User identity verification method and system, and verification server

Patent metadata

Field	Value
Publication number	US-10375048-B2
Application number	US-201615220826-A
Country	US
Kind code	B2
Filing date	Jul 27, 2016
Priority date	Jul 27, 2015
Publication date	Aug 6, 2019
Grant date	Aug 6, 2019

Abstract

A user identity verification method is disclosed. The method includes receiving an identity verification request sent by a user through a client terminal; determining a user communication number according to the identity verification request and generating a corresponding temporary communication number for the user communication number; recording the user communication number and the temporary communication number as first data; returning the temporary communication number to the client terminal; receiving a call request initiated by the user to the temporary communication number; determining a respective user communication number and a respective temporary communication number corresponding to the call request as second data; verifying whether the first data matches with the second data; and returning a verification result to the client terminal. The method can improve security and reliability of identity verification, reduce a user's waiting time, and enhance user experience.

First claim

The invention claimed is:

1. A method implemented by one or more computing devices, the method comprising:
receiving an identity verification request sent from a client terminal of a user;
determining a first communication number according to the identity verification request;
generating a temporary communication number for the first communication number;
recording the first communication number and the temporary communication number as first data;
returning the temporary communication number to the client terminal;
receiving a call request to the temporary communication number, the call request associated with a second communication number;
determining the second communication number and the temporary communication number as second data;
verifying that the first data matches with the second data; and
selecting a content of a prompt audio message to be played according to a security level of an identity verification corresponding to the identity verification request, the selecting including:
in response to determining that the security level of the identity verification is a first level, instructing to play a default prompt audio message and determining that the identity verification succeeds after the default prompt audio message is played;
in response to determining that the security level of the identity verification is a second level, instructing to press a corresponding key; and
in response to determining that the security level of the identity verification is a third level, instructing to input a corresponding numerical string or character string.

2. The method of claim 1 , further comprising:
returning a verification result.

3. The method of claim 1 , further comprising:
determining whether a time difference between a time at which the call request is received and a time at which the first data is generated is less than a preset time; and
determining that the identity verification of the user fails in response to determining that the time difference is greater than or equal to the preset time.

4. The method of claim 1 , further comprising determining that the identity verification fails in response to determining that the first data does not match with the second data.

5. The method of claim 1 , further comprising:
receiving information inputted by the user according to the prompt audio message; and
verifying whether the inputted information is consistent with the content of the prompt audio message.

6. The method of claim 1 , wherein: the identity verification request is received in response to an event of a registration of a new account by the user; and the identity verification request includes the first communication number that is inputted by the user.

7. The method of claim 1 , wherein:
the identity verification request comprises account information of the user; and
the determining the first communication number comprises determining a corresponding communication number according to the account information of the user.

8. The method of claim 1 , further comprising causing the client terminal to display the temporary communication number via a two-dimensional code, the two-dimensional code enabling the call request to the temporary communication number upon being scanned.

9. A server comprising:
one or more processors; and
memory storing computer-readable instructions that, when executed by the one or more processors, cause the one or more processors to perform acts comprising:
receiving an identity verification request from a first client terminal of a user;
determining a first communication number according to the identity verification request;
generating a temporary communication number for the first communication number;
recording the first communication number and the temporary communication number as first data;
returning the temporary communication number to the first client terminal;
receiving a call request to the temporary communication number from a second client terminal;
determining a second communication number corresponding to the call request and the temporary communication number as second data;
verifying that the first data matches with the second data; and
selecting a content of a prompt audio message to be played at the second client terminal according to a security level of an identity verification corresponding to the identity verification request, the selecting including:
in response to determining that the security level of the identity verification is a first level, instructing to play a default prompt audio message and determining that the identity verification succeeds after the default prompt audio message is played;
in response to determining that the security level of the identity verification is a second level, instructing to press a corresponding key; and
in response to determining that the security level of the identity verification is a third level, instructing to input a corresponding numerical string or character string.

10. The server of claim 9 , wherein the acts further comprise receiving the identity verification request in response to an event of a registration of a new account by the user, the identity verification request including the first communication number that is inputted by the user during the registration.

11. The server of claim 9 , wherein:
the identity verification request comprises account information of the user; and
the determining the first communication number according to the identity verification request comprises determining the first communication number based at least in part on the account information of the user.

12. The server of claim 9 , wherein the acts further comprise:
determining whether a time difference between a time at which the call request is received and a time at which the first data is generated is less than a preset time; and
determining that the identity verification of the user fails in response to determining that the time difference is greater than or equal to the preset time.

13. The server of claim 9 , wherein the acts further comprise determining that the identity verification of the user fails in response to determining that the first data does not match with the second data.

14. The server of claim 9 , wherein the acts further comprise:
receiving information inputted by the user according to the prompt audio message from the second client terminal; and
determining whether the inputted information is consistent with the content of the prompt audio message.

15. The server of claim 9 , wherein the acts further comprise returning the temporary communication number in a form of a two-dimensional code, the two-dimensional code initiating the call request to the temporary communication number upon being scanned.

16. The server of claim 9 , wherein the first client terminal is the second client terminal.

17. The server of claim 9 , wherein the first client terminal is different from the second client terminal.

18. One or more computer-readable media storing computer-readable instructions that, when executed by one or more processors, cause the one or more processors to perform acts comprising:
receiving an identity verification request sent from a client terminal of a user;
determining a first communication number according to the identity verification request;
generating a temporary communication number for the first communication number;
recording the first communication number and the temporary communication number as first data;
returning the temporary communication number to the client term

Assignees

• Alibaba Group Holding Ltd

Inventors

• Wang Xiaofeng
• Dong Hui
• Yu Yang
• Xie Daocheng
• Wan Weiqin
• Li Lizhong

Classifications

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/18

  using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215) · CPC title

• G06F21/313

  using a call-back technique via a telephone network · CPC title