# US 10,313,353 B2 · Method, device, terminal, and server for verifying security of service operation

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,313,353 B2
- Document ID: US10313353B2
- Status: Granted
- Kind: B2
- Application number: 14/880,637
- Filed: 2015-10-12
- Published: 2016-04-14
- Granted: 2019-06-04
- Earliest claimed: 2014-10-13
- Assignees: Alibaba Group Holding Limited
- Applicants: Alibaba Group Holding Limited
- Inventors: Kun Lu
- Web page: https://patentgrep.com/patent/US10313353B2

## CPC

- G06Q 20/384: {using social networks}
- G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour}
- G06F 21/577: {Assessing vulnerabilities and evaluating computer system security}
- G06Q 20/20: Point-of-sale [POS] network systems
- G06Q 20/4014: {Identity check for transactions}
- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06Q 30/0609: {Qualifying participants for shopping transactions (payment transaction verification G06Q20/401)}
- H04L 9/32: including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/102: {Entity profiles}
- H04L 67/30: Profiles
- H04L 67/303: Terminal profiles
- H04L 67/306: User profiles
- G06F 2221/034: Test or assess a computer or a system
- G06Q 10/40: Business processes related to social networking or social networking services
- H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A method for verifying a security of a service operation is provided. The method includes receiving, by a service terminal, a creditability analysis instruction of the service operation, where the creditability analysis instruction is sent by a service server. The method may further include obtaining, by the service terminal, a creditability analysis result of the service operation based on the creditability analysis instruction and one or more risk control models pre-stored in the service terminal, and sending the creditability analysis result to the service server for determining the security of the service operation.

## Claims

### Claim 1

A method for verifying a security of a service operation, comprising:
generating one or more risk control models based on user data associated with a user of a service terminal;
receiving, by the service terminal, a creditability analysis instruction of the service operation, the creditability analysis instruction being sent by a service server in response to an operation request associated with the service terminal;
performing, by the service terminal, a creditability analysis to obtain a creditability analysis result of the service operation based on the creditability analysis instruction and the one or more risk control models pre-stored in the service terminal; and
sending, by the service terminal, the creditability analysis result to the service server for determining the security of the service operation.

### Claim 2 (depends on 1)

The method according to claim 1, further comprising:
obtaining the user data from the service terminal based on an authorization permission of a user of the service terminal;
generating the one or more risk control models by analyzing the user data; and
storing the one or more risk control models in a database of the service terminal.

### Claim 3 (depends on 2)

The method according to claim 2, further comprising:
encrypting the one or more risk control models before storing the one or more risk control models in a local security control database of the service terminal; and
storing the encrypted one or more risk control models in the database of the service terminal.

### Claim 4 (depends on 2)

The method according to claim 2, wherein the user data comprises at least one of: user social data, interest data and habit data, and wherein the one or more risk control models comprise at least one of: a social relationship control model generated based on the user social data, an interest control model generated based on the interest data, and a habit control model generated based on the habit data.

### Claim 5 (depends on 1)

The method according to claim 1, wherein obtaining a creditability analysis result of the service operation comprises:
obtaining service information of the service operation based on the creditability analysis instruction;
obtaining a target risk control model from the one or more risk control models based on a type of the service operation, wherein the one or more risk control models include a corresponding relationship between service information and service creditability analysis values; and
searching the target risk control model by using the service information as a keyword to obtain a service creditability analysis value corresponding to the service information.

### Claim 6 (depends on 5)

The method according to claim 5, wherein obtaining service information of the service operation based on the creditability analysis instruction comprises:
obtaining the service information from the creditability analysis instruction of the service operation, wherein the service information includes information obtained by the service server based on an operation request of the service operation sent by another terminal.

### Claim 7 (depends on 5)

The method according to claim 5, further comprising:
when a user of the service terminal initiates the service operation, sending an operation request of the service operation to the service server before receiving the creditability analysis instruction; and
when receiving the creditability analysis instruction, obtaining the service information of the service operation based on the operation request of the service operation.

### Claim 8

A method for verifying a security of a service operation, comprising:
sending a creditability analysis instruction of the service operation to a service terminal in response to an operation request associated with the service terminal;
receiving a creditability analysis result sent by the service terminal, wherein the creditability analysis result is obtained by the service terminal based on the service terminal performing a creditability analysis of the service operation and one or more risk control models pre-stored in the service terminal; and
determining the security of the service operation based on the creditability analysis result.

### Claim 9 (depends on 8)

The method according to claim 8, further comprising:
before sending the creditability analysis instruction of the service operation to the service terminal, receiving the operation request of the service operation sent by another terminal; and
obtaining service information of the service operation based on the operation request, wherein the creditability analysis instruction of the service operation includes the service information of the service operation.

### Claim 10 (depends on 8)

The method according to claim 8, further comprising:
before sending the creditability analysis instruction of the service operation to the service terminal, receiving the operation request of the service operation sent by the service terminal, wherein the operation request is used as a trigger instruction for sending the creditability analysis instruction of the service operation to the service terminal.

### Claim 11 (depends on 8)

The method according to claim 8, wherein determining the security of the service operation based on the creditability analysis result comprises:
obtaining a first creditability analysis value of the service operation based on a local risk control model;
obtaining a second creditability analysis value based on the creditability analysis result sent by the service terminal;
obtaining weight values of the first creditability analysis value and the second creditability analysis value;
calculating a combined creditability analysis value of the first creditability analysis value and the second creditability analysis value based on the weight values;
comparing the combined creditability analysis value with a preset creditability threshold; and
if the combined creditability analysis value is greater than the creditability threshold, determining that the service operation is secure, and if the combined creditability analysis value is not greater than the creditability threshold, determining that the service operation is insecure.

### Claim 12

A device for verifying a security of a service operation, comprising:
a generating unit configured to generate one or more risk control models based on user data associated with a user of a service terminal;
a receiving unit configured to receive a creditability analysis instruction of the service operation sent by a service server;
an analyzing unit configured to obtain a creditability analysis result of the service operation based on the service terminal performing a creditability analysis and the one or more risk control models pre-stored in the service terminal; and
a sending unit configured to send the creditability analysis result to the service server for determining the security of the service operation.

### Claim 13

A device for verifying a security of a service operation, comprising:
a sending unit configured to send a creditability analysis instruction of the service operation to a service terminal in response to an operation request associated with the service terminal;
a receiving unit configured to receive a creditability analysis result sent by the service terminal, wherein the creditability analysis result is obtained by the service terminal based on the service terminal performing a creditability analysis of the service operation and one or more risk control models pre-stored in the service terminal; and
a verifying unit configured to determine the security of the service operation based on the creditability analysis result.

### Claim 14

A terminal, comprising:
a memory configured to store a set of instructions;
a processor configured to execute the set of instructions to cause the terminal to:
generate one or more risk control models based on user data associated with a user of the terminal;
receive a creditability analysis instruction of a service operation sent by a service server in response to an operation request associated with the terminal;
obtain a creditability analysis result of the service operation based on the service terminal performing a creditability analysis and the one or more risk control models pre-stored in the terminal; and
send the creditability analysis result to the service server for determining a security of the service operation.

### Claim 15

A service server, comprising:
a memory configured to store a set of instructions;
a processor configured to execute the set of instructions to cause the service server to:
send a creditability analysis instruction of a service operation to a service terminal in response to an operation request associated with the service terminal;
receive a creditability analysis result sent by the service terminal, wherein the creditability analysis result is obtained by the service terminal based on the service terminal performing a creditability analysis of the service operation and one or more risk control models pre-stored in the service terminal; and
determine a security of the service operation based on the creditability analysis result.

### Claim 16

A non-transitory computer readable medium that stores a set of instructions that is executable by at least one processor of a service terminal to cause the service terminal to perform a method for verifying a security of a service operation, the method comprising:
generating one or more risk control models based on user data associated with a user of a service terminal;
receiving a creditability analysis instruction of the service operation, the creditability analysis instruction being sent by a service server in response to an operation request associated with the service terminal;
obtaining a creditability analysis result of the service operation based on the service terminal performing a creditability analysis and the one or more risk control models pre-stored in the service terminal; and
sending the creditability analysis result to the service server for determining the security of the service operation.

### Claim 17 (depends on 16)

The computer readable medium according to claim 16, wherein the set of instructions that is executable by the at least one processor of the service terminal to cause the service terminal to further perform:
obtaining the user data from the service terminal based on an authorization permission of the user of the service terminal;
generating the one or more risk control models by analyzing the user data; and
storing the one or more risk control models in a database of the service terminal.

### Claim 18 (depends on 17)

The computer readable medium according to claim 17, wherein the set of instructions that is executable by the at least one processor of the service terminal to cause the service terminal to further perform:
encrypting the one or more risk control models before storing the one or more risk control models in a local security control database of the service terminal; and
storing the encrypted one or more risk control models in the database of the service terminal.

### Claim 19 (depends on 17)

The computer readable medium according to claim 17, wherein the user data comprises at least one of: user social data, interest data and habit data, and wherein the one or more risk control models comprise at least one of: a social relationship control model generated based on the user social data, an interest control model generated based on the interest data, and a habit control model generated based on the habit data.

### Claim 20 (depends on 16)

The computer readable medium according to claim 16, wherein obtaining a creditability analysis result of the service operation comprises:
obtaining service information of the service operation based on the creditability analysis instruction;
obtaining a target risk control model from the one or more risk control models based on a type of the service operation, wherein the one or more risk control model includes a corresponding relationship between the service information and service creditability analysis values; and
searching the target risk control model by using the service information as a keyword to obtain a service creditability analysis value corresponding to the service information.

### Claim 21 (depends on 20)

The computer readable medium according to claim 20, wherein obtaining service information of the service operation based on the creditability analysis instruction comprises:
obtaining the service information from the creditability analysis instruction of the service operation, wherein the service information includes information obtained by the service server based on the operation request of the service operation sent by another terminal.

### Claim 22 (depends on 20)

The computer readable medium according to claim 20, wherein the set of instructions that is executable by the at least one processor of the service terminal to cause the service terminal to further perform:
when the user of the service terminal initiates the service operation, sending the operation request of the service operation to the service server before receiving the creditability analysis instruction; and
when receiving the creditability analysis instruction, obtaining the service information of the service operation based on the operation request of the service operation.

### Claim 23

A non-transitory computer readable medium that stores a set of instructions that is executable by at least one processor of a service server to cause the service server to perform a method for verifying a security of a service operation, the method comprising:
sending a creditability analysis instruction of the service operation to a service terminal in response to an operation request associated with the service terminal;
receiving a creditability analysis result sent by the service terminal, wherein the creditability analysis result is obtained by the service terminal based on the service terminal performing a creditability analysis of the service operation and one or more risk control models pre-stored in the service terminal; and
determining the security of the service operation based on the creditability analysis result.

### Claim 24 (depends on 23)

The computer readable medium according to claim 23, wherein the set of instructions that is executable by the at least one processor of the service server to cause the service server to further perform:
before sending the creditability analysis instruction to analyze the creditability of the service operation to the service terminal, receiving the operation request of the service operation sent by another terminal; and
obtaining service information of the service operation based on the operation request, wherein the creditability analysis instruction of the service operation includes the service information of the service operation.

### Claim 25 (depends on 23)

The computer readable medium according to claim 23, wherein the set of instructions that is executable by the at least one processor of the service server to cause the service server to further perform:
before sending the creditability analysis instruction of the service operation to the service terminal, receiving the operation request of the service operation sent by the service terminal, wherein the operation request is used as a trigger instruction for sending the creditability analysis instruction of the service operation to the service terminal.

### Claim 26 (depends on 23)

The computer readable medium according to claim 23, wherein determining the security of the service operation based on the creditability analysis result comprises:
obtaining a first creditability analysis value of the service operation based on a local risk control model;
obtaining a second creditability analysis value based on the creditability analysis result sent by the service terminal;
obtaining weight values of the first creditability analysis value and the second creditability analysis value;
calculating a combined creditability analysis value of the first creditability analysis value and the second creditability analysis value based on the weight values;
comparing the combined creditability analysis value with a preset creditability threshold; and
if the combined creditability analysis value is greater than the creditability threshold, determining that the service operation is secure, and if the combined creditability analysis value is not greater than the creditability threshold, determining that the service operation is insecure.