Method and system for securely identifying users
View Patent ↗Identifying users is disclosed including, in response to receiving an account operating request of an account sent by a user device, obtaining a personal question from a personal questions database and sending the personal question to the user device, receiving, from the user device, a verification response to the personal question, and determining whether a current user is a user associated with the account based at least in part on the verification response and a corresponding standard response in the personal questions database, where the personal question obtained from the personal questions database and the corresponding standard response were generated based at least in part on account operating information of the user associated with the account.
1. A method, comprising:
in response to receiving an account operating request of an account sent by a user device, obtaining a personal question from a personal questions database and sending the personal question to the user device;
receiving, from the user device, a verification response to the personal question;
determining whether a current user is a user associated with the account based at least in part on the verification response and a corresponding standard response in the personal questions database, wherein the personal question obtained from the personal questions database and the corresponding standard response were generated based at least in part on account operating information of the user associated with the account;
obtaining the account operating information; and
upon failing to locate, in the personal questions database, any personal question matching the obtained account operating information, generating a new personal question and a corresponding standard response based on the obtained account operating information.
2. The method as described in claim 1 , further comprising:
upon locating in the personal questions database the personal question matching the obtained account operating information, updating the standard response for the personal question based on the obtained account operating information.
3. The method as described in claim 1 , wherein the obtaining of the personal question from the personal questions database comprises:
upon determining that the account has a specific status, obtaining the personal question from the personal questions database that corresponds to the specific status.
4. The method as described in claim 1 , wherein the obtaining of the personal question from the personal questions database comprises:
obtaining a personal question newly generated within a set time segment or a personal question corresponding to a standard response updated within the set time segment, an end time of the set time segment corresponding to a current time.
5. The method as described in claim 1 , further comprising:
in response to a determination that a verification response in excess of a set proportion of the received verification response is the same as the corresponding standard response in the personal questions database, performing an operation that matches the account operating request.
6. The method as described in claim 1 , wherein in response to a determination that the user device is logged in, the user device hides information relating to standard responses to personal questions.
7. The method as described in claim 1 , wherein the account operating information comprises: account registration information, account login information, account payment information, account-bank card linkage information, or any combination thereof.
8. The method as described in claim 7 , wherein the account-bank card linkage information comprises: information stored when accounts are linked to bank cards, information stored when bank cards are issued, or a combination thereof.
9. The method as described in claim 1 , wherein the account operating request comprises: an account password retrieval request, a request to revise a linked mobile phone number, or a request to revise an account login name.
10. A device, comprising:
at least one processor configured to:
in response to receiving an account operating request of an account sent by a user device, obtain a personal question from a personal questions database and send the personal question to the user device;
receive, from the user device, a verification response to the personal question; and
determine whether a current user is a user associated with the account based at least in part on the verification response and a corresponding standard response in the personal questions database, wherein the personal question obtained from the personal questions database and the corresponding standard response were generated based at least in part on account operating information of the user associated with the account;
obtain the account operating information; and
upon failing to locate, in the personal questions database, any personal question matching the obtained account operating information, generate a new personal question and a corresponding standard response based on the obtained account operating information; and
a memory coupled to the at least one processor and configured to provide the at least one processor with instructions.
11. The device as described in claim 10 , wherein the at least one processor is further configured to:
upon locating in the personal questions database the personal question matching the obtained account operating information, update the standard response for the personal question based on the obtained account operating information.
12. The device as described in claim 10 , wherein the obtaining of the personal question from the personal questions database comprises to:
upon determining that the account has a specific status, obtain the personal question from the personal questions database that corresponds to the specific status.
13. The device as described in claim 10 , wherein the obtaining of the personal question from the personal questions database comprises to:
obtain a personal question newly generated within a set time segment or a personal question corresponding to a standard response updated within the set time segment, an end time of the set time segment corresponding to a current time.
14. The device as described in claim 10 , wherein the at least one processor is further configured to:
in response to a determination that a verification response in excess of a set proportion of the received verification response is the same as the corresponding standard response in the personal questions database, perform an operation that matches the account operating request.
15. A computer program product being embodied in a tangible non-transitory computer readable storage medium and comprising computer instructions for:
in response to receiving an account operating request of an account sent by a user device, obtaining a personal question from a personal questions database and sending the personal question to the user device;
receiving, from the user device, a verification response to the personal question;
determining whether a current user is a user associated with the account based at least in part on the verification response and a corresponding standard response in the personal questions database, wherein the personal question obtained from the personal questions database and the corresponding standard response were generated based at least in part on account operating information of the user associated with the account;
obtaining the account operating information; and
upon failing to locate, in the personal questions database, any personal question matching the obtained account operating information, generating a new personal question and a corresponding standard response based on the obtained account operating information.