CN107742067A - An identity verification method, device and system - Google Patents

Abstract

The embodiment of the present invention discloses an identity verification method, device, and system; after receiving a verification code acquisition request initiated by a user, the embodiment of the present invention can obtain the user's user history information according to the verification code acquisition request, and according to the A verification code is generated from the user's historical information, and then the user is authenticated based on the generated verification code; this scheme can improve the reliability of identity verification and the security of information.

Description

An identity verification method, device and system

technical field

The present invention relates to the field of communication technology, in particular to an identity verification method, device and system.

Background technique

Nowadays, all kinds of information are flooding people's lives, such as online shopping, online transfers, and conversations, etc., all of which involve the processing of information, and information security involves the safety of people's lives and property.

In order to improve the security of information processing, in addition to verifying the user name and password of the user, a "verification code" verification is also required when processing information; the so-called verification code refers to a character randomly generated by the system Strings or pictures, and require users to input correspondingly according to the displayed strings or pictures. This technology is mainly proposed to prevent a hacker from making continuous login attempts to a specific registered user by means of brute force cracking of a specific program (ie authentication attempt) occurs.

During the research and practice of the prior art, the inventors of the present invention found that, since traditional verification codes randomly generate a small character image and add an input box, illegal intruders can easily pull the verification code directly. The picture of the code is then cracked by automaton or machine learning, so its security is not high.

Contents of the invention

Embodiments of the present invention provide an identity verification method, device and system, which can improve the reliability of identity verification and the security of information.

A method of authentication comprising:

Receive the verification code acquisition request initiated by the user;

Acquiring user history information of the user according to the verification code acquisition request;

Generate a verification code according to the user history information;

The user is authenticated based on the generated captcha.

Correspondingly, the embodiment of the present invention also provides an identity verification device, including:

a receiving unit, configured to receive a verification code acquisition request initiated by a user;

An acquisition unit, configured to acquire the user history information of the user according to the verification code acquisition request;

A generating unit, configured to generate a verification code according to the user history information;

A verification unit, configured to authenticate the user based on the generated verification code.

In addition, an embodiment of the present invention also provides an identity verification system, including any identity verification device provided in the embodiment of the present invention.

In the embodiment of the present invention, after receiving the verification code acquisition request initiated by the user, the user history information of the user can be obtained according to the verification code acquisition request, and a verification code can be generated according to the user history information, and then based on the generated verification code. The user performs identity verification; because in this scheme, the material for generating the verification code mainly comes from the user's own behavior, so the privacy is high, which greatly increases the difficulty for illegal intruders to crack. Therefore, compared with the existing scheme, This scheme can greatly improve the reliability of identity verification and is beneficial to improve the security of information.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained based on these drawings without any creative effort.

Fig. 1a is a schematic diagram of a scenario of an identity verification method provided by an embodiment of the present invention;

Fig. 1b is a flowchart of an identity verification method provided by an embodiment of the present invention;

Fig. 2 is another flowchart of the identity verification method provided by the embodiment of the present invention;

Fig. 3a is a schematic structural diagram of an identity verification device provided by an embodiment of the present invention;

Fig. 3b is another schematic structural diagram of the identity verification device provided by the embodiment of the present invention;

Fig. 4 is a schematic structural diagram of a network device provided by an embodiment of the present invention.

detailed description

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative efforts fall within the protection scope of the present invention.

Embodiments of the present invention provide an identity verification method, device and system.

Wherein, the identity verification device may include any identity verification device provided in the embodiments of the present invention, and the identity verification device may be integrated in a network device, such as a terminal or a server.

For example, taking the identity verification device integrated in a network device as an example, referring to Figure 1a, when a user needs to perform identity verification, a verification code acquisition request can be initiated to the network device, and after the network device receives the verification code acquisition request, it can Obtain the user's user history information according to the verification code acquisition request, for example, what was purchased on a certain day of a certain year, chat records with a friend on a certain day of a certain year, book reading records, and/or comment records etc., and then generate a verification code based on the user's historical information. For example, after filtering out the corresponding information from the user's historical information according to a preset strategy, add obfuscated information to generate a verification code. After that, you can verify based on the generated For example, the generated verification code can be sent to the user so that the user can enter corresponding verification information according to the verification code for identity verification, and so on.

Each will be described in detail below. It should be noted that the serial numbers of the following embodiments are not intended to limit the preferred order of the embodiments.

Embodiment one,

This embodiment will be described from the perspective of an identity verification device. The identity verification device may be integrated into a network device, such as a terminal or a server. The terminal may include a mobile phone, a tablet computer, a notebook computer or a personal computer (PC, Personal Computer) and other equipment.

An identity verification method, comprising: receiving a verification code acquisition request initiated by a user, obtaining user history information of the user according to the verification code acquisition request, generating a verification code according to the user history information, and identifying the user based on the generated verification code verify.

As shown in Figure 1b, the specific process of the authentication method can be as follows:

101. Receive a verification code acquisition request initiated by a user.

For example, a verification code acquisition request triggered by the user clicking or sliding a preset trigger interface may be received, or a verification code acquisition request sent by the user through other devices may also be received, and so on.

102. Acquire user history information of the user according to the verification code acquisition request.

For example, a historical information acquisition request may be generated according to the verification code acquisition request, and user historical information of the user may be acquired according to the historical information acquisition request.

For example, the historical information obtaining request may be sent to a device storing the user's historical information, so as to obtain the corresponding user's historical information.

Alternatively, corresponding user historical information may also be extracted from the local, such as locally stored log files, cache folders and/or historical information folders (such as cookies) according to the historical information acquisition request, and the like.

Wherein, the user history information refers to information such as user operation records, browsing records, and/or chat records within a preset time range before the current time based on the current time. Wherein, the preset time range may be set according to actual application requirements, which will not be repeated here.

103. Generate a verification code according to the user's historical information; for example, the details may be as follows:

(1) Detecting the current network environment of the user to obtain network environment information.

For example, specifically, a network environment detection process may be invoked to detect the current network environment of the user through the network environment detection process to obtain network environment information, and so on.

Wherein, the network environment information may include information such as an Internet Protocol (IP, Internet Protocol) address, a port, and/or a media access (MAC, Media Access Control) address of the terminal.

(2) Select corresponding information from the user history information according to the network environment information to obtain material information.

Wherein, the selection method may be determined according to actual application requirements, for example, a certain type may be set, and then information of this type may be selected from the user's historical information as material information.

Optionally, in order to improve flexibility, different information screening methods can also be set according to the current network environment. For example, the network environment can be divided into multiple security levels, and material information can be selected according to different security levels. That is, the step of "selecting corresponding information from the user's historical information according to the network environment information to obtain material information" may include:

Determine the security level of the current network environment according to the network environment information, select corresponding information from the user history information according to the security level, and obtain material information.

Among them, the corresponding relationship between the security level of the network environment and the information screening method can be set in advance, so that after knowing the security level of the current network environment, the information screening method corresponding to the security level can be determined according to the corresponding relationship, and then Use this information screening method to filter the user's historical information to obtain material information; that is, the step "select corresponding information from the user's historical information according to the security level to obtain material information" can be as follows:

Acquire preset screening setting information, the screening setting information includes the corresponding relationship between the security level of the network environment and the information screening method; determine the information screening method corresponding to the security level according to the screening setting information; according to the determined information screening method The historical information of the user is filtered to obtain material information.

Wherein, the screening setting information can be pre-stored in the identity verification device, or can be obtained by setting by the user, that is, before the step "obtaining preset screening setting information", the identity verification method can also include:

A setting request from the user is received, a corresponding relationship between the security level of the network environment and information screening methods is established according to the setting request, and the corresponding relationship is saved in the screening setting information.

(3) Generate a verification code according to the material information.

For example, specifically, confusing information may be added to the material information to obtain comprehensive information, and a preset policy is used to process the comprehensive information to obtain a verification code.

Wherein, the preset strategy can be determined according to actual application requirements, for example, corresponding questions can be generated according to the comprehensive information for users to choose; or corresponding pictures can be generated according to the comprehensive information for users to click; and Alternatively, corresponding fill-in-the-blank questions may also be generated according to the comprehensive information for the user to fill in, etc., which will not be repeated here.

In addition, it should be noted that while generating the verification code, a corresponding verification code answer sample also needs to be saved, so that it can be subsequently determined whether the verification code answer input by the user is correct based on the verification code answer sample. Wherein, the verification code answer sample may be stored in preset verification information.

104. Perform identity verification on the user based on the generated verification code. For example, it could be as follows:

(1) Send the generated verification code to the user, and receive the verification information input by the user.

For example, the generated verification code can be displayed on the corresponding client interface or webpage, or the generated verification code can also be displayed in other ways, such as SMS, MMS, private message, email, voice message, phone call, push message, and /or other forms of instant messages are sent to the terminal to which the user belongs, and so on.

Thereafter, the user can input corresponding verification information according to the received verification code, wherein the verification information includes at least the answer to the verification code input by the user, and the verification information can also include other authentication information, such as user name and password Wait.

Among them, the verification code answer refers to the information entered by the user according to the verification code, such as the information entered by the user in the verification code input box, or the answer entered by the user according to the displayed verification code question, or the verification code displayed by the user. option to click to code a picture, and so on.

(2) Match the verification information with the preset verification information, and if they both match, it is determined that the identity verification is passed; if they do not match, it is determined that the identity verification fails.

Wherein, the verification information includes the verification code answer sample corresponding to the verification code; optionally, if the verification information also includes other authentication information, the verification information may also store the corresponding authentication information. Sample answers, eg, username and password, etc.

For example, taking the verification information only includes the verification code answer as an example, at this time, the verification code answer in the verification information can be compared with the verification code answer sample in the verification information, and if they are consistent, it indicates that the verification information If it matches the verification information, it can be determined that the identity verification has passed; otherwise, if they are not consistent, it means that the verification information does not match the verification information, so it is determined that the identity verification has failed.

For another example, if the verification information includes other authentication information besides the verification code answer, then at this time, the verification code answer in the verification information can be compared with the verification code answer sample in the verification information. Compare, and compare other authentication information in the verification information, such as user name and password, with the answer samples of other authentication information in the verification information, such as user name and password, if they are all consistent, it indicates that the verification information If it matches the verification information, it can be determined that the identity verification has passed, otherwise, if one of the items is inconsistent, it indicates that the verification information does not match the verification information, so it is determined that the identity verification has failed, and so on.

As can be seen from the above, after receiving the verification code acquisition request initiated by the user, this embodiment can obtain the user's user history information according to the verification code acquisition request, and generate a verification code according to the user history information, and then, based on the generated verification code code to authenticate the user; because in this scheme, the material for generating the verification code mainly comes from the user's own behavior, so the privacy is high, which greatly increases the difficulty for illegal intruders to crack. Therefore, compared with the existing It is just a solution, which can greatly improve the reliability of identity verification and help improve the security of information.

Embodiment two,

According to the method described in Embodiment 1, an example will be given below for further detailed description.

In this embodiment, description will be made by taking the identity verification device integrated in a network device as an example, where the network device may be a terminal or a server.

As shown in Figure 2, an identity verification method, the specific process can be as follows:

201. The network device receives a verification code acquisition request initiated by a user.

For example, if the network device is a terminal, at this time, the terminal may receive a verification code acquisition request triggered by a user. Wherein, there may be various ways of triggering, for example, may include clicking, sliding, touching and/or pressing and the like.

For another example, if the network device is a network-side device such as a server, at this time, the server may receive a verification code acquisition request sent by the user through other devices, and so on.

202. The network device acquires user history information of the user according to the verification code acquisition request.

Wherein, the user history information may include information such as user operation records, browsing records, and/or chat records in history (that is, within a preset time range before the current time). For example, it may be what was bought on a certain day of a certain year, a record of chatting with a friend on a certain day of a certain year, a record of reading books, and/or a record of comments, etc.

The user history information can be saved locally or in other devices, such as in the cloud, and the specific saving method can be determined according to actual application requirements.

For example, taking the network device as a terminal as an example, at this time, the terminal can obtain the request from the local (ie, the terminal itself), such as locally saved log files, cache folders and/or historical information folders (such as Cookie) to extract the corresponding user history information.

For another example, taking the network device as the server as an example, at this time, a historical information acquisition request is generated according to the verification code acquisition request, and the historical information acquisition request is sent to the device that stores the user's historical information to obtain the corresponding user. historical information, etc.

203. The network device detects the current network environment of the user to obtain network environment information. For example, it can be as follows:

The network device invokes the network environment detection process, and through the network environment detection process, the current network environment of the user is detected to obtain network environment information, and so on.

Wherein, the network environment information may include information such as the IP address, port, and/or MAC address of the terminal.

204. The network device selects corresponding information from the user history information according to the network environment information to obtain material information.

Wherein, the selection method may be determined according to actual application requirements, for example, a certain type may be set, and then information of this type may be selected from the user's historical information as material information.

For example, taking the set type as "chat record" as an example, at this time, the network device may filter information related to "chat record" from the user's historical information as material information.

For another example, taking the set types as "shopping records" and "book subscription records" as an example, at this time, the network device can collect all the related "shopping records" and "book subscription records" from the user's historical information. The information is filtered out as material information, and so on, and so on.

Optionally, in order to improve flexibility, different information screening methods can also be set according to the current network environment. For example, the network environment can be divided into multiple security levels, and material information can be selected according to different security levels. That is, it can be as follows:

Determine the security level of the current network environment according to the network environment information, obtain preset screening setting information, determine the information screening method corresponding to the security level according to the screening setting information; filter the user's historical information according to the determined information screening method , get material information.

Wherein, the screening setting information includes the corresponding relationship between the security level of the network environment and the information screening method; the screening setting information can be stored in the identity verification device in advance, or can be obtained by setting by the user. For details, please refer to the embodiment One, I will not repeat them here.

In addition, it should be noted that the security level of the network environment can be divided according to the needs of actual applications. For example, two levels of "dangerous" and "safe" can be simply divided, or it can be divided into multiple levels according to the level of safety factor. For example, it is divided into "Level 1", "Level 2", "Level 3" and "Level 4".

For example, if it is in a home network, it indicates the highest safety factor, so the security level can be set to level one; if it is in other commonly used private networks, such as corporate networks, it indicates a higher security factor, so the security level can be set to If it is set to level two, if it is in a commonly used public network, it indicates that there is a certain risk factor. Therefore, the security level can be set to level three, and if it is in an unfamiliar public network, it indicates that the risk factor is relatively high, so , the security level can be set to level four, etc., which will not be listed here.

Optionally, for a network environment with a higher security level, you can generally choose relatively simple user history information with a small amount as material information; More user history information is used as material information, and so on.

205. The network device generates a verification code according to the material information.

For example, the network device may add obfuscation information to the material information to obtain comprehensive information, and then process the comprehensive information by using a preset strategy to obtain a verification code.

Wherein, the preset strategy can be determined according to actual application requirements, for example, corresponding questions can be generated according to the comprehensive information for users to choose; or corresponding pictures can be generated according to the comprehensive information for users to click; and Alternatively, corresponding fill-in-the-blank questions may also be generated according to the comprehensive information for the user to fill in, etc., which will not be repeated here.

For example, taking the material information as "A user bought a book on August 8, and the title of the book is "ABCD"" as an example, at this time, the network device can add confusing information to the material information, for example, the title of the book can be added "DFGHJK" and "One Two Three", and then generate corresponding verification codes, for example, generate a question: "A user bought a book on August 8, what is the title of the book", and provide three choices of answers: "A, "ABCD"; B, "DFGHJK"; C, "One Two Three", etc.

In addition, it should be noted that while generating the verification code, a corresponding verification code answer sample also needs to be saved, so that it can be subsequently determined whether the verification code answer input by the user is correct based on the verification code answer sample. Wherein, the verification code answer sample can be stored in the preset verification information, for example, taking the above verification code as an example, then at this time, the correct answer "A, "ABCD"" can be saved in the preset verification information In, wait.

206. The network device sends the generated verification code to the user, and receives verification information input by the user.

For example, the generated verification code can be displayed on the corresponding client interface or webpage, or the generated verification code can also be displayed in other ways, such as SMS, MMS, private message, email, voice message, phone call, push message, and /or other forms of instant messages are sent to the terminal to which the user belongs, and so on.

Thereafter, the user can input corresponding verification information according to the received verification code, wherein the verification information includes at least the answer to the verification code input by the user, and the verification information can also include other authentication information, such as user name and password Wait.

207. The network device matches the verification information with preset verification information, and if they both match, determine that the identity verification passes; if they do not match, determine that the identity verification fails.

Wherein, the verification information includes the verification code answer sample corresponding to the verification code; optionally, if the verification information also includes other authentication information, the verification information may also store the corresponding authentication information. Sample answers, eg, username and password, etc.

For example, taking the example in step 205, and taking the verification information only includes the verification code answer as an example, at this time, the verification code answer in the verification information can be combined with the verification code answer sample in the verification information, that is, " A. "ABCD"" for comparison, if they are consistent, it means that the verification information matches the verification information, and the identity verification can be confirmed; otherwise, if they are inconsistent, for example, the answer to the verification code entered by the user is "B, "DFGHJK"", It indicates that the verification information does not match the verification information, so it is determined that the identity verification fails. for example,

For another example, still taking the example in step 205 as an example, if the verification information includes other authentication information besides the verification code answer, then at this time, the verification code answer in the verification information can be combined with the verification code answer. Compare the verification code answer sample (ie "A, "ABCD") in the verification information, and compare other authentication information in the verification information, such as user name and password, with other authentication information in the verification information Sample answers, such as user name and password, if they are consistent, it means that the verification information matches the verification information, and it can be determined that the identity verification has passed. Otherwise, if one of the items is inconsistent, for example, the answer to the verification code entered by the user is "C, "123"", or if the user name or password is wrong, it indicates that the verification information does not match the verification information, so it can be determined that the identity verification fails.

As can be seen from the above, after receiving the verification code acquisition request initiated by the user, this embodiment can obtain the user's user history information according to the verification code acquisition request, and detect the current network environment of the user, and then, according to The detected network environment information screens the corresponding information from the user’s historical information as material information to generate a verification code, and authenticates the user based on the verification code; in this scheme, the material for generating the verification code mainly comes from The user's own behavior, therefore, has high privacy, which greatly increases the difficulty for illegal intruders to crack. Therefore, compared with the existing scheme, this scheme can greatly improve the reliability of identity verification and help improve the security of information.

Embodiment three,

In order to better implement the above solutions, an embodiment of the present invention also provides an identity verification device, as shown in Figure 3a, the identity verification device may include a receiving unit 301, an obtaining unit 302, a generating unit 303, and a verification unit 304, as follows:

(1) receiving unit 301;

The receiving unit 301 is configured to receive a verification code acquisition request initiated by a user.

For example, the receiving unit 301 may be specifically configured to receive a verification code acquisition request triggered by the user by clicking or sliding a preset trigger interface, or may also receive a verification code acquisition request sent by the user through other devices, and so on.

(2) acquisition unit 302;

The acquiring unit 302 is configured to acquire the user history information of the user according to the verification code acquisition request.

For example, the acquiring unit 302 may be specifically configured to generate a history information acquisition request according to the verification code acquisition request, and acquire user history information of the user according to the history information acquisition request.

Wherein, the user history information may include information such as user operation records, browsing records, and/or chat records within a preset time range before the current time. Wherein, the preset time range may be set according to actual application requirements, which will not be repeated here.

(3) generating unit 303;

A generating unit 303, configured to generate a verification code according to the user history information.

For example, the generation unit 303 may include a detection subunit, a selection subunit and a generation subunit, as follows:

A) detection subunit;

The detection subunit is used to detect the current network environment of the user to obtain network environment information.

Wherein, the network environment information may include information such as the IP address, port, and/or MAC address of the terminal.

B) select subunits;

The selection subunit is used to select corresponding information from the user history information according to the network environment information to obtain material information.

Wherein, the selection method may be determined according to actual application requirements, for example, a certain type may be set, and then information of this type may be selected from the user's historical information as material information.

Optionally, in order to improve flexibility, different information screening methods can also be set according to the current network environment. For example, the network environment can be divided into multiple security levels, and material information can be selected according to different security levels. which is:

The selecting subunit can specifically be used to determine the security level of the current network environment according to the network environment information, select corresponding information from the user history information according to the security level, and obtain material information.

Among them, the corresponding relationship between the security level of the network environment and the information screening method can be set in advance, so that after knowing the security level of the current network environment, the information screening method corresponding to the security level can be determined according to the corresponding relationship, and then Use this information screening method to filter the user's historical information to obtain material information; that is:

The selection subunit can specifically be used to obtain preset screening setting information, the screening setting information includes the corresponding relationship between the security level of the network environment and the information screening mode, and the information corresponding to the security level is determined according to the screening setting information The screening method is to filter the historical information of the user according to the determined information screening method to obtain the material information.

Wherein, the screening setting information can be stored in the identity verification device in advance, or can be obtained by setting by the user, that is, as shown in Figure 3b, the identity verification device can also include a setting unit 305, as follows:

The receiving unit 301 may also be configured to receive a setting request from a user;

The setting unit 305 may be configured to establish a corresponding relationship between the security level of the network environment and the information screening method according to the setting request, and store the corresponding relationship in the screening setting information.

C) generating subunits;

The generation subunit is used to generate a verification code according to the material information.

For example, the generating subunit can specifically be used to add obfuscation information to the material information to obtain comprehensive information, and process the comprehensive information by using a preset strategy to obtain a verification code.

Wherein, the preset policy may be determined according to actual application requirements, which will not be repeated here.

In addition, it should be noted that while generating the verification code, the generation unit 303 also needs to save the corresponding verification code answer sample, so that it can subsequently determine whether the verification code answer input by the user is correct based on the verification code answer sample. Wherein, the verification code answer sample may be stored in preset verification information.

(4) verification unit 304;

The verification unit 304 is configured to authenticate the user based on the generated verification code, for example, it may be as follows:

Send the generated verification code to the user, receive the verification information entered by the user, and match the verification information with the preset verification information. The verification information includes the generated verification code. If they all match, the identity is determined The verification is passed; if they do not match, it is determined that the authentication fails.

During specific implementation, each of the above units can be implemented as independent entities, or can be combined arbitrarily as one or several entities. For the specific implementation of each of the above units, please refer to the previous method embodiments, and will not repeat them here. .

Specifically, the identity verification device may be integrated into network equipment, such as a terminal or a server, wherein the terminal may include a mobile phone, a tablet computer, a notebook computer, or a PC.

As can be seen from the above, after receiving the verification code acquisition request initiated by the user in this embodiment, the acquisition unit 302 can obtain the user's user history information according to the verification code acquisition request, and the generation unit 303 can generate a verification code according to the user history information. code, and then the verification unit 304 authenticates the user based on the generated verification code; because in this scheme, the material for generating the verification code mainly comes from the user's own behavior, so the privacy is relatively high, which greatly improves the illegal Therefore, compared with the existing scheme, this scheme can greatly improve the reliability of identity verification and help to improve the security of information.

Embodiment four,

Correspondingly, the embodiment of the present invention also provides an identity verification system, including any identity verification device provided in the embodiment of the present invention. For details, please refer to Embodiment 3; for example, it may be as follows:

The identity verification device is configured to receive a verification code acquisition request initiated by a user, obtain user history information of the user according to the verification code acquisition request, generate a verification code according to the user history information, and perform identity verification on the user based on the generated verification code.

For example, the identity verification device can specifically be used to detect the network environment where the user is currently located to obtain network environment information, select corresponding information from the user's historical information according to the network environment information, and obtain material information. Material information generates a verification code.

Optionally, the identity verification system may also include other devices. For example, if the identity verification device is integrated in a server, the identity verification system may also include a terminal, as follows:

The terminal is configured to send a verification code acquisition request to the identity verification device (such as a server), and receive a verification code returned by the identity verification device (such as a server).

For another example, if the identity verification device is integrated in the terminal, the identity verification system can also include other network-side devices, such as cloud devices, as follows:

The cloud device can be used to provide user history information of the user to an identity verification device (such as a terminal), and so on.

For the specific implementation of each of the above devices, reference may be made to the foregoing embodiments, and details are not repeated here.

Since the identity verification system can include any identity verification device provided by the embodiment of the present invention, it can achieve the beneficial effects that any identity verification device provided by the embodiment of the present invention can achieve. For details, see the previous implementation example, which will not be repeated here.

Embodiment five,

The embodiment of the present invention also provides a server, as shown in FIG. 4, which shows a schematic structural diagram of the server involved in the embodiment of the present invention, specifically:

The server may include a processor 401 of one or more processing cores, a memory 402 of one or more computer-readable storage media, a radio frequency (Radio Frequency, RF) circuit 403, a power supply 404, an input unit 405, and a display unit 406, etc. part. Those skilled in the art can understand that the server structure shown in FIG. 4 is not limited to the server, and may include more or less components than shown in the figure, or combine some components, or arrange different components. in:

The processor 401 is the control center of the server, and uses various interfaces and lines to connect various parts of the entire server, by running or executing software programs and/or modules stored in the memory 402, and calling data stored in the memory 402, Execute various functions of the server and process data to monitor the server as a whole. Optionally, the processor 401 may include one or more processing cores; preferably, the processor 401 may integrate an application processor and a modem processor, wherein the application processor mainly processes operating systems, user interfaces, and application programs, etc. , the modem processor mainly handles wireless communications. It can be understood that the foregoing modem processor may not be integrated into the processor 401 .

The memory 402 can be used to store software programs and modules, and the processor 401 executes various functional applications and data processing by running the software programs and modules stored in the memory 402 . The memory 402 can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application program required by a function (such as a sound playback function, an image playback function, etc.); The data created by the use of the server, etc. In addition, the memory 402 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid-state storage devices. Correspondingly, the memory 402 may further include a memory controller to provide the processor 401 with access to the memory 402 .

The RF circuit 403 can be used for receiving and sending signals in the process of sending and receiving information. In particular, after receiving the downlink information from the base station, it is processed by one or more processors 401; in addition, the uplink data is sent to the base station. Generally, the RF circuit 403 includes, but is not limited to, an antenna, at least one amplifier, a tuner, one or more oscillators, a subscriber identity module (SIM) card, a transceiver, a coupler, a low noise amplifier (LNA, Low Noise Amplifier) , duplexer, etc. In addition, the RF circuit 403 can also communicate with networks and other devices through wireless communication. The wireless communication can use any communication standard or protocol, including but not limited to Global System for Mobile Communications (GSM, Global System of Mobilecommunication), General Packet Radio Service (GPRS, General Packet Radio Service), Code Division Multiple Access (CDMA, Code Division Multiple Access), Wideband Code Division Multiple Access (WCDMA, Wideband Code Division Multiple Access), Long Term Evolution (LTE, Long Term Evolution), email, Short Message Service (SMS, Short Messaging Service), etc.

The server also includes a power supply 404 (such as a battery) for supplying power to each component. Preferably, the power supply 404 can be logically connected to the processor 401 through the power management system, so that functions such as charging, discharging, and power consumption management can be realized through the power management system. The power supply 404 may also include one or more DC or AC power supplies, recharging systems, power failure detection circuits, power converters or inverters, power status indicators, and other arbitrary components.

The server can also include an input unit 405, which can be used to receive input numbers or character information, and generate keyboard, mouse, joystick, optical or trackball signal input related to user settings and function control. Specifically, in a specific embodiment, the input unit 405 may include a touch-sensitive surface as well as other input devices. A touch-sensitive surface, also known as a touch display or trackpad, collects user touch operations on or near it (for example, the user uses a finger, stylus, etc. any suitable object or accessory on the touch-sensitive surface or on the touch-sensitive Operation near the surface), and drive the corresponding connection device according to the preset program. Optionally, the touch-sensitive surface may include two parts: a touch detection device and a touch controller. Among them, the touch detection device detects the user's touch orientation, detects the signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts it into contact coordinates, and sends it to to the processor 401, and can receive and execute commands sent by the processor 401. In addition, touch-sensitive surfaces can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic wave. In addition to touch-sensitive surfaces, the input unit 405 may also include other input devices. Specifically, other input devices may include, but are not limited to, one or more of physical keyboards, function keys (such as volume control keys, switch keys, etc.), trackballs, mice, joysticks, and the like.

The server can also include a display unit 406, which can be used to display information input by the user or information provided to the user and various graphical user interfaces of the server. These graphical user interfaces can be composed of graphics, text, icons, video and any combination of them. The display unit 406 may include a display panel, and optionally, the display panel may be configured in the form of a liquid crystal display (LCD, Liquid Crystal Display), an organic light-emitting diode (OLED, Organic Light-Emitting Diode), and the like. Further, the touch-sensitive surface may cover the display panel, and when the touch-sensitive surface detects a touch operation on or near it, the touch operation is sent to the processor 401 to determine the type of the touch event, and then the processor 401 displays on the display according to the type of the touch event. The corresponding visual output is provided on the panel. Although in FIG. 4, the touch-sensitive surface and the display panel are used as two independent components to realize the input and input functions, in some embodiments, the touch-sensitive surface and the display panel can be integrated to realize the input and output functions.

Although not shown, the server may also include a camera, a Bluetooth module, etc., which will not be repeated here. Specifically, in this embodiment, the processor 401 in the server will load the executable file corresponding to the process of one or more application programs into the memory 402 according to the following instructions, and the processor 401 will run the executable file stored in the memory. 402 in order to achieve various functions, as follows:

Receive a verification code acquisition request initiated by a user, obtain user history information of the user according to the verification code acquisition request, generate a verification code according to the user history information, and authenticate the user based on the generated verification code.

For example, it is possible to detect the current network environment of the user to obtain network environment information, select corresponding information from the user's historical information according to the network environment information, obtain material information, and generate a verification code according to the material information.

For the specific implementation of the above operations, reference may be made to the foregoing embodiments, and details are not repeated here.

As can be seen from the above, after receiving the verification code acquisition request initiated by the user, this embodiment can obtain the user's user history information according to the verification code acquisition request, and generate a verification code according to the user history information, and then, based on the generated verification code code to authenticate the user; because in this scheme, the material for generating the verification code mainly comes from the user's own behavior, so the privacy is high, which greatly increases the difficulty for illegal intruders to crack. Therefore, compared with the existing It is just a solution, which can greatly improve the reliability of identity verification and help improve the security of information.

Those of ordinary skill in the art can understand that all or part of the steps in the various methods of the above-mentioned embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable storage medium, and the storage medium can include: Read Only Memory (ROM, Read Only Memory), Random Access Memory (RAM, Random Access Memory), disk or CD, etc.

The above is a detailed introduction to an identity verification method, device and system provided by the embodiment of the present invention. In this paper, specific examples are used to illustrate the principle and implementation of the present invention. The description of the above embodiment is only used to help understanding The method of the present invention and its core idea; at the same time, for those skilled in the art, according to the idea of the present invention, there will be changes in the specific implementation and scope of application. In summary, the content of this specification should not be understood To limit the present invention.

Claims (15)

1. A kind of 1. auth method, it is characterised in that including：

   Receive Client-initiated identifying code and obtain request；

   The user history information of user according to the identifying code obtains acquisition request；

   Identifying code is generated according to the user history information；

   Authentication is carried out to the user based on the identifying code of generation.
2. 2. according to the method for claim 1, it is characterised in that it is described that identifying code is generated according to the user history information, Including：

   The network environment being presently in the user detects, and obtains network environment information；

   Corresponding information is selected from the user history information according to the network environment information, obtains material information；

   Identifying code is generated according to the material information.
3. 3. according to the method for claim 2, it is characterised in that described to be gone through according to the network environment information from the user Corresponding information is selected in history information, obtains material information, including：

   The safe class of current network conditions is determined according to the network environment information；

   Corresponding information is selected from the user history information according to the safe class, obtains material information.
4. 4. according to the method for claim 3, it is characterised in that described to be believed according to the safe class from the user's history Corresponding information is selected in breath, obtains material information, including：

   Default screening set information is obtained, the screening set information includes safe class and the information sifting side of network environment Corresponding relation between formula；

   Information sifting mode corresponding with the safe class is determined according to the screening set information；

   The user history information is screened according to the information sifting mode of determination, obtains material information.
5. 5. according to the method for claim 4, it is characterised in that before the default screening set information of acquisition, also wrap Include：

   Receive the setting request of user；

   According to the corresponding relation for setting request to establish between the safe class of network environment and information sifting mode；

   The corresponding relation is preserved into screening set information.
6. 6. according to the method described in any one of claim 2 to 5, it is characterised in that described to be tested according to material information generation Code is demonstrate,proved, including：

   Scramble data is added in the material information, obtains integrated information；

   The integrated information is handled using preset strategy, is verified code.
7. 7. according to the method described in any one of claim 1 to 5, it is characterised in that it is described based on the identifying code of generation to described User carries out authentication, including：

   The identifying code of generation is sent to the user, and receives the checking information of user's input；

   The checking information is matched with default check information；

   If match, it is determined that authentication passes through；

   If mismatch, it is determined that authentication does not pass through.
8. A kind of 8. authentication means, it is characterised in that including：

   Receiving unit, request is obtained for receiving Client-initiated identifying code；

   Acquiring unit, the user history information for the user according to identifying code acquisition acquisition request；

   Generation unit, for generating identifying code according to the user history information；

   Authentication unit, for carrying out authentication to the user based on the identifying code of generation.
9. 9. device according to claim 8, it is characterised in that it is single that the generation unit includes detection sub-unit, selection Member and generation subelement；

   The detection sub-unit, the network environment for being presently in the user detect, and obtain network environment information；

   The selection subelement, for selecting corresponding letter from the user history information according to the network environment information Breath, obtains material information；

   The generation subelement, for generating identifying code according to the material information.
10. 10. device according to claim 9, it is characterised in that

    The selection subelement, the safe class specifically for determining current network conditions according to the network environment information, root Corresponding information is selected from the user history information according to the safe class, obtains material information.
11. 11. device according to claim 10, it is characterised in that

    The selection subelement, specifically for obtaining default screening set information, the screening set information includes network rings Corresponding relation between the safe class and information sifting mode in border, according to screening set information determination and described safety etc. Information sifting mode corresponding to level, screens to the user history information according to the information sifting mode of determination, obtains element Material information.
12. 12. device according to claim 11, it is characterised in that also including setting unit；

    The receiving unit, it is additionally operable to receive the setting request of user；

    The setting unit, for setting request to establish between the safe class of network environment and information sifting mode according to described Corresponding relation, the corresponding relation is preserved into screening set information.
13. 13. according to the device described in any one of claim 9 to 12, it is characterised in that

    The generation subelement, specifically for adding scramble data in the material information, integrated information is obtained, using default Strategy is handled the integrated information, is verified code.
14. 14. according to the device described in any one of claim 8 to 12, it is characterised in that the authentication unit, be specifically used for：

    The identifying code of generation is sent to the user, and receives the checking information of user's input；

    The checking information is matched with default check information；

    If match, it is determined that authentication passes through；

    If mismatch, it is determined that authentication does not pass through.
15. 15. a kind of authentication system, it is characterised in that including the authentication means described in any one of claim 8 to 14.