# US 10,375,048 B2 · User identity verification method and system, and verification server > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,375,048 B2 - Document ID: US10375048B2 - Status: Granted - Kind: B2 - Application number: 15/220,826 - Filed: 2016-07-27 - Published: 2017-02-02 - Granted: 2019-08-06 - Earliest claimed: 2015-07-27 - Assignees: Alibaba Group Holding Limited - Applicants: Alibaba Group Holding Limited - Inventors: Xiaofeng Wang; Hui Dong; Yang Yu; Daocheng Xie; Weiqin Wan; Lizhong Li - Web page: https://patentgrep.com/patent/US10375048B2 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - G06F 21/313: {using a call-back technique via a telephone network} - H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A user identity verification method is disclosed. The method includes receiving an identity verification request sent by a user through a client terminal; determining a user communication number according to the identity verification request and generating a corresponding temporary communication number for the user communication number; recording the user communication number and the temporary communication number as first data; returning the temporary communication number to the client terminal; receiving a call request initiated by the user to the temporary communication number; determining a respective user communication number and a respective temporary communication number corresponding to the call request as second data; verifying whether the first data matches with the second data; and returning a verification result to the client terminal. The method can improve security and reliability of identity verification, reduce a user's waiting time, and enhance user experience. ## Claims ### Claim 1 A method implemented by one or more computing devices, the method comprising: receiving an identity verification request sent from a client terminal of a user; determining a first communication number according to the identity verification request; generating a temporary communication number for the first communication number; recording the first communication number and the temporary communication number as first data; returning the temporary communication number to the client terminal; receiving a call request to the temporary communication number, the call request associated with a second communication number; determining the second communication number and the temporary communication number as second data; verifying that the first data matches with the second data; and selecting a content of a prompt audio message to be played according to a security level of an identity verification corresponding to the identity verification request, the selecting including: in response to determining that the security level of the identity verification is a first level, instructing to play a default prompt audio message and determining that the identity verification succeeds after the default prompt audio message is played; in response to determining that the security level of the identity verification is a second level, instructing to press a corresponding key; and in response to determining that the security level of the identity verification is a third level, instructing to input a corresponding numerical string or character string. ### Claim 2 (depends on 1) The method of claim 1, further comprising: returning a verification result. ### Claim 3 (depends on 1) The method of claim 1, further comprising: determining whether a time difference between a time at which the call request is received and a time at which the first data is generated is less than a preset time; and determining that the identity verification of the user fails in response to determining that the time difference is greater than or equal to the preset time. ### Claim 4 (depends on 1) The method of claim 1, further comprising determining that the identity verification fails in response to determining that the first data does not match with the second data. ### Claim 5 (depends on 1) The method of claim 1, further comprising: receiving information inputted by the user according to the prompt audio message; and verifying whether the inputted information is consistent with the content of the prompt audio message. ### Claim 6 (depends on 1) The method of claim 1, wherein: the identity verification request is received in response to an event of a registration of a new account by the user; and the identity verification request includes the first communication number that is inputted by the user. ### Claim 7 (depends on 1) The method of claim 1, wherein: the identity verification request comprises account information of the user; and the determining the first communication number comprises determining a corresponding communication number according to the account information of the user. ### Claim 8 (depends on 1) The method of claim 1, further comprising causing the client terminal to display the temporary communication number via a two-dimensional code, the two-dimensional code enabling the call request to the temporary communication number upon being scanned. ### Claim 9 A server comprising: one or more processors; and memory storing computer-readable instructions that, when executed by the one or more processors, cause the one or more processors to perform acts comprising: receiving an identity verification request from a first client terminal of a user; determining a first communication number according to the identity verification request; generating a temporary communication number for the first communication number; recording the first communication number and the temporary communication number as first data; returning the temporary communication number to the first client terminal; receiving a call request to the temporary communication number from a second client terminal; determining a second communication number corresponding to the call request and the temporary communication number as second data; verifying that the first data matches with the second data; and selecting a content of a prompt audio message to be played at the second client terminal according to a security level of an identity verification corresponding to the identity verification request, the selecting including: in response to determining that the security level of the identity verification is a first level, instructing to play a default prompt audio message and determining that the identity verification succeeds after the default prompt audio message is played; in response to determining that the security level of the identity verification is a second level, instructing to press a corresponding key; and in response to determining that the security level of the identity verification is a third level, instructing to input a corresponding numerical string or character string. ### Claim 10 (depends on 9) The server of claim 9, wherein the acts further comprise receiving the identity verification request in response to an event of a registration of a new account by the user, the identity verification request including the first communication number that is inputted by the user during the registration. ### Claim 11 (depends on 9) The server of claim 9, wherein: the identity verification request comprises account information of the user; and the determining the first communication number according to the identity verification request comprises determining the first communication number based at least in part on the account information of the user. ### Claim 12 (depends on 9) The server of claim 9, wherein the acts further comprise: determining whether a time difference between a time at which the call request is received and a time at which the first data is generated is less than a preset time; and determining that the identity verification of the user fails in response to determining that the time difference is greater than or equal to the preset time. ### Claim 13 (depends on 9) The server of claim 9, wherein the acts further comprise determining that the identity verification of the user fails in response to determining that the first data does not match with the second data. ### Claim 14 (depends on 9) The server of claim 9, wherein the acts further comprise: receiving information inputted by the user according to the prompt audio message from the second client terminal; and determining whether the inputted information is consistent with the content of the prompt audio message. ### Claim 15 (depends on 9) The server of claim 9, wherein the acts further comprise returning the temporary communication number in a form of a two-dimensional code, the two-dimensional code initiating the call request to the temporary communication number upon being scanned. ### Claim 16 (depends on 9) The server of claim 9, wherein the first client terminal is the second client terminal. ### Claim 17 (depends on 9) The server of claim 9, wherein the first client terminal is different from the second client terminal. ### Claim 18 One or more computer-readable media storing computer-readable instructions that, when executed by one or more processors, cause the one or more processors to perform acts comprising: receiving an identity verification request sent from a client terminal of a user; determining a first communication number according to the identity verification request; generating a temporary communication number for the first communication number; recording the first communication number and the temporary communication number as first data; returning the temporary communication number to the client terminal; receiving a call request to the temporary communication number, the call request associated with a second communication number; determining the second communication number and the temporary communication number as second data; verifying that the first data matches with the second data; selecting a security level of an identity verification corresponding to the identity verification request, the selecting including: in response to determining that the user is in a normal state, selecting a first level verification; in response to determining that the user is in an abnormal state, selecting a second level verification; and in response to determining that the user is flagged, selecting a third level verification; and selecting a content of a prompt audio message to be played according to the security level of the identity verification. ### Claim 19 (depends on 18) The one or more computer-readable media of claim 18, wherein the acts further comprise: returning a verification result. ### Claim 20 (depends on 18) The one or more computer-readable media of claim 18, the acts further comprising: determining whether a time difference between a time at which the call request is received and a time at which the first data is generated is less than a preset time; and determining that the identity verification of the user fails in response to determining that the time difference is greater than or equal to the preset time.