[go: up one dir, main page]

CN104378329B - The method, apparatus and system of safety verification - Google Patents

The method, apparatus and system of safety verification Download PDF

Info

Publication number
CN104378329B
CN104378329B CN201310351590.8A CN201310351590A CN104378329B CN 104378329 B CN104378329 B CN 104378329B CN 201310351590 A CN201310351590 A CN 201310351590A CN 104378329 B CN104378329 B CN 104378329B
Authority
CN
China
Prior art keywords
calibration type
type
calibration
prompt message
samples
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201310351590.8A
Other languages
Chinese (zh)
Other versions
CN104378329A (en
Inventor
黄亮
王玉叶
古开元
秦铭雪
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shenzhen Tencent Computer Systems Co Ltd
Original Assignee
Shenzhen Tencent Computer Systems Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shenzhen Tencent Computer Systems Co Ltd filed Critical Shenzhen Tencent Computer Systems Co Ltd
Priority to CN201310351590.8A priority Critical patent/CN104378329B/en
Priority to PCT/CN2014/084184 priority patent/WO2015021908A1/en
Publication of CN104378329A publication Critical patent/CN104378329A/en
Application granted granted Critical
Publication of CN104378329B publication Critical patent/CN104378329B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0861Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/36User authentication by graphic or iconic representation

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • General Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • Biomedical Technology (AREA)
  • Health & Medical Sciences (AREA)
  • Signal Processing (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Telephonic Communication Services (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

本发明公开了一种安全验证的方法、装置及系统,属于互联网信息安全领域。方法包括:服务器将验证码发送给用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;接收所述用户终端根据用户对所述多个对象的选择所返回的选定对象的信息;以及根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过。本发明在不影响用户体验的前提下可以大大提高验证码的抗破解力,有效的提高了用户验证的安全性。

The invention discloses a safety verification method, device and system, belonging to the field of Internet information safety. The method includes: the server sends a verification code to the user terminal for display, the verification code includes prompt information and a plurality of objects related to the prompt information; information of the selected object; and calculate the verification pass value T0 according to the information of the selected object and predetermined rules, if the verification pass value T0 exceeds the first threshold T1, the verification result is determined to be passed; otherwise, the verification is determined to be The result is fail. The present invention can greatly improve the cracking resistance of verification codes without affecting user experience, and effectively improves the security of user verification.

Description

安全验证的方法、装置及系统Method, device and system for safety verification

技术领域technical field

本发明涉及互联网技术的信息安全技术领域,特别涉及一种安全验证的方法、装置及系统。The present invention relates to the technical field of information security of Internet technology, in particular to a method, device and system for security verification.

背景技术Background technique

随着计算机和计算机网络的日益普及,互联网已经深入到人们工作、学习和生活的各个领域。网络的发展在为人们提供便利的同时也带来各种挑战。一些人会利用机器人程序大量地不当使用网络资源,例如群发垃圾邮件等,使服务器效能大为降低。也有人利用程序不断发出服务请求回应,进行“饱和攻击”以达到使服务器瘫痪的目的。甚至还有人尝试利用暴利破解等手段进行恶意破解密码等行为。为避免上述恶意行为,设计一套能够让计算机自动分辨信息是来自合理用户或是非正当使用的机器人程序的工具,就显得非常重要。With the increasing popularity of computers and computer networks, the Internet has penetrated into all areas of people's work, study and life. While the development of the network provides convenience for people, it also brings various challenges. Some people will use robot programs to improperly use network resources in large quantities, such as mass spam, etc., which will greatly reduce server performance. There are also people who use the program to continuously send out service request responses to carry out "saturation attacks" to achieve the purpose of paralyzing the server. Some people even try to maliciously crack passwords by means of profiteering cracking. In order to avoid the above-mentioned malicious behaviors, it is very important to design a set of tools that can allow the computer to automatically distinguish whether the information comes from a legitimate user or a robot program that is improperly used.

使用图像验证码是现在比较通行的方式,图像验证码的主要目的是分辨网络服务用户是程序还是人类。图像验证码是含有字符串的图片,在验证时要求用户输入字符串的内容。字符串通常由大小写字母和数字组成,部分验证码包含汉字或数学公式,字符串的长度可以是随机或固定的。为了避免被机器自动识别,通常会对图片的背景进行改进,例如增加各种纹理图案等,从而对机器自动识别进行干扰。Using image verification codes is a relatively common way now. The main purpose of image verification codes is to distinguish whether network service users are programs or humans. The image verification code is a picture containing a string, and the user is required to input the content of the string during verification. Strings are usually composed of uppercase and lowercase letters and numbers. Part of the verification code contains Chinese characters or mathematical formulas. The length of the string can be random or fixed. In order to avoid being automatically recognized by the machine, the background of the picture is usually improved, such as adding various texture patterns, etc., thereby interfering with the automatic recognition of the machine.

然而,只要收集足够的样本,使用字符识别技术进行机器学习和训练,就可以开发出机器程序来解码图像验证码。即使是改进的图像验证码,如果它的背景库不够庞大,依然能够被机器识别。传统的图像验证码无法避免这个问题,以字符图像验证码为例,如果是大小写字符和数字,最多只有62个。因此,现有的图像验证码抗破解能力差、安全性不够高。However, as long as enough samples are collected, machine learning and training using character recognition techniques, machine programs can be developed to decode image captchas. Even the improved image captcha can still be recognized by machines if its background library is not large enough. Traditional image verification codes cannot avoid this problem. Taking character image verification codes as an example, if there are uppercase and lowercase characters and numbers, there are only 62 characters at most. Therefore, the existing image verification code has poor anti-cracking ability and insufficient security.

发明内容Contents of the invention

为了解决现有技术的问题,本发明实施例提供了一种安全验证的方法、装置及系统。In order to solve the problems in the prior art, embodiments of the present invention provide a security verification method, device and system.

本发明实施例提供一种安全验证的方法,包括:服务器将验证码发送给用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;接收所述用户终端根据用户对所述多个对象的选择所返回的选定对象的信息;以及根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过。An embodiment of the present invention provides a security verification method, including: the server sends a verification code to the user terminal for display, the verification code includes prompt information and multiple objects related to the prompt information; receiving the user terminal according to The information of the selected object returned by the user's selection of the plurality of objects; and calculating the verification pass value T0 according to the information of the selected object and predetermined rules, if the verification pass value T0 exceeds the first threshold T1, Then it is judged that the verification result is passed, otherwise, it is judged that the verification result is not passed.

本发明实施例提供另一种安全验证的方法,包括:服务器将验证码发送给用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;所述用户终端根据用户对所述多个对象的选择向所述服务器返回选定对象的信息;所述服务器根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过;以及所述服务器将所述验证结果返回所述用户终端。An embodiment of the present invention provides another security verification method, including: the server sends a verification code to the user terminal for display, the verification code includes prompt information and multiple objects related to the prompt information; the user terminal according to The user's selection of the plurality of objects returns the information of the selected object to the server; the server calculates the verification pass value T0 according to the information of the selected object and predetermined rules, if the verification pass value T0 exceeds the first A threshold T1, the verification result is judged to be passed, otherwise, the verification result is judged to be failed; and the server returns the verification result to the user terminal.

本发明实施例提供一种安全验证的装置,包括:验证码发送模块,用于将验证码发送给用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;选定对象接收模块,用于接收所述用户终端根据用户对所述多个对象的选择所返回的选定对象的信息;以及验证结果判定模块,用户根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过。An embodiment of the present invention provides a security verification device, including: a verification code sending module, configured to send a verification code to a user terminal for display, the verification code including prompt information and multiple objects related to the prompt information; The selected object receiving module is used to receive the information of the selected object returned by the user terminal according to the user's selection of the multiple objects; and the verification result determination module, the user uses the information of the selected object and the predetermined The rule calculates the verification pass value T0, and if the verification pass value T0 exceeds the first threshold T1, the verification result is determined to be passed; otherwise, the verification result is determined to be failed.

本发明实施例还提供一种安全验证的系统,包括:用户终端及服务器。所述服务器用于将验证码发送给所述用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;所述用户终端用于根据用户对所述多个对象的选择向所述服务器返回选定对象的信息;所述服务器还用于根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过,所述服务器还用于将所述验证结果返回所述用户终端。The embodiment of the present invention also provides a security verification system, including: a user terminal and a server. The server is used to send a verification code to the user terminal for display, the verification code includes prompt information and a plurality of objects related to the prompt information; The selection returns the information of the selected object to the server; the server is also used to calculate the verification pass value T0 according to the information of the selected object and predetermined rules, if the verification pass value T0 exceeds the first threshold T1, Then it is determined that the verification result is passed; otherwise, it is determined that the verification result is not passed, and the server is further configured to return the verification result to the user terminal.

本发明实施例提供的技术方案带来的有益效果是:The beneficial effects brought by the technical solution provided by the embodiments of the present invention are:

一方面充分利用了人类对事物分类的先天优势,根据用户对验证码中的对象的选择来计算验证通过值,由于机器在对提示信息的理解以及对对象的分类这两方面都存在很大的困难,因此大大增加了机器破解验证码的难度,另一方面,由于并不需要用户100%的选对符合提示信息的对象,允许部分的错误存在,更容易使用户顺利的通过验证,不会增加用户的负担。也就是说本发明在不影响用户体验的前提下可以大大提高验证码的抗破解力,有效的提高了用户验证的安全性。On the one hand, it makes full use of the inherent advantages of human beings in classifying things, and calculates the verification pass value according to the user's selection of objects in the verification code. Because the machine has a great deal of difference in understanding the prompt information and classifying the objects. Difficult, so it greatly increases the difficulty for the machine to crack the verification code. On the other hand, since the user does not need to select 100% of the objects that meet the prompt information, some errors are allowed, and it is easier for the user to pass the verification smoothly. increase the user's burden. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

附图说明Description of drawings

为了更清楚地说明本发明实施例中的技术方案,下面将对实施例描述中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本发明的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其它的附图。In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained based on these drawings without creative effort.

图1是本发明实施例的安全验证的方法的一种应用环境图;Fig. 1 is a kind of application environment diagram of the method for security verification of the embodiment of the present invention;

图2是一种用户终端的结构框图;Fig. 2 is a structural block diagram of a user terminal;

图3是本发明第一实施例提供的一种安全验证的方法的流程图;Fig. 3 is a flow chart of a security verification method provided by the first embodiment of the present invention;

图4是本发明第一实施例提供的一种安全验证的方法的部分流程图;Fig. 4 is a partial flowchart of a security verification method provided by the first embodiment of the present invention;

图5是本发明第二实施例提供的一种安全验证的方法的流程图;Fig. 5 is a flow chart of a security verification method provided by the second embodiment of the present invention;

图6是图5中步骤S27的具体流程图;Fig. 6 is the specific flowchart of step S27 among Fig. 5;

图7是图6中步骤S274的具体流程图;Fig. 7 is the concrete flowchart of step S274 among Fig. 6;

图8是本发明第三实施例提供的一种安全验证的方法的流程图;Fig. 8 is a flow chart of a security verification method provided by the third embodiment of the present invention;

图9是图8中步骤S38的具体流程图;Fig. 9 is the concrete flowchart of step S38 among Fig. 8;

图10是图9中步骤S384的具体流程图;Fig. 10 is the specific flowchart of step S384 in Fig. 9;

图11是本发明第四实施例提供的一种安全验证的方法的流程图;Fig. 11 is a flow chart of a security verification method provided by the fourth embodiment of the present invention;

图12是图11中步骤S461的具体流程图;Fig. 12 is the specific flowchart of step S461 in Fig. 11;

图13是本发明第五实施例提供的一种安全验证的方法的流程图;Fig. 13 is a flowchart of a security verification method provided by the fifth embodiment of the present invention;

图14是本发明第六实施例提供的一种安全验证的装置的结构图;Fig. 14 is a structural diagram of a safety verification device provided by the sixth embodiment of the present invention;

图15是本发明第七实施例提供的一种安全验证的装置的结构图;Fig. 15 is a structural diagram of a safety verification device provided by the seventh embodiment of the present invention;

图16是本发明第八实施例提供的一种安全验证的装置的结构图;Fig. 16 is a structural diagram of a safety verification device provided by the eighth embodiment of the present invention;

图17是本发明第九实施例提供的一种安全验证的装置的结构图;Fig. 17 is a structural diagram of a safety verification device provided by the ninth embodiment of the present invention;

图18是本发明第十实施例提供的一种安全验证的系统的结构图。Fig. 18 is a structural diagram of a security verification system provided by the tenth embodiment of the present invention.

具体实施方式Detailed ways

请参阅图1,所示为本发明实施例提供的安全验证的方法的应用环境图。如图1所示,用户终端100以及服务器200位于无线或有线网络300中,通过该无线或有线网络300,用户终端100以及服务器200相互通信。Please refer to FIG. 1 , which shows an application environment diagram of the security verification method provided by the embodiment of the present invention. As shown in FIG. 1 , the user terminal 100 and the server 200 are located in a wireless or wired network 300 , and through the wireless or wired network 300 , the user terminal 100 and the server 200 communicate with each other.

用户终端可以包括智能手机、平板电脑、电子书阅读器、音乐播放器、膝上型便携计算机、台式计算机及智能机顶盒等等。User terminals may include smartphones, tablet computers, e-book readers, music players, laptop computers, desktop computers, and smart set-top boxes, among others.

图2示出了一种用户终端的结构框图。如图2所示,用户终端100包括存储器102、存储控制器104,一个或多个(图中仅示出一个)处理器106、外设接口108、射频模块110、定位模块112、摄像模块114、音频模块116、触控屏幕118以及按键模块120。这些组件通过一条或多条通讯总线/信号线122相互通讯。Fig. 2 shows a structural block diagram of a user terminal. As shown in FIG. 2 , the user terminal 100 includes a memory 102, a storage controller 104, one or more (only one is shown in the figure) processors 106, a peripheral interface 108, a radio frequency module 110, a positioning module 112, and a camera module 114 , an audio module 116 , a touch screen 118 and a button module 120 . These components communicate with each other via one or more communication buses/signal lines 122 .

可以理解,图2所示的结构仅为示意,用户终端100还可包括比图2中所示更多或者更少的组件,或者具有与图2所示不同的配置。图2中所示的各组件可以采用硬件、软件或其组合实现。It can be understood that the structure shown in FIG. 2 is only for illustration, and the user terminal 100 may also include more or fewer components than those shown in FIG. 2 , or have a configuration different from that shown in FIG. 2 . Each component shown in Fig. 2 may be implemented by hardware, software or a combination thereof.

存储器102可用于存储软件程序以及模块,如本发明实施例中的在用户终端内实现安全验证的方法及装置对应的程序指令/模块,处理器102通过运行存储在存储器104内的软件程序以及模块,从而执行各种功能应用以及数据处理,即在上述的用户终端内实现安全验证的方法。The memory 102 can be used to store software programs and modules, such as the program instructions/modules corresponding to the method and device for implementing security verification in the user terminal in the embodiment of the present invention, and the processor 102 runs the software programs and modules stored in the memory 104 , so as to execute various functional applications and data processing, that is, the method for implementing security verification in the above-mentioned user terminal.

存储器102可包括高速随机存储器,还可包括非易失性存储器,如一个或者多个磁性存储装置、闪存、或者其他非易失性固态存储器。在一些实例中,存储器102可进一步包括相对于处理器106远程设置的存储器,这些远程存储器可以通过网络连接至用户终端100。上述网络的实例包括但不限于互联网、企业内部网、局域网、移动通信网及其组合。处理器106以及其他可能的组件对存储器102的访问可在存储控制器104的控制下进行。The memory 102 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 102 may further include a memory that is remotely located relative to the processor 106, and these remote memories may be connected to the user terminal 100 through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof. Access to memory 102 by processor 106 and possibly other components may be under the control of memory controller 104 .

外设接口108将各种输入/输入装置耦合至CPU以及存储器102。处理器106运行存储器102内的各种软件、指令以执行用户终端100的各种功能以及进行数据处理。Peripherals interface 108 couples various input/output devices to CPU and memory 102 . The processor 106 runs various software and instructions in the memory 102 to perform various functions of the user terminal 100 and perform data processing.

在一些实施例中,外设接口108,处理器106以及存储控制器104可以在单个芯片中实现。在其他一些实例中,他们可以分别由独立的芯片实现。In some embodiments, peripherals interface 108, processor 106, and memory controller 104 may be implemented in a single chip. In some other instances, they can be implemented by independent chips respectively.

射频模块110用于接收以及发送电磁波,实现电磁波与电信号的相互转换,从而与通讯网络或者其他设备进行通讯。射频模块110可包括各种现有的用于执行这些功能的电路元件,例如,天线、射频收发器、数字信号处理器、加密/解密芯片、用户身份模块(SIM)卡、存储器等等。射频模块110可与各种网络如互联网、企业内部网、无线网络进行通讯或者通过无线网络与其他设备进行通讯。上述的无线网络可包括蜂窝式电话网、无线局域网或者城域网。上述的无线网络可以使用各种通信标准、协议及技术,包括但并不限于全球移动通信系统(Global System for Mobile Communication,GSM)、增强型移动通信技术(Enhanced Data GSM Environment,EDGE),宽带码分多址技术(wideband code divisionmultiple access,W-CDMA),码分多址技术(Code division access,CDMA)、时分多址技术(time division multiple access,TDMA),蓝牙,无线保真技术(Wireless,Fidelity,WiFi)(如美国电气和电子工程师协会标准IEEE802.11a,IEEE802.11b,IEEE802.11g和/或IEEE802.11n)、网络电话(Voice over internet protocal,VoIP)、全球微波互联接入(Worldwide Interoperability for Microwave Access,Wi-Max)、其他用于邮件、即时通讯及短消息的协议,以及任何其他合适的通讯协议,甚至可包括那些当前仍未被开发出来的协议。The radio frequency module 110 is used to receive and send electromagnetic waves, realize mutual conversion between electromagnetic waves and electrical signals, and communicate with communication networks or other devices. The radio frequency module 110 may include various existing circuit elements for performing these functions, such as antenna, radio frequency transceiver, digital signal processor, encryption/decryption chip, Subscriber Identity Module (SIM) card, memory and so on. The radio frequency module 110 can communicate with various networks such as the Internet, intranet, wireless network or communicate with other devices through the wireless network. The wireless network mentioned above may include a cellular telephone network, a wireless local area network or a metropolitan area network. The wireless network mentioned above can use various communication standards, protocols and technologies, including but not limited to Global System for Mobile Communication (GSM), Enhanced Data GSM Environment (EDGE), broadband code Division multiple access technology (wideband code division multiple access, W-CDMA), code division multiple access technology (Code division access, CDMA), time division multiple access technology (time division multiple access, TDMA), Bluetooth, wireless fidelity technology (Wireless, Fidelity, WiFi) (such as IEEE802.11a, IEEE802.11b, IEEE802.11g and/or IEEE802.11n), Internet telephony (Voice over internet protocol, VoIP), global microwave interconnection access (Worldwide Interoperability for Microwave Access, Wi-Max), other protocols for mail, instant messaging, and short messaging, and any other suitable communication protocol, even those that have not yet been developed.

定位模块112用于获取用户终端100的当前位置。定位模块112的实例包括但不限于全球卫星定位系统(GPS)、基于无线局域网或者移动通信网的定位技术。The positioning module 112 is used to obtain the current location of the user terminal 100 . Examples of the positioning module 112 include but are not limited to Global Positioning System (GPS), positioning technology based on wireless local area network or mobile communication network.

摄像模块114用于拍摄照片或者视频。拍摄的照片或者视频可以存储至存储器102内,并可通过射频模块110发送。The camera module 114 is used for taking photos or videos. The photographs or videos taken can be stored in the memory 102 and sent through the radio frequency module 110 .

音频模块116向用户提供音频接口,其可包括一个或多个麦克风、一个或者多个扬声器以及音频电路。音频电路从外设接口108处接收声音数据,将声音数据转换为电信息,将电信息传输至扬声器。扬声器将电信息转换为人耳能听到的声波。音频电路还从麦克风处接收电信息,将电信号转换为声音数据,并将声音数据传输至外设接口108中以进行进一步的处理。音频数据可以从存储器102处或者通过射频模块110获取。此外,音频数据也可以存储至存储器102中或者通过射频模块110进行发送。在一些实例中,音频模块116还可包括一个耳机播孔,用于向耳机或者其他设备提供音频接口。The audio module 116 provides an audio interface to the user and may include one or more microphones, one or more speakers, and audio circuitry. The audio circuit receives sound data from the peripheral interface 108, converts the sound data into electrical information, and transmits the electrical information to the speaker. Speakers convert electrical information into sound waves that can be heard by the human ear. The audio circuit also receives electrical information from the microphone, converts the electrical signal into sound data, and transmits the sound data to the peripheral interface 108 for further processing. The audio data can be obtained from the memory 102 or through the radio frequency module 110 . In addition, the audio data can also be stored in the memory 102 or sent through the radio frequency module 110 . In some examples, the audio module 116 may further include a headphone jack for providing an audio interface for headphones or other devices.

触控屏幕118在用户终端100与用户之间同时提供一个输出及输入界面。具体地,触控屏幕118向用户显示视频输出,这些视频输出的内容可包括文字、图形、视频、及其任意组合。一些输出结果是对应于一些用户界面对象。触控屏幕118还接收用户的输入,例如用户的点击、滑动等手势操作,以便用户界面对象对这些用户的输入做出响应。检测用户输入的技术可以是基于电阻式、电容式或者其他任意可能的触控检测技术。触控屏幕118显示单元的具体实例包括但并不限于液晶显示器或发光聚合物显示器。The touch screen 118 simultaneously provides an output and input interface between the user terminal 100 and the user. Specifically, the touch screen 118 displays video output to the user, and the content of the video output may include text, graphics, video, and any combination thereof. Some output results correspond to some user interface objects. The touch screen 118 also receives user input, such as user gesture operations such as clicking and sliding, so that the user interface objects respond to these user inputs. The technique for detecting user input may be based on resistive, capacitive or any other possible touch detection techniques. Specific examples of the display unit of the touch screen 118 include, but are not limited to, liquid crystal displays or light emitting polymer displays.

按键模块120同样提供用户向用户终端100进行输入的接口,用户可以通过按下不同的按键以使用户终端100执行不同的功能。The button module 120 also provides an interface for the user to input to the user terminal 100 , and the user can make the user terminal 100 perform different functions by pressing different buttons.

第一实施例first embodiment

请参阅图3,所示为本发明第一实施例提供的安全验证的方法的流程图。结合图1,本实施例描述的是服务器的处理流程,本实施例提供的安全验证的方法包括以下步骤:Please refer to FIG. 3 , which is a flow chart of the security verification method provided by the first embodiment of the present invention. In conjunction with FIG. 1, what this embodiment describes is the processing flow of the server, and the method for security verification provided by this embodiment includes the following steps:

步骤S11,服务器将验证码发送给用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象。Step S11, the server sends the verification code to the user terminal for display, the verification code includes prompt information and multiple objects related to the prompt information.

本发明实施例的验证码中的提示信息可以是一个选择题,也可以是对某种事务的描述。用户可以根据提示信息的内容,在验证码中的多个对象中选择符合提示信息内容的对象。验证码中的多个对象可以是图片、文字、动画、语音等。优选的,验证码中的每个对象对应一个对象标号。优选的,用户终端所显示的验证码中的每个对象均可以是一个可点选或勾选的控件。用户可以通过触控工具(例如手指)或鼠标点击或勾选该控件来选择对应的对象。当然,用户也可以通过其他方式来选择相应的对象,本发明的具体实施方式并不以此为限。进一步的,请参照图4,于步骤S11之前还可以包括:The prompt information in the verification code in the embodiment of the present invention may be a multiple-choice question or a description of a certain transaction. According to the content of the prompt information, the user can select an object that matches the content of the prompt information among multiple objects in the verification code. Multiple objects in the verification code can be pictures, text, animation, voice, etc. Preferably, each object in the verification code corresponds to an object label. Preferably, each object in the verification code displayed on the user terminal may be a control that can be clicked or checked. The user can select the corresponding object by clicking or checking the control with a touch tool (such as a finger) or a mouse. Certainly, the user may also select the corresponding object in other ways, and the specific implementation manner of the present invention is not limited thereto. Further, please refer to FIG. 4, before step S11 may also include:

步骤S101,所述服务器由所述验证码数据库中选出一个提示信息样本作为所述验证码的提示信息。In step S101, the server selects a prompt information sample from the verification code database as the prompt information of the verification code.

所述验证码数据库中包括多个提示信息样本以及多个对象样本,所述多个对象样本中的每个对象样本都具有对应于每个提示信息样本的标定类型,所述标定类型至少包括第一标定类型和第二标定类型。The verification code database includes a plurality of prompt information samples and a plurality of object samples, each object sample in the plurality of object samples has a marking type corresponding to each prompt information sample, and the marking type includes at least the first A calibration type and a second calibration type.

验证码数据库可以是事先建立好的,设置在服务器中。验证码数据库中的多个提示信息样本以及多个对象样本可以是由服务器直接从互联网上获取的,也可以是由设计人员制作的,本发明的具体实施方式并不以此为限。The verification code database may be established in advance and set in the server. The multiple prompt information samples and multiple object samples in the verification code database may be obtained directly from the Internet by the server, or may be created by designers, and the specific implementation manner of the present invention is not limited thereto.

提示信息样本优选为能够被用户快速理解的问题,如常识性的选择题等。对象样本优选为能够被用户快速识别内容的对象。优选的,以实物图片作为对象样本,一方面因为实物图片比较容易从互联网上获取,因此对象样本的数量比较容易达到一定的规模,另一方面,以现有的计算机发展水平,对某一类实物训练一个通用的分类程序是比较困难的,例如,同样是汽车的图片,由于汽车的尺寸、颜色、装饰、角度等方面都可能存在非常大的差别,对于这样的两个样本,如果使用机器学习的手段进行分类就很难完成聚类的过程,因此采用实物图片可以更有效的提高验证码的抗破解能力。The prompt information sample is preferably a question that can be quickly understood by the user, such as a common-sense multiple-choice question. The object samples are preferably objects whose content can be quickly identified by the user. Preferably, the physical picture is used as the object sample. On the one hand, because the physical picture is relatively easy to obtain from the Internet, the number of object samples is relatively easy to reach a certain scale. On the other hand, with the existing computer development level, for a certain class It is more difficult to train a general classification program in kind. For example, the same picture of a car may have very large differences in the size, color, decoration, angle, etc. of the car. For such two samples, if using a machine It is difficult to complete the clustering process by means of learning to classify, so the use of physical pictures can more effectively improve the anti-cracking ability of the verification code.

每个提示信息样本都可以对应一个唯一标识该提示信息样本的提示信息标识,每个对象样本也可以对应一个唯一标识该对象样本的对象标识。Each prompt information sample may correspond to a prompt information identifier that uniquely identifies the prompt information sample, and each object sample may also correspond to an object identifier that uniquely identifies the object sample.

在最初建立验证码数据库时需要对每个对象样本对应于每个提示信息样本的标定类型进行标定,假设有M个提示信息样本、N个对象样本,则一共需要进行M*N次标定,最初的标定可以由人工来完成。When initially establishing the verification code database, it is necessary to calibrate the calibration type of each object sample corresponding to each prompt information sample. Assuming that there are M prompt information samples and N object samples, a total of M*N calibrations are required. Initially Calibration can be done manually.

对象样本的标定类型可以分为四种:第一标定类型、第二标定类型、第三标定类型以及第四标定类型。The calibration types of the object samples can be divided into four types: the first calibration type, the second calibration type, the third calibration type and the fourth calibration type.

例如,可以定义第一标定类型为“是”,如果某个对象样本对应于某个提示信息样本的标定类型为第一标定类型,说明在对以该提示信息样本为提示信息的验证码进行验证时,用户需要点选该对象,也就是说该对象是符合该提示信息的。For example, the first calibration type can be defined as "yes". If the calibration type of a certain object sample corresponding to a prompt information sample is the first calibration type, it means that the verification code using the prompt information sample as the prompt information is being verified. , the user needs to click on the object, that is to say, the object conforms to the prompt information.

可以定义第二标定类型为“不是”,如果某个对象样本对应某个提示信息样本的标定类型为第二标定类型,说明在对以该提示信息样本为提示信息的验证码进行验证时,用户需要不点选该对象,也就是说该对象是不符合该提示信息的。The second calibration type can be defined as "no". If the calibration type of an object sample corresponding to a prompt information sample is the second calibration type, it means that when verifying the verification code that uses the prompt information sample as the prompt information, the user It is necessary not to click the object, that is to say, the object does not conform to the prompt information.

可以定义第三标定类型为“未标定”,如果某个对象样本对应某个提示信息样本的标定类型为第三标定类型,说明该对象样本还未对应于该提示信息样本进行标定。The third calibration type can be defined as "uncalibrated". If the calibration type of a certain object sample corresponding to a prompt information sample is the third calibration type, it means that the object sample has not been calibrated corresponding to the prompt information sample.

可以定义第四标定类型为“不适合”,如果某个对象样本对应某个提示信息样本的标定类型为第四标定类型,说明该对象样本不应当与该提示信息样本出现在同一个验证码中。The fourth calibration type can be defined as "not suitable". If the calibration type of a certain object sample corresponding to a prompt information sample is the fourth calibration type, it means that the object sample should not appear in the same verification code as the prompt information sample .

在后面各实施例中,为了使技术方案的描述更加简单明了,也一致的采用上述对第一至第四标定类型的定义,但是,可以理解的是,在本发明的其他具体实施方式中,标定类型的名称和具体定义是可以互换的,例如可以定义第一标定类型为“不是”,定义第二标定类型为“是”,等。In the following embodiments, in order to make the description of the technical solution simpler and clearer, the above-mentioned definitions of the first to fourth calibration types are also consistently used. However, it can be understood that in other specific implementation methods of the present invention, The names and specific definitions of the calibration types are interchangeable, for example, the first calibration type can be defined as "no", the second calibration type can be defined as "yes", etc.

步骤S102,所述服务器根据所选出的该提示信息样本,由所述验证码数据库中选出多个对象样本作为所述验证码中的多个对象,其中,所选出的多个对象样本对应于所选出的该提示信息样本的标定类型分别为第一标定类型、第二标定类型或第三标定类型,且至少有一个对象样本对应于所选出的该提示信息样本的标定类型为第一标定类型。Step S102, the server selects multiple object samples from the verification code database as multiple objects in the verification code according to the selected prompt information sample, wherein the selected multiple object samples The calibration type corresponding to the selected prompt information sample is the first calibration type, the second calibration type or the third calibration type, and at least one object sample corresponding to the calibration type of the selected prompt information sample is The first calibration type.

假设服务器由验证码数据库中选出一个提示信息样本A作为验证码的提示信息,然后再根据提示信息样本A由验证码数据库中随机的选出多个对象样本B作为验证码的多个对象,这多个对象样本B对应于提示信息样本A的标定类型可能是第一标定类型,也可能是第二标定类型,或者是第三标定类型,但至少有一个对象样本B对应于提示信息样本A的标定类型是第一标定类型。需要注意的是,在一个验证码中,标定类型为第三标定类型的对象样本B的数目不能过多,标定类型为第三标定类型的对象样本B的数目以该验证码至少存在一种可能使得用户能够通过验证为宜。可以理解的是,不同的验证码,在至少存在一种可能使得用户能够通过验证的前提下,其允许的标定类型为第三标定类型的对象样本B的数目是不同的,因此,标定类型为第三标定类型的对象样本B的数目要根据实际情况进行设置,优选的数目可以是1。Suppose the server selects a prompt information sample A from the verification code database as the prompt information of the verification code, and then randomly selects a plurality of object samples B from the verification code database according to the prompt information sample A as multiple objects of the verification code, The calibration type of the multiple object samples B corresponding to the prompt information sample A may be the first calibration type, the second calibration type, or the third calibration type, but at least one object sample B corresponds to the prompt information sample A The calibration type of is the first calibration type. It should be noted that in a verification code, the number of object samples B whose calibration type is the third calibration type cannot be too much, and the number of object samples B whose calibration type is the third calibration type has at least one possibility in this verification code It is advisable to enable the user to pass the authentication. It can be understood that for different verification codes, on the premise that there is at least one possibility for the user to pass the verification, the number of object samples B whose calibration type is allowed to be the third calibration type is different. Therefore, the calibration type is The number of object samples B of the third calibration type should be set according to the actual situation, and the preferred number can be 1.

承接上述对标定类型的定义,也就是说,验证码中的对象至少有一个对象是符合提示信息的,其他对象可能是不符合提示信息的,也可能是还未对应于该提示信息样本进行标定,但是标定类型为第四标定类型的对象样本不会被选做该验证码的对象,因为标定类型为第四标定类型,说明该对象样本不应当与该提示信息样本出现在同一个验证码中。Undertake the above definition of the calibration type, that is to say, at least one object in the verification code conforms to the prompt information, and other objects may not conform to the prompt information, or may not be calibrated corresponding to the prompt information sample , but the object sample whose calibration type is the fourth calibration type will not be selected as the object of the verification code, because the calibration type is the fourth calibration type, indicating that the object sample should not appear in the same verification code as the prompt information sample .

可以理解的是,对于同一个提示信息样本,服务器每次选出的对应对象样本的组合可能是不同的,同样的,对于同一组对象样本,其对应的提示信息也可以是不同的。因此,提示信息样本以及对象样本的数量越多,验证码的数量也越多。It can be understood that for the same prompt information sample, the combination of corresponding object samples selected by the server each time may be different, and similarly, for the same group of object samples, the corresponding prompt information may also be different. Therefore, the more the prompt information samples and the object samples are, the more the verification codes are.

步骤S103,所述服务器将选出的该提示信息样本以及选出的多个对象样本发送给用户终端进行显示。Step S103, the server sends the selected prompt information sample and the selected object samples to the user terminal for display.

服务器可以随机的对选出的多个对象样本进行标号,服务器可以按照标号的顺序将多个对象样本发送给用户终端。服务器还可以生成该验证码的对应关系表。该对应关系表中包括该验证码中的提示信息的提示信息标识、该验证码中的每个对象的标号以及每个对象对应的对象标识。该对应关系表中还可以包括每个对象对应的标定类型。The server can randomly label the multiple selected object samples, and the server can send the multiple object samples to the user terminal according to the sequence of labeling. The server may also generate a correspondence table of the verification code. The correspondence table includes the prompt information identifier of the prompt information in the verification code, the label of each object in the verification code, and the object identifier corresponding to each object. The corresponding relationship table may also include the label type corresponding to each object.

每个验证码都可以对应一个唯一标识该验证码的验证码标识,该验证码标识也存储在该对应关系表中。Each verification code may correspond to a verification code identifier that uniquely identifies the verification code, and the verification code identifier is also stored in the correspondence table.

服务器将验证码发送给用户终端时还可以将验证码中的提示信息标识发送给用户终端,或者将该验证码的验证码标识发送给该用户终端,或者将该验证码中对象的标号发送给用户终端,或者也可以将验证码的对应关系表发送给用户终端。When the server sends the verification code to the user terminal, it may also send the prompt information identifier in the verification code to the user terminal, or send the verification code identifier of the verification code to the user terminal, or send the object label in the verification code to the user terminal. The user terminal, or the correspondence table of the verification codes may also be sent to the user terminal.

步骤S12,接收所述用户终端根据用户对所述多个对象的选择所返回的选定对象的信息。Step S12, receiving the information of the selected object returned by the user terminal according to the user's selection of the plurality of objects.

用户终端根据用户对所述多个对象的选择,向所述服务器返回选定对象的信息。服务器接收用户终端所返回的选定对象的信息。选定对象的信息至少包括该验证码的验证码标识。选定对象的信息至少还包括选定对象的标号或选定对象的对象标识。The user terminal returns the information of the selected object to the server according to the user's selection of the plurality of objects. The server receives the information of the selected object returned by the user terminal. The information of the selected object includes at least the verification code identifier of the verification code. The information of the selected object at least includes a label of the selected object or an object identifier of the selected object.

步骤S13,根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过。Step S13, calculate the verification pass value T0 according to the information of the selected object and predetermined rules, if the verification pass value T0 exceeds the first threshold T1, the verification result is judged to be passed, otherwise, the verification result is judged to be failed.

可以按照验证码中的多个对象的标定类型将多个对象分为第一集合P1和第二集合P2,例如,可以将标定类型为第一标定类型的对象归在第一集合P1中,将标定类型为第二标定类型的对象归在第二集合P2中,由于验证码中的对象至少有一个对象的标定类型为第一标定类型,因此至少有一个对象属于第一集合P1。将用户所选的对象归入第三集合P’。Multiple objects can be divided into a first set P1 and a second set P2 according to the marking types of multiple objects in the verification code. For example, objects whose marking type is the first marking type can be classified into the first set P1, and the Objects whose marking type is the second marking type are included in the second set P2. Since at least one of the objects in the verification code has a marking type of the first marking type, at least one object belongs to the first set P1. Classify the objects selected by the user into the third set P'.

分别计算所述第三集合P’与所述第一集合P1的第一重合度、所述第三集合P’与所述第二集合P2的第二重合度,根据所述第一重合度、第二重合度以及预定的规则计算所述验证通过值T0。如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过。预定的规则可以包括第一重合度越大于第二重合度,验证通过值T0越高,相反,第二重合度越大于第一重合度,验证通过值T0越低。respectively calculating the first degree of coincidence between the third set P' and the first set P1, and the second degree of coincidence between the third set P' and the second set P2, according to the first degree of coincidence, The verification passing value T0 is calculated by the second coincidence degree and a predetermined rule. If the verification pass value T0 exceeds the first threshold T1, it is determined that the verification result is passed; otherwise, it is determined that the verification result is not passed. The predetermined rule may include that the greater the first degree of coincidence is greater than the second degree of coincidence, the higher the verification value T0 is, on the contrary, the greater the second degree of coincidence is greater than the first degree of coincidence, the lower the verification value T0 is.

具体的,可以定义对象样本Bi对应于提示信息样本Aj的标定类型的权值为Ci,j,如果标定类型为第一标定类型,则令Ci,j=1;如果标定类型为第二标定类型,则令Ci,j=-1;如果标定类型为第三标定类型,则令Ci,j=0;如果标定类型为第四标定类型,则保持原有处理方式。如果验证码中对象的标定类型Ci,j=1,表示该对象属于第一集合P1,如果验证码中对象的标定类型Ci,j=-1,表示该对象属于第二集合P2。Specifically, the weight of the calibration type of the object sample Bi corresponding to the prompt information sample Aj can be defined as Ci, j, if the calibration type is the first calibration type, then set Ci,j=1; if the calibration type is the second calibration type , then set Ci,j=-1; if the calibration type is the third calibration type, then set Ci,j=0; if the calibration type is the fourth calibration type, keep the original processing method. If the marked type Ci,j=1 of the object in the verification code, it means that the object belongs to the first set P1, and if the marked type Ci,j=-1 of the object in the verification code, it means that the object belongs to the second set P2.

在计算验证通过值T0时,假设验证码中有P个对象,验证通过值T0可以通过公式(1)来计算:When calculating the verification pass value T0, assuming that there are P objects in the verification code, the verification pass value T0 can be calculated by formula (1):

其中,Ki对应于用户的选择,如果用户选择了对象样本Bi对应的对象,也就是对象样本Bi属于第三集合,则Ki=1;如果用户没有选择对象样本Bi对应的对象,也就是对象样本Bi不属于第三集合,则Ki=-1。Among them, Ki corresponds to the user's choice, if the user selects the object corresponding to the object sample Bi, that is, the object sample Bi belongs to the third set, then Ki=1; if the user does not select the object corresponding to the object sample Bi, that is, the object sample Bi does not belong to the third set, then Ki=-1.

该验证码中的P个对象的标定类型可以根据用户终端所返回的验证码标识在验证码对应关系表中查找,用户是否选择了对象样本Bi对应的对象,可以根据用户终端所返回的选定对象的信息来确定。具体的,如果选定对象的信息中包括选定对象的标号,服务器可以在验证码对应关系表中查找该标号对应的对象样本,从而判断选定对象是否包括对象样本Bi;如果选定对象的信息中包括选定对象的对象标识、则可以直接根据对象标识判断选定对象是否包括对象样本Bi。The calibration types of the P objects in the verification code can be searched in the verification code correspondence table according to the verification code identifier returned by the user terminal. Whether the user has selected the object corresponding to the object sample Bi can be determined according to the selected Object information is determined. Specifically, if the information of the selected object includes the label of the selected object, the server can look up the object sample corresponding to the label in the verification code correspondence table, so as to determine whether the selected object includes the object sample Bi; if the selected object If the information includes the object identifier of the selected object, it can be directly judged according to the object identifier whether the selected object includes the object sample Bi.

将计算出的验证通过值T0与预置的第一阈值T1进行比较,如果验证通过值T0超过(大于或等于)第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过。Comparing the calculated verification pass value T0 with the preset first threshold T1, if the verification pass value T0 exceeds (greater than or equal to) the first threshold T1, the verification result is judged to be passed; otherwise, the verification result is judged to be failed .

本实施例提供的技术方案中,服务器发送给用户终端的验证码包括提示信息以及与所述提示信息相关的多个对象,用户终端根据用户对所述多个对象的选择将选定对象的信息返回服务器,服务器根据选定对象的信息以及预定的规则计算验证通过值T0,然后通过比较验证通过值T0与预置的第一阈值T1,来判定验证结果是否通过。本发明实施例中的安全验证方法,一方面充分利用了人类对事物分类的先天优势,根据用户对验证码中的对象的选择来计算验证通过值,由于机器在对提示信息的理解以及对对象的分类这两方面都存在很大的困难,因此大大增加了机器破解验证码的难度,另一方面,由于并不需要用户100%的选对符合提示信息的对象,允许部分的错误存在,更容易使用户顺利的通过验证,不会增加用户的负担。也就是说本发明在不影响用户体验的前提下可以大大提高验证码的抗破解力,有效的提高了用户验证的安全性。In the technical solution provided by this embodiment, the verification code sent by the server to the user terminal includes prompt information and multiple objects related to the prompt information, and the user terminal sends the information of the selected object according to the user's selection of the multiple objects Returning to the server, the server calculates the verification pass value T0 according to the information of the selected object and predetermined rules, and then compares the verification pass value T0 with the preset first threshold T1 to determine whether the verification result is passed. The security verification method in the embodiment of the present invention, on the one hand, makes full use of the inherent advantages of human beings in classifying things, and calculates the verification passing value according to the user's selection of the object in the verification code. Since the machine understands the prompt information and the object There are great difficulties in these two aspects of the classification, so it greatly increases the difficulty of the machine cracking the verification code. On the other hand, since the user does not need 100% to select the object that meets the prompt information, some errors are allowed to exist. It is easy for the user to successfully pass the verification without increasing the burden on the user. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

第二实施例second embodiment

本实施例提供了一种安全验证的方法,结合上述第一实施例的内容,参见图5至图7,本实施例提供的方法具体包括:This embodiment provides a method for security verification. In combination with the content of the first embodiment above, refer to FIGS. 5 to 7. The method provided by this embodiment specifically includes:

步骤S21,获取新的对象样本并将所述新的对象样本存储在验证码数据库中,所述验证码数据库中包括多个提示信息样本以及多个对象样本,所述多个对象样本中的每个对象样本都具有对应于每个提示信息样本的标定类型,所述标定类型至少包括第一标定类型和第二标定类型。Step S21, acquiring a new object sample and storing the new object sample in a verification code database, the verification code database including a plurality of prompt information samples and a plurality of object samples, each of the plurality of object samples Each object sample has a marking type corresponding to each prompt information sample, and the marking type includes at least a first marking type and a second marking type.

由于验证码是持续使用的,所以对象样本和提示信息样本需要持续更新,服务器获取新的对象样本后,例如通过互联网,将新的对象样本存储在验证码数据库中。关于验证码数据库,具体的可以参照第一实施例中的相关描述,在此不再赘述。对于新增加的对象样本,默认的,可以将其对应于每个提示信息样本的标定类型设定为第三标定类型,以说明该对象样本还未对应于该提示信息样本进行标定。Since the verification code is used continuously, the object sample and the prompt information sample need to be continuously updated. After the server obtains the new object sample, for example, through the Internet, the new object sample is stored in the verification code database. Regarding the verification code database, for details, reference may be made to the relevant description in the first embodiment, which will not be repeated here. For a newly added object sample, by default, the calibration type corresponding to each prompt information sample can be set as the third calibration type, to indicate that the object sample has not been calibrated corresponding to the prompt information sample.

步骤S22,所述服务器由所述验证码数据库中选出一个提示信息样本作为所述验证码的提示信息。Step S22, the server selects a prompt information sample from the verification code database as the prompt information of the verification code.

步骤S23,所述服务器根据所选出的该提示信息样本,由所述验证码数据库中选出多个对象样本作为所述验证码中的多个对象,其中,所选出的多个对象样本中包括一个所述新的对象样本,所述新的对象样本对应于所述验证码中的所述提示信息的标定类型为第三标定类型。Step S23, the server selects a plurality of object samples from the verification code database as the plurality of objects in the verification code according to the selected prompt information sample, wherein the selected object samples includes one of the new object samples, and the marking type of the new object sample corresponding to the prompt information in the verification code is the third marking type.

假设服务器选出的提示信息样本为Ai,服务器根据提示信息样本Ai所选出的对象样本中包括一个新的对象样本Bn,该新的对象样本Bn对应于提示信息样本的Ai的标定类型为第三标定类型。在至少存在一种可能使得用户能够通过验证的前提下,验证码中新的对象样本Bn的个数也可以超过一个。Assuming that the prompt information sample selected by the server is Ai, the object sample selected by the server according to the prompt information sample Ai includes a new object sample Bn, and the calibration type of the new object sample Bn corresponding to Ai of the prompt information sample is the first Three calibration types. On the premise that there is at least one possibility for the user to pass the verification, the number of new object samples Bn in the verification code can also exceed one.

步骤S24,服务器将所述验证码发送给用户终端进行显示。In step S24, the server sends the verification code to the user terminal for display.

服务器将所选的提示信息样本Ai以及所选的多个对象样本(包括新的对象样本Bn)发送给用户终端,也就是说服务器将新的对象样本Bn随提示信息样本Ai一起发往用户终端进行验证。The server sends the selected prompt information sample Ai and the selected multiple object samples (including the new object sample Bn) to the user terminal, that is to say, the server sends the new object sample Bn together with the prompt information sample Ai to the user terminal authenticating.

假设发送的验证码中包括P个对象,其中标定类型为第一标定类型的对象为P1个,标定类型为第二标定类型的对象为P2个,标定类型为第三标定类型的对象为P3个,其中,P3的数目优选为1个。Assume that the verification code sent includes P objects, of which P1 objects are of the first calibration type, P2 are of the second calibration type, and P3 are of the third calibration type , wherein the number of P3 is preferably one.

步骤S25,接收所述用户终端根据用户对所述多个对象的选择所返回的选定对象的信息。Step S25, receiving the information of the selected object returned by the user terminal according to the user's selection of the plurality of objects.

步骤S26,根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过。Step S26: Calculate the verification pass value T0 according to the information of the selected object and predetermined rules. If the verification pass value T0 exceeds the first threshold T1, the verification result is determined to be passed; otherwise, the verification result is determined to be failed.

此步骤可以参照第一实施例中的相应步骤,这里不再赘述。For this step, reference may be made to the corresponding steps in the first embodiment, which will not be repeated here.

步骤S27,如果所述服务器计算出的验证通过值T0超过第二阈值T2,则根据用户对所述新的对象样本的选择,修改所述新的对象样本对应于所述验证码中的所述提示信息的标定类型。Step S27, if the verification pass value T0 calculated by the server exceeds the second threshold T2, modify the new object sample corresponding to the verification code according to the user's selection of the new object sample. The calibration type of the prompt message.

第二阈值T2可以大于或等于第一阈值T1,优选的,第二阈值T2大于第一阈值T1。具体的,当第二阈值T2大于第一阈值T1时,可以分为以下几种情况:The second threshold T2 may be greater than or equal to the first threshold T1, preferably, the second threshold T2 is greater than the first threshold T1. Specifically, when the second threshold T2 is greater than the first threshold T1, it can be divided into the following situations:

如果验证通过值T0没有超过或低于第一阈值T1,则验证不通过,不对新的对象样本的标定类型进行修改;If the verification passing value T0 does not exceed or be lower than the first threshold T1, the verification fails, and the calibration type of the new object sample is not modified;

如果验证通过值T0超过第一阈值T1、但没有超过第二阈值T2,则验证通过,但不对新的对象样本的标定类型进行修改;If the verification passing value T0 exceeds the first threshold T1 but does not exceed the second threshold T2, the verification is passed, but the calibration type of the new object sample is not modified;

如果验证通过值T0超过第二阈值T2,由于第二阈值T2大于或等于第一阈值T1,因此,可以认为用户对新的对象样本在当前提示信息下的选择也是正确的,因此可以根据用户对所述新的对象样本的选择,修改所述新的对象样本对应于所述验证码中的所述提示信息的标定类型。If the verification pass value T0 exceeds the second threshold T2, since the second threshold T2 is greater than or equal to the first threshold T1, it can be considered that the user's selection of the new object sample under the current prompt information is also correct, so it can be based on the user's The selection of the new object sample, modifying the new object sample corresponds to the marking type of the prompt information in the verification code.

进一步的,请参照图6,步骤S27可以包括:Further, referring to FIG. 6, step S27 may include:

步骤S271,根据用户对所述新的对象样本的选择,对所述新的对象样本的第一标定类型和第二标定类型进行计数;Step S271, counting the first marking type and the second marking type of the new object sample according to the user's selection of the new object sample;

如果用户选择了新的对象样本Bn,则对新的对象样本Bn的第一标定类型进行计数,也可以说是第一标定类型进行投票。假设新的对象样本Bn的第一标定类型的原始计数值为C0,且C0=0,那么进行计数后,新的对象样本Bn的第一标定类型的计数值C1=C0+1。If the user selects a new object sample Bn, the first labeling type of the new object sample Bn is counted, that is, the first labeling type is voted on. Assuming that the original count value of the first calibration type of the new object sample Bn is C0, and C0=0, after counting, the count value C1 of the first calibration type of the new object sample Bn=C0+1.

如果用户没有选择新的对象样本Bn,则对新的对象样本Bn的第二标定类型进行计数,也可以说是对第二标定类型进行投票。假设新的对象样本Bn的第二标定类型的原始计数值为C0,且C0=0,那么进行计数后,新的对象样本Bn的第二标定类型的计数值C2=C0+1。If the user does not select the new object sample Bn, the second marking type of the new object sample Bn is counted, which can also be said to be voting for the second marking type. Assuming that the original count value of the second calibration type of the new object sample Bn is C0, and C0=0, after counting, the count value C2 of the second calibration type of the new object sample Bn=C0+1.

步骤S272,收集多个用户对所述验证码中的所述新的对象样本的选择,Step S272, collecting choices of multiple users on the new object sample in the verification code,

收集大量用户对同一个新的对象样本Bn在同样的提示信息下的选择。Collect a large number of users' choices of the same new object sample Bn under the same prompt information.

步骤S273,判断第一标定类型的计数值和第二标定类型的计数值之和是否达到预定计数值;Step S273, judging whether the sum of the count value of the first calibration type and the count value of the second calibration type reaches a predetermined count value;

如果达到,则执行步骤S274,根据第一标定类型的计数值与第二标定类型的计数值的权值,修改所述新的对象样本对应于所述验证码中的所述提示信息的标定类型;If so, execute step S274, according to the weight of the count value of the first calibration type and the count value of the second calibration type, modify the calibration type of the new object sample corresponding to the prompt information in the verification code ;

其中,第一标定类型的计数值的权值R1=C1/(C1+C2),第二标定类型的计数值的权值R2=C2/(C1+C2)。Wherein, the weight R1 of the count value of the first calibration type=C1/(C1+C2), and the weight value of the count value of the second calibration type R2=C2/(C1+C2).

如果未达到,则执行步骤S275,不进行修改。If not, execute step S275 without modification.

进一步的,请参照图7,步骤S274可以包括:Further, referring to FIG. 7, step S274 may include:

步骤S2741,判断第一标定类型的计数值的权值是否大于第二标定类型的计数值的权值,Step S2741, judging whether the weight of the count value of the first calibration type is greater than the weight of the count value of the second calibration type,

如果大于,则执行步骤S2742,判断第一标定类型的计数值的权值与第二标定类型的计数值的权值的差值是否达到预定差值,如果是,则执行步骤S2743:将所述新的对象样本对应于所述验证码中的所述提示信息的标定类型修改为第一标定类型,否则,执行步骤S2744,将所述新的对象样本的标定类型修改为第四标定类型,If it is greater, then execute step S2742 to determine whether the difference between the weight of the count value of the first calibration type and the weight of the count value of the second calibration type reaches a predetermined difference, if yes, then execute step S2743: The marking type of the new object sample corresponding to the prompt information in the verification code is changed to the first marking type, otherwise, step S2744 is executed to change the marking type of the new object sample to the fourth marking type,

如果不大于,则执行步骤S2745,判断第二标定类型的计数值的权值与第一标定类型的计数值的权值的差值否达到所述预定差值,如果是,则执行步骤S2746,将所述新的对象样本对应于所述验证码中的所述提示信息的标定类型修改为第二标定类型,否则,执行步骤S2747:将所述新的对象样本的标定类型修改为第四标定类型。If not, execute step S2745 to determine whether the difference between the weight of the count value of the second calibration type and the weight of the count value of the first calibration type reaches the predetermined difference, if yes, execute step S2746, Modify the marking type of the new object sample corresponding to the prompt information in the verification code to the second marking type, otherwise, perform step S2747: modify the marking type of the new object sample to the fourth marking type type.

具体的,如果R1大于R2,且R1与R2的差值达到预定差值,说明新的对象样本的标定类型是第一标定类型的权值远高于是第二标定类型的权值,则可以认定新的对象样本的标定类型应修改为第一标定类型。Specifically, if R1 is greater than R2, and the difference between R1 and R2 reaches a predetermined difference, it means that the calibration type of the new object sample is the weight of the first calibration type is much higher than the weight of the second calibration type, then it can be determined that The calibration type of the new object sample should be changed to the first calibration type.

如果R1小于R2,且R2与R1的差值达到预定差值,说明新的对象样本的标定类型是第二标定类型的权值远高于是第一标定类型的权值,则可以认定新的对象样本的标定类型应修改为第二标定类型。If R1 is less than R2, and the difference between R2 and R1 reaches a predetermined difference, it means that the calibration type of the new object sample is the weight of the second calibration type is much higher than the weight of the first calibration type, and the new object can be identified The calibration type of the sample should be changed to the second calibration type.

如果R1大于R2,但是R1与R2的差值未达到预定差值,或者R1小于R2,但是R2与R1的差值未达到预定差值,说明新的对象样本的标定类型是第一标定类型的权值和是第二标定类型的权值相差不大,则可以认定新的对象样本不适用当前的提示信息Ai,因此,新的对象样本的标定类型应修改为第四标定类型。If R1 is greater than R2, but the difference between R1 and R2 does not reach the predetermined difference, or if R1 is smaller than R2, but the difference between R2 and R1 does not reach the predetermined difference, it means that the calibration type of the new target sample is the first calibration type If the weight value is not much different from the weight value of the second calibration type, it can be determined that the current prompt information Ai is not applicable to the new object sample. Therefore, the calibration type of the new object sample should be changed to the fourth calibration type.

至此,新的对象样本Bn对应于提示信息Ai的自动标定已完成,只要将上述步骤对每个提示信息都重复一次,就可以完成新的对象样本Bn对应于所有提示信息的自动标定。So far, the automatic calibration of the new object sample Bn corresponding to the prompt information Ai has been completed, as long as the above steps are repeated for each prompt information, the automatic calibration of the new object sample Bn corresponding to all the prompt information can be completed.

本实施例提供的技术方案,服务器将新的对象样本以及其他对象样本与提示信息一同发送给用户终端,用户终端根据用户对对象的选择将选定对象的信息返回服务器,服务器根据选定对象的信息以及预定的规则计算验证通过值T0,然后通过比较验证通过值T0与预置的第一阈值T1,来判定验证结果是否通过,进一步的,服务器还比较验证通过值T0与第二阈值T2,如果验证通过值T0超过第二阈值T2,则根据用户对所述新的对象样本的选择,修改所述新的对象样本对应于所述验证码中的所述提示信息的标定类型,从而实现了对新的对象样本的自动标定,不需要人工对新的对象样本进行标定,提高了效率。In the technical solution provided by this embodiment, the server sends new object samples and other object samples together with prompt information to the user terminal, the user terminal returns the information of the selected object to the server according to the user's selection of the object, and the server Information and predetermined rules calculate the verification pass value T0, and then determine whether the verification result is passed by comparing the verification pass value T0 with the preset first threshold T1. Further, the server also compares the verification pass value T0 with the second threshold T2, If the verification pass value T0 exceeds the second threshold T2, according to the user's selection of the new object sample, the new object sample is modified to correspond to the calibration type of the prompt information in the verification code, thereby realizing The automatic calibration of new object samples does not require manual calibration of new object samples, thereby improving efficiency.

第三实施例third embodiment

本实施例提供了一种安全验证的方法,结合上述第一、第二实施例的内容,参见图8及图10,本实施例提供的方法具体包括:This embodiment provides a method for security verification. In combination with the contents of the first and second embodiments above, see FIG. 8 and FIG. 10 , the method provided by this embodiment specifically includes:

步骤S31,获取新的提示信息样本并将所述新的提示信息样本存储在所述验证码数据库中,所述验证码数据库中包括多个提示信息样本以及多个对象样本,所述多个对象样本中的每个对象样本都具有对应于每个提示信息样本的标定类型,所述标定类型至少包括第一标定类型和第二标定类型;Step S31, acquiring a new prompt information sample and storing the new prompt information sample in the verification code database, the verification code database including a plurality of prompt information samples and a plurality of object samples, the plurality of object samples Each object sample in the sample has a marking type corresponding to each prompt information sample, and the marking type includes at least a first marking type and a second marking type;

服务器获取新的提示信息样本后,例如通过互联网,将新的提示信息样本存储在验证码数据库中。关于验证码数据库,具体的可以参照第一实施例中的相关描述,在此不再赘述。After the server acquires the new sample of prompt information, for example, through the Internet, the server stores the new sample of prompt information in the verification code database. Regarding the verification code database, for details, reference may be made to the relevant description in the first embodiment, which will not be repeated here.

步骤S32,获取所述多个对象样本中的部分对象样本对应于所述新的提示信息样本的标定类型,并将所述多个对象样本中的其他对象样本对应于所述新的提示信息样本的标定类型设置为第三标定类型;Step S32, obtaining the calibration type of some object samples in the plurality of object samples corresponding to the new prompt information sample, and corresponding other object samples in the plurality of object samples to the new prompt information sample The calibration type of is set to the third calibration type;

具体的,可以在验证码数据库中随机选取小批量的对象样本,例如几百个,对这些对象样本中的每个对象样本对应于新的提示信息样本的标定类型进行人工标定,服务器获取所述多个对象样本中的部分对象样本对应于所述新的提示信息样本的标定类型,并将验证码数据库中的其他对象样本对应于所述新的提示信息样本的标定类型设置为第三标定类型,也就是“未标定”。步骤S33,所述服务器将新的提示信息样本作为所述验证码的提示信息;Specifically, a small batch of object samples, such as several hundred, can be randomly selected in the verification code database, and manual calibration is performed on each of these object samples corresponding to the calibration type of the new prompt information sample, and the server obtains the Part of the object samples in the multiple object samples correspond to the calibration type of the new prompt information sample, and set the calibration type of other object samples in the verification code database corresponding to the new prompt information sample to the third calibration type , that is, "uncalibrated". Step S33, the server uses the new prompt information sample as the prompt information of the verification code;

步骤S34,所述服务器根据所述新的提示信息样本,由所述验证码数据库中选出多个对象样本作为所述验证码中的多个对象,其中,所述多个对象样本包括至少一个已标定对象样本以及至少一个未标定对象样本,所述已标定对象样本为已对应所述新的提示信息样本进行标定的对象样本,所述未标定对象样本为对应于所述新的提示信息样本的标定类型为第三标定类型的对象样本。Step S34, the server selects a plurality of object samples from the verification code database as a plurality of objects in the verification code according to the new prompt information sample, wherein the plurality of object samples include at least one A calibrated object sample and at least one uncalibrated object sample, the calibrated object sample is an object sample that has been calibrated corresponding to the new prompt information sample, and the uncalibrated object sample is corresponding to the new prompt information sample The calibration type of is the object sample of the third calibration type.

假设新的提示信息样本为Anew,服务器根据新的提示信息样本Anew所选出的对象样本中包括至少一个已标定对象样本以及至少一个未标定对象样本,该未标定对象样本对应于新的提示信息样本Anew的标定类型为第三标定类型。如此,当前对象样本对应于新增提示信息样本的标定过程就可以转换为第二实施例中的新增对象样本对应于当前提示信息样本的标定过程。Assuming that the new prompt information sample is Anew, the object samples selected by the server according to the new prompt information sample Anew include at least one calibrated object sample and at least one unmarked object sample, and the unmarked object sample corresponds to the new prompt information The calibration type of the sample Anew is the third calibration type. In this way, the calibration process in which the current object sample corresponds to the newly added prompt information sample can be transformed into the calibration process in the second embodiment in which the newly added object sample corresponds to the current prompt information sample.

步骤S35,服务器将所述验证码发送给用户终端进行显示;Step S35, the server sends the verification code to the user terminal for display;

步骤S36,接收所述用户终端根据用户对所述多个对象的选择所返回的选定对象的信息;以及Step S36, receiving the information of the selected object returned by the user terminal according to the user's selection of the plurality of objects; and

步骤S37,根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过。Step S37, calculate the verification pass value T0 according to the information of the selected object and predetermined rules, if the verification pass value T0 exceeds the first threshold T1, the verification result is judged to be passed, otherwise, the verification result is judged to be failed.

步骤S35至步骤S37可以参考上述实施例中的相应步骤,这里不再赘述。For steps S35 to S37, reference may be made to corresponding steps in the foregoing embodiments, and details are not repeated here.

步骤S38,如果所述服务器计算出的验证通过值超过第三阈值T3,则根据用户对所述未标定对象样本的选择,修改未标定对象样本的标定类型。Step S38, if the verification passing value calculated by the server exceeds the third threshold T3, modify the marking type of the unmarked object sample according to the user's selection of the unmarked object sample.

第三阈值T3可以大于或等于第一阈值T1,第三阈值T3可以与第二阈值T2相同,也可以不相同。优选的,第三阈值T3大于第一阈值T1。具体的,当第三阈值T3大于第一阈值T1时,可以分为以下几种情况:The third threshold T3 may be greater than or equal to the first threshold T1, and the third threshold T3 may be the same as or different from the second threshold T2. Preferably, the third threshold T3 is greater than the first threshold T1. Specifically, when the third threshold T3 is greater than the first threshold T1, it can be divided into the following situations:

如果验证通过值T0没有超过或低于第一阈值T1,则验证不通过,不对未标定对象样本的标定类型进行修改;If the verification passing value T0 does not exceed or be lower than the first threshold T1, the verification fails, and the calibration type of the uncalibrated object sample is not modified;

如果验证通过值T0超过第一阈值T1、但没有超过第三阈值T3,则验证通过,但不对未标定对象样本的标定类型进行修改;If the verification passing value T0 exceeds the first threshold T1 but does not exceed the third threshold T3, the verification is passed, but the calibration type of the uncalibrated object sample is not modified;

如果验证通过值T0超过第三阈值T3,由于第三阈值T3大于或等于第一阈值T1,因此,可以认为用户对未标定对象样本在新的提示信息下的选择也是正确的,因此可以根据用户对未标定对象样本的选择,修改未标定对象样本对应于所述验证码中的新的提示信息的标定类型。If the verification pass value T0 exceeds the third threshold T3, since the third threshold T3 is greater than or equal to the first threshold T1, it can be considered that the user’s choice of the unmarked object sample under the new prompt information is also correct, so it can be based on the user’s For the selection of unmarked object samples, modify the unmarked object samples corresponding to the marking type of the new prompt information in the verification code.

进一步的,请参照图9,步骤S38可以包括:Further, referring to FIG. 9, step S38 may include:

步骤S381,根据用户对未标定的对象样本的选择,对所述未标定的对象样本的第一标定类型和第二标定类型进行计数;Step S381, counting the first calibration type and the second calibration type of the unlabeled object samples according to the user's selection of the unlabeled object samples;

如果用户选择了未标定对象样本,则对未标定对象样本的第一标定类型进行计数,也可以说是第一标定类型进行投票。假设未标定对象样本的第一标定类型的原始计数值为C0,且C0=0,那么进行计数后,未标定对象样本Bn的第一标定类型的计数值C1=C0+1。If the user selects an unlabeled object sample, the first labeling type of the unlabeled object sample is counted, that is to say, the first labeling type is voted on. Assuming that the original count value of the first calibration type of the uncalibrated object sample is C0, and C0=0, then after counting, the count value C1 of the first calibration type of the uncalibrated object sample Bn=C0+1.

如果用户没有选择未标定对象样本Bn,则对未标定对象样本Bn的第二标定类型进行计数,也可以说是对第二标定类型进行投票。假设未标定对象样本Bn的第二标定类型的原始计数值为C0,且C0=0,那么进行计数后,未标定对象样本Bn的第二标定类型的计数值C2=C0+1。If the user does not select the unmarked object sample Bn, the second marking type of the unmarked object sample Bn is counted, which can also be said to be a vote for the second marking type. Assuming that the original count value of the second calibration type of the uncalibrated object sample Bn is C0, and C0=0, then after counting, the count value C2 of the second calibration type of the uncalibrated object sample Bn=C0+1.

步骤S382,收集多个用户对所述验证码中的所述未标定的对象样本的选择,Step S382, collecting choices of multiple users on the unmarked object samples in the verification code,

收集大量用户对同一个未标定对象样本在同样的新的提示信息下的选择。Collect a large number of users' choices of the same unlabeled object sample under the same new prompt information.

步骤S383,判断第一标定类型的计数值和第二标定类型的计数值之和是否达到预定计数值,Step S383, judging whether the sum of the count value of the first calibration type and the count value of the second calibration type reaches a predetermined count value,

如果达到,则执行步骤S384,根据第一标定类型的计数值与第二标定类型的计数值的权值,修改所述未标定对象样本对应于所述验证码中的所述提示信息的标定类型。If so, execute step S384, modify the calibration type of the unmarked object sample corresponding to the prompt information in the verification code according to the weight of the count value of the first calibration type and the count value of the second calibration type .

其中,第一标定类型的计数值的权值R1=C1/(C1+C2),第二标定类型的计数值的权值R2=C2/(C1+C2)。Wherein, the weight R1 of the count value of the first calibration type=C1/(C1+C2), and the weight value of the count value of the second calibration type R2=C2/(C1+C2).

如果未达到,则执行步骤S385,不进行修改。If not, execute step S385 without modification.

进一步的,请参照图10,其中,步骤S384可以包括:Further, please refer to FIG. 10, wherein step S384 may include:

步骤S3841,判断第一标定类型的计数值的权值是否大于第二标定类型的计数值的权值,Step S3841, judging whether the weight of the count value of the first calibration type is greater than the weight of the count value of the second calibration type,

如果大于,则执行步骤S3842,判断第一标定类型的计数值的权值与第二标定类型的计数值的权值的差值是否达到预定差值,如果是,则执行步骤S3843,将所述未标定对象样本对应于所述验证码中的所述提示信息的标定类型修改为第一标定类型,否则,执行步骤S3844,将所述未标定对象样本的标定类型修改为第四标定类型,If it is greater, then execute step S3842 to determine whether the difference between the weight of the count value of the first calibration type and the weight of the count value of the second calibration type reaches a predetermined difference, if yes, then execute step S3843 to convert the The calibration type of the unlabeled object sample corresponding to the prompt information in the verification code is changed to the first calibration type, otherwise, step S3844 is performed to modify the calibration type of the unlabeled object sample to the fourth calibration type,

如果不大于,则执行步骤S3845,判断第二标定类型的计数值的权值与第一标定类型的计数值的权值的差值是否达到所述预定差值,如果是,则执行步骤S3846,将所述未标定对象样本对应于所述验证码中的所述提示信息的标定类型修改为第二标定类型,否则,则执行步骤S3847,将所述未标定对象样本的标定类型修改为第四标定类型。If not, execute step S3845 to determine whether the difference between the weight of the count value of the second calibration type and the weight of the count value of the first calibration type reaches the predetermined difference, if yes, execute step S3846, Modify the marking type of the unmarked object sample corresponding to the prompt information in the verification code to the second marking type, otherwise, perform step S3847 to change the marking type of the unmarked object sample to the fourth Calibration type.

具体的,如果R1大于R2,且R1与R2的差值达到预定差值,说明未标定的对象样本的标定类型是第一标定类型的权值远高于是第二标定类型的权值,则可以认定未标定的对象样本的标定类型应修改为第一标定类型。Specifically, if R1 is greater than R2, and the difference between R1 and R2 reaches a predetermined difference, it means that the calibration type of the uncalibrated target sample is the weight of the first calibration type is much higher than the weight of the second calibration type, then you can The calibration type of the uncalibrated target sample should be changed to the first calibration type.

如果R1小于R2,且R2与R1的差值达到预定差值,说明未标定的对象样本的标定类型是第二标定类型的权值远高于是第一标定类型的权值,则可以认定未标定的对象样本的标定类型应修改为第二标定类型。If R1 is less than R2, and the difference between R2 and R1 reaches a predetermined difference, it means that the calibration type of the uncalibrated object sample is the weight of the second calibration type is much higher than the weight of the first calibration type, then it can be determined that it is uncalibrated The calibration type of the object sample should be changed to the second calibration type.

如果R1大于R2,但是R1与R2的差值未达到预定差值,或者R1小于R2,但是R2与R1的差值未达到预定差值,说明未标定的对象样本的标定类型是第一标定类型的权值和是第二标定类型的权值相差不大,则可以认定未标定的对象样本不适用新的提示信息Anew,因此,未标定的对象样本的标定类型应修改为第四标定类型。If R1 is greater than R2, but the difference between R1 and R2 does not reach the predetermined difference, or if R1 is smaller than R2, but the difference between R2 and R1 does not reach the predetermined difference, it means that the calibration type of the uncalibrated target sample is the first calibration type The weight of the weight is not much different from the weight of the second calibration type, then it can be determined that the new prompt information Anew is not applicable to the uncalibrated object samples. Therefore, the calibration type of the uncalibrated object samples should be changed to the fourth calibration type.

至此,未标定的对象样本对应于新的提示信息的自动标定已完成,只要将上述步骤对每个新的提示信息都重复一次,就可以完成未标定的对象样本对应于所有新的提示信息的自动标定。So far, the automatic calibration of unmarked object samples corresponding to new prompt information has been completed. As long as the above steps are repeated for each new prompt information, the uncalibrated object samples corresponding to all new prompt information can be completed. Automatic calibration.

本实施例提供的技术方案,服务器将新的提示信息、已对应新的提示信息进行标定的对象样本以及未标定的对象样本一同发送给用户终端,用户终端根据用户对对象的选择将选定对象的信息返回服务器,服务器根据选定对象的信息以及预定的规则计算验证通过值T0,然后通过比较验证通过值T0与预置的第一阈值T1,来判定验证结果是否通过,进一步的,服务器还比较验证通过值T0与第三阈值T3,如果验证通过值T0超过第三阈值T3,则根据用户对未标定的对象样本的选择,修改所述未标定的对象样本对应于所述验证码中的新的提示信息的标定类型,只需要获取少量的对象样本对应于新增提示信息样本的标定,即可实现对当前对象样本对应于新增提示信息样本的标定,提高了效率。In the technical solution provided by this embodiment, the server sends new prompt information, object samples that have been calibrated corresponding to the new prompt information, and uncalibrated object samples to the user terminal, and the user terminal sends the selected object according to the user's selection of the object. The information is returned to the server, and the server calculates the verification pass value T0 according to the information of the selected object and predetermined rules, and then compares the verification pass value T0 with the preset first threshold T1 to determine whether the verification result is passed. Further, the server also Comparing the verification pass value T0 with the third threshold T3, if the verification pass value T0 exceeds the third threshold T3, modify the unmarked object sample corresponding to the verification code according to the user's selection of the unmarked object sample The new calibration type of prompt information only needs to obtain a small number of object samples corresponding to the calibration of the newly added prompt information samples, and then the calibration of the current object samples corresponding to the newly added prompt information samples can be realized, which improves the efficiency.

第四实施例Fourth embodiment

本实施例提供了一种安全验证的方法,结合上述第一、第二、第三实施例的内容,参见图11及图12,本实施例提供的方法具体包括:This embodiment provides a method for security verification. Combining the contents of the first, second, and third embodiments above, refer to FIG. 11 and FIG. 12. The method provided by this embodiment specifically includes:

步骤S41,所述服务器由所述验证码数据库中选出一个提示信息样本作为所述验证码的提示信息,所述验证码数据库中包括多个提示信息样本以及多个对象样本,所述多个对象样本中的每个对象样本都具有对应于每个提示信息样本的标定类型,所述标定类型至少包括第一标定类型和第二标定类型;Step S41, the server selects a prompt information sample from the verification code database as the prompt information of the verification code, and the verification code database includes a plurality of prompt information samples and a plurality of object samples, and the plurality of Each object sample in the object sample has a marking type corresponding to each prompt information sample, and the marking type includes at least a first marking type and a second marking type;

步骤S42,所述服务器根据所选出的该提示信息样本,由所述验证码数据库中选出多个对象样本作为所述验证码中的多个对象,其中,所选出的多个对象样本对应于所选出的该提示信息样本的标定类型分别为第一标定类型或第二标定类型,且至少有一个对象样本对应于所选出的该提示信息样本的标定类型为第一标定类型。Step S42, the server selects a plurality of object samples from the verification code database as the plurality of objects in the verification code according to the selected prompt information sample, wherein the selected object samples The marking type corresponding to the selected prompt information sample is the first marking type or the second marking type, and at least one object sample corresponding to the marking type of the selected prompt information sample is the first marking type.

步骤S43,服务器将验证码发送给用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;Step S43, the server sends a verification code to the user terminal for display, the verification code includes prompt information and multiple objects related to the prompt information;

步骤S44,接收所述用户终端根据用户对所述多个对象的选择所返回的选定对象的信息;Step S44, receiving the information of the selected object returned by the user terminal according to the user's selection of the plurality of objects;

步骤S45,根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过。Step S45, calculate the verification pass value T0 according to the information of the selected object and predetermined rules, if the verification pass value T0 exceeds the first threshold T1, the verification result is judged to be passed, otherwise, the verification result is judged to be failed.

步骤S41至步骤S45可以参考上述实施例中的相应步骤,区别在于,本实施例中,所选出的多个对象样本对应于所选出的该提示信息样本的标定类型分别为第一标定类型或第二标定类型,也就是说所选出的多个对象样本均已对应于所选出的提示信息样本进行过标定。Steps S41 to S45 can refer to the corresponding steps in the above-mentioned embodiment, the difference is that in this embodiment, the calibration types of the selected object samples corresponding to the selected prompt information samples are respectively the first calibration type Or the second calibration type, that is to say, all the selected object samples have been calibrated corresponding to the selected prompt information samples.

步骤S46,如果所述验证结果为通过,判断所述验证通过值T0是否超过第四阈值T4。Step S46, if the verification result is passed, it is judged whether the verification passing value T0 exceeds the fourth threshold T4.

第四阈值T4可以大于或等于第一阈值T1,第四阈值T4可以与第二阈值T2或第三阈值T3相同,也可以不相同。优选的,第四阈值T4大于第一阈值T1。具体的,当第四阈值T4大于第一阈值T1时,可以分为以下几种情况:The fourth threshold T4 may be greater than or equal to the first threshold T1, and the fourth threshold T4 may be the same as or different from the second threshold T2 or the third threshold T3. Preferably, the fourth threshold T4 is greater than the first threshold T1. Specifically, when the fourth threshold T4 is greater than the first threshold T1, it can be divided into the following situations:

如果验证通过值T0没有超过或低于第四阈值T4,则验证不通过,不对对象样本的标定类型进行更正;If the verification passing value T0 does not exceed or be lower than the fourth threshold T4, the verification fails, and the calibration type of the target sample is not corrected;

如果验证通过值T0超过第一阈值T1、但没有超过第四阈值T4,则验证通过,但不对对象样本的标定类型进行更正;If the verification passing value T0 exceeds the first threshold T1 but does not exceed the fourth threshold T4, the verification is passed, but the calibration type of the target sample is not corrected;

如果验证通过值T0超过第四阈值T4,由于第四阈值T4大于或等于第一阈值T1,因此,可以认为用户对对象样本在当前提示信息下的选择也是正确的,因此可以根据用户对该对象样本的选择,更正该对象样本对应于当前提示信息的标定类型。If the verification pass value T0 exceeds the fourth threshold T4, since the fourth threshold T4 is greater than or equal to the first threshold T1, it can be considered that the user's selection of the object sample under the current prompt information is also correct, so it can be based on the user's selection of the object. Sample selection, correct the object sample corresponding to the calibration type of the current prompt message.

也就是说,如果验证通过值T0超过第四阈值T4,则执行步骤S461,判断用户对所述对象的选择与所述对象在所述验证码数据库中的标定类型是否相符,如果不相符,则根据用户的选择,对所述对象在所述验证码数据库中的标定类型进行修改。That is to say, if the verification pass value T0 exceeds the fourth threshold T4, step S461 is executed to judge whether the selection of the object by the user matches the marked type of the object in the verification code database, and if not, then According to the selection of the user, the marking type of the object in the verification code database is modified.

如果不是,则执行步骤S462,不进行修改。If not, execute step S462 without modification.

具体的,请参照图12,步骤S461可以包括:Specifically, referring to FIG. 12, step S461 may include:

步骤S4611,判断用户对所述对象的选择与所述对象在所述验证码数据库中的标定类型是否相符,Step S4611, judging whether the selection of the object by the user is consistent with the marking type of the object in the verification code database,

如果相符,则执行步骤S4612,对所述对象对应于所述验证码中的提示信息的标定类型进行正确计数;If they match, execute step S4612 to correctly count the marking type of the object corresponding to the prompt information in the verification code;

如果不相符,则执行步骤S4613,对所述对象对应于所述验证码中的提示信息的标定类型进行错误计数;If not, execute step S4613 to count the errors of the object corresponding to the marking type of the prompt information in the verification code;

假设验证码中包括提示信息Ai以及对象Bj,对象Bj对应的样本对应于提示信息Ai的标定类型为第一标定类型,如果用户选择了对象Bj,则认为用户对对象Bj的选择与该对象Bj在所述验证码数据库中的标定类型是相符的,则对对象Bj对应于提示信息Ai的标定类型进行正确计数,也就是对对象Bj对应于提示信息Ai的标定类型的正确计数器加1。同样的,假设对象Bj对应的样本对应于提示信息Ai的标定类型为第二标定类型,如果用户没有选择对象Bj,则认为用户对对象Bj的选择与该对象Bj在所述验证码数据库中的标定类型是相符的,则对对象Bj对应于提示信息Ai的标定类型进行正确计数,也就是对对象Bj对应于提示信息Ai的标定类型的正确计数器加1。Assuming that the verification code includes prompt information Ai and object Bj, and the sample corresponding to object Bj corresponds to the calibration type of prompt information Ai as the first calibration type, if the user selects object Bj, it is considered that the user’s selection of object Bj is consistent with the object Bj If the marking types in the verification code database are consistent, then the correct counting of the marking type of the object Bj corresponding to the prompt information Ai is performed, that is, adding 1 to the correct counter of the marking type of the object Bj corresponding to the prompt information Ai. Similarly, assuming that the sample corresponding to the object Bj corresponds to the calibration type of the prompt information Ai as the second calibration type, if the user does not select the object Bj, it is considered that the user's selection of the object Bj is consistent with the object Bj in the verification code database. If the calibration types match, then the correct counting of the calibration type of the object Bj corresponding to the prompt information Ai is performed, that is, adding 1 to the correct counter of the calibration type of the object Bj corresponding to the prompt information Ai.

在这种情况下,假设对象Bj的标定类型的正确计数器的原始计数值为X0,且X0=0,那么进行计数后,对象Bj的标定类型的正确计数器的计数值X=X0+1。In this case, assuming that the original count value of the correct counter of the calibration type of the object Bj is X0, and X0=0, then after counting, the count value of the correct counter of the calibration type of the object Bj is X=X0+1.

假设对象Bj对应的样本对应于提示信息Ai的标定类型为第二标定类型,如果用户选择了对象Bj,则认为用户对对象Bj的选择与该对象Bj在所述验证码数据库中的标定类型是不相符的,则对对象Bj对应于提示信息Ai的标定类型进行错误计数,也就是对对象Bj对应于提示信息Ai的标定类型的错误计数器加1。同样的,假设对象Bj对应的样本对应于提示信息Ai的标定类型为第一标定类型,如果用户没有选择对象Bj,则认为用户对对象Bj的选择与该对象Bj在所述验证码数据库中的标定类型是不相符的,则对对象Bj对应于提示信息Ai的标定类型进行错误计数,也就是对对象Bj对应于提示信息Ai的标定类型的错误计数器加1。Assuming that the sample corresponding to the object Bj corresponds to the calibration type of the prompt information Ai as the second calibration type, if the user selects the object Bj, it is considered that the user's selection of the object Bj is the same as the calibration type of the object Bj in the verification code database. If they do not match, count the error of the calibration type of the object Bj corresponding to the prompt information Ai, that is, add 1 to the error counter of the calibration type of the object Bj corresponding to the prompt information Ai. Similarly, assuming that the sample corresponding to the object Bj corresponds to the calibration type of the prompt information Ai as the first calibration type, if the user does not select the object Bj, it is considered that the user's selection of the object Bj is consistent with the object Bj in the verification code database. If the calibration types do not match, the error count is performed on the calibration type of the object Bj corresponding to the prompt information Ai, that is, the error counter of the calibration type of the object Bj corresponding to the prompt information Ai is added by 1.

在这种情况下,假设对象Bj的标定类型的错误计数器的原始计数值为Y0,且Y0=0,那么进行计数后,对象Bj的标定类型的错误计数器的计数值Y=Y0+1。In this case, assuming that the original count value of the error counter of the calibration type of the object Bj is Y0, and Y0=0, then after counting, the count value of the error counter of the calibration type of the object Bj is Y=Y0+1.

步骤S4614,收集多个用户对所述验证码中的对象的选择以及每个对象的正确计数和错误计数,计算所述验证码中每个对象的错误计数与正确计数的比值,当所述比值大于最低阈值且小于最高阈值时,将所述对象对应于所述验证码中的提示信息的标定类型设置修改为第四标定类型,当所述比值大于或等于最高阈值时,如果所述对象的原标定类型为第一标定类型,则将所述对象的标定类型修改为第二标定类型,如果所述对象的原标定类型为第二标定类型,则将所述对象的标定类型修改为第一标定类型。Step S4614, collect multiple users' selections of the objects in the verification code and the correct count and error count of each object, and calculate the ratio of the wrong count to the correct count for each object in the verification code, when the ratio When it is greater than the lowest threshold and less than the highest threshold, modify the marking type setting of the object corresponding to the prompt information in the verification code to the fourth marking type. When the ratio is greater than or equal to the highest threshold, if the object’s The original calibration type is the first calibration type, then modify the calibration type of the object to the second calibration type, if the original calibration type of the object is the second calibration type, then modify the calibration type of the object to the first Calibration type.

具体的,可以收集大量用户对同一个对象在同样的提示信息下的选择。验证码中每个对象的错误计数与正确计数的比值指的是验证码中的每个对象对应于当前提示信息的错误计数与正确计数的比值Q,其中,Q=Y/X。Specifically, a large number of users' choices of the same object under the same prompt information may be collected. The ratio of the error count to the correct count of each object in the verification code refers to the ratio Q of the error count to the correct count of each object in the verification code corresponding to the current prompt information, where Q=Y/X.

如果比值Q大于最低阈值Qmin且小于最高阈值Qmax时,则可以认为该对象在当前提示下不适合使用,将对象对应于当前提示信息的标定类型修改为第四标定类型。If the ratio Q is greater than the lowest threshold Qmin and smaller than the highest threshold Qmax, it can be considered that the object is not suitable for use under the current prompt, and the calibration type corresponding to the current prompt information of the object is changed to the fourth calibration type.

如果比值Q大于或等于最高阈值Qmax时,则可以认为该对象对应于当前提示信息的原始标定类型出现了错误,如果该对象的原标定类型为第一标定类型,则将该对象的标定类型修改为第二标定类型,如果该对象的原标定类型为第二标定类型,则将该对象的标定类型修改为第一标定类型。If the ratio Q is greater than or equal to the highest threshold Qmax, it can be considered that the original calibration type of the object corresponding to the current prompt message has an error. If the original calibration type of the object is the first calibration type, the calibration type of the object is modified is the second calibration type, if the original calibration type of the object is the second calibration type, then modify the object’s calibration type to the first calibration type.

至此,对于对象Bj对应于提示信息Ai的自动更正已完成,只要将上述步骤对每个提示信息都重复一次,就可以完成对象样本对应于所有提示信息的自动更正。So far, the automatic correction of the object Bj corresponding to the prompt information Ai has been completed, as long as the above steps are repeated for each prompt information, the automatic correction of the object sample corresponding to all the prompt information can be completed.

进一步的,如果验证码数据库中的对应于同一个提示信息样本的标定类型为第四标定类型的对象样本的个数超过预定个数,则可以对该提示信息样本进行标记,或者说对该提示信息进行报警,也就是说,如果某个提示信息对很多甚至大多数对象的答案都被改为“不适用”,说明该提示信息样本本身不适合作为提示信息或者当前的对象样本大多不适用于该提示信息样本,因此,可以对该提示信息样本进行标记,以交由人工进行判定是否需要删除该提示信息样本或者针对性的增加新的对象样本。Further, if the number of object samples whose calibration type is the fourth calibration type corresponding to the same prompt information sample in the verification code database exceeds a predetermined number, the prompt information sample can be marked, or the prompt information sample can be marked. That is to say, if the answer of a prompt message is changed to "Not Applicable" for many or even most objects, it means that the prompt message sample itself is not suitable as a prompt message or most of the current object samples are not applicable. The prompt information sample, therefore, can be marked for the manual to determine whether to delete the prompt information sample or specifically add a new object sample.

在其他的具体实施方式中还可以通过比较正确计数的权值与错误计数的权值来决定是否对该对象的标定类型进行更正,In other specific implementations, it is also possible to determine whether to correct the calibration type of the object by comparing the weight of the correct count and the weight of the wrong count.

其中,正确计数的权值Q1=X/(X+Y),错误计数的权值Q2=Y/(X+Y)。Among them, the weight value Q1 of correct counting=X/(X+Y), and the weight value of wrong counting value Q2=Y/(X+Y).

具体的,步骤4614可以由下述步骤来替代:Specifically, step 4614 may be replaced by the following steps:

收集多个用户对所述验证码中的对象的选择以及每个对象的正确计数和错误计数,计算所述验证码中每个对象的正确计数的权值与错误计数的权值;Collecting multiple users' selections of the objects in the verification code and the correct count and wrong count of each object, and calculating the weight of the correct count and the weight of the wrong count of each object in the verification code;

判断错误计数的权值是否大于正确计数的权值,如果大于,则判断错误计数的权值与正确计数的权值的差值是否达到预定差值,如果是,则根据用户对该对象样本的选择,更正该对象样本对应于当前提示信息的标定类型并且将标定类型的权值Ci,j修改为-sign(Ci,j)*Q2,否则,将该对象样本的标定类型修改为第四标定类型,Judging whether the weight of the wrong count is greater than the weight of the correct count, if it is greater, then judge whether the difference between the weight of the wrong count and the weight of the correct count reaches a predetermined difference, if so, according to the user's weight of the object sample Select, correct the calibration type of the object sample corresponding to the current prompt information and modify the weight Ci,j of the calibration type to -sign(Ci,j)*Q2, otherwise, modify the calibration type of the object sample to the fourth calibration type,

如果不大于,则判断正确计数的权值与错误计数的权值的差值是否达到预定差值,如果是,则不更正标定类型、但将标定类型的权值Ci,j修改为sign(Ci,j)*Q1。If it is not greater than, judge whether the difference between the weight of the correct count and the weight of the wrong count reaches the predetermined difference, if yes, do not correct the calibration type, but modify the weight Ci,j of the calibration type to sign(Ci ,j)*Q1.

具体来讲,假设对象样本Bj对应于提示信息样本Ai的正确计数的权值Q1=0.4、错误计数的权值Q2=0.6、标定类型的权值为1,且错误计数的权值与正确计数的权值的预定差值为0.1,则将对象样本Bj对应于提示信息样本Ai的标定类型的权值该为-0.6。Specifically, it is assumed that the object sample Bj corresponds to the weight of the correct count Q1=0.4, the weight of the wrong count Q2=0.6, the weight of the calibration type corresponding to the prompt information sample Ai, and the weight of the wrong count is the same as that of the correct count The predetermined difference of the weights of the weights is 0.1, then the weight of the calibration type corresponding to the object sample Bj corresponding to the prompt information sample Ai should be -0.6.

假设对象样本Bj对应于提示信息样本Ai的正确计数的权值Q1=0.6、错误计数的权值Q2=0.4、标定类型的权值为1,且正确计数的权值与错误计数的权值的预定差值为0.1,则将对象样本Bj对应于提示信息样本Ai的标定类型的权值该为0.6。Assume that the object sample Bj corresponds to the weight of the correct count Q1=0.6, the weight of the wrong count Q2=0.4, and the weight of the calibration type corresponding to the prompt information sample Ai, and the weight of the correct count is equal to the weight of the wrong count If the predetermined difference is 0.1, then the weight of the calibration type of the object sample Bj corresponding to the prompt information sample Ai should be 0.6.

通过以上对标定类型的权值Ci,j的修正可以使该对象样本的标定类型的权值更加准确,从而也使验证通过值T0的计算更加准确。Through the above modification to the weight value Ci,j of the calibration type, the weight value of the calibration type of the target sample can be made more accurate, thereby making the calculation of the verification passing value T0 more accurate.

本实施例提供的技术方案,服务器将验证码发送给用户终端,用户终端根据用户对对象的选择将选定对象的信息返回服务器,服务器根据选定对象的信息以及预定的规则计算验证通过值T0,然后通过比较验证通过值T0与预置的第一阈值T1,来判定验证结果是否通过,进一步的,服务器还比较验证通过值T0与第四阈值T4,如果验证通过值T0超过第四阈值T4,则根据用户对对象的选择,更正该对象样本对应于当前提示信息的标定类型,实现了对当前对象样本标定类型的自动更正,提高了效率。In the technical solution provided by this embodiment, the server sends the verification code to the user terminal, and the user terminal returns the information of the selected object to the server according to the user's selection of the object, and the server calculates the verification pass value T0 according to the information of the selected object and predetermined rules , and then by comparing the verification pass value T0 with the preset first threshold T1 to determine whether the verification result is passed, further, the server also compares the verification pass value T0 with the fourth threshold T4, if the verification pass value T0 exceeds the fourth threshold T4 , according to the selection of the object by the user, correct the calibration type of the object sample corresponding to the current prompt information, realize the automatic correction of the calibration type of the current object sample, and improve the efficiency.

需要说明的是,上述第一至第四实施例中,每个实施例重点说明的都是与其他实施例的不同之处,各个实施例之间相同相似的部分互相参见即可,并且其中的几个或全部实施例也可以合并完成,本发明并不以此为限。It should be noted that, among the above-mentioned first to fourth embodiments, each embodiment focuses on the differences from other embodiments, and the same and similar parts between the various embodiments can be referred to each other, and the Several or all embodiments can also be combined to complete, and the present invention is not limited thereto.

第五实施例fifth embodiment

请参阅图13,所示为本发明第五实施例提供的安全验证的方法的流程图。结合图1,本实施例描述的是系统的处理流程,本实施例提供的安全验证的方法包括以下步骤:Please refer to FIG. 13 , which is a flow chart of the security verification method provided by the fifth embodiment of the present invention. In conjunction with Fig. 1, what this embodiment describes is the processing flow of the system, and the method for security verification provided by this embodiment includes the following steps:

步骤S51,服务器将验证码发送给用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;Step S51, the server sends a verification code to the user terminal for display, the verification code includes prompt information and multiple objects related to the prompt information;

服务器发送给用户终端的验证码中例如包括一个问题作为提示信息,如“请选择一下所有的车”,该验证码中例如还包括与该问题提示信息相关的P张图片作为对象,这些图片可以是一些包含有实物的图片,如足球、排球、树、车等,其中P1张图片在当前问题下的答案是“是”,P2张图片在当前问题下的答案是“不是”。The verification code sent by the server to the user terminal includes, for example, a question as a prompt message, such as "please select all the cars", and the verification code also includes P pictures related to the prompt message of the question as objects, and these pictures can be It is some pictures containing real objects, such as football, volleyball, tree, car, etc., among which the answer of P1 picture under the current question is "yes", and the answer of P2 picture under the current question is "no".

步骤S52,所述用户终端根据用户对所述多个对象的选择向所述服务器返回选定对象的信息;Step S52, the user terminal returns the information of the selected object to the server according to the user's selection of the plurality of objects;

用户终端将验证码显示在交互界面中,用户终端所显示的验证码中的每张图片均可以是一个可点选或勾选的控件,用户根据验证码中的问题,尽可能多的点击或勾选可能是该问题答案的控件,服务器根据用户所选择的图片P’向服务器返回这些选定图片的信息。The user terminal displays the verification code on the interactive interface. Each picture in the verification code displayed on the user terminal can be a control that can be clicked or checked. The user clicks or clicks as many times as possible according to the questions in the verification code. Check the control that may be the answer to the question, and the server returns the information of these selected pictures to the server according to the pictures P' selected by the user.

步骤S53,所述服务器根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过;以及Step S53, the server calculates the verification pass value T0 according to the information of the selected object and predetermined rules, and if the verification pass value T0 exceeds the first threshold T1, the verification result is determined to be passed; otherwise, the verification result is determined to be fail; and

步骤S54,所述服务器将所述验证结果返回所述用户终端。Step S54, the server returns the verification result to the user terminal.

以上步骤可以参考图2至图12中各实施例的相关描述,在此不赘述。For the above steps, reference may be made to the relevant descriptions of the embodiments in FIG. 2 to FIG. 12 , and details are not repeated here.

本实施例提供的技术方案中,服务器发送给用户终端的验证码包括提示信息以及与所述提示信息相关的多个对象,用户终端根据用户对所述多个对象的选择将选定对象的信息返回服务器,服务器根据选定对象的信息以及预定的规则计算验证通过值T0,然后通过比较验证通过值T0与预置的第一阈值T1,来判定验证结果是否通过。本发明实施例中的安全验证方法,一方面充分利用了人类对事物分类的先天优势,根据用户对验证码中的对象的选择来计算验证通过值,由于机器在对提示信息的理解以及对对象的分类这两方面都存在很大的困难,因此大大增加了机器破解验证码的难度,另一方面,由于并不需要用户100%的选对符合提示信息的对象,允许部分的错误存在,更容易使用户顺利的通过验证,不会增加用户的负担。也就是说本发明在不影响用户体验的前提下可以大大提高验证码的抗破解力,有效的提高了用户验证的安全性。In the technical solution provided by this embodiment, the verification code sent by the server to the user terminal includes prompt information and multiple objects related to the prompt information, and the user terminal sends the information of the selected object according to the user's selection of the multiple objects Returning to the server, the server calculates the verification pass value T0 according to the information of the selected object and predetermined rules, and then compares the verification pass value T0 with the preset first threshold T1 to determine whether the verification result is passed. The security verification method in the embodiment of the present invention, on the one hand, makes full use of the inherent advantages of human beings in classifying things, and calculates the verification passing value according to the user's selection of the object in the verification code. Since the machine understands the prompt information and the object There are great difficulties in these two aspects of the classification, so it greatly increases the difficulty of the machine cracking the verification code. On the other hand, since the user does not need 100% to select the object that meets the prompt information, some errors are allowed to exist. It is easy for the user to successfully pass the verification without increasing the burden on the user. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

第六实施例Sixth embodiment

本实施例提供了一种安全验证的装置,该装置可应用于上述的安全验证的方法中,参见图14,该装置10包括:验证码发送模块11,选定对象接收模块12,验证结果判定模块13。This embodiment provides a safety verification device, which can be applied to the above-mentioned safety verification method. Referring to FIG. 14, the device 10 includes: a verification code sending module 11, a selected object receiving module 12, and a verification result judgment Module 13.

其中,验证码发送模块11用于将验证码发送给用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;Wherein, the verification code sending module 11 is used to send the verification code to the user terminal for display, and the verification code includes prompt information and a plurality of objects related to the prompt information;

选定对象接收模块12用于接收所述用户终端根据用户对所述多个对象的选择所返回的选定对象的信息;以及The selected object receiving module 12 is configured to receive the information of the selected object returned by the user terminal according to the user's selection of the plurality of objects; and

验证结果判定模块13用于根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过。The verification result judging module 13 is used to calculate the verification passing value T0 according to the information of the selected object and predetermined rules. If the verification passing value T0 exceeds the first threshold T1, the verification result is judged to be passed; otherwise, the verification result is judged to be for not passing.

进一步的,所述装置10还可以包括:数据库维护模块14以及验证码生成模块15。Further, the device 10 may further include: a database maintenance module 14 and a verification code generation module 15 .

其中,所述数据库维护模块14用于维护验证码数据库,所述验证码数据库中包括多个提示信息样本以及多个对象样本,所述多个对象样本中的每个对象样本都具有对应于每个提示信息样本的标定类型,所述标定类型至少包括第一标定类型和第二标定类型;Wherein, the database maintenance module 14 is used to maintain a verification code database, which includes a plurality of prompt information samples and a plurality of object samples, and each object sample in the plurality of object samples has a corresponding A calibration type of a prompt information sample, the calibration type at least including a first calibration type and a second calibration type;

所述验证码生成模块15用于由所述验证码数据库中选出一个提示信息样本作为所述验证码的提示信息,根据所选出的该提示信息样本,由所述验证码数据库中选出多个对象样本作为所述验证码中的多个对象,其中,所选出的多个对象样本对应于所选出的该提示信息样本的标定类型分别为第一标定类型、第二标定类型或第三标定类型,且至少有一个对象样本对应于所选出的该提示信息样本的标定类型为第一标定类型。The verification code generation module 15 is used to select a prompt information sample from the verification code database as the prompt information of the verification code, and select a prompt information sample from the verification code database according to the selected prompt information sample. Multiple object samples are used as multiple objects in the verification code, wherein the selected multiple object samples correspond to the selected marking types of the prompt information sample as the first marking type, the second marking type or The third marking type, and at least one object sample corresponding to the selected marking type of the prompt information sample is the first marking type.

以上各模块可以是由软件代码实现,此时,上述的各模块可存储于存储器102内。以上各模块同样可以由硬件例如集成电路芯片实现。The above modules may be implemented by software codes, and at this time, the above modules may be stored in the memory 102 . Each of the above modules can also be realized by hardware such as an integrated circuit chip.

需要说明的是,本发明实施例的安全验证的装置的各功能模块的功能可根据上述方法实施例中的方法具体实现,其具体实现过程可以参照上述方法实施例的相关描述,在此不赘述。It should be noted that the functions of each functional module of the security verification device in the embodiment of the present invention can be specifically realized according to the method in the above-mentioned method embodiment, and the specific implementation process can refer to the relevant description of the above-mentioned method embodiment, and will not be repeated here. .

本实施例提供的技术方案中,服务器发送给用户终端的验证码包括提示信息以及与所述提示信息相关的多个对象,用户终端根据用户对所述多个对象的选择将选定对象的信息返回服务器,服务器根据选定对象的信息以及预定的规则计算验证通过值T0,然后通过比较验证通过值T0与预置的第一阈值T1,来判定验证结果是否通过。本发明实施例中的安全验证方法,一方面充分利用了人类对事物分类的先天优势,根据用户对验证码中的对象的选择来计算验证通过值,由于机器在对提示信息的理解以及对对象的分类这两方面都存在很大的困难,因此大大增加了机器破解验证码的难度,另一方面,由于并不需要用户100%的选对符合提示信息的对象,允许部分的错误存在,更容易使用户顺利的通过验证,不会增加用户的负担。也就是说本发明在不影响用户体验的前提下可以大大提高验证码的抗破解力,有效的提高了用户验证的安全性。In the technical solution provided by this embodiment, the verification code sent by the server to the user terminal includes prompt information and multiple objects related to the prompt information, and the user terminal sends the information of the selected object according to the user's selection of the multiple objects Returning to the server, the server calculates the verification pass value T0 according to the information of the selected object and predetermined rules, and then compares the verification pass value T0 with the preset first threshold T1 to determine whether the verification result is passed. The security verification method in the embodiment of the present invention, on the one hand, makes full use of the inherent advantages of human beings in classifying things, and calculates the verification passing value according to the user's selection of the object in the verification code. Since the machine understands the prompt information and the object There are great difficulties in these two aspects of the classification, so it greatly increases the difficulty of the machine cracking the verification code. On the other hand, since the user does not need 100% to select the object that meets the prompt information, some errors are allowed to exist. It is easy for the user to successfully pass the verification without increasing the burden on the user. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

第七实施例Seventh embodiment

本实施例提供了一种安全验证的装置,该装置可应用于上述的安全验证的方法中,参见图15,该装置20包括:验证码发送模块21,选定对象接收模块22,验证结果判定模块23、数据库维护模块24以及验证码生成模块25。This embodiment provides a safety verification device, which can be applied to the above-mentioned safety verification method. Referring to FIG. 15, the device 20 includes: a verification code sending module 21, a selected object receiving module 22, and a verification result judgment Module 23, database maintenance module 24 and verification code generation module 25.

其中,验证码发送模块21用于将验证码发送给用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;Wherein, the verification code sending module 21 is used to send the verification code to the user terminal for display, and the verification code includes prompt information and a plurality of objects related to the prompt information;

选定对象接收模块22用于接收所述用户终端根据用户对所述多个对象的选择所返回的选定对象的信息;The selected object receiving module 22 is configured to receive the information of the selected object returned by the user terminal according to the user's selection of the plurality of objects;

验证结果判定模块23用于根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过;The verification result judging module 23 is used to calculate the verification pass value T0 according to the information of the selected object and predetermined rules. If the verification pass value T0 exceeds the first threshold T1, the verification result is determined to be passed; otherwise, the verification result is determined to be passed. for not passing;

所述数据库维护模块24用于维护验证码数据库,所述验证码数据库中包括多个提示信息样本以及多个对象样本,所述多个对象样本中的每个对象样本都具有对应于每个提示信息样本的标定类型,所述标定类型至少包括第一标定类型和第二标定类型;以及The database maintenance module 24 is used to maintain a verification code database, which includes a plurality of prompt information samples and a plurality of object samples, and each object sample in the plurality of object samples has a corresponding to each prompt a labeling type of the information sample, the labeling type including at least a first labeling type and a second labeling type; and

所述验证码生成模块25用于由所述验证码数据库中选出一个提示信息样本作为所述验证码的提示信息,根据所选出的该提示信息样本,由所述验证码数据库中选出多个对象样本作为所述验证码中的多个对象,其中,所选出的多个对象样本对应于所选出的该提示信息样本的标定类型分别为第一标定类型、第二标定类型或第三标定类型,且至少有一个对象样本对应于所选出的该提示信息样本的标定类型为第一标定类型。The verification code generation module 25 is used to select a prompt information sample from the verification code database as the prompt information of the verification code, and select a prompt information sample from the verification code database according to the selected prompt information sample. Multiple object samples are used as multiple objects in the verification code, wherein the selected multiple object samples correspond to the selected marking types of the prompt information sample as the first marking type, the second marking type or The third marking type, and at least one object sample corresponding to the selected marking type of the prompt information sample is the first marking type.

于本实施例中,所述数据库维护模块24可以包括对象样本获取单元241以及标定类型修改单元242。In this embodiment, the database maintenance module 24 may include an object sample acquisition unit 241 and a calibration type modification unit 242 .

其中,所述对象样本获取单元241用于获取新的对象样本并将所述新的对象样本存储在所述验证码数据库中。Wherein, the object sample acquisition unit 241 is configured to acquire a new object sample and store the new object sample in the verification code database.

于本实施例中,所述验证码发送模块21发送的所述验证码包括的多个对象中包括一个所述新的对象样本,所述新的对象样本对应于所述验证码中的所述提示信息的标定类型为第三标定类型。In this embodiment, the plurality of objects included in the verification code sent by the verification code sending module 21 includes one of the new object samples, and the new object sample corresponds to the The calibration type of the prompt information is the third calibration type.

于本实施例中,如果所述验证结果判定模块23计算出的验证通过值T0超过第二阈值T2,则所述标定类型修改单元242根据用户对所述新的对象样本的选择,修改所述新的对象样本对应于所述验证码中的所述提示信息的标定类型,所述第二阈值T2大于或等于所述第一阈值T1。In this embodiment, if the verification pass value T0 calculated by the verification result determination module 23 exceeds the second threshold T2, the calibration type modifying unit 242 modifies the The new object sample corresponds to the marking type of the prompt information in the verification code, and the second threshold T2 is greater than or equal to the first threshold T1.

具体的,所述标定类型修改单元242可以包括:计数单元2421、收集单元2422以及修改单元2423。Specifically, the calibration type modifying unit 242 may include: a counting unit 2421 , a collecting unit 2422 and a modifying unit 2423 .

其中,所述计数单元2421根据用户对所述新的对象样本的选择,对所述新的对象样本的第一标定类型和第二标定类型进行计数;Wherein, the counting unit 2421 counts the first marking type and the second marking type of the new object sample according to the user's selection of the new object sample;

所述收集单元2422用于收集多个用户对所述验证码中的所述新的对象样本的选择。The collection unit 2422 is used to collect selections of multiple users on the new object sample in the verification code.

于本实施例中,当所述计数单元2421中第一标定类型的计数值和第二标定类型的计数值之和达到预定计数值时,所述修改单元2423根据第一标定类型的计数值与第二标定类型的计数值的权值,修改所述新的对象样本对应于所述验证码中的所述提示信息的标定类型。In this embodiment, when the sum of the count value of the first calibration type and the count value of the second calibration type in the counting unit 2421 reaches a predetermined count value, the modifying unit 2423 The weight of the count value of the second marking type is modified to correspond to the marking type of the prompt information in the verification code for the new object sample.

具体的,修改单元2423可以包括:第一判断子单元2423a,第二判断修改子单元2423b,第三判断修改子单元2423c。Specifically, the modification unit 2423 may include: a first judgment subunit 2423a, a second judgment modification subunit 2423b, and a third judgment modification subunit 2423c.

其中,第一判断子单元2423a,用于判断第一标定类型的计数值的权值是否大于第二标定类型的计数值的权值,Wherein, the first judging subunit 2423a is used to judge whether the weight of the count value of the first calibration type is greater than the weight of the count value of the second calibration type,

如果所述第一判断子单元2423a的判断结果为大于,所述第二判断修改子单元2423a判断第一标定类型的计数值的权值与第二标定类型的计数值的权值的差值是否达到预定差值,如果是,则将所述新的对象样本对应于所述验证码中的所述提示信息的标定类型修改为第一标定类型,否则,将所述新的对象样本的标定类型修改为第四标定类型,If the judgment result of the first judgment subunit 2423a is greater than, the second judgment modification subunit 2423a judges whether the difference between the weight value of the count value of the first calibration type and the weight value of the count value of the second calibration type is Reach the predetermined difference, if yes, change the marking type of the new object sample corresponding to the prompt information in the verification code to the first marking type, otherwise, change the marking type of the new object sample to Modified to the fourth calibration type,

如果所述第一判断子单元2423a的判断结果为不大于,所述第三判断子单元2423c判断第二标定类型的计数值的权值与第一标定类型的计数值的权值的差值否达到所述预定差值,如果是,则将所述新的对象样本对应于所述验证码中的所述提示信息的标定类型修改为第二标定类型,否则,将所述新的对象样本的标定类型修改为第四标定类型。If the judgment result of the first judging subunit 2423a is not greater than, the third judging subunit 2423c judges whether there is a difference between the weight of the count value of the second calibration type and the weight of the count value of the first calibration type Reach the predetermined difference, if yes, change the marking type of the new object sample corresponding to the prompt information in the verification code to the second marking type, otherwise, change the marking type of the new object sample to The calibration type is changed to the fourth calibration type.

以上各模块可以是由软件代码实现,此时,上述的各模块可存储于存储器102内。以上各模块同样可以由硬件例如集成电路芯片实现。The above modules may be implemented by software codes, and at this time, the above modules may be stored in the memory 102 . Each of the above modules can also be realized by hardware such as an integrated circuit chip.

需要说明的是,本发明实施例的安全验证的装置的各功能模块的功能可根据上述方法实施例中的方法具体实现,其具体实现过程可以参照上述方法实施例的相关描述,在此不赘述。It should be noted that the functions of each functional module of the security verification device in the embodiment of the present invention can be specifically realized according to the method in the above-mentioned method embodiment, and the specific implementation process can refer to the relevant description of the above-mentioned method embodiment, and will not be repeated here. .

本实施例提供的技术方案,服务器将新的对象样本以及其他对象样本与提示信息一同发送给用户终端,用户终端根据用户对对象的选择将选定对象的信息返回服务器,服务器根据选定对象的信息以及预定的规则计算验证通过值T0,然后通过比较验证通过值T0与预置的第一阈值T1,来判定验证结果是否通过,进一步的,服务器还比较验证通过值T0与第二阈值T2,如果验证通过值T0超过第二阈值T2,则根据用户对所述新的对象样本的选择,修改所述新的对象样本对应于所述验证码中的所述提示信息的标定类型,从而实现了对新的对象样本的自动标定,不需要人工对新的对象样本进行标定,提高了效率。In the technical solution provided by this embodiment, the server sends new object samples and other object samples together with prompt information to the user terminal, the user terminal returns the information of the selected object to the server according to the user's selection of the object, and the server Information and predetermined rules calculate the verification pass value T0, and then determine whether the verification result is passed by comparing the verification pass value T0 with the preset first threshold T1. Further, the server also compares the verification pass value T0 with the second threshold T2, If the verification pass value T0 exceeds the second threshold T2, according to the user's selection of the new object sample, the new object sample is modified to correspond to the calibration type of the prompt information in the verification code, thereby realizing The automatic calibration of new object samples does not require manual calibration of new object samples, thereby improving efficiency.

第八实施例Eighth embodiment

本实施例提供了一种安全验证的装置,该装置可应用于上述的安全验证的方法中,参见图16,该装置30包括:验证码发送模块31,选定对象接收模块32,验证结果判定模块33、数据库维护模块34以及验证码生成模块35。This embodiment provides a safety verification device, which can be applied to the above-mentioned safety verification method. Referring to FIG. 16, the device 30 includes: a verification code sending module 31, a selected object receiving module 32, and a verification result judgment Module 33, database maintenance module 34 and verification code generation module 35.

其中,验证码发送模块31用于将验证码发送给用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;Wherein, the verification code sending module 31 is configured to send the verification code to the user terminal for display, and the verification code includes prompt information and a plurality of objects related to the prompt information;

选定对象接收模块32用于接收所述用户终端根据用户对所述多个对象的选择所返回的选定对象的信息;The selected object receiving module 32 is configured to receive the information of the selected object returned by the user terminal according to the user's selection of the plurality of objects;

验证结果判定模块33用于根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过;The verification result judging module 33 is used to calculate the verification passing value T0 according to the information of the selected object and predetermined rules, and if the verification passing value T0 exceeds the first threshold T1, the verification result is judged to be passed; otherwise, the verification result is judged to be for not passing;

所述数据库维护模块34用于维护验证码数据库,所述验证码数据库中包括多个提示信息样本以及多个对象样本,所述多个对象样本中的每个对象样本都具有对应于每个提示信息样本的标定类型,所述标定类型至少包括第一标定类型和第二标定类型;以及The database maintenance module 34 is used to maintain a verification code database, which includes a plurality of prompt information samples and a plurality of object samples, and each object sample in the plurality of object samples has a corresponding to each prompt a labeling type of the information sample, the labeling type including at least a first labeling type and a second labeling type; and

所述验证码生成模块35用于由所述验证码数据库中选出一个提示信息样本作为所述验证码的提示信息,根据所选出的该提示信息样本,由所述验证码数据库中选出多个对象样本作为所述验证码中的多个对象,其中,所选出的多个对象样本对应于所选出的该提示信息样本的标定类型分别为第一标定类型、第二标定类型或第三标定类型,且至少有一个对象样本对应于所选出的该提示信息样本的标定类型为第一标定类型。The verification code generation module 35 is used to select a prompt information sample from the verification code database as the prompt information of the verification code, and select a prompt information sample from the verification code database according to the selected prompt information sample. Multiple object samples are used as multiple objects in the verification code, wherein the selected multiple object samples correspond to the selected marking types of the prompt information sample as the first marking type, the second marking type or The third marking type, and at least one object sample corresponding to the selected marking type of the prompt information sample is the first marking type.

于本实施例中,所述数据库维护模块34还包括提示信息样本获取单元341以及标定类型获取单元342、标定类型修改单元343。In this embodiment, the database maintenance module 34 further includes a prompt information sample acquisition unit 341 , a calibration type acquisition unit 342 , and a calibration type modification unit 343 .

其中,所述提示信息样本获取单元341用于获取新的提示信息样本并将所述新的提示信息样本存储在所述验证码数据库中;Wherein, the prompt information sample obtaining unit 341 is configured to obtain a new prompt information sample and store the new prompt information sample in the verification code database;

所述标定类型获取单元342用于获取所述多个对象样本中的部分对象样本对应于所述新的提示信息样本的标定类型,并将所述多个对象样本中的其他对象样本对应于所述新的提示信息样本的标定类型设置为第三标定类型。The labeling type acquisition unit 342 is configured to acquire the labeling types of some object samples in the multiple object samples corresponding to the new prompt information sample, and correspond other object samples in the multiple object samples to the The calibration type of the new prompt message sample is set to the third calibration type.

具体的,于本实施例中,所述验证码发送模块31发送的所述验证码中包括所述新的提示信息样本、至少一个已标定对象样本以及至少一个未标定对象样本,所述已标定对象样本为已对应所述新的提示信息样本进行标定的对象样本,所述未标定对象样本为对应于所述新的提示信息样本的标定类型为第三标定类型的对象样本。Specifically, in this embodiment, the verification code sent by the verification code sending module 31 includes the new prompt information sample, at least one marked object sample and at least one unmarked object sample, and the marked The object sample is an object sample that has been calibrated corresponding to the new prompt information sample, and the unmarked object sample is an object sample corresponding to the new prompt information sample whose calibration type is the third calibration type.

于本实施例中,如果所述验证结果判定模块33计算出的验证通过值超过第三阈值T3,则所述标定类型修改单元343用于根据用户对所述未标定对象样本的选择,修改未标定对象样本的标定类型,所述第三阈值T3大于或等于第一阈值T1。In this embodiment, if the verification pass value calculated by the verification result judging module 33 exceeds the third threshold T3, the marking type modifying unit 343 is configured to modify the unmarked object sample according to the user's selection. The calibration type of the target sample is marked, and the third threshold T3 is greater than or equal to the first threshold T1.

所述标定类型修改单元343包括:计数单元3431、收集单元3432以及修改单元3433。The calibration type modifying unit 343 includes: a counting unit 3431 , a collecting unit 3432 and a modifying unit 3433 .

于本实施例中,所述计数单元3431用于根据用户对未标定的对象样本的选择,对所述未标定的对象样本的第一标定类型和第二标定类型进行计数;In this embodiment, the counting unit 3431 is configured to count the first marking type and the second marking type of the unmarked object samples according to the user's selection of the unmarked object samples;

所述收集单元3432用于收集多个用户对所述验证码中的所述未标定的对象样本的选择,当所述计数单元3432中第一标定类型的计数值和第二标定类型的计数值之和达到预定计数值,所述修改单元3433还用于根据第一标定类型的计数值与第二标定类型的计数值的权值,修改所述未标定对象样本对应于所述验证码中的所述提示信息的标定类型。The collection unit 3432 is used to collect a plurality of users' selections of the unmarked object samples in the verification code, when the count value of the first marking type and the count value of the second marking type in the counting unit 3432 The sum reaches a predetermined count value, and the modifying unit 3433 is further configured to modify the unmarked object sample corresponding to the verification code in the verification code according to the weight of the count value of the first marking type and the counting value of the second marking type The calibration type of the prompt message.

进一步的,修改单元3433可以包括:第一判断子单元3433a,第二判断修改子单元3433b,第三判断修改子单元3433c。Further, the modifying unit 3433 may include: a first judging subunit 3433a, a second judging and modifying subunit 3433b, and a third judging and modifying subunit 3433c.

其中,所述第一判断子单元3433a用于判断第一标定类型的计数值的权值是否大于第二标定类型的计数值的权值。Wherein, the first judgment subunit 3433a is used to judge whether the weight of the count value of the first marking type is greater than the weight of the count value of the second marking type.

于本实施例中,如果所述第一判断子单元3433a的判断结果为大于,所述第二判断修改子单元3433b用于判断第一标定类型的计数值的权值与第二标定类型的计数值的权值的差值是否达到预定差值,如果是,则将所述未标定对象样本对应于所述验证码中的所述提示信息的标定类型修改为第一标定类型,否则,将所述未标定对象样本的标定类型修改为第四标定类型。In this embodiment, if the judgment result of the first judgment subunit 3433a is greater than, the second judgment modification subunit 3433b is used to judge the weight of the count value of the first marking type and the count value of the second marking type Whether the difference of the weight of the value reaches the predetermined difference, if so, modify the marking type of the unmarked object sample corresponding to the prompt information in the verification code to the first marking type, otherwise, change the The calibration type of the above-mentioned uncalibrated object samples is changed to the fourth calibration type.

如果所述第一判断子单元3433a的判断结果为不大于,所述第三判断修改子单元3433c用于判断第二标定类型的计数值的权值与第一标定类型的计数值的权值的差值否达到所述预定差值,如果是,则将所述未标定对象样本对应于所述验证码中的所述提示信息的标定类型修改为第二标定类型,否则,将所述未标定对象样本的标定类型修改为第四标定类型。If the judgment result of the first judgment subunit 3433a is not greater than, the third judgment modification subunit 3433c is used to judge the weight of the count value of the second calibration type and the weight of the count value of the first calibration type Whether the difference reaches the predetermined difference, if yes, modify the calibration type of the unlabeled object sample corresponding to the prompt information in the verification code to the second calibration type, otherwise, change the unlabeled object sample to the second calibration type The calibration type of the target sample is changed to the fourth calibration type.

以上各模块可以是由软件代码实现,此时,上述的各模块可存储于存储器102内。以上各模块同样可以由硬件例如集成电路芯片实现。The above modules may be implemented by software codes, and at this time, the above modules may be stored in the memory 102 . Each of the above modules can also be realized by hardware such as an integrated circuit chip.

需要说明的是,本发明实施例的安全验证的装置的各功能模块的功能可根据上述方法实施例中的方法具体实现,其具体实现过程可以参照上述方法实施例的相关描述,在此不赘述。It should be noted that the functions of each functional module of the security verification device in the embodiment of the present invention can be specifically realized according to the method in the above-mentioned method embodiment, and the specific implementation process can refer to the relevant description of the above-mentioned method embodiment, and will not be repeated here. .

本实施例提供的技术方案,服务器将新的提示信息、已对应新的提示信息进行标定的对象样本以及未标定的对象样本一同发送给用户终端,用户终端根据用户对对象的选择将选定对象的信息返回服务器,服务器根据选定对象的信息以及预定的规则计算验证通过值T0,然后通过比较验证通过值T0与预置的第一阈值T1,来判定验证结果是否通过,进一步的,服务器还比较验证通过值T0与第三阈值T3,如果验证通过值T0超过第三阈值T3,则根据用户对未标定的对象样本的选择,修改所述未标定的对象样本对应于所述验证码中的新的提示信息的标定类型,只需要获取少量的对象样本对应于新增提示信息样本的标定,即可实现对当前对象样本对应于新增提示信息样本的标定,提高了效率。In the technical solution provided by this embodiment, the server sends new prompt information, object samples that have been calibrated corresponding to the new prompt information, and uncalibrated object samples to the user terminal, and the user terminal sends the selected object according to the user's selection of the object. The information is returned to the server, and the server calculates the verification pass value T0 according to the information of the selected object and predetermined rules, and then compares the verification pass value T0 with the preset first threshold T1 to determine whether the verification result is passed. Further, the server also Comparing the verification pass value T0 with the third threshold T3, if the verification pass value T0 exceeds the third threshold T3, modify the unmarked object sample corresponding to the verification code according to the user's selection of the unmarked object sample The new calibration type of prompt information only needs to obtain a small number of object samples corresponding to the calibration of the newly added prompt information samples, and then the calibration of the current object samples corresponding to the newly added prompt information samples can be realized, which improves the efficiency.

第九实施例Ninth embodiment

本实施例提供了一种安全验证的装置,该装置可应用于上述的安全验证的方法中,参见图17,该装置40包括:验证码发送模块41,选定对象接收模块42,验证结果判定模块43、数据库维护模块44以及验证码生成模块45。This embodiment provides a device for security verification, which can be applied to the above-mentioned method for security verification. Referring to FIG. 17, the device 40 includes: a verification code sending module 41, a selected object receiving module 42, and a verification result judgment Module 43, database maintenance module 44 and verification code generation module 45.

其中,验证码发送模块41用于将验证码发送给用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;Wherein, the verification code sending module 41 is used to send the verification code to the user terminal for display, and the verification code includes prompt information and a plurality of objects related to the prompt information;

选定对象接收模块42用于接收所述用户终端根据用户对所述多个对象的选择所返回的选定对象的信息;The selected object receiving module 42 is configured to receive the information of the selected object returned by the user terminal according to the user's selection of the plurality of objects;

验证结果判定模块43用于根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过;The verification result judging module 43 is used to calculate the verification passing value T0 according to the information of the selected object and predetermined rules. If the verification passing value T0 exceeds the first threshold T1, the verification result is judged to be passed; otherwise, the verification result is judged to be for not passing;

所述数据库维护模块44用于维护验证码数据库,所述验证码数据库中包括多个提示信息样本以及多个对象样本,所述多个对象样本中的每个对象样本都具有对应于每个提示信息样本的标定类型,所述标定类型至少包括第一标定类型和第二标定类型;以及The database maintenance module 44 is used to maintain a verification code database, which includes a plurality of prompt information samples and a plurality of object samples, and each object sample in the plurality of object samples has a corresponding to each prompt a labeling type of the information sample, the labeling type including at least a first labeling type and a second labeling type; and

所述验证码生成模块45用于由所述验证码数据库中选出一个提示信息样本作为所述验证码的提示信息,根据所选出的该提示信息样本,由所述验证码数据库中选出多个对象样本作为所述验证码中的多个对象,其中,所选出的多个对象样本对应于所选出的该提示信息样本的标定类型分别为第一标定类型、第二标定类型或第三标定类型,且至少有一个对象样本对应于所选出的该提示信息样本的标定类型为第一标定类型。The verification code generation module 45 is used to select a prompt information sample from the verification code database as the prompt information of the verification code, and select a prompt information sample from the verification code database according to the selected prompt information sample. Multiple object samples are used as multiple objects in the verification code, wherein the selected multiple object samples correspond to the selected marking types of the prompt information sample as the first marking type, the second marking type or The third marking type, and at least one object sample corresponding to the selected marking type of the prompt information sample is the first marking type.

于本实施例中,所述数据库维护模块44包括标定类型修改单元441、标记单元442。In this embodiment, the database maintenance module 44 includes a marking type modification unit 441 and a marking unit 442 .

具体的,于本实施例中,如果所述验证结果判定模块43的验证结果为通过,所述标定类型修改单元441用于判断所述验证通过值T0是否超过第四阈值T4,如果是,则判断用户对所述对象的选择与所述对象在所述验证码数据库中的标定类型是否相符,如果不相符,则根据用户的选择,对所述对象在所述验证码数据库中的标定类型进行修改,其中,所述第四阈值T4大于或等于所述第一阈值T1。Specifically, in this embodiment, if the verification result of the verification result judging module 43 is passed, the calibration type modification unit 441 is used to judge whether the verification passing value T0 exceeds the fourth threshold T4, and if so, then Judging whether the selection of the object by the user is consistent with the marking type of the object in the verification code database, if not, then according to the user's choice, perform Modification, wherein the fourth threshold T4 is greater than or equal to the first threshold T1.

于本实施例中,如果所述验证结果判定模块33计算出的验证通过值超过第三阈值T3,则所述标定类型修改单元343用于根据用户对所述未标定对象样本的选择,修改未标定对象样本的标定类型,所述第三阈值T3大于或等于第一阈值T1。In this embodiment, if the verification pass value calculated by the verification result judging module 33 exceeds the third threshold T3, the marking type modifying unit 343 is configured to modify the unmarked object sample according to the user's selection. The calibration type of the target sample is marked, and the third threshold T3 is greater than or equal to the first threshold T1.

所述标定类型修改单元441包括:计数单元4411、收集单元4412以及修改单元4413。The calibration type modifying unit 441 includes: a counting unit 4411 , a collecting unit 4412 and a modifying unit 4413 .

其中,所述计数单元4411用于判断用户对所述对象的选择与所述对象在所述验证码数据库中的标定类型是否相符;如果相符,则对所述对象对应于所述验证码中的提示信息的标定类型进行正确计数;如果不相符,则对对所述对象对应于所述验证码中的提示信息的标定类型进行错误计数;Wherein, the counting unit 4411 is used to judge whether the selection of the object by the user is consistent with the marking type of the object in the verification code database; Correctly counting the marking type of the prompt information; if not, counting the marking type of the object corresponding to the prompt information in the verification code incorrectly;

所述收集单元4412用于收集多个用户对所述验证码中的对象的选择以及每个对象的正确计数和错误计数。The collection unit 4412 is used to collect the selection of objects in the verification code by multiple users and the correct count and wrong count of each object.

于本实施例中,所述计数单元4411还用于计算所述验证码中每个对象的错误计数与正确计数的比值,当所述比值大于最低阈值且小于最高阈值时,所述修改单元4413将所述对象对应于所述验证码中的提示信息的标定类型设置修改为第四标定类型,当所述比值大于或等于最高阈值时,如果所述对象的原标定类型为第一标定类型,则所述修改单元4413将所述对象的标定类型修改为第二标定类型,如果所述对象的原标定类型为第二标定类型,则所述修改单元将所述对象的标定类型修改为第一标定类型。In this embodiment, the counting unit 4411 is also used to calculate the ratio of the error count to the correct count of each object in the verification code, and when the ratio is greater than the lowest threshold and less than the highest threshold, the modifying unit 4413 Modify the marking type setting of the object corresponding to the prompt information in the verification code to the fourth marking type. When the ratio is greater than or equal to the highest threshold, if the original marking type of the object is the first marking type, Then the modifying unit 4413 modifies the labeling type of the object to the second labeling type, and if the original labeling type of the object is the second labeling type, the modifying unit modifies the labeling type of the object to the first labeling type Calibration type.

于本发明的另一种具体实施方式中,所述计数单元4411还用于计算所述验证码中每个对象的正确计数的权值与错误计数的权值;In another specific implementation manner of the present invention, the counting unit 4411 is also used to calculate the correct count weight and the wrong count weight of each object in the verification code;

所述第一判断子单元4413a用于判断错误计数的权值是否大于正确计数的权值,如果大于,则第二判断修改子单元4413b用于判断错误计数的权值与正确计数的权值的差值是否达到预定差值,如果是,则根据用户对该对象样本的选择,更正该对象样本对应于当前提示信息的标定类型并根据错误计数的权值修改所述标定类型的权值,否则,将该对象样本的标定类型修改为第四标定类型,The first judging subunit 4413a is used to judge whether the weight of the wrong count is greater than the weight of the correct count, and if so, the second judging modification subunit 4413b is used to judge the weight of the wrong count and the weight of the correct count Whether the difference reaches the predetermined difference, if so, according to the user's selection of the object sample, correct the calibration type of the object sample corresponding to the current prompt information and modify the weight of the calibration type according to the weight of the error count, otherwise , modify the calibration type of the object sample to the fourth calibration type,

如果不大于,则第三判断修改子单元4413c用于判断正确计数的权值与错误计数的权值的差值是否达到预定差值,如果是,则根据正确计数的权值修改所述标定类型的权值,但不更正标定类型。If not, the third judging and modifying subunit 4413c is used to judge whether the difference between the weight of the correct count and the weight of the wrong count reaches a predetermined difference, and if so, modify the calibration type according to the weight of the correct count , without correcting the calibration type.

于本实施例中,如果所述验证码数据库中的对应于同一个提示信息样本的标定类型为第四标定类型的对象样本的个数超过预定个数,所述标记单元442对该提示信息样本进行标记。In this embodiment, if the number of object samples whose calibration type is the fourth calibration type corresponding to the same prompt information sample in the verification code database exceeds a predetermined number, the marking unit 442 will to mark.

需要说明的是,本发明实施例的安全验证的装置的各功能模块的功能可根据上述方法实施例中的方法具体实现,其具体实现过程可以参照上述方法实施例的相关描述,在此不赘述。It should be noted that the functions of each functional module of the security verification device in the embodiment of the present invention can be specifically realized according to the method in the above-mentioned method embodiment, and the specific implementation process can refer to the relevant description of the above-mentioned method embodiment, and will not be repeated here. .

本实施例提供的技术方案,服务器将验证码发送给用户终端,用户终端根据用户对对象的选择将选定对象的信息返回服务器,服务器根据选定对象的信息以及预定的规则计算验证通过值T0,然后通过比较验证通过值T0与预置的第一阈值T1,来判定验证结果是否通过,进一步的,服务器还比较验证通过值T0与第四阈值T4,如果验证通过值T0超过第四阈值T4,则根据用户对对象的选择,更正该对象样本对应于当前提示信息的标定类型,实现了对当前对象样本标定类型的自动更正,提高了效率。In the technical solution provided by this embodiment, the server sends the verification code to the user terminal, and the user terminal returns the information of the selected object to the server according to the user's selection of the object, and the server calculates the verification pass value T0 according to the information of the selected object and predetermined rules , and then by comparing the verification pass value T0 with the preset first threshold T1 to determine whether the verification result is passed, further, the server also compares the verification pass value T0 with the fourth threshold T4, if the verification pass value T0 exceeds the fourth threshold T4 , according to the selection of the object by the user, correct the calibration type of the object sample corresponding to the current prompt information, realize the automatic correction of the calibration type of the current object sample, and improve the efficiency.

第十实施例Tenth embodiment

本实施例提供了一种安全验证的系统,请参照图18,该系统50包括:用户终端51以及服务器52。This embodiment provides a security verification system, please refer to FIG. 18 , the system 50 includes: a user terminal 51 and a server 52 .

所述服务器52用于将验证码发送给所述用户终端进行显示,所述验证码包括提示信息以及与所述提示信息相关的多个对象;The server 52 is configured to send a verification code to the user terminal for display, the verification code includes prompt information and multiple objects related to the prompt information;

所述用户终端51用于根据用户对所述多个对象的选择向所述服务器52返回选定对象的信息;The user terminal 51 is configured to return the information of the selected object to the server 52 according to the user's selection of the plurality of objects;

所述服务器52还用于根据所述选定对象的信息以及预定的规则计算验证通过值T0,如果所述验证通过值T0超过第一阈值T1,则判定验证结果为通过,否则,判定验证结果为不通过,所述服务器52还用于将所述验证结果返回所述用户终端51。The server 52 is also used to calculate the verification pass value T0 according to the information of the selected object and predetermined rules. If the verification pass value T0 exceeds the first threshold T1, the verification result is determined to be passed; otherwise, the verification result is determined to be passed. To fail, the server 52 is further configured to return the verification result to the user terminal 51 .

具体的,上述第六至第九实施例中的装置均可应用于本实施例中的服务器52中。其具体实现过程可以参照上述装置及方法实施例的相关描述,在此不赘述。Specifically, the devices in the sixth to ninth embodiments above can all be applied to the server 52 in this embodiment. For the specific implementation process, reference may be made to the relevant descriptions of the foregoing apparatus and method embodiments, and details are not described here.

本实施例提供的技术方案中,服务器发送给用户终端的验证码包括提示信息以及与所述提示信息相关的多个对象,用户终端根据用户对所述多个对象的选择将选定对象的信息返回服务器,服务器根据选定对象的信息以及预定的规则计算验证通过值T0,然后通过比较验证通过值T0与预置的第一阈值T1,来判定验证结果是否通过。本发明实施例中的安全验证方法,一方面充分利用了人类对事物分类的先天优势,根据用户对验证码中的对象的选择来计算验证通过值,由于机器在对提示信息的理解以及对对象的分类这两方面都存在很大的困难,因此大大增加了机器破解验证码的难度,另一方面,由于并不需要用户100%的选对符合提示信息的对象,允许部分的错误存在,更容易使用户顺利的通过验证,不会增加用户的负担。也就是说本发明在不影响用户体验的前提下可以大大提高验证码的抗破解力,有效的提高了用户验证的安全性。In the technical solution provided by this embodiment, the verification code sent by the server to the user terminal includes prompt information and multiple objects related to the prompt information, and the user terminal sends the information of the selected object according to the user's selection of the multiple objects Returning to the server, the server calculates the verification pass value T0 according to the information of the selected object and predetermined rules, and then compares the verification pass value T0 with the preset first threshold T1 to determine whether the verification result is passed. The security verification method in the embodiment of the present invention, on the one hand, makes full use of the inherent advantages of human beings in classifying things, and calculates the verification passing value according to the user's selection of the object in the verification code. Since the machine understands the prompt information and the object There are great difficulties in these two aspects of the classification, so it greatly increases the difficulty of the machine cracking the verification code. On the other hand, since the user does not need 100% to select the object that meets the prompt information, some errors are allowed to exist. It is easy for the user to successfully pass the verification without increasing the burden on the user. That is to say, the present invention can greatly improve the cracking resistance of the verification code without affecting the user experience, and effectively improve the security of user verification.

需要说明的是:上述实施例提供的装置在实现安全验证时,仅以上述各功能模块的划分进行举例说明,实际应用中,可以根据需要而将上述功能分配由不同的功能模块完成,即将装置的内部结构划分成不同的功能模块,以完成以上描述的全部或者部分功能。另外,上述实施例提供的装置、系统与安全验证的方法实施例属于同一构思,其具体实现过程可详见方法实施例,这里不再赘述。It should be noted that when the device provided by the above embodiment implements security verification, the division of the above-mentioned functional modules is used as an example for illustration. The internal structure of the system is divided into different functional modules to complete all or part of the functions described above. In addition, the device and system provided in the above embodiments belong to the same idea as the security verification method embodiments, and the specific implementation process can be found in the method embodiments in detail, and will not be repeated here.

上述本发明实施例序号仅仅为了描述,不代表实施例的优劣。The serial numbers of the above embodiments of the present invention are for description only, and do not represent the advantages and disadvantages of the embodiments.

本领域普通技术人员可以理解实现上述实施例的全部或部分步骤可以通过硬件来完成,也可以通过程序来指令相关的硬件完成,所述的程序可以存储于一种计算机可读存储介质中,上述提到的存储介质可以是只读存储器,磁盘或光盘等。Those of ordinary skill in the art can understand that all or part of the steps for implementing the above embodiments can be completed by hardware, and can also be completed by instructing related hardware through a program. The program can be stored in a computer-readable storage medium. The above-mentioned The storage medium mentioned may be a read-only memory, a magnetic disk or an optical disk, and the like.

以上所述仅为本发明的较佳实施例,并不用以限制本发明,凡在本发明的精神和原则之内,所作的任何修改、等同替换、改进等,均应包含在本发明的保护范围之内。The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the protection of the present invention. within range.

Claims (26)

1. a kind of method of safety verification, which is characterized in that the method includes:
Server is by selecting prompt message of the prompt message sample as identifying code, the identifying code in authentication code database Database includes multiple prompt message samples and multiple object samples, each object samples in the multiple object samples All there is the calibration type corresponding to each prompt message sample, the calibration type to include at least the first calibration type and second Demarcate type;
The server is according to the selected prompt message sample, by selecting multiple object samples in the authentication code database As multiple objects in the identifying code, wherein selected multiple object samples correspond to the selected prompt message The calibration type of sample is respectively that the first calibration type, the second calibration type or third demarcate type, and at least one object The calibration type that sample corresponds to the selected prompt message sample is the first calibration type;
Identifying code is sent to user terminal and shown by server, the identifying code include prompt message and with the prompt The relevant multiple objects of information;
Receive the information for the selected object that the user terminal returns to the selection of the multiple object according to user;And
Verified value T0 is calculated according to the information of the selected object and scheduled rule, if the verified value T0 More than first threshold T1, then decision verification result is to pass through, otherwise, it is determined that verification result is not pass through;
If the verification result is to pass through, the verified value T0 is judged whether more than the 4th threshold value T4, if it is, sentencing Whether disconnected user is consistent to the selection of the object with calibration type of the object in the authentication code database, if not It is consistent, then according to the user's choice, modifies to calibration type of the object in the authentication code database, described Four threshold value T4 are greater than or equal to the first threshold T1.
2. according to the method described in claim 1, it is characterized in that, identifying code is sent to user terminal progress by the server Before the step of display, further include:It obtains new object samples and the new object samples is stored in the verification yardage According in library;
Multiple objects that the identifying code includes include the new object samples, and the new object samples correspond to The calibration type of the prompt message in the identifying code is that third demarcates type;
If the calculated verified value T0 of server is more than second threshold T2, according to user to the new object The calibration type for the prompt message that the new object samples correspond in the identifying code, institute are changed in the selection of sample It states second threshold T2 and is greater than or equal to the first threshold T1.
3. according to the method described in claim 2, it is characterized in that, the choosing according to user to the new object samples The step of selecting, changing calibration type of the new object samples corresponding to the prompt message in the identifying code, including:
Selection according to user to the new object samples demarcates type and the second mark to the first of the new object samples Determine type to be counted;
Selection of multiple users to the new object samples in the identifying code is collected, when the count value of the first calibration type When reaching predetermined count value with the sum of the count value of the second calibration type, according to the count value of the first calibration type and the second calibration The weights of the count value of type change the calibration for the prompt message that the new object samples correspond in the identifying code Type.
4. according to the method described in claim 3, it is characterized in that, the count value according to the first calibration type and the second mark Determine the weights of the count value of type, changes the mark for the prompt message that the new object samples correspond in the identifying code The step of determining type, including:
Judge whether the weights of the count value of the first calibration type are more than the weights of the count value of the second calibration type,
If it does, judging the difference of the weights of the count value of the first calibration type and the weights of the count value of the second calibration type Whether predetermined difference value is reached, if it is, the new object samples are corresponded to the prompt message in the identifying code Calibration type be revised as the first calibration type, otherwise, by the calibration type of the new object samples be revised as the 4th calibration Type,
If it is not greater, judging the difference of the weights of the count value of the second calibration type and the weights of the count value of the first calibration type Whether value reaches the predetermined difference value, if it is, by the new object samples correspond to the identifying code in described in carry Show that the calibration type of information is revised as the second calibration type, otherwise, the calibration type of the new object samples is revised as Four calibration types.
5. according to the method described in claim 1, it is characterized in that, identifying code is sent to user terminal progress by the server Before the step of display, further include:
It obtains new prompt message sample and the new prompt message sample is stored in the authentication code database;
The calibration type that the partial objects sample in the multiple object samples corresponds to the new prompt message sample is obtained, And the calibration type that other object samples in the multiple object samples are corresponded to the new prompt message sample is arranged Type is demarcated for third;
The identifying code include the new prompt message sample, it is at least one demarcated object samples and it is at least one not Demarcate object samples, the object samples of having demarcated are to have corresponded to that the new prompt message sample demarcated to decent This, the object samples of not demarcating is corresponding to pairs that the calibration type of the new prompt message sample is third calibration type It decent, if the calculated verified value of the server is more than third threshold value T3, is not demarcated to described according to user The calibration type of object samples is not demarcated in the selection of object samples, modification, and the third threshold value T3 is greater than or equal to first threshold T1。
6. according to the method described in claim 5, it is characterized in that, it is described according to user to the choosing for not demarcating object samples It selects, changes the step of not demarcating the calibration type of object samples, including:
Selection according to user to the object samples that do not demarcate demarcates type and the to the first of the object samples that do not demarcate Two calibration types are counted;
Selection of multiple users to the object samples that do not demarcate described in the identifying code is collected, when the meter of the first calibration type The sum of the count value of numerical value and the second calibration type reaches predetermined count value, according to the count value of the first calibration type and the second mark Determine the weights of the count value of type, does not demarcate object samples described in modification corresponding to the prompt message in the identifying code Demarcate type.
7. according to the method described in claim 6, it is characterized in that, the count value according to the first calibration type and the second mark Determine the weights of the count value of type, does not demarcate object samples described in modification corresponding to the prompt message in the identifying code The step of demarcating type, including:
Judge whether the weights of the count value of the first calibration type are more than the weights of the count value of the second calibration type,
If it does, judging the difference of the weights of the count value of the first calibration type and the weights of the count value of the second calibration type Whether predetermined difference value is reached, if it is, the object samples of not demarcating are believed corresponding to the prompt in the identifying code The calibration type of breath is revised as the first calibration type, otherwise, the calibration type for not demarcating object samples is revised as the 4th Type is demarcated,
If it is not greater, judging the difference of the weights of the count value of the second calibration type and the weights of the count value of the first calibration type Whether value reaches the predetermined difference value, if it is, by the object samples of not demarcating corresponding to described in the identifying code The calibration type of prompt message is revised as the second calibration type, and otherwise, the calibration type for not demarcating object samples is changed For the 4th calibration type.
8. according to the method described in claim 1, it is characterized in that, it is described judge user to the selection of the object with it is described right As whether the calibration type in the authentication code database is consistent, if be not consistent, according to the user's choice, to described right The step of modifying as the calibration type in the authentication code database, including:
Judge whether user is consistent to the selection of the object with calibration type of the object in the authentication code database;
If be consistent, the calibration type to the object corresponding to the prompt message in the identifying code is correctly counted;
If be not consistent, the calibration type to corresponding to the prompt message in the identifying code to the object carries out wrong meter Number;
Multiple users are collected to the selection of the object in the identifying code and the correct counting of each object and error count, meter The error count of each object and the ratio correctly counted in the identifying code are calculated, when the ratio is more than lowest threshold and is less than When highest threshold value, the calibration type setting for the prompt message that the object corresponds in the identifying code is revised as the 4th calibration Type, when the ratio is greater than or equal to highest threshold value, if the former calibration type of the object is the first calibration type, The calibration type of the object is revised as the second calibration type, if the former calibration type of the object is the second calibration class The calibration type of the object is then revised as the first calibration type by type.
9. according to the method described in claim 8, it is characterized in that, the method further includes:
If the calibration type corresponding to the same prompt message sample in the authentication code database is the 4th calibration type Object samples number be more than predetermined number, which is marked.
10. according to the method described in claim 1, it is characterized in that, it is described judge user to the selection of the object with it is described Whether calibration type of the object in the authentication code database is consistent, if be not consistent, according to the user's choice, to described The step of calibration type of the object in the authentication code database is modified, including:
Judge whether user is consistent to the selection of the object with calibration type of the object in the authentication code database;
If be consistent, the calibration type to the object corresponding to the prompt message in the identifying code is correctly counted;
If be not consistent, the calibration type to corresponding to the prompt message in the identifying code to the object carries out wrong meter Number;
Multiple users are collected to the selection of the object in the identifying code and the correct counting of each object and error count, meter Calculate each weights of object correctly counted and the weights of error count in the identifying code;
Whether the weights that misjudgment counts are more than the weights that correctly count, if it is greater, then the weights that count of misjudgment with Whether the difference of the weights correctly counted reaches predetermined difference value, if it is, the selection according to user to the object samples, corrigendum The object samples correspond to the calibration type of current prompt information and change the calibration type according to the weights of error count Otherwise the calibration type of the object samples is revised as the 4th calibration type by weights,
If it is not greater, then whether the difference of the weights of weights and error count that correct judgment counts reaches predetermined difference value, such as Fruit is the weights of the calibration type then to be changed according to the weights correctly counted, but do not correct calibration type.
11. according to the method described in claim 1, it is characterized in that, multiple objects in the identifying code are belonging respectively to first Set or second set, and at least one object belongs to first set in the multiple object, the object selected by user is constituted Third set, wherein the server calculates verified value according to the information and scheduled rule of user's selected objects Step, including:
Calculate separately the first registration, the third set and the second set of the third set and the first set The second registration, the verified value is calculated according to first registration, the second registration and scheduled rule.
12. described according to the method described in claim 1, it is characterized in that, the prompt message in the identifying code includes problem Multiple objects in identifying code include multiple pictures in kind.
13. a kind of method of safety verification, which is characterized in that the method includes:
Server is by selecting prompt message of the prompt message sample as identifying code, the identifying code in authentication code database Database includes multiple prompt message samples and multiple object samples, each object samples in the multiple object samples All there is the calibration type corresponding to each prompt message sample, the calibration type to include at least the first calibration type and second Demarcate type;
The server is according to the selected prompt message sample, by selecting multiple object samples in the authentication code database As multiple objects in the identifying code, wherein selected multiple object samples correspond to the selected prompt message The calibration type of sample is respectively that the first calibration type, the second calibration type or third demarcate type, and at least one object The calibration type that sample corresponds to the selected prompt message sample is the first calibration type;
Identifying code is sent to user terminal and shown by server, the identifying code include prompt message and with the prompt The relevant multiple objects of information;
The user terminal returns to the selection of the multiple object to the server according to user the information of selected object;
The server calculates verified value T0 according to the information and scheduled rule of the selected object, if described test Card is more than first threshold T1 by value T0, then decision verification result is to pass through, otherwise, it is determined that verification result is not pass through;And
The verification result is returned to the user terminal by the server;
If the verification result is to pass through, whether the server judges the verified value T0 more than the 4th threshold value T4, If it is, the server judges selection and object mark in the authentication code database of the user to the object Determine whether type is consistent, if be not consistent, the server according to the user's choice, to the object in the verification yardage It modifies according to the calibration type in library, the 4th threshold value T4 is greater than or equal to the first threshold T1.
14. a kind of device of safety verification, which is characterized in that described device includes:
Database maintenance module, for safeguarding that authentication code database, the authentication code database include multiple prompt message samples This and multiple object samples, each object samples in the multiple object samples, which have, corresponds to each prompt message sample This calibration type, the calibration type include at least the first calibration type and the second calibration type;
Identifying code generation module, for by selecting prompt message sample carrying as identifying code in the authentication code database Show information, according to the selected prompt message sample, by selecting multiple object samples in the authentication code database as institute State multiple objects in identifying code, wherein selected multiple object samples correspond to the selected prompt message sample Calibration type is respectively that the first calibration type, the second calibration type or third demarcate type, and at least one object samples pair The calibration type of the prompt message sample selected by Ying Yu is the first calibration type;
Identifying code sending module shows that the identifying code includes prompt message for identifying code to be sent to user terminal And with the relevant multiple objects of the prompt message;
Selected object receiving module returns to the selection of the multiple object according to user for receiving the user terminal The information of selected object;And
Verification result determination module, for calculating verified value according to the information and scheduled rule of the selected object T0, if the verified value T0 is more than first threshold T1, decision verification result is to pass through, otherwise, it is determined that verification result Not pass through;
Demarcate type change unit, the verification result determination module verification result be by when, the calibration type is repaiied Change unit for whether judging the verified value T0 more than the 4th threshold value T4, if it is, judging user to the object Selection whether be consistent with calibration type of the object in the authentication code database, if be not consistent, according to user Selection, modify to calibration type of the object in the authentication code database, wherein the 4th threshold value T4 is big In or equal to the first threshold T1.
15. device according to claim 14, which is characterized in that the database maintenance module includes that object samples obtain Unit, the object samples acquiring unit is for obtaining new object samples and the new object samples being stored in described test It demonstrate,proves in code database;
Multiple objects that the identifying code that the identifying code sending module is sent includes include one it is described newly to decent This, the calibration type that the new object samples correspond to the prompt message in the identifying code is that third demarcates type;
If the calculated verified value T0 of verification result determination module is more than second threshold T2, the calibration type Selection of the unit according to user to the new object samples is changed, the new object samples is changed and corresponds to the identifying code In the prompt message calibration type, the second threshold T2 be greater than or equal to the first threshold T1.
16. device according to claim 15, which is characterized in that the calibration type changes unit and includes:Counting unit, Collector unit and modification unit, wherein
Selection of the counting unit according to user to the new object samples, the first calibration to the new object samples Type and the second calibration type are counted;
The collector unit is used to collect selection of multiple users to the new object samples in the identifying code,
When the sum of the count value of the count value of the first calibration type and the second calibration type reaches pre- devise a stratagem in the counting unit When numerical value, the modification unit is according to the weights of the count value and the count value of the second calibration type of the first calibration type, modification The new object samples correspond to the calibration type of the prompt message in the identifying code.
17. device according to claim 16, which is characterized in that the modification unit, including:
First judgment sub-unit, by judging whether the weights of the count value of the first calibration type are more than based on the second calibration type The weights of numerical value,
Second judges modification subelement, if the judging result of first judgment sub-unit is more than described second judges to repair Change subelement judge first calibration type count value weights with second demarcate type count value weights difference whether Reach predetermined difference value, if it is, the new object samples to be corresponded to the mark of the prompt message in the identifying code Determine type and be revised as the first calibration type, otherwise, the calibration type of the new object samples is revised as the 4th calibration type,
Third judges modification subelement, if the judging result of first judgment sub-unit is no more than the third judges Subelement judges whether the difference of the weights and the weights of the count value of the first calibration type of the count value of the second calibration type reaches To the predetermined difference value, if it is, the new object samples are corresponded to the prompt message in the identifying code Calibration type is revised as the second calibration type, otherwise, the calibration type of the new object samples is revised as the 4th calibration class Type.
18. device according to claim 14, which is characterized in that the database maintenance module further includes prompt message sample This acquiring unit and calibration type acquiring unit,
The prompt message sample acquisition unit is for obtaining new prompt message sample and by the new prompt message sample It is stored in the authentication code database;
The calibration type acquiring unit is used to obtain the partial objects sample in the multiple object samples corresponding to described new Prompt message sample calibration type, and other object samples in the multiple object samples are corresponded into described new carry Show that the calibration type of message sample is set as third calibration type;
The identifying code that the identifying code sending module is sent includes the new prompt message sample, at least one has marked Determine object samples and it is at least one do not demarcate object samples, the object samples of having demarcated are to have corresponded to the new prompt letter The object samples that breath sample is demarcated, the object samples of not demarcating are the calibration corresponding to the new prompt message sample Type is the object samples that third demarcates type;
If the calculated verified value of verification result determination module is more than third threshold value T3, the calibration type is repaiied Changing unit to be additionally operable to according to user to the selection for not demarcating object samples, the calibration type of object samples is not demarcated in modification, The third threshold value T3 is greater than or equal to first threshold T1.
19. device according to claim 18, which is characterized in that the calibration type changes unit and includes:Counting unit, Collector unit and modification unit, wherein
The counting unit is for the selection according to user to the object samples that do not demarcate, to the object samples that do not demarcate First calibration type and the second calibration type are counted;
The collector unit is used to collect selection of multiple users to the object samples that do not demarcate described in the identifying code, when When the sum of the count value of the count value of the first calibration type and the second calibration type reaches predetermined count value in the counting unit, The modification unit is used for the weights of the count value and the count value of the second calibration type according to the first calibration type, described in modification Calibration type of the object samples corresponding to the prompt message in the identifying code is not demarcated.
20. device according to claim 19, which is characterized in that the modification unit, including:
First judgment sub-unit, by judging whether the weights of the count value of the first calibration type are more than based on the second calibration type The weights of numerical value,
Second judges modification subelement, if the judging result of first judgment sub-unit is more than described second judges to repair Change the difference of the weights of count value of the subelement for judging the first calibration type and the weights of the count value of the second calibration type Whether predetermined difference value is reached, if it is, the object samples of not demarcating are believed corresponding to the prompt in the identifying code The calibration type of breath is revised as the first calibration type, otherwise, the calibration type for not demarcating object samples is revised as the 4th Type is demarcated,
Third judges modification subelement, if the judging result of first judgment sub-unit is no more than the third judges Modification subelement is used to judge the difference of the weights of the count value of the second calibration type and the weights of the count value of the first calibration type Be worth it is no reach the predetermined difference value, if it is, by the object samples of not demarcating corresponding to carrying described in the identifying code Show that the calibration type of information is revised as the second calibration type, otherwise, the calibration type for not demarcating object samples is revised as 4th calibration type.
21. device according to claim 14, which is characterized in that the calibration type changes unit and includes:Counting unit, Collector unit and modification unit, wherein
The counting unit is used to judge user to the selection of the object and the object in the authentication code database Whether calibration type is consistent;If be consistent, the calibration type of the prompt message in the identifying code is corresponded to the object Correctly counted;If be not consistent, to corresponding to the calibration type of the prompt message in the identifying code to the object Carry out error count;
The collector unit is used to collect multiple users to the correct of the selection of the object in the identifying code and each object Counting and error count,
The counting unit is for calculating the error count of each object and the ratio correctly counted in the identifying code, when described When ratio is more than lowest threshold and is less than highest threshold value, the object is corresponded to carrying in the identifying code by the modification unit Show that the calibration type setting of information is revised as the 4th calibration type, when the ratio is greater than or equal to highest threshold value, if institute The former calibration type for stating object is the first calibration type, then the calibration type of the object is revised as second by the modification unit Type is demarcated, if the former calibration type of the object is the second calibration type, the modification unit is by the mark of the object Determine type and is revised as the first calibration type.
22. device according to claim 21, which is characterized in that the database maintenance module further includes marking unit, If the calibration type corresponding to the same prompt message sample in the authentication code database is pair of the 4th calibration type Decent number is more than predetermined number, and the prompt message sample is marked in the marking unit.
23. device according to claim 14, which is characterized in that the calibration type changes unit and includes:Counting unit, Collector unit and modification unit, wherein
The counting unit is additionally operable to calculate each weights of object correctly counted and the power of error count in the identifying code Value;
The modification unit includes that the first judgment sub-unit, the second judgement modification subelement and third judge modification subelement, Wherein:
Whether weights of first judgment sub-unit for misjudgment to count are more than the weights correctly counted, if it does, Then second judges to change whether subelement reaches predetermined for the weights of misjudgment counting and the difference of the weights correctly counted Difference, if it is, the selection according to user to the object samples, corrects the mark that the object samples correspond to current prompt information Determine type and change the weights of error count, otherwise, the calibration type of the object samples is revised as the 4th calibration type,
If it is not greater, then third judges difference of the modification subelement for the weights for the weights and error count that correct judgment counts Whether value reaches predetermined difference value, if it is, the weights that modification correctly counts, but calibration type is not corrected.
24. device according to claim 14, which is characterized in that multiple objects in the identifying code are belonging respectively to first Set or second set, and at least one object belongs to first set in the multiple object, the object selected by user is constituted Third set, the verification result determination module includes computing unit, for calculating separately the third set and described first First registration of set, the second registration of the third set and the second set, and overlapped according to described first Degree, the second registration and scheduled rule calculate the verified value.
25. device according to claim 14, which is characterized in that the prompt message in the identifying code includes problem, institute It includes multiple pictures in kind to state multiple objects in identifying code.
26. a kind of system of safety verification, including user terminal and server, it is characterised in that:
Server is by selecting prompt message of the prompt message sample as identifying code, the identifying code in authentication code database Database includes multiple prompt message samples and multiple object samples, each object samples in the multiple object samples All there is the calibration type corresponding to each prompt message sample, the calibration type to include at least the first calibration type and second Demarcate type;
The server is according to the selected prompt message sample, by selecting multiple object samples in the authentication code database As multiple objects in the identifying code, wherein selected multiple object samples correspond to the selected prompt message The calibration type of sample is respectively that the first calibration type, the second calibration type or third demarcate type, and at least one object The calibration type that sample corresponds to the selected prompt message sample is the first calibration type;
The server shows for identifying code to be sent to the user terminal, the identifying code include prompt message with And with the relevant multiple objects of the prompt message;
The user terminal is used to return to the selection of the multiple object to the server according to user the letter of selected object Breath;
The server is additionally operable to calculate verified value T0 according to the information and scheduled rule of the selected object, if The verified value T0 is more than first threshold T1, then decision verification result is to pass through, otherwise, it is determined that verification result is obstructed It crosses, the server is additionally operable to the verification result returning to the user terminal;
If the verification result is to pass through, whether the server judges the verified value T0 more than the 4th threshold value T4, If it is, the server judges selection and object mark in the authentication code database of the user to the object Determine whether type is consistent, if be not consistent, the server according to the user's choice, to the object in the verification yardage It modifies according to the calibration type in library, the 4th threshold value T4 is greater than or equal to the first threshold T1.
CN201310351590.8A 2013-08-13 2013-08-13 The method, apparatus and system of safety verification Active CN104378329B (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201310351590.8A CN104378329B (en) 2013-08-13 2013-08-13 The method, apparatus and system of safety verification
PCT/CN2014/084184 WO2015021908A1 (en) 2013-08-13 2014-08-12 Method, apparatus and system for security verification

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201310351590.8A CN104378329B (en) 2013-08-13 2013-08-13 The method, apparatus and system of safety verification

Publications (2)

Publication Number Publication Date
CN104378329A CN104378329A (en) 2015-02-25
CN104378329B true CN104378329B (en) 2018-08-07

Family

ID=52468055

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201310351590.8A Active CN104378329B (en) 2013-08-13 2013-08-13 The method, apparatus and system of safety verification

Country Status (2)

Country Link
CN (1) CN104378329B (en)
WO (1) WO2015021908A1 (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105610806A (en) * 2015-12-23 2016-05-25 北京奇虎科技有限公司 Method and device for generating verification code
CN109831780B (en) * 2017-11-23 2021-11-02 宁波方太厨具有限公司 Intelligent interactive network distribution method
CN114268430B (en) * 2021-12-15 2024-05-24 瀚云科技有限公司 Verification code generation method and device, electronic equipment and storage medium

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1988442A (en) * 2005-12-23 2007-06-27 上海盛大网络发展有限公司 Method for realizing picture verification code
CN101179381A (en) * 2006-11-07 2008-05-14 阿里巴巴公司 Method and device for validating information
CN101976430A (en) * 2010-10-29 2011-02-16 赵俊平 Method for generating picture verification codes and system thereof
CN102208978A (en) * 2010-03-30 2011-10-05 腾讯科技(深圳)有限公司 Input verification system and method
CN102624705A (en) * 2012-02-21 2012-08-01 西南石油大学 An intelligent image verification method and system
CN102684882A (en) * 2012-05-16 2012-09-19 中国科学院计算机网络信息中心 Verifying method and verifying equipment
CN102882838A (en) * 2011-07-15 2013-01-16 财团法人工业技术研究院 Authentication method and system applying verification code mechanism
CN103186781A (en) * 2011-12-31 2013-07-03 北京新媒传信科技有限公司 Text recognition method

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102006163B (en) * 2009-09-01 2014-04-23 阿里巴巴集团控股有限公司 User authentication method, device and server
US20120036373A1 (en) * 2010-08-05 2012-02-09 Softlog Systems (2006) Ltd. Method system and device for secure firmware programming

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1988442A (en) * 2005-12-23 2007-06-27 上海盛大网络发展有限公司 Method for realizing picture verification code
CN101179381A (en) * 2006-11-07 2008-05-14 阿里巴巴公司 Method and device for validating information
CN102208978A (en) * 2010-03-30 2011-10-05 腾讯科技(深圳)有限公司 Input verification system and method
CN101976430A (en) * 2010-10-29 2011-02-16 赵俊平 Method for generating picture verification codes and system thereof
CN102882838A (en) * 2011-07-15 2013-01-16 财团法人工业技术研究院 Authentication method and system applying verification code mechanism
CN103186781A (en) * 2011-12-31 2013-07-03 北京新媒传信科技有限公司 Text recognition method
CN102624705A (en) * 2012-02-21 2012-08-01 西南石油大学 An intelligent image verification method and system
CN102684882A (en) * 2012-05-16 2012-09-19 中国科学院计算机网络信息中心 Verifying method and verifying equipment

Also Published As

Publication number Publication date
CN104378329A (en) 2015-02-25
WO2015021908A1 (en) 2015-02-19

Similar Documents

Publication Publication Date Title
US10305889B2 (en) Identity authentication method and device and storage medium
JP6847187B2 (en) Image-based CAPTCHA challenge
US10481905B2 (en) Method, apparatus and system for verifying code integrity on clients
CN112116008B (en) Processing method of target detection model based on intelligent decision and related equipment thereof
CN111585964B (en) Login information input method, login information storage method and related device
CN104702406B (en) Identity verification method and device
US20140095308A1 (en) Advertisement distribution apparatus and advertisement distribution method
WO2022100452A1 (en) Ocr system evaluation method, apparatus and device, and readable storage medium
CN104301875B (en) SMS processing and device
CN104852889A (en) Picture identifying code generation method and system, and verify method and client side, and server
CN104065633B (en) A method, device and system for verification using a verification diagram
CN106682949A (en) Service recommending method and service information receiving method, device and system
CN104618316A (en) Method, device and system of safety verification
US20160335611A1 (en) User attribute value transfer method and terminal
US9049211B1 (en) User challenge using geography of previous login
WO2015032281A1 (en) Method and system for generating and processing challenge-response tests
CN104378329B (en) The method, apparatus and system of safety verification
CN112149172A (en) Business data management method, device, equipment and computer readable storage medium
CN107509080A (en) A coded image display method, device and electronic equipment
CN111651749B (en) Method, device, computer equipment and storage medium for retrieving account based on password
CN105528399A (en) Multi-source terminal parameter data fusion method and apparatus
US20140215582A1 (en) Verification system and verification method
GB2555476A (en) Apparatuses and methods for signing a legal document
CN108076061A (en) Question-type picture verification method
CN110809001B (en) Identity authentication method, device, equipment and storage medium

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant