Alibaba Group Holding Limited

Lizhong Li

Xiaofeng Wang

Yang Yu

Yanan Zhang

Daocheng Xie

Xuanpeng Zhang

Guanghui Zhou

Hui Dong

Weiqin Wan

Techniques for providing a risk control method and device for resolving the issue of low application software security are described. A transaction request is received from a first user, and the transaction request comprises transaction data, data identifying the first user, and data identifying a second user. An attribute of the first user is determined from the data identifying the first user. An attribute of the second user is identified using the data identifying the second user. In response to the attribute of the first user being determined and the attribute of the second user being identified, an attribute similarity between the first user and the second user is determined. The attribute similarity is compared to a threshold. In response to determining the attribute similarity is less than the threshold, a notification is transmitted to the first user requesting a confirmation of the identified attribute of the second user.

Transaction confirmation based on user attributes

A two-dimensional code query method includes receiving a two-dimensional code query request from a first client, the two-dimensional code query request containing a first two-dimensional code, obtaining at least one two-dimensional codes that are bound to the first two-dimensional code, and returning the obtained two-dimensional codes to the first client for the first client to extract information from at least one of the obtained two-dimensional codes with a corresponding application on the first client.

Two-dimensional code information query method, server, client, and system

Target application information for validation is received at a network device from user equipment. The received target application information is validated. Risk information associated with the validated target application information is determined. Based on the determined risk information, prompt information is returned to the user equipment.

Method and device for application information risk management

A first instruction for triggering a starting action on a main application (app) installed on a terminal and including at least one sub-app is received. In response to the first instruction, application loading information corresponding to the main app and including identifier information for a to-be-loaded sub-app is acquired. Based on the identifier information for the to-be-loaded sub-app, the to-be-loaded sub-app is determined and loaded during a process of starting the main app.

Loading sub-applications for a terminal application

Embodiments of the present application relate to a method, apparatus, and system for managing confidential information. The method includes accessing stored target information comprising a public part and a confidential part, wherein an identifier corresponds to the confidential part of the target information, outputting the public part of the target information and the corresponding identifier, wherein the public part of the target information comprises at least first address information, receiving location information and a to-be-recognized identifier, wherein the location information is associated with a current location of a mobile terminal, determining whether the location information is consistent with the first address information, and in the event that the location information is consistent with the first address information, sending the confidential part of the target information associated with the to-be-recognized identifier to the mobile terminal.

Managing confidential information

A user identity verification method is disclosed. The method includes receiving an identity verification request sent by a user through a client terminal; determining a user communication number according to the identity verification request and generating a corresponding temporary communication number for the user communication number; recording the user communication number and the temporary communication number as first data; returning the temporary communication number to the client terminal; receiving a call request initiated by the user to the temporary communication number; determining a respective user communication number and a respective temporary communication number corresponding to the call request as second data; verifying whether the first data matches with the second data; and returning a verification result to the client terminal. The method can improve security and reliability of identity verification, reduce a user's waiting time, and enhance user experience.

User identity verification method and system, and verification server

A client terminal sends a communication request to a server. The server generates at least one digit code according to a first preset rule. The server sends information including the at least one digit code to the client terminal. The client terminal generates at least one input box, a number of which corresponds to a number of the at least one digit code, detects an input event of the at least one input box, and obtains data of the at least input box when the input event occurs. The client terminal sends the data of the at least one input box as at least one verification data to the server. The server compares the digit data corresponding to the at least one digit code with the verification data and sends a successful information code to the client terminal when the two are the same. The techniques improve password security.

Data communication

Verifying identities includes obtaining feature point information based at least in part on biometric information collected from a to-be-verified user to form a to-be-verified feature point information set, the to-be-verified feature point information set identifying the to-be-verified user, comparing the to-be-verified feature point information set with preset feature point information sets that were stored in advance, and in the event that a degree of match between the to-be-verified feature point information set and a preset feature point information set is less than a first predetermined threshold value, and is greater than a second predetermined threshold value: receiving verification data entered by the to-be-verified user, comparing the verification data with preset data corresponding to the preset feature point information set, and in the event that the verification data and the preset data are the same, verifying the to-be-verified user.

Growing community of inventors

Hangzhou, China

Lizhong Li