WO2018018787A1 - Password authentication method and device, mobile terminal, and computer storage medium - Google Patents

Abstract

A password authentication method and device, mobile terminal, and computer storage medium. The method comprises: acquiring identity authentication information (S100); performing, according to pre-stored valid authentication information, matching and authentication on the identity authentication information (S101); and if the identity authentication information matches the valid authentication information, then authenticating the identity authentication information (S102).

Description

Password verification method and device, mobile terminal, computer storage medium Technical field

The present invention relates to the field of security verification technologies, and in particular, to a password verification method and apparatus, a mobile terminal, and a computer storage medium.

Background technique

At present, the fingerprint identification technology of the terminal is generally a single fingerprint information that is pre-recorded, and then the obtained fingerprint is compared with the single fingerprint information. If the comparison is consistent, the fingerprint is verified, otherwise the fingerprint verification fails. In addition, there is also a solution for performing fingerprint verification by using multiple fingerprint information, generally by judging whether the input multiple fingerprint information matches the preset multiple fingerprint information, and the sequence of input multiple fingerprint information and preset multiple fingerprints. Whether the preset sequence of information matches, if the matching is successful, the fingerprint verification is successful, otherwise the fingerprint verification fails. However, when fingerprint verification is performed by a single fingerprint information, the recognition rate is not high. When the fingerprint is damaged or the fingerprint template is lost, the fingerprint verification cannot be completed, and the single fingerprint information is easily copied, which may cause leakage of user data or bring benefits. Loss.

Summary of the invention

The password verification method and device, the mobile terminal and the computer storage medium provided by the embodiments of the present invention solve the related art, and the security performance of the single password security verification method is low, and is easily sneaked or cracked, resulting in the user's password and data. The technical problem of being leaked.

To solve the above technical problem, an embodiment of the present invention provides a password verification method, including:

Obtaining authentication information, where the authentication information includes a verification parameter input by the user and an operation parameter of the terminal when the user inputs the verification parameter;

Performing matching verification on the authentication information according to pre-stored legal verification information;

When the authentication information matches the legal verification information, the identity verification passes.

The embodiment of the invention further provides a password verification apparatus, comprising: a receiving module and a verification module;

The obtaining module is configured to obtain an identity verification message, where the identity verification information includes a verification parameter input by the user and an operation parameter of the terminal when the user inputs the verification parameter;

The verification module is configured to perform matching verification on the identity verification information according to the pre-stored legal verification information; when the identity verification information matches the legal verification information, the identity verification is passed.

The embodiment of the invention further provides a mobile terminal, comprising: an acquisition unit, an acceleration sensor unit, a processor and a storage unit;

The collecting unit is configured to obtain a verification parameter input by the user in the authentication information, and send the verification parameter to the processor;

The acceleration sensor unit is configured to obtain an operation parameter of the terminal when the user inputs the verification parameter in the identity verification information, and sends the operation parameter to the processor;

The processor is configured to perform matching verification on the authentication information acquired by the collecting unit and the acceleration sensor unit according to the pre-stored legal verification information, and when the identity verification information matches the legal verification information, the identity verification by;

The storage unit is configured to store the verification parameter input by the user, the operation parameter of the terminal, and legal verification information.

The embodiment of the invention further provides a computer storage medium, wherein the computer storage medium stores computer executable instructions, and the computer executable instructions are used to execute the foregoing password verification method.

The beneficial effects of the embodiments of the present invention are:

According to the password verification method and apparatus, the mobile terminal, and the computer storage medium provided by the embodiment of the present invention, the identity verification information is obtained, and the identity verification information is matched and verified according to the pre-stored legal verification information. When the identity verification information matches the legal verification information, , the identity test The certificate information is verified and unlocked or paid for.

The implementation of the method provided by the embodiment of the present invention needs to obtain the verification parameter input by the user for verification, and also needs to obtain the operation parameter of the user when inputting the verification parameter, and simultaneously verify the verification parameter and the operation parameter. When both of them match the pre-stored legal authentication information, the authentication information is verified, and the authentication information is verified by the combination information to improve the security of the password and the security of the password verification, thereby further ensuring the user terminal information. The security enhances the user experience and facilitates the user's use.

DRAWINGS

1 is a flowchart of a password verification method according to a first embodiment of the present invention;

2 is a flowchart of a password registration method according to a first embodiment of the present invention;

3 is a flowchart of a fingerprint verification method according to a first embodiment of the present invention;

4 is a flowchart of a fingerprint registration method according to a first embodiment of the present invention;

FIG. 5 is a flowchart of an iris verification method according to a first embodiment of the present invention; FIG.

FIG. 6 is a flowchart of a method for registering an iris according to a first embodiment of the present invention; FIG.

FIG. 7 is a flowchart of a character password registration method according to a first embodiment of the present invention; FIG.

FIG. 8 is a flowchart of a character password verification method according to a first embodiment of the present invention; FIG.

FIG. 9 is a structural block diagram of a password verification apparatus according to a second embodiment of the present invention; FIG.

FIG. 10 is a structural block diagram of a mobile terminal according to a third embodiment of the present invention;

11 is a first structural block diagram of a mobile terminal according to a third embodiment of the present invention;

FIG. 12 is a second structural block diagram of a mobile terminal according to a third embodiment of the present invention;

FIG. 13 is a third structural block diagram of a mobile terminal according to a third embodiment of the present invention.

detailed description

The embodiments of the present invention are further described in detail below with reference to the accompanying drawings.

First embodiment:

Referring to FIG. 1, FIG. 1 is a flowchart of a password verification method provided by an embodiment of the present invention. The password verification method provided in this embodiment mainly matches the obtained verification parameter and the operation parameter with the pre-stored legal verification parameter by acquiring the verification parameter input by the user and inputting the verification parameter, the current operation parameter of the terminal. Verification, only when the verification parameters and the running parameters match the legal verification parameters, the authentication information input by the user can be verified successfully. The verification processing steps are as follows:

S100. Acquire authentication information. For example, the authentication information obtained in the step includes a verification parameter input by the user and an operation parameter of the terminal when the user inputs the verification parameter.

In this embodiment, the terminal and the running parameter specifically include at least one of a placement parameter of the terminal and an application parameter of the terminal. Preferably, the placement parameter of the terminal may be when the user inputs the verification parameter, and the terminal The posture information of the position, the so-called posture information refers to whether the mobile phone is currently in a vertical screen or a horizontal screen, or the angle between the mobile phone and the horizontal plane; the application parameter of the terminal may be a system application software on the terminal, For example, the camera, at this time the application parameter refers to whether the camera is already on or in operation.

In this embodiment, the verification parameter is specifically a digital password or a character password input by the user, and may also be fingerprint information of the user, iris information, and the like.

S101: Perform matching verification on the identity verification information according to the pre-stored legal verification information. For example, the verification in the step refers to comparing the identity verification information with the legal verification information and performing comparison processing.

In this embodiment, in the verification process, the verification parameter in the identity verification information is compared with the original verification parameter in the legal verification information, and the terminal operation parameter in the identity verification information and the original terminal in the legal verification information are used. Run parameters for comparison.

In this embodiment, in the verification process, the verification parameter may be first compared with the original verification parameter. When the verification parameter is the same as the original verification parameter, the execution of the terminal compares the operation parameter of the terminal with the original operation parameter, and determines Whether the comparison result is the same, if the same, Then, step S102 is performed; otherwise, the authentication information does not pass.

S102. When the identity verification information matches the legal verification information, the identity verification is passed.

The matching means that the verification parameter in the authentication information is the same as the original verification parameter, and the running parameter of the terminal is the same as the original running parameter, and then the identity verification information is passed.

In this embodiment, before performing the verification of the identity verification information, the method further includes: performing security password verification registration on the terminal, and the step of registering is specifically as shown in FIG. 2 .

S201: The user inputs the original verification parameter on the terminal to register in advance;

S202: Collect original operation parameters of the terminal, where the original operation parameter is an operation parameter of the terminal when the user inputs the original verification parameter to register;

S203. Generate legal verification information according to the original verification parameter and the original operation parameter, and store the information.

After the user completes the registration on the terminal, if the user needs to unlock the terminal in the off state, the user obtains the identity verification information input by the user, and matches the authentication information with the already registered legal verification information.

In this embodiment, the method further includes performing corresponding processing according to the obtained identity verification information. Preferably, when the obtained identity verification information is unlocking verification information, after the information verification is passed, the terminal is performed. Unlocking processing; when the obtained authentication information is payment verification information, after the verification is passed, payment processing is performed on the payment application in the terminal.

In this embodiment, when the acquired identity verification information includes the fingerprint information and the mobile phone posture information when the fingerprint information is detected, whether the fingerprint information and the mobile phone posture information when the fingerprint information is detected meet the predetermined condition. The preset condition is the pre-stored original fingerprint information and the original posture information of the corresponding mobile phone; when the detection result is yes, the fingerprint verification is allowed, otherwise, the fingerprint verification is prohibited.

When the acquired authentication letter includes the iris information and the mobile phone posture information when the iris information is detected, whether the iris information and the mobile phone posture information when detecting the iris information are determined The predetermined condition is the pre-stored original iris information and the original posture information of the corresponding mobile phone; when the detection result is YES, the iris verification is allowed, otherwise, the iris verification is prohibited.

When the obtained authentication information includes the password information and the mobile phone posture information when the password information is detected, whether the password information and the mobile phone posture information when detecting the password information meet the predetermined condition, the preset condition is The pre-stored original password information and the original gesture information of the corresponding mobile phone; when the detection result is yes, the password verification is allowed; otherwise, the password verification is prohibited.

In this embodiment, when the identity verification information acquired in step S100 is fingerprint information and posture information of the terminal, the verification processing step is as shown in FIG. 3.

S301, waiting for the fingerprint information to be entered.

In this step, the interface of the terminal is first adjusted to the verification interface, and under the verification interface, the user is required to input a fingerprint, and the verification interface detects the fingerprint information of the user, and records the entry into the verification system.

S302. Acquire an image that the user presses the fingerprint, and generate fingerprint feature data information.

In this step, the fingerprint image is collected by the fingerprint sensor, and the collected fingerprint image information is converted into fingerprint feature data.

S303, when the input fingerprint information is collected, the current posture information of the terminal, and the terminal posture related data is generated, for example, the posture information may be that the mobile phone terminal is in a horizontal screen or a vertical screen, or the screen is upwardly parallel to the horizontal plane, corresponding to The posture related data refers to a spatial three-dimensional coordinate value (x, y, z) corresponding to the posture information.

In this step, for the posture information of the collection terminal, specifically, the posture of the terminal is determined by the three-axis value of the acceleration sensor. For example, the mobile phone gesture may be that the mobile phone screen is facing up and parallel to the ground, wherein the value of the acceleration sensor is (x=0, y=0, z=9.8m/s^2), and the mobile phone posture may be a mobile phone vertical screen. And the vertical screen with the ground, where the value of the acceleration sensor is (x=0, y=9.8m/s^2, z=0), the mobile phone posture can be the horizontal screen of the mobile phone and the vertical screen with the ground, wherein the value of the acceleration sensor is (x=9.8m/s^2, y=0, z=0 ) and so on.

In addition, the first aspect of the mobile phone gesture can be determined by the actual value (x, y, z) of the three axes of gravity acceleration, that is, the original password set of the mobile phone gesture is generated by the actual value of the three axes of gravity acceleration.

S304. Generate a cipher set according to the fingerprint information and the posture information, where the cipher set includes the converted fingerprint feature data information and the original password of the terminal posture related data.

S305: Perform a matching comparison between the cipher set and the cipher set generated at the time of registration. If the matching is successful, the verification succeeds, and vice versa, the verification fails.

In this embodiment, it is not necessary to verify that the authentication information is matched, and the verification is successful. Since the collection of the sensor is not 100% accurate, the information can be considered complete within a certain range as long as the information is collected. The same, for example, when the identity verification information includes character password information and mobile phone posture information, the character password information can easily obtain exactly the same information, but the gesture letter of the mobile phone cannot be obtained 100% correctly, and it must be There is a certain error. At this time, we can judge by setting the value range. Preferably, when the phone posture is expressed by the angle, the actual value (x, y, z) of the three axes of gravity acceleration is calculated and the space X is calculated. The angle of the /Y/Z axis (θ _x , θ _y , θ _z ), that is, the original cipher set of the mobile phone pose is generated by the actual value of the three axes of gravity acceleration, where θ _x , θ _y , θ _{z have} a value range of [ -90°, 90°]. The angle calculation method of the space X/Y/Z is as follows:

Among them, x, y, and z are the acceleration values on the three axes of gravity acceleration, and G is the acceleration value of gravity, which is a constant. g = 9.8 m / s ^ 2.

In particular, the gesture of the mobile phone can be judged by other means of gravity acceleration triaxial sensor, for example, only the angle between the mobile phone and the X/Y axis plane is calculated, and the angle between the mobile phone and the X/Y axis plane is used as a hand. Machine posture.

In particular, the geomagnetic sensor can be used to assist the acceleration sensor in calculating the absolute coordinate system of the mobile phone, using the calculated absolute coordinate system as the mobile phone gesture.

In particular, the user experience is improved, and the judgment of the gesture of the mobile phone is set within a certain threshold range, that is, the posture of the mobile phone is considered to satisfy the preset condition.

In the present embodiment, when acceleration is used as the data of the posture, when the gravity acceleration triaxial (x, y, z) is used as the original password of the mobile phone posture, it is assumed that the three-axis value of the gravity acceleration of the mobile phone posture acquired when the password is registered is ( x ₀ , y ₀ , z ₀ ), the three-axis value of the gravity acceleration of the phone gesture acquired when verifying the password is (x ₁ , y ₁ , z ₁ ), if and only if |x ₁ -x ₀ |<T, and | y ₁ -y ₀ |<T, and |z ₁ -z ₀ |<T When the condition is satisfied, the mobile phone posture condition when the mobile phone gesture acquired when the password is verified satisfies the registration password can be obtained. Where T is the set acceleration threshold, for example, 1.7 m/s^2, and the corresponding angle is 10°.

In the present embodiment, when the angle is used as the data of the posture, the angle (θ _x , θ _y , θ with respect to the space X/Y/Z axis is calculated using the actual value (x, y, z) of the three axes of gravity acceleration. _z ) As the original password of the mobile phone posture, it is assumed that the three-axis value of the gravity acceleration of the mobile phone posture acquired when the password is registered is (θ _x0 , θ _y0 , θ _z0 ), and the triaxial value of the gravity acceleration of the mobile phone posture acquired when the password is verified (θ _X1 , θ _y1 , θ _z1 ), if and only if |θ _x1 -θ _x0 |<N, and |θ _y1 -θ _y0 |<N, and |θ _z1 -θ _z0 |<N satisfy the condition, The gesture of the mobile phone collected when the password is verified satisfies the mobile phone posture condition when the password is registered. Where N is the set angle threshold, for example, 10°.

As shown in FIG. 4, a flowchart of a fingerprint registration method provided in this embodiment includes specific steps:

S401, enter the setting interface and wait for the fingerprint to be entered.

S402. Collect an image of a fingerprint when the user presses, and generate fingerprint feature data information, for example. Such as acquisition by a fingerprint sensor.

S403. Collect posture information of the terminal, and generate posture related data of the terminal, for example, collecting and converting by an acceleration sensor.

S404: Generate a cipher set according to the collected fingerprint information and posture information, and perform encrypted storage, where the cipher set includes the converted fingerprint feature data information and the original password of the posture related data.

In this embodiment, when the identity verification information acquired in step S100 is the iris information and the posture information of the terminal, the verification processing step is as shown in FIG. 5.

S501, waiting for the input of iris information.

In this step, the interface of the terminal is first adjusted to the verification interface, and under the verification interface, the user is required to input the iris, the verification interface detects the iris information of the user, and records the entry into the verification system.

S502: Acquire an image of a user's iris and generate iris characteristic data information.

In this step, the image of the iris is collected by the iris sensor, and the collected iris image information is converted into iris feature data.

S503. Collect the current posture information of the terminal when the input iris information is collected, and generate terminal posture related data. For example, when the mobile phone terminal is in the horizontal screen, the corresponding posture data is (x=9.8m/s^2, y=0, z=0), the spatial three-dimensional coordinate system is used to represent the posture of the terminal.

In this step, for the posture information of the collection terminal, specifically, the posture of the terminal is determined by the three-axis value of the acceleration sensor. For example, the mobile phone gesture may be that the mobile phone screen is facing up and parallel to the ground, wherein the value of the acceleration sensor is (x=0, y=0, z=9.8m/s^2), and the mobile phone posture may be a mobile phone vertical screen. And the vertical screen with the ground, wherein the value of the acceleration sensor is (x=0, y=9.8m/s^2, z=0), the mobile phone posture can be a horizontal screen of the mobile phone and a vertical screen with the ground, wherein the value of the acceleration sensor is (x=9.8m/s^2, y=0, z=0) and other postures.

In addition, the first aspect of the mobile phone posture can be determined by the actual value (x, y, z) of the three axes of gravity acceleration, that is, the original value of the mobile phone posture is generated by the actual value of the three axes of gravity acceleration. Code set.

S504. Generate a cipher set according to the iris information and the posture information, where the cipher set includes the converted iris feature data information and the original password of the terminal posture related data.

S505: Perform a matching comparison between the password set and the password set generated at the time of registration. If the matching is successful, the verification succeeds, and vice versa, the verification fails.

As shown in FIG. 6 , it is a flowchart of the iris registration method provided in this embodiment, and the specific processing steps include:

S601, enter the setting interface and wait for the iris to be entered.

S602. Acquire an image of the user's iris and generate iris characteristic data information, for example, by an iris sensor acquisition conversion.

S603. Acquire posture information of the terminal, and generate posture related data of the terminal, for example, acquisition and conversion by an acceleration sensor.

S604. Generate a cipher set according to the collected iris information and posture information, and perform encrypted storage, where the cipher set includes the converted iris feature data information and the original password of the posture related data.

In this embodiment, when the identity verification information acquired in step S100 is iris information and posture information of the terminal, for example, the verification processing step is as shown in FIG. 7.

S701. Wait for the entry of the character password information, for example, digital password information.

In this step, the interface of the terminal is first adjusted to the verification interface, and under the verification interface, the user is required to input the iris, and the verification interface detects the digital password information of the user, and records the entry into the verification system.

S702. Collect digital password information input by the user.

S703. When the input digital password information is input, the current posture information of the terminal is generated, and the terminal posture related data is generated. For example, when the mobile phone terminal is in the horizontal screen, the corresponding posture data is (x=9.8m/s^2, y=0). , z = 0), using a spatial three-dimensional coordinate system to represent the posture of the terminal.

In this step, the posture information of the collection terminal is specifically an acceleration sensor. The triaxial value is used to calculate the posture of the terminal. For example, the mobile phone gesture may be that the mobile phone screen is facing up and parallel to the ground, wherein the value of the acceleration sensor is (x=0, y=0, z=9.8m/s^2), and the mobile phone posture may be a mobile phone vertical screen. And the vertical screen with the ground, wherein the value of the acceleration sensor is (x=0, y=9.8m/s^2, z=0), the mobile phone posture can be a horizontal screen of the mobile phone and a vertical screen with the ground, wherein the value of the acceleration sensor is (x=9.8m/s^2, y=0, z=0) and other postures.

In addition, the first aspect of the mobile phone gesture can be determined by the actual value (x, y, z) of the three axes of gravity acceleration, that is, the original password set of the mobile phone gesture is generated by the actual value of the three axes of gravity acceleration.

S704. Generate a cipher set according to the digital cipher information and the posture information, where the cipher set includes the digital cipher information and the original password of the terminal posture related data.

S705: Perform a matching comparison between the cipher set and the cipher set generated at the time of registration. If the matching is successful, the verification succeeds, and vice versa, the verification fails.

As shown in FIG. 8 , it is a flowchart of the iris registration method provided in this embodiment, and the specific processing steps include:

S801, enter the setting interface and wait for the character password information to be entered, for example, input digital password information.

S802. Collect digital password information input by a user, for example, input through a numeric keypad.

S803. Acquire posture information of the terminal, and generate posture related data of the terminal, for example, acquisition and conversion by an acceleration sensor.

S804. Generate a cipher set according to the collected digital cipher information and the posture information, and perform encrypted storage, where the cipher set includes the input digital cipher information and the original password of the posture related data.

In summary, the password verification method provided by the embodiment of the present invention performs password verification, specifically, by obtaining the verification parameter input by the user and the operation parameter when the terminal inputs the verification parameter, when the obtained verification parameter is obtained and the terminal is running at the same time. When the parameter matches the original verification parameter and the original running parameter in the legal verification parameter, the authentication can be passed, thereby improving the password verification. The security further ensures the security of the user information, facilitates the use of the user, and improves the user experience.

Second embodiment:

Please refer to FIG. 9. FIG. 9 is a schematic structural diagram of a password verification apparatus according to an embodiment of the present invention. The password verification apparatus 9 provided in this embodiment includes: a receiving module 91 and a verification module 92, wherein:

The obtaining module 91 is configured to obtain an authentication verification message, where the authentication verification information includes a verification parameter input by the user and an operation parameter of the terminal when the user inputs the verification parameter;

For example, the verification parameter may include fingerprint information, iris information, character password information, and the like. The character password information refers to a number or a letter or a punctuation symbol, etc.; the operation information of the terminal specifically includes a placement parameter of the terminal and an application parameter of the terminal. At least one, preferably, the placement parameter of the terminal may be posture information of the terminal when the user inputs the verification parameter, and the so-called posture information refers to whether the mobile phone is currently in a vertical screen or a horizontal screen, or is a mobile phone and The angle of the horizontal plane; the application parameter of the terminal may be a certain system application software on the terminal, for example, a camera, and the application parameter refers to whether the camera is already on or in a running state.

The verification module 92 is configured to perform matching verification on the identity verification information according to the pre-stored legal verification information; when the identity verification information matches the legal verification information, the identity verification is passed.

In this embodiment, when the verification module 92 performs the matching verification on the identity verification information, specifically, the verification parameter input by the user is compared with the original verification parameter in the pre-stored legal verification information;

When the verification parameter is the same as the original verification parameter, the running parameter of the terminal is compared with the original operating parameter of the terminal in the pre-stored legal verification information.

In this embodiment, when verifying the authentication information, the verification module 92 may also first verify the running parameters of the terminal, and when the running parameters of the terminal match the original running parameters of the terminal, the verification parameters and the original verification parameters are used. Matching is performed, and only if both match, the verification is passed.

For example, when the verification parameter is the fingerprint information and the running parameter is the mobile phone posture information, the verification module 92 performs the matching verification between the fingerprint information received by the obtaining module 91 and the pre-stored original fingerprint information. When the fingerprint information is verified, the verification module 92 performs the verification. The mobile phone posture information is compared with the pre-stored original posture information corresponding to the original fingerprint information. If the comparison result is the same or within a preset range threshold, the identity verification information is verified, and vice versa.

When the verification parameter is the fingerprint information and the running parameter is the application parameter, for example, the application is a camera in the mobile phone, the verification module 92 determines whether the camera is in the running state, and if so, the verification module 92 performs matching verification on the fingerprint information.

In this embodiment, the acquiring module 91 may include a fingerprint sensor, an iris sensor, and a password collecting unit;

When the acquiring module is a fingerprint sensor, the password verification device 9 receives the fingerprint information input by the user through the fingerprint sensor, and the verification module 92 detects whether the fingerprint information is identical to the pre-entered original fingerprint information.

When the acquiring module is an iris sensor, the password verification device 9 receives the iris information input by the user through the iris sensor, and the verification module is configured to detect the iris information and the state information of the terminal and the pre-recorded original iris information and the original state of the terminal. Whether the information is the same;

When the obtaining module is a password collecting unit, the password verifying device 9 receives the character information input by the user through the password collecting unit, and the verifying module is configured to detect the character information and the state information of the terminal and the pre-entered original character information and the terminal. Whether the original status information is the same, for example, the password collection unit here may be a keyboard or a touch screen on the terminal.

The password verification apparatus 9 provided in this embodiment further includes a registration module 93 configured to input the original verification parameters on the terminal for registration, and collect the original operation parameters of the terminal, where the original operation parameters are used when the user inputs the original verification parameters. The operating parameters of the terminal generate legal verification information according to the original verification parameters and the original running parameters, and are stored.

Optionally, the registration module 93 is configured according to the user input parameter and the corresponding terminal operating parameter. A set of passwords is generated, and the generated set of passwords is stored in an encrypted manner, the set of passwords includes the entered password information and the original password associated with the gesture information of the mobile phone when the password information is entered, and the set of passwords is encrypted and stored in the memory. The password information may be characters, fingerprints or iris information.

At this time, the verification module 92 compares the input verification password set with the original password set generated at the time of registration, and if the matching is successful, the verification succeeds, and if not, the verification fails, wherein the verification password set is the verification time. The password information is combined with the phone posture related information when the password is input. The password information may be characters, fingerprints or iris information.

In this embodiment, when the running parameter is the posture information of the terminal, the device may collect data through the acceleration sensor, and perform calculation and judgment on the data, and detect the posture of the mobile phone when the password is registered and encrypt and save with the registered password. At the time of authentication, when the password (eg, fingerprint) is input, the gesture of the mobile phone is detected, and when the password (fingerprint) input information, the gesture of the mobile phone, and the registration are matched at the same time, the password (fingerprint) can be verified.

Third embodiment:

Referring to FIG. 10, FIG. 10 is a structural block diagram of a mobile terminal according to an embodiment of the present invention.

The mobile terminal 10 provided by this embodiment includes: an acquisition unit 11, an acceleration sensor unit 12, a processor 13, and a storage unit 14;

The collecting unit 11 is configured to obtain the authentication parameter input by the user in the authentication information, and send it to the processor 13;

The acceleration sensor unit 12 is configured to obtain the operating parameters of the terminal when the user inputs the verification parameter in the authentication information, and sends it to the processor 13;

The processor 13 is configured to perform matching verification on the identity verification information acquired by the collection unit 11 and the acceleration sensor unit 12 according to the pre-stored legal verification information. When the identity verification information matches the legal verification information, the identity verification is passed;

The storage unit 14 is configured to store the verification parameters input by the user, the operating parameters of the terminal, and the Legal verification information.

In this embodiment, the collecting unit 11 specifically includes a fingerprint sensor, an iris sensor, and a password collecting unit;

As shown in FIG. 11 , a first structural block diagram of a mobile terminal provided by the embodiment, when the acquiring unit is the fingerprint sensor 111, the mobile terminal 10 is configured to receive fingerprint information input by the user by using the fingerprint sensor, and the processor 13 is configured to Detecting whether the fingerprint information and the state information of the terminal are the same as the original fingerprint information recorded in advance and the original state information of the terminal;

As shown in FIG. 12, in the second structural block diagram of the mobile terminal provided by the embodiment, when the acquiring unit is the iris sensor 112, the mobile terminal 10 is configured to receive iris information input by the user through the iris sensor, and the processor 13 is configured to Detecting whether the iris information and the state information of the terminal are the same as the original iris information recorded in advance and the original state information of the terminal;

As shown in FIG. 13 , a third structural block diagram of the mobile terminal provided by the embodiment, when the acquiring unit is the password collecting unit 113, the mobile terminal 10 is configured to receive character information input by the user through the password collecting unit, and the processor 13 It is configured to detect whether the character information and the status information of the terminal are the same as the original character information pre-recorded and the original status information of the terminal.

Optionally, the mobile terminal 10 further includes a registration unit 15; the user inputs the original verification parameter through the registration unit 15 to register, and collects the original operation parameters of the terminal when the user inputs the original verification parameter for registration, and the original verification parameter and the original of the terminal. The operating parameters are sent to the storage unit 14 for storage.

In summary, the password verification method and apparatus and the mobile terminal provided by the embodiment of the present invention obtain the identity verification information obtained by combining the verification parameter input by the user and the operation parameter of the corresponding terminal when verifying the identity verification information, and The authentication information is verified and verified. Only when the two match, the verification is passed. That is, the user must make the verification parameter input by the terminal under a certain operating parameter to be successfully verified, and the security verification is performed by the verification method of the combined information. To improve the security of passwords and the security of password verification.

Optionally, the segmentation determination is performed according to the collected fingerprint information or the detected posture information of the terminal. For example, whether the fingerprint information matches may be first determined. If not, the verification process is exited. If the matching is performed, the posture information of the terminal is determined. Matching; or first determine whether the mobile phone posture information matches, if not, exit the verification process, if it matches, determine whether the fingerprint information matches, thereby increasing the diversity of the fingerprint verification method and the security of the terminal, further ensuring the user terminal information The security has improved the user experience.

Obviously, those skilled in the art should understand that the modules or steps of the above embodiments of the present invention can be implemented by a general computing device, which can be concentrated on a single computing device or distributed among multiple computing devices. On the network, optionally, they may be implemented by program code executable by the computing device, such that they may be stored in a computer storage medium (ROM/RAM, disk, optical disk) by a computing device, and at some In some cases, the steps shown or described may be performed in an order different than that herein, or they may be separately fabricated into individual integrated circuit modules, or a plurality of modules or steps may be fabricated into a single integrated circuit module. . Therefore, the invention is not limited to any particular combination of hardware and software.

The above is a detailed description of the embodiments of the present invention in conjunction with the specific embodiments, and the specific embodiments of the present invention are not limited to the description. It will be apparent to those skilled in the art that the present invention may be made without departing from the spirit and scope of the invention.

Industrial applicability

The embodiment of the invention provides a password verification method and device, a mobile terminal and a computer storage medium. By obtaining identity verification information, the identity verification information is matched and verified according to the pre-stored legal verification information, and when the identity verification information matches the legal verification information, , the authentication information is verified. The security of the user terminal information is ensured, the user experience is improved, and the user's use is facilitated.

Claims (11)

A method of password verification, including: Obtaining authentication information, where the authentication information includes a verification parameter input by the user and an operation parameter of the terminal when the user inputs the verification parameter; Performing matching verification on the authentication information according to pre-stored legal verification information; When the authentication information matches the legal verification information, the identity verification passes. The password verification method according to claim 1, wherein the operating parameter of the terminal comprises at least one of a placement parameter of the terminal and an application parameter of the terminal. The password verification method according to claim 2, further comprising: before performing the matching verification on the identity verification information according to the pre-stored legal verification information, further comprising: Registering according to the user inputting the original verification parameter on the terminal in advance; Collecting an original running parameter of the terminal, where the original running parameter is an operating parameter of the terminal when the user inputs the original verification parameter to register; The legal verification information is generated according to the original verification parameter and the original operation parameter, and is stored. The password verification method according to claim 3, wherein the performing verification verification on the identity verification information according to the pre-stored legal verification information comprises: Comparing the verification parameter input by the user with the original verification parameter in the pre-stored legal verification information; And when the verification parameter is the same as the original verification parameter, comparing the operation parameter of the terminal with the original operation parameter of the terminal in the pre-stored legal verification information. The password verification method according to claim 3, wherein the performing verification verification on the identity verification information according to the pre-stored legal verification information comprises: Comparing the verification parameter input by the user and the operation parameter of the terminal with the original verification parameter in the pre-stored legal verification information; Comparing the operating parameters of the terminal with the original operating parameters of the terminal in the pre-stored legal verification information. The password verification method according to any one of claims 1 to 5, wherein, when the identity verification information is the unlocking verification information, after the identity verification is passed, the method further includes: performing an unlocking process on the terminal; Or, when the authentication information is the payment verification information, after the identity verification is passed, the method further includes: performing payment processing on the payment application on the terminal. A password verification apparatus includes: a receiving module and a verification module; The obtaining module is configured to obtain an identity verification message, where the identity verification information includes a verification parameter input by the user and an operation parameter of the terminal when the user inputs the verification parameter; The verification module is configured to perform matching verification on the identity verification information according to the pre-stored legal verification information; when the identity verification information matches the legal verification information, the identity verification is passed. The password verification apparatus according to claim 7, further comprising a registration module configured to register according to a user inputting an original verification parameter on the terminal in advance, and collecting original operation parameters of the terminal, where the original operation parameter is The user inputs the running parameters of the terminal when the original verification parameter is registered, generates legal verification information according to the original verification parameter and the original running parameter, and stores the data. A mobile terminal includes: an acquisition unit, an acceleration sensor unit, a processor, and a storage unit; The collecting unit is configured to obtain a verification parameter input by the user in the authentication information, and send the verification parameter to the processor; The acceleration sensor unit is configured to obtain an operation parameter of the terminal when the user inputs the verification parameter in the identity verification information, and sends the operation parameter to the processor; The processor is configured to pair the acquisition unit and the acceleration according to pre-stored legal verification information The identity verification information obtained by the sensor unit performs matching verification, and when the identity verification information matches the legal verification information, the identity verification passes; The storage unit is configured to store the verification parameter input by the user, the operation parameter of the terminal, and legal verification information. The mobile terminal according to claim 9, further comprising a registration unit configured to input the original verification parameter by the registration unit to register, and collect an original operation parameter of the terminal when the user inputs the original verification parameter to register, The original verification parameter and the original operational parameters of the terminal are sent to the storage unit for storage. A computer storage medium storing executable instructions for performing the password verification method according to any one of claims 1 to 6.

Images