Identity authentication method of an internet account, identity authentication device of an internet account and server

• US 9,684,777 B2
• Filed: 03/17/2015
• Issued: 06/20/2017
• Est. Priority Date: 08/09/2013
• Status: Active Grant

• Current Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Inventors: Liu, Jinxing, Xie, Yuanhui, Zhang, Dongrui
• Primary Examiner(s): LWIN, MAUNG T
• Application Number:
  US14/660,579
• Publication Number:
  US 20150186632A1
• Time in Patent Office: 826 Days
• Field of Search: None
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An identity authentication method of an internet account, an identity authentication device of an internet account and a system are provided. The method may includes: receiving an identity authentication request sent by a client device, where the identity authentication request includes account information; acquiring identity authentication information corresponding to the account information, where the identity authentication information is pre-generated based on the account information and includes at least one authentication question and at least two answer options corresponding to the authentication question; sending the identity authentication information to the client device; and receiving, from the client device, answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question, determining whether the answer information meets a preset condition and providing an identity authentication response to the client device according to a determined result.

Claims

1. An identity authentication method of an internet account, comprising:

receiving, by a server comprising a hardware processor, an identity authentication request sent by a client device, wherein the identity authentication request comprises account information;

acquiring, by the server, identity authentication information corresponding to the account information,

wherein the identity authentication information is pre-generated based on the account information and comprises at least one authentication question and at least two answer options corresponding to the authentication question, and

wherein the account information comprises a priority level of an account, and the number of the authentication questions is set based on the priority level of the account;

sending, by the server, the acquired identity authentication information to the client device;

receiving, from the client device, answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question;

determining whether the received answer information meets a preset condition; and

determining, by the server, that identity authentication of the internet account is successful, when the received answer information meets the preset condition; and

sending an identity authentication response for indicating successful identity authentication to the client device.

2. The method according to claim 1, wherein before the acquiring identity authentication information corresponding to the account information, the method further comprises:

acquiring the account information, wherein the account information comprises an identification of the account, attribute information of the account, login information of the account, or communication information of the account; and

generating the identity authentication information corresponding to the acquired account information according to the account information.

3. The method according to claim 2, wherein after the generating the identity authentication information corresponding to the account information according to the acquired account information, the method comprises:

storing the generated identity authentication information according to the identification of the account.

4. The method according to claim 3, wherein the acquiring the identity authentication information corresponding to the account information comprises:

searching for the identity authentication information corresponding to the account information from the stored identity authentication information according to the identification of the account; and

acquiring at least one authentication question and at least two answer options corresponding to the authentication question from the searched identity authentication information corresponding to the account information.

5. The method according to claim 1, wherein the identity authentication information comprises m authentication questions and at least two answer options corresponding to each authentication question, wherein m is a positive integer larger than or equal to 2.

6. The method according to claim 5, wherein

the sending the acquired identity authentication information to the client device comprises:

sending all m authentication questions and at least two answer options corresponding to each authentication question to the client device in one time; and

the receiving, from the client device, answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question;

determining whether the received answer information meets the preset condition; and

providing an identity authentication response to the client device according to a determined result comprises;

receiving the answer information corresponding to the authentication question from the client device, wherein the answer information comprises the chosen answers for the m authentication questions;

acquiring correct answer information, wherein the correct answer information comprises a preset correct answer corresponding to each authentication question;

determining whether each of the chosen answers conforms to the corresponding preset correct answer;

counting the times that the chosen answer conforms to the preset correct answer and calculating an answer accurate ratio of the identity authentication information;

determining whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio;

providing a response for indicating a successful identity authentication to the client device, in the case that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

providing a response for indicating a failure identity authentication to the client device, in the case that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio.

7. The method according to claim 5, wherein the sending the acquired identity authentication information to the client device;

receiving, from the client device, answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question;

determining whether the received answer information meets the preset condition; and

providing an identity authentication response to the client device according to the determining result comprise;

sending to the client device an n-th authentication question in the m authentication questions and at least two answer options corresponding to the n-th authentication question, wherein n is a positive integer less than or equal to m;

receiving answer information corresponding to the n-th authentication question from the client device;

acquiring preset correct answer information corresponding to the n-th authentication question;

determining whether the received answer information conforms to the preset correct answer information;

in the case that the received answer information conforms to the preset correct answer information, calculating an answer accurate ratio of the identity authentication information;

determining whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio;

providing a response for indicating a successful identity-authentication to the client device in the case that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

providing a response for indicating a failure identity authentication to the client device in the case that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio; and

in the case that the received answer information does not conform to the preset correct answer information, determining whether n equals to m;

performing an operation of n=n 1 and the step of sending to the client device an n-th authentication question in the m authentication questions and the at least two answer options corresponding to the n-th authentication question in the case that n does not equal to m; and

providing a response for indicating a failure identity authentication to the client device if n equals to m.

8. An identity authentication device of an internet account, comprising:

a processor and

a memory for storing a set of program codes, wherein the processor performs the set of program codes to

receive an identity authentication request sent by a client device, wherein the identity authentication request comprises account information;

acquire identity authentication information corresponding to the account information,

wherein the identity authentication information is pre-generated based on the account information and comprises at least one authentication question and at least two answer options corresponding to the authentication question, and

wherein the account information comprises a priority level of an account, and the number of the authentication questions is set based on the priority level of the account;

send the acquired identity authentication information to the client device;

receive from the client device answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question, determine whether the received answer information meets a preset condition; and

determine that identity authentication of the internet account is successful, when the received answer information meets the preset condition; and

send an identity authentication response for indicating successful identity authentication to the client device.

9. The device according to claim 8, wherein the processor performs the set of program codes further to

acquire the account information, wherein the account information comprises an identification of the account, attribute information of the account, login information of the account, or communication information of the account;

and

generate the identity authentication information corresponding to the acquired account information according to the account information.

10. The device according to claim 9, wherein the processor performs the set of program codes further to

store the generated identity authentication information according to the identification of the account.

11. The device according to claim 10, wherein the identity authentication request sent by the client device comprises the identification of the account;

and wherein the processor performs the set of program codes to

search for the identity authentication information corresponding to the account information from the stored identity authentication information according to the identification of the account; and

acquire at least one authentication question and at least two answer options corresponding to the authentication question from the searched identity authentication information corresponding to the account information.

12. The device according to claim 8, wherein the identity authentication information comprises m authentication questions and at least two answer options corresponding to each authentication question, wherein m is a positive integer larger than or equal to 2.

13. The device according to claim 12, wherein the processor performs the set of program codes further to

send to the client device the m authentication questions in one time and the at least two answer options corresponding to each authentication question;

receive the answer information corresponding to the authentication questions from the client device, wherein the answer information comprises the chosen answers for the m authentication questions;

acquire correct answer information, wherein the correct answer information comprises a preset correct answer corresponding to each authentication question;

determine whether each chosen answer conforms to the corresponding preset correct answer;

count the times that the chosen answer conforms to the corresponding preset correct answer, and calculate an answer accurate ratio of the identity authentication information;

determine whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio; and

provide a response for indicating a successful identity authentication to the client device, in the case that the accurate ratio determining unit determines that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

provide a response for indicating a failure identity authentication to the client device, in the case that the accurate ratio determining unit determines that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio.

14. The device according to claim 12, wherein the processor performs the set of program codes to

send to the client device an n-th authentication question in the m authentication questions and at least two answer options corresponding to the n-th authentication question, wherein n is a positive integer less than or equal to m;

receive answer information corresponding to the n-th authentication question from the client device;

acquire preset correct answer information corresponding to the n-th authentication question;

determine whether the received answer information conforms to the preset correct answer information;

in the case that the received answer information conforms to the preset correct answer information, calculate an answer accurate ratio of the identity authentication information;

determine whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio;

provide a response for indicating a successful identity authentication to the client device in the case that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

provide a response for indicating a failure identity authentication to the client device in the case that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio; and

in the case that the received answer information does not conform to the preset correct answer information, determine whether n equals to m;

perform an operation of n=n 1 and instruct the second authentication question sending sub-module to send the n-th authentication question in the m authentication questions and at least two answer options corresponding to the n-th authentication question to the client device in the case that n does not equal to m; and

provide the response for indicating a failure identity authentication to the client device in the case that n equals to m.

15. A server, comprising an identity authentication device of an internet account, wherein the identity authentication device of an internet account comprises:

a processor and a memory for storing a set of program codes, wherein the processor performs the set of program codes to

receive an identity authentication request sent by a client device, wherein the identity authentication request comprises account information;

acquire identity authentication information corresponding to the account information,

wherein the identity authentication information is pre-generated based on the account information and comprises at least one authentication question and at least two answer options corresponding to the authentication question, and

wherein the account information comprises a priority level of an account, and the number of the authentication questions is set based on the priority level of the account;

send the acquired identity authentication information to the client device;

receive from the client device answer information obtained by choosing an answer from the at least two answer options corresponding to the authentication question, determine whether the received answer information meets a preset condition; and

determine that identity authentication of the internet account is successful, when the received answer information meets the preset condition; and

send an identity authentication response for indicating successful identity authentication to the client device.

16. The server according to claim 15, wherein the processor performs the set of program further codes to

acquire the account information, wherein the account information comprises an identification of the account, attribute information of the account, login information of the account, or communication information of the account;

and

generate the identity authentication information corresponding to the acquired account information according to the account information.

17. The server according to claim 16, wherein the processor performs the set of program codes further to

store the generated identity authentication information according to the identification of the account.

18. The server according to claim 15, wherein the identity authentication information comprises m authentication questions and at least two answer options corresponding to each authentication question, wherein m is a positive integer larger than or equal to 2.

19. The server according to claim 18, wherein the processor performs the set of program codes further to

send to the client device the m authentication questions in one time and the at least two answer options corresponding to each authentication question;

receive the answer information corresponding to the authentication questions from the client device, wherein the answer information comprises the chosen answers for the m authentication questions;

acquire correct answer information, wherein the correct answer information comprises a preset correct answer corresponding to each authentication question;

determine whether each chosen answer conforms to the corresponding preset correct answer;

count the times that the chosen answer conforms to the corresponding preset correct answer, and calculate an answer accurate ratio of the identity authentication information;

determine whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio; and

provide a response for indicating a successful identity authentication to the client device, in the case that the accurate ratio determining unit determines that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

provide a response for indicating a failure identity authentication to the client device, in the case that the accurate ratio determining unit determines that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio.

20. The server according to claim 18, wherein the processor performs the set of program codes to

send to the client device an n-th authentication question in the m authentication questions and at least two answer options corresponding to the n-th authentication question, wherein n is a positive integer less than or equal to m;

receive answer information corresponding to the n-th authentication question from the client device;

acquire preset correct answer information corresponding to the n-th authentication question;

determine whether the received answer information conforms to the preset correct answer information;

in the case that the received answer information conforms to the preset correct answer information, calculate an answer accurate ratio of the identity authentication information;

determine whether the answer accurate ratio of the identity authentication information is larger than or equal to a preset answer accurate ratio;

provide a response for indicating a successful identity authentication to the client device in the case that the answer accurate ratio of the identity authentication information is larger than or equal to the preset answer accurate ratio; and

provide a response for indicating a failure identity authentication to the client device in the case that the answer accurate ratio of the identity authentication information is smaller than the preset answer accurate ratio; and

in the case that the received answer information does not conform to the preset correct answer information, determine whether n equals to m;

perform an operation of n=n 1 and instruct the second authentication question sending sub-module to send the n-th authentication question in the m authentication questions and at least two answer options corresponding to the n-th authentication question to the client device in the case that n does not equal to m; and

provide the response for indicating a failure identity authentication to the client device in the case that n equals to m.