WO2020119157A1 - 验证方法、装置和计算机可读存储介质 - Google Patents

验证方法、装置和计算机可读存储介质 Download PDF

Info

Publication number
WO2020119157A1
WO2020119157A1 PCT/CN2019/100286 CN2019100286W WO2020119157A1 WO 2020119157 A1 WO2020119157 A1 WO 2020119157A1 CN 2019100286 W CN2019100286 W CN 2019100286W WO 2020119157 A1 WO2020119157 A1 WO 2020119157A1
Authority
WO
WIPO (PCT)
Prior art keywords
information
user
configuration information
candidate
verified
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2019/100286
Other languages
English (en)
French (fr)
Inventor
路亭玉
金姿
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Jingdong Century Trading Co Ltd
Beijing Jingdong Shangke Information Technology Co Ltd
Original Assignee
Beijing Jingdong Century Trading Co Ltd
Beijing Jingdong Shangke Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Jingdong Century Trading Co Ltd, Beijing Jingdong Shangke Information Technology Co Ltd filed Critical Beijing Jingdong Century Trading Co Ltd
Priority to US17/413,281 priority Critical patent/US11899770B2/en
Publication of WO2020119157A1 publication Critical patent/WO2020119157A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
    • G06F21/35—User authentication involving the use of external additional devices, e.g. dongles or smart cards communicating wirelessly
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3236—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using cryptographic hash functions

Definitions

  • the present disclosure relates to the field of computer technology, and in particular, to a verification method, device, and computer-readable storage medium.
  • IP address IP address
  • cookie information etc.
  • the user's cookie information is implemented by local storage. The user can clear the local data, so it may not be possible to distinguish the user by using the cookie information.
  • the prior art solutions cannot accurately distinguish users and verify users.
  • a technical problem to be solved by the present disclosure is to improve the accuracy of user identity verification.
  • a verification method which includes: acquiring at least one value of configuration information to be verified of a user's hardware device; generating user verification information according to the value of the configuration information to be verified; The information is compared with the stored user's identity verification information to verify the user's identity.
  • generating the user's to-be-verified information according to the value of the to-be-verified configuration information includes: in a case where the to-be-verified configuration information includes multiple to-be-verified configuration information, the values of the various to-be-verified configuration information in a preset order Combine and generate a hash value based on the combined information as the user's information to be verified.
  • comparing the information to be verified with the stored user's identity verification information to verify the user's identity includes: searching the stored user's identity verification information based on the user's account information; When the identity verification information is consistent, determine the user's account information is safe; when the information to be verified is not consistent with the user's identity verification information, determine that the user's account information is at risk.
  • the method further includes: for each candidate user, acquiring values of multiple candidate configuration information of the candidate user's hardware device; determining various candidate configuration information for the candidate user according to the values of the various candidate configuration information Differentiating degree; according to the differentiating degree of various candidate configuration information to the candidate users, one or more candidate configuration information is selected as the configuration information to be verified.
  • determining the degree of discrimination of the various candidate configuration information to the candidate users according to the values of the various candidate configuration information includes: for each candidate configuration information, determining the number of types of candidate configuration information values, based on the value types The comparison between the number and the number of candidate users to determine the discrimination degree of the candidate configuration information to the candidate users; selecting one or more candidate configuration information as the configuration information to be verified includes: selecting a corresponding one whose discrimination degree is greater than the first threshold One or more candidate configuration information as configuration information to be verified.
  • determining the degree of discrimination of the various candidate configuration information to the candidate users according to the values of the various candidate configuration information further includes: selecting a preset number of candidate configurations from the selected various candidate configuration information each time The information is combined, and for each combination, according to the comparison of the number of combination value types and the number of candidate users, the discrimination degree of the combination to the candidate user is determined; wherein, the type of candidate configuration information included in each combination is not completely the same;
  • One or more candidate configuration information as the configuration information to be verified includes: selecting a corresponding combination whose discrimination is greater than the second threshold, and using the candidate configuration information in the selected combination as the configuration information to be verified.
  • the method further includes: when the user's account information is at risk, perform security verification on the user's account; when the security verification is passed, bind the user's identity verification information with the account information And store.
  • a verification device including: an acquisition module configured to acquire at least one value of configuration information to be verified of a user's hardware device; a verification information generation module configured to be The value of the verification configuration information generates the user's to-be-verified information; the verification module is configured to compare the to-be-verified information with the stored user's identity verification information to verify the user's identity.
  • the verification information generation module is configured to combine the values of the various configuration information to be verified in a preset order when the configuration information to be verified includes multiple types of configuration information to be verified, and according to the combined The information generates a hash value as the user's information to be verified.
  • the verification module is configured to search for the stored user's identity verification information based on the user's account information; if the information to be verified is consistent with the user's identity verification information, determine the user's account information is safe; When the information is inconsistent with the user's identity verification information, it is determined that the user's account information is at risk.
  • the apparatus further includes: a screening module configured to obtain, for each candidate user, values of various candidate configuration information of the candidate user's hardware device; and according to the values of various candidate configuration information, determine various The degree of discrimination of candidate configuration information to candidate users; according to the degree of discrimination of various candidate configuration information to candidate users, one or more candidate configuration information is selected as the configuration information to be verified.
  • a screening module configured to obtain, for each candidate user, values of various candidate configuration information of the candidate user's hardware device; and according to the values of various candidate configuration information, determine various The degree of discrimination of candidate configuration information to candidate users; according to the degree of discrimination of various candidate configuration information to candidate users, one or more candidate configuration information is selected as the configuration information to be verified.
  • the screening module is configured to determine the number of types of candidate configuration information for each candidate configuration information, and determine the candidate configuration information for the candidate user according to the comparison between the number of value types and the number of candidate users The degree of discrimination; selecting one or more candidate configuration information corresponding to the degree of discrimination greater than the first threshold as the configuration information to be verified.
  • the screening module is configured to select a preset number of candidate configuration information from the selected candidate configuration information for combination at a time, and for each combination, according to the combination of the number of types of candidates and the number of candidate users Compare the situation to determine the degree of discrimination of the combination to the candidate user; where the type of candidate configuration information contained in each combination is not exactly the same; select the combination with the corresponding degree of discrimination greater than the second threshold and compare the candidate configuration information in the selected combination As configuration information to be verified.
  • the device further includes: a security prompt module configured to perform security verification on the user's account when the user's account information is at risk; an information binding module configured to pass security verification In this case, the user's identity verification information and account information are bound and stored.
  • a verification device including: a processor; and a memory coupled to the processor, storing instructions, and when the instructions are executed by the processor, the processor is executed as any of the foregoing implementations Examples of verification methods.
  • a computer-readable non-transitory storage medium on which a computer program is stored.
  • the processor is caused to perform the verification method of any of the foregoing embodiments.
  • the value of the configuration information of the user's hardware device to be verified is used to generate the information to be verified, and the user is verified by comparing the information to be verified with the identity verification information. Due to the different preferences and identities of each user, the configuration information of the hardware device to be verified is different, and the hardware device used by the user is usually fixed, and is not easy to tamper with or obtain. Therefore, the configuration information of the user's hardware device can improve the user's identity Verified security.
  • FIG. 1 shows a schematic flowchart of a verification method according to some embodiments of the present disclosure.
  • FIG. 2 shows a schematic flowchart of a verification method according to other embodiments of the present disclosure.
  • FIG. 3 shows a schematic structural diagram of a verification device of some embodiments of the present disclosure.
  • FIG. 4 shows a schematic structural diagram of a verification device according to other embodiments of the present disclosure.
  • FIG. 5 shows a schematic structural diagram of a verification device according to still other embodiments of the present disclosure.
  • the present disclosure proposes a verification method that can be used to verify the identity of a user, which will be described below in conjunction with FIG. 1.
  • FIG. 1 is a flowchart of some embodiments of the verification method of the present disclosure. As shown in FIG. 1, the method of this embodiment includes: steps S102 to S106.
  • step S102 at least one value of configuration information to be verified of the user's hardware device is acquired.
  • the configuration information of the hardware device includes, for example: operating system logo, plug-in logo, device hardware logo, font setting information, UA (User Agent), application software version (App Version), browser logo, language setting information, screen Resolution, IMEI (International Mobile Equipment Identity, International Mobile Equipment Identity), etc., use one or more of these pieces of information as configuration information to be verified.
  • UA User Agent
  • App Version application software version
  • browser logo language setting information
  • screen Resolution IMEI (International Mobile Equipment Identity, International Mobile Equipment Identity), etc.
  • IMEI International Mobile Equipment Identity, International Mobile Equipment Identity
  • the configuration information to be verified can be obtained when the user opens a browser, application software (App), or login page of an Internet platform.
  • step S104 the user's to-be-verified information is generated according to the value of the to-be-verified configuration information.
  • the values of the various configuration information to be verified are combined in a preset order, and a hash value is generated according to the combined information as The user's information to be verified.
  • the values of various configuration information to be verified need to be arranged in a certain order, so as to ensure the accuracy of subsequent identity verification.
  • a hash algorithm is used to generate a hash value of the value of the configuration information to be verified, thereby improving the security of the value of the configuration information to be verified and the accuracy of verification.
  • step S106 the information to be verified is compared with the stored identity verification information of the user to verify the identity of the user.
  • the user's identity verification information can be stored in the database. By comparing the verification information with the user's identity verification information, it can identify which hardware device the hardware device is, and then determine which user the corresponding user is.
  • the blacklist of users can also be stored in the database, including identity verification information corresponding to illegal users. By comparing the generated identity verification information with the user's identity verification information, it can identify that the hardware device is an illegal device and the corresponding user is an illegal user.
  • the stored user's identity verification information can be bound to the user's account information, for example, the account information includes an account registered on the Internet platform, a password (such as a number, fingerprint, face, etc.).
  • the stored user authentication information can be searched based on the user's account information. When the information to be verified is consistent with the user's identity verification information, it is determined that the user's account information is safe; when the information to be verified is not consistent with the user's identity verification information, it is determined that the user's account information is at risk.
  • the user's account information can be bound to multiple pieces of identity verification information, that is, the user's account information can correspond to multiple commonly used hardware devices. One piece of identity verification information can also be bound to multiple account information. For example, a computer shared by family members can log in multiple account information.
  • the configuration information of the hardware device is used to verify the user's identity more accurately. This is because the IP address usually changes frequently, and the user uses The hardware equipment is relatively fixed. The user's account information is likely to be stolen by being logged in on other devices. Therefore, using the configuration information of the hardware device to bind the user's account information can improve the security of the account.
  • the user-based to-be-verified information and the user's account information may be used as verification information to verify the user.
  • the configuration information of the hardware device to be verified is transparent to the user, and verification can be completed without user operation.
  • the user's account information can be obtained by user input and other methods. Through the double authentication of information to be verified and account information, the security of Internet operations is improved. Aiming at the situation where the user's stolen number is operated on other devices, it can be effectively avoided.
  • the user's hardware device configuration information is used to generate the user's identity verification information, and the user is verified through the identity verification information. Due to the different preferences and identities of each user, the hardware device configuration information is different, and the hardware device used by the user is usually relatively fixed, and is not easy to tamper with or obtain. Therefore, using the user's hardware device configuration information can improve the security of user authentication .
  • FIG. 1 is a flowchart of other embodiments of the verification method of the present disclosure. As shown in FIG. 2, the method of this embodiment includes steps S202-S216.
  • step S202 for each candidate user, values of various candidate configuration information of the candidate user's hardware device are acquired.
  • the candidate users may include the users in the above embodiments.
  • the above embodiments list various configuration information of hardware devices, but not every configuration information needs to be applied.
  • Candidate configuration information includes, for example, at least one of operating system identification, plug-in identification, device hardware identification, font setting information, UA, application software version (App Version), browser identification, language setting information, screen resolution, IMEI, etc. information.
  • step S203 according to the values of the various candidate configuration information, the discrimination degree of the various candidate configuration information to the candidate users is determined.
  • step S204 one or more candidate configuration information is selected as the configuration information to be verified according to the discrimination degree of the candidate users by various candidate configuration information.
  • the number of value categories of the candidate configuration information is determined, and according to the comparison between the number of value types and the number of candidate users, the discrimination degree of the candidate configuration information to the candidate users is determined.
  • One or more candidate configuration information corresponding to the degree of discrimination greater than the first threshold is selected as the configuration information to be verified.
  • the ratio of the number of types of value of the candidate configuration information to the number of candidate users can be used as the degree of discrimination of the candidate users.
  • the value of the operating system identifier of each candidate user includes: IOS and Android, and the number of candidate users is 100, then the operating system identifier distinguishes the candidate users by 1/50.
  • a preset number of candidate configuration information is selected from various selected candidate configuration information for combination at a time, and for each combination, according to the comparison of the number of combined value categories and the number of candidate users, the determination is determined The degree of discrimination of the combination to the candidate users; wherein, the types of candidate configuration information included in each combination are not completely the same.
  • the corresponding combination whose discrimination degree is greater than the second threshold is selected, and the candidate configuration information in the selected combination is used as the configuration information to be verified.
  • the number of value types of the combination is, for example, a product of the number of value types of each candidate configuration information in the combination and the number of types of candidate configuration information in the combination.
  • the ratio of the number of types of combinations to the number of candidate users can be used as the degree of discrimination of the candidate users by the combination.
  • a combination includes two kinds of candidate configuration information of the operating system identifier and the browser identifier.
  • the values of the candidate user operating system identifier include: IOS and Android, the browser identifier includes: IE and Google, and the number of candidate users is 100, then the discrimination degree of the combination to the candidate user is 1/25.
  • any two or more candidate configuration information can be combined to determine the discrimination degree of each combination for the candidate user, and the corresponding discrimination degree greater than the second threshold and the shortest information length in the combination can be selected Combination, using candidate configuration information in the selected combination as configuration information to be verified. In this way, the calculation amount of the information to be verified can be reduced while ensuring the discrimination of the candidate users.
  • the selected combination of candidate configuration information can try to distinguish each different hardware device or candidate user.
  • the number of value types of the candidate configuration information refers to the number of value types corresponding to the actually collected candidate users, not the number of value types that can be set by the candidate configuration information.
  • the hardware device can support more than 30 language settings, but the actual language setting information corresponding to the candidate users collected only includes: English, Simplified Chinese, and Traditional Chinese.
  • the number of language setting information is 3.
  • step S206 the identity verification information of each user is generated according to the value of the configuration information to be verified of each user of the platform, and stored in the database.
  • the users of the platform may include candidate users.
  • the hash value of each user's configuration information to be verified is generated using a hash algorithm as the identity verification information of the user.
  • the above steps are the process of generating user identity verification information, which can be processed offline.
  • the identity verification information can be associated with the user's account information in the database.
  • the association between the identity verification information and the account information can be automatically associated when the user performs account registration or login for the first time.
  • step S208 the value of at least one configuration information to be verified of the user's hardware device is acquired.
  • step S210 the user's to-be-verified information is generated according to the value of the to-be-verified configuration information.
  • step S212 the information to be verified is compared with the stored identity verification information of the user to determine whether the user's account information is safe.
  • the user's account information is considered safe, otherwise, it is determined that the user's account information is at risk.
  • step S214 if there is a risk in the user's account information, the user's account is verified for security.
  • the method for securely verifying the user's account may use the existing technology, such as sending a verification code to the mobile phone number bound to the user, entering the verification code for verification, or performing fingerprint or face verification on the user.
  • step S216 when the security verification is passed, the user's to-be-verified information and the account information are bound and stored.
  • Security verification shows that the user confirms that the hardware device has been replaced for a safe account operation.
  • the user's account information can be bound to the information to be verified, and the information to be verified can be stored as the user's identity information, avoiding the need for the user to repeat it later. safety verification.
  • the stored identity verification information of the user can be set to a corresponding validity period. After the validity period expires, the user needs to log in to the account again or perform security verification, and then bind and store the information to be verified with the user's account information.
  • the candidate configuration information is selected as the configuration information to be verified to generate the information to be verified of the user according to the discrimination degree of the candidate user, and the calculation accuracy of the information to be verified and the identity verification information is reduced while improving the accuracy of the verification.
  • the identity verification information generated according to the configuration information of the hardware device to be verified can be used not only to identify the identity of the user, but also to analyze the behavior of the operating user of the hardware device. In some embodiments, it is determined whether there is a malicious purchase operation according to the number of purchase operations corresponding to the information to be verified and/or account information.
  • malicious purchases such as "swipe orders" (businesses pretend to be customers to make purchases or evaluations) to increase sales or praise, and deceive consumers. Malicious users who "swipe orders" usually use fixed hardware devices to register multiple accounts to purchase a large number of goods.
  • At least one of the number of purchase operations corresponding to the information to be verified and the number of accounts exceeds the corresponding frequency threshold or account number threshold, it is considered that the user corresponding to the information to be verified has a malicious purchase operation. In this way, the probability of merchants on e-commerce platforms deceiving consumers can be reduced.
  • the relationship between users is determined according to the account information corresponding to the information to be verified, and the user portrait is improved according to the relationship between users.
  • the information to be verified can correspond to multiple account information, and the number of logins of multiple accounts exceeds the threshold of the number of times within a preset time, and it can be determined that multiple accounts have a family relationship. Determining the relationship between accounts can provide users with more accurate services and improve user experience.
  • the present disclosure also provides a verification device, which will be described below in conjunction with FIG. 3.
  • FIG. 3 is a structural diagram of some embodiments of the verification device of the present disclosure.
  • the apparatus 30 of this embodiment includes: an acquisition module 302, a verification information generation module 304, and a verification module 306.
  • the obtaining module 302 is configured to obtain the hardware device configuration information of the user.
  • the verification information generating module 304 is configured to generate the user's to-be-verified information according to the value of the to-be-verified configuration information.
  • the verification information generation module 304 is configured to combine the values of the various configuration information to be verified in a preset order when the configuration information to be verified includes multiple types of configuration information to be verified, and according to the combination Hash value is generated as the user's information to be verified.
  • the verification module 306 is configured to compare the generated identity verification information with the stored identity verification information to verify the identity of the user.
  • the verification module 306 is configured to search for the stored user's identity verification information based on the user's account information; if the information to be verified is consistent with the user's identity verification information, determine that the user's account information is safe; When the verification information is inconsistent with the user's identity verification information, it is determined that the user's account information is at risk.
  • the verification apparatus 30 further includes: a screening module 308 configured to obtain, for each candidate user, values of various candidate configuration information of the candidate user's hardware device; and determine according to the values of various candidate configuration information The discrimination degree of various candidate configuration information to candidate users; according to the discrimination degree of various candidate configuration information to candidate users, one or more candidate configuration information is selected as the configuration information to be verified.
  • a screening module 308 configured to obtain, for each candidate user, values of various candidate configuration information of the candidate user's hardware device; and determine according to the values of various candidate configuration information The discrimination degree of various candidate configuration information to candidate users; according to the discrimination degree of various candidate configuration information to candidate users, one or more candidate configuration information is selected as the configuration information to be verified.
  • the screening module 308 is configured to determine the number of types of candidate configuration information for each candidate configuration information, and determine the candidate configuration information according to the comparison between the number of value types and the number of candidate users The discrimination degree of the user; one or more candidate configuration information corresponding to the discrimination degree greater than the first threshold is selected as the configuration information to be verified.
  • the screening module 308 is configured to select a preset number of candidate configuration information from the selected various candidate configuration information for combination at a time, and for each combination, according to the combined value of the number of types of candidates and the number of candidate users To determine the degree of discrimination of the combination to the candidate user; where the type of candidate configuration information contained in each combination is not exactly the same; select the combination with the corresponding degree of discrimination greater than the second threshold, and select the candidate configuration in the selected combination Information as configuration information to be verified.
  • the verification device 30 further includes: a security prompt module 310 and an information binding module 312.
  • the security prompt module 310 is configured to perform security verification on the user's account when there is a risk in the user's account information.
  • the information binding module 312 is configured to bind and store the user's identity verification information and account information when the security verification is passed.
  • the verification apparatus in the embodiments of the present disclosure may each be implemented by various computing devices or computer systems, which will be described below in conjunction with FIGS. 4 and 5.
  • FIG. 4 is a structural diagram of some embodiments of the verification device of the present disclosure.
  • the device 40 of this embodiment includes a memory 410 and a processor 420 coupled to the memory 410.
  • the processor 420 is configured to perform any of the implementations of the present disclosure based on instructions stored in the memory 410. Example verification method.
  • the memory 410 may include, for example, a system memory, a fixed non-volatile storage medium, and so on.
  • the system memory stores, for example, an operating system, application programs, a boot loader (Boot Loader), a database, and other programs.
  • FIG. 5 is a structural diagram of other embodiments of the verification device of the present disclosure.
  • the device 50 of this embodiment includes a memory 510 and a processor 520, which are similar to the memory 410 and the processor 420, respectively. It may also include an input-output interface 530, a network interface 540, a storage interface 550, and the like.
  • the interfaces 530, 540, 550 and the memory 510 and the processor 520 may be connected via a bus 560, for example.
  • the input and output interface 530 provides a connection interface for input and output devices such as a display, a mouse, a keyboard, and a touch screen.
  • the network interface 540 provides a connection interface for various networked devices, for example, it can be connected to a database server or a cloud storage server.
  • the storage interface 550 provides a connection interface for external storage devices such as SD cards and U disks.
  • the embodiments of the present disclosure may be provided as methods, systems, or computer program products. Therefore, the present disclosure may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware. Moreover, the present disclosure may take the form of a computer program product implemented on one or more computer-usable non-transitory storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code .
  • computer-usable non-transitory storage media including but not limited to disk storage, CD-ROM, optical storage, etc.
  • each flow and/or block in the flowchart and/or block diagram and a combination of the flow and/or block in the flowchart and/or block diagram can be implemented by computer program instructions.
  • These computer program instructions can be provided to the processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing device to produce a machine, so that instructions executed by the processor of the computer or other programmable data processing device are generated by A device configured to implement the function specified in one block or multiple blocks of one flow or multiple flows of a flowchart and/or one block or multiple blocks of a block diagram.
  • These computer program instructions may also be stored in a computer-readable memory that can guide a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including an instruction device, the instructions
  • the device implements the functions specified in one block or multiple blocks of the flowchart one flow or multiple flows and/or block diagrams.
  • These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operating steps are performed on the computer or other programmable device to produce computer-implemented processing, which is executed on the computer or other programmable device
  • the instructions provide steps configured to implement the functions specified in one block or multiple blocks of the flowchart one flow or multiple flows and/or block diagrams.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Power Engineering (AREA)
  • Computing Systems (AREA)
  • Collating Specific Patterns (AREA)

Abstract

本公开涉及一种验证方法、装置和计算机可读存储介质，涉及计算机技术领域。本公开的方法包括：获取用户的硬件设备的至少一种待验证配置信息的值；根据待验证配置信息的值生成用户的待验证信息；将待验证信息与存储的用户的身份验证信息进行比对，以验证用户的身份。

Description

验证方法、装置和计算机可读存储介质
相关申请的交叉引用
本申请是以CN申请号为201811531104.X申请日为2018年12月14日的申请为基础，并主张其优先权，该CN申请的公开内容在此作为整体引入本申请中。
技术领域
本公开涉及计算机技术领域，特别涉及一种验证方法、装置和计算机可读存储介质。
背景技术
随着互联网技术逐渐深入人们的生活，互联网安全问题变得越来越重要。尤其对于银行、互联网金融等对于安全需求更高的平台来说，用户身份的验证是安全交易的关键。
用户的账号、密码等可能被盗取。因此，各种互联网平台需要结合用户的其他信息来提高安全性。目前常用的信息有IP地址、Cookie信息等。
发明内容
发明人发现：由于同一个IP地址下存在很多用户，并且移动网络中的动态IP分配技术，这就导致利用IP地址来区分用户的分辨率和准确度不高。用户的Cookie信息采用本地存储的实现方式，用户可清除本地数据，因此利用Cookie信息也可能无法区分用户。现有技术的方案无法准确的区分用户，对用户进行验证。
本公开所要解决的一个技术问题是：提高用户身份验证的准确性。
根据本公开的一些实施例，提供的一种验证方法，包括：获取用户的硬件设备的至少一种待验证配置信息的值；根据待验证配置信息的值生成用户的待验证信息；将待验证信息与存储的用户的身份验证信息进行比对，以验证用户的身份。
在一些实施例中，根据待验证配置信息的值生成用户的待验证信息包括：在待验证配置信息包括多种待验证配置信息的情况下，将各种待验证配置信息的值按照预设顺序进行组合，并根据组合后的信息生成散列值，作为用户的待验证信息。
在一些实施例中，将待验证信息与存储的用户的身份验证信息进行比对，以验证 用户的身份包括：根据用户的账户信息查找存储的用户的身份验证信息；在待验证信息与用户的身份验证信息一致的情况下，确定用户的账户信息安全；在待验证信息与用户的身份验证信息不一致的情况下，确定用户的账户信息存在风险。
在一些实施例中，该方法还包括：针对每个候选用户，获取候选用户的硬件设备的多种候选配置信息的值；根据各种候选配置信息的值，确定各种候选配置信息对候选用户的区分度；根据各种候选配置信息对候选用户的区分度，选取一种或多种候选配置信息，作为待验证配置信息。
在一些实施例中，根据各种候选配置信息的值，确定各种候选配置信息对候选用户的区分度包括：针对每种候选配置信息，确定候选配置信息的取值种类数，根据取值种类数与候选用户的数量的比对情况，确定候选配置信息对候选用户的区分度；选取一种或多种候选配置信息，作为待验证配置信息包括：选取对应的区分度大于第一阈值的一种或多种候选配置信息，作为待验证配置信息。
在一些实施例中，根据各种候选配置信息的值，确定各种候选配置信息对候选用户的区分度还包括：从选取的各种候选配置信息中，每次选取预设种类数量的候选配置信息进行组合，针对每个组合，根据组合取值种类数与候选用户数量的比对情况，确定组合对候选用户的区分度；其中，每个组合包含的候选配置信息的种类不完全相同；选取一种或多种候选配置信息，作为待验证配置信息包括：选取对应的区分度大于第二阈值的组合，将选取的组合中的候选配置信息，作为待验证配置信息。
在一些实施例中，该方法还包括：在用户的账户信息存在风险的情况下，对用户的账户进行安全验证；在安全验证通过的情况下，将用户的身份验证信息与账户信息进行绑定并存储。
根据本公开的另一些实施例，提供的一种验证装置，包括：获取模块，被配置为获取用户的硬件设备的至少一种待验证配置信息的值；验证信息生成模块，被配置为根据待验证配置信息的值生成用户的待验证信息；验证模块，被配置为将待验证信息与存储的用户的身份验证信息进行比对，以验证用户的身份。
在一些实施例中，验证信息生成模块被配置为在待验证配置信息包括多种待验证配置信息的情况下，将各种待验证配置信息的值按照预设顺序进行组合，并根据组合后的信息生成散列值，作为用户的待验证信息。
在一些实施例中，验证模块被配置为根据用户的账户信息查找存储的用户的身份验证信息；在待验证信息与用户的身份验证信息一致的情况下，确定用户的账户信息 安全；在待验证信息与用户的身份验证信息不一致的情况下，确定用户的账户信息存在风险。
在一些实施例中，该装置还包括：筛选模块，被配置为针对每个候选用户，获取候选用户的硬件设备的多种候选配置信息的值；根据各种候选配置信息的值，确定各种候选配置信息对候选用户的区分度；根据各种候选配置信息对候选用户的区分度，选取一种或多种候选配置信息，作为待验证配置信息。
在一些实施例中，筛选模块被配置为针对每种候选配置信息，确定候选配置信息的取值种类数，根据取值种类数与候选用户的数量的比对情况，确定候选配置信息对候选用户的区分度；选取对应的区分度大于第一阈值的一种或多种候选配置信息，作为待验证配置信息。
在一些实施例中，筛选模块被配置为从选取的各种候选配置信息中每次选取预设种类数量的候选配置信息进行组合，针对每个组合，根据组合取值种类数与候选用户数量的比对情况，确定组合对候选用户的区分度；其中，每个组合包含的候选配置信息的种类不完全相同；选取对应的区分度大于第二阈值的组合，将选取的组合中的候选配置信息，作为待验证配置信息。
在一些实施例中，该装置还包括：安全提示模块，被配置为在用户的账户信息存在风险的情况下，对用户的账户进行安全验证；信息绑定模块，被配置为在安全验证通过的情况下，将用户的身份验证信息与账户信息进行绑定并存储。
根据本公开的又一些实施例，提供的一种验证装置，包括：处理器；以及耦接至处理器的存储器，存储有指令，指令被处理器执行时，使处理器执行如如前述任意实施例的验证方法。
根据本公开的再一些实施例，提供的一种计算机可读非瞬时性存储介质，其上存储有计算机程序中，该程序被处理器执行时，使处理器执行前述任意实施例的验证方法。
本公开中利用用户的硬件设备的待验证配置信息的值，生成待验证信息，通过待验证信息与身份验证信息的比对，对用户进行验证。由于每个用户的喜好、身份等不同导致硬件设备的待验证配置信息不同，并且用户使用的硬件设备通常比较固定，并且不易篡改或获取，因此，利用用户的硬件设备的配置信息能够提高用户身份验证的安全性。
通过以下参照附图对本公开的示例性实施例的详细描述，本公开的其它特征及其 优点将会变得清楚。
附图说明
此处所说明的附图用来提供对本公开的进一步理解，构成本申请的一部分，本公开的示意性实施例及其说明被配置为解释本公开，并不构成对本公开的不当限定。在附图中：
图1示出本公开的一些实施例的验证方法的流程示意图。
图2示出本公开的另一些实施例的验证方法的流程示意图。
图3示出本公开的一些实施例的验证装置的结构示意图。
图4示出本公开的另一些实施例的验证装置的结构示意图。
图5示出本公开的又一些实施例的验证装置的结构示意图。
具体实施方式
下面将结合本公开实施例中的附图，对本公开实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例仅仅是本公开一部分实施例，而不是全部的实施例。以下对至少一个示例性实施例的描述实际上仅仅是说明性的，决不作为对本公开及其应用或使用的任何限制。基于本公开中的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都属于本公开保护的范围。
本公开提出一种可用于验证用户身份的验证方法，下面结合图1进行描述。
图1为本公开验证方法一些实施例的流程图。如图1所示，该实施例的方法包括：步骤S102～S106。
在步骤S102中，获取用户的硬件设备的至少一种待验证配置信息的值。
硬件设备的配置信息例如包括：操作系统标识、插件标识、设备的硬件标识、字体设置信息、UA(User Agent，用户代理)、应用软件版本(App Version)、浏览器标识、语言设置信息、屏幕分辨率、IMEI(International Mobile Equipment Identity，国际移动设备识别码)等，将这些信息中一种或多种作为待验证配置信息。为了提高身份识别的准确性，一般包括上述待验证配置信息中的多项待验证配置信息。这些待验证配置信息可以在用户打开浏览器、应用软件(App)或者互联网平台的登录页面的情况下获取。
在步骤S104中，根据待验证配置信息的值生成用户的待验证信息。
在一些实施例中，在待验证配置信息包括多种待验证配置信息的情况下，将各种待验证配置信息的值按照预设顺序进行组合，并根据组合后的信息生成散列值，作为用户的待验证信息。多种待验证配置信息的值需要按照一定的顺序进行排列，这样才能保证后续身份验证的准确性。利用哈希算法将待验证配置信息的值生成散列值，提高待验证配置信息的值的安全性以及验证的准确性。
在步骤S106中，将待验证信息与存储的用户的身份验证信息进行比对，以验证用户的身份。
可以在数据库中存储用户的身份验证信息，通过比对待验证信息与用户的身份验证信息，可以识别出硬件设备为哪一台硬件设备，进而确定对应的用户为哪一个用户。数据库中还可以存储用户的黑名单，包括非法用户对应的身份验证信息，比对生成的身份验证信息与用户的身份验证信息，可以识别出硬件设备为非法设备，对应的用户为非法用户。
存储的用户的身份验证信息可以和用户的账户信息进行绑定，账户信息例如包括在互联网平台注册的账号、密码(例如数字、指纹、人脸等)等。可以根据用户的账户信息查找存储的用户的身份验证信息。在待验证信息与用户的身份验证信息一致的情况下，确定用户的账户信息安全；在待验证信息与用户的身份验证信息不一致的情况下，确定用户的账户信息存在风险。用户的账户信息可以和多项身份验证信息进行绑定，即用户的账户信息可以对应多个常用的硬件设备。一项身份验证信息也可以和多个账户信息进行绑定，例如，家庭成员共用的电脑可以登录多个账户信息。
区别于现有技术中通过IP地址的变换通知用户的账户信息存在风险等情况，利用硬件设备的配置信息对用户的身份进行验证更加准确，这是因为IP地址通常会经常变换，而用户使用的硬件设备是相对固定的。用户的账户信息在其他设备被登录很可能存在被盗号的风险，因此，利用硬件设备的配置信息绑定用户的账户信息可以提高账户的安全性。
在一些实施例中，可以将基于用户的待验证信息与用户的账户信息一起作为验证信息用于对用户进行验证。硬件设备的待验证配置信息对用户来说是透明的，不需要用户操作即可完成验证。用户的账户信息可以由用户输入等方式获取。通过待验证信息和账户信息的双重认证，提高了互联网操作的安全性。针对用户被盗号在其他设备进行操作的情况，能够比较有效的避免。
上述实施例的方法中利用用户的硬件设备配置信息生成用户的身份验证信息，通 过身份验证信息对用户进行验证。由于每个用户的喜好、身份等不同导致硬件设备配置信息不同，并且用户使用的硬件设备通常比较固定，并且不易篡改或获取，因此，利用用户的硬件设备配置信息能够提高用户身份验证的安全性。
下面结合图2描述本公开的验证方法的另一些实施例。
图1为本公开验证方法的另一些实施例的流程图。如图2所示，该实施例的方法包括：步骤S202～S216。
在步骤S202中，针对每个候选用户，获取候选用户的硬件设备的多种候选配置信息的值。候选用户可以包括上述实施例中的用户。
上述实施例中列举了硬件设备的多种配置信息，但是并不是每种配置信息都需要应用，应用的信息种类越多则计算复杂度越多，应用的信息种类数过少，则无法区分每一台硬件设备或对应的用户，因此，需要对硬件设备的配置信息进行筛选，选出一种或多种作为待验证配置信息。
候选配置信息例如包括：操作系统标识、插件标识、设备的硬件标识、字体设置信息、UA、应用软件版本(App Version)、浏览器标识、语言设置信息、屏幕分辨率、IMEI等信息中至少种信息。
在步骤S203中，根据各种候选配置信息的值，确定各种候选配置信息对候选用户的区分度。
在步骤S204中，根据各种候选配置信息对候选用户的区分度，选取一种或多种候选配置信息，作为待验证配置信息。
在一些实施例中，针对每种候选配置信息，确定候选配置信息的取值种类数，根据取值种类数与候选用户的数量的比对情况，确定候选配置信息对候选用户的区分度。选取对应的区分度大于第一阈值的一种或多种候选配置信息，作为待验证配置信息。针对每种候选配置信息，可以将该候选配置信息的取值种类数与候选用户数量的比值作为对候选用户的区分度。例如，各个候选用户的操作系统标识的取值包括：IOS、安卓两种，而候选用户数量为100，则操作系统标识对候选用户的区分度为1/50。
在一些实施例中，从选取的各种候选配置信息中每次选取预设种类数量的候选配置信息进行组合，针对每个组合，根据组合取值种类数与候选用户数量的比对情况，确定组合对候选用户的区分度；其中，每个组合包含的候选配置信息的种类不完全相同。选取对应的区分度大于第二阈值的组合，将选取的组合中的候选配置信息，作为待验证配置信息。进一步，针对每种组合，该组合的取值种类数例如为该组合中每种 候选配置信息的取值种类数与该组合中候选配置信息的种类数的乘积。进一步，可以将组合的取值种类数与候选用户数量的比值作为该组合对候选用户的区分度。例如，一个组合包括操作系统标识和浏览器标识两种候选配置信息，候选用户操作系统标识的取值包括：IOS、安卓两种，浏览器标识包括：IE、Google两种，而候选用户数量为100，则该组合对候选用户的区分度为1/25。
在一些实施例中，可以将任意两种或大于两种的候选配置信息进行组合，确定每个组合对于候选用户的区分度，可以选取对应的区分度大于第二阈值并且组合中信息长度最短的组合，将选取的组合中的候选配置信息，作为待验证配置信息。这样可以在保证对候选用户的区分度的情况下，减少待验证信息的计算量。选取的候选配置信息组合尽量能够区分出每一个不同的硬件设备或候选用户。
上述候选配置信息的取值种类数是指实际采集到的候选用户对应的取值种类数，并不是候选配置信息能够设置的取值种类数。例如，硬件设备能够支持30多种语言设置，但实际采集的候选用户对应的语言设置信息只包括：英语、简体中文和繁体中文三种，则语言设置信息的取值种类数为3。
在步骤S206中，根据平台的各个用户的待验证配置信息的值生成各个用户的身份验证信息，并存储于数据库。平台的用户可以包括候选用户。
将各个用户的待验证配置信息的值利用哈希算法生成散列值作为该用户的身份验证信息。上述步骤为生成用户的身份验证信息的过程，可以离线进行处理。身份验证信息可以在数据库中与用户的账户信息进行关联。身份验证信息与账户信息的关联可以在用户首次进行账户注册或登录时，进行自动关联。
在步骤S208中，获取用户的硬件设备的至少一种待验证配置信息的值。
在步骤S210中，根据待验证配置信息的值生成用户的待验证信息。
在步骤S212中，将待验证信息与存储的用户的身份验证信息进行比对，确定用户的账户信息是否安全。
如果待验证信息与存储的用户的身份验证信息比对一致，则认为用户的账户信息安全，否则，确定用户的账户信息存在风险。
在步骤S214中，在用户的账户信息存在风险的情况下，对用户的账户进行安全验证。
对用户的账户进行安全验证的方法可以采用现有技术的方案，例如向用户绑定的手机号发送验证码，用户输入验证码进行验证，或者，对用户进行指纹或人脸验证等 方式。
在步骤S216中，在安全验证通过的情况下，将用户的待验证信息与账户信息进行绑定并存储。
安全验证通过表明用户确认更换了硬件设备进行了安全的账户操作行为，可以将用户的账户信息与待验证信息进行绑定，将待验证信息作为用户的身份信息进行存储，避免后续反复需要用户进行安全验证。存储的用户的身份验证信息可以设置对应的有效期，在有效期过期之后需要用户重新登录账户或安全验证，之后将待验证信息与用户的账户信息进行绑定并存储。
上述实施例的方案，根据对候选用户的区分度，选取候选配置信息作为待验证配置信息生成用户的待验证信息，在提高验证的准确性的同时减少待验证信息和身份验证信息的计算量。利用待验证信息和身份验证信息对用户的账户信息进行安全验证，提高互联网操作的安全性。
根据硬件设备的待验证配置信息生成的身份验证信息不仅可以用于识别用户的身份，还可以用于对硬件设备的操作用户的行为进行分析。在一些实施例中，根据待验证信息对应的购买操作的次数和/或账户信息，确定是否存在恶意购买操作。在电子商务平台中常常存在“刷单”(商家假扮顾客进行购买或评价)等恶意购买行为提高销量或好评量，欺骗消费者。“刷单”的恶意用户通常会利用固定的硬件设备注册多个账户购买大量商品。针对这一特点，待验证信息对应的购买操作的次数和账户个数中至少一项超过对应的次数阈值或账户个数阈值，则认为该待验证信息对应的用户存在恶意购买操作。通过这种方式可以降低电子商务平台的商家欺骗消费者的概率。
在一些实施例中，根据待验证信息对应的账户信息，确定用户之间的关系，根据用户之间的关系完善用户画像。待验证信息可以对应多个账户信息，在预设时间内多个账户的登录次数超过次数阈值，可以确定多个账户存在家庭关系。确定账户之间的关联关系，可以为用户提供更加精准的服务，提升用户体验。
本公开还提供一种验证装置下面结合图3进行描述。
图3为本公开验证装置的一些实施例的结构图。如图3所示，该实施例的装置30包括：获取模块302，验证信息生成模块304，验证模块306。
获取模块302，被配置为获取用户的硬件设备配置信息。
验证信息生成模块304，被配置为根据待验证配置信息的值生成用户的待验证信息。
在一些实施例中，验证信息生成模块304被配置为在待验证配置信息包括多种待验证配置信息的情况下，将各种待验证配置信息的值按照预设顺序进行组合，并根据组合后的信息生成散列值，作为用户的待验证信息。
验证模块306，被配置为将生成的身份验证信息与存储的身份验证信息进行比对，以验证用户的身份。
在一些实施例中，验证模块306被配置为根据用户的账户信息查找存储的用户的身份验证信息；在待验证信息与用户的身份验证信息一致的情况下，确定用户的账户信息安全；在待验证信息与用户的身份验证信息不一致的情况下，确定用户的账户信息存在风险。
在一些实施例中，验证装置30还包括：筛选模块308，被配置为针对每个候选用户，获取候选用户的硬件设备的多种候选配置信息的值；根据各种候选配置信息的值，确定各种候选配置信息对候选用户的区分度；根据各种候选配置信息对候选用户的区分度，选取一种或多种候选配置信息，作为待验证配置信息。
在一些实施例中，筛选模块308被配置为针对每种候选配置信息，确定候选配置信息的取值种类数，根据取值种类数与候选用户的数量的比对情况，确定候选配置信息对候选用户的区分度；选取对应的区分度大于第一阈值的一种或多种候选配置信息，作为待验证配置信息。
在一些实施例中，筛选模块308被配置为从选取的各种候选配置信息中每次选取预设种类数量的候选配置信息进行组合，针对每个组合，根据组合取值种类数与候选用户数量的比对情况，确定组合对候选用户的区分度；其中，每个组合包含的候选配置信息的种类不完全相同；选取对应的区分度大于第二阈值的组合，将选取的组合中的候选配置信息，作为待验证配置信息。
在一些实施例中，验证装置30还包括：安全提示模块310，信息绑定模块312。安全提示模块310被配置为在用户的账户信息存在风险的情况下，对用户的账户进行安全验证。信息绑定模块312被配置为在安全验证通过的情况下，将用户的身份验证信息与账户信息进行绑定并存储。
本公开的实施例中的验证装置可各由各种计算设备或计算机系统来实现，下面结合图4以及图5进行描述。
图4为本公开验证装置的一些实施例的结构图。如图4所示，该实施例的装置40包括：存储器410以及耦接至该存储器410的处理器420，处理器420被配置为基于 存储在存储器410中的指令，执行本公开中任意一些实施例中的验证方法。
其中，存储器410例如可以包括系统存储器、固定非易失性存储介质等。系统存储器例如存储有操作系统、应用程序、引导装载程序(Boot Loader)、数据库以及其他程序等。
图5为本公开验证装置的另一些实施例的结构图。如图5所示，该实施例的装置50包括：存储器510以及处理器520，分别与存储器410以及处理器420类似。还可以包括输入输出接口530、网络接口540、存储接口550等。这些接口530，540，550以及存储器510和处理器520之间例如可以通过总线560连接。其中，输入输出接口530为显示器、鼠标、键盘、触摸屏等输入输出设备提供连接接口。网络接口540为各种联网设备提供连接接口，例如可以连接到数据库服务器或者云端存储服务器等。存储接口550为SD卡、U盘等外置存储设备提供连接接口。
本领域内的技术人员应当明白，本公开的实施例可提供为方法、系统、或计算机程序产品。因此，本公开可采用完全硬件实施例、完全软件实施例、或结合软件和硬件方面的实施例的形式。而且，本公开可采用在一个或多个其中包含有计算机可用程序代码的计算机可用非瞬时性存储介质(包括但不限于磁盘存储器、CD-ROM、光学存储器等)上实施的计算机程序产品的形式。
本公开是参照根据本公开实施例的方法、设备(系统)、和计算机程序产品的流程图和/或方框图来描述的。应理解为可由计算机程序指令实现流程图和/或方框图中的每一流程和/或方框、以及流程图和/或方框图中的流程和/或方框的结合。可提供这些计算机程序指令到通用计算机、专用计算机、嵌入式处理机或其他可编程数据处理设备的处理器以产生一个机器，使得通过计算机或其他可编程数据处理设备的处理器执行的指令产生被配置为实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的装置。
这些计算机程序指令也可存储在能引导计算机或其他可编程数据处理设备以特定方式工作的计算机可读存储器中，使得存储在该计算机可读存储器中的指令产生包括指令装置的制造品，该指令装置实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能。
这些计算机程序指令也可装载到计算机或其他可编程数据处理设备上，使得在计算机或其他可编程设备上执行一系列操作步骤以产生计算机实现的处理，从而在计算机或其他可编程设备上执行的指令提供被配置为实现在流程图一个流程或多个流程 和/或方框图一个方框或多个方框中指定的功能的步骤。
以上所述仅为本公开的较佳实施例，并不用以限制本公开，凡在本公开的精神和原则之内，所作的任何修改、等同替换、改进等，均应包含在本公开的保护范围之内。

Claims (16)

  1. 一种验证方法，包括：
    获取用户的硬件设备的至少一种待验证配置信息的值；
    根据所述待验证配置信息的值生成所述用户的待验证信息；
    将所述待验证信息与存储的所述用户的身份验证信息进行比对，以验证所述用户的身份。
  2. 根据权利要求1所述的验证方法，其中，
    所述根据所述待验证配置信息的值生成所述用户的待验证信息包括：
    在所述待验证配置信息包括多种待验证配置信息的情况下，将所述各种待验证配置信息的值按照预设顺序进行组合，并根据组合后的信息生成散列值，作为所述用户的待验证信息。
  3. 根据权利要求1所述的验证方法，其中，
    所述将所述待验证信息与存储的所述用户的身份验证信息进行比对，以验证所述用户的身份包括：
    根据所述用户的账户信息查找存储的所述用户的身份验证信息；
    在所述待验证信息与所述用户的身份验证信息一致的情况下，确定所述用户的账户信息安全；
    在所述待验证信息与所述用户的身份验证信息不一致的情况下，确定所述用户的账户信息存在风险。
  4. 根据权利要求1所述的验证方法，还包括：
    针对每个候选用户，获取所述候选用户的硬件设备的多种候选配置信息的值；
    根据各种所述候选配置信息的值，确定各种所述候选配置信息对所述候选用户的区分度；
    根据各种所述候选配置信息对所述候选用户的区分度，选取一种或多种所述候选配置信息，作为所述待验证配置信息。
  5. 根据权利要求4所述的验证方法，其中，
    所述根据各种所述候选配置信息的值，确定各种所述候选配置信息对所述候选用户的区分度包括：
    针对每种所述候选配置信息，确定所述候选配置信息的取值种类数，根据所述取值种类数与所述候选用户的数量的比对情况，确定所述候选配置信息对所述候选用户的区分度；
    所述选取一种或多种所述候选配置信息，作为所述待验证配置信息包括：
    选取对应的区分度大于第一阈值的一种或多种所述候选配置信息，作为所述待验证配置信息。
  6. 根据权利要求5所述的验证方法，其中，
    所述根据所述各种候选配置信息的值，确定各种所述候选配置信息对所述候选用户的区分度还包括：
    从选取的各种候选配置信息中，每次选取预设种类数量的所述候选配置信息进行组合，针对每个组合，根据所述组合取值种类数与所述候选用户数量的比对情况，确定所述组合对所述候选用户的区分度；其中，每个组合包含的候选配置信息的种类不完全相同；
    所述选取一种或多种所述候选配置信息，作为所述待验证配置信息包括：
    选取对应的区分度大于第二阈值的组合，将选取的组合中的候选配置信息，作为所述待验证配置信息。
  7. 根据权利要求3所述的验证方法，还包括：
    在所述用户的账户信息存在风险的情况下，对所述用户的账户进行安全验证；
    在安全验证通过的情况下，将所述用户的身份验证信息与所述账户信息进行绑定并存储。
  8. 一种验证装置，包括：
    获取模块，被配置为获取用户的硬件设备的至少一种待验证配置信息的值；
    验证信息生成模块，被配置为根据所述待验证配置信息的值生成所述用户的待验证信息；
    验证模块，被配置为将所述待验证信息与存储的所述用户的身份验证信息进行比对，以验证所述用户的身份。
  9. 根据权利要求8所述的验证装置，其中，
    所述验证信息生成模块被配置为在所述待验证配置信息包括多种待验证配置信息的情况下，将所述各种待验证配置信息的值按照预设顺序进行组合，并根据组合后的信息生成散列值，作为所述用户的待验证信息。
  10. 根据权利要求8所述的验证装置，其中，
    所述验证模块被配置为根据所述用户的账户信息查找存储的所述用户的身份验证信息；在所述待验证信息与所述用户的身份验证信息一致的情况下，确定所述用户的账户信息安全；在所述待验证信息与所述用户的身份验证信息不一致的情况下，确定所述用户的账户信息存在风险。
  11. 根据权利要求8所述的验证装置，还包括：
    筛选模块，被配置为针对每个候选用户，获取所述候选用户的硬件设备的多种候选配置信息的值；根据各种所述候选配置信息的值，确定各种所述候选配置信息对所述候选用户的区分度；根据各种所述候选配置信息对所述候选用户的区分度，选取一种或多种所述候选配置信息，作为所述待验证配置信息。
  12. 根据权利要求11所述的验证装置，其中，
    所述筛选模块被配置为针对每种所述候选配置信息，确定所述候选配置信息的取值种类数，根据所述取值种类数与所述候选用户的数量的比对情况，确定所述候选配置信息对所述候选用户的区分度；选取对应的区分度大于第一阈值的一种或多种所述候选配置信息，作为所述待验证配置信息。
  13. 根据权利要求12所述的验证装置，其中，
    所述筛选模块被配置为从选取的各种候选配置信息中，每次选取预设种类数量的所述候选配置信息进行组合，针对每个组合，根据所述组合取值种类数与所述候选用户数量的比对情况，确定所述组合对所述候选用户的区分度；其中，每个组合包含的 候选配置信息的种类不完全相同；选取对应的区分度大于第二阈值的组合，将选取的组合中的候选配置信息，作为所述待验证配置信息。
  14. 根据权利要求10所述的验证装置，还包括：
    安全提示模块，被配置为在所述用户的账户信息存在风险的情况下，对所述用户的账户进行安全验证；
    信息绑定模块，被配置为在安全验证通过的情况下，将所述用户的身份验证信息与所述账户信息进行绑定并存储。
  15. 一种验证装置，包括：
    处理器；以及
    耦接至所述处理器的存储器，存储有指令，所述指令被所述处理器执行时，使所述处理器执行如权利要求1-6任一项所述的验证方法。
  16. 一种计算机可读非瞬时性存储介质，其上存储有计算机程序中，该程序被处理器执行时，使处理器执行权利要求1-6任一项所述方法的步骤。
PCT/CN2019/100286 2018-12-14 2019-08-13 验证方法、装置和计算机可读存储介质 Ceased WO2020119157A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US17/413,281 US11899770B2 (en) 2018-12-14 2019-08-13 Verification method and apparatus, and computer readable storage medium

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201811531104.X 2018-12-14
CN201811531104.XA CN111327570B (zh) 2018-12-14 2018-12-14 验证方法、装置和计算机可读存储介质

Publications (1)

Publication Number Publication Date
WO2020119157A1 true WO2020119157A1 (zh) 2020-06-18

Family

ID=71075269

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/100286 Ceased WO2020119157A1 (zh) 2018-12-14 2019-08-13 验证方法、装置和计算机可读存储介质

Country Status (3)

Country Link
US (1) US11899770B2 (zh)
CN (1) CN111327570B (zh)
WO (1) WO2020119157A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113784332A (zh) * 2020-11-10 2021-12-10 北京沃东天骏信息技术有限公司 数据处理方法及装置、存储介质、电子设备

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113254897B (zh) * 2021-05-13 2024-01-05 北京达佳互联信息技术有限公司 信息验证方法、装置、服务器及存储介质
CN113242551A (zh) * 2021-06-08 2021-08-10 中国银行股份有限公司 手机银行登录验证方法及装置
CN114615062B (zh) * 2022-03-14 2024-07-30 河南应用技术职业学院 一种计算机网络工程安全控制系统

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103368916A (zh) * 2012-04-01 2013-10-23 百度在线网络技术（北京）有限公司 基于硬件信息的计算机终端可信证明生成技术
US20130312073A1 (en) * 2012-05-16 2013-11-21 Rajdeep Srivastav Methods and systems for authentication of multiple sign-in accounts
CN106952096A (zh) * 2017-03-03 2017-07-14 中国工商银行股份有限公司 客户端设备的安全认证系统、方法及客户端可信识别装置

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9667626B2 (en) * 2010-01-27 2017-05-30 Keypasco Ab Network authentication method and device for implementing the same
WO2013138714A1 (en) * 2012-03-16 2013-09-19 Acuity Systems, Inc. Authentication system
US20160337351A1 (en) * 2012-03-16 2016-11-17 Acuity Systems, Inc. Authentication system
HRP20190888T8 (hr) 2014-04-25 2019-10-04 Pierre Fabre Médicament Konjugat antitijela za igf-1r i lijeka i njegova upotreba u liječenju karcinoma
CN105991590B (zh) * 2015-02-15 2019-10-18 阿里巴巴集团控股有限公司 一种验证用户身份的方法、系统、客户端及服务器
CN105828454B (zh) * 2015-07-28 2019-07-26 维沃移动通信有限公司 一种连接网络的方法、装置和一种wifi路由设备
US9787654B2 (en) * 2015-10-29 2017-10-10 Microsoft Technology Licensing, Llc Resolving authenticating issues with a second device
CN106650404A (zh) * 2016-10-28 2017-05-10 美的智慧家居科技有限公司 终端合法性检验的方法和装置
CN106454800B (zh) * 2016-11-21 2018-07-27 北京小米移动软件有限公司 身份验证方法、装置及系统
US11134386B2 (en) * 2016-12-13 2021-09-28 Zscaler, Inc. Device identification for management and policy in the cloud
CN106453437B (zh) * 2016-12-22 2019-12-06 中国银联股份有限公司 一种设备识别码获取方法及装置
US11005971B2 (en) * 2018-08-02 2021-05-11 Paul Swengler System and method for user device authentication or identity validation without passwords or matching tokens

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103368916A (zh) * 2012-04-01 2013-10-23 百度在线网络技术（北京）有限公司 基于硬件信息的计算机终端可信证明生成技术
US20130312073A1 (en) * 2012-05-16 2013-11-21 Rajdeep Srivastav Methods and systems for authentication of multiple sign-in accounts
CN106952096A (zh) * 2017-03-03 2017-07-14 中国工商银行股份有限公司 客户端设备的安全认证系统、方法及客户端可信识别装置

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113784332A (zh) * 2020-11-10 2021-12-10 北京沃东天骏信息技术有限公司 数据处理方法及装置、存储介质、电子设备

Also Published As

Publication number Publication date
US11899770B2 (en) 2024-02-13
CN111327570B (zh) 2021-09-17
CN111327570A (zh) 2020-06-23
US20220067136A1 (en) 2022-03-03

Similar Documents

Publication Publication Date Title
WO2020119157A1 (zh) 验证方法、装置和计算机可读存储介质
CN109257366B (zh) 对用户进行身份验证的方法和装置
TWI462523B (zh) 偵測釣魚網站方法以及其網路裝置以及電腦可讀取記錄媒體
CN107451819B (zh) 一种基于用户操作行为特征的身份验证方法和装置
KR20180075641A (ko) 서비스 처리 방법 및 장치
CN105471581A (zh) 一种身份验证方法及装置
TW201802731A (zh) 電子支付業務處理、電子支付方法及裝置
US20230065787A1 (en) Detection of phishing websites using machine learning
US20150082440A1 (en) Detection of man in the browser style malware using namespace inspection
US20220100839A1 (en) Open data biometric identity validation
WO2017020386A1 (zh) 指纹校验方法及装置
US9998486B2 (en) System for utilizing one or more databases to identify a point of compromise
TWI701932B (zh) 一種身份認證方法、伺服器及用戶端設備
WO2017206605A1 (zh) 防止服务器被攻击的方法及装置
US10027657B1 (en) Authentication/authorization without a password
CN107645514B (zh) 认证协议转换方法以及装置
US11037146B2 (en) Managing product returns associated with a user device
CN114722401A (zh) 一种设备安全测试方法、装置、设备及存储介质
CN109446030A (zh) 一种行为监测方法以及装置
CN116824707B (zh) 一种签名验证方法、装置、设备、存储介质及产品
JP6258189B2 (ja) 特定装置、特定方法および特定プログラム
CN107679865B (zh) 一种基于触压面积的身份验证方法和装置
US10003464B1 (en) Biometric identification system and associated methods
WO2018166365A1 (zh) 一种记录网站访问日志的方法和装置
CN114255134A (zh) 一种帐号拆解方法、装置和存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19895915

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 01.10.2021)

122 Ep: pct application non-entry in european phase

Ref document number: 19895915

Country of ref document: EP

Kind code of ref document: A1