WO2017071192A1

WO2017071192A1 - Identity verification method and apparatus

Info

Publication number: WO2017071192A1
Application number: PCT/CN2016/083105
Authority: WO
Inventors: 杨霞; 林陆一; 郝允允; 李轶峰
Original assignee: 腾讯科技（深圳）有限公司
Priority date: 2015-10-26
Filing date: 2016-05-24
Publication date: 2017-05-04
Also published as: CN106612181A

Abstract

Disclosed are an identity verification method and apparatus. In the embodiments of the present invention, the method comprises: when an identity verification request of a user is received, generating a verification code according to the identity verification request, and acquiring an operation gesture of the user on a touch control panel when it is determined that it is necessary for the user to input the verification code; then generating a corresponding binary character string according to the operation gesture; and matching the binary character string with the verification code according to a pre-set rule, and if matching, determining that identity verification is passed when authentication information carried by the identity verification request is determined to be correct, and if not matching, rejecting the identity verification request.

Description

Authentication method and device

The present application claims priority to Chinese Patent Application No. 201510703867.8, the entire disclosure of which is hereby incorporated by reference. .

Technical field

The present invention relates to the field of communications technologies, and in particular, to an identity verification method and apparatus.

Background of the invention

Nowadays, almost all aspects of people's lives are inseparable from data, such as online shopping, transfer, and conversation, etc., all of which involve data processing. Therefore, how to ensure data security has become a concern of the industry. problem.

In the prior art, data security is generally improved by means of authentication. For example, according to the authentication information provided by the user, such as an account number and a password, the authentication information is compared with the pre-stored verification information. If they are consistent, the verification is passed. Otherwise, it is determined that the verification fails. In order to effectively prevent a hacker from using a specific program brute force attack to perform a continuous login attempt (ie, verification attempt) for a specific registered user, the prior art also proposes a "verification code" technology, that is, randomly generating only one human Questions that can be answered, such as a string of numbers, letters, words, pictures or questions, require the registrant to input according to the requirements of the verification code. Only when the input is correct and the authentication information is correct, the verification can be confirmed. In short, the existence of the verification code is to distinguish whether the input of the authentication information is a person or a machine to improve the security of the verification.

Summary of the invention

The embodiment of the invention provides an identity verification method and device, which can be obtained through a touchpad. Take the verification code input by the user to improve the flexibility of operation under the premise of ensuring data security.

An embodiment of the present invention provides an identity verification method, including:

Receiving an authentication request of the user, where the authentication request carries authentication information;

Generating a verification code according to the identity verification request;

When the user needs to input the verification code, the operation gesture of the user on the touch panel is obtained;

Generating a corresponding binary string according to the operation gesture;

Matching the binary string with the verification code according to a preset rule;

If it is matched, when it is determined that the authentication information is correct, it is determined that the identity verification is passed;

If there is no match, the authentication request is rejected.

An embodiment of the present invention further provides an identity verification apparatus, including:

a receiving unit, configured to receive an authentication request of the user, where the identity verification request carries authentication information;

a verification code generating unit, configured to generate a verification code according to the identity verification request;

An obtaining unit, configured to obtain an operation gesture of the user on the touch panel when the user needs to input the verification code;

a string generating unit, configured to generate a corresponding binary string according to the operation gesture;

a processing unit, configured to match the binary string with the verification code according to a preset rule, and if yes, determine that the authentication is valid when determining that the authentication information is correct, and if not, reject the Authentication request.

The embodiment of the invention further provides a non-transitory computer readable storage medium storing a program, which enables the computer to perform the following steps:

Generating a verification code according to the identity verification request;

Generating a corresponding binary string according to the operation gesture;

If there is no match, the authentication request is rejected.

When receiving the identity verification request of the user, the embodiment of the present invention generates a verification code according to the identity verification request, and obtains an operation gesture of the user on the touch panel when determining that the user needs to input the verification code, and then according to the operation gesture Generating a corresponding binary string, and matching the binary string with the verification code according to a preset rule. If the matching is performed, determining that the authentication information carried by the identity verification request is correct, and determining that the identity verification is passed, and vice versa, if not If the match is made, the authentication request is rejected, thereby achieving the purpose of authenticating the user. According to the embodiment of the present invention, when the verification code input by the user is acquired, it is obtained by monitoring the touch panel without using a keyboard, and therefore, compared with the prior art, the technology can only be input through the keyboard. It provides a choice for the user to enter the verification code, which greatly facilitates the user's operation and helps to improve the flexibility and fun of the operation.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention. Other drawings can also be obtained from those skilled in the art based on these drawings without paying any creative effort.

FIG. 1 is a flowchart of an identity verification method according to an embodiment of the present invention;

2a is another flowchart of an identity verification method according to an embodiment of the present invention;

2b is a schematic diagram of a verification code input interface in an identity verification method according to an embodiment of the present invention;

FIG. 3a is still another flowchart of an identity verification method according to an embodiment of the present invention;

FIG. 3b is another embodiment of a verification code input interface in an identity verification method according to an embodiment of the present invention; a schematic diagram;

4 is a schematic structural diagram of an identity verification apparatus according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a terminal according to an embodiment of the present invention.

Mode for carrying out the invention

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by a person skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The embodiment of the invention provides an identity verification method. This embodiment will be described from the perspective of an identity verification device, which may be integrated in a terminal, a server, or other device that requires authentication.

An authentication method includes: receiving an authentication request of a user, the authentication request carrying the authentication information, generating a verification code according to the identity verification request, and determining that the user needs to input the verification code to obtain the operation of the user on the touch panel a gesture, according to the operation gesture, generating a corresponding binary string, and matching the binary string with the verification code according to a preset rule. If the matching is performed, determining that the authentication information is correct, determining that the identity verification is passed, otherwise, if If there is no match, the authentication request is rejected.

As shown in Figure 1, the specific process of the identity verification method can be as follows:

101. Receive an authentication request of a user.

The authentication request may carry authentication information, such as a user's account and password, and the account may include an email address, an instant messaging number, a user name, or a user number.

102. Generate a verification code according to the identity verification request.

For example, when receiving the user's authentication request, such as when the user opens the login interface, or when the user inputs the authentication information, or when the user clicks the trigger button for generating the verification code on the login interface, according to the preset The strategy generates a verification code.

The preset policy may be determined according to the needs of the actual application. For example, the verification code may be randomly generated or generated according to a certain rule, and the verification code may be a binary string or other binary numbers, such as decimal or hexadecimal numbers, or even It may also be a combination of pictures or a combination of colors, such as a combination of a male photo and a female photo, or a combination of black and white, a combination of blue and red, and the like, and will not be described again here.

In the embodiment of the present invention, in order to facilitate the user operation, when generating the verification code, corresponding prompt information may also be generated to indicate the correspondence between the operation gesture and the binary character.

For example, if “0” means tap, and “1” means tap, you can prompt the user: “Where, 0 means tap, 1 means tap, please input in order”.

For another example, if "1" indicates a tap and "0" indicates a tap, the user can be prompted: "Where 1 indicates a tap, 0 indicates a tap, please input in order."

For another example, if the male photo indicates a tap and the female photo indicates a tap, the user may be prompted: "Where the male photo indicates a tap, the female photo indicates a tap, please input in order."

For another example, if black indicates a tap and white indicates a tap, the user can be prompted: "Where black indicates a tap, white indicates a tap, please input in order."

For another example, the input information may be distinguished according to the strength of the pressing, for example, as follows:

If “0” means tap and “1” means press again, you can prompt the user: “Where, 0 means tap, 1 means press, please input in order”.

Or, if "1" means tap, and "0" means re-press, you can prompt the user: "Where 1 means tap, 0 means press, please input in order".

By analogy, it will not be repeated here.

It should be noted that in addition to "tap" and "tap", as well as "tap" and "re-press", other operational gestures, such as "circle", etc., can be used to perform gestures and binary characters. The corresponding relationship can be set according to the requirements of the actual application, and will not be described here.

103. When it is determined that the user needs to input the verification code, obtain an operation gesture of the user on the touch panel.

The method for determining that the user needs to input the verification code may be various. For example, when the user clicks the input box of the verification code, or when the input cursor is in the input box of the verification code, it may be determined that the user needs to input the verification code.

If the prompt information has been generated in the step 102, the user can perform the operation on the touch panel according to the prompt information, that is, the step of “acquiring the operation gesture of the user on the touch panel” may be: obtaining the user according to the The gesture of the prompt information on the touchpad, such as "tap" or "tap".

104. Generate a corresponding binary string according to the operation gesture.

The rules for generating a binary string can be set in advance. For example, in the case of a pressure touch (Force touch), any one of the following methods can be used:

(1) The first way;

When the operation gesture is determined to be a tap, the character 1 is generated;

When the operation gesture is determined to be tapped, the character 0 is generated;

The generated characters are arranged in the order of the operation gestures to form a binary string.

(2) the second way;

When the operation gesture is determined to be a tap, the character 0 is generated;

(3) The third way;

Determining that the operation gesture is a re-press, generating a character 1;

In the embodiment of the present invention, a pressure threshold may be preset, and when the pressure applied by the operation gesture is greater than the pressure threshold, determining that the operation gesture is a re-press, and when the pressure applied by the operation gesture is less than or equal to the pressure threshold, determining The operation gesture is a tap.

(4) The fourth way;

Determining that the operation gesture is a tap, generating a character 1;

Determining that the operation gesture is a re-press, generating a character 0;

It should be noted that the generated rule corresponds to the prompt information. Of course, there are other ways, and details are not described herein again.

105. Match the binary string with the verification code according to a preset rule. If yes, go to step 106. If not, go to step 107.

For example, if the verification code is a binary string, at this time, it can be determined whether the binary string corresponding to the operation gesture is consistent with the verification code. If they are consistent, it is determined that the binary string corresponding to the operation gesture matches the verification code. If it is inconsistent, it is determined that the binary string corresponding to the operation gesture does not match the verification code.

For another example, if the verification code is a combination of a decimal number or a hexadecimal number, at this time, the combination of the decimal number or the hexadecimal number can be converted into a binary string, and then the operation gesture is determined. Whether the binary string is consistent with the converted binary string. If they are consistent, it is determined that the binary string corresponding to the operation gesture matches the verification code; if not, the binary string corresponding to the operation gesture is determined not to be the verification code. match.

It should be noted that, when converting a decimal number combination or a hexadecimal number combination into a binary string, each digit of the decimal number combination or the hexadecimal number combination can be converted into a binary number, and then Sorting and combining in order, you can also directly convert the decimal number combination or hexadecimal number combination as a number. The specific conversion rules can be determined according to the needs of the actual application, but need to be converted with the user input. The rules are consistent and will not be described here.

106. If it matches, when it is determined that the authentication information is correct, it is determined that the identity verification is passed.

On the other hand, if it is determined that the authentication information is incorrect, the authentication request is rejected.

If the authentication information is correct, the authentication information, such as the account number and the password, may be compared with the pre-stored authentication information, such as the saved account number and password, and will not be described here.

107. If there is no match, the authentication request is rejected.

As can be seen from the above, when receiving the identity verification request of the user, the embodiment generates a verification code according to the identity verification request, and obtains an operation gesture of the user on the touch panel when determining that the user needs to input the verification code, and then according to The operation gesture generates a corresponding binary string, and matches the binary string with the verification code according to a preset rule. If the matching, the identity verification is determined when the authentication information carried by the identity verification request is correct, and vice versa. If it does not match, the authentication request is rejected, thereby achieving the purpose of authenticating the user. According to the embodiment of the present invention, when the verification code input by the user is acquired, it is obtained by monitoring the touch panel without using a keyboard, and therefore, compared with the prior art, the technology can only be input through the keyboard. Providing a choice for the user to enter the verification code greatly facilitates the user's operation and helps to improve the flexibility, fun and interactivity of the operation.

The embodiment of the invention provides an identity verification method. According to the method described in the embodiment shown in Fig. 1, the following will be exemplified in further detail.

In this embodiment, the verification code will be a binary string, and “0” indicates a tap. "1" indicates that the tap is taken as an example for explanation.

As shown in FIG. 2a, the identity verification method includes the following specific processes.

201. The identity verification device receives an authentication request of the user.

202. The identity verification device generates a verification code according to the identity verification request, where the verification code may be a binary string.

For example, when receiving the user's authentication request, such as when the user opens the login interface, or when the user inputs the authentication information, or when the user clicks the trigger button for generating the verification code on the login interface, according to the preset The policy generates a verification code. The preset policy may be determined according to the requirements of the actual application. For example, the verification code may be randomly generated or generated according to a certain rule.

In the embodiment of the present invention, in order to facilitate the user operation, when generating the verification code, corresponding prompt information may also be generated to indicate the correspondence between the operation gesture and the binary character. For example, referring to FIG. 2b, the verification code “10110” is displayed. When prompted, the user can be prompted: "Where, 0 means tap, 1 means tap, please enter in order", and so on.

203. The identity verification device determines that the user needs to input the verification code to obtain an operation gesture of the user on the touch panel.

For example, the user can make a “tap” or “tap” operation gesture on the touchpad according to the prompt information, and after the input is completed, the identity verification device can receive the operation gestures.

204. The identity verification device determines that the operation gesture is a tap, generates a character 0, determines that the operation gesture is a tap, generates a character 1, and arranges the generated characters in the order of the operation gesture to form a binary character string.

205. The identity verification device determines whether the binary string corresponding to the operation gesture is consistent with the verification code. If the identity is consistent, determining that the binary string corresponding to the operation gesture matches the verification code, performing step 206; if not, determining the The binary string corresponding to the operation gesture does not match the verification code, and step 207 is performed.

206. The identity verification device determines that the identity verification is passed when determining that the authentication information is correct.

Anyway, if it is determined that the authentication information is incorrect, the authentication request is rejected (ie, step 207 is performed).

207. The identity verification device rejects the identity verification request.

It should be noted that, in addition to allowing the user to input the verification code through the touchpad, the user can also be allowed to input the verification code through other means, such as a keyboard, that is, the user can select the way to input the verification code, and details are not described herein.

As can be seen from the above, when receiving the identity verification request of the user, the embodiment generates a binary character string as a verification code according to the identity verification request, and obtains the user on the touchpad when determining that the user needs to input the verification code. Manipulating a gesture, such as tapping or tapping, and then generating a corresponding binary string according to the operation gesture, and comparing the binary string with the verification code. If they are consistent, determining the authentication carried by the identity verification request When the information is correct, it is determined that the authentication is passed. On the other hand, if the information is inconsistent, the authentication request is rejected, thereby achieving the purpose of authenticating the user. According to the embodiment of the present invention, when the verification code input by the user is acquired, it is obtained by monitoring the touch panel without using a keyboard. Therefore, compared with the prior art technology that can only input through the keyboard, the user inputting the verification code provides one more choice, which greatly facilitates the operation of the user, and is beneficial to improve the flexibility, fun and interaction of the operation. Sex.

In this embodiment, the verification code is a decimal character string, and “0” indicates a tap, and “1” indicates a click as an example.

As shown in FIG. 3a, the identity verification method may include the following specific process.

301. The identity verification device receives an authentication request of the user.

302. The identity verification device generates a verification code according to the identity verification request, where the verification code may be a decimal string.

In the embodiment of the present invention, in order to facilitate the user operation, when generating the verification code, corresponding prompt information may also be generated to indicate the correspondence between the operation gesture and the binary character. For example, referring to FIG. 3b, the verification code “4587” is displayed. When prompted, the user can be prompted to: "Enter the displayed number into binary and enter it, where 0 means tap, 1 means tap, please enter in order", and so on.

In the embodiment of the present invention, only the user may be required to input a certain part of the decimal string. A numeric binary number, for example, "8" in the verification code "4587" can be highlighted, such as a color different from other numbers, such as red, and then the user is required to input "8" in sequence on the touchpad. "The corresponding binary number, where 0 means tap, 1 means tap, and so on.

303. The identity verification device determines that the user needs to input the verification code to obtain an operation gesture of the user on the touch panel.

304. The identity verification device determines that the operation gesture is a tap, generates a character 0, determines that the operation gesture is a tap, generates a character 1, and arranges the generated characters in the order of the operation gesture to form a binary character string.

305. The authentication device converts the verification code, that is, the decimal number combination into a binary string.

For example, each of the decimal number combinations can be converted to a binary number and then sorted and combined in order.

For example, taking "4587" as an example, you can convert "4" to "100", convert "5" to "101", convert "8" to "1000", and put The "7" is converted to "111", and then these numbers are combined in order, which is "1001011000111".

Of course, you can also set the direct conversion of the decimal number directly into a binary number instead of converting each number to a binary number. For example, you can convert the number "4587" to two. The hexadecimal is "1000111101011", and so on. Which method is needed to convert can be determined according to the needs of the actual application, but it needs to be consistent with the conversion rules that the user enters when inputting.

306. The identity verification device determines whether the binary string corresponding to the operation gesture is consistent with the converted binary string (ie, the verification code). If the identifier is consistent, determining that the binary string corresponding to the operation gesture matches the verification code, and performing steps If the inconsistency is determined, it is determined that the binary string corresponding to the operation gesture does not match the verification code, and step 308 is performed.

307. The identity verification device determines that the identity verification is passed when determining that the authentication information is correct.

Anyway, if it is determined that the authentication information is incorrect, the authentication request is rejected (ie, step 307 is performed).

308. The identity verification device rejects the identity verification request.

It should be noted that the above description only takes the verification code as a decimal string as an example. It should be understood that the verification code may also be expressed in other forms, such as a hexadecimal string or a color combination. The implementation is similar to the above, and will not be described here.

As can be seen from the above, when receiving the identity verification request of the user, the embodiment generates a decimal string as a verification code according to the identity verification request, and obtains the user on the touchpad when determining that the user needs to input the verification code. Manipulating a gesture, such as tapping or tapping, and then generating a corresponding binary string according to the operation gesture, converting the verification code into a binary string, and then comparing the binary string with the binary string into which the verification code is converted, If the authentication information is correct, the identity verification is determined to be passed, and if not, the identity verification request is rejected, thereby achieving the purpose of authenticating the user. Obtaining a verification code input by a user according to an embodiment of the present invention When it is not necessary to pass the keyboard, but by monitoring the touchpad, it is obtained. Therefore, compared with the prior art technology that can only input through the keyboard, the user is provided with one more choice for inputting the verification code. Convenient for the user's operation, which helps to improve the flexibility, fun and interactivity of the operation.

An embodiment of the present invention further provides an identity verification apparatus. As shown in FIG. 4, the identity verification apparatus includes a receiving unit 401, a verification code generating unit 402, an obtaining unit 403, a character string generating unit 404, and a processing unit 405.

The receiving unit 401 is configured to receive an authentication request of the user.

The verification code generating unit 402 is configured to generate a verification code according to the identity verification request.

The preset policy may be determined according to the requirements of the actual application. For example, the verification code may be randomly generated or generated according to a certain rule. The verification code may be a binary string or other hexadecimal. Numbers, such as decimal or hexadecimal numbers, or even combinations of pictures or colors, such as a combination of male and female photos, or a combination of black and white, a combination of blue and red, etc. I will not repeat them here.

In the embodiment of the present invention, in order to facilitate the user operation, when generating the verification code, corresponding prompt information may also be generated to indicate the correspondence between the operation gesture and the binary character. The verification code generating unit 402 is further configured to generate prompt information, where the prompt information is used to indicate a correspondence between the operation gesture and the binary character.

For example, if "0" means tap, and "1" means tap, you can prompt the user: "Where, 0 means tap, 1 means tap, please enter in order.

By analogy, it will not be repeated here.

The obtaining unit 403 is configured to determine an operation gesture of the user on the touch panel when the user needs to input the verification code.

For example, the obtaining unit 403 may be specifically configured to acquire an operation gesture of the user on the touch panel according to the prompt information, such as “tap” or “tap”.

The method for determining that the user needs to input the verification code may be various, for example, when the user clicks the input box of the verification code, or when the input cursor is in the input box of the verification code, it may be determined that the user needs to input the verification code, etc. Wait.

The string generating unit 404 is configured to generate a corresponding binary character according to the operation gesture string.

The rule for generating a binary string may be set in advance, for example, in the embodiment of the present invention,

The character string generating unit 404 is specifically configured to: when the operation gesture is determined to be a tap, generate a character 1; when the operation gesture is determined to be a tap, generate a character 0; and the generated characters are arranged in the order of the operation gesture to form a binary String.

Alternatively, the character string generating unit 404 may be specifically configured to: when the operation gesture is a tap, generate a character 0; when the operation gesture is determined to be a tap, generate a character 1; and the generated characters are arranged in the order of the operation gesture. Make up a binary string.

Alternatively, the character string generating unit 404 may be specifically configured to: when the operation gesture is a tap, generate a character 0; when the operation gesture is determined to be a re-press, generate a character 1; and the generated characters are arranged in the order of the operation gesture to form Binary string.

Alternatively, the character string generating unit 404 may be specifically configured to: when the operation gesture is determined to be a tap, generate a character 1; when the operation gesture is determined to be a re-press, generate a character 0; and the generated characters are arranged in the order of the operation gesture. Make up a binary string.

The processing unit 405 is configured to match the binary string with the verification code according to a preset rule. If the matching is successful, the identity verification is determined to be passed when the authentication information is determined to be correct, and if not, the identity verification request is rejected.

For example, if the verification code is a binary string, the processing unit 405 may be specifically configured to determine whether the binary string corresponding to the operation gesture is consistent with the verification code; if yes, determine the binary string corresponding to the operation gesture. Matching the verification code; if not, determining that the binary string corresponding to the operation gesture does not match the verification code.

For another example, if the verification code is a decimal number combination or a hexadecimal number combination, then the The processing unit 405 may be specifically configured to convert the decimal number combination or the hexadecimal number combination into a binary character string; determine whether the binary string corresponding to the operation gesture is consistent with the converted binary string; if they are consistent, determine The binary string corresponding to the operation gesture matches the verification code; if not, it is determined that the binary string corresponding to the operation gesture does not match the verification code.

In addition, the processing unit 405 is further configured to: when determining that the binary string matches the verification code, if it is determined that the authentication information is incorrect, reject the identity verification request.

In the specific implementation, the foregoing units may be implemented as a separate entity, or may be implemented in any combination, and may be implemented as the same or a plurality of entities. For the specific implementation of the foregoing, refer to the foregoing method embodiments, and details are not described herein.

The authentication device can be specifically integrated in a terminal, a server, or other device that requires authentication.

It can be seen from the above that when the identity verification device of the embodiment receives the identity verification request of the user, the verification code generating unit 402 generates a verification code according to the identity verification request, and the obtaining unit 403 determines that the user needs to input the verification code. Obtaining an operation gesture of the user on the touch panel, and then generating a corresponding binary character string according to the operation gesture by the string generation unit 404, and matching, by the processing unit 405, the binary string and the verification code according to a preset rule. If the authentication information is correct, the identity verification is determined to be passed, and if not, the identity verification request is rejected. The purpose of authenticating the user is now. According to the embodiment of the present invention, when the verification code input by the user is acquired, it is obtained by monitoring the touch panel without using a keyboard, and therefore, compared with the prior art, the technology can only be input through the keyboard. Providing a choice for the user to enter the verification code greatly facilitates the user's operation and helps to improve the flexibility, fun and interactivity of the operation.

In addition, the embodiment of the present invention further provides an identity verification device, which may include any identity verification device provided by the embodiment of the present invention. For details, refer to the embodiment shown in FIG.

For example, the identity verification device includes an identity verification device, configured to receive an authentication request of the user, where the identity verification request carries the authentication information, generate a verification code according to the identity verification request, and determine that the user needs to input the verification code to obtain the user touch An operation gesture on the control panel generates a corresponding binary string according to the operation gesture, and matches the binary string with the verification code according to a preset rule. If the matching is performed, determining the identity verification when determining that the authentication information is correct Pass, otherwise, if not, reject the authentication request.

For example, when it is determined that the operation gesture is a tap, the character 1 is generated, and when the operation gesture is determined to be a tap, the character 0 is generated, and then the generated characters are arranged in the order of the operation gesture to form a binary character string.

Or, for example, when it is determined that the operation gesture is a tap, the character 0 is generated, and when the operation gesture is determined to be a tap, the character 1 is generated, and then the generated characters are arranged in the order of the operation gesture to form a binary character string.

The authentication device may be a terminal, a server, or other device that needs to be authenticated. For the specific implementation of the foregoing operations, refer to the foregoing embodiments, and details are not described herein.

Since the identity verification device can include any of the identity verification devices provided by the embodiments of the present invention, the beneficial effects that can be achieved by any of the identity verification devices provided by the embodiments of the present invention can be implemented. For example, it will not be described here.

Referring to FIG. 5, it shows a terminal provided in an embodiment of the present invention. A schematic diagram of the structure, the terminal 500 can be a conventional desktop computer or laptop, an intelligent mobile terminal, or a dedicated authentication device. The terminal 500 includes a central processing unit (CPU) 501, a system memory 504 including a random access memory (RAM) 502 and a read only memory (ROM) 503, and a system bus 505 that connects the system memory 504 and the central processing unit 501. The terminal 500 also includes a basic input/output system (I/O system) 506 that facilitates transfer of information between various devices within the terminal, and mass storage for storing the operating system 513, applications 514, and other program modules 515. Device 507.

The basic input/output system 506 includes a display 508 for displaying information and an input device 509 such as a touchpad, mouse, keyboard for inputting information by the user. Both the display 508 and the input device 509 are connected to the central processing unit 501 via an input and output controller 510 that is coupled to the system bus 505. The basic input/output system 506 can also include an input and output controller 510 for receiving and processing input from a plurality of other devices, such as a touchpad, keyboard, mouse, or electronic stylus. Similarly, input and output controller 510 also provides output to a display screen, printer, or other type of output device.

The mass storage device 507 is connected to the central processing unit 501 by a mass storage controller (not shown) connected to the system bus 505. The mass storage device 507 and its associated terminal readable medium provide non-volatile storage for the terminal 500. That is, the mass storage device 507 can include a computer readable medium (not shown) such as a hard disk or a CD-ROM drive.

Without loss of generality, the computer readable medium can include computer storage media and communication media. Computer storage media includes volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Computer storage media include RAM, ROM, EPROM, EEPROM, flash memory or other solid state storage technologies, CD-ROM, DVD or other optical storage, tape cartridges, magnetic tape, magnetic disk storage or other magnetic storage devices. Of course, the technology in the field The skilled person will know that the computer storage medium is not limited to the above.

According to various embodiments of the present invention, the terminal 500 may also be connected to a remote computer running on a network through a network such as the Internet. That is, the terminal 500 can be connected to the network 512 through a network interface unit 511 connected to the system bus 505, or can be connected to other types of networks or remote computer systems (not shown) using the network interface unit 511. . According to various embodiments of the present invention, the network interface unit 511 may connect the terminal 500 to the network 512 in a wired or wireless manner.

A person skilled in the art may understand that all or part of the various steps of the foregoing embodiments may be performed by a program to instruct related hardware. The program may be stored in a computer readable storage medium, and the storage medium may include: Read Only Memory (ROM), Random Access Memory (RAM), disk or optical disk.

The foregoing describes an identity verification method and apparatus provided by the embodiments of the present invention. The principles and implementation manners of the present invention are described in detail herein. The description of the foregoing embodiments is only for helping to understand the present invention. The method and its core idea; at the same time, those skilled in the art, according to the idea of the present invention, there will be changes in the specific embodiments and application scope. In summary, the content of this specification should not be construed as Limitations of the invention.

Claims

An authentication method, comprising:

Receiving an authentication request of the user, where the authentication request carries authentication information;

Generating a verification code according to the identity verification request;

When the user needs to input the verification code, the operation gesture of the user on the touch panel is obtained;

Generating a corresponding binary string according to the operation gesture;

Matching the binary string with the verification code according to a preset rule;

If it is matched, when it is determined that the authentication information is correct, it is determined that the identity verification is passed;

If there is no match, the authentication request is rejected.
The method according to claim 1, wherein the generating a corresponding binary string according to the operation gesture comprises:

Determining that the operation gesture is a tap, generating a character 1;

Determining that the operation gesture is a tap, generating a character 0;

The generated characters are arranged in the order of the operation gestures to form a binary string.
The method according to claim 1, wherein the generating a corresponding binary string according to the operation gesture comprises:

Determining that the operation gesture is a tap, generating a character 0;

Determining that the operation gesture is a tap, generating a character 1;

The generated characters are arranged in the order of the operation gestures to form a binary string.
The method according to any one of claims 1 to 3, wherein the verification code is a binary character string, and the matching the binary character string with the verification code according to a preset rule comprises:

Determining whether a binary string corresponding to the operation gesture is consistent with the verification code;

If they are consistent, determining a binary string corresponding to the operation gesture and the verification code Match

If not, it is determined that the binary string corresponding to the operation gesture does not match the verification code.
The method according to any one of claims 1 to 3, wherein the verification code is a combination of a decimal number or a hexadecimal number, and the binary string and the The verification code is matched, including:

Converting the decimal number combination or a hexadecimal number combination into a binary string;

Determining whether the binary string corresponding to the operation gesture is consistent with the converted binary string;

If yes, determining that the binary string corresponding to the operation gesture matches the verification code;

If not, it is determined that the binary string corresponding to the operation gesture does not match the verification code.
The method according to any one of claims 1 to 3, further comprising: when determining that the binary string matches the verification code, further comprising:

If it is determined that the authentication information is incorrect, the identity verification request is rejected.
The method according to any one of claims 1 to 3, wherein when the verification code is generated according to the identity verification request, the method further includes:

Generating prompt information, where the prompt information is used to indicate a correspondence between the operation gesture and the binary character;

The obtaining an operation gesture of the user on the touch panel includes: acquiring an operation gesture of the user on the touch panel according to the prompt information.
An identity verification device, comprising:

a receiving unit, configured to receive an authentication request of the user, where the identity verification request carries authentication information;

a verification code generating unit, configured to generate a verification code according to the identity verification request;

An obtaining unit, configured to obtain an operation gesture of the user on the touch panel when the user needs to input the verification code;

a string generating unit, configured to generate a corresponding binary string according to the operation gesture;

a processing unit, configured to match the binary string with the verification code according to a preset rule, and if yes, determine that the authentication is valid when determining that the authentication information is correct, and if not, reject the Authentication request.
The identity verification device according to claim 8, wherein

The character string generating unit is specifically configured to: when the operation gesture is determined to be a tap, generate a character 1; when the operation gesture is determined to be a tap, generate a character 0; and the generated characters are arranged in the order of the operation gesture, and Binary string.
The identity verification device according to claim 8, wherein

The character string generating unit is specifically configured to: when the operation gesture is determined to be a tap, generate a character 0; when the operation gesture is determined to be a tap, generate a character 1; and the generated characters are arranged according to an operation gesture sequence, and Binary string.
The identity verification apparatus according to any one of claims 8 to 10, wherein the verification code is a binary character string, then:

The processing unit is configured to determine whether the binary string corresponding to the operation gesture is consistent with the verification code; if yes, determining that the binary string corresponding to the operation gesture matches the verification code; Then determining that the binary string corresponding to the operation gesture does not match the verification code.
The identity verification device according to any one of claims 8 to 10, wherein the verification code is a combination of a decimal number or a combination of hexadecimal numbers, then:

The processing unit is specifically configured to convert the decimal number combination or a hexadecimal number combination into a binary character string; determine a binary string and a conversion corresponding to the operation gesture Whether the obtained binary string is consistent; if it is consistent, it is determined that the binary string corresponding to the operation gesture matches the verification code; if not, it is determined that the binary string corresponding to the operation gesture does not match the verification code .
An identity verification device according to any one of claims 8 to 10, characterized in that

The processing unit is further configured to: when determining that the binary string matches the verification code, if it is determined that the authentication information is incorrect, reject the identity verification request.
An identity verification device according to any one of claims 8 to 10, characterized in that

The verification code generating unit is further configured to generate prompt information, where the prompt information is used to indicate a correspondence between the operation gesture and the binary character;

The obtaining unit is specifically configured to: when determining that the user needs to input the verification code, obtain an operation gesture of the user on the touch panel according to the prompt information.
A non-transitory computer readable storage medium characterized by storing a program capable of causing a computer to perform the following steps:

Receiving an authentication request of the user, where the authentication request carries authentication information;

Generating a verification code according to the identity verification request;

When the user needs to input the verification code, the operation gesture of the user on the touch panel is obtained;

Generating a corresponding binary string according to the operation gesture;

Matching the binary string with the verification code according to a preset rule;

If it is matched, when it is determined that the authentication information is correct, it is determined that the identity verification is passed;

If there is no match, the authentication request is rejected.
The non-transitory computer readable storage medium according to claim 15, wherein the generating a corresponding binary character string according to the operation gesture comprises:

Determining that the operation gesture is a tap, generating a character 1;

Determining that the operation gesture is a tap, generating a character 0;

The generated characters are arranged in the order of the operation gestures to form a binary string.
The non-transitory computer readable storage medium according to claim 15, wherein the generating a corresponding binary character string according to the operation gesture comprises:

Determining that the operation gesture is a tap, generating a character 0;

Determining that the operation gesture is a tap, generating a character 1;

The generated characters are arranged in the order of the operation gestures to form a binary string.
The non-transitory computer readable storage medium according to any one of claims 15 to 17, wherein the verification code is a binary character string, and the binary character string is The verification code is matched, including:

Determining whether a binary string corresponding to the operation gesture is consistent with the verification code;

If yes, determining that the binary string corresponding to the operation gesture matches the verification code;

If not, it is determined that the binary string corresponding to the operation gesture does not match the verification code.
The non-transitory computer readable storage medium according to any one of claims 15 to 17, wherein the verification code is a decimal number combination or a hexadecimal number combination, then the according to a preset rule The binary string is matched with the verification code, including:

Converting the decimal number combination or a hexadecimal number combination into a binary string;

Determining whether the binary string corresponding to the operation gesture is consistent with the converted binary string;

If yes, determining that the binary string corresponding to the operation gesture matches the verification code;

If not, it is determined that the binary string corresponding to the operation gesture does not match the verification code.
Non-volatile computer readable storage according to any one of claims 15 to The medium is characterized in that: when determining that the binary string matches the verification code, the method further includes:

If it is determined that the authentication information is incorrect, the identity verification request is rejected.
The method according to any one of claims 15 to 17, wherein when the verification code is generated according to the identity verification request, the method further includes:

Generating prompt information, where the prompt information is used to indicate a correspondence between the operation gesture and the binary character;

The obtaining an operation gesture of the user on the touch panel includes: acquiring an operation gesture of the user on the touch panel according to the prompt information.