WO2023050524A1

WO2023050524A1 - Im-based user identity authentication method and apparatus, and server and storage medium

Info

Publication number: WO2023050524A1
Application number: PCT/CN2021/128188
Authority: WO
Inventors: 袁欣; 沈坚; 张子鹏
Original assignee: 传仲智能数字科技(上海)有限公司
Priority date: 2021-09-30
Filing date: 2021-11-02
Publication date: 2023-04-06
Also published as: CN113824628A; CN113824628B

Abstract

An IM-based user identity authentication method and apparatus, and a server and a storage medium. The authentication method comprises: receiving an authentication request that is sent by an application program of a terminal (S101); generating an authentication link according to the authentication request, and sending the authentication link to the application program of the terminal, wherein the authentication link comprises a first authentication code and an IM application end identification code (S102); receiving a second authentication code that is sent by an IM application end (S103), wherein the IM application end is the IM application program corresponding to the IM application end identification code; and when the first authentication code matches the second authentication code, passing the authentication (S105). By means of the user identity authentication method and apparatus, an IM application program is used as a transmission path for authentication, and a user sends a real-time authentication code by means of the IM application end. Compared with inputting an authentication code by using a text message, the cost and user convenience are further taken into consideration.

Description

IM-based user authentication method, device, server and storage medium thereof

technical field

The invention relates to the communication field, in particular to an IM-based user identity verification method, device, server and storage medium thereof.

Background technique

Among the five functions of network information security (authentication, authorization, confidentiality, integrity and non-repudiation), authentication is the most basic and important link. The role of identity verification is to ensure that the real wishes of users are reflected in specific decision-making links.

Therefore, in order to ensure the security of information access and ensure the unique identity of users, when users register/log in to third-party servers when using terminals such as mobile phones and tablets, they usually use mobile phone numbers for verification, thereby verifying user identities to ensure personal accounts and privacy network security. Two common technical solutions for user authentication in the prior art are as follows:

The first technical solution is a solution using a downlink SMS verification code, which specifically includes: a. The user enters a mobile phone number when registering/logging in; b. After the server gets the number, it sends a random number verification code through the SMS gateway; c. After receiving the text message, the user enters the verification code; d. The server compares the verification code entered by the user, and the registration/login function is completed after the verification code is successful. This kind of solution is widely used in the registration/login process of most third-party servers at present, but this kind of solution requires the user to manually enter the mobile phone number, which is inconvenient to operate; on the other hand, this kind of solution needs to cooperate with the operator to complete the SMS The verification code is sent, and the access cost of the SMS gateway is high, so the cost is high, and the implementation cost will be higher in countries and regions with a large number of operators.

The second technical solution is the one-key login solution of the operator, which specifically includes: a. The authentication software development kit (Software Development Kit, SDK) must be embedded in the application client; b. When the user requests registration/login, pass The SDK communicates with the operator's network to collect the user's mobile phone number and display it; c. After obtaining the user's consent and authorization, the application client obtains the interface calling Token and passes it to the application server; d. The authentication server uses the Token to obtain the mobile phone number interface , and finally obtain the mobile phone number of the current authorized user, and complete the registration/login. However, this technical solution has a high threshold, requires the operator to directly provide technical support, needs to embed the SDK, can only be used on the application client, and will cause users to worry about privacy and other issues.

Both of the above two technical solutions require the cooperation of the operator to complete the user identity verification. In a complex operator environment, not only the cost is high, but also the convenience of user operation is affected. Therefore, it is an urgent problem to provide users with a user authentication method that takes into account both cost and user convenience.

Contents of the invention

In order to solve the problems of high cost and inconvenient operation in user identity verification in related technologies, the present invention provides an IM-based user identity verification method, device, server and its storage medium, which simplifies user operations the most and takes cost and Under the premise of user convenience, user authentication is realized.

In order to solve the problems of the technologies described above, the technical solution provided by the invention is:

On the one hand, the present invention provides a kind of user identity authentication method based on IM, it is characterized in that, described authentication method comprises:

Receive the verification request sent by the application program of the terminal;

generating a verification link according to the verification request, and sending the verification link to the application program of the terminal, wherein the verification link includes a first verification code and an IM application terminal identification code;

receiving a second verification code and a user identification code sent by an IM application end, wherein the IM application end is an IM application program corresponding to the IM application end identification code;

When the first verification code matches the second verification code, the verification is passed.

In some embodiments, the verification link is configured to automatically open the IM application end when the user clicks the verification link, and the first verification code is automatically filled in the field corresponding to the identification code of the IM application end. On the communication interface of the IM account.

In some embodiments, the verification method also includes:

When the first verification code does not match the second verification code, return verification failure information.

In some embodiments, the verification method also includes:

Before receiving the verification request sent by the application program of the terminal, the IM account information corresponding to the IM application terminal identification code is pre-configured.

In some embodiments, the first verification code is composed of at least 4 random characters.

In some embodiments, after the corresponding verification link is generated, if the second verification code is not acquired within a predetermined time, the verification link becomes invalid. Preferably, the predetermined time can be customized according to usage scenarios.

On the one hand, the present invention provides a kind of IM-based user identity verification device, it is characterized in that, described verification device comprises:

The first receiving module is configured to receive a verification request sent by an application program of the terminal;

A generating module, configured to generate a verification link according to the verification request, and send the verification link to the application program of the terminal, wherein the verification link includes a first verification code and an IM application terminal identification code;

The second receiving module is configured to receive the second verification code and the user identification code sent by the IM application end, wherein the IM application end is an IM application program corresponding to the IM application end identification code; and

A verification module, configured to pass the verification when the first verification code matches the second verification code.

In some embodiments, the verification module is also used to,

When the identity verification information sent by the user does not match the identity information, return verification failure information.

In some embodiments, it is characterized in that the verification device also includes:

The configuration module is configured to pre-configure the IM to receive the user's account information before receiving the user identity verification request.

In one aspect, the present invention provides a server, the server includes a processor and a memory, at least one instruction is stored in the memory, and the instruction is loaded and executed by the processor to implement the above-mentioned IM-based user The action performed by the authentication method.

In one aspect, the present invention provides a computer-readable storage medium, at least one instruction is stored in the storage medium, and the instruction is loaded and executed by a processor to implement the above-mentioned IM-based user authentication method. operate.

The technical solutions provided by the embodiments of the present invention may include the following beneficial effects:

In the IM-based user authentication method, device, server and storage medium thereof disclosed in the present invention, the IM application terminal is combined with the third-party application program server by utilizing the communication characteristics of the IM application terminal itself binding personal mobile phone numbers and information The third-party server generates the user's identity verification ID, and then sends a real-time verification code through the IM application bound to the personal identity, and finally the third-party server makes a matching judgment on the identity verification ID, thereby completing the verification of the user's identity information. The user identity verification method of the present invention does not require the cooperation of short messages or operators, thereby saving the cost of sending short messages by operators. On the other hand, the user uses the IM client to send the real-time verification code, and the real-time verification code information can be sent to the third-party server, which simplifies the user's verification operation compared with the method where the user manually enters the SMS verification code.

It is to be understood that both the foregoing general description and the following detailed description are exemplary only and are not restrictive of the present disclosure.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

Fig. 1 schematically shows a flowchart of an IM-based user identity verification method in an embodiment of the present invention;

Fig. 2 schematically shows a structural block diagram of an IM-based user identity verification system in an embodiment of the present invention;

Fig. 3 schematically shows the flowchart of the application in the IM-based user authentication method in a preferred embodiment of the present invention;

Fig. 4 schematically shows a structural diagram of a server provided by an embodiment of the present invention.

Detailed ways

It should be noted that the terms "first" and "second" in the description and claims of the present invention and the above drawings are used to distinguish similar objects, but not necessarily used to describe a specific sequence or sequence. It should be understood that the data so used may be interchanged under appropriate circumstances for the embodiments of the invention described herein. Furthermore, the terms "comprising" and "having", as well as any variations thereof, are intended to cover a non-exclusive inclusion, for example, a process, method, system, product or device comprising a sequence of steps or elements is not necessarily limited to the expressly listed instead, may include other steps or elements not explicitly listed or inherent to the process, method, product or apparatus.

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the drawings in the embodiments of the present invention. Apparently, the described embodiments are some, not all, embodiments of the present invention. Based on the implementation manners in the present invention, all other implementation manners obtained by persons of ordinary skill in the art without making creative efforts shall fall within the protection scope of the present invention.

Referring to FIG. 1, FIG. 1 schematically shows a flowchart of an IM (Instant Messaging)-based user authentication method in an embodiment of the present invention. Embodiments of the present invention provide an IM-based user authentication method, which is applied to any third-party application program running on a terminal, and the terminal includes but is not limited to a smart phone, a tablet computer, a desktop Internet equipment such as computers and workstations, but not limited to them. The IM on which the present invention is based is an instant messaging APP that uses a mobile phone number as a user account, including but not limited to WhatsApp and Telegram. Specifically, the IM-based user verification method includes but not limited to the following steps.

Step S101, receiving a verification request sent by an application program of a terminal.

Specifically, the verification request includes a request from the user to apply for a registration account from the application server, or a request from the user to apply for a login account from the application server, or a request from the user to perform certain functions of the application. At this point, the user authentication interface will be displayed on the interactive interface of the application. The user identity verification interface includes a sending verification request control, and the sending verification request is used for the user to click and perform the operation of sending the verification request. After the user sends an authentication request action, the application server receives the user authentication request.

Step S102, generating a verification link according to the verification request, and sending the verification link to the application program of the terminal, wherein the verification link includes a first verification code and an IM application terminal identification code.

Specifically, the application server generates the user's first verification code as a real-time verification code (On Time Password, OTP) as user identification information. Wherein, the first verification code may be a plurality of characters composed of a plurality of random numbers, may be a plurality of characters composed of a plurality of random English letters (where uppercase English letters and lowercase English letters represent different characters), or may be It is a letter composed of multiple random numbers and multiple random English letters. More specifically, the first verification code is a random character with at least 4 digits. In addition, in this embodiment, one of the first verification codes is a check code, specifically the last digit of the group of numbers, which is obtained from the previous numbers through a certain operation, and used to verify the group of numbers correctness, so as to avoid the wrong matching problem when the verification code is entered incorrectly.

The IM application terminal identification code is pre-configured by the application program server on the IM application terminal, and is used to receive the IM account of the verification code sent by the user. The IM application terminal identification code used to implement the user identity verification method of this application can be a unified IM account, or multiple different IM accounts can be set according to the type of verification application, user type, and verification request type. In addition, this IM account can also be changed periodically according to business processes.

In some embodiments, the verification link does not have a jump function, the user can only view the first verification code and the IM application terminal identification code on the application user identity verification interface of the terminal, and the user needs to manually Open the corresponding IM application terminal on the terminal, then find the IM account number of the corresponding IM application terminal identification code, and manually input the first verification code on the communication interface of the IM account number of the IM application terminal identification code, then click send, and the This completes the upload of verification information.

In some other embodiments, the verification link has a jump function. When the user clicks on the verification link, the IM application end can be automatically awakened, and the first verification code will be automatically filled in with the IM application end identification. On the communication interface of the communication interface corresponding to the IM account, the user only needs to click send to complete the upload of the verification information. It can be seen that the verification link with the jump function greatly simplifies the user's verification operation, and the user only needs two clicks to complete the verification information upload. And in this way, the user information is automatically filled in without manual operation, which avoids the verification failure caused by the user entering the wrong verification code, thereby improving the efficiency and success rate of user identity verification.

Step S103, receiving the second verification code and the user verification code sent by the IM application, wherein the IM application is an IM application corresponding to the IM application identification code.

Specifically, the second verification code is a real-time verification code sent by the user to the IM account corresponding to the IM application terminal identification code. After the user sends the second verification code through the IM application end of the terminal, the IM account corresponding to the IM application end identification code, as the receiver, will obtain the second verification code sent by the user on the communication interface; The verification code gateway (OTP Gateway) obtains the second verification code and the user's corresponding user mobile phone number from the application program interface (API) of the IM application end, wherein the real-time verification code gateway (OTP Gateway) and the application program interface (API) ) is pre-configured.

Specifically, the IM of the present invention is an instant messaging APP that uses the mobile phone number as the user account, so when the user sends the second verification code using the IM application end of the terminal, the IM account corresponding to the IM application end identification code as the recipient can obtain the user's verification code. mobile phone number, and the mobile phone number is sent to the application server to be verified by the real-time verification code gateway (OTP Gateway).

In some embodiments, after the corresponding verification link is generated, if the second verification code sent by the user is not obtained within a predetermined time, the verification link becomes invalid. Specifically, the predetermined time can be customized according to usage scenarios. The purpose of designing the verification link to expire periodically is to prevent the verification code from being stolen and causing user losses. When obtaining the verification code, many criminals will use improper and illegal means to crack it. In order to prevent criminals from stealing the verification code, set a valid time for the verification link and remind the user that whenever the valid time is exceeded, the verification code will fail. And if the user himself has not received the verification link within the valid time, he can resend the verification request to obtain the verification link, so as to prevent losses caused by criminals stealing the verification code.

Step S104, judging whether the first verification code matches the second verification code; wherein, when the first verification code matches the second verification code, enter step S105; when the first When the verification code does not match the second verification code, go to step S106.

Specifically, traverse the verification codes generated in the application server, and match the second verification code sent by the user with the first verification code generated by the application server. When each character of the second verification code sent by the user matches the When each character corresponding to the generated first verification code is exactly the same, the matching is successful.

Step S105, when the first verification code matches the second verification code, the verification is passed. The application server confirms the user identification code, thereby completing user authentication for the user identification code. Wherein, the user opens the application program through the terminal, the application program returns pass information, and completes the user identity information verification process.

Step S106, when the first verification code does not match the second verification code, return verification failure information. Wherein, the user opens the application program through the terminal, and the application program returns the information that the verification fails. At this time, the user can resend the verification request to perform the second user identity information verification process.

Compared with the prior art, in the IM-based user authentication method disclosed in the present invention, the IM application terminal is used to bind the personal mobile phone number and the communication characteristics of personal information, and the IM application terminal is combined with the application server to be verified. , the user's real-time verification code is generated by the application server to be verified, and then the user sends back the real-time verification code through the IM application bound to the personal identity, and finally the application server to be verified matches the real-time verification code to complete the user Verification of identity information. The user identity verification method of the present invention does not require the cooperation of short messages or operators, thereby saving the cost of sending short messages by operators. In addition, the verification link function is integrated. After the user clicks on the link, the sending content of the real-time verification code sent to the specific IM receiving user can be automatically formed. The user only needs to send with one click, and the identity verification identification information can be sent to the application server to be verified. Compared with the method in which the user manually inputs the SMS verification code, the verification operation of the user is simplified.

Please refer to FIG. 2 , which schematically shows a structural block diagram of an IM-based user identity verification system in an embodiment of the present invention. An embodiment of the present invention provides an IM-based user identity verification device, which is applied to a third-party server, including but not limited to the following modules.

The first receiving module is configured to receive the verification request sent by the application program of the terminal.

A generating module, configured to generate a verification link according to the verification request, and send the verification link to the application program of the terminal, wherein the verification link includes a first verification code and an IM application terminal identification code.

The IM application terminal identification code is pre-configured by the application program server on the IM application terminal, and is used to receive the IM account of the verification code sent by the user. The IM application terminal identification code used to implement the user identity verification method of this application can be a unified IM account, or multiple different IM accounts can be set according to the type of verification application program, user type, and verification request type. In addition, this IM account can also be changed periodically according to business processes.

The second receiving module is configured to receive the second verification code and the user verification code sent by the IM application end, wherein the IM application end is an IM application program corresponding to the IM application end identification code.

The verification module judges whether the first verification code matches the second verification code. When the first verification code matches the second verification code, the verification is passed; wherein, the user opens the application program through the terminal, and the application program returns pass information, and completes the user information verification process. When the first verification code does not match the second verification code, the verification failure information is returned; wherein, the user opens the application program through the terminal, and the application program returns the verification failure information. At this time, the user can resend the verification request to proceed The second verification process.

Specifically, the verification module traverses the verification codes generated in the application server, and matches the second verification code sent by the user with the first verification code generated by the application server. When each character of the second verification code sent by the user matches the application When each character of the corresponding first verification code generated by the program server is exactly the same, the matching is successful.

In some embodiments, the IM-based user identity verification device of the present invention further includes a configuration module, configured to pre-configure the IM account information corresponding to the IM application terminal identification code before receiving the user identity verification request. Specifically, register the receiving account on the IM application in advance and complete the information verification. The configuration module is used to configure the communication between the IM application and the application to be verified. Therefore, when the user receives the user's real-time verification code through the IM application, the real-time The verification code can be transmitted to the real-time verification code gateway through the application port API of IM, and then input to the application server, thereby verifying the user verification information.

Compared with the prior art, in the IM-based user identity verification device disclosed in the present invention, it runs on a third-party application server, uses the communication characteristics of the IM application itself to bind the personal mobile phone number and information, and integrates the IM application The terminal is combined with the application server to be authenticated. The user identity verification device receives the user identity verification request through the receiving request module, and uses the generation module to generate the user's real-time verification code; then the user sends the real-time verification code through the IM application end bound to the personal identity, and the real-time verification code is transmitted to the IM for receiving The user's information receiving end receives the real-time verification code sent by the user from the real-time verification code gateway, and finally the verification module performs matching judgment on the real-time verification code, thereby completing the verification of user information. The user identity verification device of the present invention does not require the cooperation of short messages or operators, thereby saving the cost of sending short messages by operators. And the verification link function is integrated. After the user clicks the link, the sending content of sending the identity verification ID to the specific IM receiving user can be automatically formed. The user only needs to send the identity verification ID information to the application server to be verified with one click. This simplifies the user's authentication operation.

Fig. 3 schematically shows the flow chart of the IM-based user identity verification method in a preferred embodiment of the present invention. The technical content involved in the above-mentioned embodiment will be described in detail below in conjunction with Fig. 3 and this embodiment .

This embodiment provides an IM-based user identity verification method. The user identity verification method can be used for user login, registration, or application for executing special functions of the application program. In this embodiment, user registration is taken as an example. Specifically, the user verification method can be run in the application server to be registered, and can also be run in the application client to be registered, and the user identity verification method includes the following steps:

(1) Configure the gateway (Gateway) of the real-time verification code (OTP), and notify the application program server (NetApp Server) to receive the account information of the instant messaging (IM) application program of the OTP; wherein, the Gateway is an API gateway based on the HTTP protocol, As a unified API access layer, the connection between NetApp Server and IM Server is thus realized; NetApp is an application program that adopts the verification scheme of this application, and IM is an instant messaging APP that uses a mobile phone number as a user account. In this embodiment, it is Whatsapp or Telegram.

(2) After the user completes the registration information request on the NetApp display interface, the NetApp Server generates the OTP and the IM receiving number, generates an IM sending link together, and displays it on the user registration page; the registration information request includes filling in the mobile phone number and clicking to send The registration request; the IM sending connection includes OTP and the IM receiving number, and also includes the control instruction for jumping to open the IM application program and the control instruction for sending information to the IM receiving number.

(3) The user clicks the IM to send the link, the IM is automatically awakened, and the prefabricated OTP information is automatically filled in the chat interface of the receiving number.

(4) The user clicks on the IM to send the prefabricated OTP information; the prefabricated OTP information is sent to the communication of the IM receiving user, and the information content sent by the registered user is obtained from the IMAPI through the preconfigured OTP Gateway.

(5) OTP Gateway sends the user's mobile phone number and received OTP information to NetApp Server.

(6) OTP Gateway receives the user notification through IM to switch back to NetApp to complete the registration process.

(7) NetApp Server judges whether the prefabricated OTP information is consistent with the OTP sent to the registered user in step (2); if the prefabricated OTP information is consistent with the OTP sent to the registered user, then enter step (8); if the prefabricated OTP information is consistent with the OTP sent to the registered user If the user's OTP is the same, go to step (9).

(8) NetApp Server returns the verification pass information to complete the user registration.

(9) NetApp Server returns the message that the verification fails. Wherein, when the verification fails, the user can resend the identity verification request to register for the second time.

In the IM-based user authentication method disclosed in this embodiment, the IM application terminal itself is used to bind the personal mobile phone number and the communication characteristics of information, and the IM application terminal is combined with the application server to be registered, and the application server to be registered generates The user's identity verification ID, and then the user sends the identity verification ID through the IM application that is bound to the personal identity, and finally the application server to be registered will make a matching judgment on the identity verification ID, thereby completing the verification of user information. The user identity verification method of the present invention does not require the cooperation of short messages or operators, thereby saving the cost of sending short messages by operators. In addition, the verification link function is integrated. After the user clicks on the link, it can automatically form the sending content of sending the identity verification identification to the specific IM receiving user. The user only needs to send the identity verification identification information to the application server to be registered with one click. Compared with the method where the user manually enters the SMS verification code, the user operation is simple, only 2 clicks are required, and there is no need to manually enter the verification code, which simplifies the user's verification operation.

FIG. 4 is a schematic structural diagram of a server provided by an embodiment of the present invention. The server 400 may have relatively large differences due to different configurations or performances, and may include one or more central processing units (CPU) 401 and one or more than one memory 402, wherein at least one instruction is stored in the memory 402, and the at least one instruction is loaded and executed by the processor 401 to implement the IM-based user authentication method provided by the above method embodiments . Certainly, the server may also have components such as a wired or wireless network interface, a keyboard, and an input and output interface for input and output, and the server may also include other components for realizing device functions, which will not be repeated here.

In an exemplary embodiment, there is also provided a computer-readable storage medium, such as a memory including instructions, which can be executed by a processor in the terminal to complete the IM-based user authentication method in the following embodiments. For example, the computer readable storage medium may be ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, optical data storage device, and the like.

Those of ordinary skill in the art can understand that all or part of the steps for implementing the above embodiments can be completed by hardware, and can also be completed by instructing related hardware through a program. The program can be stored in a computer-readable storage medium. The above-mentioned The storage medium mentioned may be a read-only memory, a magnetic disk or an optical disk, and the like.

It should be understood that the various technical features of the above-mentioned embodiments can be combined arbitrarily. For the sake of concise description, all possible combinations of the various technical features in the above-mentioned embodiments are not described. However, these technical features do not exist Any contradictory combination should be considered as falling within the scope of this specification.

The above are only preferred feasible embodiments of the present disclosure, and do not limit the protection scope of the present disclosure. All equivalent structural changes made by using the contents of the disclosure specification and drawings are included in the protection scope of the present disclosure.

Claims

An IM-based user identity verification method, characterized in that the verification method comprises:

Receive the verification request sent by the application program of the terminal;

generating a verification link according to the verification request, and sending the verification link to the application program of the terminal, wherein the verification link includes a first verification code and an IM application terminal identification code;

receiving a second verification code and a user identification code sent by an IM application end, wherein the IM application end is an IM application program corresponding to the IM application end identification code; and

When the first verification code matches the second verification code, the verification is passed.
The IM-based user identity verification method according to claim 1, wherein the verification link is configured to automatically open the IM application end when the user clicks the verification link, and the first verification link The code is automatically filled in on the communication interface of the IM account corresponding to the IM application terminal identification code.
The IM-based user identity verification method according to claim 1, wherein the verification method further comprises:

When the first verification code does not match the second verification code, return verification failure information.
The IM-based user identity verification method according to claim 1, wherein the verification method further comprises:

Before receiving the verification request sent by the application program of the terminal, the IM account information corresponding to the IM application terminal identification code is pre-configured.
The IM-based user identity verification method according to claim 1, wherein the first verification code is composed of at least 4 random characters.
The IM-based user identity verification method according to claim 1, wherein after the corresponding verification link is generated, if the second verification code is not obtained within a predetermined time, the verification link becomes invalid.
An IM-based user identity verification device, characterized in that the verification device includes:

The first receiving module is configured to receive a verification request sent by an application program of the terminal;

A generating module, configured to generate a verification link according to the verification request, and send the verification link to the application program of the terminal, wherein the verification link includes a first verification code and an IM application terminal identification code;

The second receiving module is configured to receive the second verification code and the user identification code sent by the IM application end, wherein the IM application end is an IM application program corresponding to the IM application end identification code; and

A verification module, configured to pass the verification when the first verification code matches the second verification code.
The IM-based user identity verification device according to claim 7, wherein the verification link is configured to automatically open the IM application end when the user clicks the verification link, and the first verification link The code is automatically filled in on the communication interface of the IM account corresponding to the IM application terminal identification code.
The IM-based user identity verification device according to claim 7, wherein the verification module is also used for:

When the identity verification information sent by the user does not match the identity information, return verification failure information.
The IM-based user identity verification device according to claim 7, wherein the verification device further comprises:

The configuration module is configured to pre-configure the IM account information corresponding to the IM application terminal identification code before receiving the user identity verification request.
A server, characterized in that the server includes a processor and a memory, at least one instruction is stored in the memory, and the instruction is loaded and executed by the processor to implement any one of claims 1 to 6. Actions performed by the IM-based user authentication method described in item .
A computer-readable storage medium, characterized in that at least one instruction is stored in the storage medium, and the instruction is loaded and executed by a processor to implement the IM-based The action performed by the user authentication method for .