WO2016095564A1

WO2016095564A1 - Identity verification method and device

Info

Publication number: WO2016095564A1
Application number: PCT/CN2015/088404
Authority: WO
Inventors: 杜霁轩
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-12-15
Filing date: 2015-08-28
Publication date: 2016-06-23
Also published as: CN105763504A

Abstract

Disclosed in an embodiment of the present invention are an identity verification method and device, the method comprising: upon identity verification, acquiring identity verification information and biological information; detecting whether the acquired biological information comprises preset biological information; if the preset biological information is detected, determining whether the detected biological information is relevant to the identity verification according to a preset time relativity policy; if relevant, determining whether the identity verification succeeds according to the acquired identity verification information.

Description

Method and device for implementing identity verification

Technical field

This document relates to, but is not limited to, smart terminal technology, and more particularly to a method, apparatus, and computer readable storage medium for implementing authentication.

Background technique

As we all know, more and more websites, in order to prevent malicious attacks, such as blocking a normal network service through a large number of repeated application of network services and violent cracking of user information through a large number of attempts to input guessed user information, when users apply for network services, they need to Authentication. At present, the authentication method commonly used by the website is that when the user applies for the network service, the user is prompted to input user information such as an account and password for the user to apply for the network service, and prompt the user to input a verification code according to the information in the provided picture, that is, a person skilled in the art. A well-known public Turing machine test. If you enter the wrong verification code, you will not be able to pass the verification even if you entered the correct user information. This better prevents malicious attacks against websites and improves the reliability of web services provided by websites.

However, with the development of picture text recognition technology, the technology of extracting verification codes from information in pictures by computer programs has gradually matured. This allows malicious programs to use image text recognition technology to extract verification codes to maliciously attack websites. In order to reduce the success rate of the malicious program to extract the verification code through the picture text recognition technology, the method of adding interference elements and/or adjusting the logical order in the picture, which is well known to those skilled in the art, is generally used to increase the difficulty of identifying the information in the picture. In this way, although the malicious attack on the website by the picture text recognition technology is better prevented, the difficulty of the user to distinguish the information in the picture is obviously increased, so that it is difficult for the user to accurately identify the verification code according to the information in the picture at one time, so that the user It often requires two or more authentications to pass authentication, which increases the complexity of the user's authentication and reduces the user experience.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The embodiment of the invention provides a method and device for implementing identity verification, which can reduce the complexity of the user to perform identity verification, thereby improving the user experience.

The embodiment of the invention discloses a method for implementing identity verification, including:

Acquire authentication information and biometric information when performing authentication; and detect whether the obtained biometric information includes pre-set biometric information;

If the preset biometric information is detected from the biometric information, determining whether the detected biometric information is related to the current identity verification according to a preset time correlation policy;

If relevant, it is determined based on the obtained authentication information whether the authentication is successful.

The time correlation policy is: when the absolute value of the difference between the time when the identity verification information is obtained and the time when the biometric information is detected is less than or equal to a time threshold corresponding to the preset biometric information, The detected biological information is related to the current identity verification.

The biometric information includes at least one or more of pressure information, temperature information, voiceprint information, and voice information.

Optionally, if the preset biometric information is not detected, it is determined that the identity verification fails.

Optionally, if it is determined that the detected biological information is not related to the current authentication, it is determined that the authentication fails.

An embodiment of the present invention further discloses an apparatus for implementing identity verification, where the apparatus includes a detecting unit, a correlation determining unit, and a verifying unit, where

The detecting unit is configured to acquire the authentication information when performing the authentication, and detect whether the obtained biological information includes the preset biological information;

a correlation determining unit, configured to determine, according to a preset time correlation policy, whether the detected biological information is related to the current identity verification when the detecting unit detects the preset biological information;

The verification unit is configured to determine, according to the obtained identity information, whether the identity verification is successful, when the relevant determining unit determines that the detected biological information is related to the current identity verification.

The time correlation policy is: when the absolute value of the difference between the time when the identity verification is obtained and the time when the biometric information is detected is less than or equal to the preset biometric information. The detected biological information is related to the current authentication.

Optionally, the verification unit is further configured to: when the detecting unit does not detect the preset biometric information, determine that the identity verification fails.

Optionally, the verification unit is further configured to: when the correlation determining unit determines that the detected biometric information is not related to the current identity verification, determine that the identity verification fails.

The embodiment of the present invention further provides a computer readable storage medium, which stores program instructions, and when the program instructions are executed by the processor, can implement a method for implementing identity verification provided by the embodiments of the present invention.

The technical solution of the embodiment of the present invention includes: obtaining identity verification information and biometric information when performing identity verification; detecting whether the obtained biometric information includes pre-set biometric information; and if pre-set biometric information is detected, according to a preset time The correlation policy determines whether the detected biological information is related to the current authentication; if relevant, determines whether the authentication is successful according to the obtained authentication information. Through the technical solution of the embodiment of the present invention, the verification code is replaced by the biological information in the identity verification, and the identity verification is performed in combination with the identity verification information. Since the biometric information is automatically acquired by the sensor of the terminal in the identity verification process, the improvement is improved. The success rate of the user's authentication also reduces the complexity of the user's authentication, thereby improving the user experience.

Other features and advantages of the invention will be set forth in the description which follows, The objectives and other advantages of the invention may be realized and obtained by means of the structure particularly pointed in the appended claims.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

BRIEF abstract

The drawings are used to provide a further understanding of the technical solutions of the embodiments of the present invention, and constitute a part of the specification, which together with the embodiments of the present application are used to explain the technical solutions of the embodiments of the present invention, and are not It embodies the limitations of the technical solutions of the embodiments of the present invention.

1 is a flowchart of a method for implementing identity verification according to Embodiment 1 of the present invention;

FIG. 2 is a schematic structural diagram of a device for implementing identity verification according to Embodiment 2 of the present invention.

Preferred embodiment of the invention

The embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other.

The steps illustrated in the flowchart of the figures may be executed in a computer system such as a set of computer executable instructions. Also, although logical sequences are shown in the flowcharts, in some cases the steps shown or described may be performed in a different order than the ones described herein.

Embodiment 1

A method for implementing authentication, the flow of which is shown in Figure 1, including:

Step 101: Acquire identity verification information and biometric information when performing identity verification, and detect whether the obtained biometric information includes pre-set biometric information;

Step 102: If the preset biometric information is detected from the biometric information, determine whether the detected biometric information is related to the current identity verification according to a preset time correlation policy;

Step 103: If relevant, determine whether the identity verification is successful according to the obtained authentication information.

In step 101, the biometric information is information generated by human behavior such as clicking and/or emitting voice during the authentication process, and includes at least one or more of pressure information, temperature information, voiceprint information, and voice information. Taking a smart terminal with a touch screen as an example, the biometric information may generate pressure information and/or temperature information when a human clicks or presses the touch screen, and may be detected by a sensor of the terminal device, for example, the sensor detects a current and/or a resistance change of the touch screen. Information, thereby determining pressure information generated by a human clicking or pressing the touch screen; for example, the sensor detects temperature information of the touch screen; or detecting information of current and/or resistance change of the touch screen, thereby determining that the human clicks or presses the touch screen Temperature information generated. The optional detection method is not limited to the above example manner, and the smart terminal, such as the human-computer interaction technology of the smart phone, can be used to acquire the biological information.

In the above smart terminal, it is assumed that the preset biometric information is pressure information. When the touch screen displays an interface for performing authentication, that is, when performing identity verification, the identity verification interface displays a user name and password automatically input by the smart terminal according to the pre-stored user information. Also show the submit option to complete the authentication by clicking Confirm. When the user submits the option by clicking, clicking the terminal screen generates pressure information, and the smart terminal can obtain the authentication information and the biological information, and the pressure information is detected from the obtained biological information; indicating that the obtained biological information includes the pre- If the biological information is set, proceed to step 102. Here, the authentication information includes a username and password.

Alternatively, the user does not click the submit option on the touch screen, but when the "OK" is spoken, the smart terminal detects the voice information from the obtained biological information, but does not detect the pressure information, indicating that the obtained biological information is If the preset biometric information is not included, step 102 is not performed, and the current authentication fails.

In the above smart terminal, it is assumed that the preset biometric information is pressure information and temperature information. When the touch screen displays an interface for performing authentication, the authentication interface prompts to input a user name and a password respectively in the input box of the user name and the input box of the password. At the same time, the submitting option for completing the authentication is required. When the user switches the input box, enters the username, password or activates the submitting option, the smart terminal obtains the authentication information and the biological information, wherein the authentication information includes the username and password; the biometric information is The user performs pressure input information and temperature information generated by input box switching, user name/password input, and click submit option; pressure information and temperature information are detected from the biological information, indicating that the obtained biological information includes preset biological information. Then proceed to step 102.

In the above smart terminal, it is assumed that the preset biometric information is voice information. When the touch screen displays an interface for performing authentication, the identity verification interface displays the user name and password automatically input by the smart terminal according to the pre-stored user information, and simultaneously displays the completed identity verification. The "submission" needs to be read out. When the user sends out the "submitted" voice, the smart terminal obtains the authentication information and the biological information, and the voice information is detected from the obtained biological information, indicating that the obtained biological information includes the preset voice. Information, proceed to step 102;

Alternatively, the terminal prompts to complete the authentication and needs to read “submit”. The user does not sound. When the screen is clicked, the smart terminal acquires the biological information, and only the pressure information is detected from the obtained biological information, and the voice information is not detected, indicating If the obtained biometric information does not include pre-set voice information, step 102 is not performed, and the current authentication fails.

In the above intelligent terminal, it is assumed that the preset biometric information is voiceprint information, and when the touch screen displays the interface for performing authentication, the identity verification interface displays the user name and password automatically input by the smart terminal according to the pre-stored user information, and simultaneously displays the completed identity. Verify the pre-set text to be read, such as "application for login". When the user reads "application for login", the smart terminal obtains authentication information and biometric information, wherein the authentication information includes the user name and password, and the biometric information is read by the user. The voiceprint information of the "application registration" is detected, and the terminal detects the voiceprint information matched with the preset voiceprint template from the obtained biological information, indicating that the obtained biological information includes the preset voiceprint information, and then continues. Go to step 102;

Alternatively, the terminal displays a preset text to be read out after completing the authentication, such as “application for login”, and when the user reads “hello”, the smart terminal obtains the authentication information and the biological information, wherein the authentication information includes the user name and The password and the biometric information read the voiceprint information of "hello" for the user, and the terminal does not detect the voiceprint information matching the preset voiceprint template from the obtained biometric information, indicating that the obtained biometric information does not include the advance If the voiceprint information is set, then step 102 is not performed, and the identity verification fails.

In the above smart terminal, it is assumed that the preset biometric information is temperature information. When the touch screen displays the interface for performing authentication, the authentication interface prompts to complete the authentication, and the unlocking pattern is input, and the user inputs the unlocking pattern by sliding the finger on the touch screen. When the smart terminal obtains the authentication information and the biological information, the biometric information inputting the unlocking pattern for the user is temperature information generated by touching and/or tapping the screen; the smart terminal detects the temperature information from the obtained biological information, indicating that the obtained information The biometric information includes pre-set temperature information, and then proceeds to step 102.

Optionally, based on the description of the biological information, the biological information may also be other types of biological information, such as gravity sensing information generated by the mobile terminal, acceleration information, and the like.

In step 102, the time correlation strategy is: when the absolute value of the difference between the time when the identity verification information is obtained and the time when the biometric information is detected is less than or equal to the time threshold corresponding to the preset biometric information, the detected organism Information is related to this authentication.

In the above intelligent terminal, when the preset biometric information is pressure information, it is assumed that the time threshold corresponding to the preset pressure information is 100 milliseconds, and the time for obtaining the authentication information is t1; after the terminal sensor is obtained, the pressure information is detected. The time is t2, and the absolute value of the difference between t1 and t2 is 60 milliseconds, and it is determined that the pressure information detected this time is related to the current identity verification, indicating that the detected The measured pressure information is the pressure information generated by the user according to the prompt when performing the identity verification; if the absolute value of the difference between t1 and t2 is 150 milliseconds, the pressure information detected this time is determined. This authentication is irrelevant, indicating that the detected pressure information is not the pressure information generated by the user according to the operation performed during the current authentication, but may be the user's touch and/or obtained by the sensor at other unrelated times. Or click on the pressure information generated by the screen.

In the above intelligent terminal, when the preset biological information is pressure information and temperature information, it is assumed that the time thresholds corresponding to the preset pressure information and the temperature information are respectively 100 milliseconds and 90 milliseconds, and after the terminal sensor is obtained, the pressure information is detected. The absolute values of the difference between the temperature information and the time at which the authentication information is obtained are 60 mm and 80 milliseconds, respectively, and it is determined according to the time correlation strategy that the pressure information and the temperature information detected this time are related to the current identity verification.

In the above smart terminal, when the preset biometric information is voice information, it is assumed that the time threshold corresponding to the preset voice information is 150 milliseconds, and the time for obtaining the identity verification information is t1; after the terminal sensor is obtained, the voice information is detected. The time is t2, and the absolute value of the difference between t1 and t2 is 100 milliseconds, and it is determined that the voice information detected this time is related to the current identity verification, indicating that the detected voice information is performed when the identity verification is performed. The voice information generated by the user according to the prompt sound; if the absolute value of the difference between t1 and t2 is 200 milliseconds, it is determined that the voice information detected this time is not related to the current identity verification, indicating the detected voice information, It is not the voice information generated by the user according to the prompt when performing this authentication, but may be the voice information of the user's voice obtained by the sensor at other unrelated times.

It should be noted that, in the above smart terminal, when the preset biometric information is temperature information and/or pressure information, since the unlock pattern information and the temperature information and/or the pressure information can be obtained for a period of time, The time when the corresponding temperature information and/or the pressure information is detected after the unlocking pattern information is obtained may be the time when the corresponding temperature information and/or the pressure information is detected after the unlocking pattern information is finally obtained in the above time period, that is, the complete unlocking pattern is obtained. The time corresponding to the temperature information and/or pressure information is detected after the information.

The time threshold in this embodiment is not the timeout threshold of the user operating the terminal according to the prompt, but is determined whether the biometric information generated and verified by the human operation is authenticated with the identity verification system in time when the identity verification is performed. The threshold of the time correlation between the information. Determining that the detected biological information is related to the current authentication, that is, the biologically obtained and detected by the sensor The information is biological information generated by humans when performing human operations during the threshold time interval according to the prompt; determining that the detected biological information is not related to the current authentication, that is, the biological information obtained and detected by the sensor is not According to the prompts, humans are specifically generated for the actions performed by this authentication, but the biometric information generated by the sensors at other times and for other applications.

In step 103, an optional implementation manner of determining whether the identity verification is successful according to the obtained identity verification information is: verifying whether the username and password are consistent with the authorized username and password.

In the above smart terminal, when the user performs the authentication to complete the authentication according to the prompt, such as clicking the submit option or issuing a "submitted" voice, etc., if relevant, the determination in step 103 is performed.

Optionally, if the preset biometric information is not detected, it is determined that the authentication fails; or the authentication is ended.

Optionally, if it is determined in step 102 that the detected biometric information is not related to the current identity verification, it is determined that the identity verification fails; or the identity verification is ended.

If it is determined that the authentication fails, the identity verification may be returned to perform the authentication, or the authentication based on the method of the embodiment of the present invention may be performed, or the authentication may be performed based on other verification codes.

It should be noted that the method of the embodiment of the present invention can be applied to an intelligent terminal having a touch screen, and can also be applied to other intelligent terminals having a function of detecting biological information, such as a computer having a keyboard input pressure.

Embodiment 2

A device for implementing identity verification, as shown in FIG. 2, includes a detecting unit 20, a correlation determining unit 21, and a verifying unit 22, wherein

The detecting unit 20 is configured to obtain identity verification information and biometric information when the identity verification is performed, and detect whether the obtained biometric information includes pre-set biometric information.

The correlation determining unit 21 is configured to determine, when the detecting unit 20 detects the preset biometric information, whether the detected biometric information is related to the current identity verification according to a preset time correlation policy.

The verification unit 22 is configured to determine the detected biological information when the correlation determining unit 21 determines When it is related to this authentication, it is determined whether the authentication is successful according to the obtained identity information.

The time correlation strategy is: determining the detected biological information when the absolute value of the difference between the time when the authentication information is obtained and the time when the biological information is detected is less than or equal to the time threshold corresponding to the preset biological information. Related to this authentication.

The biometric information is information generated by human behavior during the authentication process, and includes at least one or more of pressure information, temperature information, voiceprint information, and voice information.

Optionally, the verification unit 22 is further configured to: when the detection unit 20 does not detect the preset biometric information, determine that the identity verification fails; or end the execution.

Optionally, the verification unit 22 is further configured to: when the correlation determination unit 21 determines that the detected biometric information is irrelevant related to the current identity verification, determine that the identity verification fails; or end the execution.

Embodiment 3

The embodiment of the present invention further provides a computer readable storage medium, which stores program instructions, and when the program instructions are executed by the processor, can implement a method for implementing identity verification provided by Embodiment 1 of the present invention.

One of ordinary skill in the art will appreciate that all or a portion of the steps of the above-described embodiments can be implemented using a computer program flow, which can be stored in a computer readable storage medium, such as on a corresponding hardware platform (eg, The system, device, device, device, etc. are executed, and when executed, include one or a combination of the steps of the method embodiments.

Alternatively, all or part of the steps of the above embodiments may also be implemented by using an integrated circuit. These steps may be separately fabricated into individual integrated circuit modules, or multiple modules or steps may be fabricated into a single integrated circuit module. achieve.

The devices/function modules/functional units in the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices.

Each device/function module/function unit in the above embodiment is implemented in the form of a software function module. And when sold or used as a stand-alone product, it can be stored on a computer readable storage medium. The above mentioned computer readable storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Industrial applicability

The embodiment of the invention realizes the target of using the biometric information learned by the terminal sensor for identity verification.

Claims

A method of implementing authentication, including:

Obtaining authentication information and biological information; detecting whether the obtained biological information includes preset biological information;

If the preset biometric information is detected from the biometric information, determining whether the detected biometric information is related to the current identity verification according to a preset time correlation policy;

If relevant, it is determined based on the obtained authentication information whether the authentication is successful.
The method according to claim 1, wherein the time correlation strategy is: an absolute value of a difference between a time at which the authentication information is obtained and a time at which the biometric information is detected is less than or equal to a preset When the time threshold corresponding to the biological information is described, the detected biological information is related to the current identity verification.
The method of claim 1 wherein said biological information comprises at least one or more of pressure information, temperature information, voiceprint information, voice information.
The method according to claim 1, if the pre-set biometric information is not detected from the biometric information, the method further comprises: determining that the identity verification fails.
The method according to any one of claims 1 to 4, if it is determined that the detected biological information is not related to the current identity verification, the method further comprises: determining that the identity verification fails.
An apparatus for implementing identity verification, comprising: a detecting unit, a correlation determining unit, and a verifying unit, wherein

The detecting unit is configured to: obtain identity verification information and biometric information when performing identity verification; and detect whether the obtained biometric information includes pre-set biometric information;

The correlation determining unit is configured to determine, according to a preset time correlation policy, whether the detected biological information is related to the current identity verification when the detecting unit detects the preset biological information;

The verification unit is configured to determine, according to the obtained identity verification information, whether the identity verification is successful, when the correlation determination unit determines that the detected biological information is related to the current identity verification.
The apparatus according to claim 6, wherein the time correlation policy is: an absolute value of a difference between a time when the authentication information is obtained and a time when the biometric information is detected is less than or equal to a preset When the time threshold corresponding to the biological information is described, the detected biological information is related to the current identity verification.
The apparatus of claim 6, wherein the biological information comprises at least one or more of pressure information, temperature information, voiceprint information, and voice information.
The apparatus according to claim 6, wherein the verification unit is further configured to determine that the identity verification has failed when the detection unit does not detect the preset biometric information.
The apparatus according to any one of claims 6 to 9, wherein the verification unit is further configured to determine that the identity verification fails when the correlation determination unit determines that the detected biological information is not related to the current identity verification.
A computer readable storage medium storing program instructions that, when executed by a processor, implement the method of any of claims 1-5.