CN106507308A - A method and device for identity authentication - Google Patents

Abstract

The present embodiments relate to field of information security technology, more particularly to a kind of identity identifying method and device, including：Determine that the first sub- time period belonging to the time of the ID authentication request for receiving terminal transmission, the ID authentication request include the current location of the terminal and current service；From all reference zones, the first reference zone belonging to the current location is determined, the reference zone is that the historical position according to the terminal within the described first sub- time period determines；Determine that the terminal is located at the first probability of first reference zone within the described first sub- time period, and the terminal runs the second probability of the current service within the described first sub- time period；Authentication is carried out to the user of the terminal according to first probability and second probability.The embodiment of the present invention is in order to improving safety and the convenience of authentication.

Description

A method and device for identity authentication

technical field

The invention relates to the technical field of information security, in particular to an identity authentication method and device.

Background technique

With the development of the mobile Internet and the popularization of mobile terminals, mobile terminals can provide people with various powerful functions such as convenient and fast mobile office and entertainment, and gradually become the main tools and platforms for activities such as network application login and online and offline payment. Usually, a large amount of personal and company important information or privacy data are stored on mobile terminals, such as personal photos, company information, etc., and the subsequent security issues and convenience become a challenge.

At present, user identity authentication by mobile terminals is mainly password-based user authentication, such as digital passwords, biometric authentication, and the like. Among them, the digital password needs to be memorized by the user, and each time it is used, it must be manually input and entered. Others can peek at the password entered by the user from different angles, which has low security and is not convenient. The biometric authentication method requires a special input device, the technical cost is too high, and it also requires the user to participate in the input, and the success rate is not easy to guarantee. Therefore, a low-cost, high-convenience user identity authentication method is required.

Contents of the invention

The present application provides an identity authentication method and device, which are used to improve the security and convenience of identity authentication.

An embodiment of the present invention provides an identity authentication method, comprising the following steps:

determining the first sub-time period to which the time of receiving the identity authentication request sent by the terminal belongs, the identity authentication request including the current location and current service of the terminal;

From all reference areas, determine a first reference area to which the current position belongs, where the reference area is determined according to the historical position of the terminal within the first sub-time period;

determining a first probability that the terminal is located in the first reference area during the first sub-time period, and a second probability that the terminal operates the current service during the first sub-time period;

The user of the terminal is authenticated according to the first probability and the second probability.

Optionally, the determining before the current time of receiving the identity authentication request sent by the terminal further includes:

Divide the historical time period into multiple historical time periods, and divide each historical time period into N sub-time periods, where the Mth sub-time period in each historical time period corresponds to M≤N;

determining a set of geographical areas corresponding to each sub-time period, wherein the set of geographical areas corresponding to the sub-time period is composed of geographical areas determined by the historical position of the terminal in the sub-time period;

Determine the distance between different geographical areas in the same set, and combine the geographical areas whose distance is less than the distance threshold as a reference area.

Optionally, the determining the distance between different geographic regions in the same set includes:

For a geographical area, obtain the longitude and latitude of all historical positions of the terminal in the geographical area; determine the average value of all longitudes and the average value of all latitudes as the coordinates of the class center of the geographical area; according to the The coordinates of the class center of the geographical area, which determines the distance between the geographical area and any geographical area except the geographical area.

Optionally, the determining the first probability that the terminal is located in the first reference area within the first sub-period includes:

From the reference areas corresponding to all the first sub-time periods, determine the second reference area containing the largest number of historical positions of the terminal;

Determining a ratio of the number of historical locations of the terminal included in the first reference area to the number of historical locations included in the second reference area as the first probability.

Optionally, the determining the second probability that the terminal runs the current service within the first sub-time period includes:

determining the total running time of each service run by the terminal in all first sub-time periods;

Select the service with the longest running time as the first service;

determining the total running time of the current service in all first sub-time periods;

A ratio of the total running time of the current service to the total running time of the first service is determined as the second probability.

An identity authentication device, comprising:

A sub-time period determining unit, configured to determine the first sub-time period to which the time of receiving the identity authentication request sent by the terminal belongs, and the identity authentication request includes the current location and current service of the terminal;

a reference area determining unit, configured to determine a first reference area to which the current location belongs from all reference areas, the reference area being determined according to the historical position of the terminal within the first sub-time period;

a probability calculation unit, configured to determine a first probability that the terminal is located in the first reference area within the first sub-time period, and a probability that the terminal runs the current service within the first sub-time period second probability;

An identity verification unit, configured to perform identity verification on a user of the terminal according to the first probability and the second probability.

Optionally, also include:

The division unit is used to divide the historical time period into multiple historical time periods, and divide each historical time period into N sub-time periods, wherein the Mth sub-time period in each historical time period corresponds to M≤N;

A collection unit, configured to determine a set of geographical areas corresponding to each sub-time period, wherein the set of geographical areas corresponding to the sub-time period is composed of geographical areas determined by the historical position of the terminal in the sub-time period;

The merging unit is used to determine the distance between different geographical areas in the same set, and merge the geographical areas whose distance is smaller than the distance threshold as a reference area.

Optionally, the merging unit is specifically used for:

For a geographical area, obtain the longitude and latitude of all historical positions of the terminal in the geographical area; determine the average value of all longitudes and the average value of all latitudes as the coordinates of the class center of the geographical area; according to the The coordinates of the class center of the geographical area, which determines the distance between the geographical area and any geographical area except the geographical area.

Optionally, the probability calculation unit is specifically used for:

From the reference areas corresponding to all the first sub-time periods, determine the second reference area containing the largest number of historical positions of the terminal;

Determining a ratio of the number of historical locations of the terminal included in the first reference area to the number of historical locations included in the second reference area as the first probability.

Optionally, the probability calculation unit is specifically used for:

determining the total running time of each service run by the terminal in all first sub-time periods;

Select the service with the longest running time as the first service;

determining the total running time of the current service in all first sub-time periods;

A ratio of the total running time of the current service to the total running time of the first service is determined as the second probability.

In the embodiment of the present invention, before the user uses the service on the terminal, the terminal needs to verify the user's identity and send an identity authentication request to the server, and the identity request includes the current location of the terminal and the current service. The server determines the time when the identity authentication request is received, and determines the first sub-time period to which the time belongs. Multiple reference areas for identity authentication are stored in the server, and the reference area is determined by the server according to the historical position of the terminal within the first sub-time period. The server calculates the first probability that the terminal is located in the first reference area within the first sub-time period, and calculates the second probability that the terminal runs the current service within the first sub-time period, and calculates the user's information based on the first probability and the second probability Authenticate. In the embodiment of the present invention, considering the user's action trajectory and service usage habits within a specified time, the current time determines the probability of the user using the current service at the current location, thereby authenticating the user's identity without the need for the user to manually enter a password or input a fingerprint And other biometric features, avoiding the trouble of users participating in authentication and improving convenience. At the same time, the user's identity is authenticated according to the user's daily behavior habits, which avoids the safety hazard of user input and improves the security and reliability of identity authentication.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For Those of ordinary skill in the art can also obtain other drawings based on these drawings without any creative effort.

FIG. 1 is a schematic diagram of a system architecture applicable to an embodiment of the present invention;

FIG. 2 is a schematic flowchart of an identity authentication method provided by an embodiment of the present invention;

3 is a schematic flow diagram of an identity authentication method in a specific embodiment of the present invention;

Fig. 4 is a schematic structural diagram of an identity authentication device provided by an embodiment of the present invention.

detailed description

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, rather than all embodiments . Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

As shown in FIG. 1 , a system architecture applicable to this embodiment of the present invention includes a terminal 101 and a server 102 . The terminal 101 may be a mobile electronic device with a wireless communication function such as a mobile phone, a tablet computer, or a dedicated handheld device, or may be a device connected to the Internet through a wired access method such as a PC, a notebook computer, or a server. The server 102 may be a network device such as a computer. Preferably, the server 102 may use cloud computing technology for information processing.

The terminal 101 can communicate with the server 102 through the Internet network, or communicate with the computing server 102 through mobile communication systems such as the Global System for Mobile Communications (GSM for short) and the long term evolution (LTE for short) system. .

The embodiment of the present invention provides a preferred implementation mode, and the terminal 101 is a mobile phone as an example for introduction.

Figure 2 exemplarily shows a schematic flowchart of an identity authentication method provided by an embodiment of the present invention. As shown in Figure 2, the identity authentication method provided by this embodiment of the present invention includes the following steps:

Step 201. Determine the first sub-time period to which the time when the identity authentication request sent by the terminal is received, the identity authentication request includes the current location and current service of the terminal;

Step 202. From all reference areas, determine a first reference area to which the current location belongs, and the reference area is determined according to the historical position of the terminal within the first sub-time period;

Step 203: Determine a first probability that the terminal is located in the first reference area within the first sub-time period, and a second probability that the terminal operates the current service within the first sub-time period ;

Step 204, perform identity verification on the user of the terminal according to the first probability and the second probability.

In the embodiment of the present invention, before the user uses the service on the terminal, the terminal needs to verify the user's identity and send an identity authentication request to the server, and the identity request includes the current location of the terminal and the current service. The server determines the time when the identity authentication request is received, and determines the first sub-time period to which the time belongs. Multiple reference areas for identity authentication are stored in the server, and the reference area is determined by the server according to the historical position of the terminal within the first sub-time period. The server calculates the first probability that the terminal is located in the first reference area within the first sub-time period, and calculates the second probability that the terminal runs the current service within the first sub-time period, and calculates the user's information based on the first probability and the second probability Authenticate. In the embodiment of the present invention, considering the user's action trajectory and service usage habits within a specified time, the current time determines the probability of the user using the current service at the current location, thereby authenticating the user's identity without the need for the user to manually enter a password or input a fingerprint And other biometric features, avoiding the trouble of users participating in authentication and improving convenience. At the same time, the user's identity is authenticated according to the user's daily behavior habits, which avoids the safety hazard of user input and improves the security and reliability of identity authentication.

In the embodiment of the present invention, multiple reference areas are stored in the server, and the reference areas are determined according to the position of the terminal in the past period of time. Before step 201, it also includes:

Divide the historical time period into multiple historical time periods, and divide each historical time period into N sub-time periods, where the Mth sub-time period in each historical time period corresponds to M≤N;

determining a set of geographical areas corresponding to each sub-time period, wherein the set of geographical areas corresponding to the sub-time period is composed of geographical areas determined by the historical position of the terminal in the sub-time period;

Determine the distance between different geographical areas in the same set, and combine the geographical areas whose distance is less than the distance threshold as a reference area.

For example, a period of historical time is divided into multiple historical time periods. For example, a period of historical time can be taken as the past half year, and half a year is divided into historical time periods in units of days. Each historical time period is every day. In this way, dividing each historical time period into N sub-time periods is to divide each day in the past six months into N sub-time periods. have difference. Of course, the historical time period and the sub-time period may also be divided according to other division methods, such as dividing according to different behavior trajectories of the user terminal on working days and rest days in a week. The embodiment of the present invention only provides a preferred implementation manner, and the introduction is made by dividing the historical time length into a historical time period in units of days as an example. Here, each day can be divided into N sub-time periods on average, for example, each sub-time period is 2 hours, and each day can be divided into 12 sub-time periods on average.

Since the activities of the terminal are different at different times of the day, the sub-time periods of each day may not be evenly divided, so that the duration of the sub-time period with high activity degree is longer, and the duration of the sub-time period with low activity degree is shorter. For example, in a day, from 0:00 to 8:00, every 4 hours is divided into a sub-time period, that is, divided into 2 sub-time periods, and each sub-time period is 4 hours; from 8:00 to 20:00, every 1 hour is divided into a sub-time period. The time period is divided into 12 sub-time periods, and each sub-time period is 1 hour; from 20:00 to 24:00, every 2 hours is divided into a sub-time period, that is, divided into 2 sub-time periods, and each sub-time period is 2 hours. In general, divide the day into 14 sub-time periods, the first two sub-time periods are 4 hours each, then 12 sub-time periods are 1 hour each, and the last two sub-time periods are 2 hours each. The specific manner of dividing sub-time periods may be selected according to needs, and is not limited in this embodiment of the present invention.

It should be noted that each historical time period is divided into sub-time periods in exactly the same way, that is, the Mth sub-time period in each historical time period corresponds. That is to say, if a day is divided into 12 sub-time periods on average, every day needs to be divided into 12 sub-time periods on average, and the Mth sub-time period corresponds to it. If a day is divided into multiple sub-time periods according to the user's behavior trajectory, each day needs to be divided in the same way, so that the Mth sub-time period corresponds.

Then determine the geographical area corresponding to each sub-time period, and determine a geographical area according to the multiple geographical locations of the terminals measured in each sub-time period. The geographical location of the terminal can be represented by the longitude and latitude coordinates of the terminal, so a geographical area includes the terminal One or more geographic locations within the sub-time period. A collection of geographical areas of the same sub-time period in different historical time periods. Specifically, each historical time period is divided into N sub-time periods, and since each historical time period is divided in the same manner, the geographical area of the first sub-time period of each historical time period is formed into the first geographical area set, and each The geographical areas of the second sub-time period of the first historical time period form the second geographical area set, and so on, until the geographical areas of the Nth sub-time period of each historical time period form the Nth geographical area set.

For example, a day is divided into 12 sub-time periods on average, which are the first sub-time period, the second sub-time period ... the 12th sub-time period, wherein the first sub-time period is from 0 o'clock to 2 o'clock, and the The 2nd sub-time period is from 2 o'clock to 4 o'clock... The 12th sub-time period is from 22 o'clock to 24 o'clock. Get the geographic location coordinates of the terminal in the first sub-time period of the day to form a geographical area. There are 30 first sub-time periods in the history, and the first geographical area set includes 30 geographical areas. One geographical area corresponds to The first sub-time period of the day.

Determine the distance between different geographical areas in the same set, that is, examine whether the location trajectories of the terminals are similar in the same sub-time period of each day in the past month, and if they are similar, merge the geographical areas with similar positions as a reference area. Still taking the above-mentioned division of a day into 12 sub-time periods as an example, the specific operation method can be as follows: take any geographical area in the set as geographical area 1, and examine the relationship between geographical area 1 and the other 29 geographical areas in the same set , traverse the remaining 29 geographic regions, merge the geographic regions whose distance from geographic region 1 is less than the threshold with geographic region 1 as a new geographic region 1, and then traverse the rest of the geographic regions, and combine them with the new geographic region 1 The geographic areas whose distance is less than the threshold continue to be merged with the new geographic area 1 until the distances between all other geographic areas in the set and the new geographic area 1 are greater than or equal to the threshold, then the new geographic area 1 is used as a reference area. If the distances between the remaining geographical areas in the set and the reference area are greater than or equal to the threshold value, a geographical area is randomly selected from the remaining geographical areas as geographical area 2, and the similar merging as above is continued until the remaining geographical areas in the set are If the distances to the new geographical area 2 formed by merging are greater than or equal to the threshold, the new geographical area 2 is used as a reference area. And so on until all geographic areas in the collection are combined into a reference area. In particular, if the distance between a geographic area and all other geographic areas is greater than or equal to the threshold, and the distance to all reference areas is also greater than or equal to the threshold, then the geographic area is used as a reference alone area.

The distance between the above geographic regions can be represented by the distance between the class centers of the geographic regions. Then said determining the distance between different geographic regions in the same set includes:

For a geographical area, obtain the longitude and latitude of all historical positions of the terminal in the geographical area; determine the average value of all longitudes and the average value of all latitudes as the coordinates of the class center of the geographical area; according to the The coordinates of the class center of the geographical area, which determines the distance between the geographical area and any geographical area except the geographical area.

In order to facilitate the calculation of distances between geographic regions, the embodiment of the present invention introduces the concept of a class center. Since each historical location of the terminal is included in the geographic area, the class center coordinates of the geographic area are calculated according to the latitude and longitude coordinates of each historical location of the terminal. Specifically, the longitude of all historical position coordinates may be averaged as the longitude of the class center coordinate, and the dimensions of all historical position coordinates may be averaged as the dimension of the class center coordinate. Alternatively, select the maximum longitude, minimum longitude, maximum latitude, and minimum latitude from the coordinates of all historical locations in the geographical area, and specify the class center coordinates as Here the maximum longitude and maximum latitude may correspond to coordinates of different historical locations, and similarly, the minimum longitude and minimum latitude may also correspond to coordinates of different historical locations.

The distance between two geographic regions can be represented by the class center distance of the geographic regions. Assuming that the coordinates of class center A and class center B are (α ₁ , β ₁ ) and (α ₂ , β ₂ ) respectively, and the radius of the earth is R, the distance between class center A and class center B can be calculated using the following formula:

dis(A,B)=R·arccos[cosβ ₁ cosβ ₂ cos(α ₁ -α ₂ )+sinβ ₁ sinβ ₂ ]…Formula 1

Among them, dis(A,B) is the distance between class center A and class center B, R is the radius of the earth, (α ₁ , β ₁ ) is the longitude and latitude coordinates of class center A, (α ₂ , β ₂ ) is the class The latitude and longitude coordinates of center B.

In the above step 202, determining the first reference area to which the current position belongs is also determined according to the latitude and longitude coordinates of the current position and the class center coordinates of the reference area. The distances between the current position and the class centers of each reference area are calculated respectively, and the reference area corresponding to the class center with the smallest distance to the current position is selected as the first reference area.

Preferably, the above step 203, determining the first probability that the terminal is located in the first reference area within the first sub-time period, includes:

From the reference areas corresponding to all the first sub-time periods, determine the second reference area containing the largest number of historical positions of the terminal;

Determining a ratio of the number of historical locations of the terminal included in the first reference area to the number of historical locations included in the second reference area as the first probability.

Specifically, after the reference area corresponding to the first sub-time period is determined through the geographical area set corresponding to the first sub-time period, the first reference area to which the current location of the terminal belongs is determined therefrom. And, the one containing the largest number of historical positions of the terminal is determined from the reference areas corresponding to the first sub-time period as the second reference area. Count the number of historical locations contained in the first reference area, denoted as R, and the number of historical positions contained in the second reference area, denoted as R _max , and then calculate the terminal at the first sub-time according to R and R _max The probability that the segment is located in the first reference area, that is, the first probability. The calculation formula of the first probability is as follows:

Among them, w ₁ is the first probability that the terminal is located in the first reference area within the first sub-time period, the range of w ₁ is [0, 1], R is the number of historical positions of the terminal contained in the first reference area, R _max is the number of historical positions of the terminal contained in the second reference area.

The embodiment of the present invention not only verifies the identity of the user according to the location track information of the terminal, but also verifies the identity of the user according to the user's habit of using terminal services. Preferably, determining the second probability that the terminal runs the current service within the first sub-period includes:

determining the total running time of each service run by the terminal in all first sub-time periods;

Select the service with the longest running time as the first service;

determining the total running time of the current service in all first sub-time periods;

A ratio of the total running time of the current service to the total running time of the first service is determined as the second probability.

In the embodiment of the present invention, the service on the user's terminal can be different types of applications, such as weather, calendar, SNS (Social Networking Services, social network service), etc., or it can be a certain function in a specific application, such as query, Browse, buy, and more. The server divides the total time of running all services of the terminal in the historical time period, divides the running time of each service into sub-time periods, and then adds up the running time of a service in all sub-time periods, and counts the first sub-time period The terminal runs the total running time of each service, and selects the service with the longest running time in all first sub-time periods as the first service. Comparing the time that the terminal runs the current service in all the first sub-time periods with the time that the terminal runs the first service in the first sub-time period, as the probability that the terminal runs the current service in the first sub-time period, that is second probability. The formula for calculating the second probability is as follows:

Among them, w ₂ is the second probability that the terminal runs the current service in the first sub-time period, the range of w ₂ is [0, 1], S is the time that the terminal runs the current service in all the first sub-time periods, S _max is the time during which the terminal runs the first service within the first sub-time period.

For example, when a user uses a payment service at a terminal at 9:30 in the morning, the user needs to be authenticated. The server counts the total time of the terminal running the payment service from 8:00 am to 10:00 am every day in the past three months, and counts the total time of each service that the terminal runs from 8:00 am to 10:00 am every day in the past three months, and determines the running time The longest service is the query service, then the second probability is the time to run the payment service compared to the time to run the query service.

After determining the first probability and the second probability, the server authenticates the user of the terminal according to the first probability and the second probability. Specifically, the first probability and the second probability may be weighted, and the weighted value may be compared with a probability threshold. If the weighted value of the first probability and the second probability is greater than or equal to the probability threshold, the user’s identity authentication is completed, and the terminal executes the user’s instruction; if the weighted value of the first probability and the second probability is smaller than the probability threshold, it indicates that the authentication is not If passed, the terminal can prompt the user to continue authentication by other authentication methods.

In order to understand the present invention more clearly, the above-mentioned process is described in detail below with specific embodiments. The specific embodiment is that the user wants to log in to the chat software in the mobile phone, and the identity of the user needs to be verified. The time for logging in is 14:40 , the specific steps are shown in Figure 3, including:

Step 301. The server divides each day in the past six months into 17 sub-time periods, specifically, divides the period from 0:00 to 8:00 into 2 sub-time periods, and each sub-time period is 4 hours; from 8:00 to 22:00, divides There are 14 sub-time periods, and each sub-time period is 1 hour; from 22:00 to 24:00 is 1 sub-time period, and the sub-time period is 4 hours.

Step 302, the server counts the historical location of the mobile phone in the past six months, and processes the historical location information of the mobile phone as time-related, and the historical location is represented by <O, A, T>, where O is the longitude of the mobile phone, and A is the latitude of the mobile phone , T is the time of recording the location of the mobile phone. At the same time, the server counts the services running on the mobile phone in the past six months, and processes the service information as time-related. The service information is represented by <F, Ts, Te>, where F is the service running on the mobile phone, and Ts is the start of the service running Time, Te is the end time of the service running.

Step 303 , the server determines a set of geographical areas corresponding to each sub-time period according to the historical location of the mobile phone in each sub-time period, and merges different geographical areas whose distance is less than 500m to form a reference area.

Step 304, the server receives the identity authentication request sent by the mobile phone, determines the current location of the mobile phone, and the sub-time period to which the current time belongs is from 14:00 to 15:00.

Step 305, the server determines the first reference area to which the current location belongs from the reference areas corresponding to the sub-time period from 14:00 to 15:00.

Step 306, the server counts the second reference area that contains the largest number of historical locations among the reference areas corresponding to the sub-time period from 14:00 to 15:00.

Step 307. The server compares the number of historical locations of the mobile phone in the first reference area with the number of historical locations of the mobile phone in the second reference area to obtain a first probability w ₁ .

Step 308, the server counts the sum of the time of running the chat software on the mobile phone and the sum of the time of the service with the longest running time in the sub-time period from 14:00 to 15:00 in the past six months.

Step 309 , the server statistics compare the sum of the running time of the chat software with the sum of the running time of the service with the longest running time, and obtain the second probability w ₂ .

Step 310 , the server judges whether w ₁ +w ₂ is greater than the probability threshold δ, if yes, execute step 311 ; otherwise, execute step 312 . Among them, the range of δ is [0, 2].

Step 311, the server determines that the authentication is passed.

Step 312, the server determines that the authentication fails, and prompts the terminal to perform authentication in other ways.

Fig. 4 exemplarily shows a schematic structural diagram of an identity authentication device provided by an embodiment of the present invention.

As shown in Figure 4, an identity authentication device provided by an embodiment of the present invention includes:

The sub-time period determination unit 401 is configured to determine the first sub-time period to which the time of receiving the identity authentication request sent by the terminal belongs, and the identity authentication request includes the current location and current service of the terminal;

A reference area determining unit 402, configured to determine a first reference area to which the current location belongs from all reference areas, the reference area is determined according to the historical position of the terminal within the first sub-time period;

A probability calculation unit 403, configured to determine a first probability that the terminal is located in the first reference area within the first sub-time period, and the terminal runs the current service within the first sub-time period the second probability of

An identity verification unit 404, configured to perform identity verification on a user of the terminal according to the first probability and the second probability.

Optionally, also include:

A division unit 405, configured to divide the historical time period into multiple historical time periods, and divide each historical time period into N sub-time periods, wherein the Mth sub-time period in each historical time period corresponds, M≤N ;

A collection unit 406, configured to determine a set of geographical areas corresponding to each sub-time period, wherein the set of geographical areas corresponding to the sub-time period is composed of geographical areas determined by the historical position of the terminal in the sub-time period;

The merging unit 407 is configured to determine the distance between different geographical areas in the same set, and combine the geographical areas whose distance is smaller than the distance threshold as a reference area.

Optionally, the merging unit 407 is specifically configured to:

For a geographical area, obtain the longitude and latitude of all historical positions of the terminal in the geographical area; determine the average value of all longitudes and the average value of all latitudes as the coordinates of the class center of the geographical area; according to the The coordinates of the class center of the geographical area, which determines the distance between the geographical area and any geographical area except the geographical area.

Optionally, the probability calculation unit 403 is specifically configured to:

From the reference areas corresponding to all the first sub-time periods, determine the second reference area containing the largest number of historical positions of the terminal;

Determining a ratio of the number of historical locations of the terminal included in the first reference area to the number of historical locations included in the second reference area as the first probability.

Optionally, the probability calculation unit 403 is specifically configured to:

determining the total running time of each service run by the terminal in all first sub-time periods;

Select the service with the longest running time as the first service;

determining the total running time of the current service in all first sub-time periods;

A ratio of the total running time of the current service to the total running time of the first service is determined as the second probability.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

While preferred embodiments of the invention have been described, additional changes and modifications to these embodiments can be made by those skilled in the art once the basic inventive concept is appreciated. Therefore, it is intended that the appended claims be construed to cover the preferred embodiment as well as all changes and modifications which fall within the scope of the invention.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and equivalent technologies thereof, the present invention also intends to include these modifications and variations.

Claims (10)

1. a kind of identity identifying method, it is characterised in that include：

Determine the first sub- time period belonging to the time of the ID authentication request for receiving terminal transmission, the ID authentication request Include current location and the current service of the terminal；

From all reference zones, the first reference zone belonging to the current location is determined, the reference zone is according to institute State what historical position of the terminal within the described first sub- time period determined；

Determine that the terminal is located at the first probability of first reference zone, and the end within the described first sub- time period The second probability of the current service is run within the described first sub- time period in end；

Authentication is carried out to the user of the terminal according to first probability and second probability.

2. the method for claim 1, it is characterised in that the determination receives the ID authentication request of terminal transmission Before current time, also include：

History duration is divided into multiple historical time sections, each historical time section is divided into N number of sub- time period, wherein, per M-th in the individual historical time section sub- time period is corresponding, M≤N；

Determine the corresponding geographic area set of each sub- time period, between the wherein described period of the day from 11 p.m. to 1 a.m the corresponding geographic area set of section be by The geographic area composition that historical position of the terminal in the sub- time period determines；

Determine the distance between different geographic regions in identity set, geographic area of the distance less than distance threshold is closed And, as a reference zone.

3. method as claimed in claim 2, it is characterised in that in the determination identity set between different geographic regions away from From, including：

For a geographic area, the longitude and latitude of all historical positions of terminal described in the geographic area is obtained；Really The meansigma methodss of fixed all longitudes and the meansigma methodss of all latitudes, used as the coordinate at the class center of the geographic area；According to institute The coordinate at the class center of geographic area is stated, the geographic area is determined and in addition to the geographic area between any one geographic area Distance.

4. method as claimed in claim 2, it is characterised in that determination terminal position within the described first sub- time period In the first probability of first reference zone, including：

From all first sub- time periods corresponding reference zone, determine the historical position number comprising the terminal most the Two reference zones；

Determine the historical position number of the terminal included in first reference zone, with bag in second reference zone The ratio of the historical position number for containing, used as first probability.

5. the method for claim 1, it is characterised in that the determination terminal was transported within the described first sub- time period Second probability of the row current service, including：

Determine in all first sub- time periods, the terminal operating each service total run time；

The most long service of run time is chosen as first service；

Determine in all first sub- time periods, the total run time of the current service；

Determine the total run time of the current service and the ratio of the total run time of the first service, as described second Probability.

6. a kind of identification authentication system, it is characterised in that include：

Sub- time period determining unit, for determining first period of the day from 11 p.m. to 1 a.m belonging to the time for receiving the ID authentication request that terminal sends Between section, the ID authentication request includes the current location of the terminal and current service；

Reference zone determining unit, for from all reference zones, determining the first reference zone belonging to the current location, The reference zone is that the historical position according to the terminal within the described first sub- time period determines；

Probability calculation unit, for determining that the terminal is located at the of first reference zone within the described first sub- time period One probability, and the terminal runs the second probability of the current service within the described first sub- time period；

Identity authenticating unit, tests for carrying out identity according to first probability and second probability to the user of the terminal Card.

7. device as claimed in claim 6, it is characterised in that also include：

Each historical time section, for history duration is divided into multiple historical time sections, is divided into N number of period of the day from 11 p.m. to 1 a.m by division unit Between section, wherein, m-th in each the historical time section sub- time period is corresponding, M≤N；

Aggregation units, for determining the corresponding geographic area set of each sub- time period, between the wherein described period of the day from 11 p.m. to 1 a.m, section is correspondingly The geographic area that reason historical position of the regional ensemble by the terminal in the sub- time period determines constitutes；

Combining unit, for determining the distance between different geographic regions in identity set, by apart from the ground less than distance threshold Reason region merges, used as a reference zone.

8. device as claimed in claim 7, it is characterised in that the combining unit, specifically for：

For a geographic area, the longitude and latitude of all historical positions of terminal described in the geographic area is obtained；Really The meansigma methodss of fixed all longitudes and the meansigma methodss of all latitudes, used as the coordinate at the class center of the geographic area；According to institute The coordinate at the class center of geographic area is stated, the geographic area is determined and in addition to the geographic area between any one geographic area Distance.

9. device as claimed in claim 7, it is characterised in that the probability calculation unit, specifically for：

From all first sub- time periods corresponding reference zone, determine the historical position number comprising the terminal most the Two reference zones；

Determine the historical position number of the terminal included in first reference zone, with bag in second reference zone The ratio of the historical position number for containing, used as first probability.

10. device as claimed in claim 6, it is characterised in that the probability calculation unit, specifically for：

Determine in all first sub- time periods, the terminal operating each service total run time；

The most long service of run time is chosen as first service；

Determine in all first sub- time periods, the total run time of the current service；

Determine the total run time of the current service and the ratio of the total run time of the first service, as described second Probability.