063] In a preferred embodiment of the present invention, the process of obtaining the optimal identity authentication combination further includes:

[0064] Obtain historical authentication data, including the time consumed when using each identity information type for identity authentication separately; obtain the average consumption time of each identity information type based on the historical authentication data; if there are m identity information types in the identity authentication combination, and the average consumption time of the m identity information types is T1, T2, ..., Tm respectively, then obtain the consumption time of the identity authentication combination ;

[0065] If there are several identical minimum values ​​in the difference set, the consumption time of the identity authentication combination corresponding to each minimum value is obtained, and the identity authentication combination with the minimum consumption time is selected and recorded as the best identity authentication combination.

[0066] The above is a detailed description of an embodiment of the present invention. However, the content described is only a preferred embodiment of the present invention and should not be considered to limit the scope of the present invention. All equivalent changes and improvements made within the scope of the present invention should still fall within the scope of the patent coverage of the present invention.

Claims

1. An identity authentication method based on multiple identifications, characterized in that: The following steps are involved: Step S1: Obtain the user's identity information type, which includes facial information, fingerprint information, and mobile phone number; Combining each identity information type to obtain a number of identity authentication combinations, and presetting an information strength level for each identity authentication combination to obtain an information strength set; Obtaining an authentication device, where the authentication device is a mobile device used by the user for identity authentication; Obtain all applications on the authentication device, and preset security strength levels for all applications to obtain a security strength grading table; Step S2: obtaining the user's location information based on the authentication device, wherein the location information includes real-time location coordinates and historical location coordinates, wherein the historical location coordinates are all the user's historical location coordinates; Establishing a virtual coordinate system according to the map, placing the historical position coordinates in the virtual coordinate system, and on the virtual coordinate system; obtaining the acquisition time of all position coordinates in the historical position coordinates, and sequentially connecting all position coordinates in the historical position coordinates according to the acquisition time to obtain a movement trajectory route; Step S3: setting a collection period, acquiring all real-time position coordinates within the collection period, and sequentially connecting the real-time position coordinates according to the acquisition time of the real-time position coordinates to obtain a real-time action route; When a user enters an application and performs multiple identity authentication, the information strength index and security strength index at that time are obtained based on the information strength set and the security strength grading table; the authentication strength index at that time is obtained based on the real-time action route, action trajectory route and security strength index; the optimal identity authentication combination is obtained based on the authentication strength index and security strength index, and the multiple identity authentication is performed using the identity authentication combination; The process of obtaining the information strength index and the security strength index includes: Set the information intensity coefficient J, and J ≥ 0, and set the intensity value k1 of the information intensity level. When the information intensity level is A1, k1 = 1, when the information intensity level is A2, k1 = 2, and so on; then the information intensity index of each information intensity level is Jk1; A security strength coefficient K is set, and 0≤K<J. The security strength levels are B1, B2, ..., Bp from high to low, where p is the total number of applications. A security strength value k2 is set for the security strength level. When the security strength level is B1, k2=1; when the security strength level is B2, k2=2, and so on. The security strength index of each security strength level is Kk2. The process of obtaining the authentication strength index includes: In the virtual coordinate system, obtain the expression L1 corresponding to the real-time action route and the expression L2 corresponding to the action trajectory route; obtain the number of solutions when L1=L2, recorded as Sn; then obtain the authentication strength index CSI=μ*Sn+Kk2, where μ is a preset correction coefficient and 0<μ<1; The process of obtaining the optimal identity authentication combination includes: According to the information strength index of each identity authentication combination, the information strength index set {(Jk1)1, (Jk1)2, ..., (Jk1) N }, where (Jk1) N represents the information strength index of the Nth identity authentication combination, where N is the total number of identity authentication combinations; based on the information strength index set, the difference set W = {|(Jk1)1-CSI|, |(Jk1)2-CSI|, ..., |(Jk1) N -CSI|}; select the minimum value of the difference set, recorded as Min(W), obtain the identity authentication combination corresponding to Min(W), and record it as the optimal identity authentication combination; The process of obtaining the optimal identity authentication combination further includes: Obtain historical authentication data, including the time consumed when using each identity information type for identity authentication separately; obtain the average consumption time of each identity information type based on the historical authentication data; if there are m identity information types in the identity authentication combination, and the average consumption time of the m identity information types is T1, T2, ..., Tm respectively, then obtain the consumption time of the identity authentication combination ; If there are several identical minimum values ​​in the difference set, the consumption time of the identity authentication combination corresponding to each minimum value is obtained, and the identity authentication combination with the minimum consumption time is selected and recorded as the best identity authentication combination.

2. The identity authentication method based on multiple identification according to claim 1, characterized in that: In step S1, the process of combining various identity information types includes: The number of identity information types in the identity authentication combination is recorded as the number of types within the group. The minimum number of types within the group of the identity authentication combination is set to 2, and the maximum number of types within the group is set to m. max , and m max ≥2; when the number of types in the group is 2, all identity information types are combined in pairs to obtain several identity authentication combinations; when the number of types in the group is 3, all identity information types are combined in sequence of three to obtain several identity authentication combinations; and so on.

3. The identity authentication method based on multiple identification according to claim 1, characterized in that: In step S1, the process of presetting the information strength level for each identity authentication combination includes: Set the information strength level of each identity information type, and the information strength levels are A1, A2, ..., An from high to low, where n is the total number of identity information types; if there is an identity authentication combination with m types in the group, and the information strength levels of the identity information types in the identity authentication combination are S1, S2, ..., Sm, respectively, the information strength level in the identity authentication combination is , and i∈[1,m] and i is a positive integer.

4. The identity authentication method based on multiple identification according to claim 1, characterized in that: In step S3, the acquisition period is set in a range of [0.5h, 4h].

Images