Method for Verifying Sensitive Operations, Terminal Device, Server, and Verification System

A method for verifying sensitive operations, comprising:

• scanning, by a first terminal device, a two-dimensional code for initiating a sensitive operation to acquire information in the two-dimensional code, the information in the two-dimensional code being at least used for uniquely determining the sensitive operation and the user initiating the sensitive operation;
• and
• sending, by the first terminal device, a first verification request to a verification server, the first verification request carrying verification information of the first terminal device and the information in the two-dimensional code, such that the verification server performs verification according to the verification information of the first terminal device and the information in the two-dimensional code, the verification information being used for determining identity information;
• and when the user initiating the sensitive operation is a user determined according to the identity information, allowing a sensitive operation initiated by the user, which is determined according to the information in the two-dimensional code.

A verification server, comprising;

• a second verification request receiving module, configured to receive a second verification request from a sensitive operation server, the second verification request carrying verification scenario information and login information of a user initiating as sensitive operation:
• a verification code sending module, configured to send a verification code to a two-dimensional code server, such that the two-dimensional code server generates a two-dimensional code according to the verification scenario information, the login information of the user initiating the sensitive operation, and the verification code, information in the two-dimensional code being at least used for uniquely determining the sensitive operation and the user initiating the sensitive operation;
• and
• a verifying module, configured to:
• upon receiving a first verification request from a first terminal device, the first verification request carrying verification information of the first terminal device and the information in the two-dimensional code, perform verification according to the verification information of the first terminal device and the information in the two-dimensional code, the verification information being used for determining identity information;
• and when the user initiating the sensitive operation is a user determined according to the identity information, allow a sensitive operation initiated by the user, which is determined according to the information in the two-dimensional code.

A terminal device, comprising:

• a scanning module, configured to scan a two-dimensional code for initiating a sensitive operation to acquire information in the two-dimensional code, the information in the two-dimensional code being at least used for uniquely determining the sensitive operation and the user initiating the sensitive operation;
• and
• a first verification request sending module, configured to send a first verification request to a verification server, the first verification request carrying verification information of the terminal device and the information in the two-dimensional code, such that the verification server performs verification according to the verification information of the terminal device and the information in the two-dimensional code, the verification information being used for determining identity information;
• and when the user initiating the sensitive operation is a user determined by the identity information, allow a sensitive operation initiated by the user, which is determined according to the information in the two-dimensional code.

A sensitive operation server, comprising:

• a sensitive operation request receiving module, configured to receive a sensitive operation request from a second terminal device, the sensitive operation request carrying at least verification scenario information and login information of a user initiating a sensitive. operation;
• and
• a second verification request sending module, configured to respectively send a second verification request to a two-dimensional code server and a verification server, the second verification request carrying the verification scenario information and the login information of the user initiating the sensitive operation, such that:
• the verification server sends a verification code to the two-dimensional code server, whereupon the two-dimensional code server generates a two-dimensional code according to the verification scenario information, the login information of the user initiating the sensitive operation, and the verification code.