Security authentication method, device, equipment, medium and product

Abstract

The embodiment of the invention provides a security authentication method and device, equipment, a medium and a product, which are applied to the technical field of security, and the method comprises the following steps: in response to a user request, obtaining equipment position information of user equipment; performing spatial position verification according to the equipment position information, and acquiring user gesture data collected by the user equipment under the condition that the spatial position verification is passed; and performing user gesture verification according to the user gesture data, and generating a security authentication passing message under the condition that the user gesture verification is passed, so as to trigger and execute an operation corresponding to the user request. According to the embodiment of the invention, security authentication is carried out in combination with the position and the gesture, the security of the system is improved, remote attacks are effectively prevented, and even if a digital certificate is leaked, an attacker cannot complete gesture operation at an unauthorized position.

Description

Technical Field

[0001] This invention relates to the field of security technology, and in particular to a method, apparatus, equipment, medium, and product for security authentication. Background Technology

[0002] In scenarios such as smart homes, some user operations (such as turning off important smart home devices or modifying core configurations) are highly dangerous, and such operation requests usually require security authentication.

[0003] In existing technologies, two-factor authentication (2FA) is commonly used for security authentication. However, digital credentials in 2FA are easily leaked. After obtaining the digital credentials, attackers can use them to pass security authentication and then remotely perform unauthorized operations such as turning off important smart home devices or modifying core configurations, thus compromising system security. Summary of the Invention

[0004] In view of the above problems, a method, apparatus, device, medium, and product for security authentication are proposed to overcome or at least partially solve the above problems, including:

[0005] A method for security authentication, characterized in that the method includes:

[0006] In response to a user request, obtain the device location information of the user's device;

[0007] Spatial location verification is performed based on the device location information, and if the spatial location verification is successful, user gesture data collected by the user device is obtained; wherein, the user gesture data is data collected when the user performs a gesture action using the user device;

[0008] User gesture verification is performed based on the user gesture data, and if the user gesture verification is successful, a security authentication success message is generated to trigger the execution of the operation corresponding to the user request.

[0009] Optionally, if the spatial location verification is successful, the user gesture data collected by the user equipment is acquired, including:

[0010] If the spatial location verification is successful, the system will provide gesture guidance information for the target gesture action template. This gesture guidance information is used to guide the user to perform the corresponding gesture action using the user device.

[0011] Acquire user gesture data collected by the user equipment.

[0012] Optionally, user gesture verification based on the user gesture data includes:

[0013] Obtain the preset gesture data corresponding to the target gesture action template;

[0014] User gesture verification is performed based on the user gesture data and the preset gesture data.

[0015] Optionally, user gesture verification is performed based on the user gesture data and the preset gesture data, including:

[0016] From the user gesture data, determine the user gesture feature vector;

[0017] Generate a user gesture identifier based on the user gesture feature vector;

[0018] The user gesture identifier is compared with the preset gesture identifier in the preset gesture data;

[0019] If the user gesture identifier and the preset gesture identifier match, determine the similarity between the user gesture feature vector and the preset gesture feature vector in the preset gesture data;

[0020] If the similarity is greater than or equal to a preset similarity, the user gesture verification is deemed successful.

[0021] Optionally, it also includes:

[0022] If the user gesture identifier and the preset gesture identifier do not match, or if the user gesture identifier and the preset gesture identifier match, and the similarity is less than the preset similarity, the user gesture verification is determined to fail.

[0023] Optionally, the target gesture template is a gesture template randomly selected from a preset gesture list, and the gesture list stores preset gesture data of multiple gesture templates.

[0024] Optionally, the device location information is location information in an indoor environment, where an ultra-wideband base station is deployed, and the device location information is determined by the ultra-wideband base station based on the ultra-wideband signal of the user equipment.

[0025] Optionally, spatial location verification is performed based on the device location information, including:

[0026] If the device location information is within the location range of a preset spatial area, the spatial location verification is deemed successful.

[0027] If the device location information is outside the preset spatial area, the spatial location verification is deemed unsuccessful.

[0028] Optionally, in response to a user request, the device location information of the user's device is obtained, including:

[0029] In response to a user request, determine the operation corresponding to the user request;

[0030] If the operation corresponding to the user request is a specified operation, obtain the device location information of the user's device.

[0031] Optionally, it also includes:

[0032] If spatial location verification fails or user gesture verification fails, a security authentication failure message is generated to refuse to execute the operation corresponding to the user request.

[0033] A security authentication device, the device comprising:

[0034] The device location information acquisition module is used to acquire the device location information of the user's device in response to a user request;

[0035] The user gesture data acquisition module is used to perform spatial location verification based on the device location information, and acquire user gesture data collected by the user device if the spatial location verification is successful; wherein, the user gesture data is data collected when the user performs a gesture action using the user device;

[0036] The security authentication message generation module is used to verify the user's gesture based on the user's gesture data, and generate a security authentication pass message when the user's gesture verification is successful, so as to trigger the execution of the operation corresponding to the user's request.

[0037] An electronic device includes a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein the computer program, when executed by the processor, implements the method described above.

[0038] A computer-readable storage medium on which a computer program is stored, which, when executed by a processor, implements the method described above.

[0039] A computer program product includes a computer program that, when executed by a processor, implements the method described above.

[0040] The embodiments of the present invention have the following advantages:

[0041] In this embodiment of the invention, in response to a user request, the device location information of the user device is obtained, spatial location verification is performed based on the device location information, and if the spatial location verification is successful, user gesture data collected by the user device is obtained, user gesture verification is performed based on the user gesture data, and if the user gesture verification is successful, a security authentication success message is generated to trigger the execution of the operation corresponding to the user request. This realizes security authentication by combining location and gesture, improves the security of the system, effectively prevents remote attacks, and even if digital credentials are leaked, attackers cannot complete gesture operations in unauthorized locations. Attached Figure Description

[0042] To more clearly illustrate the technical solution of the present invention, the accompanying drawings used in the description of the present invention will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0043] Figure 1 This is a flowchart of the steps of a security authentication method provided in some embodiments of the present invention;

[0044] Figure 2 This is a flowchart of the steps of a second security authentication method provided in some embodiments of the present invention;

[0045] Figure 3 This is a flowchart of the steps of a security authentication method three provided in some embodiments of the present invention;

[0046] Figure 4 This is a flowchart of the steps of a security authentication method four provided in some embodiments of the present invention;

[0047] Figure 5 This is a flowchart of the steps of a security authentication method provided in some embodiments of the present invention;

[0048] Figure 6 This is a flowchart of the steps of a security authentication method six provided in some embodiments of the present invention;

[0049] Figure 7 This is a structural block diagram of a security authentication device provided in some embodiments of the present invention. Detailed Implementation

[0050] To make the above-mentioned objects, features, and advantages of the present invention more apparent and understandable, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without inventive effort are within the scope of protection of the present invention.

[0051] In this embodiment of the invention, centimeter-level indoor positioning is achieved using Ultra Wide Band (UWB) technology, limiting the verification operation to a specific three-dimensional coordinate range, realizing three-dimensional spatial binding, and supporting complex indoor layouts. Furthermore, users are required to complete preset spatial gestures (such as planar swipes or three-dimensional rotations) at designated locations to achieve dynamic gesture verification. Moreover, through the strong correlation between spatial location and action, dual verification combining positioning data and action trajectory is achieved, blocking the possibility of attackers simulating the verification process through digital means, realizing a design to prevent remote attacks, improving the anti-spoofing capability of the verification process, reducing the risk of physical environment forgery, and even if digital credentials are leaked, attackers cannot complete gesture operations in unauthorized locations.

[0052] like Figure 1 By deploying ultra-wideband (UWB) base stations, a three-dimensional coordinate system is constructed based on these base stations. Administrators can configure gesture templates (selecting gesture types, recording gesture postures, and setting error tolerances) through a backend, and can also set unique identifiers and feature vector values ​​for each gesture template. In practical applications, real-time monitoring is used. When a user triggers a high-risk operation, the server issues a random gesture command, collects user gesture data, performs hash value verification and similarity verification on the user gesture data, and executes the user's requested operation only after the user gesture data verification is successful.

[0053] Reference Figure 2 The diagram illustrates a flowchart of a security authentication method provided by some embodiments of the present invention. This method can be applied to a server, which can be a security authentication server.

[0054] Specifically, it may include the following steps:

[0055] Step 201: In response to the user request, obtain the device location information of the user's device.

[0056] As an example, user equipment can be a smart terminal device (such as a tablet or mobile phone) that integrates an accelerometer and gyroscope, or a dedicated sensor device.

[0057] When a user needs to perform an operation, such as operating a smart home device, a user request can be sent. This can be done through the user's device, triggered by a voice command or manual operation command from the central control device, or by directly operating the device corresponding to the user request (such as requesting to turn off the device). Upon detecting the user request, a security authentication process can be initiated, thereby obtaining the device's location information for spatial location verification.

[0058] In some examples, the device location information is the location information within the indoor environment. After detecting a user request, the system can detect the user devices present in the indoor environment and obtain their location information. In other examples, the system can also directly obtain the location information of a specified user device.

[0059] In some embodiments of the present invention, an ultra-wideband base station is deployed in an indoor environment, and the device location information is determined by the ultra-wideband base station based on the ultra-wideband signal of the user equipment.

[0060] Ultra-wideband (UWB) technology is a wireless carrier communication technology that differs from traditional wireless communication technologies. It does not use sinusoidal carriers but instead transmits data using nanosecond-level non-sinusoidal narrow pulses, thus occupying a very wide frequency spectrum. Specifically, UWB technology has the following main characteristics:

[0061] The system has low complexity, low transmitted signal power spectral density, is insensitive to channel fading, has low interception capability, and high positioning accuracy, making it particularly suitable for high-speed wireless access in dense multipath environments such as indoor spaces.

[0062] Strong anti-interference performance: When transmitting, ultra-wideband (UWB) signals disperse weak radio pulses across a wide frequency band, with output power even lower than the noise generated by ordinary devices. During reception, the signal energy is recovered, generating spreading gain during despreading. Therefore, compared to IEEE 802.11a, IEEE 802.11b, and Bluetooth, UWB technology exhibits stronger anti-interference capabilities at the same code rate.

[0063] High transmission rate: Ultra-wideband technology can achieve data rates of tens to hundreds of megabits per second, far exceeding wireless communication technologies such as Bluetooth, IEEE 802.11a, and IEEE 802.11b.

[0064] Extremely wide bandwidth: Ultra-wideband technology uses bandwidths of 1 GHz or higher, reaching several gigahertz, and can work simultaneously with narrowband communication systems without interfering with each other.

[0065] In practical applications, ultra-wideband base station arrays can be deployed in indoor environments to construct a three-dimensional coordinate system. The ultra-wideband base stations can send ultra-wideband signals to user equipment, and then the location of the user equipment can be automatically calculated through time-of-flight (ToF) ranging technology to obtain location information.

[0066] Time-of-flight ranging (TOF) is a method for calculating distance by measuring the time between signal transmission and reception. Specifically, an ultra-wideband (UWB) base station transmits an UWB signal, a user equipment (UE) receives the signal and records the reception time, then sends the reception time back to the UWB base station. The UWB base station calculates the distance between the UE and the UWB base station based on the signal transmission speed and transmission time. By combining the location information of multiple UWB base stations, the specific position of the UE in a three-dimensional coordinate system can be determined through triangulation or multi-point positioning algorithms.

[0067] In some embodiments of the present invention, in response to a user request, obtaining the device location information of the user device includes: in response to the user request, determining the operation corresponding to the user request; if the operation corresponding to the user request is a specified operation, obtaining the device location information of the user device.

[0068] In some examples, the specified operation can be an operation with a risk level higher than the preset level, or it can be an operation used for preset settings, such as turning off important smart home devices or modifying core configurations.

[0069] In practical applications, the operation corresponding to the user request can be determined, and it can be judged whether the operation is a specified operation. If the operation is not a specified operation, it can be performed directly without security authentication. If the operation is a specified operation, the device location information of the user's device can be obtained, and subsequent spatial location verification and user gesture verification processes can be carried out. This ensures the security of the system and avoids excessive interference with the user's normal operation.

[0070] Step 202: Perform spatial location verification based on the device location information, and if the spatial location verification is successful, acquire the user gesture data collected by the user device; wherein, the user gesture data is the data collected when the user performs a gesture action using the user device.

[0071] After obtaining the device location information, it can be verified according to preset spatial location rules. These rules define one or more spatial regions where the user's requested operation is allowed. If the spatial location verification is successful, data generated when the user performs a gesture, such as accelerometer and gyroscope readings, is collected for subsequent user gesture verification.

[0072] In some examples, when performing a gesture, the user controls the user device to move in tandem with the user by holding or wearing it, thereby obtaining user gesture data. The user gesture data may include motion trajectory data of the user device and the user moving in tandem.

[0073] In some embodiments of the present invention, spatial location verification based on the device location information includes: determining that the spatial location verification is successful when the device location information is within the location range of a preset spatial area; and determining that the spatial location verification is unsuccessful when the device location information is outside the location range of the preset spatial area.

[0074] In practical applications, a verification space area can be preset. After obtaining the device location information, it can be determined whether the device location information is within the preset space area.

[0075] If the device location information is within the preset spatial area, the spatial location verification is deemed successful, indicating that the user device is in a trusted location, and the subsequent user gesture verification process is allowed. If the device location information is outside the preset spatial area, the spatial location verification is deemed unsuccessful, indicating that the user device is in an untrusted location. In this case, the operation corresponding to the user request can be directly refused, or the user can be prompted that the device is in an untrusted location and the operation cannot be performed.

[0076] For example, in an indoor environment, the preset space area can be a cubic space that is "1.2m ± 0.1m from the ground and 2m ± 0.05m from the east wall".

[0077] In some examples, the preset spatial area can be dynamically adjusted, exhibiting good environmental adaptability.

[0078] Once spatial location verification is successful, user gesture data collected by the user device can be acquired for user gesture authentication. As an example, user gesture data can include acceleration data, angular velocity data, and position data collected by the user device when the user performs a gesture action. This user gesture data can be used to represent the characteristics of the gesture action performed by the user.

[0079] In some embodiments of the present invention, when the spatial location verification is passed, acquiring the user gesture data collected by the user device includes: when the spatial location verification is passed, feeding back gesture guidance information of the target gesture action template, the gesture guidance information being used to guide the user to perform the corresponding gesture action using the user device; and acquiring the user gesture data collected by the user device.

[0080] In some examples, the target gesture template is a gesture template randomly selected from a preset gesture list, which stores preset gesture data for multiple gesture templates.

[0081] In practical applications, multiple gesture templates can be pre-set and their preset gesture data can be stored. Before acquiring user gesture data, gesture guidance information for the target gesture template can be sent to the user's device to guide the user to perform the corresponding gesture actions as required.

[0082] After receiving the gesture guidance information, the user can perform the corresponding gesture action according to the gesture guidance information. The user device can collect relevant data when the user performs the gesture action, such as acceleration data and angular velocity data, and send the data to the server for subsequent user gesture verification process. In this way, it can be ensured that the user performs the gesture action as required, thereby improving the accuracy and reliability of user gesture verification.

[0083] Step 203: Perform user gesture verification based on the user gesture data, and if the user gesture verification is successful, generate a security authentication success message to trigger the execution of the operation corresponding to the user request.

[0084] After obtaining user gesture data, user gesture verification can be performed based on the gesture data. If the user gesture verification is successful, a security authentication success message can be generated, which can then directly control and execute the operation corresponding to the user's request or authorize the execution of the operation corresponding to the user's request, such as controlling smart home devices (such as security hosts, other important security devices, etc.) to perform shutdown operations or change core configuration operations.

[0085] In some embodiments of the present invention, it further includes:

[0086] If spatial location verification fails or user gesture verification fails, a security authentication failure message is generated to refuse to execute the operation corresponding to the user request.

[0087] In practical applications, if spatial location verification fails (i.e., the user device is in an untrusted location) or user gesture verification fails (i.e., the user's gesture does not match the preset gesture template), a security authentication failure message can be generated, and the operation corresponding to the user's request can be refused. This can effectively prevent unauthorized users or attackers from performing malicious operations in unauthorized locations, thereby improving system security.

[0088] In some embodiments of the present invention, user gesture verification based on the user gesture data includes: obtaining preset gesture data corresponding to the target gesture action template; and performing user gesture verification based on the user gesture data and the preset gesture data.

[0089] In some examples, the gesture templates are dynamically adjustable, have good environmental adaptability, and the gesture operation is natural and intuitive, improving the user experience.

[0090] In some embodiments of the present invention, user gesture verification based on the user gesture data and the preset gesture data includes: determining a user gesture feature vector from the user gesture data; generating a user gesture identifier based on the user gesture feature vector; comparing the user gesture identifier with a preset gesture identifier in the preset gesture data; if the user gesture identifier and the preset gesture identifier match, determining the similarity between the user gesture feature vector and the preset gesture feature vector in the preset gesture data; and if the similarity is greater than or equal to a preset similarity, determining that the user gesture verification is successful.

[0091] In some examples, the gesture identifier can be a hash value, which can be converted into a unique hash value by using a cryptographic hash function (such as SHA-256) to convert the complete data of the gesture (coordinate sequence, speed, direction).

[0092] In practical applications, multiple gesture actions (such as swiping a tablet three times in the air) can be performed in advance by the user device, and the corresponding gesture data can be collected and stored as a template. Specifically, corresponding data can be collected when the gesture action is performed, and a preset gesture feature vector can be extracted from it. Then, a preset gesture identifier can be generated based on the preset gesture feature vector, and the preset gesture identifier and preset gesture feature vector can be associated and stored as the metadata of the template.

[0093] After obtaining real-time user gesture data, real-time user gesture feature vectors (such as direction, speed, acceleration, etc.) can be extracted from them. Then, user gesture identifiers (such as hash values) can be calculated based on the user gesture feature vectors and compared with the preset gesture identifiers of gesture action templates in the server.

[0094] If the user's gesture identifier matches the preset gesture identifier, the similarity between the user's gesture feature vector and the preset gesture feature vector in the preset gesture data can be further calculated. This can be done using algorithms such as Dynamic Time Warping (DTW) or cosine similarity. If the similarity is greater than or equal to a preset similarity threshold (e.g., 95%), the user's gesture verification is considered successful.

[0095] In some examples, an error tolerance can be set, such as ±2cm trajectory deviation. Within the error tolerance range, the data can be considered to be matched.

[0096] In some embodiments of the present invention, it further includes:

[0097] If the user gesture identifier and the preset gesture identifier do not match, or if the user gesture identifier and the preset gesture identifier match, and the similarity is less than the preset similarity, the user gesture verification is determined to fail.

[0098] In practical applications, if the user's gesture identifier does not match the preset gesture identifier, or if the user's gesture identifier matches the preset gesture identifier but the similarity is less than the preset similarity, it indicates that the gesture action performed by the user does not match the preset gesture action template. This may be due to user operation error or malicious attack behavior. In this case, it can be determined that the user gesture verification failed, and a security authentication failure message is generated to refuse to execute the operation corresponding to the user's request, so as to ensure the security of the system.

[0099] In some examples, if the user gesture identifier and the preset gesture identifier do not match, it may be due to template tampering or data transmission error, and subsequent verification will be rejected directly. However, if the user gesture identifier and the preset gesture identifier match, the next step of feature vector similarity comparison can be performed. If the similarity is less than the preset similarity, verification can be rejected and an anomaly can be recorded.

[0100] In this embodiment of the invention, in response to a user request, the device location information of the user device is obtained, spatial location verification is performed based on the device location information, and if the spatial location verification is successful, user gesture data collected by the user device is obtained, user gesture verification is performed based on the user gesture data, and if the user gesture verification is successful, a security authentication success message is generated to trigger the execution of the operation corresponding to the user request. This realizes security authentication by combining location and gesture, improves the security of the system, effectively prevents remote attacks, and even if digital credentials are leaked, attackers cannot complete gesture operations in unauthorized locations.

[0101] Reference Figure 3 The diagram illustrates a flowchart of another security authentication method provided by some embodiments of the present invention, which may specifically include the following steps:

[0102] Step 301: In response to the user request, obtain the device location information of the user's device.

[0103] Step 302: Perform spatial location verification based on the device location information, and if the spatial location verification is successful, provide feedback on the gesture guidance information of the target gesture action template. The gesture guidance information is used to guide the user to perform the corresponding gesture action using the user device.

[0104] Step 303: Obtain user gesture data collected by the user device; wherein, the user gesture data is data collected when the user performs a gesture action using the user device.

[0105] Step 304: Perform user gesture verification based on the user gesture data, and if the user gesture verification is successful, generate a security authentication success message to trigger the execution of the operation corresponding to the user request.

[0106] Reference Figure 4 The diagram illustrates a flowchart of another security authentication method provided by some embodiments of the present invention, which may specifically include the following steps:

[0107] Step 401: In response to the user request, obtain the device location information of the user's device.

[0108] Step 402: Perform spatial location verification based on the device location information, and if the spatial location verification is successful, acquire the user gesture data collected by the user device; wherein, the user gesture data is the data collected when the user performs a gesture action using the user device.

[0109] Step 403: Obtain the preset gesture data corresponding to the target gesture action template.

[0110] Step 404: Determine the user gesture feature vector from the user gesture data.

[0111] Step 405: Generate a user gesture identifier based on the user gesture feature vector.

[0112] Step 406: Compare the user gesture identifier with the preset gesture identifier in the preset gesture data.

[0113] Step 407: If the user gesture identifier and the preset gesture identifier match, determine the similarity between the user gesture feature vector and the preset gesture feature vector in the preset gesture data.

[0114] Step 408: If the similarity is greater than or equal to the preset similarity, the user gesture verification is determined to be successful.

[0115] Step 409: If the user's gesture verification is successful, a security authentication success message is generated to trigger the execution of the operation corresponding to the user's request.

[0116] Reference Figure 5 The diagram illustrates a flowchart of another security authentication method provided by some embodiments of the present invention, which may specifically include the following steps:

[0117] Step 501: In response to the user request, determine the operation corresponding to the user request.

[0118] Step 502: If the operation corresponding to the user request is a specified operation, obtain the device location information of the user device.

[0119] Step 503: Perform spatial location verification based on the device location information, and if the spatial location verification is successful, acquire the user gesture data collected by the user device; wherein, the user gesture data is the data collected when the user performs a gesture action using the user device.

[0120] Step 504: Perform user gesture verification based on the user gesture data, and if the user gesture verification is successful, generate a security authentication success message to trigger the execution of the operation corresponding to the user request.

[0121] Reference Figure 6 The diagram illustrates a flowchart of another security authentication method provided by some embodiments of the present invention, which may specifically include the following steps:

[0122] Step 601: In response to a user request, obtain the device location information of the user device; the device location information is the location information in an indoor environment, in which an ultra-wideband base station is deployed, and the device location information is determined by the ultra-wideband base station based on the ultra-wideband signal of the user device.

[0123] Step 602: If the device location information is within the location range of the preset spatial area, the spatial location verification is confirmed to be successful.

[0124] Step 603: If the spatial location verification is successful, acquire the user gesture data collected by the user device; wherein, the user gesture data is the data collected when the user performs a gesture action using the user device.

[0125] Step 604: Perform user gesture verification based on the user gesture data, and if the user gesture verification is successful, generate a security authentication success message to trigger the execution of the operation corresponding to the user request.

[0126] It should be noted that, for the sake of simplicity, the method embodiments are all described as a series of actions. However, those skilled in the art should understand that the embodiments of the present invention are not limited to the described order of actions, because according to the embodiments of the present invention, some steps can be performed in other orders or simultaneously. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions involved are not necessarily essential to the embodiments of the present invention.

[0127] Reference Figure 7 The diagram illustrates a structural schematic of a security authentication device provided in some embodiments of the present invention, which may specifically include the following modules:

[0128] The device location information acquisition module 701 is used to acquire the device location information of the user's device in response to a user request;

[0129] The user gesture data acquisition module 702 is used to perform spatial location verification based on the device location information, and acquire user gesture data collected by the user device if the spatial location verification is successful; wherein, the user gesture data is data collected when the user performs a gesture action using the user device;

[0130] The security authentication pass message generation module 703 is used to perform user gesture verification based on the user gesture data, and generate a security authentication pass message when the user gesture verification is successful, so as to trigger the execution of the operation corresponding to the user request.

[0131] Optionally, if the spatial location verification is successful, the user gesture data collected by the user equipment is acquired, including:

[0132] If the spatial location verification is successful, the system will provide gesture guidance information for the target gesture action template. This gesture guidance information is used to guide the user to perform the corresponding gesture action using the user device.

[0133] Acquire user gesture data collected by the user equipment.

[0134] Optionally, user gesture verification based on the user gesture data includes:

[0135] Obtain the preset gesture data corresponding to the target gesture action template;

[0136] User gesture verification is performed based on the user gesture data and the preset gesture data.

[0137] Optionally, user gesture verification is performed based on the user gesture data and the preset gesture data, including:

[0138] From the user gesture data, determine the user gesture feature vector;

[0139] Generate a user gesture identifier based on the user gesture feature vector;

[0140] The user gesture identifier is compared with the preset gesture identifier in the preset gesture data;

[0141] If the user gesture identifier and the preset gesture identifier match, determine the similarity between the user gesture feature vector and the preset gesture feature vector in the preset gesture data;

[0142] If the similarity is greater than or equal to a preset similarity, the user gesture verification is deemed successful.

[0143] Optionally, it also includes:

[0144] If the user gesture identifier and the preset gesture identifier do not match, or if the user gesture identifier and the preset gesture identifier match, and the similarity is less than the preset similarity, the user gesture verification is determined to fail.

[0145] Optionally, the target gesture template is a gesture template randomly selected from a preset gesture list, and the gesture list stores preset gesture data of multiple gesture templates.

[0146] Optionally, the device location information is location information in an indoor environment, where an ultra-wideband base station is deployed, and the device location information is determined by the ultra-wideband base station based on the ultra-wideband signal of the user equipment.

[0147] Optionally, spatial location verification is performed based on the device location information, including:

[0148] If the device location information is within the location range of a preset spatial area, the spatial location verification is deemed successful.

[0149] If the device location information is outside the preset spatial area, the spatial location verification is deemed unsuccessful.

[0150] Optionally, in response to a user request, the device location information of the user's device is obtained, including:

[0151] In response to a user request, determine the operation corresponding to the user request;

[0152] If the operation corresponding to the user request is a specified operation, obtain the device location information of the user's device.

[0153] Optionally, it also includes:

[0154] If spatial location verification fails or user gesture verification fails, a security authentication failure message is generated to refuse to execute the operation corresponding to the user request.

[0155] In this embodiment of the invention, in response to a user request, the device location information of the user device is obtained, spatial location verification is performed based on the device location information, and if the spatial location verification is successful, user gesture data collected by the user device is obtained, user gesture verification is performed based on the user gesture data, and if the user gesture verification is successful, a security authentication success message is generated to trigger the execution of the operation corresponding to the user request. This realizes security authentication by combining location and gesture, improves the security of the system, effectively prevents remote attacks, and even if digital credentials are leaked, attackers cannot complete gesture operations in unauthorized locations.

[0156] Some embodiments of the present invention also provide an electronic device, including a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein the computer program, when executed by the processor, implements the method described above.

[0157] Some embodiments of the present invention also provide a computer-readable storage medium on which a computer program is stored, and which, when executed by a processor, implements the method described above.

[0158] Some embodiments of the present invention also provide a computer program product, including a computer program that, when executed by a processor, implements the method described above.

[0159] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment.

[0160] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, use and processing of the relevant data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and corresponding operation portals are provided for users to choose to authorize or refuse.

[0161] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0162] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, apparatus, or computer program products. Therefore, embodiments of the present invention can take the form of entirely hardware embodiments, entirely software embodiments, or embodiments combining software and hardware aspects. Furthermore, embodiments of the present invention can take the form of computer program products implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0163] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing terminal device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal device, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0164] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing terminal device to operate in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0165] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal equipment, causing a series of operational steps to be performed on the computer or other programmable terminal equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable terminal equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0166] Although preferred embodiments of the present invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of the embodiments of the present invention.

[0167] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or terminal device. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or terminal device that includes the aforementioned element.

[0168] The above provides a detailed description of the security authentication method, apparatus, equipment, medium, and product. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only for the purpose of helping to understand the method and core ideas of the present invention. At the same time, those skilled in the art will recognize that, based on the ideas of the present invention, there will be changes in the specific implementation methods and application scope. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A method for security authentication, characterized in that, The method includes: In response to a user request, obtain the device location information of the user's device; Spatial location verification is performed based on the device location information, and if the spatial location verification is successful, user gesture data collected by the user device is obtained; wherein, the user gesture data is data collected when the user performs a gesture action using the user device; User gesture verification is performed based on the user gesture data, and if the user gesture verification is successful, a security authentication success message is generated to trigger the execution of the operation corresponding to the user request.

2. The method according to claim 1, characterized in that, If the spatial location verification is successful, the user gesture data collected by the user equipment is acquired, including: If the spatial location verification is successful, the system will provide gesture guidance information for the target gesture action template. This gesture guidance information is used to guide the user to perform the corresponding gesture action using the user device. Acquire user gesture data collected by the user equipment.

3. The method according to claim 2, characterized in that, User gesture verification based on the user gesture data includes: Obtain the preset gesture data corresponding to the target gesture action template; User gesture verification is performed based on the user gesture data and the preset gesture data.

4. The method according to claim 3, characterized in that, User gesture verification is performed based on the user gesture data and the preset gesture data, including: From the user gesture data, determine the user gesture feature vector; Generate a user gesture identifier based on the user gesture feature vector; The user gesture identifier is compared with the preset gesture identifier in the preset gesture data; If the user gesture identifier and the preset gesture identifier match, determine the similarity between the user gesture feature vector and the preset gesture feature vector in the preset gesture data; If the similarity is greater than or equal to a preset similarity, the user gesture verification is deemed successful.

5. The method according to claim 4, characterized in that, Also includes: If the user gesture identifier and the preset gesture identifier do not match, or if the user gesture identifier and the preset gesture identifier match, and the similarity is less than the preset similarity, the user gesture verification is determined to fail.

6. The method according to claim 2, characterized in that, The target gesture template is a gesture template randomly selected from a preset gesture list, and the gesture list stores preset gesture data of multiple gesture templates.

7. The method according to any one of claims 1-6, characterized in that, The device location information is the location information in an indoor environment, where an ultra-wideband base station is deployed. The device location information is determined by the ultra-wideband base station based on the ultra-wideband signal of the user equipment.

8. The method according to any one of claims 1-6, characterized in that, Spatial location verification based on the device location information includes: If the device location information is within the location range of a preset spatial area, the spatial location verification is deemed successful. If the device location information is outside the preset spatial area, the spatial location verification is deemed unsuccessful.

9. The method according to any one of claims 1-6, characterized in that, In response to a user request, obtain the device location information of the user's device, including: In response to a user request, determine the operation corresponding to the user request; If the operation corresponding to the user request is a specified operation, obtain the device location information of the user's device.

10. The method according to any one of claims 1-6, characterized in that, Also includes: If spatial location verification fails or user gesture verification fails, a security authentication failure message is generated to refuse to execute the operation corresponding to the user request.

11. A security authentication device, characterized in that, The device includes: The device location information acquisition module is used to acquire the device location information of the user's device in response to a user request; The user gesture data acquisition module is used to perform spatial location verification based on the device location information, and acquire user gesture data collected by the user device if the spatial location verification is successful; wherein, the user gesture data is data collected when the user performs a gesture action using the user device; The security authentication is achieved through a message generation module, which verifies the user's gesture based on the user's gesture data. If the user's gesture verification is successful, a security authentication success message is generated to trigger the execution of the operation corresponding to the user's request.

12. An electronic device, characterized in that, It includes a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein the computer program, when executed by the processor, implements the method as described in any one of claims 1 to 10.

13. A computer-readable storage medium, characterized in that, A computer program is stored on the computer-readable storage medium, which, when executed by a processor, implements the method as described in any one of claims 1 to 10.

14. A computer program product, characterized in that, It includes a computer program that, when executed by a processor, implements the method as described in any one of claims 1 to 10.

Images