Identity verification method and device

Patent metadata

Field	Value
Publication number	US-9998458-B2
Application number	US-201514614096-A
Country	US
Kind code	B2
Filing date	Feb 4, 2015
Priority date	Dec 31, 2013
Publication date	Jun 12, 2018
Grant date	Jun 12, 2018

Abstract

A method and a device of identity verification are disclosed. The method includes: receiving by a server, an identity verification request sent from a terminal, where the identity verification request contains a specified user identifier; based on a user relationship chain of the specified user identifier, obtaining a verified user information set which includes user's information on the user relationship chain; providing the verified user information set to the terminal in order to subsequently receive returned selected user's information; determining whether the received selected users information from the terminal matches the user's information on the user relationship chain; if the selected user's information received matches the user's information on the user relationship chain, confirming that the identity verification being successful. To pass the identity verification, the only requirement is that the selected user's information received from the terminal matches the user's information on the user relationship chain.

First claim

What is claimed is:

1. An identity verification method, comprising:
receiving by a server, an identity verification request sent from a terminal, where the identity verification request contains a specified user identifier;
based on a user relationship chain of the specified user identifier, obtaining by the server, a verified user information set which includes information of a plurality of other users for forming the user relationship chain after subsequent selection, wherein the information of the plurality of other users in the verified user information set contains a first preset number of plurality of portraits and names of the plurality of other users who belong to the user relationship chain and a second preset number of plurality of portraits and names of the plurality of other users who do not belong to the user relationship chain;
providing by the server, the verified user information set to the terminal in order to subsequently receive selected user's information returned by the terminal, wherein the selected user's information received from the terminal comprises information of corresponding connected drawn lines at the display of the terminal, indicating selected respective plurality of matched pairs of each and every respective portrait from the plurality of portraits to correspond to each and every respective name from the names of the plurality of other users through the connected drawn lines; and
determining by the server, whether the connected drawn lines of the selected respective plurality of matched pairs in the received selected user's information from the terminal matches the verified user's information on the user relationship chain;
if the selected user's information received from the terminal matches the verified user's information on the user relationship chain, confirming by the server, that the identity verification request sent from the terminal being successful, and
if the selected user's information does not match the verified user's information on the user relationship chain, prompting a re-verification by obtaining a newly verified user's information set which is different from previously obtained verified user's information, wherein the newly verified user's information set consists of different respective plurality of matched pairs of each and every respective different portrait to correspond to each and every respective different name on the user relationship chain.

2. The method according to claim 1 , wherein the determining of whether the selected user's information received from the terminal matches the verified user's information on the user relationship chain comprises:
determining by the server, whether the selected portrait and the corresponding selected user name pertain to a same user, and whether the same user belongs to the user relationship chain; and
if the selected portrait and the corresponding selected user name pertains to the same user and the same user belongs to the user relationship chain: confirming by the server that the selected user's information received from the terminal matches the verified user's information on the user relationship chain;
if the selected portrait and the corresponding selected user name do not pertain to the same user, yet the selected user name belongs to the user relationship chain: confirming by the server that the selected user's information does not match the verified user's information on the user relationship chain.

3. The method according to claim 1 , wherein the verified user's information in the verified user information set contains a plurality of portraits; wherein the determining of whether the selected user's information received from the terminal matches the verified user's information on the user relationship chain comprises:
selecting through connecting the drawn line at the terminal, the each and every respective portrait from the plurality of portraits to the each and every respective name from the plurality of other users;
determining whether the selected respective plurality of matched pairs of each and every respective portrait pertains to the each and every respective name from the plurality of other users on the user relationship chain;
if pertains to the each and every respective name from the plurality of other users on the user relationship chain, confirming that the selected user's information received from the terminal matches the verified user's information on the user relationship chain;
if does not pertain to the each and every respective name from the plurality of other users on the user relationship chain, confirming that the selected user's information does not match the verified user's information on the user relationship chain.

4. The method according to claim 3 , wherein the method further comprises:
if the selected user's information does not match the verified user's information on the user relationship chain, prompting a re-verification and performing the step of obtaining the verified user's information set.

5. The method according to claim 4 , wherein the method further comprises:
when the re-verification fails and a number of verification times exceeds a preset value, ignoring any identity verification request received within a preset timeframe for the specified user information.

6. The method according to claim 1 , wherein the first preset number is not equal to the second preset number.

7. The method according to claim 1 , wherein the method further comprises triggering an identity verification process upon detecting anyone of:
when a number of login attempts made during a preset timeframe exceeds a preset value;
when the user name and password used for the current login do not match; or
when the user name used for the current login is not among the history login user names used on the current terminal.

8. An identity verification device, comprises at least a processor with circuitry operating in conjunction with at least a memory storing codes to be executed as a plurality of modules or units to perform functions, wherein the plurality of modules or units comprise:
a verification request receiving module, which causes the device to receive an identity verification request sent from a terminal, where the identity verification request contains a specified user identifier;
a user's information set acquisition module, which is based on a user relationship chain of the specified user identifier, causes the device to obtain a verified user information set, wherein the verified user information set includes information of a plurality of other users for forming the user relationship chain after subsequent selection, wherein the information of the plurality of other users in the verified user information set contains a first preset number of plurality of portraits and names of the plurality of other users who belong to the user relationship chain and a second preset number of plurality of portraits and names of the plurality of other users who do not belong to the user relationship chain;
a user's information set providing module, which causes the device to provide the verified user's information set to the terminal in order to subsequently receive selected user's information returned by the terminal, wherein the selected user's information received from the terminal comprises information of corresponding connected drawn lines at the display of the terminal, indicating selected respective plurality of matched pairs of each and every respective portrait from the plurality of portraits to correspond to each and every respective name from the names of the plurality of other users through the connected drawn lines;
a determining module, which causes the device to determine whether the connected drawn lines of the selected resp

Assignees

• Tencent Tech Shenzhen Co Ltd
• Tencent Tech Shenzhen Co Ltd

Inventors

• Sun Xiao
• Yan Junhong
• Wu Yu
• Chen Wenjun
• Long Qiang

Classifications

• H04L63/102

  Entity profiles · CPC title

• G06F2221/2103

  Challenge-response · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/0815

  providing single-sign-on or federations · CPC title