A scene-based user authentication method, system, device and storage medium
Patent Information
- Application Number
- CN202611120252.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2026-07-27
- Publication Date
- 2026-10-16
AI Technical Summary
[0004]本发明实施例提供一种基于场景的用户认证方法、系统、设备及存储介质，以解决相关技术中现有的用户认证方法采用固定的认证方式，从而缺乏场景适配性的技术问题
[0015]本发明提供的技术方案带来的有益效果包括：
Smart Images
Figure CN122933137A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of identity authentication technology, and in particular to a scenario-based user authentication method, system, device, and storage medium. Background Technology
[0002] As core infrastructure, industrial plants rely heavily on information and industrial control systems, whose security directly impacts energy stability and societal operation. Faced with security risks in complex scenarios, traditional static authentication methods are proving inadequate. Therefore, application-scenario-based adaptive authentication systems have become essential. From a security perspective, the risk levels vary significantly across different power plant scenarios.
[0003] However, existing identity authentication technologies typically employ static strategies, which pre-define fixed authentication methods. This traditional approach lacks scenario adaptability and cannot meet the needs of different scenarios, resulting in cumbersome user experiences in low-risk scenarios and insufficient security in high-risk scenarios. Summary of the Invention
[0004] This invention provides a scenario-based user authentication method, system, device, and storage medium to solve the technical problem that existing user authentication methods in related technologies use fixed authentication methods, thus lacking scenario adaptability.
[0005] Firstly, a scenario-based user authentication method is provided, including the following steps: Obtain the scene dataset and user dataset; Calculate the scene safety index for multiple scenes in the scene dataset based on the scene dataset; Calculate the user trust index of multiple users in the user dataset based on the user dataset; Obtain the user to be authenticated and the scene in which the user is located. Based on the preset authentication rules, output the authentication process according to the scene security index of the scene in which the user is located and the user trust index of the user.
[0006] In some embodiments, calculating the scene safety index of multiple scenes in the scene dataset based on the scene dataset includes: The scenario dataset includes authentication information for multiple scenarios, and the authentication false recognition rate for multiple scenarios is calculated based on the authentication information for the multiple scenarios. Based on the authentication false recognition rate of the multiple scenarios, a scenario security index is calculated for each scenario.
[0007] In some embodiments, the scene dataset includes authentication information for multiple scenes, and the authentication false recognition rate for multiple scenes is calculated based on the authentication information for the multiple scenes, including: The authentication information for each scenario includes multiple authentication methods, as well as the number of times an unauthorized user attempts to authenticate and the number of times the unauthorized user succeeds under each authentication method. The false acceptance rate of an authentication method is calculated based on the number of times an unauthorized user attempts authentication and the number of times an unauthorized user succeeds in authentication under any authentication method in each scenario. The false acceptance rate of the combination of the two authentication methods is calculated based on the number of times an unauthorized user attempts authentication and the number of times an unauthorized user succeeds under any two authentication methods in each scenario. Similarly, the false recognition rate of authentication for each scenario is calculated as the false recognition rate of authentication for that scenario across all combinations of authentication methods.
[0008] In some embodiments, the calculation of a scenario security index for multiple scenarios based on the authentication false recognition rate of the multiple scenarios includes: The scenario security index is calculated by weighting the false acceptance rates of all authentication method combinations for each scenario.
[0009] In some embodiments, calculating the user trust index of multiple users in the user dataset based on the user dataset includes: The user dataset includes user authentication information for each user under multiple authentication methods, and calculates the user's authentication frequency, authentication success rate, and authentication time difference under multiple authentication methods based on the user authentication information of multiple users under multiple authentication methods. The user trust index is calculated based on each user's authentication frequency, authentication success rate, and authentication time difference under various authentication methods.
[0010] In some embodiments, the step of obtaining the user to be authenticated and the scene in which the user is located, and outputting the authentication process based on the scene security index of the scene in which the user is located and the user trust index of the user to be authenticated according to preset authentication rules, includes: Obtain the scene security threshold, the security level of the scene where the user to be authenticated is located, and the authentication process corresponding to each security level from the scene dataset; Obtain the trust level and corresponding trust threshold of the user to be authenticated in the user dataset; If the user trust index of the user to be authenticated is less than or equal to the corresponding trust threshold, the user's trust level will be reduced; if the user trust index of the user to be authenticated is greater than the corresponding trust threshold, the user's trust level will remain unchanged. The authentication process is output based on the scene security threshold, the trust level of the user to be authenticated, the scene security index of the scene where the user to be authenticated is located, the security level, and the authentication process corresponding to all security levels.
[0011] In some embodiments, the step of outputting the authentication process based on the scene security threshold, the trust level of the user to be authenticated, the scene security index of the scene where the user to be authenticated is located, the security level, and the authentication process corresponding to all security levels includes: If the trust level of the user to be authenticated is lower than the security level of the scenario in which the user is located, then authentication is prohibited. If the trust level of the user to be authenticated is greater than or equal to the security level of the scenario in which the user is located, and the scenario security index of the scenario in which the user is located is greater than the scenario security threshold, then the authentication process corresponding to the scenario security level will be output. If the trust level of the user to be authenticated is greater than or equal to the security level of the scenario in which the user is located, but the scenario security index of the scenario in which the user is located is less than the scenario security threshold, then the authentication process corresponding to the next higher security level of the scenario security level will be output. If the security level of this scenario is the highest level, then output the authentication process corresponding to this security level.
[0012] Secondly, a scenario-based user authentication system is provided, including: The acquisition module is used to acquire scene datasets and user datasets; The first calculation module is used to calculate the scene safety index of multiple scenes in the scene dataset based on the scene dataset; The second calculation module is used to calculate the user trust index of multiple users in the user dataset based on the user dataset. The output module is used to obtain the user to be authenticated and the scene in which the user is located. Based on the preset authentication rules, the authentication process is output according to the scene security index of the scene in which the user is located and the user trust index of the user.
[0013] Thirdly, a computer device is provided, comprising: a memory and a processor, wherein the memory stores at least one instruction, the at least one instruction being loaded and executed by the processor to implement the aforementioned scenario-based user authentication method.
[0014] Fourthly, a computer-readable storage medium is provided, the computer-readable storage medium storing computer instructions, which, when executed by a computer, cause the computer to perform the aforementioned scenario-based user authentication method.
[0015] The beneficial effects of the technical solution provided by this invention include: This invention discloses a scenario-based user authentication method, system, device, and storage medium. It acquires a scenario dataset and a user dataset; calculates a scenario security index for multiple scenarios within the scenario dataset; calculates a user trust index for multiple users within the user dataset; acquires the user to be authenticated and the scenario in which the user is located; and outputs an authentication process based on the scenario security index of the scenario in which the user is located and the user trust index of the user to be authenticated, according to preset authentication rules. This invention achieves a quantitative assessment of the authentication scenario risk and the credibility of user behavior through a dual-dimensional evaluation of the scenario security index and the user trust index. Based on the comparison results of the dual indices and preset thresholds, it dynamically adjusts the authentication strategy and user permissions, solving the problems of rigidity, poor scenario adaptability, and delayed risk response in traditional identity authentication strategies, and achieving a dynamic balance between system security and user convenience. Attached Figure Description
[0016] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0017] Figure 1 This is a flowchart illustrating a scenario-based user authentication method provided in an embodiment of the present invention.
[0018] Figure 2 Implementation provided for the embodiments of the present invention Figure 1 A flowchart illustrating step S2.
[0019] Figure 3 Implementation provided for the embodiments of the present invention Figure 1 A flowchart illustrating step S4.
[0020] Figure 4 This is a schematic diagram of the structure of a scenario-based user authentication system provided in an embodiment of the present invention.
[0021] Figure 5 This is a schematic diagram of the structure of a computer device provided in an embodiment of the present invention. Detailed Implementation
[0022] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.
[0023] This invention provides a scenario-based user authentication method, system, device, and storage medium, which can solve the technical problem that existing user authentication methods in related technologies use fixed authentication methods and thus lack scenario adaptability.
[0024] See Figure 1 As shown, this embodiment of the invention provides a scenario-based user authentication method, including the following steps: S1. Obtain the scene dataset and user dataset.
[0025] In this embodiment, obtaining the scene dataset and user dataset includes: The scenario dataset includes basic information and historical security data for all scenarios, namely, scenario authentication information, scenario security level, scenario security threshold, and authentication process corresponding to the security level. The authentication information in the scenario includes multiple authentication methods, the number of times an unauthorized user attempts authentication under these methods, and the number of times an unauthorized user succeeds. This embodiment of the invention does not limit the number or types of authentication methods.
[0026] In one specific embodiment, the implementation site of the present invention is an industrial factory, and the scenarios in the scenario dataset include locations that require user authentication, such as factory entrances and exits, office areas, R&D areas, data centers, and conference centers. The authentication methods include knowledge-based authentication, biometric authentication, and hardware authentication. The knowledge-based authentication methods include passwords, authorization codes, and operation passwords. The biometric authentication methods include fingerprints, iris scans, and facial recognition. The hardware authentication methods include device fingerprints. The security level of the scenario includes three levels: Level 1, Level 2, and Level 3. Specifically, the security level of the scenario is determined by the purpose of the scenario and the users. For example, the security level of the factory entrance is Level 1, which ensures that all factory employees can pass through; the security level of the office area is Level 2, which restricts the entry of some employees; and the security level of the R&D area is Level 3, which only allows R&D personnel to enter. Each security level has its own corresponding authentication process, which includes authentication using one authentication method, authentication using a combination of two authentication methods, and authentication using a combination of three authentication methods.
[0027] The user dataset includes user authentication information under various authentication methods, user trust levels, and trust thresholds corresponding to those trust levels. The user authentication information under multiple authentication methods includes the latest time when the user used each authentication method, the time when the user first applied for authentication, the total number of authentication attempts, and the number of successful authentication attempts. In the above specific embodiments, the latest time of the user's use of various authentication methods includes the latest time of the user's use of knowledge-based authentication methods, the latest time of the user's use of biometric authentication methods, and the update time of the user's use of hardware-based authentication methods; The user's trust level includes Level 1, Level 2, and Level 3. The user's trust level corresponds to the security level of the scenario. If the user's trust level is Level 1, it means that the user can enter a Level 1 security level scenario. If the user's trust level is Level 2, it means that the user can enter both Level 1 and Level 2 security level scenarios. If the user's trust level is Level 3, it means that the user can enter all three levels of security level scenarios. Furthermore, different levels of trust correspond to different levels of trust thresholds, namely Level 1 trust threshold, Level 2 trust threshold, and Level 3 trust threshold.
[0028] S2. Calculate the scene safety index of multiple scenes in the scene dataset based on the scene dataset.
[0029] See Figure 2 As shown, step S2 includes: S21. The scene dataset includes authentication information for multiple scenes, and the authentication false recognition rate for multiple scenes is calculated based on the authentication information for the multiple scenes.
[0030] In this embodiment, the scene dataset includes authentication information for multiple scenes, and the authentication false recognition rate for multiple scenes is calculated based on the authentication information for the multiple scenes, including: The authentication information for each scenario includes multiple authentication methods, as well as the number of times an unauthorized user attempts to authenticate and the number of times the unauthorized user succeeds under each authentication method. The false acceptance rate of an authentication method is calculated based on the number of times an unauthorized user attempts authentication and the number of times an unauthorized user succeeds in authentication under any authentication method in each scenario. The false acceptance rate of the combination of the two authentication methods is calculated based on the number of times an unauthorized user attempts authentication and the number of times an unauthorized user succeeds under any two authentication methods in each scenario. Similarly, the false recognition rate of authentication for each scenario is calculated based on the combination of all authentication methods, and this is taken as the false recognition rate for that scenario. In the specific embodiment described in S1, the number of times an unauthorized user performs authentication under the knowledge-based authentication method is: The number of times unauthorized users passed was Under biometric authentication, the number of times an unauthorized user can attempt authentication is [number missing]. The number of times unauthorized users passed was Under hardware-based authentication, the number of times an unauthorized user can attempt authentication is [number missing]. The number of times unauthorized users passed was ; The false recognition rate of the knowledge-based authentication method This can be expressed by the following formula:
[0031] The false recognition rate of the biometric authentication method This can be expressed by the following formula:
[0032] The false recognition rate of the hardware-based authentication method This can be expressed by the following formula:
[0033] The false acceptance rate of the combination of knowledge-based authentication and biometric authentication methods This can be expressed by the following formula:
[0034] in, The correction factor represents the combination of the two authentication methods; The false acceptance rate of the combination of hardware authentication and biometric authentication methods This can be expressed by the following formula:
[0035] The false acceptance rate of the combination of hardware-based and knowledge-based authentication methods This can be expressed by the following formula:
[0036] The false acceptance rate of the combination of hardware-based authentication, knowledge-based authentication, and biometric authentication methods. This can be expressed by the following formula:
[0037] in, The correction coefficient representing the combination of the three authentication methods satisfies Among these, the correction coefficient plays a role in error compensation. Addressing the additional errors actually generated by the authentication system, the correction coefficient makes the calculation results more closely match the actual operating rules of the authentication system in industrial scenarios, thereby correcting the deviation between the theoretical false recognition rate and the actual operational false recognition rate. The combination of three authentication methods adds a third authentication method to the combination of two. Although the complexity of system linkage increases exponentially, the mutual verification mechanism among the three authentication methods results in a lower probability of misjudgment, and the required error correction magnitude is naturally smaller, thus satisfying the requirements. ; S22. Calculate the scenario security index for each scenario based on the authentication false recognition rate of the multiple scenarios.
[0038] In this embodiment, the calculation of the scenario security index based on the authentication false recognition rate of the multiple scenarios includes: The scenario security index is calculated by weighting the false recognition rates of all authentication method combinations for each scenario. In the specific embodiment described in step S1, the scene safety index of the scene This can be expressed by the following formula:
[0039] in, The weight representing the false acceptance rate of knowledge-based authentication methods. The weight representing the false acceptance rate of biometric authentication methods. The weight representing the false acceptance rate of hardware-based authentication methods. The weight representing the false acceptance rate of the combination of knowledge-based authentication and biometric authentication methods. The weight representing the false acceptance rate of the combination of hardware-based and knowledge-based authentication methods. The weight representing the false acceptance rate of the combination of hardware authentication methods and biometric authentication methods. The weights representing the false acceptance rate of the combination of hardware authentication methods, knowledge authentication methods, and biometric authentication methods, where each weight is a constant and satisfies... .
[0040] For example, under the knowledge-based authentication method, an unauthorized user attempts to authenticate 1500 times and succeeds 9 times; under the biometric authentication method, an unauthorized user attempts to authenticate 1200 times and succeeds 6 times; under the hardware authentication method, an unauthorized user attempts to authenticate 2000 times and succeeds 8 times. Based on this data, the false recognition rate for the knowledge-based authentication method is 0.6%, the false recognition rate for the biometric authentication method is 0.5%, and the false recognition rate for the hardware authentication method is 0.4%. The correction coefficient for the combination of two authentication methods is set to 0.92, and the correction coefficient for the combination of three authentication methods is set to 0.96. Therefore, the false recognition rate for the combination of knowledge-based and biometric authentication methods is 0.0027%, the false recognition rate for the combination of hardware-based and biometric authentication methods is 0.0018%, the false recognition rate for the combination of hardware-based and knowledge-based authentication methods is 0.0022%, and the false recognition rate for the combination of hardware-based, knowledge-based, and biometric authentication methods is 0. 000012%; The weight to If the values are set to 0.12, 0.13, 0.15, 0.2, 0.18, 0.12, and 0.1, the security index of the scenario is 0.00198.
[0041] S3. Calculate the user trust index of multiple users in the user dataset based on the user dataset.
[0042] In this embodiment, calculating the user trust index of multiple users in the user dataset based on the user dataset includes: The user dataset includes user authentication information for each user under multiple authentication methods, and calculates the user's authentication frequency, authentication success rate, and authentication time difference under multiple authentication methods based on the user authentication information of multiple users under multiple authentication methods. The user trust index is calculated based on each user's authentication frequency, authentication success rate, and authentication time difference under multiple authentication methods. In the specific embodiment described in step S1, the user authentication information under multiple authentication methods includes the latest update time point of the user under the knowledge-based authentication method. The latest update time for users using biometric authentication methods The latest update time for the user under hardware authentication methods The time point of the user's first authentication Total number of user authentications Number of successful user authentications ; The authentication time difference of the user under the knowledge-based authentication method This can be expressed by the following formula:
[0043] The authentication time difference of the user under biometric authentication method This can be expressed by the following formula:
[0044] The authentication time difference of the user under hardware authentication method This can be expressed by the following formula:
[0045] in, Represents the current point in time; The user's authentication frequency This can be expressed by the following formula:
[0046] The user's authentication success rate This can be expressed by the following formula:
[0047] in, Represents the user's serial number; The user's user trust index This can be expressed by the following formula:
[0048] in, This represents a standard value for measuring the frequency of certification. The conversion factor represents the reciprocal of the authentication time difference under knowledge-based authentication methods. The weight representing the inverse of the authentication time difference under knowledge-based authentication methods. The conversion factor represents the reciprocal of the authentication time difference under biometric authentication methods. The weight representing the inverse of the authentication time difference under biometric authentication methods. The conversion factor represents the reciprocal of the authentication time difference under hardware-based authentication methods. The weight representing the reciprocal of the authentication time difference under hardware-based authentication methods. A conversion factor representing the standard value for measuring authentication frequency and the ratio of user authentication frequency. The weighted average of the standard value for measuring authentication frequency and the ratio of a user's authentication frequency represents the total number of authentications. A conversion factor representing the user's authentication success rate. The weight representing the user's authentication success rate to satisfy ; Specifically, the user trust index is calculated using multiple metrics, including authentication time difference, authentication frequency, and authentication success rate. This can more accurately reflect the user's true trust status. The security value of indicators such as the time difference and frequency of knowledge-based and hardware-based authentication varies in different scenarios. The adjustability of the weighting factors allows for fine-tuning of the weights of these indicators according to the actual needs of industrial scenarios. For example, if the current time is day 1000, and the user's latest update time for knowledge-based authentication is day 970, then the authentication time difference for knowledge-based authentication is 30 days. For biometric authentication, the latest update time is day 990, so the authentication time difference for biometric authentication is 10 days. For hardware authentication, the latest update time is day 995, so the authentication time difference for hardware authentication is 5 days. If the user's first authentication date was day 630, the user has attempted 30 authentications, and has successfully authenticated 27 times, then the user's authentication frequency is 0.0811, and the authentication success rate is 0.9. Set to 0.1, conversion factor to The weights are 10, 10, 10, 5, and 1 respectively. to The values are 0.15, 0.25, 0.15, 0.15 and 0.3 respectively, so the end user's trust index is 0.9625.
[0049] S4. Obtain the user to be authenticated and the scene where the user is located. Based on the preset authentication rules, output the authentication process according to the scene security index of the scene where the user is located and the user trust index of the user.
[0050] See Figure 3 As shown, step S4 includes: S41. Obtain the scene security threshold, the security level of the scene where the user to be authenticated is located, and the authentication process corresponding to all security levels from the scene dataset.
[0051] In this embodiment, the step of obtaining the scene security threshold, the security level of the scene where the user to be authenticated is located, and the authentication process corresponding to all security levels from the scene dataset includes: In the specific embodiment described in step S1, the security level of the scenario includes three levels: Level 1, Level 2, and Level 3, each corresponding to its own authentication process. If the security level of the scenario is Level 1, one authentication method is used for authentication; if the security level of the scenario is Level 2, two authentication methods are used in combination for authentication; and if the security level of the scenario is Level 3, three authentication methods are used in combination for authentication.
[0052] S42. Obtain the trust level and the corresponding trust threshold of the user to be authenticated in the user dataset.
[0053] In the specific embodiment described in step S1, the user's trust level includes level one, level two, and level three, and the user's trust level corresponds to different trust thresholds, including level one trust threshold, level two trust threshold, and level three trust threshold.
[0054] S43. If the user trust index of the user to be authenticated is less than or equal to the corresponding trust threshold, then the user's trust level is reduced; if the user trust index of the user to be authenticated is greater than the corresponding trust threshold, then the user's trust level remains unchanged.
[0055] In a specific embodiment described in step S1, for example, if the trust level of the user to be authenticated is level two, then the level two trust threshold is used to authenticate the user. If the user trust index of the user to be authenticated is less than or equal to the trust threshold corresponding to the user, then the user's trust level is reduced to level one. If the user's trust level is level one, then the user's trust level remains unchanged.
[0056] S44. Output the authentication process based on the scene security threshold, the trust level of the user to be authenticated, the scene security index of the scene where the user to be authenticated is located, the security level, and the authentication process corresponding to all security levels.
[0057] In this embodiment, the step of outputting the authentication process based on the scene security threshold, the trust level of the user to be authenticated, the scene security index of the scene where the user to be authenticated is located, the security level, and the authentication process corresponding to all security levels includes: If the trust level of the user to be authenticated is lower than the security level of the scenario in which the user is located, then authentication is prohibited. If the trust level of the user to be authenticated is greater than or equal to the security level of the scenario in which the user is located, and the scenario security index of the scenario in which the user is located is greater than the scenario security threshold, then the authentication process corresponding to the scenario security level will be output. If the trust level of the user to be authenticated is greater than or equal to the security level of the scenario in which the user is located, but the scenario security index of the scenario in which the user is located is less than the scenario security threshold, then the authentication process corresponding to the next higher security level of the scenario security level will be output. If the security level of this scenario is the highest level, then output the authentication process corresponding to this security level.
[0058] In the specific embodiment described in step S1, for example, if the trust level of the user to be authenticated is level two, a user with a level two trust level can authenticate scenarios with security levels one and two, while a user with a level one trust level can only authenticate scenarios with security levels one. If the current security level of the scenario is level one, it means that the user to be authenticated can authenticate. Then, the scenario security index and the scenario security threshold are determined. If the scenario security index is less than or equal to the scenario security threshold, it means that the scenario's ability to resist illegal intrusion is not up to standard, and the authentication process of the scenario needs to be upgraded. A scenario with a security level one only needs one authentication method, so it is upgraded to a combination of two authentication methods. If the authentication process is already at the highest level, it means that it cannot be upgraded, so the original authentication process is maintained. In actual application scenarios, a manual review process can be added to improve the security of the scenario.
[0059] In summary, the scenario-based user authentication method in this embodiment of the invention acquires a scenario dataset and a user dataset; calculates a scenario security index for multiple scenarios in the scenario dataset; calculates a user trust index for multiple users in the user dataset; acquires the user to be authenticated and the scenario in which the user to be authenticated is located; and outputs the authentication process based on the scenario security index of the scenario in which the user to be authenticated is located and the user trust index of the user to be authenticated, according to preset authentication rules. This invention achieves a quantitative assessment of the authentication scenario risk and the credibility of user behavior through a dual-dimensional evaluation of the scenario security index and the user trust index. Based on the comparison results of the dual indices and preset thresholds, it dynamically adjusts the authentication strategy and user permissions, solving the problems of rigidity, poor scenario adaptability, and delayed risk response in traditional identity authentication strategies, and achieving a dynamic balance between system security and user convenience.
[0060] See Figure 4 As shown, embodiments of the present invention also provide a scenario-based user authentication system, including: The acquisition module is used to acquire scene datasets and user datasets; The first calculation module is used to calculate the scene safety index of multiple scenes in the scene dataset based on the scene dataset; The second calculation module is used to calculate the user trust index of multiple users in the user dataset based on the user dataset. The output module is used to obtain the user to be authenticated and the scene in which the user is located. Based on the preset authentication rules, the authentication process is output according to the scene security index of the scene in which the user is located and the user trust index of the user.
[0061] This invention also provides a computer device, including: a memory, a processor, and a network interface connected via a system bus, wherein the memory stores at least one instruction, and the at least one instruction is loaded and executed by the processor to implement all or part of the steps of the aforementioned scenario-based user authentication method.
[0062] The network interface is used for network communication, such as sending assigned tasks. Those skilled in the art will understand that... Figure 5 The structure shown is merely a block diagram of a portion of the structure related to the present invention and does not constitute a limitation on the computer device to which the present invention is applied. A specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.
[0063] A processor can be a CPU, or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. A general-purpose processor can be a microprocessor, or any conventional processor. The processor is the control center of a computer device, connecting all parts of the computer device through various interfaces and lines.
[0064] Memory can be used to store computer programs and / or modules. The processor implements various functions of the computer device by running or executing the computer programs and / or modules stored in the memory, and by accessing data stored in the memory. Memory can mainly include a program storage area and a data storage area. The program storage area can store the operating system, application programs required for at least one function (such as video playback, image playback, etc.), etc.; the data storage area can store data created based on the use of the mobile phone (such as video data, image data, etc.). In addition, memory can include high-speed random access memory, and can also include non-volatile memory, such as hard disks, RAM, plug-in hard disks, SmartMedia Cards (SMC), Secure Digital (SD) cards, Flash Cards, at least one disk storage device, flash memory device, or other volatile solid-state storage devices.
[0065] In one embodiment of the invention, the processor is used to run a computer program stored in a memory to perform the following steps: Obtain the scene dataset and user dataset; Calculate the scene safety index for multiple scenes in the scene dataset based on the scene dataset; Calculate the user trust index of multiple users in the user dataset based on the user dataset; Obtain the user to be authenticated and the scene in which the user is located. Based on the preset authentication rules, output the authentication process according to the scene security index of the scene in which the user is located and the user trust index of the user.
[0066] In some embodiments, calculating the scene safety index of multiple scenes in the scene dataset based on the scene dataset includes: The scenario dataset includes authentication information for multiple scenarios, and the authentication false recognition rate for multiple scenarios is calculated based on the authentication information for the multiple scenarios. Based on the authentication false recognition rate of the multiple scenarios, a scenario security index is calculated for each scenario.
[0067] In some embodiments, the scene dataset includes authentication information for multiple scenes, and the authentication false recognition rate for multiple scenes is calculated based on the authentication information for the multiple scenes, including: The authentication information for each scenario includes multiple authentication methods, as well as the number of times an unauthorized user attempts to authenticate and the number of times the unauthorized user succeeds under each authentication method. The false acceptance rate of an authentication method is calculated based on the number of times an unauthorized user attempts authentication and the number of times an unauthorized user succeeds in authentication under any authentication method in each scenario. The false acceptance rate of the combination of the two authentication methods is calculated based on the number of times an unauthorized user attempts authentication and the number of times an unauthorized user succeeds under any two authentication methods in each scenario. Similarly, the false recognition rate of authentication for each scenario is calculated as the false recognition rate of authentication for that scenario across all combinations of authentication methods.
[0068] In some embodiments, the calculation of a scenario security index for multiple scenarios based on the authentication false recognition rate of the multiple scenarios includes: The scenario security index is calculated by weighting the false acceptance rates of all authentication method combinations for each scenario.
[0069] In some embodiments, calculating the user trust index of multiple users in the user dataset based on the user dataset includes: The user dataset includes user authentication information for each user under multiple authentication methods, and calculates the user's authentication frequency, authentication success rate, and authentication time difference under multiple authentication methods based on the user authentication information of multiple users under multiple authentication methods. The user trust index is calculated based on each user's authentication frequency, authentication success rate, and authentication time difference under various authentication methods.
[0070] In some embodiments, the step of obtaining the user to be authenticated and the scene in which the user is located, and outputting the authentication process based on the scene security index of the scene in which the user is located and the user trust index of the user to be authenticated according to preset authentication rules, includes: Obtain the scene security threshold, the security level of the scene where the user to be authenticated is located, and the authentication process corresponding to each security level from the scene dataset; Obtain the trust level and corresponding trust threshold of the user to be authenticated in the user dataset; If the user trust index of the user to be authenticated is less than or equal to the corresponding trust threshold, the user's trust level will be reduced; if the user trust index of the user to be authenticated is greater than the corresponding trust threshold, the user's trust level will remain unchanged. The authentication process is output based on the scene security threshold, the trust level of the user to be authenticated, the scene security index of the scene where the user to be authenticated is located, the security level, and the authentication process corresponding to all security levels.
[0071] In some embodiments, the step of outputting the authentication process based on the scene security threshold, the trust level of the user to be authenticated, the scene security index of the scene where the user to be authenticated is located, the security level, and the authentication process corresponding to all security levels includes: If the trust level of the user to be authenticated is lower than the security level of the scenario in which the user is located, then authentication is prohibited. If the trust level of the user to be authenticated is greater than or equal to the security level of the scenario in which the user is located, and the scenario security index of the scenario in which the user is located is greater than the scenario security threshold, then the authentication process corresponding to the scenario security level will be output. If the trust level of the user to be authenticated is greater than or equal to the security level of the scenario in which the user is located, but the scenario security index of the scenario in which the user is located is less than the scenario security threshold, then the authentication process corresponding to the next higher security level of the scenario security level will be output. If the security level of this scenario is the highest level, then output the authentication process corresponding to this security level.
[0072] This invention also provides a computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements all or part of the steps of the aforementioned scenario-based user authentication method.
[0073] The embodiments of the present invention can implement all or part of the aforementioned processes, or they can be accomplished by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium, and when executed by a processor, it can implement the steps of the various methods described above. The computer program includes computer program code, which can be in the form of source code, object code, executable files, or certain intermediate forms. The computer-readable medium can include: any entity or device capable of carrying computer program code, recording media, USB flash drives, portable hard drives, magnetic disks, optical disks, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signals, telecommunication signals, and software distribution media, etc. It should be noted that the content included in the computer-readable medium can be appropriately added to or subtracted according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, computer-readable media do not include electrical carrier signals and telecommunication signals.
[0074] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, servers, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage and optical storage) containing computer-usable program code.
[0075] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or system that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or system. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or system that includes that element.
[0076] The serial numbers in the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.
[0077] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.
[0078] The above description is merely a specific embodiment of the present invention, enabling those skilled in the art to understand or implement the invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the present invention is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features of the invention herein.
Claims
1. A scenario-based user authentication method, characterized in that, Includes the following steps: Obtain the scene dataset and user dataset; Calculate the scene safety index for multiple scenes in the scene dataset based on the scene dataset; Calculate the user trust index of multiple users in the user dataset based on the user dataset; Obtain the user to be authenticated and the scene in which the user is located. Based on the preset authentication rules, output the authentication process according to the scene security index of the scene in which the user is located and the user trust index of the user.
2. The scenario-based user authentication method according to claim 1, characterized in that, The calculation of scene safety indices for multiple scenes in the scene dataset based on the scene dataset includes: The scenario dataset includes authentication information for multiple scenarios, and the authentication false recognition rate for multiple scenarios is calculated based on the authentication information for the multiple scenarios. Based on the authentication false recognition rate of the multiple scenarios, a scenario security index is calculated for each scenario.
3. The scenario-based user authentication method according to claim 2, characterized in that, The scenario dataset includes authentication information for multiple scenarios, and the authentication false acceptance rate for multiple scenarios is calculated based on the authentication information for those scenarios, including: The authentication information for each scenario includes multiple authentication methods, as well as the number of times an unauthorized user attempts to authenticate and the number of times the unauthorized user succeeds under each authentication method. The false acceptance rate of an authentication method is calculated based on the number of times an unauthorized user attempts authentication and the number of times an unauthorized user succeeds in authentication under any authentication method in each scenario. The false acceptance rate of the combination of the two authentication methods is calculated based on the number of times an unauthorized user attempts authentication and the number of times an unauthorized user succeeds under any two authentication methods in each scenario. Similarly, the false recognition rate of authentication for each scenario is calculated as the false recognition rate of authentication for that scenario across all combinations of authentication methods.
4. The scenario-based user authentication method according to claim 3, characterized in that, The calculation of the scenario security index based on the authentication false recognition rate for the multiple scenarios includes: The scenario security index is calculated by weighting the false acceptance rates of all authentication method combinations for each scenario.
5. The scenario-based user authentication method according to claim 1, characterized in that, The calculation of user trust indices for multiple users in the user dataset based on the user dataset includes: The user dataset includes user authentication information for each user under multiple authentication methods, and calculates the user's authentication frequency, authentication success rate, and authentication time difference under multiple authentication methods based on the user authentication information of multiple users under multiple authentication methods. The user trust index is calculated based on each user's authentication frequency, authentication success rate, and authentication time difference under various authentication methods.
6. The scenario-based user authentication method according to claim 1, characterized in that, The process of obtaining the user to be authenticated and the scenario in which the user is located, and outputting the authentication process based on the scenario security index of the scenario in which the user is located and the user trust index of the user to be authenticated according to preset authentication rules, includes: Obtain the scene security threshold, the security level of the scene where the user to be authenticated is located, and the authentication process corresponding to each security level from the scene dataset; Obtain the trust level and corresponding trust threshold of the user to be authenticated in the user dataset; If the user trust index of the user to be authenticated is less than or equal to the corresponding trust threshold, the user's trust level will be reduced; if the user trust index of the user to be authenticated is greater than the corresponding trust threshold, the user's trust level will remain unchanged. The authentication process is output based on the scene security threshold, the trust level of the user to be authenticated, the scene security index of the scene where the user to be authenticated is located, the security level, and the authentication process corresponding to all security levels.
7. The scenario-based user authentication method according to claim 6, characterized in that, The authentication process is output based on the scene security threshold, the trust level of the user to be authenticated, the scene security index of the scene where the user to be authenticated is located, the security level, and the authentication process corresponding to all security levels, including: If the trust level of the user to be authenticated is lower than the security level of the scenario in which the user is located, then authentication is prohibited. If the trust level of the user to be authenticated is greater than or equal to the security level of the scenario in which the user is located, and the scenario security index of the scenario in which the user is located is greater than the scenario security threshold, then the authentication process corresponding to the scenario security level will be output. If the trust level of the user to be authenticated is greater than or equal to the security level of the scenario in which the user is located, but the scenario security index of the scenario in which the user is located is less than the scenario security threshold, then the authentication process corresponding to the next higher security level of the scenario security level will be output. If the security level of this scenario is the highest level, then output the authentication process corresponding to this security level.
8. A scenario-based user authentication system, characterized in that, include: The acquisition module is used to acquire scene datasets and user datasets; The first calculation module is used to calculate the scene safety index of multiple scenes in the scene dataset based on the scene dataset; The second calculation module is used to calculate the user trust index of multiple users in the user dataset based on the user dataset. The output module is used to obtain the user to be authenticated and the scene in which the user is located. Based on the preset authentication rules, the authentication process is output according to the scene security index of the scene in which the user is located and the user trust index of the user.
9. A computer device, characterized in that, include: A memory and a processor, wherein the memory stores at least one instruction, which is loaded and executed by the processor to implement a scenario-based user authentication method according to any one of claims 1 to 7.
10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions that, when executed by a computer, cause the computer to perform a scenario-based user authentication method according to any one of claims 1 to 7.