账户验证:每人仅限1个账户 [英] Account verification: Only 1 account per person
问题描述
在我的社区中，每个用户都应该只有一个帐户.
所以我需要一种解决方案来验证特定帐户是用户唯一拥有的帐户.目前，我使用电子邮件验证.但我真的不需要用户的电子邮件地址.我只是尽量防止每个人使用多个帐户.
So I need a solution to verify that the specific account is the only one the user owns. For the time being, I use email verification. But I don't really need the users' email adresses. I just try to prevent multiple accounts per person.
但这当然行不通.无论如何，人们创建临时电子邮件地址或拥有多个地址.因此，他们使用不同的电子邮件地址进行注册，从而获得多个帐户——这是不允许的.
But this doesn't work, of course. People create temporary email addresses or they own several addresses, anyway. So they register using different email addresses and so they get more than one account - which is not allowed.
所以我需要一个比(容易规避的)电子邮件验证更好的解决方案.顺便说一句，我不想使用 OpenID、Facebook Connect 等.
So I need a better solution than the (easy to circumvent) email verification. By the way, I do not want to use OpenID, Facebook Connect etc.
要求:
- 验证方法必须可供所有用户使用
- 用户不应该有任何费用(至少 1 美元)
- 验证必须是安全的(比电子邮件方法更安全)
- 不应要求用户暴露过多的私人信息
- ...
你有好的方法的想法吗?预先非常感谢您！
Do you have ideas for good approaches? Thank you very much in advance!
其他信息:
我的社区是一个浏览器游戏，即足球经理游戏.多账户吸引人的地方在于用户可以交易他们的球员.因此，如果您有两个帐户，您可以以过高的价格购买弱玩家，而真正的"买家不会支付.因此，您的第一个帐户"获得巨额资金，而第二个帐户"变穷.但是您不必在意:只需创建另一个帐户即可使第一个帐户更富有.
My community is a browser game, namely a soccer manager game. The thing which makes multiple accounts attractive is that users can trade their players. So if you have two accounts, you can buy weak players for excessive prices which no "real" buyer would pay. So your "first account" gets huge amounts of money while the "second account" becomes poor. But you don't have to care: Just create another account to make the first one richer.
推荐答案
非常有趣的问题！这里的基本问题是多部分的 -
Very interesting question! The basic problem here is multi-part -
- 开设帐户很简单(因为创建新的电子邮件 ID 很简单).
- 但在游戏中开户的效果并非微不足道.开设一个新帐户基本上可以让您获得一定数量的钱来购买球员.
- 将钱转入另一个帐户是微不足道的(交易玩家).
结合 1 &2，你的问题是新玩家有不公平的优势(他们在现实世界中不会有).这可能没问题，因为它会吸引新用户访问您的网站.
Combining 1 & 2, you have the problem that new players have an unfair advantage (which they would not have in the real world). This is probably okay, as it drives new users to your site.
然而，将 3 添加到组合中，您会遇到新玩家很容易将他们的优势转移给老玩家的问题.这让老用户可以玩这个系统，破坏其他人的乐趣.
However adding 3 to the mix, you have the problem that new players are easily able to transfer their advantage to the old players. This allows old users to game the system, ruining fun for others.
解决方案可以是删除 1、2、3.
The solution can be removing either 1,2,3.
删除 1 - 这是您关注的部分.正如其他人所建议的那样，这不可能做到 100% 准确.但是有一些方法足够好，这取决于您对足够好"的标准有多严格.我认为最好的妥协是向用户询问他们的手机号码.它是有效的，并允许您以另一种方式联系您的用户.另一种方法是让您的服务仅限邀请" - 确保有明确定义的邀请轨迹"，可以唯一地识别用户.
Remove 1 - This is the part you are focusing on. As others have suggested, this is impossible to do with 100% accuracy. But there are ways that will be good enough, depending on how stringent your criterion for "good enough" is. I think the best compromise is to ask the user for their mobile phone numbers. It's effective and allows you to contact your users in one more way. Another way would be to make your service "invite only" - assuring that there is a well defined "trail" of invites that can uniquely identify users.
Remove 2 - 没有人建议这样做，这有点令人惊讶.不要为了注册就给新用户一大笔钱！让他们为之工作，类似于在现实世界中筹集种子资金.你的足球模拟有社交方面吗?仅当用户的朋友"数量超过一定数量时才给用户钱(增加会给他们钱的潜在投资者的数量)怎么样?
Remove 2 - No one has suggested this which is a bit surprising. Don't give new users a bunch of money just for signing up! Make them work for it, similar to raising seed capital in the real world. Does your soccer simulation have social aspects? How about only giving the users money once their "friend" count goes above a certain number (increasing the number of potential investors who will give them money)?
删除 3 - 其他人已经为此发布了最佳解决方案.采用类似 SO 的策略，新用户必须玩 3 小时才能转移玩家.或者，可以在您的游戏中添加一个训练"阶段，迫使新玩家通过在模拟环境中赚到足够的钱来证明自己的价值，然后才允许他们与真实用户一起玩.
Remove 3 - Someone else has already posted the best solution for this. Adopt an SO like strategy where a new user has to play for 3 hours before they are allowed to transfer players. Or maybe add a "training" stage to your game which forces a new player to prove their worth by making enough money in a simulated environment before they are allowed to play with the real users.
或以上任意组合！结合IP地址匹配和可疑交易等启发式方法，可以让游戏作弊完全行不通.
Or any combination of the above! Combined with heuristics like matching IP addresses and looking for suspicious transactions, it is possible to make cheating on the game completely unviable.
当然，您需要记住的最后一件事是它只是一个游戏.如果有人为了在您的模拟中获得一点优势而遇到很多麻烦，他们可能应该保留它.只要大家玩的开心就好！
Of course a final thing you need to keep in mind is that it is just a game. If someone goes to a lot of trouble just to gain a little bit of advantage in your simulation, they probably deserve to keep it. As long as everyone is having fun!
这篇关于账户验证:每人仅限1个账户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
