WO2018040045A1 - Monitoring method, apparatus and electronic device - Google Patents

Abstract

The present disclosure relates to a monitoring method, apparatus and an electronic device. The method comprises: acquiring user characteristic information without a user's perception; when determining the user's validity according to the identity authentication information input by the user, confirming whether the current user is an invalid user according to the user characteristic information, the identity authentication information being used for confirming whether a target authentication operation is permitted or not; and performing a designated security operation when it is confirmed, based on the user characteristic information, that the current user is an invalid user. Therefore, even if the invalid user gets access to the electronic device successfully by cracking or forging the identity authentication information of the valid user, the electronic device can perform secondary verification on the identity of the user by acquiring the user characteristic information of the current user. When the secondary verification result indicates that the user is an invalid user, the designated security operation is performed, thereby enhancing usage security of the electronic device and avoiding problems such as user information disclosure and user property loss etc.

Description

Monitoring method, device and electronic device Technical field

The present disclosure relates to the field of electronic device security monitoring, and in particular to a monitoring method, device, and electronic device.

Background technique

With the continuous development of technology, electronic devices are becoming more and more intelligent. For example, people can not only perform basic operations such as calling and texting through a smart phone, but also install various types of applications on a smart phone (for example, video applications, social applications, shopping applications, financials). Applications, etc.) to meet different usage needs. However, with the improvement of the level of intelligence, high requirements are also placed on the security performance of electronic devices.

In the related art, when an electronic device performs some sensitive operations, it is required to authenticate the user identity. The electronic device performs this operation when it is confirmed that the user identity is legal. When it is confirmed that the user identity is illegal, the electronic device does not perform the operation. This mechanism can prevent illegal users from illegally using electronic devices to a certain extent. However, if an illegal user forges the identity authentication information of the legitimate user, the illegal user can perform the illegal operation on the electronic device through the authentication of the electronic device. In this way, it is easy to cause problems such as leakage of user information and damage to user property.

Summary of the invention

To overcome the problems in the related art, the present disclosure provides a monitoring method, apparatus, computer program product, non-transitory computer readable storage medium, and electronic device.

According to a first aspect of the embodiments of the present disclosure, there is provided a monitoring method applied to an electronic device, and the method includes: acquiring user feature information when the user is not aware, the user feature information being used to confirm whether the current user is Is an illegal user; in the authentication information entered according to the user When the user is determined to be legal, the current user is confirmed as an illegal user according to the user characteristic information, and the identity authentication information is used to confirm whether the target authentication operation is allowed; and the current user is confirmed to be illegal according to the user feature information. The specified security action is performed when the user is on.

According to a second aspect of the embodiments of the present disclosure, there is provided a monitoring apparatus applied to an electronic device, and the apparatus includes: an acquisition module configured to acquire user characteristic information without a user's perception, the user characteristic information The confirmation module is configured to: when determining that the user is legal according to the identity authentication information input by the user, confirming whether the current user is an illegal user according to the user feature information, and the identity authentication information For confirming whether the target authentication operation is allowed; the execution module is configured to perform the specified security operation when confirming that the current user is an illegal user according to the user characteristic information.

According to a third aspect of an embodiment of the present disclosure, a computer program product is provided, the computer program product comprising a computer program executable by a programmable device, the computer program having when executed by the programmable device The code portion of the above monitoring method is executed.

According to a fourth aspect of the embodiments of the present disclosure, there is provided a non-transitory computer readable storage medium comprising one or more programs for performing The above monitoring method.

According to a fifth aspect of the embodiments of the present disclosure, there is provided an electronic device comprising: the non-transitory computer readable storage medium described above; and one or more processors for executing the non-transitory computer Read the program in the storage medium.

The technical solution provided by the embodiment of the present disclosure may include the following beneficial effects: by the above technical solution, even if an illegal user breaks or falsifies the identity authentication information of the legitimate user and successfully enters the electronic device, the electronic device may obtain the current user by acquiring the current user. User feature information to perform secondary verification of the identity of the user. When the secondary verification result indicates that the user is an illegal user, the specified security operation is performed, thereby improving the security of use of the electronic device, effectively reducing leakage of user information and damage to user property caused by illegal operation of the electronic device. And so on. In addition, electricity The child device acquires the user feature information without the user's perception, so that the current user is not aware of the situation, thereby reducing the possibility that the user feature information is intentionally imitated or forged by the illegal user, thereby further improving the identity of the current user. The accuracy of the certification.

Other features and advantages of the present disclosure will be described in detail in the detailed description which follows.

DRAWINGS

The drawings are intended to provide a further understanding of the disclosure, and are in the In the drawing:

FIG. 1A is a schematic diagram of an implementation environment, according to an exemplary embodiment.

FIG. 1B is a schematic diagram of an implementation environment, according to another exemplary embodiment.

2A is a flow chart of a monitoring method, according to an exemplary embodiment.

FIG. 2B is a flowchart of a monitoring method according to another exemplary embodiment.

FIG. 3 is a schematic diagram of applying the above monitoring method to a screen unlocking scene according to an exemplary embodiment.

FIG. 4 is a schematic diagram of a method for applying the above monitoring method to an access unlocking scene according to an exemplary embodiment.

FIG. 5 is a schematic diagram of applying the foregoing monitoring method to a payment application scenario according to an exemplary embodiment.

FIG. 6 is a block diagram of a monitoring apparatus, according to an exemplary embodiment.

FIG. 7 is a block diagram of a monitoring apparatus, according to an exemplary embodiment.

detailed description

The specific embodiments of the present disclosure will be described in detail below with reference to the accompanying drawings. Should be understood The specific embodiments described herein are for illustrative purposes only and are not intended to limit the disclosure.

FIG. 1A is a schematic diagram of an implementation environment, according to an exemplary embodiment. As shown in FIG. 1A, the implementation environment can include an electronic device 100. In the present disclosure, the electronic device 100 may be, for example, an intelligent robot, a smart phone, a tablet, a personal digital assistant (PDA), a PC, a notebook computer, an access control unlocking device, or the like. In FIG. 1A, the electronic device 100 is a smart phone as an example.

FIG. 1B is a schematic diagram of an implementation environment, according to another exemplary embodiment. As shown in FIG. 1B, the implementation environment may include an electronic device 100 and a cloud server 200. The electronic device 100 and the cloud server 200 can communicate through various wired or wireless modes. For example, the electronic device 100 communicates with the cloud server 200 via WiFi, Bluetooth, 2G, 3G, 4G, and the like. The electronic device 100 can upload data to the cloud server 200 so that the cloud server 200 performs operations such as data storage, data processing, and the like.

2A is a flowchart of a monitoring method, which may be applied to an electronic device, such as the electronic device 100 illustrated in FIG. 1A or FIG. 1B, according to an exemplary embodiment. As shown in FIG. 2A, the method can include:

In step 201, user feature information is acquired without the user's perception, and the user feature information is used to confirm whether the current user is an illegal user.

In the present disclosure, the electronic device acquires user feature information in a silent manner, and the user feature information may be used to confirm whether the current user is an illegal user. In an embodiment, the user feature information may include biometric information of the current user, wherein the biometric information may include, for example but not limited to, at least one of the following: facial feature information, iris feature information, and voiceprint feature. Information, fingerprint feature information, etc. For example, for the face feature information and the iris feature information, the electronic device may acquire the image information of the current user in a silent manner by configuring the camera thereon, and analyze the image to obtain the face feature information and the iris feature information. . For voiceprint feature information, The electronic device can acquire the sound information of the current user in a silent manner through a microphone disposed thereon, and analyze the sound information to obtain voiceprint feature information. For the fingerprint feature information, the electronic device can collect the fingerprint information of the current user in a silent manner through the fingerprint sensor configured thereon, and analyze the fingerprint information to obtain fingerprint feature information.

Alternatively or additionally, in another embodiment, the user feature information may further include current user operation feature information, wherein the user operation feature information may include, for example but not limited to, at least one of the following: the user is implementing The location at the time of operation, the time when the user performed the operation, the network information of the network to which the electronic device is connected when the user performs the operation, and the like.

Through step 201, the user feature information of the current user can be obtained without the user's perception, and the user does not need to interact with the user. In this way, the illegal user does not know this in advance, and it is not easy to forge the user characteristic information of the legitimate user.

In step 202, when it is determined that the user is legal according to the identity authentication information input by the user, it is confirmed according to the user feature information whether the current user is an illegal user, wherein the identity authentication information is used to confirm whether the target authentication operation is allowed.

In the present disclosure, the target authentication operation refers to any of the operations in the electronic device that require the user to perform identity authentication and can be performed after the authentication is passed. For example, the target authentication operation may include, for example but not limited to, at least one of a screen unlocking operation, an access unlocking operation, an application login or payment operation, and the like. For example, the application may include a social application, an address book application, a financial application, an application with a payment function, and the like.

The identity authentication information can be used to confirm whether the target authentication operation is allowed. In the present disclosure, the identity authentication information may include, but is not limited to, at least one of the following: digital cryptographic information, graphical cryptographic information, biometric cryptographic information, and the like. The biometric cryptographic information may include, for example but not limited to, at least one of the following: face feature information, iris feature information, fingerprint feature information, voiceprint feature information, and the like.

When the user wants to perform the target authentication operation, the electronic device prompts the user to input the identity authentication information. After the electronic device receives the identity authentication information input by the user, the electronic device may match the received identity authentication information with the identity authentication information that is preset in the electronic device and belongs to the legal user. When the identity authentication information received by the electronic device matches the preset identity authentication information belonging to the legitimate user, it is determined that the current user is legal. When the identity authentication information received by the electronic device does not match the preset identity authentication information that belongs to the legal user, it is determined that the current user is illegal. At this time, the electronic device may prohibit the current user from performing the target authentication operation.

Alternatively, in another embodiment, after the electronic device receives the identity authentication information input by the user, the electronic device may send the received identity authentication information to the cloud server, to determine whether the user is legal by the cloud server. The manner in which the cloud server determines whether the user is legal according to the received identity authentication information is similar to the manner described above on the electronic device side, and details are not described herein again. After completing the identity authentication, the cloud server may return an authentication result to the electronic device, where the authentication result may indicate whether the user is legal. In this way, by analyzing the authentication result, the electronic device can know whether the current user is legal.

When determining that the user is legal according to the identity authentication information input by the user, the electronic device may confirm whether the current user is an illegal user according to the user feature information acquired in step 201 to implement secondary authentication of the user identity.

For example, in an implementation manner, the electronic device may match the acquired user feature information with a pre-stored user feature (the pre-stored user feature is a user feature of a legitimate user), and confirm whether the current user is based on the matching result. It is an illegal user. For example, when the acquired user feature information does not match the user feature pre-stored in the electronic device, the electronic device may confirm that the current user is an illegal user; when the acquired user feature information matches the user feature pre-stored in the electronic device, the electronic The device can confirm that the current user is a legitimate user.

Alternatively, in another implementation manner, the electronic device may send the acquired user feature information to the cloud server, to confirm, by the cloud server, whether the current user is an illegal user according to the user feature information. The cloud server determines whether the user is illegal according to the received user characteristic information. The manner is similar to the manner described above on the electronic device side, and details are not described herein again. The cloud server may send an indication message to the electronic device to characterize whether the current user is an illegal user. In this way, the electronic device can confirm whether the current user is an illegal user according to the indication message.

As described above, the user feature information acquired in step 201 may include biometric information of the current user. In this case, the electronic device or the cloud server confirms whether the current user is an illegal user by matching the acquired biometric information with a pre-stored biometric that belongs to the legal user. Alternatively or additionally, the user feature information acquired in step 201 may include current user operation feature information. In this case, the electronic device or the cloud server can confirm whether the current user is an illegal user by matching the current user operation feature information with the previously stored historical user operation feature information. The embodiment is based on the current user operation feature information and the historical user operation feature information to determine whether the current user's use of the electronic device conforms to the usage habit of the legitimate user of the electronic device, and thereby confirms whether the current user is an illegal user. . For example, when any one or more of the following conditions are met, it is confirmed that the current user is an illegal user: the current user's location does not belong to the historical user's location; the current user operation time does not belong to the historical user operation time; The network that the device is currently accessing does not belong to the network that the electronic device has historically accessed.

In step 203, when it is confirmed that the current user is an illegal user according to the user characteristic information, the specified security operation is performed.

In an embodiment, when it is confirmed according to the user characteristic information that the current user is an illegal user, the electronic device may perform an alarm operation, for example, an alarm sound to alert the current user or other persons around the current user.

Alternatively or additionally, in another implementation manner, when the current user is confirmed as an illegal user according to the user feature information, the electronic device may send the alarm information to the designated user to notify the designated user that the electronic device is currently being illegally operated. . The electronic device can send the alarm information by sending an email, a short message, a social application message, and the like to the designated user. In the present disclosure, The designated user may include a legitimate user of the electronic device, and may also include any user specified by the legitimate user, for example, a relative of the legitimate user, a friend, and the like.

Alternatively or additionally, in another embodiment, when the current user is confirmed as an illegal user according to the user feature information, the electronic device may perform the permission control operation according to the preset permission rule. For example, if the user successfully logs in to an application by using the identity authentication information, when the electronic device confirms that the user is an illegal user through the secondary authentication process, the user may be controlled to use the current login application. Or all features. For example, the authority of the user is controlled such that the user data under the application cannot be browsed, the message cannot be sent out through the application, the payment, transfer, remittance, and the like involve financial transactions, and the like.

Alternatively, or in addition, in another embodiment, when the current user is confirmed as an illegal user according to the user feature information, the electronic device may send the identity authentication information and/or the user feature information to the cloud server, so that the cloud server is illegal. The identity authentication information used by the user and/or the user feature information of the illegal user are archived, which facilitates real identity confirmation, location tracking, and the like for the illegal user.

In summary, according to the above technical solution, even if an illegal user successfully hacks or falsifies the identity authentication information of the legitimate user and successfully enters the electronic device, the electronic device can obtain the identity of the user by acquiring the user characteristic information of the current user. Secondary verification. When the secondary verification result indicates that the user is an illegal user, the specified security operation is performed, thereby improving the security of use of the electronic device, effectively reducing leakage of user information and damage to user property caused by illegal operation of the electronic device. And so on. In addition, the electronic device acquires user feature information without the user's perception, so that the current user is not aware of the situation, thereby reducing the possibility that the user feature information is intentionally imitated or forged by the illegal user, thereby further improving the current user. The accuracy of the identity authentication.

2B is a flowchart of a monitoring method, which may be applied to an electronic device, such as the electronic device 100 illustrated in FIG. 1A or FIG. 1B, according to another exemplary embodiment. As shown in FIG. 2B, the foregoing monitoring method may further include:

In step 204, when it is determined that the user is legitimate according to the identity authentication information input by the user, the user is allowed to perform the target authentication operation.

In this way, when the illegal user breaks or falsifies the identity authentication information and successfully enters the electronic device, the user is allowed to perform the target authentication operation, thereby reducing the alertness of the illegal user, making it difficult to detect, so that it is not perceived. In the case of successful acquisition of its user feature information, the monitoring is more concealed.

Sometimes, in actual use, there is a scenario in which when a legitimate user of an electronic device inputs its own identity authentication information, the electronic device is handed over to another person (for example, a relative, a friend, etc.). At this time, the user feature information of the current user does not meet the user feature information of the legitimate user of the electronic device, and the current user is determined to be an illegal user, and the electronic device performs a specified security operation, such as issuing an alarm sound, sending an alarm message, and the like. Obviously, this does not meet the expectations of legitimate users of electronic devices. Therefore, in the present disclosure, in order to avoid this problem, when performing step 201, the electronic device may acquire user feature information when the user inputs the identity authentication information without the user's perception. In this way, it can be ensured that the identity authentication information and the user feature information acquired by the electronic device are for the same user. When the user is a legitimate user of the electronic device, the electronic device acquires the user feature information in a silent manner while inputting the identity authentication information, and the electronic device can perform two-factor authentication on the identity authentication information and the user feature information to determine that the current user is a legitimate user. . Even if the electronic device is later used by others, these other persons are not judged to be illegal users, and thus the specified security operation is not performed, thereby improving the practicability of the above scheme.

FIG. 3 is a schematic diagram of applying the above monitoring method to a screen unlocking scene according to an exemplary embodiment. In the screen unlocking scenario shown in FIG. 3, the user successfully unlocks by entering a numeric password and enters the interface of the electronic device. At this time, the camera 102 of the electronic device 100 can acquire the user face feature information in a silent manner. When the electronic device 100 confirms that the user is an illegal user through analysis, the user operation authority is controlled at this time. For example, when a user clicks on an app, the electronic device does not respond and the user cannot use any application.

FIG. 4 is a schematic diagram of a method for applying the above monitoring method to an access unlocking scene according to an exemplary embodiment. In the access unlocking scenario shown in FIG. 4, the user successfully opens the access lock through the forged fingerprint sleeve 401. At this time, the access unlocking device 400 acquires the iris characteristic information of the user in a silent manner through the camera 402. When the access control unlocking device 400 confirms that the user is an illegal user by analysis, the access control unlocking device 400 controls the alarm 403 to perform an alarm, and can send an alarm information to the administrator to notify the administrator.

FIG. 5 is a schematic diagram of applying the foregoing monitoring method to a payment application scenario according to an exemplary embodiment. In the payment application scenario shown in FIG. 5, the user successfully logs in to the payment application by inputting the username and the login password. At this time, the fingerprint sensor built in the electronic device acquires the fingerprint feature information of the user in a silent manner. When the electronic device confirms that the user is an illegal user through analysis, the functions of the financial transaction, such as transfer, remittance, and payment, of the application are disabled.

FIG. 6 is a block diagram of a monitoring device 600, which may be applied to an electronic device, such as the electronic device 100 illustrated in FIG. 1A or FIG. 1B, according to an exemplary embodiment. As shown in FIG. 6, the apparatus 600 may include: an obtaining module 601 configured to acquire user feature information when the user is not aware, the user feature information is used to confirm whether the current user is an illegal user; and the confirmation module 602, When it is determined that the user is legal according to the identity authentication information input by the user, whether the current user is an illegal user is confirmed according to the user feature information acquired by the obtaining module 601, and the identity authentication information is used to confirm the target. Whether the authentication operation is permitted; the execution module 603 is configured to perform the specified security operation when it is confirmed that the current user is an illegal user according to the user characteristic information.

Optionally, the apparatus 600 may further include: a target authentication operation permitting module configured to allow the user to perform a target authentication operation when determining that the user is legal according to the identity authentication information input by the user.

Optionally, the confirmation module 602 may include: a first confirmation submodule configured to match the user feature information with a pre-stored user feature, and confirm the current use according to the matching result. Whether the user is an illegal user; or the confirmation module 402 may include: a first sending submodule configured to send the user feature information to a cloud server, to confirm, by the cloud server, the current user profile information Whether the user is an illegal user; the second confirmation sub-module is configured to receive an indication message sent by the cloud server for characterizing whether the current user is an illegal user, and confirm, according to the indication message, whether the current user is an illegal user.

Optionally, the first confirmation submodule is configured to match the current user operation feature information with the stored history user operation feature information, wherein the user operation feature information may include at least one of the following The location of the user, the operation time of the user, and the network information of the network accessed by the electronic device.

Optionally, the execution module 603 may include at least one of: an alarm sub-module configured to perform an alarm operation; an alarm information transmission sub-module configured to send alarm information to a designated user; and an authority control sub-module, The second transmission sub-module is configured to send the identity authentication information and/or the user feature information to the cloud server.

Optionally, the obtaining module 601 may be configured to acquire user feature information when the user inputs the identity authentication information without the user being aware.

With regard to the apparatus in the above embodiments, the specific manner in which the respective modules perform the operations has been described in detail in the embodiment relating to the method, and will not be explained in detail herein.

FIG. 7 is a block diagram of a monitoring device 700, which may be an electronic device, according to an exemplary embodiment. As shown in FIG. 7, the apparatus 700 can include a processor 701, a memory 702, a multimedia component 703, an input/output (I/O) interface 704, and a communication component 705.

The processor 701 is configured to control the overall operation of the apparatus 700 to complete all or part of the above monitoring methods. Memory 702 is used to store various types of data to support operations at the device 700, such as may include instructions for any application or method operating on the device 700, as well as application related data, such as Contact data, receipt Send messages, pictures, audio, videos, and more. The memory 702 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as a static random access memory (SRAM), an electrically erasable programmable read only memory ( Electrically Erasable Programmable Read-Only Memory (EEPROM), Erasable Programmable Read-Only Memory (EPROM), Programmable Read-Only Memory (PROM), Read Only Read-Only Memory (ROM), magnetic memory, flash memory, disk or optical disk. The multimedia component 703 can include a screen and an audio component. The screen may be, for example, a touch screen, and the audio component is used to output and/or input an audio signal. For example, the audio component can include a microphone for receiving an external audio signal. The received audio signal may be further stored in memory 702 or transmitted via communication component 705. The audio component also includes at least one speaker for outputting an audio signal. The I/O interface 704 provides an interface between the processor 701 and other interface modules. The other interface modules may be keyboards, mice, buttons, and the like. These buttons can be virtual buttons or physical buttons. Communication component 705 is used for wired or wireless communication between the device 500 and other devices. Wireless communication, such as Wi-Fi, Bluetooth, Near Field Communication (NFC), 2G, 3G or 4G, or a combination of one or more of them, so the corresponding communication component 705 can include: Wi-Fi module, Bluetooth module, NFC module.

In an exemplary embodiment, the device 700 may be configured by one or more Application Specific Integrated Circuits (ASICs), Digital Signal Processors (DSPs), and digital signal processing devices (Digital Signal Processors). Processing Device (DSPD), Programmable Logic Device (PLD), Field Programmable Gate Array (FPGA), controller, microcontroller, microprocessor or other electronic components Used to perform the above monitoring method.

In another exemplary embodiment, there is also provided a computer program product comprising a computer program executable by a programmable device, the computer program having when executed by the programmable device The code portion used to perform the monitoring method described above.

In another exemplary embodiment, there is also provided a non-transitory computer readable storage medium comprising instructions, such as a memory 702 comprising instructions executable by processor 701 of apparatus 700 to perform the monitoring method described above. By way of example, the non-transitory computer readable storage medium can be a ROM, a Random Access Memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, and an optical data storage device.

The preferred embodiments of the present disclosure have been described in detail above with reference to the accompanying drawings. However, the present disclosure is not limited to the specific details of the above embodiments, and various simple modifications can be made to the technical solutions of the present disclosure within the scope of the technical idea of the present disclosure. These simple variations are all within the scope of the disclosure.

It should be further noted that the specific technical features described in the above specific embodiments may be combined in any suitable manner without contradiction. In order to avoid unnecessary repetition, the present disclosure will not be further described in various possible combinations.

In addition, any combination of various embodiments of the present disclosure may be made as long as it does not deviate from the idea of the present disclosure, and should also be regarded as the disclosure of the present disclosure.

Claims (25)

A monitoring method, characterized in that it is applied to an electronic device, including: Obtaining user feature information when the user is not aware, and the user feature information is used to confirm whether the current user is an illegal user; When it is determined that the user is legal according to the identity authentication information input by the user, whether the current user is an illegal user is confirmed according to the user feature information, and the identity authentication information is used to confirm whether the target authentication operation is allowed; When it is confirmed according to the user characteristic information that the current user is an illegal user, the specified security operation is performed. The method of claim 1 further comprising: When the user is judged to be legitimate according to the identity authentication information input by the user, the user is allowed to perform the target authentication operation. The method of claim 1, wherein the target authentication operation comprises at least one of a screen unlocking operation, an access unlocking operation, an application login, or a payment operation. The method of claim 1, wherein the identity authentication information comprises at least one of: digital cryptographic information, graphical cryptographic information, biometric cryptographic information. The method according to claim 1, wherein the confirming whether the current user is an illegal user according to the user feature information comprises: Matching the user feature information with a pre-stored user feature, and confirming whether the current user is an illegal user according to the matching result; or The confirming, according to the user feature information, whether the current user is an illegal user, includes: Sending the user feature information to the cloud server, to confirm, by the cloud server, whether the current user is an illegal user according to the user feature information; Receiving an indication message sent by the cloud server to identify whether the current user is an illegal user, and confirming, according to the indication message, whether the current user is an illegal user. The method according to claim 5, wherein the user characteristic information comprises biometric information of the current user. The method of claim 6, wherein the biometric information comprises facial feature information and/or iris feature information. The method according to any one of claims 5-7, wherein the user feature information includes current user operation feature information; and the matching the user feature information with a pre-stored user feature include: The current user operation feature information is matched with the stored history user operation feature information. The method according to claim 8, wherein the user operation feature information comprises at least one of: a location of the user, a user operation time, and network information of a network accessed by the electronic device. The method of claim 1 wherein said performing the specified security operation comprises at least one of: Perform an alarm operation; Send alarm information to the specified user; Perform permission control operations according to preset permission rules; Sending the identity authentication information and/or the user feature information to a cloud server. The method according to claim 1, wherein the obtaining user characteristic information without the user's perception comprises: When the user inputs the identity authentication information, the user feature information is acquired without the user's perception. A monitoring device, characterized in that it is applied to an electronic device, including: An acquiring module, configured to acquire user feature information when the user is not aware, where the user feature information is used to confirm whether the current user is an illegal user; The confirmation module is configured to confirm, according to the user characteristic information, whether the current user is an illegal user, and the identity authentication information is used to confirm whether the target authentication operation is permitted, when determining that the user is legal according to the identity authentication information input by the user; The execution module is configured to perform the specified security operation when the current user is confirmed to be an illegal user according to the user characteristic information. The device of claim 12, wherein the device further comprises: The target authentication operation permitting module is configured to allow the user to perform the target authentication operation when determining that the user is legitimate according to the identity authentication information input by the user. The apparatus of claim 12, wherein the target authentication operation comprises at least one of a screen unlocking operation, an access unlocking operation, an application login or a payment operation. The apparatus of claim 12, wherein the identity authentication information comprises at least one of: digital cryptographic information, graphical cryptographic information, biometric cryptographic information. The device according to claim 12, wherein the confirmation module comprises: a first confirmation sub-module configured to match the user feature information with a pre-stored user feature, and confirm whether the current user is an illegal user according to the matching result; or The confirmation module includes: The first sending submodule is configured to send the user feature information to the cloud server, to confirm, by the cloud server, whether the current user is an illegal user according to the user feature information; The second confirmation sub-module is configured to receive an indication message sent by the cloud server to identify whether the current user is an illegal user, and confirm, according to the indication message, whether the current user is an illegal user. The apparatus according to claim 16, wherein said user characteristic information comprises biometric information of a current user. The apparatus according to claim 17, wherein said biometric information comprises face feature information and/or iris feature information. The apparatus according to any one of claims 16 to 18, wherein the user characteristic information includes current user operation feature information; and the first confirmation submodule is configured to be the current user The operation feature information is matched with the stored user operation feature information of the history. The apparatus according to claim 19, wherein the user operation feature information comprises at least one of a location of the user, a user operation time, and network information of a network accessed by the electronic device. The apparatus of claim 12 wherein said execution module comprises At least one of the following: An alarm sub-module configured to perform an alarm operation; The alarm information sending submodule is configured to send the alarm information to the designated user; The permission control submodule is configured to perform the permission control operation according to the preset permission rule; The second sending submodule is configured to send the identity authentication information and/or the user feature information to the cloud server. The apparatus according to claim 12, wherein the acquisition module is configured to acquire user feature information when the user inputs the identity authentication information without the user's perception. A computer program product, comprising: a computer program executable by a programmable device, the computer program having instructions for performing the claims 1 to 11 when executed by the programmable device The code portion of the method of any of the preceding claims. A non-transitory computer readable storage medium, characterized in that the non-transitory computer readable storage medium comprises one or more programs for performing any of claims 1 to One of the methods described. An electronic device, comprising: The non-transitory computer readable storage medium of claim 24; One or more processors for executing a program in the non-transitory computer readable storage medium.

Images