WO2017071498A1

WO2017071498A1 - Identity authentication method and device

Info

Publication number: WO2017071498A1
Application number: PCT/CN2016/102368
Authority: WO
Inventors: 杨霞; 林陆一; 郝允允; 李轶峰
Original assignee: 腾讯科技（深圳）有限公司
Priority date: 2015-10-26
Filing date: 2016-10-18
Publication date: 2017-05-04
Also published as: CN106611110A

Abstract

An identity authentication method and device. The method comprises: receiving a data access request (101), enabling an authentication interface of the data according to the data access request, the authentication interface comprising an authentication information input interface (102), when the authentication information input interface is activated, acquiring a first operation gesture from a user on a touch pad (103), generating a corresponding first character string according to the first operation gesture in accordance with a pre-set rule (104), and allowing access to the data when it is determined that the first character string matches pre-set authentication information (105).

Description

Identity verification method and device

The present application claims priority to Chinese Patent Application No. 201510703477.0, the entire disclosure of which is incorporated herein by reference. .

Technical field

The present invention relates to the field of communications technologies, and in particular, to an identity verification method and apparatus.

Background of the invention

Information security is not only related to people's personal privacy, but also has a great relationship with people's personal property security. Therefore, how to ensure information security has always been a concern of people.

In order to improve the security of information, in the prior art, authentication is generally used to ensure information security. For example, in the case of a mobile phone, the prior art generally sets a corresponding lock screen password for the mobile phone. To unlock, the corresponding authentication information is provided to prevent strangers from using the mobile phone. In the existing authentication method, the user generally inputs the corresponding password through the keyboard to provide authentication information. However, this method is not very secure, and authentication information is easily stolen by illegal intruders, such as stealing passwords through keyboard hooks, and so on. Therefore, the prior art also proposes a scheme for authenticating using biometric features such as fingerprints, irises, or faces. For example, the user may collect biometric information such as a fingerprint, an iris, or a face through a fingerprint acquisition module, an iris acquisition module, or a camera, and then use the biometric information to encrypt an object that needs to be encrypted, such as a lock screen, or a pair. The album is encrypted, etc., if you want to access the object later, you only need to scan the fingerprint, iris or face.

In the course of research and practice of the prior art, the inventors of the present invention found that existing Although the method of using biometrics for identity verification can improve security, the device needs to configure corresponding acquisition modules, such as a fingerprint collection module or an iris acquisition module, and the algorithms involved are more complicated, and the processing efficiency is low.

Summary of the invention

The embodiment of the invention provides an identity verification method and device, which can simplify operation and improve processing efficiency while ensuring security.

An embodiment of the present invention provides an identity verification method, including:

Receiving a data access request, the data access request indicating data that needs to be accessed;

And starting an authentication interface of the data according to the data access request, where the authentication interface includes an authentication information input interface;

Acquiring a first operation gesture of the user on the touch panel when the authentication information input interface is activated;

Generating a corresponding first character string according to the preset rule according to the first operation gesture;

When it is determined that the first character string matches the preset verification information, the data is allowed to be accessed.

An embodiment of the present invention further provides an identity verification apparatus, including:

a receiving unit, configured to receive a data access request, where the data access request indicates data that needs to be accessed;

Activating unit, configured to start an authentication interface of the data according to the data access request, where the authentication interface includes an authentication information input interface;

An acquiring unit, configured to acquire a first operation gesture of the user on the touch panel when the authentication information input interface is activated;

a generating unit, configured to generate a corresponding first character string according to the preset rule according to the first operation gesture;

a processing unit, configured to: when the first string is matched with preset verification information, Allow access to the data.

The technical solution provided by the embodiment of the present invention does not need to receive the character input by the user through the keyboard, but acquires the operation gesture of the user through the touchpad, thereby avoiding theft of the authentication information by the keyboard hook. The possibility to improve information security. Moreover, the solution does not need to be equipped with an additional fingerprint or iris acquisition module, and does not require complicated processing, thereby greatly simplifying the operation and improving the processing efficiency.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention. Other drawings can also be obtained from those skilled in the art based on these drawings without paying any creative effort.

FIG. 1 is a schematic diagram of a scenario of an identity verification method according to an embodiment of the present invention;

FIG. 1b is a flowchart of an identity verification method according to an embodiment of the present invention;

FIG. 1c is a flowchart of a data encryption method according to an embodiment of the present invention;

2 is another flowchart of an identity verification method according to an embodiment of the present invention;

FIG. 3 is still another flowchart of an identity verification method according to an embodiment of the present invention;

4a is a schematic structural diagram of an identity verification apparatus according to an embodiment of the present invention;

4b is another schematic structural diagram of an identity verification apparatus according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of hardware of an identity verification apparatus according to an embodiment of the present invention; FIG.

FIG. 5b is a schematic diagram of another hardware structure of an identity verification apparatus according to an embodiment of the present invention.

Mode for carrying out the invention

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the present invention. Example, not all embodiments. All other embodiments obtained by a person skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The embodiments of the present invention provide an identity verification method and apparatus, which are respectively described in detail below.

FIG. 1 is a schematic diagram of a scenario of an identity verification method according to an embodiment of the present invention. The scenarios applied by the method include a touch panel of the terminal and the terminal. The terminal stores data that the user wants to access, and the touchpad can be used for the user to perform tap or click operations. Referring to FIG. 1a, when a user needs to access a certain data, such as accessing a file, a data access request can be sent to the terminal where the file is located. After receiving the data access request, the terminal may initiate an authentication interface of the data according to the data access request. The authentication interface includes an authentication information input interface. Then, when the authentication information input interface is activated, the terminal acquires a first operation gesture of the user on the touch panel, such as tapping or tapping, and then, according to the first operation gesture, generates a corresponding according to a preset rule. The first string and use the first string for authentication. For example, it is determined whether the first string matches the preset verification information. If it matches, the user is allowed to access the data, such as accessing the file; otherwise, the user is denied access to the data.

This embodiment will be described from the perspective of an identity verification device, which may be integrated in a terminal or other device that needs to be authenticated. For example, the identity verification device may be integrated in a tablet or a laptop, etc. Wait. These terminals or devices need to have a touch panel, which may be a hardware device of the terminal or the device itself, or an external device.

FIG. 1b is a flowchart of an identity verification method according to an embodiment of the present invention. As shown in FIG. 1b, the specific process of the identity verification method may include the following steps:

Step 101: Receive a data access request.

In the embodiment of the present invention, a data access request triggered by a user is received, or a data access request sent by another device is received, where the data access request indicates data that needs to be accessed, and the data may include specific information, a file, and a terminal application. For example, the data access request may specifically be a screen unlock request, an application access request or a file access request, and the like.

Step 102: Start an authentication interface of the data according to the data access request, where the authentication interface includes an authentication information input interface.

For example, in the case of unlocking the screen, the screen unlocking interface of the terminal may be activated according to the unlocking request of the screen, wherein the screen unlocking interface may further include an authentication information input interface, such as a password input box or an input area.

Step 103: Acquire an operation gesture of the user on the touch panel when the authentication information input interface is activated. For example, touch the touchpad or click on the touchpad, etc., simply tap or tap. For convenience of description, the embodiment of the present invention refers to the operation gesture as a first operation gesture.

In the embodiment of the present invention, the manner of activating the authentication information input interface may be various. For example, when determining a user selection, such as clicking or sliding, the authentication information input interface may determine the authentication information input interface. It is activated; or, when the input cursor is flashing at the authentication information input interface, such as the password input box, it can be determined that the authentication information input interface is activated.

In the embodiment of the present invention, the touch panel refers to an input device that uses a sliding operation of a finger on the board to move the cursor. The touch method may include a pressure touch (Force Touch) or other touch.

Step 104: Generate a corresponding character string according to the preset rule according to the first operation gesture. For convenience of description, the embodiment of the present invention refers to the character string as the first character string.

In the embodiment of the present invention, the first character string may be a binary string, a decimal string, or a hexadecimal string. The preset rule can be set according to the needs of the actual application. For example, you can set the tap to indicate "1", click to indicate "0", or set Tap to indicate “0”, tap to indicate “1”, or alternatively, to correspond to other operation gestures and characters, such as circle to indicate “A”, and so on.

For example, the first character string is a binary character string, and the operation gesture taps to indicate “1”, and the tap “0” is taken as an example. At this time, the step “generates the corresponding according to the preset operation rule according to the first operation gesture. The first string "can include:

When it is determined that the first operation gesture is a tap, the character 1 is generated; when the first operation gesture is determined to be a tap, the character 0 is generated; and the generated characters are arranged in the order of the first operation gesture to form a binary character string.

For another example, the first character string is a binary character string, and the operation gesture taps to indicate “0”, and the click “1” is taken as an example. At this time, the step “generates according to the preset operation rule according to the first operation gesture. The corresponding first string "may include:

When it is determined that the first operation gesture is a tap, the character 0 is generated; when the first operation gesture is determined to be a tap, the character 1 is generated; and the generated characters are arranged in the order of the first operation gesture to form a binary string.

The implementation of a decimal string or a hexadecimal string is similar, just set the correspondence between the operation gesture and each character in advance.

In the embodiment of the present invention, in order to facilitate the operation of the user, corresponding prompt information may also be generated and displayed on the authentication interface to indicate the correspondence between the operation gesture and the character.

For example, if “0” means tap, and “1” means tap, you can prompt the user: “0 means tap, 1 means tap, please input gestures in order”.

For another example, if "1" indicates a tap and "0" indicates a tap, the user can be prompted: "Where 1 indicates a tap, 0 indicates a tap, and the gesture is input in order."

Step 105: When the first string is determined to match the preset verification information, the data is allowed to be accessed, for example, the user or other device is allowed to access the data.

In the embodiment of the present invention, determining whether the first string matches the preset verification information There are a variety of ways, for example, you can use any of the following methods:

In a manner provided by the embodiment of the present invention, it is determined whether the first character string is consistent with the preset verification information, and if they are consistent, determining that the first character string matches the preset verification information; if not, determining The first string does not match the preset verification information.

For example, if the encrypted password is directly saved as the verification information when encrypting the data, the first character string and the verification information can be directly compared at this time. If they are consistent, it indicates that the decryption password is correct. Therefore, it can be determined that the authentication is passed, that is, the first string is determined to match the preset verification information; if not, the decryption password is incorrect, so it can be determined that the identity verification fails. That is, it is determined that the first character string does not match the preset verification information.

For example, if "1010" is used as the encryption password to encrypt the data, and "1010" is saved as the verification information, if the first string is "1010", it indicates that the first string matches the preset verification information. If the first character string is not "1010", it is determined that the first character string does not match the preset verification information.

In another mode provided by the embodiment of the present invention, the first character string is calculated according to a preset algorithm, and a calculation result is obtained, determining whether the calculation result is consistent with the preset verification information, and if the agreement is consistent, determining the first A string matches the preset verification information; if not, it is determined that the first string does not match the preset verification information.

For example, when encrypting data, in order to enhance the security of the information, the encrypted password is not directly saved as the verification information, but the encrypted password is calculated according to a preset algorithm, and the calculation result is saved as the verification information. At this time, before comparing the first character string with the verification information, the first character string needs to be calculated according to the preset algorithm, and then the calculation result is compared with the verification information. If the calculation result is consistent with the verification information, it indicates that the decryption password is correct. Therefore, it may be determined that the identity verification is passed, that is, the first character string is determined to match the preset verification information; if the calculation result is inconsistent with the verification information, the decryption is performed. The password is incorrect, so you can be sure that the authentication is not passed, that is, OK The first string does not match the preset verification information.

For example, if "1010" is used as the encryption password to encrypt the data, and after adding a "0" after "1010", the calculation result is saved as the verification information, that is, "10100" is used as the verification information. If a string is "1010", it is also necessary to add a "0" after the first string to compare the calculation result with the verification information.

In the embodiment of the present invention, the preset algorithm may be determined according to the requirements of the actual application.

In the embodiment of the present invention, when it is determined that the first character string does not match the preset verification information, no operation may be performed, or the data access request may be rejected, for example, returning prompt information indicating that the verification fails, and the like.

In addition, when encrypting data, you can enter the encrypted password directly through the keyboard or other input methods, or you can encrypt it by using the operation gesture on the touchpad, that is, before the step "Receive data access request", the identity verification The method can also include processing to encrypt the data. FIG. 1c is a flowchart of a data encryption method according to an embodiment of the present invention. As shown in FIG. 1c, the method includes the following steps:

Step S1: Receive a data encryption request indicating data that needs to be encrypted.

In the embodiment of the present invention, the data encryption request may specifically be a lock screen password setting request, a file encryption request, or an application encryption request, and the like.

Step S2: Acquire an encrypted password according to the data encryption request.

In the embodiment of the present invention, the operation gesture of the user on the touch panel (referred to as a second operation gesture for convenience of description) may be acquired according to the data encryption request, and corresponding to the second operation gesture according to the preset rule. The second string is converted into an encrypted password.

In the embodiment of the present invention, the second string may be a binary string, a decimal string, or a hexadecimal string. And the preset rule can be based on the needs of the actual application. Make settings, for example, you can set a tap to indicate “1”, a tap to indicate “0”, or a tap to indicate “0”, a tap to indicate “1”, or another operation gesture and character Correspondence, such as circle means "A", and so on.

For example, the second character string is a binary character string, and the operation gesture taps to indicate “1”, and the tap “0” is taken as an example. At this time, the step “generates the corresponding according to the preset operation rule according to the second operation gesture. The second string "can include:

When it is determined that the second operation gesture is a tap, the character 1 is generated; when the second operation gesture is determined to be a tap, the character 0 is generated; and the generated characters are arranged in the order of the first operation gesture to form a binary character string.

For another example, the second character string is a binary character string, and the operation gesture taps to indicate “0”, and the click “1” is taken as an example. At this time, the step “generates according to the second operation gesture according to the preset rule. The corresponding second string "may include:

When it is determined that the second operation gesture is a tap, the character 0 is generated; when the second operation gesture is determined to be a tap, the character 1 is generated; and the generated characters are arranged in the order of the first operation gesture to form a binary character string.

In the embodiment of the present invention, when the second character string is converted into an encrypted password, the second character string may be directly used as a password, or the second character string may be converted according to a certain rule, and the converted Two strings are used as passwords. However, it should be noted that if the second character string is converted and the converted second character string is used as the password, the subsequent conversion of the second character string is also required after the subsequent identity verification. Can be used as a decryption password.

Step S3: Encrypt the data by using the encrypted password, and convert the encrypted password into verification information for storage.

In the embodiment of the present invention, the encrypted password may be directly saved as the verification information, or the encrypted password may be calculated according to a preset algorithm, and then the calculation result is saved as the verification information. The preset algorithm and the algorithm used in subsequent authentication should be consistent.

It should be noted that the encryption rules and the decryption rules (that is, the rules used in the authentication) should be consistent.

As can be seen from the above, the technical solution provided by the embodiment of the present invention does not need to receive the characters input by the user through the keyboard, but acquires the operation gesture of the user through the touchpad, thereby avoiding being stolen by the keyboard hook. The possibility of authenticating information and improving information security. Moreover, the solution does not need to be equipped with an additional fingerprint or iris acquisition module, and does not require complicated processing, thereby greatly simplifying the operation and improving the processing efficiency.

According to the method described in the embodiment corresponding to FIG. 1b, the following embodiment will further explain the identity verification method in detail.

In the embodiment of the present invention, the identity verification device is specifically integrated in a terminal having a touch panel, and the data access request is specifically a screen unlock request as an example.

FIG. 2 is another flowchart of an identity verification method according to an embodiment of the present invention. As shown in FIG. 2, the specific process of the identity verification method may include the following steps:

Step 201: The terminal receives a screen unlock request about the terminal triggered by the user.

In this embodiment, the user can trigger the screen unlock request by sliding or clicking the unlock trigger button.

Step 202: The terminal starts the screen unlocking interface according to the screen unlocking request.

In this embodiment, the screen unlocking interface includes an authentication information input interface, such as a password input box or an input area.

Step 203: When the authentication information input interface is activated, the terminal acquires a first operation gesture of the user on the touch panel, such as an operation gesture such as tapping or tapping.

In this embodiment, the authentication information input interface may be activated in various manners. For example, when determining a user selection, such as clicking or sliding, the authentication information input interface may determine the authentication information input interface. It is activated; or, when the input cursor is flashing at the authentication information input interface, such as the password input box, it can be determined that the authentication information input interface is activated or the like.

Step 204: The terminal generates a corresponding first character string according to the preset rule according to the first operation gesture. For example, when the terminal determines that the first operation gesture is a tap, the terminal generates the character 1, and determines that the first operation gesture is a tap. The character 0 is generated, and the generated characters are arranged in the order of the first operation gesture to form a binary string.

For example, taking the binary string as a four-digit example, the user inputs an operation gesture four times in succession. If the operation gesture input by the user for the first time is “tap”, the character “1” can be generated at this time, if the operation gesture input by the user for the second time and the operation gesture input for the third time are “tap” ", then it can be determined that the second and third characters are all "0". If the operation gesture input by the user for the fourth time is "tap", it can be determined that the fourth character is "1", according to these operation gestures The order of these characters is arranged to determine that the binary string is "1001".

In this embodiment, in order to facilitate the operation of the user, corresponding prompt information may also be generated and displayed on the screen unlocking interface to indicate the correspondence between the operation gesture and the character. For example, the user may be prompted: “1 indicates a tap, 0 means tap, please enter gestures in order.

Certainly, the correspondence between the first operation gesture and each character may be other than the case described in the foregoing embodiment, and the first operation gesture may be converted into a binary string, or may be converted into Strings in other formats can be set according to the needs of the actual application.

Step 205: The terminal determines whether the first string matches the preset verification information. If yes, step 206 is performed. If not, the screen unlock request is rejected, for example, returning. Verify that the message does not pass, and so on.

In this embodiment, if the lock screen password is directly saved as the verification information when the lock screen password is set, the first character string and the verification information can be directly compared at this time. If the first string is consistent with the verification information, it indicates that the decryption password is correct. Therefore, it can be determined that the identity verification is passed, that is, the first string is determined to match the preset verification information; if not, the decryption password is incorrect, therefore, It can be determined that the authentication fails, that is, the first string is determined to not match the preset verification information.

For example, if "1001" is used as the lock screen password and "1001" is saved as the verification information, if the first character string is "1001", it indicates that the first character string matches the preset verification information, if If the first character string is not "1001", it is determined that the first character string does not match the preset verification information.

In this embodiment, if the lock screen password is set, in order to enhance the security of the information, the lock screen password is not directly saved as the verification information, but the lock screen password is calculated according to the preset algorithm. The calculation result is saved as the verification information. At this time, before comparing the first character string with the verification information, the first character string needs to be calculated according to the preset algorithm, and then the calculation result and the verification are performed. Information is compared. If the calculation result is consistent with the verification information, it indicates that the decryption password is correct, and the first character string is determined to match the preset verification information; otherwise, the decryption password is incorrect, and the first character string and the preset verification information are determined not to be determined. match.

For example, if "1001" is used as the lock screen password and a "0" is added after "1001", the calculation result is saved as the verification information, that is, if "10100" is used as the verification information, then the first string is used. For "1010", it is also necessary to add a "0" after the first string to compare the calculation result with the verification information.

In this embodiment, the preset algorithm may be determined according to the needs of the actual application.

Step 206: The terminal unlocks the terminal screen.

In this embodiment, when the lock screen password is set to the terminal, in addition to setting the lock screen password by using a keyboard or other input manner, the setting may also be performed by an operation gesture on the touch panel, for example, Use the following method to set the lock screen password:

Receiving a lock screen request triggered by the user, and acquiring a lock screen password according to the lock screen request, for example, acquiring a second operation gesture of the user on the touch panel, and generating a corresponding second character according to the preset rule according to the second operation gesture String, convert the second string into a lock screen password, and then use the lock screen password to lock the screen.

For the specific manner of generating the corresponding second character string according to the preset rule according to the second operation gesture, refer to the corresponding embodiment of FIG. 1b.

As shown in the above, in the embodiment, when receiving the screen unlocking request, the terminal may start the screen unlocking interface according to the screen unlocking request, and when the authentication information input interface on the interface is activated, acquiring the user's touch The first operation gesture on the board generates a corresponding first character string according to the preset rule according to the first operation gesture, and unlocks the screen when it is determined that the first character string matches the preset verification information. Since the solution does not need to receive the characters input by the user through the keyboard, but obtains the operation gesture of the user through the touchpad, the possibility of stealing the authentication information by the keyboard hook and improving the information security can be avoided. Sex. Moreover, the solution does not need to be equipped with an additional fingerprint or iris acquisition module, and does not require complicated processing, thereby greatly simplifying the operation and improving the processing efficiency.

In the following embodiments, the identity verification device is still specifically integrated in the terminal with the touch panel, but the data access request is specifically a file access request as an example.

FIG. 3 is still another flowchart of an identity verification method according to an embodiment of the present invention. As shown in FIG. 3, the specific process of the identity verification method may include the following steps:

Step 301: The terminal receives a file access request triggered by a user.

In this embodiment, the user can trigger the file access request by sliding or clicking on the file icon.

Step 302: The terminal starts an authentication interface according to the file access request.

In this embodiment, the authentication interface includes an authentication information input interface, such as a password input box or an input area.

Step 303: When the authentication information input interface is activated, the terminal acquires a first operation gesture of the user on the touch panel, such as an operation gesture such as tapping or tapping.

Step 304: The terminal generates a corresponding first character string according to the preset rule according to the first operation gesture. For example, when the terminal determines that the first operation gesture is a tap, the terminal generates a character 0, and determines that the first operation gesture is a tap. The character 1 is generated, and the generated characters are arranged in the order of the first operation gesture to form a binary character string.

For example, taking the binary string as a four-digit example, the user inputs an operation gesture four times in succession. If the operation gesture input by the user for the first time is “tap”, the character “0” can be generated at this time, if the operation gesture input by the user for the second time and the operation gesture input for the third time are both “tap” ", then it can be determined that the second and third characters are all "1". If the operation gesture input by the user for the fourth time is "tap", it can be determined that the fourth character is "0", according to these operation gestures The order of these characters is arranged to determine that the binary string is "0110".

In this embodiment, in order to facilitate the operation of the user, corresponding prompt information may also be generated and displayed on the screen unlocking interface to indicate the correspondence between the operation gesture and the character. For example, the user may be prompted: “0 indicates a tap, 1 means tap, please enter gestures in order.

Of course, the correspondence between the first operation gesture and each character is described in addition to the above embodiment. In addition to the situation, there may be other ways, and the first operation gesture can be converted into a string of other formats in addition to being converted into a binary string, which can be set according to the requirements of the actual application.

Step 305: The terminal determines whether the first string matches the preset verification information. If yes, step 306 is performed. If there is no match, the file access request is rejected, for example, returning the prompt information that the verification fails, and the like.

In this embodiment, if the encrypted password is directly saved as the verification information when setting the encrypted password of the file, the first character string and the verification information may be directly compared at this time, and if they are consistent, the decryption password is correct. Therefore, it can be determined that the authentication is passed, that is, the first string is determined to match the preset verification information. If the first string is inconsistent with the verification information, the decryption password is incorrect. Therefore, it can be determined that the identity verification fails, that is, It is determined that the first string does not match the preset verification information.

For example, if "0110" is used as the encryption password and "0110" is saved as the verification information, if the first character string is "0110", it indicates that the first character string matches the preset verification information, if the first If a string is not "0110", it is determined that the first string does not match the preset verification information, and so on.

In this embodiment, if the encrypted password of the file is set, in order to enhance the security of the information, the encrypted password is not directly saved as the verification information, but the encrypted password is calculated according to the preset algorithm, and then the calculation is performed. The result is saved as the verification information. At this time, before comparing the first character string with the verification information, the first character string needs to be calculated according to the preset algorithm, and then the calculation result and the verification information are further calculated. Compare. If the calculation result is consistent with the verification information, it indicates that the decryption password is correct, and the first character string is determined to match the preset verification information; otherwise, the decryption password is incorrect, and the first character string and the preset verification information are determined not to be determined. match.

For example, if "0110" is used as the encryption password, and a "0" is added after "0110". After that, the calculation result is saved as verification information, that is, "01100" is used as the verification information. If the first character string is "0110", it is also necessary to add a "0" after the first character string. The calculation result is compared with the verification information.

Step 306: The terminal allows the user to access the file, such as opening and browsing the file, or copying the file, and the like.

In this embodiment, when the encrypted password of the file is set to the terminal, in addition to setting the encrypted password of the file by using a keyboard or other input manner, the setting may also be performed by an operation gesture on the touch panel. For example, you can set the encrypted password for a file in the following way:

Receiving a file encryption request triggered by the user, and acquiring an encrypted password according to the file encryption request, for example, acquiring a second operation gesture of the user on the touch panel, and generating a corresponding second string according to the preset rule according to the second operation gesture Converting the second string to a lock screen password, and then encrypting the file with the encrypted password.

As shown in the above, in the embodiment, when receiving the file access request, the terminal may start the authentication interface according to the file access request, and obtain the user's touch when the authentication information input interface on the interface is activated. The first operation gesture on the board generates a corresponding first character string according to the preset rule according to the first operation gesture, and allows the user to access the file when determining that the first character string matches the preset verification information. Since the solution does not need to receive the characters input by the user through the keyboard, but obtains the operation gesture of the user through the touchpad, the possibility of stealing the authentication information by the keyboard hook and improving the information security can be avoided. Sex. Moreover, the solution does not need to be equipped with an additional fingerprint or iris acquisition module, and does not require complicated processing, thereby greatly simplifying the operation and improving the processing efficiency.

In order to implement the above identity verification method, an embodiment of the present invention further provides an identity verification apparatus. FIG. 4 is a schematic structural diagram of an identity verification apparatus according to an embodiment of the present invention. As shown in FIG. 4a, the identity verification apparatus may include a receiving unit 401, a starting unit 402, an obtaining unit 403, a generating unit 404, and a processing unit 405.

The receiving unit 401 is configured to receive a data access request, where the data access request indicates data that needs to be accessed.

In the embodiment of the present invention, the receiving unit 401 may receive a data access request triggered by a user, or receive a data access request sent by another device, where the data access request indicates data that needs to be accessed, and the data may include specific information, The file and the terminal application, etc., for example, the data access request may specifically be a screen unlock request, an application access request or a file access request, and the like.

The activation unit 402 is configured to start an authentication interface of the data according to the data access request, where the authentication interface includes an authentication information input interface.

For example, in the case of the unlocking of the screen, the activation unit 402 can start the screen unlocking interface of the terminal according to the unlocking request of the screen, wherein the screen unlocking interface can further include an authentication information input interface, such as a password input box or an input area.

The obtaining unit 403 is configured to acquire a first operation gesture of the user on the touch panel when the authentication information input interface is activated.

The generating unit 404 is configured to generate a corresponding first character string according to the preset rule according to the first operation gesture.

The processing unit 405 is configured to allow access to the first character string when it matches the preset verification information.

The first string may be a binary string, a decimal string, or a hexadecimal string. The preset rule can be set according to the requirements of the actual application. For example, the tap can be set to indicate “1”, the tap to indicate “0”, or the tap to indicate “0”, and the tap to indicate “1”, and Alternatively, it may be a correspondence between other operation gestures and characters, such as a circle indicating "A", and the like.

For example, if the first character string is a binary string, the generating unit 404 may be specifically configured to: when the first operation gesture is a tap, generate a character 1; and when the first operation gesture is a click, Generates a character 0; the generated characters are arranged in the order of the first operation gesture to form a binary string.

For example, if the first character string is still a binary string, the generating unit 404 may be specifically configured to: when the first operation gesture is a tap, generate a character 0; and determine that the first operation gesture is a point. On time, character 1 is generated; the generated characters are arranged in the order of the first operation gesture to form a binary string.

In the embodiment of the present invention, the generating unit 404 may also generate corresponding prompt information, and display the corresponding prompt information on the authentication interface to indicate the correspondence between the operation gesture and the character.

In the embodiment of the present invention, the method for determining whether the first character string and the preset verification information match may be multiple, that is, the processing unit 405 may adopt any one of the following manners.

For example, the processing unit 405 may be specifically configured to determine whether the first character string is consistent with the preset verification information, and if yes, determine that the first character string matches the preset verification information, and if not, determine the The first string does not match the preset verification information.

For example, the processing unit 405 is specifically configured to calculate the first character string according to a preset algorithm, obtain a calculation result, and determine that the calculation result is consistent with the preset verification information, and if yes, determine the first character string. Matching with the preset verification information. If they are inconsistent, it is determined that the first character string does not match the preset verification information.

In the embodiment of the present invention, when it is determined that the first character string does not match the preset verification information, the processing unit 405 may further perform no operation or reject the data access request, for example, return a prompt indicating that the verification fails. Information, and so on.

In addition, when encrypting data, you can enter the encrypted password directly through the keyboard or other input methods, or you can encrypt it by operating gestures on the touchpad. For example, as shown in FIG. 4b, the identity verification device may further include an encryption unit 406.

The receiving unit 401 is further configured to receive a data encryption request, where the data encryption request indicates data that needs to be encrypted.

The encryption unit 406 can be configured to obtain an encrypted password according to the data encryption request, encrypt the data by using the encrypted password, and convert the encrypted password into verification information for storage.

In the embodiment of the present invention, the encryption unit 406 may be configured to acquire a second operation gesture of the user on the touch panel according to the data encryption request, and generate a corresponding second character according to the preset rule according to the second operation gesture. String, which converts the second string into an encrypted password.

In the embodiment of the present invention, the second string may be a binary string, a decimal string, or a hexadecimal string. The preset rule can be set according to the requirements of the actual application. For example, the tap can be set to indicate “1”, the tap to indicate “0”, or the tap to indicate “0”, and the tap to indicate “1”, and Or, it can be other gestures and words Correspondence of characters, such as circle means "A", and so on.

For example, if the second character string is a binary string, the encryption unit 406 may be specifically configured to: when the second operation gesture is a tap, generate a character 1; and determine that the second operation gesture is a tap. , generating a character 0; arranging the generated characters in the order of the first operation gesture to form a binary string.

For example, if the second character string is still taken as an example, the encryption unit 406 may be specifically configured to: when the second operation gesture is a tap, generate a character 0; and determine that the second operation gesture is When clicked, the character 1 is generated; the generated characters are arranged in the order of the first operation gesture to form a binary string.

In the embodiment of the present invention, when the second string is converted into an encrypted password, the encryption unit 406 may directly use the second string as a password, or may convert the second string according to a certain rule, and convert the second string. After the second string as a password. However, it should be noted that if the second character string is converted and the converted second character string is used as the password, the subsequent conversion of the second character string is also required after the subsequent identity verification. Can be used as a decryption password.

In the embodiment of the present invention, the identity verification device may be specifically integrated in a terminal or other device that needs to perform identity verification. For example, the identity verification device may be specifically integrated in a tablet or a laptop, and the like. These terminals or devices need to have a touch panel, which may be the terminal or the device itself or an external device.

In the specific implementation, each of the above units may be implemented as a separate entity, or may be implemented in any combination, as the same or several entities. For the specific implementation of the above various units, refer to the foregoing method embodiments.

It can be seen from the above that the solution provided by the embodiment of the present invention does not need to obtain the authentication information. The user inputs the characters through the keyboard, and the user's operation gesture is acquired through the touchpad. Therefore, the possibility of the keyboard hook stealing the authentication information can be avoided, and the information security is improved. Moreover, the solution does not need to be equipped with an additional fingerprint or iris acquisition module, and does not require complicated processing, thereby greatly simplifying the operation and improving the processing efficiency.

FIG. 5 is a schematic structural diagram of hardware of an identity verification apparatus according to an embodiment of the present invention. As shown in Figure 5a, the apparatus can include:

A processor 501 (eg, a CPU) and a non-volatile memory 502.

The non-volatile memory 502 is configured to store machine readable instructions, including receive instructions, start instructions, get instructions, generate instructions, and processing instructions that are executable by the processor 501.

The processor 501 is configured to read and execute a receiving instruction, a starting instruction, an obtaining instruction, a generating instruction, and a processing instruction stored in the non-volatile memory 502, to implement each of the identity verification devices shown in FIG. 4a. The function of the module.

FIG. 5b is a schematic diagram of another hardware structure of an identity verification apparatus according to an embodiment of the present invention. As shown in Figure 5b, the apparatus can include:

A processor 501 (eg, a CPU) and a non-volatile memory 502.

The non-volatile memory 502 is configured to store machine readable instructions, including the received instructions, the start instructions, the get instructions, the generated instructions, and the instructions executable by the processor 501, as shown in FIG. 5a. In addition to the processing instructions, encrypted instructions that can be executed by the processor 501 are also included.

The processor 501 is configured to read and execute the receiving instruction, the starting instruction, the obtaining instruction, the generating instruction, the processing instruction, and the encryption instruction stored in the non-volatile memory 502 to implement the identity verification shown in FIG. 4b. The function of each module in the device.

A person of ordinary skill in the art can understand that all or part of the steps of the foregoing embodiments can be completed by a program to instruct related hardware, and the program can be stored in a In the computer readable storage medium, the storage medium may include a read only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and the like.

The foregoing describes an identity verification method and apparatus provided by the embodiments of the present invention. The principles and implementation manners of the present invention are described in detail herein. The description of the foregoing embodiments is only for helping to understand the present invention. The method and its core idea; at the same time, those skilled in the art, according to the idea of the present invention, there will be changes in the specific embodiments and application scope. In summary, the content of this specification should not be construed as Limitations of the invention.

Claims

An authentication method, comprising:

Receiving a data access request, the data access request indicating data that needs to be accessed;

And starting an authentication interface of the data according to the data access request, where the authentication interface includes an authentication information input interface;

Acquiring a first operation gesture of the user on the touch panel when the authentication information input interface is activated;

Generating a corresponding first character string according to the preset rule according to the first operation gesture;

When it is determined that the first character string matches the preset verification information, the data is allowed to be accessed.
The method according to claim 1, wherein the first character string is a binary character string, and the generating the corresponding first character string according to the preset rule according to the first operation gesture comprises:

Determining that the first operation gesture is a tap, generating a character 1;

Determining that the first operation gesture is a click, generating a character 0;

The generated characters are arranged in the order of the first operation gesture to form a binary string.
The method according to claim 1, wherein the first character string is a binary character string, and the generating the corresponding first character string according to the preset rule according to the first operation gesture comprises:

Determining that the first operation gesture is a tap, generating a character 0;

Determining that the first operation gesture is a tap, generating a character 1;

The generated characters are arranged in the order of the first operation gesture to form a binary string.
The method of claim 1 further comprising:

When it is determined that the first character string does not match the preset verification information, the data access request is rejected.
The method according to any one of claims 1 to 4, wherein the determining whether the first character string matches the preset verification information comprises:

Determining whether the first character string is consistent with preset verification information;

If they are consistent, determining that the first character string matches the preset verification information;

If not, it is determined that the first character string does not match the preset verification information.
The method according to any one of claims 1 to 4, wherein the determining whether the first character string matches the preset verification information comprises:

Calculating the first character string according to a preset algorithm to obtain a calculation result;

Determining whether the calculation result is consistent with the preset verification information;

If they are consistent, determining that the first character string matches the preset verification information;

If not, it is determined that the first character string does not match the preset verification information.
The method according to any one of claims 1 to 4, further comprising: before receiving the data access request,

Receiving a data encryption request, the data encryption request indicating data that needs to be encrypted;

Obtaining an encrypted password according to the data encryption request;

The data is encrypted using the encrypted password, and the encrypted password is converted into verification information for storage.
The method according to claim 7, wherein the obtaining the encrypted password according to the data encryption request comprises:

Obtaining a second operation gesture of the user on the touch panel according to the data encryption request;

Generating a corresponding second character string according to the preset rule according to the second operation gesture;

Converting the second string to an encrypted password.
The method of claim 8 wherein said second string is two And generating a corresponding second character string according to the preset rule according to the second operation gesture, including:

Determining that the second operation gesture is a tap, generating a character 1;

Determining that the second operation gesture is a tap, generating a character 0;

The generated characters are arranged in the order of the second operation gesture to form a binary string.
The method according to claim 8, wherein the second character string is a binary character string, and the generating the corresponding second character string according to the preset rule according to the second operation gesture comprises:

Determining that the second operation gesture is a tap, generating a character 0;

Determining that the second operation gesture is a tap, generating a character 1;

The generated characters are arranged in the order of the second operation gesture to form a binary string.
An identity verification device, comprising:

a receiving unit, configured to receive a data access request, where the data access request indicates data that needs to be accessed;

Activating unit, configured to start an authentication interface of the data according to the data access request, where the authentication interface includes an authentication information input interface;

An acquiring unit, configured to acquire a first operation gesture of the user on the touch panel when the authentication information input interface is activated;

a generating unit, configured to generate a corresponding first character string according to the preset rule according to the first operation gesture;

The processing unit is configured to allow access to the data when the first string is matched with the preset verification information.
The apparatus according to claim 11, wherein said first character string is Binary string, then:

The generating unit is specifically configured to: when the first operation gesture is a tap, generate a character 1; when the first operation gesture is determined to be a tap, generate a character 0; and the generated character is in the order of the first operation gesture Arrange to form a binary string.
The apparatus according to claim 11, wherein said first character string is a binary string, then:

The generating unit is specifically configured to: when the first operation gesture is a tap, generate a character 0; when the first operation gesture is determined to be a tap, generate a character 1; and the generated character is in the order of the first operation gesture Arrange to form a binary string.
Apparatus according to any one of claims 11 to 13, wherein

The processing unit is specifically configured to allow access to the data when determining that the first character string is consistent with preset verification information.
Apparatus according to any one of claims 11 to 13, wherein

The processing unit is configured to calculate the first character string according to a preset algorithm, obtain a calculation result, and determine that the calculation result is consistent with the preset verification information, and allows access to the data.
The apparatus according to any one of claims 11 to 13, further comprising an encryption unit;

The receiving unit is further configured to receive a data encryption request, where the data encryption request indicates data that needs to be encrypted;

The encryption unit is configured to acquire an encrypted password according to the data encryption request, encrypt the data by using the encrypted password, and convert the encrypted password into verification information for saving.
The device of claim 16 wherein:

The encryption unit is specifically configured to acquire a user on the touchpad according to the data encryption request And generating, by the second operation gesture, a corresponding second character string according to the preset operation rule, and converting the second character string into an encrypted password.
The apparatus according to claim 17, wherein said second character string is a binary string, then:

The encryption unit is specifically configured to: when the second operation gesture is a tap, generate a character 1; when the second operation gesture is determined to be a tap, generate a character 0; and the generated character is in the order of the second operation gesture Arrange to form a binary string.
The apparatus according to claim 17, wherein said second character string is a binary string, then:

The encryption unit is specifically configured to: when the second operation gesture is a tap, generate a character 0; when the second operation gesture is determined to be a tap, generate a character 1; and the generated character is in the order of the second operation gesture Arrange to form a binary string.