CN104702406B - Identity verification method and device - Google Patents

Abstract

The present invention provides a low-cost, highly resistant to cracking, and highly secure identity authentication method and device. The method comprises: a server receiving a verification code pull request sent by a user terminal; randomly extracting a verification code background image and a sub-image corresponding to the extracted verification code background image based on the verification code pull request, wherein the verification code background image includes a vacant area corresponding to the sub-image; sending the extracted verification code background image and sub-image to the user terminal so that the user terminal displays the verification code background image and sub-image to the user; and receiving a spliced image of the verification code background image and sub-image returned by the user terminal, which is spliced according to the user's instructions. When the sub-image is spliced into the vacant area of the verification code background image according to a predetermined position and a predetermined rotation angle, the verification result is passed.

Description

Identity verification method and device

technical field

The invention relates to the technical field of computer networks, in particular to an identity verification method and device.

Background technique

With the increasing popularity of computers and computer networks, the Internet has penetrated into all areas of people's work, study and life. While the development of the network provides convenience for people, it also brings various challenges. Some people will use robot programs to improperly use network resources in large quantities, such as mass spam, etc., which will greatly reduce server performance. There are also people who use the program to continuously send out service request responses to carry out "saturation attacks" to achieve the purpose of paralyzing the server. Some people even try to maliciously crack passwords by means of profiteering cracking. In order to avoid the above-mentioned malicious behaviors, it is very important to design a set of tools that can allow the computer to automatically distinguish whether the information comes from a legitimate user or a robot program that is improperly used.

Using image verification codes is a relatively common way now. The main purpose of image verification codes is to distinguish whether network service users are programs or humans. The image verification code is a picture containing a string, and the user is required to input the content of the string during verification. Strings are usually composed of uppercase and lowercase letters and numbers. Part of the verification code contains Chinese characters or mathematical formulas. The length of the string can be random or fixed. In order to avoid being automatically recognized by the machine, the background of the picture is usually improved, such as adding various texture patterns, etc., thereby interfering with the automatic recognition of the machine.

However, as long as enough samples are collected, machine learning and training using character recognition techniques, machine programs can be developed to decode image captchas. Even the improved image captcha can still be recognized by machines if its background library is not large enough. Traditional image verification codes cannot avoid this problem. Taking character image verification codes as an example, if there are uppercase and lowercase characters and numbers, there are only 62 characters at most. Therefore, the existing image verification code has poor anti-cracking ability and insufficient security.

In order to improve the anti-cracking ability of the verification code, the research and development personnel developed the click verification code. When the click verification code is used, it usually shows the user multiple pictures containing natural objects and prompt information related to the content of these pictures. Select these pictures according to the prompt information, and verify the user's identity according to the user's choice. Since the machine has great difficulties in understanding the prompt information and classifying objects, it can greatly increase the number of machine cracking. Captcha difficulty.

However, when the verification code is used, the image resource requirements are very high, and it needs to be manually screened and sorted into the warehouse, which is costly.

Contents of the invention

The purpose of the embodiments of the present invention is to provide an identity verification method and device with low cost, strong anti-cracking ability, and high security.

In order to solve the above problems, an embodiment of the present invention provides an identity verification method, the method comprising: the server receives a verification code pull request sent by a user terminal; according to the verification code pull request, randomly extracts a verification code background picture and A sub-picture corresponding to the extracted verification code background picture, wherein the verification code background picture includes a vacant area corresponding to the sub-picture; sending the extracted verification code background picture and the sub-picture to the user terminal, To make the user terminal display the verification code background picture and sub-pictures to the user; and receive the spliced pictures of the verification code background picture and sub-pictures returned by the user terminal and spliced according to the user's instructions, when When the sub-picture is spliced in the vacant area of the background picture of the verification code according to the predetermined position and the predetermined rotation angle, the verification result is passed.

The embodiment of the present invention also provides an identity verification method, the method includes: the user terminal sends a verification code pull request to the server; receives and displays the verification code background picture and sub-picture issued by the server, the verification code background The picture includes a vacant area corresponding to the sub-picture; the sub-picture is spliced with the verification code background picture according to the user's instruction, and the user's instruction includes the rotation angle of the sub-picture and the movement path or moving target position; and send the spliced image of the verification code background image and sub-picture to the server for verification, when the sub-picture is spliced in the vacant area according to the predetermined position and predetermined rotation angle, The verification result is pass.

Correspondingly, the embodiment of the present invention also provides an identity verification device, the device may run on a server, and the device may include: a request receiving module, configured to receive a verification code pull request sent by a user terminal; a picture extraction module, It is used to randomly extract a verification code background picture and a sub-picture corresponding to the extracted verification code background picture according to the verification code pull request, and the verification code background picture includes a vacant area corresponding to the sub-picture; A picture sending module, configured to send the extracted verification code background picture and sub-pictures to the user terminal, so that the user terminal displays the verification code background picture and sub-pictures to the user; and an identity verification module , for receiving the spliced picture of the verification code background picture and sub-picture returned by the user terminal and spliced according to the user’s instruction, when the sub-picture is spliced in the verification code according to a predetermined position and a predetermined rotation angle When the vacant area of the background image is coded, the verification result is passed.

Correspondingly, the embodiment of the present invention also provides an identity verification device, which can run on a user terminal, and the device can include: a request sending module, used to send a verification code pull request to the server; a display module, used to receive and display The verification code background picture and sub-picture issued by the server, the verification code background picture includes a blank area corresponding to the sub-picture; the splicing module is used to combine the sub-picture and the sub-picture according to the user's instruction The background picture of the verification code is spliced, and the user's instruction includes the angle of rotation of the sub-picture, the path of movement or the target position of the movement; and a verification information sending module, which is used to splice the background picture of the verification code with the sub-picture The picture is sent to the server for verification, and when the sub-picture is spliced in the vacant area according to the predetermined position and the predetermined rotation angle, the verification result is passed.

Compared with the prior art, in the embodiment of the present invention, the specific content of the background picture of the verification code does not need to have a strong category recognition, and can be obtained directly from the Internet by the server. The resources are very rich, and manual classification is not required, which can reduce the In addition, it can also increase the difficulty of manually collecting pictures as a solution to the question bank; making full use of the innate advantages of human beings in understanding the content of pictures, users can correctly correct the sub-pictures based on the knowledge of the background picture of the verification code and the relationship between the contents of the sub-pictures. Placement, because the machine has great difficulties in understanding the content of the picture and the recognition of the relationship between the rotated sub-picture and the background picture, so it greatly increases the difficulty of the machine to crack the verification code, security High; compared to clicking the verification code, users do not need to identify the category of the picture according to the question, and provide a blank area for users to choose, which reduces the user's threshold for use. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable , the following preferred embodiments are specifically cited below, and are described in detail as follows in conjunction with the accompanying drawings.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained based on these drawings without creative effort.

FIG. 1 is an application environment diagram of an embodiment of the present invention.

Fig. 2 is a structural block diagram of a user terminal applicable to an embodiment of the present invention.

Fig. 3 is a structural block diagram of a server applicable to the embodiment of the present invention.

Fig. 4 is a flowchart of an identity verification method provided by an embodiment of the present invention.

FIG. 5 is a specific flow chart of the process of generating the verification code background picture and sub-pictures in the embodiment of the present invention.

Fig. 6 is a schematic diagram of a verification code background picture and corresponding sub-pictures in an embodiment of the present invention.

Fig. 7 is a flowchart of another identity verification method provided by an embodiment of the present invention.

Fig. 8 is a flowchart of another identity verification method provided by an embodiment of the present invention.

Fig. 9 is a structural block diagram of an identity verification device provided by an embodiment of the present invention.

Fig. 10 is a structural block diagram of the identity verification module in Fig. 9 .

Fig. 11 is a structural block diagram of the verification code generating module in Fig. 9 .

Fig. 12 is a structural block diagram of another identity verification device provided by the implementation of the present invention.

Fig. 13 is a structural block diagram of the identity verification system in the embodiment of the present invention.

Detailed ways

In order to further explain the technical means and effects of the present invention to achieve the intended purpose of the invention, the specific implementation methods, methods, and steps of the identity verification method and identity verification device proposed according to the present invention will be described below in conjunction with the accompanying drawings and preferred embodiments. , structure, feature and effect thereof are described in detail as follows.

The aforementioned and other technical contents, features and effects of the present invention will be clearly presented in the following detailed description of preferred embodiments with reference to the drawings. Through the description of specific implementation methods, the technical means and effects of the present invention to achieve the intended purpose can be understood more deeply and specifically, but the attached drawings are only for reference and description, and are not used to explain the present invention limit.

Please refer to FIG. 1 , which shows an application environment diagram of the identity verification method provided by the embodiment of the present invention. As shown in FIG. 1 , the user terminal 100 and the server 200 are located in a wireless or wired network 300 , and through the wireless or wired network 300 , the user terminal 100 and the server 200 communicate with each other.

Specifically, the user terminal 100 may include a smart phone, a tablet computer, an e-book reader, an MP3 player (Moving Picture Experts Group Audio Layer III, moving picture expert compression standard audio level 3), MP4 (Moving Picture Experts Group Audio Layer IV, dynamic Video experts compress standard audio level 4) Players, laptops, vehicle terminals, etc.

Fig. 2 shows a structural block diagram of a user terminal applicable to an embodiment of the present invention. As shown in Figure 2, the user terminal 100 includes a memory 102, a storage controller 104, one or more (only one is shown in the figure) processors 106, a peripheral interface 108, a radio frequency module 110, a positioning module 112, an image acquisition module 114 , an audio module 116 , a touch screen 118 and a button module 120 . These components communicate with each other via one or more communication buses/signal lines 122 .

It can be understood that the structure shown in FIG. 2 is only for illustration, and the user terminal 100 may also include more or fewer components than those shown in FIG. 2 , or have a configuration different from that shown in FIG. 2 . Each component shown in Fig. 2 may be implemented by hardware, software or a combination thereof.

The memory 102 can be used to store software programs and modules, such as program instructions/modules corresponding to the identity verification method and device in the embodiment of the present invention, and the processor 102 executes various functions by running the software programs and modules stored in the memory 104 Applications and data processing, such as the identity verification method provided by the embodiment of the present invention.

The memory 102 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 102 may further include a memory that is remotely located relative to the processor 106, and these remote memories may be connected to the user terminal 100 through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof. Access to memory 102 by processor 106 and possibly other components may be under the control of memory controller 104 .

Peripherals interface 108 couples various input/output devices to CPU and memory 102 . The processor 106 runs various software and instructions in the memory 102 to perform various functions of the user terminal 100 and perform data processing.

In some embodiments, peripherals interface 108, processor 106, and memory controller 104 may be implemented in a single chip. In some other instances, they can be implemented by independent chips respectively.

The radio frequency module 110 is used to receive and send electromagnetic waves, realize mutual conversion between electromagnetic waves and electrical signals, and communicate with communication networks or other devices. The radio frequency module 110 may include various existing circuit elements for performing these functions, such as antenna, radio frequency transceiver, digital signal processor, encryption/decryption chip, Subscriber Identity Module (SIM) card, memory and so on. The radio frequency module 110 can communicate with various networks such as the Internet, intranet, wireless network or communicate with other devices through the wireless network. The wireless network mentioned above may include a cellular telephone network, a wireless local area network or a metropolitan area network. The wireless network mentioned above can use various communication standards, protocols and technologies, including but not limited to Global System for Mobile Communication (GSM), Enhanced Data GSM Environment (EDGE), broadband code Division multiple access technology (wideband code division multiple access, W-CDMA), code division multiple access technology (Code division access, CDMA), time division multiple access technology (time division multiple access, TDMA), Bluetooth, wireless fidelity technology (Wireless, Fidelity, WiFi) (such as IEEE802.11a, IEEE802.11b, IEEE802.11g and/or IEEE802.11n), Internet telephony (Voice over internet protocol, VoIP), global microwave interconnection access (Worldwide Interoperability for Microwave Access, Wi-Max), other protocols for mail, instant messaging, and short messaging, and any other suitable communication protocol, even those that have not yet been developed.

The positioning module 112 is used to obtain the current location of the user terminal 100 . Examples of the positioning module 112 include but are not limited to Global Positioning System (GPS), positioning technology based on wireless local area network or mobile communication network.

The image acquisition module 114 is used for taking photos or videos. The photographs or videos taken can be stored in the memory 102 and sent through the radio frequency module 110 .

The audio module 116 provides an audio interface to the user and may include one or more microphones, one or more speakers, and audio circuitry. The audio circuit receives sound data from the peripheral interface 108, converts the sound data into electrical information, and transmits the electrical information to the speaker. Speakers convert electrical information into sound waves that can be heard by the human ear. The audio circuit also receives electrical information from the microphone, converts the electrical signal into sound data, and transmits the sound data to the peripheral interface 108 for further processing. The audio data can be obtained from the memory 102 or through the radio frequency module 110 . In addition, the audio data can also be stored in the memory 102 or sent through the radio frequency module 110 . In some examples, the audio module 116 may further include a headphone jack for providing an audio interface for headphones or other devices.

The touch screen 118 simultaneously provides an output and input interface between the user terminal 100 and the user. Specifically, the touch screen 118 displays video output to the user, and the content of the video output may include text, graphics, video, and any combination thereof. Some output results correspond to some user interface objects. The touch screen 118 also receives user input, such as user gesture operations such as clicking and sliding, so that the user interface objects respond to these user inputs. The technique for detecting user input may be based on resistive, capacitive or any other possible touch detection techniques. Specific examples of the display unit of the touch screen 118 include, but are not limited to, liquid crystal displays or light emitting polymer displays.

The button module 120 also provides an interface for the user to input to the user terminal 100 , and the user can make the user terminal 100 perform different functions by pressing different buttons.

Fig. 3 is a structural block diagram of a server applicable to an embodiment of the present invention. As shown in FIG. 3 , the server 200 includes: a memory 201 , a processor 202 and a network module 203 . It can be understood that the structure shown in FIG. 3 is only for illustration, and does not limit the structure of the server in the embodiment of the present invention. For example, the server in the embodiment of the present invention may also include more or fewer components than those shown in FIG. 3 , or have a different configuration from that shown in FIG. 3 . In addition, the server in this embodiment of the present invention may also include multiple servers with different specific functions.

The memory 201 can be used to store software programs and modules, such as program instructions/modules corresponding to the identity verification method and device in the embodiment of the present invention, and the processor 202 executes various functions by running the software programs and modules stored in the memory 201 The application and data processing are to implement the identity verification method in the embodiment of the present invention. The memory 201 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 201 may further include a memory that is remotely located relative to the processor 202, and these remote memories may be connected to the server 200 through a network.

The network module 203 is used for receiving and sending network signals. The foregoing network signals may include wireless signals or wired signals. In an example, the aforementioned network signal is a wired network signal. At this time, the network module 203 may include components such as a processor, a random access memory, a converter, and a crystal oscillator.

The above-mentioned software programs and modules also include an operating system, such as LINUX, UNIX, WINDOWS, which may include various software components and/or drivers for managing system tasks (such as memory management, storage device control, power management, etc.) , and can communicate with various hardware or software components to provide an operating environment for other software components.

The identity verification method and device provided by the embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

Please refer to FIG. 4 , which is a flow chart of an identity verification method provided by an embodiment of the present invention. In conjunction with FIG. 1, what this embodiment describes is the processing flow of the server, and the identity verification method provided by this embodiment includes the following steps:

In step S11, the server receives the verification code pull request sent by the user terminal.

In this step, the user terminal may send a verification code pull request to a pre-configured server, for example, a webpage address, to obtain the verification code. Specifically, the verification code pull request can carry a page identifier (checkcode). The page identifier is used to identify a unique page. For example, it can be a number. The page identifier will change every time the page is refreshed. It is different from the verification code pull request. have a corresponding relationship.

Step S12, according to the verification code pull request, randomly extract a verification code background picture and a sub-picture corresponding to the extracted verification code background picture, and the verification code background picture includes a vacant area corresponding to the sub-picture .

After receiving the verification code pull request sent by the user terminal, the server may randomly extract a verification code background picture and a sub-picture corresponding to the extracted verification code background picture from the verification code database.

The verification code database stores pre-generated verification code background pictures and sub-pictures. Each verification code background picture has one or more sub-pictures corresponding to it, and each verification code background picture has a vacant area corresponding to the sub-picture. When the vacant area of the background image is filled, a complete image can be formed.

Referring to Figure 5, the generation process of the captcha background image and sub-image may include the following steps:

Step S101, select a picture in the background picture library, cut at least one sub-picture from the picture, and the remaining part of the picture after the sub-picture is cut forms the background picture of the verification code, and the background picture of the verification code is cut The region of forms the vacant region.

The background picture library can be established in advance and set in the server. In the embodiment of the present invention, the specific content of the verification code background picture does not need to have a strong category recognition, and the pictures collected in nature can be used directly, such as landscapes, animals, buildings, etc. The pictures in the background picture library can be directly provided by the server Obtained from the Internet, the resources are very rich. Therefore, the number of pictures in the background picture library can easily reach a certain scale, which can increase the difficulty of manually collecting pictures as a cracking question bank. The pictures in the background picture library can also be advertisement pictures obtained from the advertisement picture publishing server. Therefore, when the user stitches the sub-pictures into the vacant area of the background picture of the verification code according to the predetermined position and predetermined rotation angle, you can see To a complete advertising picture, so that the verification code can be used for product promotion and other services.

After the picture is selected from the background picture library, the server can cut one or more (two or more) sub-pictures from the picture, and the remaining part of the picture after the sub-picture is cut forms the verification code background picture, the cut area in the verification code background picture forms the vacant area.

When multiple sub-pictures are cut out from the picture, the multiple sub-pictures preferably have the same size and shape.

Taking Figure 6 as an example, the landscape picture in Figure 6 is a selected picture, and the server cuts out four circular sub-pictures of the same size from the landscape picture, and the blank area in the original picture is the vacant area.

Cutting pictures can start from any position in the picture, and the cutting shapes can include circles, squares, polygons and other shapes with multiple symmetry axes, which cannot be maliciously cracked by machines or humans.

Step S102 , rotating the cut sub-picture by a random angle, and calculating the predetermined rotation angle corresponding to the sub-picture according to the rotated angle.

Rotating the cut sub-pictures at random angles can further increase the difficulty of cracking. With the current level of computer development, it is difficult to directly identify the target position and angle of the picture. The difficulty of cracking is related to the number a of optional target vacant areas and the rotation angle b of the sub-picture. The difficulty of cracking=1/(a! *b ^a ). Immediately collect the pictures, because the positions and angles of the cut pictures are random, so it is basically very difficult to manually collect the background pictures of the verification code and the positions and angles of the sub-pictures as the cracking question bank, so it has a strong anti-cracking ability.

A predetermined rotation angle corresponding to the sub-picture can be calculated according to the angle at which the sub-picture is rotated. Assuming that the sub-picture is a circular picture, which is rotated by 50 degrees, the sub-picture can be correctly stitched into the verification code background picture when it is rotated by 50 degrees in the opposite direction or rotated by 310 degrees. That is to say, assuming that a sub-picture is rotated by x degrees when it is generated, its predetermined rotation angle can be (-x±n*360) degrees or (360-x±n*360) degrees, where n is a natural number .

Step S103, save the verification code background picture and the rotated sub-picture, and generate a correspondence table, the correspondence table includes: the correspondence between the number of the sub-picture, the predetermined rotation angle, and the sequence number of the target vacant area relationship, wherein the position of the target vacant area is the predetermined position; or includes: the correspondence between the predetermined position of the sub-picture in the verification code background picture, the predetermined rotation angle, and the sequence number of the target vacant area relationship, wherein the error between the predetermined position of the sub-picture in the verification code background picture and the position of the target blank area corresponding to the sub-picture is within a predetermined range.

In one embodiment, the correspondence table may include: the correspondence between the number of the sub-picture, the predetermined rotation angle, and the sequence number of the target blank area, where the position of the target blank area is the predetermined position . Suppose a verification code background picture corresponds to multiple sub-pictures, the number s=(s1,s2,...,sn) corresponding to each of the multiple sub-pictures, and the predetermined rotation angle a=(a1,a2,... ,am), the serial numbers of the vacant areas in the verification code background image are t1, t2,...tn. The correct verification code answer can be a combination of (s, a) in a specified order, and the specified order refers to the order in which the sub-pictures are correctly spliced in the vacant areas with sequence numbers t1, t2, ..tn. For example, the sub-pictures are s1, s2, s3, s4, the predetermined rotation angle corresponding to s1 is a1, the predetermined rotation angle corresponding to s2 is a2, the predetermined rotation angle corresponding to s3 is a3, and the predetermined rotation angle corresponding to s4 is a4, verify The sequence numbers of the vacant areas in the code background picture are t1, t2, t3, t4. Assuming that according to the correct answer, the sub-picture spliced at t1 is s2, the sub-picture spliced at t2 is s1, the sub-picture spliced at t3 is s4, and the sub-picture spliced at t4 is s3, then the correct verification The code answer is the combination of (s2, a2), (s1, a1), (s4, a4), (s3, a3) in order.

In another embodiment, it includes: the correspondence between the predetermined position of the sub-picture in the background picture of the verification code, the predetermined rotation angle, and the sequence number of the target vacant area, wherein the sub-picture is in the A certain error is allowed between the predetermined position in the verification code background picture and the position of the target blank area corresponding to the sub-picture, and the error range may be 5%, for example. Replacing the number of the sub-picture with the predetermined position of the sub-picture in the background picture of the verification code can increase the threshold for cracking, because in a verification code, the number of sub-pictures is limited, that is, the number is limited, but, There are many possibilities for the position of the sub-picture in the verification code background picture. Taking a picture with a resolution of 400*500 as an example, if the allowable error is 5%, there are 190,000 possibilities, so it can be greatly improved. Anti-cracking ability.

Assuming that a verification code background picture corresponds to multiple sub-pictures, and the predetermined positions of the multiple sub-pictures in the verification code background picture are p=((x1,y1),(x2,y2),...,(xn,yn)), The predetermined rotation angle a=(a1, a2,...,am) corresponding to the multiple sub-pictures, and the sequence numbers of the vacant areas in the verification code background picture are t1, t2,...tn. The correct captcha answer can be a (p, s, a) array. For example, the predetermined positions corresponding to sub-pictures are p1, p2, p3, p4, the predetermined rotation angle corresponding to p1 is a1, the predetermined rotation angle corresponding to p2 is a2, the predetermined rotation angle corresponding to p3 is a3, and the predetermined rotation angle corresponding to p4 is a4, and the serial numbers of the vacant areas in the verification code background image are t1, t2, t3, t4. Assuming that according to the correct answer, the sub-picture spliced at t1 is s2, the sub-picture spliced at t2 is s1, the sub-picture spliced at t3 is s4, and the sub-picture spliced at t4 is s3, then the correct verification The code answer is the combination of (p2, t1, a2), (p1, t2, a1), (p4, t3, a4), (p3, t4, a3). When the server sends the extracted verification code background picture and sub-picture to the user terminal, it may also send the number of the sub-picture or the predetermined position of the sub-picture in the verification code background picture to the user terminal. to the user terminal

Step S13, sending the extracted verification code background picture and sub-picture to the user terminal, so that the user terminal displays the verification code background picture and sub-picture to the user.

Further, the server also sends verification prompt information to the user terminal to prompt the user to move and rotate sub-pictures to the vacant area of the verification code background picture. Certainly, the prompt information may also be generated and displayed by the user terminal, and the specific implementation manner of the present invention is not limited thereto.

Step S14, receiving the mosaic picture of the verification code background picture and sub-picture returned by the user terminal and spliced according to the user's instruction. When the vacant area of the background image is coded, the verification result is passed.

Specifically, when the server receives the spliced picture of the verification code background picture and the sub-picture returned by the user terminal, it also receives the spliced picture of the verification code background picture and the sub-picture returned by the user terminal, the number of the sub-picture, the The number of the vacant area where the sub-picture is actually spliced in the background picture of the verification code and the angle at which the sub-picture is rotated during splicing, or the spliced picture of the background picture of the verification code and the sub-picture returned by the user terminal, the The predetermined position of the sub-picture in the verification code background picture, the position where the sub-picture is actually spliced in the verification code background picture, and the angle at which the sub-picture is rotated during splicing.

According to the number of the sub-picture or the predetermined position of the sub-picture in the background picture of the verification code, look up the corresponding relationship table, and judge whether the sub-picture is according to the predetermined position and the predetermined position according to the corresponding relationship table If the rotation angle is spliced in the vacant area, the verification result is passed, and if not, the verification result is failed.

The server can also return the verification result to the user terminal for display to the user.

In the embodiment of the present invention, the specific content of the verification code background picture does not need to have a strong category recognition, and can be obtained directly from the Internet by the server. The resources are very rich, no manual classification is required, the cost can be reduced, and the cost can also be increased. The difficulty of manually collecting pictures as a solution to the question bank; making full use of the inherent advantages of human beings in understanding the content of pictures, the user can correctly place the sub-pictures based on the knowledge of the background picture of the verification code and the relationship between the contents of the sub-pictures. There are great difficulties in understanding the content of the picture and the relationship between the rotated sub-picture and the background picture, which greatly increases the difficulty of cracking the verification code by the machine and has high security; For verification codes, users are not required to identify the category of pictures according to the question, and a blank area is provided for users to choose, which lowers the threshold for users to use. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

FIG. 7 is a schematic flowchart of another identity verification method in an embodiment of the present invention. Please refer to FIG. 1, this embodiment describes the processing flow of the user terminal, and the identity verification method in this embodiment includes:

In step S21, the user terminal sends a verification code pull request to the server.

Step S22, receiving and displaying the verification code background picture and the sub-picture issued by the server, the verification code background picture including the vacant area corresponding to the sub-picture.

The user terminal may also receive and display verification prompt information issued by the server, to prompt the user to splice sub-pictures in the vacant area of the verification code background picture by moving and rotating.

Step S23, splicing the sub-picture with the verification code background picture according to the user's instruction, the user's instruction includes the rotation angle of the sub-picture, and the moving path or moving target position.

The user's instruction may include an instruction input by the user to the user terminal through gesture input, voice input, or character string input.

Taking gesture input as an example, the user terminal may splice the sub-pictures on the In the verification code background image described above. During the process of responding to the user's dragging and rotating operations on the sub-picture, the user terminal can obtain the rotation angle of the sub-picture, the moving path or the moving target position.

Taking voice input as an example, the user can voice input the rotation angle of the picture, the moving path or the moving target position, such as rotating 90 degrees clockwise, moving to the first vacant area, etc. After receiving the above voice signal, the user terminal will It is converted into a digital signal, and the sub-picture is responded to according to the digital information.

Users can also directly input commands such as "rotate 90 degrees clockwise and move to the first vacant area".

Step S24, sending the spliced image of the verification code background image and the sub-picture to the server for verification, and when the sub-picture is spliced in the vacant area according to the predetermined position and the predetermined rotation angle, the verification result is passed.

Compared with the prior art, in the embodiment of the present invention, the specific content of the background picture of the verification code does not need to have a strong category recognition, and can be obtained directly from the Internet by the server. The resources are very rich, and manual classification is not required, which can reduce the In addition, it can also increase the difficulty of manually collecting pictures as a solution to the question bank; making full use of the innate advantages of human beings in understanding the content of pictures, users can correctly correct the sub-pictures based on the knowledge of the background picture of the verification code and the relationship between the contents of the sub-pictures. Placement, because the machine has great difficulties in understanding the content of the picture and the recognition of the relationship between the rotated sub-picture and the background picture, so it greatly increases the difficulty of the machine to crack the verification code, security High; compared to clicking the verification code, users do not need to identify the category of the picture according to the question, and provide a blank area for users to choose, which reduces the user's threshold for use. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

Please refer to FIG. 8 , which is a flow chart of another identity verification method provided by an embodiment of the present invention. With reference to FIG. 1 , this embodiment describes the interaction processing flow between the user terminal and the server. In this embodiment, the present invention will be described specifically by taking the verification code selected as an example. The authentication methods in this embodiment may include:

Step S301, the server selects a picture in the background picture library, cuts at least one sub-picture from the picture, and the remaining part of the picture after cutting the sub-picture forms the background picture of the verification code, in which the background picture of the verification code is The cut area forms the void area.

In step S302, the server rotates the cut sub-picture by a random angle, and calculates the predetermined rotation angle corresponding to the sub-picture according to the rotated angle.

Step S303, the server saves the verification code background picture and the rotated sub-picture, and generates a correspondence table, which includes: the number of the sub-picture, the predetermined rotation angle, and the sequence number of the target vacant area. The corresponding relationship, wherein, the position where the target vacant area is located is the predetermined position.

Step S304, the user terminal sends a verification code pull request to the server.

Step S305, the server randomly extracts a verification code background picture and a sub-picture corresponding to the extracted verification code background picture according to the verification code pull request, and the verification code background picture includes a vacancy corresponding to the sub-picture area.

Step S306, the server sends the extracted verification code background picture and sub-picture to the user terminal, so that the user terminal displays the verification code background picture and sub-picture to the user.

Step S307, the user terminal receives and displays the verification code background picture and sub-picture issued by the server, and prompts the user to splice the sub-picture into the vacant area of the verification code background picture by moving and rotating.

Step S308, the user terminal splices the sub-picture with the verification code background picture according to the user's instruction, the user's instruction includes the rotation angle of the sub-picture, and the moving path or moving target position .

Step S309, the user terminal stitches the verification code background picture and the sub-picture, the number of the sub-picture, the serial number of the vacant area where the sub-picture is actually spliced in the verification code background picture, and the The rotated angle of the sub-picture is sent to the server for verification.

Step S310, the server searches the correspondence table according to the number of the sub-picture, and judges according to the correspondence table whether the sub-picture is spliced in the vacant area according to a predetermined position and a predetermined rotation angle, if yes, Then the verification result is pass, if not, the verification result is fail.

In step S311, the server returns the verification result to the user terminal and presents it to the user.

In the embodiment of the present invention, the specific content of the verification code background picture does not need to have a strong category recognition, and can be obtained directly from the Internet by the server. The resources are very rich, no manual classification is required, the cost can be reduced, and the cost can also be increased. The difficulty of manually collecting pictures as a solution to the question bank; making full use of the inherent advantages of human beings in understanding the content of pictures, the user can correctly place the sub-pictures based on the knowledge of the background picture of the verification code and the relationship between the contents of the sub-pictures. There are great difficulties in understanding the content of the picture and the relationship between the rotated sub-picture and the background picture, which greatly increases the difficulty of cracking the verification code by the machine and has high security; For verification codes, users are not required to identify the category of pictures according to the question, and a blank area is provided for users to choose, which lowers the threshold for users to use. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

Fig. 9 is a schematic structural diagram of an identity verification device provided by an embodiment of the present invention. Please refer to FIG. 9, the device proposed in this embodiment can run on a server, and is used for the identity verification method proposed in the above embodiment. The device 40 in this embodiment may include:

The request receiving module 41 is used to receive the verification code pull request sent by the user terminal;

The picture extraction module 42 is used to randomly extract a verification code background picture and a sub-picture corresponding to the extracted verification code background picture according to the verification code pull request, and the verification code background picture includes the sub-picture the corresponding vacant area;

The image sending module 43 is configured to send the extracted verification code background image and sub-image to the user terminal, so that the user terminal displays the verification code background image and sub-image to the user; and

The identity verification module 44 is configured to receive the spliced picture of the verification code background picture and the sub-picture returned by the user terminal and spliced according to the user's instruction, when the sub-picture is spliced according to a predetermined position and a predetermined rotation angle When it is in the vacant area of the verification code background image, the verification result is passed.

Further, the picture sending module 43 can also be used to send verification prompt information to the user terminal, so as to prompt the user to splice sub-pictures into the vacant area of the verification code background picture by moving and rotating.

The picture sending module 43 is also used to include the number of the sub-picture or the sub-picture in the background picture of the verification code when sending the extracted verification code background picture and sub-picture to the user terminal The predetermined location of is issued to the user terminal.

Further, referring to FIG. 10, the identity verification module 44 may include:

The receiving unit 441 is configured to receive the mosaic picture of the background picture of the verification code and the sub-picture returned by the user terminal, the number of the sub-picture, and the number of the vacant area where the sub-picture is actually spliced in the background picture of the verification code. The serial number and the angle at which the sub-picture is rotated during splicing, or the spliced picture of the verification code background picture and the sub-picture returned by the user terminal, the predetermined position of the sub-picture in the verification code background picture, the The position where the sub-picture is actually spliced in the verification code background picture and the angle at which the sub-picture is rotated during splicing;

The verification unit 442 is configured to search the correspondence table according to the number of the sub-picture, and judge whether the sub-picture is spliced in the vacant area according to the predetermined position and predetermined rotation angle according to the correspondence table, if If yes, the verification result is pass; if not, the verification result is fail.

Further, the device may also include a verification code generation module 45, please refer to FIG. 11, the verification code generation module 45 may include:

The generation unit 451 is used to select a picture in the background picture library, cut at least one sub-picture from the picture, and the remaining part of the picture after the sub-picture is cut forms the background picture of the verification code, and the background picture of the verification code The cut region forms the vacant region;

A calculation unit 452, configured to rotate the cut sub-picture by a random angle, and calculate the predetermined rotation angle corresponding to the sub-picture according to the rotated angle;

The saving unit 453 is configured to save the verification code background picture and the rotated sub-picture, and generate a correspondence table, the correspondence table including: one of the number of the sub-picture, the predetermined rotation angle, and the sequence number of the target vacant area. The corresponding relationship between, wherein, the position of the target vacant area is the predetermined position; or includes: the predetermined position of the sub-picture in the background picture of the verification code, the predetermined rotation angle, and the sequence number of the target vacant area Correspondence between.

The generation unit 451 may divide the picture into multiple sub-pictures, and the multiple sub-pictures have the same size and shape.

Each of the above modules may be realized by software codes, and at this time, each of the above modules may be stored in the memory of the server. Each of the above modules can also be realized by hardware such as an integrated circuit chip.

It should be noted that the functions of each functional module of the server in the embodiment of the present invention can be specifically implemented according to the method in the above method embodiment, and the specific implementation process can refer to the relevant description of the above method embodiment, and details are not repeated here.

It should be noted that the modules in the above embodiments can run on one general server or multiple servers. For example, the original image storage server can store the gallery, and the verification code generation server can generate the verification code background image and sub-picture, the verification server sends the verification background picture and the corresponding sub-picture to verify the user's identity, and so on. The number of servers and the setting of the buffer zone also change according to specific implementation scenarios and implementation conditions, and such changes do not affect the scope of protection of the present invention.

In the embodiment of the present invention, the specific content of the verification code background picture does not need to have a strong category recognition, and can be obtained directly from the Internet by the server. The resources are very rich, no manual classification is required, the cost can be reduced, and the cost can also be increased. The difficulty of manually collecting pictures as a solution to the question bank; making full use of the inherent advantages of human beings in understanding the content of pictures, the user can correctly place the sub-pictures based on the knowledge of the background picture of the verification code and the relationship between the contents of the sub-pictures. There are great difficulties in understanding the content of the picture and the relationship between the rotated sub-picture and the background picture, which greatly increases the difficulty of cracking the verification code by the machine and has high security; For verification codes, users are not required to identify the category of pictures according to the question, and a blank area is provided for users to choose, which lowers the threshold for users to use. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

Fig. 12 is a schematic structural diagram of an identity verification device provided by an embodiment of the present invention. Please refer to Figure 12, the device proposed in this embodiment can run on a user terminal, and can be used to implement the identity verification method proposed in the above embodiment, including: the device 50 includes:

A request sending module 51, configured to send a verification code pull request to the server;

The display module 52 is configured to receive and display the verification code background picture and sub-picture issued by the server, the verification code background picture includes a vacant area corresponding to the sub-picture;

Stitching module 53, configured to splice the sub-picture with the verification code background picture according to the user's instruction, the user's command includes the rotation angle of the sub-picture, and the moving path or moving target location; and

The verification information sending module 54 is configured to send the spliced picture of the verification code background picture and the sub-picture to the server for verification. When the sub-picture is spliced in the vacant area according to a predetermined position and a predetermined rotation angle, verification The result is pass.

Further, the display module 52 can also be used to receive and display the verification prompt information issued by the server, so as to prompt the user to splice sub-pictures in the vacant area of the verification code background picture by moving and rotating.

The user's instruction may include an instruction input by the user to the user terminal through gesture input, voice input, or character string input.

In a specific implementation manner, the splicing module 53 responds to the user's dragging operation on the sub-picture, or in response to the user's dragging and rotating operations on the sub-picture, the sub-picture The picture is spliced into the verification code background picture.

Each of the above modules may be realized by software codes, and at this time, each of the above modules may be stored in the memory of the server. Each of the above modules can also be realized by hardware such as an integrated circuit chip.

It should be noted that the functions of each functional module of the server in the embodiment of the present invention can be specifically implemented according to the method in the above method embodiment, and the specific implementation process can refer to the relevant description of the above method embodiment, and details are not repeated here.

In the embodiment of the present invention, the specific content of the verification code background picture does not need to have a strong category recognition, and can be obtained directly from the Internet by the server. The resources are very rich, no manual classification is required, the cost can be reduced, and the cost can also be increased. The difficulty of manually collecting pictures as a solution to the question bank; making full use of the inherent advantages of human beings in understanding the content of pictures, the user can correctly place the sub-pictures based on the knowledge of the background picture of the verification code and the relationship between the contents of the sub-pictures. There are great difficulties in understanding the content of the picture and the relationship between the rotated sub-picture and the background picture, which greatly increases the difficulty of cracking the verification code by the machine and has high security; For verification codes, users are not required to identify the category of pictures according to the question, and a blank area is provided for users to choose, which lowers the threshold for users to use. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

Fig. 13 is a structural block diagram of the identity verification system in the embodiment of the present invention. Referring to FIG. 13 , the identity verification system 60 proposed in this embodiment can be used to implement the identity verification method proposed in the above embodiments. The identity verification system 60 in this embodiment can include: a user terminal 61 and a server 62 .

The user terminal 61 can be used to send a verification code pull request to the server 62; receive and display the verification code background picture and sub-picture issued by the server 62, and the verification code background picture includes a vacant area corresponding to the sub-picture ; Splicing the sub-picture with the background picture of the verification code according to the user's instruction, the user's instruction includes the angle of rotation of the sub-picture, and the path of movement or the target position of movement; and verifying The spliced picture of the code background picture and the sub-picture is sent to the server for verification. When the sub-picture is spliced in the vacant area according to the predetermined position and the predetermined rotation angle, the verification result is passed.

The server 62 can be used to receive the verification code pull request sent by the user terminal 61; according to the verification code pull request, randomly extract a verification code background picture and a sub-picture corresponding to the extracted verification code background picture, the verification code The code background picture includes a vacant area corresponding to the sub-picture; the extracted background picture of the verification code and the sub-picture are sent to the user terminal 61, so that the user terminal 61 uses the background picture of the verification code and the sub-picture displaying the sub-picture to the user; and receiving the spliced picture of the verification code background picture and the sub-picture returned by the user terminal and spliced according to the user's instruction, when the sub-picture is spliced according to a predetermined position and a predetermined rotation angle When it is in the vacant area of the verification code background image, the verification result is passed.

In the embodiment of the present invention, the specific content of the verification code background picture does not need to have a strong category recognition, and can be obtained directly from the Internet by the server. The resources are very rich and do not need manual classification, which can reduce costs and increase the cost. The difficulty of manually collecting pictures as a solution to the question bank; making full use of the inherent advantages of human beings in understanding the content of pictures, the user can correctly place the sub-pictures based on the knowledge of the background picture of the verification code and the relationship between the contents of the sub-pictures. There are great difficulties in understanding the content of the picture and the relationship between the rotated sub-picture and the background picture, which greatly increases the difficulty of cracking the verification code by the machine and has high security; compared with clicking For verification codes, users are not required to identify the category of pictures according to the question, and a blank area is provided for users to choose, which lowers the threshold for users to use. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

It should be noted that each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. For the same and similar parts in each embodiment, refer to each other, that is, Can. As for the device-type embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and for related parts, please refer to part of the description of the method embodiments.

It should be noted that, in this document, the term "comprising", "comprising" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article or apparatus comprising a set of elements includes not only those elements, It also includes other elements not expressly listed, or elements inherent in the process, method, article, or device. Without further limitations, an element defined by the phrase "comprising a ..." does not preclude the presence of additional identical elements in the process, method, article, or apparatus comprising that element.

Those of ordinary skill in the art can understand that all or part of the steps for realizing the above-mentioned embodiments can be completed by hardware, and can also be completed by instructing related hardware through a program. The program can be stored in a computer-readable storage medium. The above-mentioned The storage medium can be a read-only memory, a magnetic disk or an optical disk, etc.

The above description is only a preferred embodiment of the present invention, and does not limit the present invention in any form. Although the present invention has been disclosed as above with preferred embodiments, it is not intended to limit the present invention. Anyone familiar with this field Those skilled in the art, without departing from the scope of the technical solution of the present invention, may use the technical content disclosed above to make some changes or modify equivalent embodiments with equivalent changes, but as long as they do not depart from the technical solution of the present invention, according to the technical content of the present invention Any simple modifications, equivalent changes and modifications made to the above embodiments by the technical essence still belong to the scope of the technical solution of the present invention.

Claims (20)

1. An identity verification method, characterized in that the method comprises: The server receives the verification code pull request sent by the user terminal; According to the verification code pull request, a verification code background picture and a sub-picture corresponding to the extracted verification code background picture are randomly extracted from the Internet, and the verification code background picture includes a vacant area corresponding to the sub-picture ; Sending the extracted verification code background picture and sub-picture to the user terminal, so that the user terminal displays the verification code background picture and sub-picture to the user; and Receive the spliced picture of the verification code background picture and the sub-picture returned by the user terminal and spliced according to the user's instruction, when the sub-picture is spliced on the verification code background picture according to the predetermined position and predetermined rotation angle When the vacant area of , the verification result is passed; Wherein, the user's instruction includes a rotation angle of the sub-picture, and a moving path or a moving target position. 2. The method according to claim 1, wherein, before the server receives the verification code pull request sent by the user terminal, it further comprises: Select a picture in the background picture library, cut at least one sub-picture from the picture, and the remaining part of the picture after the sub-picture is cut forms the verification code background picture, and the cut area in the verification code background picture forms said vacant area; performing random angle rotation on the cut sub-picture, and calculating the predetermined rotation angle corresponding to the sub-picture according to the rotated angle; Save the verification code background picture and the rotated sub-picture, generate a correspondence table, the correspondence table includes: the correspondence between the number of the sub-picture, the predetermined rotation angle, and the serial number of the target vacant area, wherein , where the position of the target vacant area is the predetermined position; or include: the correspondence between the predetermined position of the sub-picture in the verification code background picture, the predetermined rotation angle, and the serial number of the target vacant area, wherein , the error between the predetermined position of the sub-picture in the verification code background picture and the position of the target blank area corresponding to the sub-picture is within a predetermined range; When the server sends the extracted verification code background picture and sub-picture to the user terminal, it also sends the number of the sub-picture or the predetermined position of the sub-picture in the verification code background picture to the user terminal. the user terminal. 3. The method according to claim 2, wherein the picture is cut into multiple sub-pictures, and the multiple sub-pictures have the same size and shape. 4. The method according to claim 2, characterized in that, receiving the spliced picture of the verification code background picture and sub-picture returned by the user terminal and spliced according to the user's instruction, when the sub-picture When the vacant area of the verification code background image is spliced according to a predetermined position and a predetermined rotation angle, the step of passing the verification result includes: Receive the mosaic picture of the verification code background picture and sub-picture returned by the user terminal, the number of the sub-picture, the serial number of the vacant area where the sub-picture is actually spliced in the verification code background picture, and the The angle at which the sub-picture is rotated, or the spliced picture of the background picture of the verification code returned by the user terminal and the sub-picture, the predetermined position of the sub-picture in the background picture of the verification code, the location where the sub-picture is actually spliced The position in the verification code background picture and the angle at which the sub-picture is rotated during splicing; According to the number of the sub-picture or the predetermined position of the sub-picture in the background picture of the verification code, look up the corresponding relationship table, and judge whether the sub-picture is according to the predetermined position and the predetermined position according to the corresponding relationship table If the rotation angle is spliced in the vacant area, the verification result is passed, and if not, the verification result is failed. 5. The method according to claim 2, wherein the pictures in the background picture library include advertisement pictures obtained from an advertisement picture publishing server. 6. The method according to claim 1, wherein the server also sends verification prompt information to the user terminal to prompt the user to splice sub-pictures on the background picture of the verification code by moving and rotating. vacant area. 7. An identity verification method, characterized in that the method comprises: The user terminal sends a verification code pull request to the server; Receiving and displaying the verification code background picture and sub-picture issued by the server, the verification code background picture includes a vacant area corresponding to the sub-picture, and the verification code background picture is obtained from the Internet by the server; Splicing the sub-picture with the verification code background picture according to the user's instruction, the user's instruction includes the rotation angle of the sub-picture, and the path of movement or the target position of movement; and Send the spliced image of the verification code background image and the sub-picture to the server for verification, and when the sub-picture is spliced in the vacant area according to a predetermined position and a predetermined rotation angle, the verification result is passed. 8. The method according to claim 7, wherein the user terminal also receives and displays the verification prompt information sent by the server to prompt the user to splice sub-pictures on the verification code by moving and rotating them. Empty space for the background image. 9. The method according to claim 7, wherein the user's instruction comprises an instruction input by the user to the user terminal through gesture input, voice input, or character string input. 10. The method according to claim 7, wherein the step of splicing the verification code background picture and sub-pictures according to the user's instructions comprises: In response to the user's dragging operation on the sub-picture, or in response to the user's dragging and rotating operations on the sub-picture, the sub-picture is spliced into the verification code background picture. 11. An identity verification device running on a server, characterized in that the device comprises: A request receiving module, configured to receive a verification code pull request sent by a user terminal; The picture extraction module is used to randomly extract a verification code background picture and a sub-picture corresponding to the extracted verification code background picture from the Internet according to the verification code pull request, and the verification code background picture includes the same as the verification code background picture. The vacant area corresponding to the sub-picture; A picture delivery module, configured to deliver the extracted verification code background picture and sub-picture to the user terminal, so that the user terminal displays the verification code background picture and sub-picture to the user; and The identity verification module is used to receive the spliced picture of the verification code background picture and the sub-picture returned by the user terminal and spliced according to the user's instruction, when the sub-picture is spliced according to a predetermined position and a predetermined rotation angle When there is a blank area in the background picture of the verification code, the verification result is passed; Wherein, the user's instruction includes a rotation angle of the sub-picture, and a moving path or a moving target position. 12. The device according to claim 11, further comprising a verification code generation module, the verification code generation module comprising: The generation unit is used to select a picture in the background picture library, cut at least one sub-picture from the picture, and the remaining part of the picture after the sub-picture is cut forms the background picture of the verification code, in the background picture of the verification code the cut area forms said void area; a calculation unit, configured to rotate the cut out sub-picture by a random angle, and calculate the predetermined rotation angle corresponding to the sub-picture according to the rotated angle; The saving unit is used to save the verification code background picture and the rotated sub-picture, and generate a correspondence table, which includes: the number of the sub-picture, the predetermined rotation angle and the sequence number of the target vacant area where the position of the target vacant area is the predetermined position; or includes: the sub-picture between the predetermined position in the background image of the verification code, the predetermined rotation angle, and the serial number of the target vacant area corresponding relationship; When the server sends the extracted verification code background picture and sub-picture to the user terminal, it also sends the number of the sub-picture or the predetermined position of the sub-picture in the verification code background picture to the user terminal. the user terminal. 13. The device according to claim 12, wherein the generating unit divides the picture into multiple sub-pictures, and the multiple sub-pictures have the same size and shape. 14. The device according to claim 12, wherein the identity verification module comprises: The receiving unit is used to receive the spliced picture of the verification code background picture and sub-picture returned by the user terminal, the number of the sub-picture, and the sequence number of the vacant area where the sub-picture is actually spliced in the verification code background picture And the angle at which the sub-picture is rotated during splicing, or the spliced picture of the verification code background picture and the sub-picture returned by the user terminal, the predetermined position of the sub-picture in the verification code background picture, the sub-picture The position where the picture is actually spliced in the verification code background picture and the angle at which the sub-picture is rotated during splicing; The verification unit is configured to search the correspondence table according to the number of the sub-picture, and judge whether the sub-picture is spliced in the vacant area according to the predetermined position and the predetermined rotation angle according to the correspondence table, and if so , the verification result is pass, if not, the verification result is fail. 15. The device according to claim 12, wherein the pictures in the background picture library include advertisement pictures obtained from an advertisement picture publishing server. 16. The device according to claim 11, wherein the picture sending module is also used to send verification prompt information to the user terminal, so as to prompt the user to splice sub-pictures on the said user terminal by moving and rotating. Empty area for captcha background image. 17. An identity verification device running on a client terminal, characterized in that the device comprises: The request sending module is used to send a verification code pull request to the server; A display module, configured to receive and display the verification code background picture and sub-picture issued by the server, the verification code background picture includes a vacant area corresponding to the sub-picture, and the verification code background picture is obtained from the server by the server obtained on the Internet; A splicing module, configured to splice the sub-picture with the background picture of the verification code according to the user's instruction, the user's instruction includes the angle of rotation of the sub-picture, and the path of movement or the target position of movement; and The verification information sending module is used to send the spliced picture of the verification code background picture and the sub-picture to the server for verification. When the sub-picture is spliced in the vacant area according to a predetermined position and a predetermined rotation angle, the verification result for pass. 18. The device according to claim 17, wherein the display module is further configured to receive and display verification prompt information sent by the server to prompt the user to splice sub-pictures on the Empty area for captcha background image. 19. The device according to claim 17, wherein the user's instruction comprises an instruction input by the user to the user terminal through gesture input, voice input, or character string input. 20. The device according to claim 17, wherein the splicing module responds to the user's drag operation on the sub-picture, or responds to the user's dragging and rotation of the sub-picture Operation, stitching the sub-picture into the verification code background picture.