Method and device for identity authentication

• US 10,795,978 B2
• Filed: 02/28/2020
• Issued: 10/06/2020
• Est. Priority Date: 08/07/2014
• Status: Active Grant

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: Yin, Yan
• Primary Examiner(s): Giddins, Nelson S.
• Application Number:
  US16/804,768
• Publication Number:
  US 20200201961A1
• Time in Patent Office: 221 Days
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/065 Continuous authentication

Abstract

Disclosed in the application are a method and device for identity authentication. The method comprises: when the terminal is in the specified stress state, action attribute information of the terminal is collected; the action attribute information is processed by matching with preset sample information; if the action attribute information is matched with the sample information, the authentication is successful, and if the action attribute information is not matched with the sample information, the authentication is failed. By the above method, the terminal can automatically collect the corresponding action attribute information in the process that users perform certain specified operation, and then match and compare with the preset standard information to authenticate the identity of the current user using the terminal. Therefore, the terminal can collect the action attribute information and set up or authenticate it without entering a specific acquisition mode in the process that the user operates and uses the terminal. It avoids interfering with the use of users, and also effectively improves the convenience of operation.

Claims

1. A method, comprising:

collecting a plurality of actions of a user performed on a terminal, wherein the plurality of actions correspond to a specified operation;

determining a plurality of standard value ranges corresponding to the specified operation, wherein the plurality of standard value ranges comprise a standard motion value range and a standard pressure value range;

determining whether a threshold percentage of the plurality of actions falls within the plurality of standard value ranges, by;

determining motion information of the terminal based on the plurality of actions of the user;

determining pressure information of a plurality of taps based on the plurality of actions of the user;

determining whether the threshold percentage of the motion information of the terminal falls within the standard motion value range;

determining whether the threshold percentage of the pressure information falls within the standard pressure value range;

if determining that a threshold percentage of the plurality of actions falls within the plurality of standard value ranges, performing the specified operation corresponding to the plurality of standard value ranges; and

if determining that a threshold percentage of the plurality of actions does not fall within the plurality of standard value ranges, refusing to perform the specified operation corresponding to the plurality of standard value ranges.

2. The method according to claim 1, wherein determining whether a threshold percentage of the plurality of actions falls within the plurality of standard value ranges comprises:

determining acceleration information based on the plurality of actions of the user;

determining whether a threshold percentage of the acceleration information falls within a standard acceleration value range.

3. The method according to claim 1, wherein collecting the plurality of actions of the user performed on the terminal comprises:

collecting a predetermined number of actions as the plurality of actions of the user.

4. The method according to claim 1, wherein the specified operation corresponding to the plurality of standard value ranges is determined based on the plurality of actions of a user.

5. The method according to claim 4, wherein the plurality of actions of the user comprise sliding to unlock a lock-screen interface of the terminal;

and

wherein the specified operation corresponding to the plurality of standard value ranges comprises unlocking the terminal.

6. The method according to claim 1, wherein the specified operation corresponding to the plurality of standard value ranges comprises answering a call on the terminal.

7. The method according to claim 1, wherein the specified operation corresponding to the plurality of standard value ranges comprises starting an application on the terminal.

8. The method according to claim 1, wherein the specified operation corresponding to the plurality of standard value ranges comprises authenticating the user.

9. A system, comprising one or more processors and one or more non-transitory computer-readable memories coupled to the one or more processors and configured with instructions executable by the one or more processors to cause the system to perform operations comprising:

collecting a plurality of actions of a user performed on a terminal, wherein the plurality of actions correspond to a specified operation;

determining a plurality of standard value ranges corresponding to the specified operation, wherein the plurality of standard value ranges comprise a standard motion value range and a standard pressure value range;

determining whether a threshold percentage of the plurality of actions falls within the plurality of standard value ranges, by;

determining motion information of the terminal based on the plurality of actions of the user;

determining pressure information of a plurality of taps based on the plurality of actions of the user;

determining whether the threshold percentage of the motion information of the terminal falls within the standard motion value range;

determining whether the threshold percentage of the pressure information falls within the standard pressure value range;

if determining that a threshold percentage of the plurality of actions falls within the plurality of standard value ranges, performing the specified operation corresponding to the plurality of standard value ranges; and

in response to if determining that a threshold percentage of the plurality of actions does not fall within the plurality of standard value ranges, refusing to perform the specified operation corresponding to the plurality of standard value ranges.

10. The system of claim 9, wherein determining whether a threshold percentage of the plurality of actions falls within the plurality of standard value ranges comprises:

determining acceleration information based on the plurality of actions of the user;

determining whether a threshold percentage of the acceleration information falls within a standard acceleration value range.

11. The system of claim 9, wherein collecting the plurality of actions of the user performed on the terminal comprises:

collecting a predetermined number of actions as the plurality of actions of the user.

12. The system of claim 9, wherein the specified operation corresponding to the plurality of standard value ranges is determined based on the plurality of actions of a user.

13. The system of claim 12, wherein the plurality of actions of the user comprise sliding to unlock a lock-screen interface of the terminal;

and

wherein the specified operation corresponding to the plurality of standard value ranges comprises unlocking the terminal.

14. The system of claim 9, wherein the specified operation corresponding to the plurality of standard value ranges comprises answering a call on the terminal.

15. A non-transitory computer-readable storage medium configured with instructions executable by one or more processors to cause the one or more processors to perform operations comprising:

collecting a plurality of actions of a user performed on a terminal, wherein the plurality of actions correspond to a specified operation;

determining a plurality of standard value ranges corresponding to the specified operation, wherein the plurality of standard value ranges comprise a standard motion value range and a standard pressure value range;

determining whether a threshold percentage of the plurality of actions falls within the plurality of standard value ranges, by;

determining motion information of the terminal based on the plurality of actions of the user;

determining pressure information of a plurality of taps based on the plurality of actions of the user;

determining whether the threshold percentage of the motion information of the terminal falls within the standard motion value range;

determining whether the threshold percentage of the pressure information falls within the standard pressure value range;

if determining that a threshold percentage of the plurality of actions falls within the plurality of standard value ranges, performing the specified operation corresponding to the plurality of standard value ranges; and

if determining that a threshold percentage of the plurality of actions does not fall within the plurality of standard value ranges, refusing to perform the specified operation corresponding to the plurality of standard value ranges.

16. The non-transitory computer-readable storage medium of claim 15, wherein determining whether a threshold percentage of the plurality of actions falls within the plurality of standard value ranges comprises:

determining acceleration information based on the plurality of actions of the user;

determining whether a threshold percentage of the acceleration information falls within a standard acceleration value range.

17. The non-transitory computer-readable storage medium of claim 15, wherein collecting the plurality of actions of the user performed on the terminal comprises:

collecting a predetermined number of actions as the plurality of actions of the user.