CN107786340A - A kind of method and device of authentication - Google Patents

Abstract

The present application discloses a method for identity verification. The terminal can perform a vibration operation according to a verification trigger instruction sent by a server, and return the metadata corresponding to the vibration operation collected during the vibration operation to the server, so that the server can perform the vibration operation according to the preset The corresponding relationship between the device identification and the reference vibration parameter determines the reference vibration parameter corresponding to the received device identification of the terminal, and performs identity verification on the user using the terminal according to the reference vibration parameter and the metadata. It can be seen that through the method provided by the embodiment of the present application, the user can complete the collection and return of metadata without any operation on the terminal, and the user does not need to collect his own biological information, which avoids the problems related to personal privacy in the prior art. In addition, user operations are simplified and the efficiency of identity verification is improved.

Description

A method and device for identity verification

technical field

The present application relates to the field of information technology, in particular to an identity verification method and device.

Background technique

With the development of the information society, people rely more and more on the network to perform various services, and as the functions of mobile terminals become more and more powerful, people begin to use mobile terminals more to perform various services through the network. Therefore, how to better provide various services on mobile terminals has become a focus of attention in recent years. Among them, how to ensure the security of users when using mobile terminals to perform services (hereinafter referred to as security) is the most important heavy.

Specifically, the user can first log in the account held on the terminal, and then establish a data connection with the server providing the service through the network, and perform various services. As shown in FIG. 1 , it is a schematic diagram of a terminal connecting to a server through a network in the prior art. Among them, the terminal is a terminal that has logged in an account, so it can be regarded as that the terminal has established a data connection with the server through the account. It can be seen from Figure 1 that one server can provide services for multiple accounts, no matter which terminal the account is in If you log in on the account, you can verify your identity to the server through this account. Therefore, in the prior art, the identity of the account logged in on the terminal can be verified, and only the verified account can perform services, thereby ensuring security.

Furthermore, people usually use identity verification methods to prevent non-account holders from performing business through the account, thereby ensuring the security of business execution. With the development of biometric technology and the advancement of sensor technology, since personal biometric information is unique to each person, the accuracy of identity verification using user biometric information is higher, and since there is no need for traditional The password input process improves the efficiency of identity verification.

Therefore, the existing technology begins to perform identity verification based on biometric information.

Specifically, the server will pre-collect and store the account holder's biological information (such as fingerprint information, voiceprint information, iris information, appearance information, etc.) The sensor collects, and every time identity verification is performed, the mobile terminal re-collects the biometric information and sends it to the server as the biometric information to be verified for the account, then the server can judge the biometric information based on the stored standard biometric information. Whether the biological information to be verified is consistent with the standard biological information, and determine whether the identity verification is passed based on the judgment result.

However, when the terminal collects the user's biological information, the user often needs to actively operate the terminal so that the terminal collects the user's biological information (such as pressing the sensor with a finger, directing the eyes to the camera, speaking into the microphone, etc.) ), so user operations are increased when biometric information is used for identity verification, making the identity verification process cumbersome.

Furthermore, the collection of biological information usually has certain requirements on the collection environment. For example, if the finger is wet with water, the fingerprint collection may fail; if the environment is too noisy, the voiceprint collection may fail; if the ambient light is too dark, the iris information collection may fail. , which in turn leads to an increase in the possibility of authentication failure, reducing the efficiency of authentication.

In summary, it can be seen that the existing authentication technology has the problem of low authentication efficiency.

Contents of the invention

The embodiment of the present application provides an identity verification method, which is used to solve problems such as cumbersome user operations, low user willingness to use, high requirements for the collection environment, and low identity verification efficiency when using the existing technology for identity verification.

The embodiment of the present application provides an identity verification device, which is used to solve problems such as cumbersome user operations, low user willingness to use, high requirements for the collection environment, and low identity verification efficiency when using the existing technology for identity verification.

The embodiment of the application adopts the following technical solutions:

A method of authentication comprising:

The terminal receives a verification trigger instruction sent by the server, and the verification trigger instruction is used to instruct the terminal to perform a vibration operation;

When the terminal performs the vibration operation according to the verification trigger instruction, collect metadata generated when the vibration operation is performed;

The terminal sends a verification request carrying the metadata and the device identifier of the terminal to the server, and the verification request is used to request the server to use the terminal according to the metadata and the device identifier of the terminal. authenticated users.

A method of authentication comprising:

The server sends a verification trigger instruction to the terminal, where the verification trigger instruction is used to instruct the terminal to collect metadata generated when performing the vibration operation according to the verification trigger instruction;

The server receives the metadata sent by the terminal and the device identifier of the terminal;

The server determines the reference vibration parameter corresponding to the received device ID of the terminal according to the preset correspondence between the device ID and the reference vibration parameter;

Perform identity verification on the user using the terminal according to the reference vibration parameter and the metadata.

An authentication device, comprising:

The receiving module receives the verification trigger instruction sent by the server;

A vibration module, performing a vibration operation according to the verification trigger instruction;

A collection module, when the vibration module performs a vibration operation according to the verification trigger instruction, collect metadata generated when performing the vibration operation;

A sending module, sending a verification request carrying the metadata and the device identifier of the device to a server, where the verification request is used to request the server to use the device according to the metadata and the device identifier of the device authenticated users.

A device for identity verification, the device includes a vibration motor and a sensor, including:

A sending module that sends a verification trigger instruction to the terminal, where the verification trigger instruction is used to instruct the terminal to collect metadata generated when performing the vibration operation when performing the vibration operation according to the verification trigger instruction;

a receiving module, configured to receive the metadata sent by the terminal and the device identifier of the terminal;

The determination module determines the reference vibration parameter corresponding to the received device identification of the terminal according to the preset correspondence between the equipment identification and the reference vibration parameter;

The authentication module is configured to authenticate the user using the terminal according to the reference vibration parameter and the metadata.

The above at least one technical solution adopted in the embodiment of the present application can achieve the following beneficial effects:

The terminal can perform the vibration operation according to the verification trigger instruction sent by the server, and return the metadata corresponding to the vibration operation collected when performing the vibration operation to the server, so that the server can , determining a reference vibration parameter corresponding to the received device identifier of the terminal, and performing identity verification on the user using the terminal according to the reference vibration parameter and the metadata. It can be seen that through the method provided by the embodiment of the present application, the user can complete the collection and return of metadata without any operation on the terminal, and the user does not need to collect his own biological information, which avoids the problems related to personal privacy in the prior art. In addition, user operations are simplified and the efficiency of identity verification is improved.

Description of drawings

The drawings described here are used to provide a further understanding of the application and constitute a part of the application. The schematic embodiments and descriptions of the application are used to explain the application and do not constitute an improper limitation to the application. In the attached picture:

FIG. 1 is a schematic diagram of a terminal connecting to a server through a network in the prior art;

Fig. 2 is the process of identity verification provided by the embodiment of the present application;

FIG. 3 is another authentication process provided by the embodiment of the present application;

Figures 4a to 4c are schematic diagrams of the process in which the server sends a verification trigger command to the terminal and makes the terminal return metadata provided by the embodiment of the present application;

FIG. 5 is a schematic diagram of acceleration changes collected by an acceleration sensor of a terminal provided in an embodiment of the present application;

FIG. 6 is a schematic diagram of a waveform corresponding to the vibration operation provided by the embodiment of the present application;

FIG. 7 is a schematic structural diagram of an identity verification device provided by an embodiment of the present application;

FIG. 8 is a schematic structural diagram of another identity verification device provided by an embodiment of the present application.

Detailed ways

In order to make the purpose, technical solution and advantages of the present application clearer, the technical solution of the present application will be clearly and completely described below in conjunction with specific embodiments of the present application and corresponding drawings. Apparently, the described embodiments are only some of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

The technical solutions provided by various embodiments of the present application will be described in detail below in conjunction with the accompanying drawings.

Figure 2 is the process of identity verification provided by the embodiment of the present application, which specifically includes the following steps:

S101: The terminal receives a verification trigger instruction sent by a server, where the verification trigger instruction is used to instruct the terminal to perform a vibration operation.

Since the initiator of the identity verification process is usually the server, in this embodiment of the application, the terminal can receive the verification trigger instruction sent by the server, and the verification trigger instruction received by the terminal can be when the server determines that the terminal sent Sent when status information is abnormal.

Specifically, the terminal sends its own status information to the server, wherein the status information may include: the terminal's mac address information, ip address information, geographic location information, business information, etc., that is to say, the status information may be Various information reflecting the status of the terminal (the status of the terminal can usually be classified into: the environmental status of the terminal, such as geographical location information, time information, etc., and the operating status of the terminal, such as the system version number , ip address information, business information, etc. Of course, this application does not limit that only the above two types of situations can be used as the status information of the terminal), the specific information contained in the status information can be set according to actual needs, and this application does not Specifically defined, in addition, it should be noted that the service information may be service-related information such as a service execution request, and specifically may be information related to a service being executed by the terminal. Therefore, the terminal may receive the verification trigger instruction sent by the server when the server judges that the status information sent by the terminal is abnormal according to the historical status information of the terminal.

Further, the verification trigger instruction is used to instruct the terminal to perform a vibration operation.

Specifically, the verification trigger instruction may be a script language (JavaScript, JS) code, then after the terminal receives the verification trigger instruction, by running the JS code, it can determine the vibration frequency information contained in the verification trigger instruction, At least one of vibration time interval information and vibration intensity information, and then the terminal can perform a vibration operation according to at least one of the vibration frequency information, the vibration time interval information, and the vibration intensity information.

The vibrating operation may be performed by a vibrating motor in the terminal. Since the vibration trigger instruction may include at least one of vibration frequency information, vibration time interval information, and vibration intensity information, the vibration motor may perform the vibration operation only according to the vibration frequency information, vibration time interval information, or vibration intensity information. The message performs a vibration action. Of course, when the vibration trigger instruction contains accurate vibration frequency information, vibration time interval information and vibration intensity information, the vibration operation performed by the vibration motor is more accurate, which is more conducive to the operation of subsequent steps and the accuracy of the final identity verification result sex.

It should be noted that the terminal may be a mobile phone, a tablet computer, or other terminal that includes a vibration motor and can be held by a user.

S102: When performing a vibration operation according to the verification trigger instruction, the terminal collects metadata generated when performing the vibration operation.

In the embodiment of the present application, after the terminal receives the verification trigger instruction, it can determine the vibration operation according to the verification trigger instruction, and make the vibration motor of the terminal perform the vibration operation. At the same time, the terminal sensor can also collect the vibration operation. Metadata of the vibration operation generated by the vibration motor when performing the vibration operation.

Specifically, since the vibration motor is a part of the terminal, when viewed from the terminal as a whole, the vibration motor causes the entire terminal to vibrate when performing vibration operations, and the vibration is reflected in the acceleration changes of the entire terminal and If the angular velocity changes, the sensor of the terminal can collect the vibration acceleration and/or vibration angular velocity generated by the vibration motor performing the vibration operation, or the vibration acceleration and/or vibration angular velocity change due to the vibration operation, and The vibration acceleration and/or the vibration angular velocity are used as metadata generated by the terminal when performing the vibration operation.

Moreover, due to factors such as the posture of each user holding the terminal (such as the posture of the palm, the posture of the arm, etc.), the postures of holding different terminals, the weight of the terminal, etc., all may affect the information collected by the sensor of the terminal. The vibration acceleration and/or vibration angular velocity generated by the vibration motor performing the vibration operation, and the posture of each user holding the terminal is unique (that is, the probability of two users holding the same terminal with exactly the same posture is extremely low), Therefore, the metadata of the vibration operation collected by the terminal may be uniquely corresponding to each user and terminal, that is, the metadata has global uniqueness. Therefore, the metadata can be used as data for authenticating the user using the terminal.

In addition, since the verification trigger instruction can be a JS code, the sensor of the terminal can also collect the vibration acceleration and/or vibration angular velocity of the terminal by running the JS code, and use the vibration acceleration and/or the vibration angular velocity as Metadata generated when the terminal performs the vibration operation.

It should be noted that the sensor may include: acceleration sensor, gravity sensor, magnetic sensor, direction sensor, gyroscope sensor, light sensor, pressure sensor, temperature sensor, proximity sensor, linear acceleration sensor, rotation vector sensor, global positioning system ( Global Positioning System, GPS) sensor, heart rate sensor, blood oxygen sensor, ultraviolet sensor, etc. There can be at least one vibration motor in the terminal, that is, there can be multiple vibration motors in the terminal, and when there are multiple vibration motors in the terminal, each vibration motor can perform different vibration operations according to the verification trigger instruction .

Therefore, what the terminal collects is not only the vibration acceleration and/or the vibration angular velocity, but also other data generated by vibration. Specifically, the vibration trigger instruction can be set according to needs, which is not specifically limited in the present application.

It should be noted that this application does not limit the verification trigger instruction to carry JS code, as long as the verification trigger instruction can enable the vibration motor of the terminal to perform corresponding operations and the sensor of the terminal to collect data.

S103: The terminal sends a verification request carrying the metadata and the device identifier of the terminal to the server.

In this embodiment of the application, after the terminal determines the metadata, it can send a verification request carrying the metadata and the terminal's device identification to the server, and make the server The identity authenticates the user using the terminal.

In addition, since there are many other identity verification methods in the prior art (such as methods for identity verification based on geographical location information, user behavior habit information, etc.), the results determined in the identity verification process described in this application can also be Combined with the results determined by other authentication methods, that is, the server can use the authentication results obtained by multiple authentication methods to authenticate the terminal. For example, through the three methods, the identity of the terminal can be judged If the verification fails, the security of the terminal is very low, and it is very likely that it has been stolen by criminals.

Of course, this application does not limit how to use the identity verification result determined in this application.

Through the identity verification method shown in Figure 2, it can be seen that after the terminal receives the verification trigger instruction sent by the server, the user does not need to perform any operations on the terminal, and the terminal can return metadata and the device identification of the terminal to the server , so that the server authenticates the user using the terminal according to the metadata and the device identifier of the terminal. Among them, because for each user, the probability that the posture of the user holding the terminal is exactly the same as that of other users holding the terminal is extremely low, and the posture of the user holding the terminal has a significant impact on the information collected by the sensor of the terminal. The metadata generated by the vibration operation performed by the vibration motor must have a certain impact, so the metadata can be used to distinguish whether the user is holding the terminal, and then authenticate the user using the terminal. It can be seen that the method provided by the embodiment of the present application can complete the identity verification process without user operation, and because the collected information is unique to the user, but not the user's biological information does not involve the user's personal privacy , so it is easier for users to accept, the operating cost is lower, and there is almost no requirement for the collection environment, and the authentication efficiency is higher.

In addition, since multiple accounts can be logged in on the terminal for the same terminal, the verification trigger instruction received by the terminal in step S101 can carry the account identifier, then after the terminal determines the metadata in step S102, When the terminal sends the metadata and the device identifier of the terminal to the server, it may also send the verification request of the account identifier of the terminal to the server, and the verification request is used to request the server to The data, the device ID of the terminal and the account ID are used to authenticate the user using the terminal.

Based on the identity verification process shown in FIG. 2 , the embodiment of the present application also provides a corresponding identity verification method performed by a server, as shown in FIG. 3 .

Figure 3 is a process of identity verification provided by the embodiment of this application, which specifically includes the following steps:

S201: The server sends a verification trigger instruction to the terminal.

In the prior art, before executing the corresponding service according to the service request sent by the terminal, the server usually needs to perform an identity verification process to prove that the service request is sent by the holder of the terminal, so in this application The authentication process is actually to verify whether the terminal is being used by the holder of the terminal, that is, to authenticate the user using the terminal.

Therefore, in the embodiment of the present application, the server may first determine the timing of sending the verification trigger instruction to the terminal.

Specifically, as shown in Figure 1 in the actual application environment, the server can establish communication connections with multiple terminals and receive the status information sent by each terminal, so the server can receive the status information of each terminal, and for each The terminal with abnormal status information determines the verification trigger instruction corresponding to the device identifier of the terminal according to the stored correspondence between each device identifier, each verification trigger instruction, and each reference vibration parameter, and sends the verification trigger instruction to the terminal.

Wherein, for each terminal, the server can receive the status information sent by the terminal. When it is determined that the status information sent by the terminal is abnormal, the server can send a verification trigger instruction to the terminal. In addition, the status information is sent in step S101. Corresponding explanations have already been made in , and will not be repeated here. It should be noted that the method for determining whether the status information of each terminal is abnormal may be consistent with the prior art, for example, determining whether the status information of each terminal is abnormal according to the historical geographic location information and historical business information of the terminal, etc., the present application This is not specifically limited.

Further, since the ultimate purpose of identity verification is to ensure the security of executing services, when the terminal initiates a service request and when the account logs into the terminal, the server can also send a verification trigger instruction to the terminal without confirming that the terminal The sent status information is abnormal. Of course, the specific timing of sending the verification trigger instruction can also be set according to requirements. This application does not specifically limit the timing of sending the verification trigger instruction.

Furthermore, the server may be a single device, or a system (such as a distributed system) composed of multiple devices.

For example, assume that server X monitors the status information of each terminal corresponding to each device identifier shown in Table 1.

Equipment Identity Validate the trigger Reference Vibration Parameters A001 Prov001 Stand001 A002 Prov002 Stand002 A003 Prov003 Stand003 A004 Prov004 Stand004 A005 Prov005 Stand005

Table 1

Wherein, the device identifier may be used to identify the uniqueness of the terminal (equivalent to the identity of the terminal), for example, mac address, International Mobile Equipment Identity (International Mobile Equipment Identity, IMEI), the identity number of the motherboard, etc. etc., and the device identifier may also be a unique identification code added to the terminal by the manufacturer of the terminal, for example, a production number, a product serial number, and the like. And usually the device identification of the terminal can be read, so as to determine the identity of the terminal through the device identification, so in this application, the specific form of the device identification is not limited, as long as the device identification can be uniquely determined The terminal will do.

And, the server X receives the service execution request sent by the terminal whose device ID is A001, then the server X can determine that it needs to send a verification trigger instruction to the terminal whose device ID is A001, and further, the server X can according to the device ID : A001 It is determined from Table 1 that the verification trigger command sent to the terminal identified by the device as A001 is: Prov001.

Furthermore, the verification trigger instruction can cause the vibration motor of the terminal whose device is identified as A001 to perform the vibration operation corresponding to the verification trigger instruction Prov001, and the sensor of the terminal can return the collected metadata of the vibration operation to the server X, the schematic diagram of the above process can be shown in Figure 4a to Figure 4c.

Figures 4a to 4c are schematic diagrams of the process in which the server sends a verification trigger command to the terminal and makes the terminal return metadata provided by the embodiment of the present application, where it can be seen that Figure 4a shows that the server sends a verification trigger command to the terminal, and Figure 4b shows the verification The trigger instruction causes the vibration motor of the terminal to perform a vibration operation corresponding to the verification trigger instruction, and Fig. 4c shows that the terminal returns metadata to the server.

S202: The server receives the metadata and the device identifier of the terminal sent by the terminal.

S203: The server determines a reference vibration parameter corresponding to the received device ID of the terminal according to a preset correspondence between the device ID and the reference vibration parameter.

In this embodiment of the application, after the server sends a verification trigger instruction to any terminal, the server can also receive the metadata returned by the terminal and the device identification of the terminal, so the server can further pass the Metadata to authenticate the endpoint.

Specifically, after the server receives the metadata and the device identifier, it can determine the corresponding relationship with the device through the stored correspondence between each device identifier, each verification trigger instruction, and each reference vibration parameter as shown in Table 1. Identify the corresponding reference vibration parameters. Wherein, it should be noted that the stored correspondence between each device ID, each verification trigger instruction, and each reference vibration parameter may be preset and stored by the server, that is, for each device ID, first determine the device ID The corresponding verification trigger instruction and reference vibration parameter, and then store the device identifier, the verification trigger instruction, the reference vibration parameter and the corresponding relationship in the server.

Furthermore, since the server needs to pre-determine the reference vibration parameter corresponding to the device identifier of the terminal, in order to determine the relationship between the device identifier and the reference vibration parameter, the server can also send a test instruction to the terminal, and receive the The terminal returns the metadata generated by the test command, and uses the metadata as the reference vibration parameter for the terminal, and finally establishes and stores the corresponding relationship between the device identification, the reference vibration parameter and the verification trigger command.

Further, since errors may occur in any data collection process, in order to reduce the error of the reference vibration parameter and improve the accuracy of the reference vibration parameter, for the same test command, the server can also repeatedly send the test command to the terminal , and receive the metadata generated by each test instruction, so as to reduce the error of the determined reference vibration parameter for the terminal, that is, the reference vibration parameter may be determined by a plurality of metadata.

Specifically, the server may send at least one test instruction to the terminal, and receive the metadata generated for each test instruction returned by the terminal and the device identifier of the terminal, and then determine the test method for the terminal according to the metadata generated by each test instruction. The reference vibration parameter, and determine the test trigger instruction that generates the parameter as the verification trigger instruction, and finally establish and store the corresponding relationship between the device identification, verification trigger instruction and the reference vibration parameter.

Wherein, when determining the reference vibration parameter for the terminal, the server can determine whether the quantity of metadata generated for each test instruction returned by the terminal reaches a threshold, and if so, then according to the average value of each metadata , determine the reference vibration parameter for the terminal, if not, continue to send test instructions to the terminal until the received metadata returned by the terminal reaches the threshold, that is, receive the preset The amount of metadata generated by the test command, and taking an average value of each piece of metadata as a reference vibration parameter for the terminal.

Or, the server determines the average value of the difference between each metadata for the metadata generated by each test command, and judges whether the average value of the difference is smaller than the set threshold value, and if so, determines the average value of each metadata The average value of is the reference vibration parameter for the terminal, if not, continue to send test instructions to the terminal until it is determined that the average value of the difference between metadata is less than the set threshold value. Certainly, in the prior art, there are more methods for determining reference vibration parameters with smaller errors and more accurate ones. This application does not specifically limit which method is used, and the above are only two implementation modes provided by this application.

Wherein, the sending timing of the test instruction can be randomly determined or manually determined based on experience (for example, when receiving any information sent by the terminal, send a test instruction to the terminal), wherein, since the test instruction can be sent repeatedly , so even if the timing of sending the test command is randomly determined, it will not affect the final reference vibration parameter for the terminal. Of course, since the accuracy of the reference vibration parameter can affect the accuracy of identity verification, it is an alternative Considering the accuracy of the reference vibration parameter, the server can determine the identity verification result of the terminal by a method consistent with the prior art before sending the test instruction, and when the identity verification result is passed, send the test instruction, That is, the present application does not limit when to send the test instruction.

In addition, as described in step S102 of this application, the terminal can use vibration acceleration, vibration angular velocity, etc. as metadata, and can also collect other data as metadata through various sensors. Therefore, in this application, the server determines When referring to the vibration parameter of the terminal, the reference vibration parameter may also include vibration acceleration and/or vibration angular velocity, and other data, which will not be described in detail in this application.

Continuing with the above example, assuming that the metadata returned by the terminal whose device ID is A001 is Z, the server determines that the reference vibration parameter corresponding to the device ID is Stand001 through the correspondence shown in Table 1 according to the device ID A001.

S204: Perform identity verification on a user using the terminal according to the reference vibration parameter and the metadata.

In the embodiment of the present application, after the server determines the reference vibration parameter corresponding to the received device identification of the terminal, the user using the terminal can be authenticated according to the reference vibration parameter and the metadata.

Specifically, the server can compare the similarity between the reference vibration parameter and the metadata. If the similarity is within the specified range, it can determine that the identity of the user using the terminal has high credibility. If the similarity is not within the specified Within the range, it can be determined that the identity of the user using the terminal has low credibility. When it is determined that the user's identity is highly credible, when the terminal sends a service execution request, the terminal may execute the corresponding service.

And when it is determined that the user's identity credibility is low, it means that the terminal has a high risk, and information such as the service execution request sent by the terminal needs to be handled carefully (for example, when the server receives the service execution request sent by the terminal , the server can also further authenticate the user using the terminal through other authentication methods the same as in the prior art, and finally determine whether to execute the service corresponding to the service request), or the server can also use the authentication The result is used in risk control, etc., that is, the server can flexibly use the identity verification result determined in this application. Of course, the specific subsequent operation is not specifically limited in this application.

Further, when the server compares the similarity between the reference vibration parameter and the metadata, since both the reference vibration parameter and the metadata are collected by the sensor of the terminal, and the sensor of the terminal can be composed of multiple , so the reference vibration parameter and the metadata can only contain a variety of data. For the convenience of description, the following only uses the data collected by the acceleration sensor of the terminal as an example for illustration.

Since the verification trigger instruction in step S201 makes the vibration motor of the terminal perform a vibration operation according to the verification trigger instruction sent by the server, according to the vibration mode of the vibration motor of the terminal, the acceleration sensor of the terminal can be as shown in Figure 5 The change in acceleration of the terminal is measured in the x-axis, y-axis and z-axis directions of the terminal as shown, where the change in acceleration may include the maximum value, minimum value, time when the maximum value appears, and the time when the minimum value occurs Time, the time interval between each acceleration change and other data, and compare the acceleration change amount with the acceleration change amount included in the reference vibration parameter.

FIG. 5 is a schematic diagram of acquisition of acceleration variation by an acceleration sensor of a terminal provided in an embodiment of the present application.

Furthermore, since the force and posture used by the user each time holding the terminal cannot be completely consistent, there may be slight differences between the metadata and the reference vibration parameter, so in this application, it is judged that the metadata and the reference When the vibration parameters are similar, the server can determine whether the similarity between the metadata and the reference vibration parameter is within a specified range, wherein the specified range can be set by staff based on experience.

Specifically, whether the similarity between the metadata and the reference vibration parameter is within the specified range, specifically, whether the difference between the metadata and the reference vibration parameter exceeds the specified range (such as 2%), Then it is judged whether the value of the metadata falls within the range of ±2% of the value of the reference vibration parameter. Moreover, since the acceleration sensor can collect a variety of data, such as the acceleration sensor alone, it can collect various data such as the maximum value, the minimum value, the time of occurrence of the maximum value, and the time of occurrence of the minimum value, so the judgment is similar Whether the degree of similarity between the metadata and the reference vibration parameter is within the specified range, or whether the proportion of the data types whose similarity between the metadata and the reference vibration parameter is within the specified range reaches a preset threshold (for example, determining the similarity of 75% of the data If the degree of acceleration is within the specified range, as long as the similarity of the three types of data among the maximum value, minimum value, maximum value appearance time, and minimum value appearance time of the acceleration is within the specified range, the metadata and the reference vibration can be determined. The similarity of the parameters is within the specified range).

Continuing to use the above example, assume that the server X determines the reference vibration parameter Stand001 and the metadata Z as shown in Table 2.

Table 2

And assuming that the server X needs to judge whether the similarity between the metadata and the reference vibration parameter is within the range of 0.2%, then the maximum value range of the acceleration of the reference vibration parameter can be: 0.1002～0.0998G/s; the maximum value appears The range of the time point can be: 0.1002～0.0998s; the range of the minimum value of the acceleration can be: 0.0001002～0.0000998G/s; the range of the time point when the minimum value appears can be: 0.501～0.499s. Then the server X can determine that the metadata falls within the scope of the reference vibration parameter, that is, the similarity between the metadata and the reference vibration parameter is within the specified range, and determine the identity credibility of the user using the terminal Higher, wherein, the maximum acceleration occurrence time point is the duration between the time point when the terminal performs vibration according to the corresponding test instruction and the time point when the maximum acceleration is collected. Similarly, the minimum acceleration occurrence time point is the The duration between the time point when the terminal performs vibration according to the corresponding test instruction and the time point when the minimum acceleration is collected.

Further, since there are various other identity verification methods in the prior art (such as methods of identity verification based on geographic location information, user behavior habit information, etc.), the identity verification process described in this application can also be combined with other The identity verification process is used in combination, that is, the server can use the identity verification results obtained by multiple identity verification methods to verify the identity of the terminal. The security of the terminal is very low, and it is very likely that it has been stolen by criminals.

Of course, this application does not limit how to use the identity verification result determined in this application.

It should be noted that the types of metadata Z shown in Table 2 (that is, the four categories of maximum acceleration, maximum acceleration occurrence time point, minimum acceleration, and minimum acceleration occurrence time point) are only examples provided by this application. In the actual application process, there may be various types of metadata (for example, the number of occurrences of acceleration higher than the set threshold, the duration of acceleration higher than the set threshold, etc.), and this application does not limit the Types of metadata, as long as the vibration metadata that can be collected by the sensor of the terminal can be used as the metadata described in this application.

Through the identity verification method shown in Figure 3, it can be seen that after the terminal receives the verification trigger instruction sent by the server, the user does not need to perform any operations on the terminal, and the terminal can return metadata and the device identification of the terminal to the server , so that the server authenticates the user using the terminal according to the metadata and the device identifier of the terminal. Among them, because for each user, the probability that the posture of the user holding the terminal is exactly the same as that of other users holding the terminal is extremely low, and the posture of the user holding the terminal has a significant impact on the information collected by the sensor of the terminal. The metadata generated by the vibration operation performed by the vibration motor must have a certain impact, so the metadata can be used to distinguish whether the user is holding the terminal, and then authenticate the user using the terminal. It can be seen that the method provided by the embodiment of the present application can complete the identity verification process without user operation, and because the collected information is unique to the user, but not the user's biological information does not involve the user's personal privacy , so it is easier for users to accept, the operating cost is lower, and there is almost no requirement for the collection environment, and the authentication efficiency is higher.

In addition, in step S201 of this application, since the server needs to receive the status information sent by the terminal when the server sends a verification trigger instruction to the terminal, in order to reduce the operating pressure on the server, the identity verification process described in this application can also be implemented by The terminal actively initiates, that is, the terminal sends an identity verification request to the server, and the identity verification request causes the server to send a verification trigger instruction to the terminal.

Of course, no matter whether the process of identity verification is initiated by the terminal or the server, there is no essential difference in the process of identity verification. The specific method used by the server to determine to send a verification trigger command to the terminal can be implemented in the same way as in the prior art. The consistent method for identity verification is not specifically limited in this application.

Further, in the embodiment of the present application, when the server authenticates the terminal, it verifies the identity of the user using the terminal by judging whether the similarity between the reference vibration parameter and the metadata is within the specified range. , so the accuracy of the reference vibration parameter is closely related to the accuracy of the identity verification process described in this application.

As for the correspondence between a device identifier, a verification trigger instruction, and a reference vibration parameter, the reference vibration parameter is determined by collecting metadata generated when the terminal performs the vibration operation according to the test instruction, However, if the test instruction causes the terminal to collect metadata generated during the vibration operation according to the verification trigger instruction with low stability and low discrimination, it may result in low identity verification accuracy.

Wherein, when the stability of the reference vibration parameter is low, for the verification trigger instruction, even if the user using the terminal is the same person, the similarity between the metadata returned by the terminal and the reference vibration parameter may not be within the specified range . However, when the discrimination of the reference vibration parameter is low, for the verification trigger command, even if the user using the terminal is not the same person, the similarity between the metadata returned by the terminal and the reference vibration parameter may be within the specified range. It can be seen that When the determined reference vibration parameter has low stability and low discrimination, the identity verification process described in this application is prone to misjudgment and missed judgment.

Therefore, in order to make the reference vibration parameter more accurate and to make the identity verification more accurate, in this application, for each terminal, when the server tests and determines the reference vibration parameter for the terminal, it can send the The terminal repeatedly sends a variety of test instructions, that is, for each test instruction, the server repeatedly sends to the terminal, then the server can receive the metadata generated by the various test instructions returned by the terminal, and determine that the stability meets the first condition And the metadata generated by the test instruction whose discrimination degree reaches the second condition is determined as the reference vibration parameter for the terminal, and the corresponding relationship between the device identification, the verification trigger instruction and the reference vibration parameter is established and stored, so that the identification can be carried out later. During the verification process, the terminal can be authenticated with the reference vibration parameter. Wherein, the first condition and the second condition may be numerical values respectively set according to human experience.

Specifically, for the stability of the metadata generated by the test instruction, the server may calculate the difference between different metadata when obtaining at least one metadata generated by the terminal for the same test instruction and determining the stability of the metadata generated by the test instruction according to the sum of the differences. Regarding the degree of differentiation of metadata generated by test instructions, when the server obtains metadata corresponding to different test instructions, it can first determine the average value of metadata generated by different test instructions, and for each test instruction , determine the difference between the average value of the metadata generated by the test command and the average value of the metadata generated by other test commands, and then use the sum of the determined differences as the discrimination degree of the metadata generated by the test command, then The degree of discrimination of different test instructions can be determined.

In addition, since the purpose of the identity verification process in this application is to determine whether the user of the terminal is the owner of the terminal when sending the test command, so for the method described in this application, it is only necessary to verify whether the user is It is only necessary to be the holder of the terminal when sending the test command, and it is not necessary to verify who the user of the terminal is.

In this application, for various test commands sent to the same terminal, as long as the measurement data corresponding to one test command can be distinguished from the metadata generated by the test commands corresponding to other test commands, it is not necessary to consider the Whether the metadata generated by the test command corresponding to the command is similar to the metadata generated by the test command corresponding to the test command sent to other terminals, that is, it is only necessary to compare the metadata generated by the test command returned by the same terminal.

Specifically, for each terminal (such as the terminal whose device identifier is A001 shown in Table 1), first, when the server can send different test instructions to the terminal, wherein the different test instructions can make the terminal's The vibration motor performs different vibration operations. Specifically, at least one of the vibration frequency information, vibration time interval information and vibration intensity information may be different. Then the terminal may return the test command to the server for each different test command. metadata. Moreover, for the same test command, the server may repeat the test command to the terminal, so as to reduce errors in metadata generated by the test command. Wherein, the server may also send each test instruction to the terminal when determining that the identity of the user using the terminal is credible.

Secondly, the server judges the degree of differentiation between the metadata generated by various test instructions and the stability of the metadata generated by each test instruction for the metadata generated by different test instructions returned by the same terminal. For example, metadata generated for the three test commands shown in Table 3.

table 3

It should be noted that the maximum acceleration, the time point at which the maximum acceleration occurs, the minimum acceleration, and the time point at which the minimum acceleration occurs are all average values, that is, the average values of metadata generated by the same test command.

It can be seen that for the metadata generated by test instruction II and the metadata generated by test instruction III, the various values are very close and indistinguishable, and for the metadata generated by test instruction I, the metadata generated by the test instruction I The numerical values corresponding to the data are very different from the metadata generated by the test instruction II and the metadata generated by the test instruction III, so it can be determined that the metadata I generated by the test instruction has a high degree of discrimination.

Wherein, the maximum acceleration and the minimum acceleration may vary according to the posture of the user holding the terminal (for example, different grip strengths of the user may result in different accelerations collected, and different grip postures of the user may also result in different accelerations collected), The maximum acceleration and the minimum acceleration may also vary according to different devices corresponding to the terminal (for example, different weights and volumes of devices corresponding to the terminal may result in different accelerations collected). Moreover, the above-mentioned posture of the user holding the terminal and the device corresponding to the terminal may also affect the time point at which the maximum acceleration occurs and the time point at which the minimum acceleration occurs (for example, if the user's grip is strong, the time point at which the maximum acceleration occurs may be affected. It is closer to the time point of the minimum acceleration, and the smaller the user's grip strength may make the time point of the maximum acceleration and the time point of the minimum acceleration more distant), of course, there are many factors that affect the acceleration value and time point. This application will not repeat List them all.

Specifically, taking the metadata generated by test command I as an example, the degree of discrimination is: maximum acceleration (0.1000G/s-0.0600G/s)+(0.1000G/s-0.0580G/s), time point of maximum acceleration (0.100s-0.050s)+(0.100s-0.040s), the minimum acceleration is 0, and the minimum acceleration occurs at the time point (0.900s-0.550s)+(0.900s-0.530s). Similarly, the test command II can be determined. Distinction between metadata and metadata generated by Test Instruction III.

And because for the same test command, the server can send multiple times to the terminal, so the above stability refers to the terminal for the same test command, the stability of the metadata generated by the test command returned each time (that is, For the same test command, the difference between the metadata generated by each test command returned by the terminal), if for the same test command, the difference in the metadata produced by the test command returned by the terminal every time is very large, Then it is difficult to determine whether the difference is caused by the data itself or the user of the terminal through the metadata generated by the test command, so it is difficult to use the test command as a verification trigger command to perform identity verification. For example, the metadata generated by the two test commands shown in Table 4.

Table 4

It can be seen that the server repeatedly sent 4 test commands I and 4 test commands II to the same terminal, and received the metadata generated by test command I and test command II returned by the terminal as shown in Table 4 , where the metadata generated by test instruction I has better stability, the difference between the metadata generated by each test instruction I is very small, and the difference between the metadata generated by each test instruction II is very large , which is difficult to use for authentication.

Specifically, taking the metadata generated by test command I as an example, the stability of the maximum acceleration is: (0.1000G/s-0.1020G/s)+(0.1020G/s-0.1050G/s)+(0.1050G/ s-0.1001G/s).

Further, due to the description in step S204, the present application does not limit the type of metadata, so the present application does not limit that the terminal can only collect metadata as shown in Table 3 after executing the above test instructions, as shown in Table 3. The metadata shown in 3 are only examples and do not limit the present application. In the present application, the above-mentioned test instructions may also correspond to various metadata.

Furthermore, for each test instruction, since there may be metadata with a low degree of discrimination in the metadata generated by the test instruction, and the metadata with a low degree of discrimination is of little significance to the test instruction, so When it is determined that the degree of discrimination of the metadata is low, the metadata may not be collected when the test instruction is sent later.

Taking the test instruction I as an example, assuming that all the metadata generated by the test instruction I are shown in Table 3, since the minimum acceleration generated by the test instruction I has a discrimination degree of 0, the meaning of the minimum acceleration for the test instruction I is not significant. is large, then for the test instruction I, the sensor of the terminal can no longer collect the minimum acceleration, so that the metadata generated by executing the test instruction I are only the maximum acceleration, the time point at which the maximum acceleration occurs, and the time point at which the minimum acceleration occurs.

In addition, the server can use the same signal processing method as the prior art for each metadata generated by each test command sent to the same terminal to determine a test data from each metadata generated by the same test command as The metadata generated by the test instruction, wherein, the simplest method is, for each test instruction, the average value of the metadata generated by the test instruction is used as the metadata generated by the test instruction, then each time When the server receives the metadata corresponding to the test instruction again, it may perform a signal processing on the metadata generated by the test instruction, so that the determined metadata generated by the test instruction is more accurate.

Finally, the server can repeatedly send various test instructions (that is, repeatedly send the test instruction for each test instruction) until the metadata generated by the test instructions corresponding to the various test instructions shows that the stability reaches the first level. condition and the degree of differentiation reaches the metadata of the test instruction that meets the second condition, and the metadata generated by the test instruction that meets the stability of the first condition and the degree of discrimination reaches the second condition is used as a reference vibration parameter, which will be compared with the reference vibration The test instruction corresponding to the parameter is used as a verification trigger instruction, and the reference vibration parameter, verification trigger instruction, and device identification are associated and stored locally.

Of course, in the test process described in this application, there may be only one test command, and the server can repeatedly send the test command until the stability of each metadata generated by the test command reaches the first condition of metadata. Moreover, since the server only sends one test command, there is no need to consider the issue of discrimination, it is only necessary to determine that the stability of the metadata generated by the test command meets the first condition, wherein the method for determining the stability can be as described above The method is the same.

The first condition recorded in the embodiment of the present application may mean that the data corresponding to the stability reaches the set first value, and the second condition may mean that the degree of discrimination reaches the second value, or other conditions, which are not specifically limited here. .

It should be noted that when the server determines the stability and differentiation of metadata generated by any test instruction, since the stability is only for metadata generated by the same test instruction, as long as the server receives metadata generated by the same test instruction When there is more than one metadata, the server can determine the stability of the metadata generated by the test command, and when receiving the metadata generated by the test command again, update the stable value of the metadata generated by the test command. Since the degree of discrimination exists only when there are more than one metadata generated by different test instructions, the server can determine the metadata generated by different test instructions only when the server receives metadata generated by more than one different test instructions. Data Distinction.

Further, the above is only an implementation manner of the present application, and the reference vibration parameter may also be determined from a plurality of metadata through a signal processing method in the prior art, wherein the signal processing method further includes: discrete Fourier Fast method of leaf transform, short-time Fourier transform, wavelet analysis, order ratio analysis, cepstrum, Hilbert transform, empirical mode decomposition, eigenmode function, Hilbert-Huang transform and other traditional signal processing The method, of course, the staff can determine the specific signal processing method according to the requirement, which is not specifically limited in this application.

Furthermore, various test instructions may cause the terminal to perform different vibration operations, wherein the differences in the vibration operations may include: the frequency of the vibration of the vibration motor, the time interval between each vibration, and the intensity of the vibration. As shown in Figure 6.

FIG. 6 is a schematic diagram of a waveform corresponding to a vibration operation provided by an embodiment of the present application. Among them, the abscissa represents time, and the ordinate represents the vibration amplitude of a certain axis of the terminal, and 01 represents the frequency of vibration, 02 represents the vibration time interval, and 03 represents the vibration intensity. The acceleration changes 12 times, which is the frequency of this vibration.

Furthermore, the various test instructions described in this application can be pre-set by the staff, but the types of test instructions manually set are limited after all, and among the various test instructions, there may not necessarily be a test instruction that can generate a test instruction. The arity stability of the test instruction meets the first condition and the discrimination meets the second condition, so in the embodiment itself, the server can also train the test instruction to obtain a better test instruction.

For example, genetic algorithm, annealing algorithm, ant colony algorithm, particle swarm algorithm, etc. are used to train each test instruction to obtain test instructions whose stability and discrimination reach a threshold.

Alternatively, the server may also randomly set the vibration frequency information, vibration time interval information, and vibration intensity information of the test instruction.

In addition, since each account can communicate with the server based on the hardware of the terminal and perform business only by logging in on the terminal, so in this application, multiple accounts can be logged in on the terminal, so the server can only The account status of each account that is already in the login state is monitored, without monitoring all accounts, thereby reducing the operating pressure of the server.

Therefore, in this application, the verification trigger instruction sent by the server to the terminal may carry the account identifier.

Specifically, for each account with an abnormal status, firstly, since the account can be logged in on different terminals, in this application, the terminal where the account is logged in is closely related to the identity verification process during identity verification. Therefore, after the data connection is established with the account, the server may further determine the device identifier of the terminal logged in with the account, so as to determine the terminal logged in with the account.

Secondly, the server can determine the verification trigger instruction corresponding to the account identifier of the account according to the pre-stored correspondence between each account identifier, each device identifier, each verification trigger instruction, and each reference vibration parameter, as shown in Table 5.

table 5

It can be seen that for the same account (eg, account ID A), the account ID A may correspond to multiple device IDs, and each device ID corresponds to different verification trigger instructions and standard information.

Finally, the server may send a verification trigger instruction corresponding to the determined account ID of the account to the account, so that the terminal logged in with the account can perform a subsequent identity verification process.

Further, after the server sends the verification trigger instruction to the account, since the purpose of the verification trigger instruction is to make the terminal logged in by the account return information (that is, metadata) that can prove identity to the server for the server to perform Subsequent identity verification steps), so the verification trigger command can cause the terminal logged in by the account to perform the corresponding operation according to the verification trigger command, and return metadata, the terminal’s device identifier, and the verification capability trigger command to the server. account ID.

Further, since the same terminal can log in with multiple accounts, and the server can receive verification requests carrying metadata, account identifiers, and device identifiers, the server can determine the reference vibration parameters according to the device identifier and account number. The identification is jointly determined.

Specifically, after the server receives the metadata and the device identifier, it can use the stored correspondence between each account identifier, each device identifier, each verification trigger instruction, and each reference vibration parameter as shown in Table 1, Determine the reference vibration parameter corresponding to the verification trigger instruction sent in step S201, and, because the server may send the same verification trigger instruction for different account IDs and device IDs, but for the same verification trigger instruction, the verification trigger instruction The reference vibration parameters corresponding to different account IDs and device IDs of the instruction may be different, as shown in Table 6, so in this application, the reference vibration parameters may also have a one-to-one correspondence with the account ID and the device ID.

Table 6

It can be seen that for the verification trigger command Prov001, when corresponding to different account IDs A, B and C, the corresponding reference vibration parameters are also different, and corresponding to the account ID B, the verification trigger command Prov001 corresponds to different devices Marked A003 and A004, the verification trigger instructions correspond to different reference vibration parameters Stand003 and Stand004 respectively.

Therefore, the server needs to determine the standard information corresponding to the account ID, the device ID, and the verification trigger command. Of course, in order to facilitate the distinction, the server can also determine different verification trigger commands for different account IDs and device IDs. For example, for the table The verification trigger instruction Porv001 in 6 says,

The server may also store the corresponding relationship shown in Figure 7.

Table 7

Then, since for each verification trigger command, the verification trigger command can be different from other verification trigger commands, so the server can also determine the corresponding relationship between each verification trigger command and each reference vibration parameter. The only reference vibration parameter corresponding to the trigger command.

Of course, the above only lists two implementations, and the present application does not specifically limit how to determine the corresponding reference vibration parameter through the verification trigger instruction, as long as the verification trigger instruction can determine the reference vibration parameter corresponding to the account ID and the device ID That's it.

Furthermore, since the metadata is actually in one-to-one correspondence with the account ID, device ID, and the verification trigger instruction, and the reference vibration parameter is also in one-to-one correspondence with the account ID, device ID, and the verification trigger instruction Therefore, the reference vibration parameter can be considered as corresponding to the metadata, so when the server receives the metadata and determines the corresponding reference vibration parameter, the server can judge whether the reference vibration parameter and the metadata Consistent, in order to determine whether the identity verification of the account is passed.

It should be noted that the subject of execution of each step of the method provided in the embodiment of the present application may be the same device, or the method may also be executed by different devices. For example, the execution subject of step S201 and step S202 may be device 1, and the execution subject of step S203 may be device 2; for another example, the execution subject of step S201 may be device 1, and the execution subject of step S202 and step S203 may be device 2 ; etc., that is, the server may be a distributed server composed of multiple devices.

Based on the data storage process shown in FIG. 2 , the embodiment of the present application also provides an identity verification device, as shown in FIG. 7 .

FIG. 7 is a schematic structural diagram of an identity verification device provided in an embodiment of the present application, including:

The receiving module 301 receives the verification trigger instruction sent by the server;

A vibration module 302, performing a vibration operation according to the verification trigger instruction;

A collection module, when the vibration module 302 performs a vibration operation according to the verification trigger instruction, collect metadata generated when performing the vibration operation;

A sending module 303, sending a verification request carrying the metadata and the device identifier of the device to the server, where the verification request is used to request the server to use the The user of the device is authenticated.

The vibration module 302 determines at least one of vibration frequency information, vibration time interval information, and vibration intensity information included in the verification trigger instruction, and according to the vibration frequency information, the vibration time interval information, and the vibration At least one of the intensity information, perform a vibration operation.

When the vibration module 302 performs the vibration operation, the collection module collects the vibration acceleration and/or the vibration angular velocity of the terminal, and uses the vibration acceleration and/or the vibration angular velocity as the Metadata generated when the vibration operates.

In the receiving module 301, the terminal sends status information to the server, and the terminal receives a verification trigger instruction sent by the server, and the verification trigger instruction is sent by the server when the status information is determined to be abnormal.

In another embodiment of the present application, the verification trigger instruction carries an account identifier; when the sending module 303 sends the metadata and the device identifier of the device to the server, it also includes the The verification request of the account identifier carrier of the terminal is sent to the server, and the verification request is used to request the server to verify the identity of the device using the device according to the metadata, the device identifier of the device, and the account identifier. The user is authenticated.

Specifically, the above-mentioned identity verification device as shown in FIG. 7 may be located in a terminal, and the terminal may be a mobile phone, a tablet computer, or other equipment.

Based on the data storage process shown in FIG. 3 , the embodiment of the present application also provides an apparatus for identity verification performed by a terminal, as shown in FIG. 8 .

Fig. 8 is a schematic structural diagram of another identity verification device provided by the embodiment of the present application, including:

The sending module 401 is configured to send a verification trigger instruction to the terminal, where the verification trigger instruction is used to instruct the terminal to perform a vibration operation according to the verification trigger instruction;

The receiving module 402 is configured to receive metadata sent by the terminal and the device identifier of the terminal, where the metadata is collected when the terminal performs the vibration operation;

The determination module 403 determines the reference vibration parameter corresponding to the received device identification of the terminal according to the preset correspondence between the equipment identification and the reference vibration parameter;

The verification module 404 performs identity verification on the user using the terminal according to the reference vibration parameter and the metadata.

The device also includes:

Test module 405, preset the corresponding relationship between the equipment identification and the reference vibration data;

The test module 405 sends at least one test instruction to the terminal, the test instruction is used to instruct the terminal to collect metadata generated when the vibration operation is performed according to the test instruction, the The test instruction includes at least one of vibration frequency information, vibration time interval information, and vibration intensity information, and receiving the metadata and the device identification of the terminal sent by the terminal for each of the test instructions, according to the The metadata generated by the test command is used to determine the reference vibration parameters of the terminal, the reference vibration parameters include vibration acceleration and/or vibration angular velocity, and the relationship between the device identification of the terminal and the determined reference vibration parameters is established. Correspondence between.

The testing module 405, when determining that the amount of the metadata generated by the test instruction reaches a threshold, determines a reference vibration parameter for the terminal according to an average value of the generated metadata, or determines that the test Instructing the average value of the difference between different metadata generated, and when the average value of the difference is smaller than the set threshold value, determine the average value of the metadata as the reference vibration parameter for the terminal.

When the vibration operation parameters contained in the multiple test instructions sent by the sending module 401 to the terminal are different, the test module 405 performs the following operation for the same test instruction: The average value of at least one of the metadata generated by the terminal, using the average value as the reference vibration parameter of the terminal when the test instruction is satisfied, the server obtains the reference vibration corresponding to different test instructions parameters, establishing a correspondence between the device identifier of the terminal and the obtained reference vibration parameters.

The sending module 401, the vibration frequency information, the vibration time interval information and the vibration intensity information contained in the test instruction sent to the terminal are preset, or the vibration frequency information, the The vibration time interval information and the vibration intensity information are randomly generated.

The test module 405, before establishing the corresponding relationship between the device identifier of the terminal and the obtained reference vibration parameter, when obtaining at least one metadata generated by the terminal for the same test instruction, calculate the obtained The sum of the differences between the different metadata, and according to the sum of the differences to determine the stability of the metadata generated by the test instruction, when obtaining the reference vibration parameters corresponding to the different test instructions, according to the different The average value of the metadata generated by the test instructions to determine the degree of discrimination of different test instructions, from the reference vibration parameters corresponding to the different test instructions, the stability is greater than the first condition and the discrimination is selected. The degree is greater than the reference vibration parameter corresponding to the test instruction of the second condition, and the corresponding relationship between the terminal identifier of the terminal device and the selected reference vibration parameter is established.

When the device determines that the device identifier of the terminal corresponds to multiple account identifiers, the sending module 401 and the server send a verification trigger instruction corresponding to the account identifier to the terminal, and the receiving module 402 receives the instruction sent by the terminal. The metadata, the account ID, and the device ID of the terminal, the determining module 403, according to the preset corresponding relationship between the device ID, the account ID, and the reference vibration parameters, determine the received terminal The reference vibration parameters corresponding to the equipment identification.

Specifically, the authentication device as shown in FIG. 7 may be located in a server, and the server may specifically be a device, or may be a system composed of multiple devices, that is, a distributed server.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, systems, or computer program products. Accordingly, the present invention can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

Memory may include non-permanent storage in computer readable media, in the form of random access memory (RAM) and/or nonvolatile memory such as read only memory (ROM) or flash RAM. Memory is an example of computer readable media.

Computer-readable media, including both permanent and non-permanent, removable and non-removable media, can be implemented by any method or technology for storage of information. Information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read only memory (ROM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Flash memory or other memory technology, Compact Disc Read-Only Memory (CD-ROM), Digital Versatile Disc (DVD) or other optical storage, Magnetic tape cartridge, tape magnetic disk storage or other magnetic storage device or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media excludes transitory computer-readable media, such as modulated data signals and carrier waves.

It should also be noted that the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes Other elements not expressly listed, or elements inherent in the process, method, commodity, or apparatus are also included. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element.

Those skilled in the art should understand that the embodiments of the present application may be provided as methods, systems or computer program products. Accordingly, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The above descriptions are only examples of the present application, and are not intended to limit the present application. For those skilled in the art, various modifications and changes may occur in this application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included within the scope of the claims of the present application.

Claims (24)

1. A method for identity verification, characterized in that the method comprises: The terminal receives a verification trigger instruction sent by the server, and the verification trigger instruction is used to instruct the terminal to perform a vibration operation; When the terminal performs the vibration operation according to the verification trigger instruction, collect metadata generated when the vibration operation is performed; The terminal sends a verification request carrying the metadata and the device identifier of the terminal to the server, and the verification request is used to request the server to use the terminal according to the metadata and the device identifier of the terminal. authenticated users. 2. The method according to claim 1, wherein the terminal performs a vibration operation according to the verification trigger instruction, comprising: The terminal determines at least one of vibration frequency information, vibration time interval information, and vibration intensity information contained in the verification trigger instruction; The terminal performs a vibration operation according to at least one of the vibration frequency information, the vibration time interval information, and the vibration intensity information. 3. The method according to claim 1 or 2, wherein collecting metadata generated when performing the vibration operation specifically comprises: When the terminal performs the vibration operation, collect the vibration acceleration and/or vibration angular velocity of the terminal, and use the vibration acceleration and/or the vibration angular velocity as the vibration acceleration and/or the vibration angular velocity generated by the terminal when performing the vibration operation metadata. 4. The method according to claim 1, wherein the terminal receives the verification trigger instruction sent by the server, comprising: The terminal sends status information to the server; The terminal receives a verification trigger instruction sent by the server, and the verification trigger instruction is sent by the server when the status information is determined to be in an abnormal state. 5. The method according to claim 1, wherein when the terminal sends the metadata and the device identifier of the terminal to the server, it also carries the account identifier of the terminal in the The verification request is sent to the server, and the verification request is used to request the server to perform identity verification on the user using the terminal according to the metadata, the device identifier of the terminal, and the account identifier. 6. A method for identity verification, comprising: The server sends a verification trigger instruction to the terminal, where the verification trigger instruction is used to instruct the terminal to perform a vibration operation according to the verification trigger instruction; The server receives the metadata sent by the terminal and the device identifier of the terminal, the metadata is collected when the terminal performs the vibration operation; The server determines the reference vibration parameter corresponding to the received device ID of the terminal according to the preset correspondence between the device ID and the reference vibration parameter; Perform identity verification on the user using the terminal according to the reference vibration parameter and the metadata. 7. The method according to claim 6, wherein the server presets the corresponding relationship between the device identifier and the reference vibration data, comprising: The server sends at least one test instruction to the terminal, the test instruction is used to instruct the terminal to collect metadata generated when the vibration operation is performed according to the test instruction, and the test instruction includes At least one of vibration frequency information, vibration time interval information, and vibration intensity information; The server receives the metadata generated for each of the test instructions sent by the terminal and the device identifier of the terminal; The server determines reference vibration parameters of the terminal according to the metadata generated by the test instruction, where the reference vibration parameters include vibration acceleration and/or vibration angular velocity; The server establishes a correspondence between the device identifier of the terminal and the determined reference vibration parameter. 8. The method according to claim 7, wherein the server determines the reference vibration parameter of the terminal according to the metadata generated by the test instruction, comprising: When the server determines that the amount of the metadata generated by the test instruction reaches a threshold, determine the reference vibration parameter of the terminal according to the average value of the generated metadata; or The server determines an average value of differences between different metadata generated by the test instruction, and when the average value of the differences is less than a set threshold value, determines that the average value is the reference vibration of the terminal parameter. 9. The method according to claim 7, wherein when the parameters for performing the vibration operation contained in the multiple test instructions sent by the server to the terminal are different, the method further comprises: The server performs the following operations for the same test instruction: determining an average value of at least one of the metadata generated by the terminal for the test instruction, using the average value as a reference vibration parameter of the terminal when the test instruction is satisfied; When obtaining the reference vibration parameters corresponding to different test instructions, the server establishes a correspondence between the device identifier of the terminal and the obtained reference vibration parameters. 10. The method according to claim 9, wherein before the server establishes the corresponding relationship between the device identifier of the terminal and the obtained reference vibration parameter, the method further comprises: When the server obtains at least one piece of metadata generated by the terminal for the same test instruction, it calculates the sum of differences between different metadata, and determines the test instruction according to the sum of differences Stability of generated metadata; When the server obtains different reference vibration parameters corresponding to the test instructions, it establishes a corresponding relationship between the device identifier of the terminal and the obtained reference vibration parameters, including: The server determines the degree of differentiation of different test instructions according to the average value of the metadata generated by the different test instructions; The server selects the reference vibration parameters corresponding to the test instructions whose stability is greater than the first condition and the degree of discrimination is greater than the second condition from the obtained reference vibration parameters corresponding to the different test instructions, and establishes the The corresponding relationship between the terminal identifier and the selected reference vibration parameter. 11. The method according to claim 7, wherein the vibration frequency information, the vibration time interval information and the vibration intensity information contained in the test instruction sent by the server to the terminal are preset of; or, The vibration frequency information, the vibration time interval information and the vibration intensity information are randomly generated. 12. The method according to claim 6, wherein the verification trigger instruction carries an account identifier; Determining a reference vibration parameter corresponding to the received device identification of the terminal includes: The server determines the reference vibration parameter corresponding to the received device ID of the terminal according to the preset correspondence between the device ID, the account ID, and the reference vibration parameter. 13. An identity verification device, comprising: The receiving module receives the verification trigger instruction sent by the server; A vibration module, performing a vibration operation according to the verification trigger instruction; A collection module, when the vibration module performs a vibration operation according to the verification trigger instruction, collect metadata generated when performing the vibration operation; A sending module, sending a verification request carrying the metadata and the device identifier of the device to a server, where the verification request is used to request the server to use the device according to the metadata and the device identifier of the device authenticated users. 14. The device according to claim 13, wherein the vibration module determines at least one of vibration frequency information, vibration time interval information, and vibration intensity information contained in the verification trigger instruction, according to the At least one of the vibration frequency information, the vibration time interval information, and the vibration intensity information performs a vibration operation. 15. The device according to claim 13 or 14, wherein when the vibration module performs the vibration operation, the collection module collects the vibration acceleration and/or vibration angular velocity of the terminal, and sends the The vibration acceleration and/or the vibration angular velocity are used as metadata generated by the terminal when performing the vibration operation. 16. The device according to claim 13, wherein in the receiving module, the terminal sends status information to the server, and the terminal receives the verification trigger instruction sent by the server, and the verification trigger instruction is the Sent when the status information is determined to be abnormal. 17. The device according to claim 13, wherein the sending module, when sending the metadata and the device identifier of the device to the server, also carries the account identifier of the terminal or the verification request is sent to the server, and the verification request is used to request the server to perform identity verification on the user using the device according to the metadata, the device identifier of the device, and the account identifier. 18. An identity verification device, comprising: A sending module, sending a verification trigger instruction to the terminal, where the verification trigger instruction is used to instruct the terminal to perform a vibration operation according to the verification trigger instruction; A receiving module, configured to receive metadata sent by the terminal and the device identifier of the terminal, the metadata being collected by the terminal when performing the vibration operation; The determination module determines the reference vibration parameter corresponding to the received device identification of the terminal according to the preset correspondence between the equipment identification and the reference vibration parameter; The authentication module is configured to authenticate the user using the terminal according to the reference vibration parameter and the metadata. 19. The device of claim 18, further comprising: The test module presets the corresponding relationship between equipment identification and reference vibration data; The test module sends at least one test instruction to the terminal, the test instruction is used to instruct the terminal to collect metadata generated when performing the vibration operation according to the test instruction, and the test The instruction includes at least one of vibration frequency information, vibration time interval information, and vibration intensity information, receiving the metadata sent by the terminal for each of the test instructions and the device identification of the terminal, according to the The metadata generated by the test instruction determines the reference vibration parameters of the terminal, the reference vibration parameters include vibration acceleration and/or vibration angular velocity, and establishes a relationship between the device identifier of the terminal and the determined reference vibration parameters corresponding relationship. 20. The device according to claim 19, wherein the test module, when determining that the quantity of the metadata generated by the test instruction reaches a threshold, determines the target value according to the average value of the generated metadata. The reference vibration parameter of the terminal, or determine the average value of the difference between different metadata generated by the test command, and determine the average value when the average value of the difference is smaller than the set threshold value is a reference vibration parameter for the terminal. 21. The device according to claim 19, wherein when the parameters for performing the vibration operation included in the multiple test instructions sent by the sending module to the terminal are different, the test module, for the same test Instructions that perform the following operations: determine an average value of at least one piece of metadata generated by the terminal for the test instruction, and use the average value as a reference vibration parameter of the terminal when the test instruction is satisfied, the When obtaining the reference vibration parameters corresponding to different test instructions, the server establishes a correspondence between the device identifier of the terminal and the obtained reference vibration parameters. 22. The device according to claim 21, wherein the test module, before establishing the corresponding relationship between the equipment identification of the terminal and the obtained reference vibration parameters, obtains the same test instruction When the terminal generates at least one piece of metadata, calculate the sum of differences between the different metadata, and determine the stability of the metadata generated by the test instruction according to the sum of the differences. When referring to the reference vibration parameters corresponding to the test instructions, according to the average value of the metadata generated by the different test instructions, the degree of discrimination of the different test instructions is determined, and the reference vibration corresponding to the different test instructions is obtained. Among the parameters, select a reference vibration parameter corresponding to a test instruction whose stability is greater than the first condition and the degree of discrimination is greater than the second condition, and establish a correspondence between the terminal identifier of the terminal device and the selected reference vibration parameter . 23. The device according to claim 19, wherein the sending module, the vibration frequency information, the vibration time interval information and the vibration intensity information contained in the test instruction sent to the terminal are Preset, or, the vibration frequency information, the vibration time interval information and the vibration intensity information are randomly generated. 24. The device according to claim 18, wherein when the device determines that the device identifier of the terminal corresponds to multiple account identifiers, the sending module and the server send a verification trigger corresponding to the account identifier to the terminal Instructions, the receiving module receives the metadata sent by the terminal, the account ID, and the device ID of the terminal, and the determining module, according to the preset device ID, account ID, and reference vibration parameters The corresponding relationship, and determine the reference vibration parameter corresponding to the received device identifier of the terminal.