TECHNICAL FIELD

The present application relates to the field of information security technologies, and in particular, to an authentication method and device, and a method and a device for generating information for authentication.

BACKGROUND

With the rapid development of information technologies, users pay more attention to information security. Authentication is a common method used to ensure information security.

For example, a terminal device of a first user performs authentication. The first user can predetermine standard information (e.g., a password) for authentication. After the standard information is set, the terminal device can perform authentication on any user (referred to as a second user) performing a specific operation on the terminal device based on the standard information. If the second user can correctly enter the standard information, the terminal device can authenticate the second user as the first user. Otherwise, the terminal device can determine that the second user is not the first user but an attacker, and therefore, can prevent the second user from performing the specific operation. As such, information security of the first user on the terminal device can be improved. The specific operation can be a screen unlock operation, a login operation, a personal information modification operation, a payment operation, etc.

In the existing technology, the standard information can be a gesture password, and authentication can be performed based on the gesture password. Specifically, there are nine key node areas in a gesture password input interface provided by an operating system or an application of the terminal device, and the nine key node areas are distributed in the form of a nine-box grid, as shown in the gesture password input interface inFIG. 1. The first user can set a two-dimensional track that connects at least two key node areas as the gesture password. After the gesture password is set, when the terminal device performs authentication on the second user, the second user can be authenticated only when the second user connects key node areas in the gesture password input interface to reproduce a gesture corresponding to the gesture password.

However, gesture password input interfaces in the existing technology are undiversified, and attackers are usually familiar with the gesture password input interface. Therefore, the difficulty of the attacker in peeping at and memorizing the gesture password entered by the first user is reduced, and/or the difficulty of the attacker in cracking the gesture password set by the first user through exhaustive attack is reduced, causing relatively low authentication reliability.

SUMMARY

Implementations of the present application provide an authentication method and device, to alleviate a problem of relatively low authentication reliability caused by undiversified gesture password input interfaces in the existing technology.

The implementations of the present application provide a method and a device for generating information for authentication.

The following technical solutions are used in the implementations of the present application:

The authentication method provided in the implementations of the present application includes the following: displaying a picture pre-specified by a first user; detecting an interactive operation of a second user for the picture; generating interactive operation information of the second user based on the detected interactive operation of the second user; and performing authentication to determine whether the second user is the first user by matching the interactive operation information of the second user and standard information, where the standard information is generated based on an interactive operation of the first user for the picture.

The authentication device provided in the implementations of the present application includes a display module, configured to display a picture pre-specified by a first user; a detection module, configured to detect an interactive operation of a second user for the picture; a generation module, configured to generate interactive operation information of the second user based on the detected interactive operation of the second user; and an authentication module, configured to perform authentication to determine whether the second user is the first user by matching the interactive operation information of the second user and standard information, where the standard information is generated based on an interactive operation of the first user for the picture.

The method for generating information for authentication provided in the implementations of the present application includes the following: obtaining a picture specified by a first user; displaying the picture, and determining one or more feature areas on the picture; detecting an interactive operation of the first user for the one or more feature areas; and generating standard information based on the detected interactive operation of the first user so as to perform authentication to determine whether a second user is the first user.

The device for generating information for authentication provided in the implementations of the present application includes an acquisition module, configured to obtain a picture specified by a first user; a display and determining module, configured to display the picture, and determine one or more feature areas on the picture; a detection module, configured to detect an interactive operation of the first user for the one or more feature areas; and a generation module, configured to generate standard information based on the detected interactive operation of the first user, so as to perform authentication to determine whether a second user is the first user.

The at least one technical solutions used in the implementations of the present application can achieve the following beneficial effects: The picture specified by the first user can be used as a gesture password input interface customized by the first user, and the interactive operation can include a gesture, to diversify gesture password input interfaces. Feature area locations of gesture password input interfaces corresponding to different pictures are usually different, and a feature area location of the gesture password input interface corresponding to the picture specified by the first user is also different from a feature area location of a gesture password input interface in the existing technology. Therefore, an attacker may not be familiar with the gesture password input interface corresponding to the picture. As such, the difficulty of the attacker in peeping at and memorizing the gesture password entered by the first user can be increased, and/or the difficulty of the attacker in cracking the gesture password set by the first user through exhaustive attack can be increased, thereby improving authentication reliability. Therefore, the present application can partly or wholly alleviate the problem in the existing technology.

