TW202107386A - Financial service device and method for providing identity verification function - Google Patents

Abstract

A financial service device for providing identity verification function, having an input device, an image capture device, a communication device and a processor, is provided. Specifically, the processor receives a service request, and in response thereto, activates the image capture device to obtain a current image. The processor sends a current image information corresponding to the current image to an identity management server, so as to obtain a user account corresponding to the current image. The processor sends a designated service item to the identity management server so as to perform an identity verification procedure according to a default verification method corresponding to the user account by the identity management server. The processor provides a service corresponding to the designated service when determining the identity verification procedure is finished.

Description

Financial service device and method for providing identity verification function

The present invention relates to an identity verification technology, and more particularly to a financial service device with identity verification and a method for providing financial services.

In the current biometric technology, most of the biometrics are performed on the device side, and the results of the biometrics are sent back to the server that requests the biometrics. Therefore, the connection between the server and the user is only the "device", not the server and the "user". For example, if the user's mobile phone is lost, and before he disables various types of services, a malicious user has already cracked the password of the mobile phone and tampered with the result of his biometric identification. At this time, malicious users have the opportunity to use the user's mobile phone to perform various types of operations. In particular, if the malicious user is the user's relatives and friends, it is more difficult for the user to immediately discover the malicious user's intentions and prevent the occurrence of tragedies. However, if the biometric identification is performed by the server, there will be problems such as too large transmitted packets and long identification time. Nevertheless, biometric identification has high accuracy, and the identification result tends to be unique. Therefore, with the gradual popularity of card-less transaction services, how to use biometric technology to improve the security and convenience of transactions is a subject for those skilled in the art.

The present invention provides a financial service device that provides an identity verification function and a method for providing financial services, which adopts biometric technology for identity verification, which not only provides a convenient transaction method for users, but also maintains the security of the transaction.

An embodiment of the present invention provides a financial service device with an identity verification function having an input device, an image capture device, a communication device, and a processor. The input device is used for receiving input operations. The image capturing device is used to obtain the current image. The communication device is used to connect to the identity management server. The processor is connected to the image capture device and the communication device. The processor receives the service request, and in response to the service request, activates the image capturing device to obtain the current image. The processor transmits the current image information corresponding to the current image to the identity management server through the communication device to obtain a user account corresponding to the current image. The processor receives the designated service item through the input device. The processor transmits the designated service item to the identity management server, and the identity management server executes the identity verification process according to the default verification method of the corresponding user account. When the processor determines that the identity verification procedure has been completed, it provides services corresponding to the designated service items.

The method for providing financial services in an embodiment of the present invention is applicable to financial service devices. This method has the following steps: receiving a service request, in response to the service request, enabling the image capture device to obtain the current image; sending the current image information corresponding to the current image to the identity management server to obtain the user account corresponding to the current image; receiving Designated service items; send the designated service items to the identity management server, and the identity management server will perform the identity verification process according to the default verification method of the corresponding user account; and provide the corresponding designated service items when it is judged that the identity verification process has been completed Service.

Based on the above, the financial service device with identity verification and the method for providing financial services of the present invention provide users with easier access to various types of financial services without having to carry an ATM card or recite the account number. In particular, before conducting financial transactions, the financial service provider must capture the user's current image and analyze the user's image. Therefore, compared to the use of the device’s own biometric technology, the connection between the “financial service provider” and the “binding device” has been upgraded from the “financial service provider” to the “financial service provider” and the user himself. The connection to improve the security of the transaction.

In order to make the above-mentioned features and advantages of the present invention more comprehensible, the following specific embodiments are described in detail in conjunction with the accompanying drawings.

FIG. 1 is a schematic structural diagram of a financial service device according to an embodiment of the present invention. Please refer to FIG. 1, the financial service device 100 has an input device 110, an image capture device 120, a communication device 130 and a processor 140.

The input device 110 is used to receive various types of operations performed by the user, for example, input service requests, designated service items, transaction amounts, and so on. The input device 110 is, for example, a keyboard, a mouse, a touch panel, a touch screen, etc., or any combination thereof, but the present invention is not limited thereto.

The image capture device 120 is used to capture user images. Specifically, the image capture device 120 is, for example, various types of built-in cameras, or external cameras connected through various types of ports, such as a universal serial port. Universal serial bus (USB), Bluetooth (Bluetooth), Wi-Fi, etc., but the present invention is not limited thereto.

The communication device 130 has communication capabilities for transmitting and receiving various types of information. In particular, the communication device 130 can connect with the identity management server. The identity management server records various information of the user, such as but not limited to account numbers, passwords, user images, etc., and the present invention does not limit the implementation device of the identity management server. In an embodiment of the present invention, the communication device 130 is implemented with a communication chip and/or various types of network interface controllers (NIC). The communication chip can be used to support global mobile communications (Global System for Mobile Communications). communication, GSM), Personal Handy-phone System (PHS), Code Division Multiple Access (CDMA) system, Wideband Code Division Multiple Access (WCDMA) system, Long Term Evolution (LTE) system, Worldwide interoperability for Microwave Access (WiMAX) system, Wireless Fidelity (Wi-Fi) system or Bluetooth signal transmission components, the present invention does not Limited to this.

The processor 140 is connected to the input device 110, the image capture device 120 and the communication device 130. The processor 140 is, for example, a central processing unit (Central Processing Unit, CPU), or other programmable general-purpose or special-purpose microprocessor (Microprocessor), digital signal processor (Digital Signal Processor, DSP), or Programmable controller, Application Specific Integrated Circuit (ASIC) or other similar components or a combination of the above components, the present invention is not limited to this.

In an embodiment of the present invention, the financial service device 100 is, for example, an automatic deposit and withdrawal machine, but the present invention is not limited to this.

FIG. 2 is a schematic flowchart of a method for providing financial services according to an embodiment of the present invention. The method for providing financial services in this embodiment is at least applicable to the financial service device 100 in FIG. 1, but the present invention is not limited to this.

It should be noted that before executing the method of providing financial services, users must first register in the identity management server. In addition, after the registration process is completed, the identity management server will record the user image and the default image characteristic value in the user account. In an embodiment of the present invention, the preset image feature values are, for example, the eye distance between the eyes is 3 cm, the nose width is 2.5 cm, the chin is 2 cm, the lip width is 3.5 cm, the nose to the cheek width is 4 cm, etc., but this is only As an example, the present invention is not limited to this.

It should be noted that, in the facial recognition feature values used in the present invention, the facial features of the user have been converted into actual parameters. Therefore, when subsequent facial recognition feature values are used to recognize the user's facial image, the identity management server does not necessarily need to obtain the user's complete facial image, it only needs to know the corresponding facial image to be recognized. The facial recognition feature value of the user account can be selected from the stored facial recognition feature values of the user account corresponding to the facial image to be recognized, which simplifies the network resources and time consumed in packet transmission, and also simplifies the image comparison On the time spent.

In step S210, the processor 140 receives the service request, and in response to the service request, activates the image capturing device to obtain the current image. The current image may include the user and his background. In one embodiment, if the image capturing device 120 captures too much background information, the processor 140 will perform graphical analysis on the captured user image to capture the head region belonging to the user. In addition, if the processor 140 determines that the part of the user’s head region in the user’s image has obstacles (for example, masks, hats, sunglasses, etc.) after recognition, the user’s facial features and eyebrows cannot be clearly recognized. At this time, the processor 140 will issue a warning notice to remind the user to remove the obstacle, but the present invention is not limited to this.

In addition, before or after step S210, the processor 140 will also perform a living body identification process to prevent malicious users from using pictures or videos to pretend to be users for identity authentication. Specifically, in one embodiment, the processor 140 acquires a plurality of user images through the image capturing device 120, for example, one user image is captured every 0.01 second. Then, the processor 140 will identify whether the specific part has a dynamic change. If the specific part has a dynamic change, it will determine that the user's image conforms to the living body identification process, and the image or the image is not trying to be mixed. For example, the specific part is the eye, and the corresponding dynamic change is, for example, blinking. Or, the specific part is, for example, an artery, and the corresponding dynamic change is a subtle change in light and shadow on the face. Or, the specific part is, for example, the pupil, and the corresponding dynamic change is, for example, pupil contraction. Or, the specific part is, for example, the entire head, and the corresponding dynamic changes are, for example, the position of the head and the background, or the ratio of the head, the position of the facial features relative to the entire face, etc. The present invention is not limited thereto.

In step S220, the processor 140 also transmits the current image information corresponding to the current image to the identity management server through the communication device 130 to obtain a user account corresponding to the current image. The current image information has, for example, the current image, the feature value of the face image, or a combination of the two. For example, the processor 140 may send the current image to the identity management server through the communication device 130, so that the identity management server compares the current image and multiple sets of preset image feature values stored in the identity management server. To find a matching set of preset image feature values. In this way, the identity management server will return the user account corresponding to the matching default image feature value as the user account of the current user.

Alternatively, the processor 140 may analyze the current image in advance to obtain the facial image feature value of the current image, and transmit the facial image feature value of the current image to the identity management server. The identity management server compares the facial image feature values with multiple sets of preset image feature values stored in the identity management server to find a matching set of preset image feature values. In this way, the identity management server will return the user account corresponding to the matching default image feature value as the user account of the current user.

It is worth mentioning that if the identity management server finds multiple sets of matching preset image feature values, the identity management server will pass through the communication device 130 some information in the user account corresponding to the matching preset image feature values. It is returned to the processor 140, such as but not limited to, the preset user image and/or the user's name to provide the current user to select one of the groups as the user account of the current user.

After the user confirms that the user account found by the identity management server is correct, the user can further select the financial service he wants to execute. Therefore, in step S230, the processor 140 also receives a designated service item through the input device 110, such as, but not limited to, "withdrawal" and the amount of "5000", or "transfer" and the amount of "7000".

In step S240, the processor 140 transmits the designated service item to the identity management server, and the identity management server executes the identity verification procedure according to the preset verification method corresponding to the user account. For example, if the current user wants to "withdraw" and the amount is "5000", the processor 140 will send this information to the identity management server. The identity management server will push the specified service items to the device bound to the user account, and execute the identity verification process according to the default verification method of the corresponding user account. Specifically, the identity verification program corresponds to at least one of the device-side biometric verification program, the first push verification program, the second push verification program, the account password verification program, and the operating machine password input verification program.

Specifically, users will receive push messages on their bound devices, such as "You performed a withdrawal of 5000 on 2019/08/01, please complete the verification method to complete the transaction." Then, the identity management server will execute the corresponding identity verification procedure according to the default verification method.

Specifically, the identity verification program includes, for example, a device-side biometric verification program, a first push verification program, a second push verification program, an account password verification program, or an operating machine password input verification program. First, regarding the device-side biometric verification procedure, the user sets personal biometrics on the device in advance, such as facial features, fingerprint features, iris features, and so on. When the identity management server pushes the specified service item to the device bound to the user account, the biometric verification process will be activated at the same time, that is, push the biometric verification request to the application of the device bound to the user account. , The user must open the application to bring out the device verification process, and then allow the user to perform biometric identification. If the result of biometric identification is that the user is a legitimate user, the device bound to the user account will reply "Verification OK" to the identity management server, and the identity management server will determine that the user has completed the identity verification process. And send a notification message that the identity verification process has been completed to the financial service device 100.

Regarding the first push verification procedure, when the identity management server pushes the specified service to the device bound to the user account, the first push verification procedure is also activated, that is, the push verification message is bound to the corresponding user account. In the application of the specified device. At this time, the user must open the application and click the "Confirm" button on the verification message. The device bound to the user account will return a reply message to the identity management server according to the "Confirm" button. After receiving the reply message, the identity management server will determine that the user has completed the identity verification process and send the identity verification A notification message that the procedure has been completed is sent to the financial service device 100.

Regarding the second push verification process, when the identity management server pushes the designated service to the device bound to the user account, the second push verification process will be activated at the same time, that is, the identity management server will push the verification number at the same time To the application program of the device bound to the corresponding user account and the financial service device 100. At this time, the user must enter the verification number displayed in the application into the financial service device 100. When the financial service device 100 determines that the number entered by the user is consistent with the verification number sent by the identity management server, the user is judged to be legitimate Of users.

Regarding the account and password verification process, when the identity management server pushes the specified service to the device bound to the user account, the account password verification process will be activated at the same time, that is, the identity management server will push the password input request to the corresponding use In the application of the device bound to the user’s account. At this time, the user must enter his registered password in the application and send it back to the identity management server. When the identity management server determines that the entered number matches the default password of the corresponding user account, that is, the number entered by the user is correct, the identity management server will determine that the user has completed the identity verification process and send a notification that the identity verification process has been completed Message to the financial service device 100.

The password input verification of the operating machine is that the user enters his registered password in the ATM, and the ATM sends the entered number to the identity management server. The identity management server determines whether the entered number corresponds to the user account number. Set the password to be consistent. When the automatic teller machine determines that the password input number is consistent with the preset password corresponding to the user account, it determines that the user has completed the identity verification process, and sends a notification message that the identity verification process has been completed to the financial service device 100. It should be noted that, in the embodiment of the present invention, the above-mentioned identity verification procedure is not limited.

In step S250, the processor 140 also provides services corresponding to the designated service items when determining that the identity verification procedure has been completed. After receiving the notification message sent by the identity management server, or the processor 140 determines that the identity verification process has been completed by itself, the processor 140 will provide the user with a cash withdrawal of 5000 yuan.

It is worth mentioning that in the present invention, since the user’s related data is built in the identity management server, when using various types of services in the future, the user will no longer need to enter the account number, but will be transferred to the user. The face of is used as the basis for reading the user’s identity. After reading the user's identity, the user needs to perform a second level of verification to ensure that the user's identity is safe. In this way, not only can the facial feature recognition value be directly related to the user, but the lack of fineness of the facial feature recognition value can be compensated by the second layer of verification, thereby maintaining safety in the situation Next, the fineness of image recognition and processing time are balanced.

In summary, the financial service device with identity verification and the method for providing financial services of the present invention provide users with easier access to various types of financial services without having to carry an ATM card or recite the account number. In particular, before conducting financial transactions, the financial service provider must capture the user's current image and analyze the user's image. Therefore, compared to the use of the device’s own biometric technology, the connection between the “financial service provider” and the “binding device” has been upgraded from the “financial service provider” to the “financial service provider” and the user himself. The connection to improve the security of the transaction. In addition, the facial recognition feature values used in the present invention have already converted the user's facial features into actual parameters. Therefore, the facial recognition feature values will be used in the follow-up to recognize the user's facial image. At this time, the identity management server does not necessarily need to obtain the complete facial image of the user, it only needs to know the facial recognition feature value corresponding to the facial image to be recognized, and then it can filter out the facial recognition feature values stored in it Corresponding to the user account of the facial image to be recognized, the network resources and time spent in packet transmission are simplified, and the time spent in image comparison is also simplified.

Although the present invention has been disclosed in the above embodiments, it is not intended to limit the present invention. Anyone with ordinary knowledge in the relevant technical field can make some changes and modifications without departing from the spirit and scope of the present invention. The scope of protection of the present invention shall be determined by the scope of the attached patent application.

100: Financial Services Device 110: Input device 120: Image capture device 130: Communication device 140: processor S210~S250: steps

FIG. 1 is a schematic structural diagram of a financial service device according to an embodiment of the invention. FIG. 2 is a schematic flowchart of a method for providing financial services according to an embodiment of the present invention.

100: Financial Services Device

110: Input device

120: Image capture device

130: Communication device

140: processor

Claims (10)

A financial service device providing identity verification function, including: Input device for receiving input operations; Image capturing device for capturing current image; A communication device to connect to the identity management server; and The processor is connected to the image capturing device and the communication device, wherein, The processor receives a service request, and in response to the service request, activates the image capturing device to obtain the current image, The processor also transmits current image information corresponding to the current image to the identity management server through the communication device to obtain a user account corresponding to the current image. The processor also receives a designated service item through the input device, The processor also transmits the designated service item to the identity management server, so that the identity management server executes an identity verification procedure according to the default verification method of the corresponding user account, The processor also provides services corresponding to the designated service item when judging that the identity verification procedure has been completed. For example, in the financial service device described in item 1 of the scope of patent application, when the identity management server receives the current image information, it compares the current image information with a preset image characteristic value to match the current image information The user account corresponding to the preset image characteristic value of is used as the user account of the current image, and is returned to the processor through the communication device, Wherein, the current image information includes at least one of the current image and a current image feature value. For the financial service device described in claim 1, wherein the processor also obtains a plurality of user images through the image capturing device, so as to perform a living body identification process based on the plurality of user images. For the financial service device described in item 3 of the scope of patent application, the living body identification procedure further includes: According to the time series of the multiple user images, the processor recognizes whether there is a dynamic change in the specific part of the multiple user images, and determines the dynamic change when the specific part of the multiple user images dynamically changes. Multiple user images conform to the in vivo identification process. For example, the financial service device described in item 1 of the scope of patent application, wherein the identity verification program corresponds to the device-side biometric verification program, the first push verification program, the second push verification program, the account password verification program, and the operating machine password Enter at least one of the verification procedures, Wherein, in the device-side biometric verification procedure, the identity management server pushes the biometric verification request to the device bound to the corresponding user account, and receives the device bound to the user account and the biometric verification result is When replying to the message correctly, it is determined that the user has completed the identity verification process, Wherein, in the first push verification procedure, when the identity management server pushes the verification message to the device bound to the corresponding user account, and receives a reply message from the device bound to the user account, Determine that the user has completed the identity verification process, Wherein, in the second push verification procedure, the identity management server pushes the verification message to the device bound to the corresponding user account and the processor, wherein the verification message includes a verification number, and the processing When the device receives the input number corresponding to the verification number through the input device, it determines that the user has completed the identity verification procedure, Wherein, in the account password verification procedure, the identity management server pushes a password input request to the device bound to the corresponding user account, and when it receives the input password from the device bound to the user account, it judges Whether the input password matches the default password of the corresponding user account, and when the input password matches the default password of the user account, it is determined that the user has completed the identity verification procedure, Wherein, in the password input verification procedure of the operating machine, the input password is received by the input device and transmitted to the identity management server by the communication device, and the identity management server determines whether the input password is the same as that of the identity management server. The default password corresponding to the user account is consistent, and when the input password is consistent with the default password corresponding to the user account, it is determined that the user has completed the identity verification procedure. A method for providing financial services is suitable for a financial service device, and the method includes: Receiving a service request, in response to the service request, activating an image capturing device to obtain the current image; Send the current image information corresponding to the current image to an identity management server to obtain the user account corresponding to the current image; Receive a designated service item; Send the designated service item to the identity management server, and the identity management server will execute an identity verification procedure according to the default verification method of the corresponding user account; and When it is judged that the identity verification procedure has been completed, the service corresponding to the designated service item is provided. For example, the method described in item 6 of the scope of patent application, wherein the step of transmitting the current image information corresponding to the current image to the identity management server to obtain the user account corresponding to the current image further includes: When the identity management server receives the current image information, it compares the current image information with a preset image feature value, and uses the user account corresponding to the preset image feature value that matches the current image information as the The user account of the current image, Wherein, the current image information includes at least one of the current image and a current image feature value. The method according to item 6 of the scope of patent application, wherein the step of receiving the service request and activating the image capturing device to obtain the current image in response to the service request further includes: A plurality of user images are acquired by the image capturing device to perform a living body identification process based on the plurality of user images. As the method described in item 8 of the scope of patent application, the living body identification procedure further includes: According to the time series of the multiple user images, identify whether there is a dynamic change in a specific part of the multiple user images, and determine the multiple users when the specific part of the multiple user images dynamically changes The image conforms to the living body recognition procedure. For example, the method described in item 6 of the scope of patent application, wherein the identity verification procedure corresponds to the device-side biometric verification procedure, the first push verification procedure, the second push verification procedure, the account password verification procedure, and the operation machine password input verification At least one of the procedures, Wherein, in the device-side biometric verification procedure, the identity management server pushes the biometric verification request to the device bound to the corresponding user account, and receives the biometric verification result from the device bound to the user account When it is the correct reply message, it is determined that the user has completed the identity verification process, Wherein, in the first push verification procedure, when the identity management server pushes the verification message to the device bound to the corresponding user account, and receives a reply message from the device bound to the user account To determine that the user has completed the identity verification process, Wherein, in the second push verification procedure, the identity management server pushes the verification message to the device bound to the corresponding user account and the processor, wherein the verification message includes a verification number, and When the financial service device receives the input number corresponding to the verification number through the input device, it determines that the user has completed the identity verification procedure, Wherein, in the account password verification procedure, when the identity management server pushes a password input request to the device bound to the corresponding user account, and receives the input password from the device bound to the user account, Determine whether the input password matches the default password of the corresponding user account, and when the input password matches the default password of the user account, determine whether the user has completed the identity verification process, Wherein, in the operation machine password input verification procedure, the financial service device receives the input password and transmits it to the identity management server, and the identity management server determines whether the input password is related to the user The preset password corresponding to the account is consistent, and when the input password is consistent with the preset password corresponding to the user account, it is determined that the user has completed the identity verification procedure.

Images