IDENTITY AUTHENTICATION METHOD OF AN INTERNET ACCOUNT, IDENTITY AUTHENTICATION DEVICE OF AN INTERNET ACCOUNT AND SERVER

• US 20150186632A1
• Filed: 03/17/2015
• Published: 07/02/2015
• Est. Priority Date: 08/09/2013
• Status: Active Grant

• Current Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Inventors: LIU, Jinxing, XIE, Yuanhui, ZHANG, Dongrui
• Granted Patent: US 9,684,777 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An identity authentication method of an internet account, an identity authentication device of an internet account and a system are provided. The method may includes: receiving an identity authentication request sent by a client device, where the identity authentication request includes account information; acquiring identity authentication information corresponding to the account information, where the identity authentication information is pre-generated based on the account information and includes at least one authentication question and at least two answer options corresponding to the authentication question; sending the identity authentication information to the client device; and receiving, from the client device, answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question, determining whether the answer information meets a preset condition and providing an identity authentication response to the client device according to a determined result.

Claims

1. An identity authentication method of an internet account, comprising:

receiving, by a server comprising a hardware processor, an identity authentication request sent by a client device, wherein the identity authentication request comprises account information;

acquiring, by the server, identity authentication information corresponding to the account information, wherein the identity authentication information is pre-generated based on the account information and comprises at least one authentication question and at least two answer options corresponding to the authentication question;

sending, by the server, the acquired identity authentication information to the client device; and

receiving, from the client device, answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question;

determining whether the received answer information meets a preset condition; and

providing an identity authentication response to the client device according to a determined result.

2. The method according to claim 1, wherein before the acquiring identity authentication information corresponding to the account information, the method further comprises:

acquiring the account information, wherein the account information comprises an identification of the account, attribute information of the account, login information of the account, or communication information of the account; and

generating the identity authentication information corresponding to the acquired account information according to the account information.

3. The method according to claim 1, wherein the identity authentication information comprises m authentication questions and at least two answer options corresponding to each authentication question, wherein m is a positive integer larger than or equal to 2.

4. The method according to claim 3, wherein

the sending the acquired identity authentication information to the client device comprises:

sending all m authentication questions and at least two answer options corresponding to each authentication question to the client device in one time; and

the receiving, from the client device, answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question;

determining whether the received answer information meets the preset condition; and

providing an identity authentication response to the client device according to a determined result comprises;

receiving the answer information corresponding to the authentication question from the client device, wherein the answer information comprises the chosen answers for the m authentication questions;

acquiring correct answer information, wherein the correct answer information comprises a preset correct answer corresponding to each authentication question;

determining whether each of the chosen answers conforms to the corresponding preset correct answer;

counting the times that the chosen answer conforms to the preset correct answer and calculating an answer accurate ratio of the identity authentication information;

determining whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio;

providing a response for indicating a successful identity authentication to the client device, in the case that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

providing a response for indicating a failure identity authentication to the client device, in the case that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio.

5. The method according to claim 3, wherein the sending the acquired identity authentication information to the client device;

receiving, from the client device, answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question;

determining whether the received answer information meets the preset condition; and

providing an identity authentication response to the client device according to the determining result comprise;

sending to the client device an n-th authentication question in the m authentication questions and at least two answer options corresponding to the n-th authentication question, wherein n is a positive integer less than or equal to m;

receiving answer information corresponding to the n-th authentication question from the client device;

acquiring preset correct answer information corresponding to the n-th authentication question;

determining whether the received answer information conforms to the preset correct answer information;

in the case that the received answer information conforms to the preset correct answer information, calculating an answer accurate ratio of the identity authentication information;

determining whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio;

providing a response for indicating a successful identity-authentication to the client device in the case that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

providing a response for indicating a failure identity authentication to the client device in the case that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio; and

in the case that the received answer information does not conform to the preset correct answer information, determining whether n equals to m;

performing an operation of n=n+1 and the step of sending to the client device an n-th authentication question in the m authentication questions and the at least two answer options corresponding to the n-th authentication question in the case that n does not equal to m; and

providing a response for indicating a failure identity authentication to the client device if n equals to m.

6. The method according to claim 2, wherein after the generating the identity authentication information corresponding to the account information according to the acquired account information, the method comprises:

storing the generated identity authentication information according to the identification of the account.

7. The method according to claim 6, wherein the acquiring the identity authentication information corresponding to the account information comprises:

searching for the identity authentication information corresponding to the account information from the stored identity authentication information according to the identification of the account; and

acquiring at least one authentication question and at least two answer options corresponding to the authentication question from the searched identity authentication information corresponding to the account information.

8. An identity authentication device of an internet account, comprising:

an identity authentication request receiving module configured to receive an identity authentication request sent by a client device, wherein the identity authentication request comprises account information;

an authentication question acquisition module configured to acquire identity authentication information corresponding to the account information, wherein the identity authentication information is pre-generated based on the account information and comprises at least one authentication question and at least two answer options corresponding to the authentication question;

an authentication question sending module configured to send the acquired identity authentication information to the client device; and

an authentication module configured to receive from the client device answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question, determine whether the received answer information meets a preset condition, and provide an identity authentication response to the client device according to a determined result.

9. The device according to claim 8, further comprising:

an account information acquisition module configured to acquire the account information, wherein the account information comprises an identification of the account, attribute information of the account, login information of the account, or communication information of the account; and

an authentication information generation module configured to generate the identity authentication information corresponding to the acquired account information according to the account information.

10. The device according to claim 8, wherein the identity authentication information comprises m authentication questions and at least two answer options corresponding to each authentication question, wherein m is a positive integer larger than or equal to 2.

11. The device according to claim 10, wherein:

the authentication question sending module comprises;

a first authentication question sending sub-module configured to send to the client device the m authentication questions in one time and the at least two answer options corresponding to each authentication question; and

the authentication module comprises;

a first user answer receiving unit configured to receive the answer information corresponding to the authentication questions from the client device, wherein the answer information comprises the chosen answers for the m authentication questions;

a first answer information acquisition unit configured to acquire correct answer information, wherein the correct answer information comprises a preset correct answer corresponding to each authentication question;

a first answer determining unit configured to determine whether each chosen answer conforms to the corresponding preset correct answer;

a first calculation unit configured to count the times that the chosen answer conforms to the corresponding preset correct answer, and calculate an answer accurate ratio of the identity authentication information;

an accurate ratio determining unit configured to determine whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio; and

a response unit configured to provide a response for indicating a successful identity authentication to the client device, in the case that the accurate ratio determining unit determines that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

provide a response for indicating a failure identity authentication to the client device, in the case that the accurate ratio determining unit determines that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio.

12. The device according to claim 10, wherein:

the authentication question sending module comprises;

a second authentication question sending sub-module configured to send to the client device an n-th authentication question in the m authentication questions and at least two answer options corresponding to the n-th authentication question, wherein n is a positive integer less than or equal to m; and

the authentication module comprises;

a second user answer receiving unit configured to receive answer information corresponding to the n-th authentication question from the client device;

a second answer information acquisition unit configured to acquire preset correct answer information corresponding to the n-th authentication question;

a second answer determining unit configured to determine whether the received answer information conforms to the preset correct answer information;

a second calculation unit configured to in the case that the received answer information conforms to the preset correct answer information, calculate an answer accurate ratio of the identity authentication information;

determine whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio;

provide a response for indicating a successful identity authentication to the client device in the case that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

provide a response for indicating a failure identity authentication to the client device in the case that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio; and

a counting-determining unit configured to in the case that the received answer information does not conform to the preset correct answer information, determine whether n equals to m;

perform an operation of n=n+1 and instruct the second authentication question sending sub-module to send the n-th authentication question in the m authentication questions and at least two answer options corresponding to the n-th authentication question to the client device in the case that n does not equal to m; and

provide the response for indicating a failure identity authentication to the client device in the case that n equals to m.

13. The device according to claim 9, further comprising:

a storage module configured to store the generated identity authentication information according to the identification of the account.

14. The device according to claim 13, wherein the identity authentication request sent by the client device comprises the identification of the account;

the authentication question acquisition module comprises;

a searching unit configured to search for the identity authentication information corresponding to the account information from the stored identity authentication information according to the identification of the account; and

an acquisition unit configured to acquire at least one authentication question and at least two answer options corresponding to the authentication question from the searched identity authentication information corresponding to the account information.

15. A server, comprising an identity authentication device of an internet account, wherein the identity authentication device of an internet account comprises:

an identity authentication request receiving module configured to receive an identity authentication request sent by a client device, wherein the identity authentication request comprises account information;

an authentication question acquisition module configured to acquire identity authentication information corresponding to the account information, wherein the identity authentication information is pre-generated based on the account information and comprises at least one authentication question and at least two answer options corresponding to the authentication question;

an authentication question sending module configured to send the acquired identity authentication information to the client device; and

an authentication module configured to receive from the client device answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question, determine whether the received answer information meets a preset condition, and provide an identity authentication response to the client device according to a determined result.

16. The device according to claim 15, further comprising:

an account information acquisition module configured to acquire the account information, wherein the account information comprises an identification of the account, attribute information of the account, login information of the account, or communication information of the account; and

an authentication information generation module configured to generate the identity authentication information corresponding to the acquired account information according to the account information.

17. The device according to claim 15, wherein the identity authentication information comprises m authentication questions and at least two answer options corresponding to each authentication question, wherein m is a positive integer larger than or equal to 2.

18. The device according to claim 17, wherein:

the authentication question sending module comprises;

a first authentication question sending sub-module configured to send to the client device the m authentication questions in one time and the at least two answer options corresponding to each authentication question; and

the authentication module comprises;

a first user answer receiving unit configured to receive the answer information corresponding to the authentication questions from the client device, wherein the answer information comprises the chosen answers for the m authentication questions;

a first answer information acquisition unit configured to acquire correct answer information, wherein the correct answer information comprises a preset correct answer corresponding to each authentication question;

a first answer determining unit configured to determine whether each chosen answer conforms to the corresponding preset correct answer;

a first calculation unit configured to count the times that the chosen answer conforms to the corresponding preset correct answer, and calculate an answer accurate ratio of the identity authentication information;

an accurate ratio determining unit configured to determine whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio; and

a response unit configured to provide a response for indicating a successful identity authentication to the client device, in the case that the accurate ratio determining unit determines that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

provide a response for indicating a failure identity authentication to the client device, in the case that the accurate ratio determining unit determines that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio.

19. The device according to claim 17, wherein:

the authentication question sending module comprises;

a second authentication question sending sub-module configured to send to the client device an n-th authentication question in the m authentication questions and at least two answer options corresponding to the n-th authentication question, wherein n is a positive integer less than or equal to m; and

the authentication module comprises;

a second user answer receiving unit configured to receive answer information corresponding to the n-th authentication question from the client device;

a second answer information acquisition unit configured to acquire preset correct answer information corresponding to the n-th authentication question;

a second answer determining unit configured to determine whether the received answer information conforms to the preset correct answer information;

a second calculation unit configured to in the case that the received answer information conforms to the preset correct answer information, calculate an answer accurate ratio of the identity authentication information;

determine whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio;

provide a response for indicating a successful identity authentication to the client device in the case that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

provide a response for indicating a failure identity authentication to the client device in the case that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio; and

a counting-determining unit configured to in the case that the received answer information does not conform to the preset correct answer information, determine whether n equals to m;

perform an operation of n=n+1 and instruct the second authentication question sending sub-module to send the n-th authentication question in the m authentication questions and at least two answer options corresponding to the n-th authentication question to the client device in the case that n does not equal to m; and

provide the response for indicating a failure identity authentication to the client device in the case that n equals to m.

20. The device according to claim 16, further comprising:

a storage module configured to store the generated identity authentication information according to the identification of the account.