WO2018121387A1

WO2018121387A1 - Security verification method, platform, apparatus and system

Info

Publication number: WO2018121387A1
Application number: PCT/CN2017/117600
Authority: WO
Inventors: 童耀刚; 郑建宾; 周钰; 张玉凤
Original assignee: 中国银联股份有限公司
Priority date: 2016-12-30
Filing date: 2017-12-21
Publication date: 2018-07-05
Also published as: CN106991317A; TW201824108A; TWI718354B; CN106991317B

Abstract

Provided are a security verification method, comprising: receiving a service request from a user, wherein the service request comprises user information and device information; creating a current device fingerprint based on the device information; acquiring a device fingerprint list, wherein the device fingerprint list comprises pre-stored device fingerprints of all the devices associated with the user; comparing the current device fingerprint with the device fingerprint list; and determining that the service request passes security verification where the current device fingerprint matches at least one item in the device fingerprint list, wherein the device information comprises a device hardware parameter and device usage condition data, and the device fingerprint is a device model built based on the device hardware parameter and the device usage condition data. Further provided are a corresponding security verification platform, a corresponding security verification method implemented on a user equipment, a corresponding security verification apparatus, and a security verification system.

Description

Security verification method, platform, device and system

Technical field

The present invention relates generally to the field of bank card security technologies and, in particular, to security authentication methods and systems related to applications such as cardless payment.

Background technique

With the popularity of virtualization transactions, the banking system is also beginning to try more and more cardless payments. In the case of no card payment, there are typically two ways to place a bank card in a mobile phone: one is that in the absence of a physical card, the user applies to the bank for "air card issuance" through a specific mobile application. After the bank authenticates, all the information of a financial IC card will be loaded onto the SIM card or SD card of the user's mobile phone; the other is to apply for the virtual card of the physical card to the issuing bank in the case of an existing physical card. The account, the issuing bank sends a virtual card to the user based on the token technology. In both cases, there is a problem of difficulty in authentication. Generally, banks only issue cards to old customers. Generally, the method of SMS authentication is also easy to have a great security risk due to the replacement of the mobile phone card or the direct stealing of the verification code.

At present, some existing air card issuance methods include collecting biometric information of the user for user identity authentication, and successfully issuing the card through the authentication audit. Such methods have the following disadvantages: (1) biometric information such as fingerprints and voiceprints are easily stolen and forged, and hardware devices are required to support the collection of biometric information, which requires high hardware; (2) users The biometric information is stolen or counterfeited and is not easily detected, resulting in theft or forgery being able to use this method for a large number of card applications, resulting in sustained loss of user property; (3) no mechanism to block illegal behavior.

The over-the-air approach also relies to a large extent on the devices used by the user, and it may often be necessary to bind the account information associated with the virtual card to a particular user device. Currently, for multi-vendor uncontrollable devices such as mobile phones, there is no valid terminal ID available for device identification. This poses a great security risk for the card issuance phase and the subsequent transaction phase.

Therefore, it is desirable to design a reliable security verification scheme to improve the security of cardless payment systems and to promote the promotion of cardless payment technologies.

Summary of the invention

In view of this, the present invention provides a security verification scheme that can improve the above problems.

In one aspect, the present invention provides a security verification method, including: receiving a service request from a user, the service request including user information and device information; creating a current device fingerprint based on the device information; acquiring a device fingerprint list, The device fingerprint list includes previously stored device fingerprints of all devices associated with the user; comparing the current device fingerprint with the device fingerprint list; and in the current device fingerprint and the device fingerprint list The service request is determined to pass security verification in the case of at least one match, wherein the device information includes device hardware parameters and device usage data, and the device fingerprint is a device model constructed based on the device information.

The security verification method as described above, wherein the device usage data includes one or more of network information of the device, geographic location information, and user preference behavior information.

The security verification method as described above, wherein the network information of the device includes one or more of network connection information of the device, TCP packet attributes, connected router attributes, HTTP protocol attributes, and WiFi list.

The security verification method as described above, wherein the geographical location information of the device comprises one or more of a base station location location, a GPS location location, a time associated trajectory, and a common location.

The security verification method as described above, wherein the user preference behavior information of the device includes an operating system type, a version number, a preference setting, an application installation preference setting, an alarm time, an on/off time, an application frequency and time, and a screen operation contact. One or more of area, sliding direction, time interval for keyboard input, pressing force, gyroscope information, and accelerometer information.

The security verification method as described above, wherein comparing the current device fingerprint with the device fingerprint list comprises: item-by-item comparison according to all parameters included in the device model; assigning matching weights to each parameter; The comparison result of each parameter is weighted and averaged according to the matching weight; and it is determined according to the result of the weighted average whether the current device fingerprint matches an item in the device fingerprint list.

The security verification method as described above, wherein comparing the current device fingerprint with the device fingerprint list comprises: predicting, for each device fingerprint change in the device fingerprint list, according to the device historical usage situation; The current device fingerprint is compared to each of the predicted results.

The security verification method as described above, wherein the method further comprises performing the current device fingerprint and the device fingerprint blacklist library before comparing the current device fingerprint with the device fingerprint list. In contrast, the device fingerprint blacklist library saves the device fingerprint of the illegal device.

The security verification method as described above, wherein comparing with the device fingerprint blacklist library comprises comparing the current device fingerprint with the device fingerprint in the blacklist library step by step according to the priority of the key device parameter.

The security verification method as described above, wherein the key device parameters include a MAC address, an international mobile device identity IMEI, a device serial number, and a system identity.

A security verification method as described above, wherein the previously stored device fingerprint is generated based on device hardware parameters and historical device usage data.

The security verification method as described above, further comprising periodically updating device fingerprint data in the device fingerprint list by receiving device usage data from all devices associated with the user.

The security verification method as described above, wherein the service request includes a card issuance request and a transaction request.

The security verification method as described above, wherein the user information includes a username and a password associated with the service.

In another aspect, the present invention further provides a security verification platform, including: a data receiving module, configured to receive a service request from a user, the service request including user information and device information; and a device fingerprint creation module, configured to The device information is used to create a current device fingerprint; the list obtaining module is configured to obtain a device fingerprint list, where the device fingerprint list includes previously stored device fingerprints of all devices associated with the user; and a comparison module, configured to: The current device fingerprint is compared with the device fingerprint list; and the determining module is configured to determine that the service request passes the security verification if the current device fingerprint matches at least one of the device fingerprint lists, where The device information includes device hardware parameters and device usage data, and the device fingerprint is a device model constructed based on the device information.

In still another aspect, the present invention provides a security verification method, including: obtaining an authorization to collect device information from a user at a device; collecting device information from the device according to the authorization, the device information including device hardware Parameter and device usage data; and adding the device information to the service request when the user sends a service request to the secure authentication platform using the device.

The security verification method as described above, further comprising: periodically transmitting the device usage data to the secure verification platform.

In still another aspect, the present invention provides a security verification apparatus including: an authorization module for setting The device is configured to acquire the device information from the user, and the information collecting module is configured to collect device information from the device according to the authorization, where the device information includes device hardware parameters and device usage data, and an information adding module, configured to: The device information is added to the service request when the user sends a service request to the security verification platform by using the device.

In still another aspect, the present invention provides a security verification system including a user device, a security verification platform as described above, and a device fingerprint library, wherein the user device includes the security verification device as described above, and wherein The device fingerprint library is configured to store the device fingerprint list.

DRAWINGS

The foregoing and other objects, features, and advantages of the invention will be apparent from

1 is a schematic application scenario of a security verification system according to an example of the present invention.

2 is a schematic flow chart of a security verification method in accordance with an example of the present invention.

3 is a schematic flow chart of a security verification method in accordance with another example of the present invention.

4 is a schematic block diagram of a secure authentication platform in accordance with one example of the present invention.

Figure 5 is a schematic block diagram of a security verification device in accordance with another example of the present invention.

detailed description

BRIEF DESCRIPTION OF THE DRAWINGS Exemplary embodiments of the present invention will now be described with reference to the drawings, wherein like reference numerals refer to the like. The examples described below are provided to enable those skilled in the art to understand the invention, and the examples are intended to be illustrative and not limiting. The illustrations of the various elements, components, modules, devices and device bodies in the figures are only illustrative of the existence of such elements, components, modules, devices, and device bodies, and also indicate the relative relationship between them, but are not intended to limit their specificity. Shape; the relationship of the steps in the flowchart is not limited to the order given, and can be adjusted according to the actual application without departing from the scope of protection of the present application.

1 is a schematic block diagram of a security verification system in accordance with one example of the present invention. As shown in FIG. 1, a secure authentication system in accordance with the present invention includes a secure authentication platform 101, a user device 102, and a device fingerprint library 103, wherein the secure authentication platform 101 is configured to communicate with a card issuer. The scenario shown in FIG. 1 can be, for example, a card issuance process in a cardless payment process. The issuing bank may rely on the secure authentication platform 101 provided by the present invention for secure verification of the card issuance request from the user device 102. That is to say, the issuing bank 104 can determine the user device 102 as a trusted device after the user device 102 passes the verification of the security verification platform, thereby performing a card issuing operation of the virtual card for the device.

The secure verification platform 101 can, for example, serve multiple issuers simultaneously. In addition to the card issue application shown in FIG. 1, the security verification platform 101 can also provide verification for the transaction link. For example, when the user equipment needs to use the virtual card bound to the device for payment, the payment request may also be first received by the security verification platform for device identity verification, and the payment confirmation party may determine whether the verification result is based on the verification result. Perform payment operations. In practice, the secure verification platform can be implemented independently or integrated into any third party trusted service platform. The operation of the secure authentication platform 101 will be described in detail below in conjunction with FIG.

The user equipment 102 shown in FIG. 1 may be any device whose hardware condition meets the cardless payment conditions of each institution. Moreover, the user equipment 102 should have at least remote communication capabilities, such as by any wired or wireless means. For example, the device can be, for example, any smart device that is existing or to be developed, such as a cell phone, a computer, a laptop, a personal digital assistant (PDA), and the like.

The device fingerprint library 103 can be any database device or data server or the like that has been or is to be developed. Those skilled in the art will appreciate that the device fingerprint library can be implemented independently as shown in FIG. 1, or integrated with a secure authentication platform, or with other additional data processing devices.

2 is a schematic flow chart of a security verification method in accordance with an example of the present invention. The method can be performed, for example, in the secure authentication platform 101 shown in FIG. Each step will be described below in conjunction with the scenario shown in FIG.

[038] First, in step 21, the secure authentication platform 101 receives a service request from a user. The service request can be, for example, issued by a user via a certain smart device it holds, such as user device 102. The service request may be, for example, a virtual card application request sent to the bank. In other examples, the business request may also be a transaction request, such as a payment request.

In some examples of the present invention, the service request sent by the user through the smart device includes both user information and device information. The user information may be, for example, a username and password, which may be set by the user for a virtual service of an institution. For example, a bank may provide users with remote customer services such as online banking or mobile banking, and users may need to register users on the local device for use of these services, usually in the form of a username and password. Those skilled in the art will appreciate that the user information may also include any other information that uniquely identifies the identity of the user.

Further, the device information needs to include at least device hardware parameters and device usage data. The hardware parameters of the device include any basic hardware parameters and number of the device when the device is shipped from the factory, and any information that can uniquely identify the device. In some examples, the device hardware parameters may include, for example, an international mobile device identity IMEI, a factory serial number of the device, and the like.

Device usage data is information related to the way the user applies the device. In some examples, the device usage data includes one or more of network information of the device, geographic location information, and user preference behavior information. For example, the network information of the device may include one or more of network connection information of the device, TCP packet attributes, connected router attributes, HTTP protocol attributes, and WiFi list. The geographic location information of the device may be, for example, one or more of a base station location location, a GPS location location, a time associated trajectory, and a common location. The user preference behavior information of the device may be, for example, an operating system type, a version number, a preference setting, an application installation preference setting, an alarm time, an on/off time, an application frequency and time, a contact area when the screen is operated, a sliding direction, and a keyboard input. One or more of time interval, pressing force, gyroscope information, and accelerometer information.

In step 23, the secure verification platform 101 will create a current device fingerprint for the device based on the device information contained in the service request. A device fingerprint is a device model built on both device hardware parameters and device usage data. Device usage data can be the result of long-term data collection and statistics for the device. By adding device usage data, the device model constructed according to this has real-time and dynamic characteristics, and can more reliably identify each device, thereby eliminating important information leakage, for example, when the device is stolen or maliciously tampered. The risk of vicious state cards, account theft and so on.

In step 25, the secure authentication platform 101 will also obtain a device fingerprint list that includes previously stored device fingerprints for all devices associated with the user. In some examples, the device fingerprint list is stored in device fingerprint library 103.

In some examples, previously stored device fingerprints are generated based on device hardware parameters and historical device usage data. The secure authentication platform 101 can receive device usage data from the device, for example, before the user sends a service request. These device usage data may, for example, be collected from the user's remote service for the user's organization on the local device and sent to the secure authentication platform along with the device hardware parameters and user information. The security verification platform 101 can aggregate these hardware information and dynamic information into device fingerprints capable of characterizing the device using a pre-designed modeling algorithm, and send the generated device fingerprints to the device fingerprint library 103 along with corresponding user information. In the device fingerprint database, the device fingerprint of each device of the user may be stored in the form of a list with the user information as an index. In practice, one A user can have one or more smart devices, so the same user information can correspond to one device fingerprint or multiple device fingerprints.

In some examples, the secure authentication platform can also periodically update device fingerprints in the device fingerprint list by receiving device usage data from devices associated with the user. As the actual situation of the user may change, the device usage may change accordingly. For example, the user's geographic location information changes due to changes in the place of residence. By continuously receiving recent device usage, the timeliness of device fingerprints can be guaranteed to provide a better user experience.

In addition, the device fingerprint library can also be generated by the user directly going to the issuing bank to perform on-site filing of the device. This way of establishing the device fingerprint library is particularly suitable for the case where the user requires virtual card binding when creating an account for the card issuer through the device for the first time. In still other examples, the secure authentication platform may also receive similar device information from a third party for device fingerprint construction. In either case, the one-way encrypted transmission is preferably used in the transmission of the device usage data to ensure the security of the user information and the device information.

In step 27, the secure verification platform 101 compares the generated current device fingerprint with all device fingerprints in the device fingerprint list to determine the legitimacy of the device that sent the service request.

In some examples, item-by-item comparisons can be made based on all parameters included in the device model represented by the device fingerprint. This item-by-item comparison can be thought of as a static match. The parameters may include device hardware parameters and device usage parameters such as network information, geographic location information, and user preference behavior information. In the process of exact matching by each parameter, each parameter can be given a matching weight. As mentioned above, a device fingerprint is a dynamic device identification in which parameters related to device usage change as the user's state changes. There is a certain difference in timeliness between the device fingerprint stored in the device fingerprint database and the currently generated device fingerprint. Therefore, each parameter does not necessarily need to be completely consistent, but can be distinguished by weight. Further, the comparison result of the current device fingerprint and each parameter of each item in the list may be weighted and averaged according to a pre-assigned matching weight, and the multi-value matching degree is calculated. Finally, according to the result of the weighted average, that is, the multi-value matching degree, it is judged whether the current device fingerprint matches the item in the device fingerprint list. In some examples, for example, the result of the weighted average can be compared to a predetermined threshold: if it is above the threshold, it is considered a match, otherwise it is considered a mismatch.

In other examples, dynamic matching can also be employed. As mentioned above, Device fingerprinting is a dynamic device identification, especially where parameters related to device usage may change continuously. Therefore, when the device fingerprints match, in addition to the exact match between the current value and the stored value, the current value can be compared with the prediction based on the previous data. In some examples, the externally collected hardware information and device usage data are analyzed by a machine learning method using an external processing device integrated with the device fingerprint library or independent of the device fingerprint library, thereby predicting continuous device fingerprint changes, The predicted result is stored in the device fingerprint database as an updated device fingerprint for subsequent device fingerprint comparison. By comparing the dynamic methods, the user experience can be greatly improved while ensuring security, and the convenience of the entire business process is increased. In addition, dynamic or static contrast can be used simultaneously or alternately.

In the case where the current device fingerprint is compared with the items in the device fingerprint list, and it is determined that there is at least one match, the security verification platform determines in step 29 that the received service request passes the security verification. Further, in the scenario shown in FIG. 1, the security verification platform 101 notifies the issuing bank to start a normal virtual card issuance or card binding operation.

In the present invention, the device fingerprint is constructed by combining the usage data of the device, which effectively solves the problem that the existing cardless payment issuance and the transaction link are based only on the card number information and the mobile phone code verification, thereby greatly reducing the malicious binding and The risk of stealing. Compared with the biometric information, the user's smart device can be detected by the security verification platform in time after being stolen, so as to contact the verification platform or the issuing bank in time for the device fingerprint to freeze or update the information, and the one-way encryption is adopted. The protection measures will not lose personal information even if the smart device is stolen. In addition, the solution provided by the present invention makes the verification condition requirement at the user end reduced by enhancing the authentication process on the server side.

In some preferred examples, in addition to the steps shown in FIG. 2, the secure authentication platform 101 may be further configured to perform the current device fingerprint and the device fingerprint blacklist library before comparing the current device fingerprint with the device fingerprint list. Compared. Generally, the device fingerprint blacklist library stores device fingerprints of illegal devices, and the information of these illegal devices can be collected from the outside or accumulated through the previous comparison process.

The comparison with the device fingerprint blacklist library can also use the static and dynamic methods described above for the device fingerprint list alignment. In other examples, comparing with the device fingerprint blacklist library may compare the current device fingerprint with the device fingerprint in the blacklist library step by step according to the priority of the key device parameter. For example, the key device parameters may be a MAC address, an International Mobile Equipment Identity IMEI, a device serial number, and a system identification, and the priority is from high to low in the order listed in each item. That is, In the blacklist comparison, the MAC address information included in the current device fingerprint is first compared with the MAC address information in each device fingerprint item in the blacklist library. If a match is found, the device fingerprint in the current request can be determined to be an audit failure. If no entry is found for the MAC address information, then the device serial number is compared, and so on.

Compared with the traditional single factor system and equipment information string system, the multi-factor separate authentication method is adopted, based on key device parameters such as MAC address, IMEI, serial number and Android ID as the blacklist device fingerprint factor, and according to The uniqueness of several device fingerprint factors and the strength priority of reliability, the device fingerprint blacklist factor level library is constructed. In the blacklist storage stage, the uniqueness and reliability of the relevant fingerprint factor are detected, and a reliable factor is selected into the blacklist factor level library according to the detection result, thereby improving the effectiveness of the blacklist library. Accurate matching tracking of blacklisted devices can be achieved based on pre-set reliability priority levels.

In some examples, the blacklist may be established according to the following principle: the device fingerprint information that failed in one audit enters the graylist list, and the blacklist that fails the audit multiple times. In addition, other business systems of the organization can also include violating equipment in the device fingerprint blacklist according to business rules.

In addition, device fingerprints in the blacklist can also be recovered. For example, the user can submit the user profile to the security verification platform. After the audit is successful, the corresponding device of the user in the blacklist can be deleted.

Before the device fingerprint list is compared, the blacklist comparison directly rejects the illegal device, which improves the security of cardless payment issuing and the efficiency of illegal device audit in high-risk situations.

3 is a schematic flow chart of a security verification method in accordance with another example of the present invention. The security verification method shown in FIG. 3 can be generally implemented in the user equipment 102 shown in FIG. 1, and cooperates with the method shown in FIG. 2 to complete the security verification scheme provided by the present invention.

As shown in FIG. 3, the authorization to collect device information is first obtained from the user at the device at step 31. Next, in step 33, device information is collected from the user's device in accordance with the authorization. In the present invention, the collected device information includes at least device hardware parameters and device usage data, wherein the device usage data may be, for example, network information of the device, geographic location information, and user preference behavior information. Further, in step 35, the collected device information is added to the service request when the user sends the service request to the security verification platform by using the device.

The method illustrated in FIG. 3 may be implemented, for example, in an application (APP) installed on a user device, or as a software development kit SDK to embed an application provided by an organization to a user device. Lift For example, the mobile banking service provided by the user for the use of the institution may require the installation of the corresponding APP on the mobile device. The APP can request authorization from the user after the user creates an account (usually including a username and password) and logs in with the account, and collects device information after authorization. The collected information can be sent to a secure authentication platform to create a device fingerprint for the device, regardless of whether the user makes any business requests. The secure authentication platform can store all device fingerprint information from the same user account as a device fingerprint list, as described above. In some examples, the application on the user device may also periodically transmit device usage data to the secure authentication platform for the security verification platform to continually update the device fingerprint library to facilitate subsequent receipt of the service. The device information in the request is compared.

Those skilled in the art will appreciate that the method illustrated in FIG. 3 is not necessarily implemented on the user's device, but may be implemented, for example, by an independent third party. Moreover, the method can also be implemented in any form of software or hardware.

[062] In general, the security verification scheme provided by the present invention has no additional functional requirements for the smart device used by the user, and generally only requires the user to authorize the authenticator or the organization to acquire the device right, which greatly improves the user experience. It also reduces the cost of equipment audits for all parties.

4 is a schematic block diagram of a secure authentication platform in accordance with one example of the present invention. As shown in FIG. 4, the security verification platform 400 includes a data receiving module 41, a device fingerprint creating module 43, a list obtaining module 45, a matching module 47, and a determining module. Specifically, the data receiving module 41 is configured to receive a service request from a user. In the present invention, these service requests include both user information and device information, where the device information will include device hardware parameters and device usage data. The device fingerprint creation module 43 is configured to create a current device fingerprint based on the device information. In the present invention, a device fingerprint is a device model built based on device hardware parameters and device usage data. The list obtaining module 45 is configured to obtain a device fingerprint list including previously stored device fingerprints of all devices associated with the user. The comparison module 47 is configured to compare the current device fingerprint with each device fingerprint in the device fingerprint list. The determining module 49 is configured to determine that the received service request passes the security verification if the current device fingerprint matches at least one of the device fingerprint lists.

The security verification platform 400 shown in Figure 4 can be configured to implement any of the operations described above in connection with the security verification process implemented at the secure authentication platform provided by the present invention. Those skilled in the art will appreciate that the module partitioning shown in FIG. 4 is merely illustrative, and that these modules can be integrated or further divided according to a specific implementation and implemented in any software or hardware form.

Figure 5 is a schematic block diagram of a security verification device in accordance with another example of the present invention. As shown in FIG. 5, the security verification apparatus 500 includes an authorization module 51, an information collection module 53, and an information addition module 55. In practice, the security verification device 500 can be integrated or installed in a device that a user may use to send a service request to an organization. Specifically, the authorization module 51 is configured to acquire an authorization to collect device information from the user at the device. The information collection module 53 is configured to collect device information from the user's device according to the obtained authorization. In the present invention, the collected device information will include both device hardware parameters and device usage data. The information adding module 55 is configured to add the collected device information to the service request when the user sends a service request to the security verification platform by using the device.

The security verification device 500 shown in FIG. 5 can be configured to implement any of the operations described above at the user device associated with the security verification process provided by the present invention. Those skilled in the art can understand that the module division shown in FIG. 5 is only schematic, and the modules can be integrated or further divided according to a specific implementation, and implemented in any software or hardware form.

It should be noted that the above specific embodiments are merely illustrative of the technical solutions of the present invention and are not limited thereto. While the invention has been described in detail herein with reference to the preferred embodiments of the embodiments of the invention All are covered by the scope of the claimed invention.

Claims

A security verification method comprising:

Receiving a service request from a user, the service request including user information and device information;

Creating a current device fingerprint based on the device information;

Obtaining a device fingerprint list, the device fingerprint list including previously stored device fingerprints of all devices associated with the user;

Comparing the current device fingerprint with the device fingerprint list;

Determining that the service request passes security verification if the current device fingerprint matches at least one of the device fingerprint lists,

The device information includes device hardware parameters and device usage data, and the device fingerprint is a device model constructed based on device hardware parameters and device usage data.
The secure authentication method of claim 1, wherein the device usage data comprises one or more of network information of the device, geographic location information, and user preference behavior information.
The security verification method according to claim 2, wherein the network information of the device comprises one or more of network connection information of the device, TCP packet attributes, connected router attributes, HTTP protocol attributes, and WiFi list.
The security verification method of claim 2, wherein the geographic location information of the device comprises one or more of a base station location location, a GPS location location, a time associated trajectory, and a common location.
The security verification method according to claim 2, wherein the user preference behavior information of the device includes an operating system type, a version number, a preference setting, an application installation preference setting, an alarm time, an on/off time, an application frequency and time, and a screen operation. One or more of the contact area, the sliding direction, the time interval of keyboard input, the pressing force, the gyroscope information, and the accelerometer information.
The security verification method according to claim 1, wherein comparing the current device fingerprint with the device fingerprint list comprises:

Perform item-by-item comparison based on all parameters included in the device model;

Give each parameter a matching weight;

Comparing the comparison results of the respective parameters by the matching weights; and

Determining, according to the result of the weighted averaging, whether the current device fingerprint is in the device fingerprint list The item matches.
The security verification method according to claim 1, wherein comparing the current device fingerprint with the device fingerprint list comprises:

Predicting each device fingerprint change in the device fingerprint list according to the device history usage; and

The current device fingerprint is compared to each of the predicted results.
The security verification method according to claim 1, wherein the method further comprises comparing the current device fingerprint with the device fingerprint blacklist library before comparing the current device fingerprint with the device fingerprint list, The device fingerprint blacklist library saves the device fingerprint of the illegal device.
The security verification method according to claim 8, wherein comparing with the device fingerprint blacklist library comprises comparing the current device fingerprint with the device fingerprint in the blacklist library step by step according to the priority of the key device parameter.
The secure authentication method of claim 9, wherein the key device parameters comprise a MAC address, an international mobile device identity IMEI, a device serial number, and a system identity.
The secure authentication method of claim 1, wherein the previously stored device fingerprint is generated based on device hardware parameters and historical device usage data.
The secure authentication method of claim 1 further comprising periodically updating device fingerprint data in said device fingerprint list by receiving device usage data from all devices associated with said user.
The secure authentication method of claim 1, wherein the service request comprises a card issuance request and a transaction request.
The secure authentication method of claim 1 wherein said user information comprises a username and password associated with said service.
A security verification platform that includes:

a data receiving module, configured to receive a service request from a user, where the service request includes user information and device information;

a device fingerprint creation module, configured to create a current device fingerprint based on the device information;

a list obtaining module, configured to acquire a device fingerprint list, where the device fingerprint list includes previously stored device fingerprints of all devices associated with the user;

a comparison module, configured to compare the current device fingerprint with the device fingerprint list; a determining module, configured to determine that the service request passes security verification if the current device fingerprint matches at least one of the device fingerprint lists,

The device information includes device hardware parameters and device usage data, and the device fingerprint is a device model constructed based on device hardware parameters and device usage data.
A security verification method comprising:

Obtaining authorization to collect device information from the user at the device;

Collecting device information from the device according to the authorization, the device information including device hardware parameters and device usage data;

The device information is added to the service request when the user sends a service request to the security verification platform by using the device.
The security verification method of claim 16 further comprising: periodically transmitting said device usage data to said secure authentication platform.
A security verification device comprising:

An authorization module for obtaining authorization to collect device information from a user at the device;

An information collecting module, configured to collect device information from the device according to the authorization, where the device information includes device hardware parameters and device usage data;

The information adding module is configured to add the device information to the service request when the user sends a service request to the security verification platform by using the device.
A security verification system comprising a user equipment, the security verification platform of claim 15, and a device fingerprint library, wherein the user equipment comprises the security verification device of claim 18, and wherein the device fingerprint The library is configured to store the device fingerprint list.