IP Library Granted Patent US 11,301,556
Granted Patent B2
US 11,301,556 · App. 16/286,270 · Granted Apr 12, 2022

Verification method and device

Inventors: Shijing Zhang (Hangzhou, CN); Xuan Jiang (Hangzhou, CN); Junjie Li (Hangzhou, CN)
Assignee: ADVANCED NEW TECHNOLOGIES CO., LTD.
G06F21/45G06F21/316G06F40/30H04L29/06H04L63/08
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,301,556
App. No.
16/286,270
Granted
Apr 12, 2022
Kind
B2
Abstract

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for identity verification are provided. One of the methods includes: generating a security question for verifying a target user; determining an answer for the target user to match the security question; determining a category identification of the answer for the target user; determining users' data corresponding to the category identification of the answer for the target user; searching, in the determined users' data, for one or more pieces of the users' data related to the answer for the target user to serve as one or more distraction answers; and verifying the target user according to the security question, the answer for the target user, and the one or more distraction answers.

Claims (73)

1. A computer-implemented verification method, comprising:

generating, by a server, a security question for verifying a target user;

determining, by the server, an answer for the target user to match the security question;

generating, by the server, one or more distraction answers by:

determining a category identification of the answer for the target user, wherein the category identification includes an operation data attribute identification, and the operation data attribute identification includes an operation type identification that is associated with a transfer operation performed by the target user or a payment operation performed by the target user,

determining an answer library corresponding to the operation data attribute identification,

searching in the determined answer library for users' data corresponding to a personal data attribute identification of the target user, wherein the personal data attribute identification of the target user includes the target user's natural attributes, and

searching, in the users' data, for one or more pieces of the users' data related to the answer for the target user to serve as the one or more distraction answers, wherein the one or more distraction answers and the answer for the target user have the same category identification, format, and semantics;

sending, by the server, the security question, the answer for the target user, and the one or more distraction answers over a communication network to a terminal used by the user;

receiving, by the server from the terminal over the communication network, a selection by the target user of the answer for the target user or one of the one or more distraction answers; and

verifying, by the server, the target user according to the received selection.

2. The method according to claim 1 , wherein the method further comprises the following steps for obtaining the users' data:

acquiring, by the server, data from a plurality of users, the acquired data forming the users' data;

determining, by the server, a category identification of each piece of the users' data;

categorizing, by the server, the users' data into categories according to the category identification of each piece of the users' data, each category corresponding to a category identification; and

generating, by the server, one or more answer libraries each corresponding to a category identification for each category of the users' data.

3. The method according to claim 2 , wherein the users' data comprises: at least one of operation data generated based on operations of the users and the users' personal data.

4. The method according to claim 2 , wherein each category identification comprises: at least one personal data attribute identification.

5. The method according to claim 4 , wherein searching, in the users' data, for one or more pieces of the users' data related to the answer for the target user to serve as one or more distraction answers comprises:

searching, by the server, in the users' data corresponding to the personal data attribute identification of the target user, for the one or more pieces of the users' data related to the answer for the target user according to semantics or characters of the answer for the target user to serve as the one or more distraction answers.

6. The method according to claim 5 , wherein searching for the one or more pieces of the users' data related to the answer for the target user according to semantics or characters of the answer for the target user comprises:

determining, by the server, according to the semantics or characters of the answer for the target user, a similarity between the answer for the target user and each piece of the users' data corresponding to the personal data attribute identification of the target user; and

searching, by the server, for the one or more pieces of the users' data related to the answer for the target user according to the similarity.

7. The method according to claim 6 , wherein searching for the one or more pieces of the users' data related to the answer for the target user according to semantics or characters of the answer for the target user comprises:

if the number of the pieces of the users' data found according to the similarity is greater than a threshold, selecting, by the server, according to the similarity, a number of pieces of the users' data as the distraction answers from the pieces of the users' data.

8. The method according to claim 2 , wherein acquiring data from a plurality of users comprises:

when the data from the plurality of users changes, acquiring, by the server, changed data; and

wherein the method further comprises:

updating, by the server, the answer libraries with the changed data.

9. The method according to claim 2 , wherein acquiring data from a plurality of users comprises:

acquiring, by the server, data from the plurality of users according to a set period; and

wherein the method further comprises:

updating, by the server, the answer libraries with the data acquired from the plurality of users according to the set period.

10. A verification device, comprising: one or more processors and one or more non-transitory computer-readable memories coupled to the one or more processors and configured with instructions executable by the one or more processors to cause the device to perform operations comprising:

generating a security question for verifying a target user;

determining an answer for the target user to match the security question;

generating one or more distraction answers by:

determining a category identification of the answer for the target user, wherein the category identification includes an operation data attribute identification, and the operation data attribute identification includes an operation type identification that is associated with a transfer operation performed by the target user or a payment operation performed by the target user,

determining an answer library corresponding to the operation data attribute identification;

searching in the determined answer library for users' data corresponding to a personal data attribute identification of the target user, wherein the personal data attribute identification of the target user includes the target user's natural attributes, and

searching, in the users' data, for one or more pieces of the users' data related to the answer for the target user to serve as one or more distraction answers, wherein the one or more distraction answers and the answer for the target user have the same category identification, format, and semantics;

sending the security question, the answer for the target user, and the one or more distraction answers over a communication network to a terminal used by the user;

receiving from the terminal over the communication network, a selection by the target user of the answer for the target user or one of the one or more distraction answers; and

verifying the target user according to the received selection.

11. The device according to claim 10 , wherein the operations further comprise the following steps for obtaining the users' data:

acquiring data from a plurality of users, the acquired data forming the users' data;

determining a category identification of each piece of the users' data;

categorizing the users' data into categories according to the category identification of each piece of the users' data, each category corresponding to a category identification; and

generating one or more answer libraries each corresponding to a category identification for each category of the users' data.

12. The device according to claim 11 , wherein the users' data comprises: at least one of operation data generated based on operations of the users and the users' personal data.

13. The device according to claim 11 , wherein each category identification comprises: at least one personal data attribute identification.

14. The device according to claim 13 , wherein searching, in the users' data, for one or more pieces of the users' data related to the answer for the target user to serve as one or more distraction answers comprises:

searching, in the users' data corresponding to the personal data attribute identification of the target user, for the one or more pieces of the users' data related to the answer for the target user according to semantics or characters of the answer for the target user to serve as the one or more distraction answers.

15. The device according to claim 14 , wherein searching for the one or more pieces of the users' data related to the answer for the target user according to semantics or characters of the answer for the target user comprises:

determining, according to the semantics or characters of the answer for the target user, a similarity between the answer for the target user and each piece of the users' data corresponding to the personal data attribute identification of the target user; and

searching for the one or more pieces of the users' data related to the answer for the target user according to the similarity.

16. The device according to claim 15 , wherein searching for the one or more pieces of the users' data related to the answer for the target user according to semantics or characters of the answer for the target user comprises:

if the number of the pieces of the users' data found according to the similarity is greater than a threshold, selecting, according to the similarity, a number of pieces of the users' data as the distraction answers from the pieces of the users' data.

17. The device according to claim 11 , wherein acquiring data from a plurality of users comprises:

when the data from the plurality of users changes, acquiring changed data; and

wherein the method further comprises:

updating the answer libraries with the changed data.

18. A non-transitory computer-readable storage medium storing instructions executable by one or more processors in a server to cause the one or more processors to perform operations comprising:

generating, by the server, a security question for verifying a target user;

determining, by the server, an answer for the target user to match the security question;

generating, by the server, one or more distraction answers by:

determining a category identification of the answer for the target user, wherein the category identification includes an operation data attribute identification, and the operation data attribute identification includes an operation type identification that is associated with a transfer operation performed by the target user or a payment operation performed by the target user,

determining an answer library corresponding to the operation data attribute identification;

searching in the determined answer library for users' data corresponding to a personal data attribute identification of the target user, wherein the personal data attribute identification of the target user includes the target user's natural attributes, and

searching, in the users' data, for one or more pieces of the users' data related to the answer for the target user to serve as one or more distraction answers, wherein the one or more distraction answers and the answer for the target user have the same category identification, format, and semantics;

sending, by the server, the security question, the answer for the target user, and the one or more distraction answers over a communication network to a terminal used by the user;

receiving, by the server from the terminal over the communication network, a selection by the target user of the answer for the target user or one of the one or more distraction answers; and

verifying, by the server, the target user according to the received selection.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 16, 2020
From: ADVANTAGEOUS NEW TECHNOLOGIES CO., LTD.
To: ADVANCED NEW TECHNOLOGIES CO., LTD.
Reel/Frame 053796/0281 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 3, 2020
From: ALIBABA GROUP HOLDING LIMITED
To: ADVANTAGEOUS NEW TECHNOLOGIES CO., LTD.
Reel/Frame 053702/0392 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 5, 2019
From: ZHANG, SHIJING; JIANG, XUAN; LI, JUNJIE
To: ALIBABA GROUP HOLDING LIMITED
Reel/Frame 048504/0210 →