CN105488377B - The production method and equipment and identity identifying method and equipment of pseudo- iris templates - Google Patents
The production method and equipment and identity identifying method and equipment of pseudo- iris templates Download PDFInfo
- Publication number
- CN105488377B CN105488377B CN201510938789.XA CN201510938789A CN105488377B CN 105488377 B CN105488377 B CN 105488377B CN 201510938789 A CN201510938789 A CN 201510938789A CN 105488377 B CN105488377 B CN 105488377B
- Authority
- CN
- China
- Prior art keywords
- iris
- image
- pseudo
- templates
- unit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 210000000554 Iris Anatomy 0.000 title claims abstract description 681
- 238000004519 manufacturing process Methods 0.000 title claims abstract description 16
- 230000002441 reversible Effects 0.000 claims abstract description 10
- 239000011159 matrix material Substances 0.000 claims description 60
- 238000003860 storage Methods 0.000 claims description 46
- 238000000605 extraction Methods 0.000 claims description 32
- 238000004891 communication Methods 0.000 claims description 27
- 238000009826 distribution Methods 0.000 claims description 18
- 238000007781 pre-processing Methods 0.000 claims description 18
- 238000000034 method Methods 0.000 claims description 15
- 238000006243 chemical reaction Methods 0.000 claims description 13
- 239000000284 extract Substances 0.000 claims description 13
- 230000002427 irreversible Effects 0.000 claims description 10
- 238000010606 normalization Methods 0.000 claims description 2
- 230000000875 corresponding Effects 0.000 description 14
- 238000005516 engineering process Methods 0.000 description 13
- 238000010586 diagram Methods 0.000 description 4
- 238000005315 distribution function Methods 0.000 description 3
- 230000004048 modification Effects 0.000 description 3
- 238000006011 modification reaction Methods 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 2
- 238000011156 evaluation Methods 0.000 description 2
- 230000002401 inhibitory effect Effects 0.000 description 2
- 230000000670 limiting Effects 0.000 description 2
- 238000003672 processing method Methods 0.000 description 2
- 230000003362 replicative Effects 0.000 description 2
- 238000005070 sampling Methods 0.000 description 2
- 241000209202 Bromus secalinus Species 0.000 description 1
- 235000004418 Durio kutejensis Nutrition 0.000 description 1
- 240000004282 Grewia occidentalis Species 0.000 description 1
- 241001479607 Iris hartwegii Species 0.000 description 1
- OKTJSMMVPCPJKN-UHFFFAOYSA-N carbon Chemical compound [C] OKTJSMMVPCPJKN-UHFFFAOYSA-N 0.000 description 1
- 239000003245 coal Substances 0.000 description 1
- 229950008597 drug INN Drugs 0.000 description 1
- 239000004744 fabric Substances 0.000 description 1
- 235000012054 meals Nutrition 0.000 description 1
- 230000002829 reduced Effects 0.000 description 1
Abstract
The production method and equipment and identity identifying method and equipment, the production method of pseudo- iris templates for providing a kind of pseudo- iris templates include：(A) iris image of user is acquired, and the iris image of acquisition is pre-processed, to obtain iris comparison area；(B) image of predetermined number subregion is chosen from the iris comparison area；(C) image of the predetermined number subregion is encrypted respectively using non-reversible algorithm；(D) image of predetermined number subregion described in iris comparison area is replaced by encrypted image, to generate pseudo- iris image；(E) pseudo- iris feature code is extracted from the pseudo- iris image to generate pseudo- iris templates.Above-mentioned puppet iris templates reflection is not real complete iris, can effectively protect individual privacy, and improves the safety of iris recognition.
Description
Technical field
All things considered of the present invention is related to iris recognition technology, more particularly, is related to a kind of generation side of pseudo- iris templates
Method and equipment, and the identity identifying method based on the puppet iris templates and equipment.
Background technology
With the development of social economy and science and technology, biometrics identification technology comes into people’s lives more and more
In, there is application in various aspects such as airport security, office attendance, household gate inhibition, bank services, is with a wide range of applications
And great economic benefit, become important technology direction.Iris recognition technology is special using the iris of people in biometrics identification technology
Sign is used as identification foundation, has the advantages that accuracy is high, application potential is very huge, in fields such as coal, bank, prisons
It is applied successfully.
With the development of electronic information technology, the occasion applied in life after iris recognition technology will be more extensive,
Such as iris information is acquired when moving in hotel, customer can open door without CUSTOM HOUSE HOTEL using itself iris during staying at an inn,
In another example customer buys the annual ticket in library or gymnasium and acquires iris information, customer can be by scanning itself iris
Enter library or gymnasium without swiping the card, in another example hospital acquires the iris information of parent, Fu Mujin after baby due
Enter infant room to need to carry out iris authentication, in another example the iris information of personnel participating in the meeting is acquired when convention is registered,
Session personnel participating in the meeting passes in and out various meeting-place by itself iris and gets various data, meal coupon etc..
Iris recognition technology is deeply applied to each place in life, also with hidden danger while bringing many convenient：
Each place all acquires the iris feature of people and is recorded with personally identifiable information binding, and the security of system in these places
Can be generally not high, iris feature is easy to be stolen or replicate, and individual privacy is caused to reveal, and more seriously criminal may
Using the iris feature false iris stolen, then pretend to be true iris to cheat important place (for example, household gate inhibition, insurance
Cabinet, bank ATM, frontier defense safety check) iris authentication system identification, to reach illegal purpose.
Invention content
Exemplary embodiment of the present invention is to provide the production method and equipment and based on should of a kind of pseudo- iris templates
The identity identifying method and equipment of pseudo- iris templates carry out false iris to reach not to avoid stealing or replicating personal iris feature
The hidden danger of method purpose.
One side according to an exemplary embodiment of the present invention provides a kind of production method of irreversible pseudo- iris templates, institute
The method of stating includes：(A) iris image of user is acquired, and the iris image of acquisition is pre-processed, to obtain iris comparison
Region；(B) image of predetermined number subregion is chosen from the iris comparison area；(C) utilize non-reversible algorithm to described
The image of predetermined number subregion is encrypted respectively；(D) by the image of predetermined number subregion described in iris comparison area
It is replaced by encrypted image, to generate pseudo- iris image；(E) pseudo- iris feature code is extracted from the pseudo- iris image to come
Generate pseudo- iris templates.
Optionally, in step (A), pretreated step is carried out to the iris image of acquisition and may include：To the rainbow of acquisition
Film image executes following processing in order：Iris Location processing, iris image noise processed, iris effective coverage divide processing and
The normalized of iris image.
Optionally, the method can further include after step (E)：(F) the pseudo- iris templates of generation are supplied to identity
Certification terminal carries out identity identifying and authenticating so that identity authentication terminal is based on the pseudo- iris templates.
Optionally, step (A) can further include：The iris image of the user of acquisition is stored, wherein the method exists
Can further include after step (E)：(I) iris image of the user of storage is deleted.
Optionally, in step (C), using non-reversible algorithm to any figure in the image of the predetermined number subregion
It may include as the step of being encrypted：(C1) it will indicate that the first matrix conversion of P × Q of any image is the of PQ × 1
One column vector, wherein P and Q is respectively the first matrix column number and line number, and PQ is the product of P and Q, indicates the first column vector
Columns；(C2) random matrix of PQ × PQ is generated, and the second of PQ × 1 is obtained according to the random matrix of generation and the first column vector
Column vector, wherein the element in the random matrix obeys the random distribution that mean value is 1/PQ；(C3) the random of PQ × 1 is generated
Vector, and the third column vector of PQ × 1 is obtained according to the random vector of generation and the second column vector, wherein the random vector
In element obey mean value be 0 random distribution；(C4) the third column vector of PQ × 1 is converted to the second matrix of P × Q,
In, the second matrix of the P × Q indicates the encrypted any image.
Optionally, in step (C2), the second column vector of PQ × 1 can be obtained using following formula,
X2=AX1
Wherein, X2For the second column vector of PQ × 1, A is the random matrix of PQ × PQ, X1For the first column vector of PQ × 1.
Optionally, in step (C3), the third column vector of PQ × 1 can be obtained using following formula,
X3=X2+z
Wherein, X3For the third column vector of PQ × 1, z is the random vector of PQ × 1, X2For the second column vector of PQ × 1.
Another aspect according to an exemplary embodiment of the present invention provides a kind of generation equipment of irreversible pseudo- iris templates,
The equipment includes：Iris image acquiring unit acquires the iris image of user；Image pre-processing unit, to the iris of acquisition
Image is pre-processed, to obtain iris comparison area；Image selection unit chooses predetermined from the iris comparison area
The image of number subregion；Encryption unit is encrypted the image of the predetermined number subregion using non-reversible algorithm respectively；
Image replacing unit is replaced the image of predetermined number subregion described in iris comparison area by encrypted image, with
Generate pseudo- iris image；Template generation unit extracts pseudo- iris feature code to generate pseudo- iris mould from the pseudo- iris image
Plate.
Optionally, image pre-processing unit can execute the iris image of acquisition in order following processing：At Iris Location
Reason, iris image noise processed, the normalized of iris effective coverage division processing and iris image.
Optionally, the equipment can further include：The pseudo- iris templates of generation are supplied to authentication whole by communication unit
End carries out identity identifying and authenticating so that identity authentication terminal is based on the pseudo- iris templates.
Optionally, the equipment can further include：Storage unit stores the iris image of the user of acquisition；Image
Deleting unit, after template generation unit generates pseudo- iris templates, by the iris image of the user stored in storage unit into
Row is deleted.
Optionally, encryption unit may include：First matrix conversion unit, will indicate the first of P × Q of any image
Matrix conversion is the first column vector of PQ × 1, wherein P and Q is respectively the first matrix column number and line number, and PQ is multiplying for P and Q
Product indicates the columns of the first column vector；Primary vector generation unit, generate PQ × PQ random matrix, and according to generation with
Machine matrix and the first column vector obtain the second column vector of PQ × 1, wherein it is 1/ that the element in the random matrix, which obeys mean value,
The random distribution of PQ；Secondary vector generation unit generates the random vector of PQ × 1, and according to the random vector of generation and second
Column vector obtains the third column vector of PQ × 1, wherein the element in the random vector obeys the random distribution that mean value is 0；The
The third column vector of PQ × 1 is converted to the second matrix of P × Q by two matrix conversion units, wherein the second square of the P × Q
The encrypted any image of matrix representation.
Optionally, primary vector generation unit can obtain the second column vector of PQ × 1 using following formula,
X2=AX1
Wherein, X2For the second column vector of PQ × 1, A is the random matrix of PQ × PQ, X1For the first column vector of PQ × 1.
Optionally, secondary vector generation unit can obtain the third column vector of PQ × 1 using following formula,
X3=X2+z
Wherein, X3For the third column vector of PQ × 1, z is the random vector of PQ × 1, X2For the second column vector of PQ × 1.
It is according to an exemplary embodiment of the present invention in another aspect, provide it is a kind of based on the pseudo- iris templates of above-mentioned generation come into
The identity identifying method of row iris recognition, the identity identifying method include：(a) iris image of user is acquired, and to acquisition
Iris image pre-processed, to obtain iris comparison area；(b) iris feature code is extracted from the iris comparison area,
And calculate the matching degree of the iris feature code of extraction and the pseudo- iris feature code of the pseudo- iris templates of storage；(c) it will be calculated
Matching degree be compared with matching threshold；If (d) matching degree is less than matching threshold, the authentication of the user is lost
It loses；If (e) matching degree is not less than matching threshold, the authentication of the user is passed through.
Optionally, the matching threshold can be obtained by following steps：Added according to non-in Insurance factor, pseudo- iris templates
Close iris image accounts for ratio and the initial matching degree of entire pseudo- iris image to obtain the matching threshold.
Optionally, matching threshold can be obtained by following formula,
K=tck0
Wherein, K is matching threshold, and t is Insurance factor, and c is that non-encrypted iris image accounts for entire pseudo- rainbow in pseudo- iris templates
The ratio of film image, k0For initial matching degree.
Optionally, step (a) can further include：The iris image of the user of acquisition is stored, wherein the identity is recognized
Card method can further include：After completing authentication to user, the iris image of the user of storage is deleted.
It is according to an exemplary embodiment of the present invention in another aspect, provide it is a kind of based on the pseudo- iris templates of above-mentioned generation come into
The ID authentication device of row iris recognition, the ID authentication device include：Iris capturing instrument and certification terminal, iris capturing instrument
Including iris image acquiring unit, image pre-processing unit, iris feature code extraction unit and the first communication unit, certification terminal
Including the second communication unit, database, calculator, comparator and controller, wherein iris image acquiring unit acquires user's
Iris image, image pre-processing unit pre-process the iris image of acquisition, to obtain iris comparison area, iris feature
Code extraction unit extracts iris feature code from the iris comparison area, and the first communication unit carries iris feature code extraction unit
The iris feature code taken is sent to the second communication unit, the second communication unit by the iris feature code of reception be sent to database with
It being stored, calculator calculates the matching degree of the iris feature code of extraction and the pseudo- iris feature code of the pseudo- iris templates of storage,
The matching degree being calculated is compared by comparator with matching threshold, controller control pair when matching degree is less than matching threshold
The authentication of the user fails, and controls when matching degree is not less than matching threshold and passes through to the authentication of the user.
Optionally, the matching threshold can be obtained by following steps：Added according to non-in Insurance factor, pseudo- iris templates
Close iris image accounts for ratio and the initial matching degree of entire pseudo- iris image to obtain the matching threshold.
Optionally, matching threshold can be obtained by following formula,
K=tck0
Wherein, K is matching threshold, and t is Insurance factor, and c is that non-encrypted iris image accounts for entire pseudo- rainbow in pseudo- iris templates
The ratio of film image, k0For initial matching degree.
Optionally, the ID authentication device can further include：Storage unit deposits the iris image of the user of acquisition
Storage；Deleting unit deletes the iris image of the user of storage unit storage after completing authentication to user.
Above-mentioned puppet iris templates and its identity identifying method based on the puppet iris templates, only store the pseudo- iris mould of user
Plate does not preserve the iris image and iris feature code of user, can effectively protect individual privacy, to improve the safety of iris recognition
Property.
Description of the drawings
Fig. 1 shows the flow chart of the production method of irreversible pseudo- iris templates according to an exemplary embodiment of the present invention；
Fig. 2 shows iris comparison area according to an exemplary embodiment of the present invention and the schematic diagrames of the subregion of selection；
Fig. 3 shows the step that the image to any subregion in Fig. 1 according to an exemplary embodiment of the present invention is encrypted
Rapid flow chart；
Fig. 4 shows the structure chart of the generation equipment of irreversible pseudo- iris templates according to an exemplary embodiment of the present invention；
Fig. 5 shows the structure chart of encryption unit shown in Fig. 4 according to an exemplary embodiment of the present invention；
Fig. 6 show the pseudo- iris templates that the method according to an exemplary embodiment of the present invention based on described in Fig. 1 generates come into
The flow chart of the identity identifying method of row iris recognition；
Fig. 7 show the pseudo- iris templates that the equipment according to an exemplary embodiment of the present invention based on described in Fig. 4 generates come into
The structure chart of the ID authentication device of row iris recognition；
Fig. 8 shows the comparison diagram of pseudo- iris image and iris image to be identified according to an exemplary embodiment of the present invention；
Fig. 9 show the pseudo- iris templates of generation according to an exemplary embodiment of the present invention and based on the puppet iris templates come into
The schematic diagram of the authentication of row iris recognition.
Specific implementation mode
Exemplary embodiment of the present invention will now be described in detail, examples of the embodiments are shown in the accompanying drawings, wherein phase
Same label refers to identical component always.
Fig. 1 shows that the production method of irreversible pseudo- iris templates according to an exemplary embodiment of the present invention is (hereinafter referred to as pseudo-
Iris templates production method) flow chart.
Referring to Fig.1, in step slo, the iris image of user is acquired, and the iris image of acquisition is pre-processed,
To obtain iris comparison area.
Particularly, multiple iris images that can acquire user in step slo are chosen from multiple described iris images
Then one iris image for meeting identification requirement carries out the iris image of selection as the iris image for carrying out subsequent processing
Pretreatment, to obtain iris comparison area.For example, quality evaluation can be carried out to multiple described iris images, to select one
Meet the iris image that identification requires.Here, it should be appreciated that the selection mark of iris image can be determined according to the common sense of this field
Standard, the present invention is to this without limiting.
It may include as an example, carrying out pretreated step to the iris image of acquisition：The iris image of acquisition is pressed suitable
Sequence executes following processing：Iris Location processing, iris image noise processed, iris effective coverage divide processing and iris image
Normalized.Here, have using existing various Iris Location processing methods, iris image method for processing noise, iris
The normalization processing method of region division processing method and iris image is imitated to handle the iris image of acquisition, for example,
Daugman methods can be used to carry out the normalized of iris image, this method can be by Iris Location treated circular ring shape
Image is converted to rectangular image by polar coordinate transform, and to obtain the iris comparison area of a rectangle, the present invention is to this portion
The content divided repeats no more.
Optionally, pseudo- iris templates production method according to an exemplary embodiment of the present invention can further include：To the use of acquisition
The iris image at family is stored, and correspondingly, the iris comparison area obtained later is pre-processed to the iris image of selection
Image also stored.
In step S20, the image of predetermined number subregion is chosen from the iris comparison area.
Here, by taking iris comparison area is rectangle as an example, it is assumed that the iris comparison area is the two dimensional image of M × N, and M is
The number of pixel on the length direction of two dimensional image, N is the number of the pixel in the width direction of two dimensional image, from M
The image that four corners of rectangle are chosen in the two dimensional image of × N, to obtain the image S of the subregion on four corners1~S4,
Fig. 2 shows iris comparison area according to an exemplary embodiment of the present invention and the schematic diagrames of the subregion of selection.As an example,
S1~S4In any subregion image size be W × T, W be any subregion image length direction on picture
The number of vegetarian refreshments, T are the number of the pixel in the width direction of the image of any subregion, wherein W=M/a, T=
N/a, a>2, a be the sampling ratio factor.
In step s 30, the image of the predetermined number subregion is encrypted respectively using non-reversible algorithm.
Referring to Fig. 3 and combine in step S20 using iris comparison area as the example of rectangle, to be described in detail to appointing
The step of image of one subregion is encrypted.
Fig. 3 shows the step that the image to any subregion in Fig. 1 according to an exemplary embodiment of the present invention is encrypted
Rapid flow chart.
With reference to Fig. 3, in step S301, it will indicate that the first matrix conversion of P × Q of any image is PQ × 1
First column vector.Here, P and Q is respectively the first matrix column number and line number, and PQ is the product of P and Q, indicates the first column vector
Columns.
In step s 302, the random matrix of PQ × PQ is generated, and is obtained according to the random matrix of generation and the first column vector
To the second column vector of PQ × 1.For example, the random matrix of generation and first row multiplication of vectors can be obtained the second column vector,
Here, the element in the random matrix obeys the random distribution that mean value is 1/PQ.As an example, mean value is random point of 1/PQ
Cloth function can be Gaussian Profile, be uniformly distributed or Poisson distribution.
Optionally, the second column vector of PQ × 1 can be obtained using following formula,
X2=AX1 (1)
In formula (1), X2For the second column vector of PQ × 1, A is the random matrix of PQ × PQ, X1For the first row of PQ × 1
Vector.
In step S303, the random vector of PQ × 1 is generated, and is obtained according to the random vector of generation and the second column vector
The third column vector of PQ × 1.For example, the random vector of generation and secondary series addition of vectors can be obtained third column vector, this
In, the element in the random vector obeys the random distribution that mean value is 0.As an example, the probability distribution function that mean value is 0 can
For Gaussian Profile, it is uniformly distributed or Poisson distribution.
Optionally, the third column vector of PQ × 1 can be obtained using following formula,
X3=X2+z (2)
In formula (2), X3For the third column vector of PQ × 1, z is the random vector of PQ × 1, X2For PQ × 1 secondary series to
Amount.
In step s 304, the third column vector of PQ × 1 is converted to the second matrix of P × Q.Here, the P × Q
Second matrix indicates the encrypted any image, column vector can be converted to matrix using existing various methods.
On the one hand the step of above-mentioned image to any subregion is encrypted can ensure that ciphering process is not mathematically not
Reversible, on the other hand since the element in random matrix obeys the random distribution that mean value is 1/PQ, the element in random vector
The random distribution that mean value is 0 is obeyed, can ensure that the gross energy of the image of encrypted subregion is basically unchanged, that is, after encryption
All subregion image the gray value of the image of summation (or mean value) and all subregion before encrypting that is added of gray value
The summation (or mean value) of addition is basically unchanged, so that the applicability of the extraction of subsequent iris feature and matching algorithm is protected
Barrier.
For example, it is assumed that the image of all subregion of selection is not encrypted, but it is straight to the image of all subregion
Filling 0 is connect, is no doubt simple and irreversible, but for being 0 image entirely, it is non-during iris feature extraction and matching primitives
Often it is susceptible to problem；If the image to all subregion adds random noise, exists and pass through Denoising Algorithm restored image
Risk；If simply abandoning the image of (that is, hollow out, delete) all subregion, iris feature code is extracted from remaining image,
The follow-up accuracy for carrying out authentication identification can be reduced.
Return Fig. 1, in step s 40, by the image of predetermined number subregion described in iris comparison area by encrypting after
Image replace, to generate pseudo- iris image.For example, can the image of encrypted all subregion be replaced by iris ratio respectively
To the image S of the subregion of corresponding position in region1~S4, to generate pseudo- iris image.
In step s 50, pseudo- iris feature code is extracted from the pseudo- iris image to generate pseudo- iris templates.Here,
The method for extracting pseudo- iris feature code from the pseudo- iris image to generate pseudo- iris templates is the common knowledge of this field, this
Invention repeats no more the content of this part.
Here, it should be appreciated that the pseudo- rainbow that pseudo- iris templates production method according to an exemplary embodiment of the present invention can be generated
Film template is supplied to external identity authentication terminal, and identity is carried out so that external identity authentication terminal is based on the puppet iris templates
Identify certification.
In one example, pseudo- iris templates production method according to an exemplary embodiment of the present invention can further include：It will give birth to
At pseudo- iris templates be supplied to identity authentication terminal, carry out identity knowledge so that identity authentication terminal is based on the pseudo- iris templates
Not certification.
In the case, pseudo- iris templates production method according to an exemplary embodiment of the present invention can further include：It is generating
After pseudo- iris templates, the iris image of the user of storage is deleted, correspondingly, to the figure of the iris comparison area of storage
As will also delete.In this way, the pseudo- iris templates of user are only stored, it is any relevant with personal iris feature without storing
Image, to avoiding being stolen or replicate, effective protection individual privacy.
In another example, pseudo- iris templates production method according to an exemplary embodiment of the present invention can further include：From rainbow
Iris feature code is extracted in film comparison area, and the iris feature code of extraction and pseudo- iris templates are bound.At this point, can incite somebody to action
Pseudo- iris templates and the iris feature code bound with pseudo- iris templates are supplied to identity authentication terminal, for identity authentication terminal
Identity identifying and authenticating is carried out based on the pseudo- iris templates and with the iris feature code of pseudo- iris templates binding.
In the case, identity can be supplied to by pseudo- iris templates and with the iris feature code of pseudo- iris templates binding
After certification terminal, the iris image of the user of storage is deleted.Correspondingly, to the image of the iris comparison area of storage
And it will also be deleted with the iris feature code of pseudo- iris templates binding.
In addition, in another example in step slo acquisition user multiple iris images in the case of, according to this hair
The pseudo- iris templates production method of bright exemplary embodiment can further include：First, it is selected from multiple iris images described in acquisition
At least one iris image is taken, and an at least iris image is pre-processed, to obtain and an at least rainbow
The corresponding at least one iris comparison area of film image.Here, an at least iris image, which does not include, is used for
Generate the iris image of pseudo- iris image.Then, iris feature code is extracted from least one iris image of selection, this
In, when the iris image of selection is multiple, iris feature code can be extracted from the multiple iris image respectively, further
Ground is calculated from the iris feature code extracted at least one iris image and the rainbow extracted from the iris comparison area
The matching degree of film condition code, using calculated matching degree as initial matching degree, finally by initial matching degree and pseudo- iris templates
It is bound.Here, it should be appreciated that if the iris image chosen is multiple, initial matching degree can be from each iris image
The average value of the matching degree of the iris feature code of middle extraction and the iris feature code extracted from the iris comparison area.
At this point, authentication can be supplied to whole by pseudo- iris templates and with the initial matching degree of pseudo- iris templates binding
End carries out identity knowledge for identity authentication terminal based on the pseudo- iris templates and with the initial matching degree of pseudo- iris templates binding
Not certification.
In the case, identity can be supplied to by pseudo- iris templates and with the initial matching degree of pseudo- iris templates binding
After certification terminal, multiple iris images of the user of storage are deleted.Correspondingly, at least one rainbow of storage
The image of film comparison area will also be deleted.
Fig. 4 shows that the generation equipment of irreversible pseudo- iris templates according to an exemplary embodiment of the present invention is (hereinafter referred to as pseudo-
Iris templates generate equipment) structure chart.
As shown in figure 4, puppet iris templates generation equipment according to an exemplary embodiment of the present invention includes：Iris image acquiring
Unit 10, image pre-processing unit 20, image selection unit 30, encryption unit 40, image replacing unit 50 and template generation list
Member 60.
Particularly, iris image acquiring unit 10 acquires the iris image of user.Here, iris image acquiring unit 10
The iris image of multiple users can be acquired, iris image acquiring unit 10 can be the existing various iris images for acquiring user
Device.
Puppet iris templates according to an exemplary embodiment of the present invention, which generate equipment, to further include：Storage unit, to iris figure
As the iris image for the user that collecting unit 10 acquires stores.
Image pre-processing unit 20 pre-processes the iris image of acquisition, to obtain iris comparison area.
Optionally, in the case where iris image acquiring unit 10 acquires the iris image of multiple users, image preprocessing
Unit 20 can choose one from multiple described iris images and meet the iris image for identifying requirement as progress subsequent processing
Then iris image pre-processes the iris image of selection, to obtain iris comparison area.For example, can to it is described multiple
Iris image carries out quality evaluation, meets the iris image that identification requires to select one.Here, it should be appreciated that can be according to this
The common sense in field determines the selection standard of iris image, and the present invention is to this without limiting.
As an example, image pre-processing unit 20 can execute the iris image of acquisition in order following processing：Iris is fixed
Position processing, iris image noise processed, the normalized of iris effective coverage division processing and iris image.Here, image
Pretreatment unit 20 can be existing various executable Iris Location processing, iris image noise processed, iris effective coverage stroke
Divide the image preprocess apparatus of the normalized of processing and iris image.
Optionally, storage unit is also stored after image pre-processing unit 20 pre-processes the iris image of acquisition
Obtained iris comparison area.
Image selection unit 30 chooses the image of predetermined number subregion from the iris comparison area.
Image selection unit 30 chooses the specific of the image of the predetermined number subregion from the iris comparison area
Mode can refer to the above concrete mode with the step S20 in Fig. 1, and details are not described herein.
Encryption unit 40 is encrypted the image of the predetermined number subregion using non-reversible algorithm respectively.
The process that the image of any subregion is encrypted is described in detail referring to Fig. 5.
Fig. 5 shows the structure chart of encryption unit shown in Fig. 4 40 according to an exemplary embodiment of the present invention.
As shown in figure 5, encryption unit shown in Fig. 4 according to an exemplary embodiment of the present invention may include：First matrix turns
Change unit 401, primary vector generation unit 402, secondary vector generation unit 403 and the second matrix conversion unit 404.
Particularly, the first matrix conversion for the P × Q for indicating any image is by the first matrix conversion unit 401
First column vector of PQ × 1.Here, P and Q is respectively the first matrix column number and line number, and PQ is the product of P and Q, indicates first
The columns of column vector.
Primary vector generation unit 402 generates the random matrix of PQ × PQ, and according to the random matrix and first row of generation
Vector obtains the second column vector of PQ × 1.For example, primary vector generation unit 402 can be by the random matrix and first row of generation
Multiplication of vectors obtains the second column vector, and here, the element in the random matrix obeys the random distribution that mean value is 1/PQ.Make
For example, the probability distribution function that mean value is 1/PQ can be Gaussian Profile, be uniformly distributed or Poisson distribution.
The concrete mode that primary vector generation unit 402 generates the second column vector can refer to the above step with Fig. 3
The concrete mode of S302, details are not described herein.
Secondary vector generation unit 403 generates the random vector of PQ × 1, and according to the random vector of generation and secondary series to
Measure the third column vector of PQ × 1.For example, secondary vector generation unit 403 can by the random vector of generation and secondary series to
The Calais Liang Xiang obtains third column vector, and here, the element in the random vector obeys the random distribution that mean value is 0.As showing
Example, the probability distribution function that mean value is 0 can be Gaussian Profile, be uniformly distributed or Poisson distribution.
The concrete mode that secondary vector generation unit 403 generates third column vector can refer to the above step with Fig. 3
The concrete mode of S303, details are not described herein.
The third column vector of PQ × 1 is converted to the second matrix of P × Q by the second matrix conversion unit 404.Here, the P
The second matrix of × Q indicates the encrypted any image, and the second matrix conversion unit 404 can be existing various can will arrange
Vector is converted to the device of matrix.
Fig. 4 is returned to, image replacing unit 50 is by the image of predetermined number subregion described in iris comparison area by encrypting
Image afterwards replaces, to generate pseudo- iris image.For example, image replacing unit 50 can be by the image of encrypted all subregion
The image of the subregion of corresponding position in iris comparison area is replaced respectively, to generate pseudo- iris image.
Template generation unit 60 extracts pseudo- iris feature code to generate pseudo- iris templates from the pseudo- iris image.This
In, the process that template generation unit 60 extracts pseudo- iris feature code to generate pseudo- iris templates from the pseudo- iris image is this
The common knowledge in field, the present invention repeat no more the content of this part.
Here, it should be appreciated that pseudo- iris templates according to an exemplary embodiment of the present invention can be generated the pseudo- rainbow that equipment generates
Film template is supplied to external identity authentication terminal, and identity is carried out so that external identity authentication terminal is based on the puppet iris templates
Identify certification.
In one example, pseudo- iris templates according to an exemplary embodiment of the present invention, which generate equipment, to further include：Communication
The pseudo- iris templates of generation are supplied to identity authentication terminal by unit, so that identity authentication terminal is based on the pseudo- iris templates
Carry out identity identifying and authenticating.
In the case, pseudo- iris templates according to an exemplary embodiment of the present invention, which generate equipment, to further include：Image is deleted
Except unit, after template generation unit 60 generates pseudo- iris templates, by the iris image of the user stored in storage unit into
Row is deleted, and correspondingly, image-erasing unit will also delete the image of the iris comparison area of storage.In this way, pseudo- iris
Template generates the pseudo- iris templates that user is just only stored in equipment, without storing any and relevant figure of personal iris feature
Picture, to avoiding being stolen or replicate, effective protection individual privacy.
In another example, pseudo- iris templates according to an exemplary embodiment of the present invention, which generate equipment, to further include：Iris
Condition code extraction unit extracts iris feature code from iris comparison area；Binding unit, by the iris feature code of extraction and puppet
Iris templates are bound.At this point, communication unit can be by pseudo- iris templates and the iris feature code bound with pseudo- iris templates
It is supplied to identity authentication terminal, the iris for identity authentication terminal based on the pseudo- iris templates and with the binding of pseudo- iris templates
Condition code carries out identity identifying and authenticating.
In the case, image-erasing unit can be bound in communication unit by pseudo- iris templates and with pseudo- iris templates
Iris feature code is supplied to after identity authentication terminal, and the iris image of the user stored in storage unit is deleted.Phase
Ying Di, iris feature code of the image-erasing unit to the image of the iris comparison area of storage and with the binding of pseudo- iris templates
It will delete.
In addition, in another example, in the case where iris image acquiring unit 10 acquires multiple iris images of user,
Puppet iris templates according to an exemplary embodiment of the present invention, which generate equipment, to further include：Selection unit and computing unit, specifically
Come, selection unit chooses at least one iris image from multiple iris images described in acquisition, and to an at least rainbow
Film image is pre-processed, to obtain at least one iris comparison area corresponding with an at least iris image
Domain.Here, an at least iris image does not include the iris image for generating pseudo- iris image.Then, iris feature
Code extraction unit extracts iris feature code from least one iris image of selection, and here, when choosing, unit selection is more
When a iris image, iris feature code extraction unit can extract iris feature code from the multiple iris image respectively, into one
Step ground, computing unit calculate the iris feature code that is extracted from least one iris image with from the iris comparison area
The matching degree of the iris feature code of middle extraction, using calculated matching degree as initial matching degree, finally, binding unit will be initial
Matching degree is bound with pseudo- iris templates.Here, it should be appreciated that if the iris image that selection unit is chosen is multiple, just
Beginning matching degree can be from the iris feature code extracted in each iris image and the matching extracted from the iris comparison area
The average value of degree.
At this point, communication unit can be supplied to identity by pseudo- iris templates and with the initial matching degree of pseudo- iris templates binding
Certification terminal is carried out for identity authentication terminal based on the pseudo- iris templates and with the initial matching degree of pseudo- iris templates binding
Identity identifying and authenticating.
In the case, image-erasing unit can by pseudo- iris templates and with pseudo- iris templates binding initial matching
Degree is supplied to after identity authentication terminal, and multiple iris images of the user of storage unit storage are deleted.Correspondingly, right
The image of at least one iris comparison area of storage will also be deleted.
Fig. 6 show the pseudo- iris templates that the method according to an exemplary embodiment of the present invention based on described in Fig. 1 generates come into
The flow chart of the identity identifying method of row iris recognition.
The iris image of user is acquired, and pre-process to the iris image of acquisition in the step s 100 with reference to Fig. 6,
To obtain iris comparison area.Here, it should be appreciated that the pre- place that the iris image of the user of acquisition is carried out when carrying out authentication
Reason mode and determine iris comparison area mode should with when generating pseudo- iris templates to the iris image of the user of acquisition into
The mode of capable pretreatment mode and determining iris comparison area is identical.
Here, the step S100 in Fig. 6 is identical as the step S10 in Fig. 1, is repeated no more to the content of this part.
In step s 200, iris feature code is extracted from the iris comparison area, and calculates the iris feature code of extraction
With the matching degree of the pseudo- iris feature code of the pseudo- iris templates of storage.Here, the puppet that the pseudo- iris templates of storage can be as shown in Figure 4
Iris templates generate equipment and generate.As an example, can be using existing various methods come special from iris comparison area extraction iris
Code is levied, in addition, can calculate the iris feature code of extraction using the existing various methods for calculating iris feature matching degrees and deposit
The matching degree of the pseudo- iris feature code of the pseudo- iris templates of storage, the present invention repeat no more the content of this part.
Optionally, identity identifying method according to an exemplary embodiment of the present invention can further include：To the rainbow of the user of acquisition
Film image is stored, and correspondingly, the iris feature code of image and extraction to iris comparison area is also stored.
In step S300, the matching degree being calculated is compared with matching threshold, that is, judge being calculated
Whether it is less than matching threshold with degree.
Optionally, the matching threshold can be obtained by following steps：Added according to non-in Insurance factor, pseudo- iris templates
Close iris image accounts for ratio and the initial matching degree of entire pseudo- iris image to obtain the matching threshold.Particularly, can lead to
It crosses and non-encrypted iris image in Insurance factor, pseudo- iris templates is accounted for the ratio of entire pseudo- iris image is multiplied with initial matching degree
To obtain the matching threshold.
In one example, the initial matching degree can rule of thumb be determined by those skilled in the art, that is, by ability
Field technique personnel it is empirically determined go out the matched estimated value of iris as initial matching degree.For example, those skilled in the art
It can be according to the matching degree of the iris feature of the iris feature and iris templates of iris image in existing iris recognition technology come really
A matched estimated value of iris is made, using the matched estimated value of the iris determined as initial matching degree.
In another example, the initial matching degree can be from external equipment (for example, puppet iris templates shown in Fig. 4 generate
Equipment) it obtains, and the initial matching degree is stored.It is generated for example, pseudo- iris templates that can be as shown in Figure 4 generate equipment
Initial matching degree, and the initial matching degree and pseudo- iris templates are bound, it is generated when from pseudo- iris templates shown in Fig. 4
When equipment obtains pseudo- iris templates, while obtaining the initial matching degree.
In another example, the initial matching degree can indicate acquisition user iris image iris feature code with and
The iris feature code of the matching degree of the iris feature code of pseudo- iris templates binding, described and pseudo- iris templates binding is for generating
The iris feature code of the iris comparison area of pseudo- iris templates.That is, can be by the iris feature code of the iris image of the user of acquisition
Matching degree with the iris feature code bound with pseudo- iris templates is as initial matching degree.
In the case, identity identifying method according to an exemplary embodiment of the present invention can further include：By initial matching degree
Bound with pseudo- iris templates, hereafter, whenever the iris feature code that the iris image calculated from the user of acquisition extracts with deposit
When the matching degree of the pseudo- iris feature code of the pseudo- iris templates of storage, the initial matching degree with pseudo- iris templates binding is all called, and
When determining matching threshold corresponding with the matching degree, matching threshold is calculated using the initial matching degree of calling.
It should be understood that identity identifying method according to an exemplary embodiment of the present invention can further include：It is utilizing and pseudo- iris mould
After the iris feature code of plate binding determines initial matching degree, the iris feature code bound with pseudo- iris templates is deleted.This
Afterwards when carrying out authentication, it is only necessary to the initial matching degree determined using the iris feature code of basis and pseudo- iris templates binding
, and no longer need the iris feature code with pseudo- iris templates binding.
Optionally, matching threshold can be obtained by following formula,
K=tck0 (3)
In formula (3), K is matching threshold, and t is Insurance factor, and c is that non-encrypted iris image accounts for entirely in pseudo- iris templates
The ratio of pseudo- iris image, that is,S1For the area of non-encrypted iris image in pseudo- iris templates, S2For entire pseudo- rainbow
The area of film image, k0For initial matching degree.As an example, Insurance factor t can rule of thumb be carried out by those skilled in the art
Setting, for example, t can be set as 0.6~0.9.Preferably, c can pass through expression formulaIt is determined, a is
The sampling ratio factor.
If matching degree is less than matching threshold, S400 is thened follow the steps：Authentication failure to the user.
If matching degree is not less than matching threshold, S500 is thened follow the steps：The authentication of the user is passed through.
It should be understood that identity identifying method according to an exemplary embodiment of the present invention can further include：Identity is being carried out to user
After certification (that is, after step S400 or step S500), the iris image of the user of storage is deleted, correspondingly,
The iris feature code of image and extraction to the iris comparison area of storage will also be deleted.
Fig. 7 show the pseudo- iris templates that the equipment according to an exemplary embodiment of the present invention based on described in Fig. 4 generates come into
The structure chart of the ID authentication device of row iris recognition.
As shown in fig. 7, the pseudo- iris templates that generate of the equipment according to an exemplary embodiment of the present invention based on described in Fig. 4 come
Carry out iris recognition ID authentication device include：Iris capturing instrument and certification terminal.Iris capturing instrument includes that iris image is adopted
Collect unit 100, image pre-processing unit 200, iris feature code extraction unit 300 and the first communication unit 400, certification terminal packet
Include the second communication unit 500, database 600, calculator 700, comparator 800 and controller 900.Here, the iris in Fig. 7 is adopted
It can be device identical with the pseudo- iris templates of Fig. 4 generation equipment to collect instrument, for example, can be asked come sharp according to the identity typing of user
Pseudo- iris templates are generated with the iris capturing instrument in the pseudo- iris templates of Fig. 4 generation equipment or Fig. 7, the then certification in Fig. 7
The authentication that terminal carries out iris recognition based on the puppet iris templates.
Here, it should be appreciated that the pseudo- iris templates that the equipment described in Fig. 4 generates are storable in the data of the certification terminal of Fig. 7
In library 600, for example, the pseudo- iris templates of generation can be sent to the second communication of the certification terminal of Fig. 7 by the communication unit in Fig. 4
The pseudo- iris templates of reception are sent to database to store by unit, the second communication unit.Correspondingly, with pseudo- iris templates
The iris feature code of binding also is stored in the database 600 of the certification terminal of Fig. 7.
Particularly, iris image acquiring unit 100 acquires the iris image of user.
Image pre-processing unit 200 pre-processes the iris image of acquisition, to obtain iris comparison area.
Here, the iris image acquiring unit 100 in Fig. 7, image pre-processing unit 200 and the iris image in Fig. 4 are adopted
Collection unit 10, image pre-processing unit 20 are identical, and the present invention repeats no more the content of this part.
Iris feature code extraction unit 300 extracts iris feature code from the iris comparison area.Here, iris feature code
Extraction unit 300 can be the existing device that iris feature code can be extracted from iris comparison area.
The iris feature code that iris feature code extraction unit extracts is sent to the second communication unit by the first communication unit 400
500.Here, between the first communication unit 400 and the second communication unit 500 can by wireless transmission method (for example, bluetooth,
WIFI, WIFI be direct-connected, NFC) and/or wire transmission mode communicated.
The iris feature code of reception is sent to database 600 to store by the second communication unit 500.
Calculator 700 calculates the matching of the iris feature code of extraction and the pseudo- iris feature code of the pseudo- iris templates of storage
Degree.Here, the pseudo- iris templates that the pseudo- iris templates of storage can be as shown in Figure 4 generate equipment and generate.As an example, calculator
700 can be the existing various devices for calculating iris feature matching degree.
The matching degree being calculated is compared by comparator 800 with matching threshold, that is, judges the matching degree being calculated
Whether matching threshold is less than.
Optionally, the matching threshold can be obtained by following steps：Added according to non-in Insurance factor, pseudo- iris templates
Close iris image accounts for ratio and the initial matching degree of entire pseudo- iris image to obtain the matching threshold.Particularly, compare
Non-encrypted iris image in Insurance factor, pseudo- iris templates can be by being accounted for the ratio of entire pseudo- iris image and initial by device 800
Matching degree is multiplied to obtain the matching threshold.
In one example, the initial matching degree can rule of thumb be determined by those skilled in the art, that is, by ability
Field technique personnel it is empirically determined go out the matched estimated value of iris as initial matching degree.For example, those skilled in the art
It can be according to the matching degree of the iris feature of the iris feature and iris templates of iris image in existing iris recognition technology come really
A matched estimated value of iris is made, using the matched estimated value of the iris determined as initial matching degree.
In another example, the initial matching degree can be from external equipment (for example, puppet iris templates shown in Fig. 4 generate
Equipment) it obtains, and the initial matching degree is stored to database 600.For example, pseudo- iris templates that can be as shown in Figure 4 generate
Equipment generate initial matching degree, and by the initial matching degree with puppet iris templates bind, when the second communication unit 500 from
When puppet iris templates shown in Fig. 4 generate equipment acquisition puppet iris templates, while obtaining the initial matching degree.
In another example, the initial matching degree can indicate acquisition user iris image iris feature code with and
The iris feature code of the matching degree of the iris feature code of pseudo- iris templates binding, described and pseudo- iris templates binding is for generating
The iris feature code of the iris comparison area of pseudo- iris templates.That is, can be by the iris feature code of the iris image of the user of acquisition
Matching degree with the iris feature code bound with pseudo- iris templates is as initial matching degree.
In the case, ID authentication device according to an exemplary embodiment of the present invention can further include：Template binding unit,
Initial matching degree and pseudo- iris templates are bound.Hereafter, whenever calculator 700 calculates the iris image from the user of acquisition
When the matching degree of the iris feature code of extraction and the pseudo- iris feature code of the pseudo- iris templates of storage, comparator 800 all call and
The initial matching degree of pseudo- iris templates binding, and when determining matching threshold corresponding with the matching degree, utilize the initial of calling
Matching degree calculates matching threshold.
Preferably, ID authentication device according to an exemplary embodiment of the present invention can further include：Deleting unit, in comparator
After 800 determine initial matching degree using the iris feature code with pseudo- iris templates binding, by what is bound with pseudo- iris templates
Iris feature code is deleted.Hereafter when carrying out authentication, it is only necessary to utilize the iris feature code of basis and pseudo- iris templates binding
The initial matching degree determined, and no longer need the iris feature code with pseudo- iris templates binding.
The concrete mode that the matching degree being calculated is compared with matching threshold can refer to above and figure by comparator 800
The concrete mode of step S300 in 6, details are not described herein.
Controller 900 matching degree be less than matching threshold when control the user authentication failure, matching degree not
The authentication that the user is controlled when less than matching threshold passes through.
It should be understood that (that is, after step S400 or step S500) after carrying out authentication to user, deleting unit
The iris image of the user of storage should be deleted, correspondingly, deleting unit to the image of the iris comparison area of storage with
And the iris feature code of extraction will also be deleted.
Fig. 8 shows the comparison diagram of pseudo- iris image and iris image to be identified according to an exemplary embodiment of the present invention.
As shown in figure 8, Fig. 8 (a) is the pseudo- iris image for generating pseudo- iris templates, the shadow region in Fig. 8 (a) is
Encryption part (that is, pseudo- iris image part), non-hatched area is unencryption part, for example, can be adopted using iris capturing instrument
Collect iris image, then the subregion in iris image is encrypted (for example, the corresponding area of four apex angles of iris image
Domain), to obtain pseudo- iris image shown in Fig. 8 (a).In the present example it is assumed that A and B are respectively the pseudo- iris figure of Fig. 8 (a)
Two regions as in, and the iris feature code corresponding to the A of region is different with the iris feature code corresponding to the B of region.
Fig. 8 (b) be iris image to be identified (for example, by iris capturing instrument acquire Lai iris image), in this example
In, it is assumed that C and D is respectively two regions in the iris image of Fig. 8 (b), and the iris feature code corresponding to the C of region and region
Iris feature code corresponding to B is identical, and the iris feature code corresponding to the D of region is identical as the iris feature code corresponding to the A of region.
In this example, when iris image due to acquiring user every time, the position of iris, angle can change, identical
Textural characteristics iris comparison area after pre-processing image in possible position it is different, for example, region A in Fig. 8 (a)
The position of region D in change in location to Fig. 8 (b), the position of the region C in Fig. 8 (a) in the change in location to Fig. 8 (b) of region B.
For shown in Fig. 8 (a), due to being that region A is encrypted so that region when generating the pseudo- iris image of Fig. 8 (a)
A, region D cannot be matched, but region B, region C or matched, if by directly by the predetermined number of selection
The image of subregion hollows out (that is, delete) to generate pseudo- iris image, that is, simply abandon four topographies, then region A and
Region C will be not present, then region A and region D, region B and region C are mismatched, matching degree be caused to decline, and it is wrong to improve knowledge
Rate.
Fig. 9 show the pseudo- iris templates of generation according to an exemplary embodiment of the present invention and based on the puppet iris templates come into
The schematic diagram of the authentication of row iris recognition.
As shown in figure 9, Fig. 9 (a)~Fig. 9 (d) shows the process for generating pseudo- iris image.
Particularly, Fig. 9 (a) is to be chosen from the iris image of multiple users of acquisition when generating pseudo- iris templates
Meet iris recognition requirement an iris image, Fig. 9 (b) is to be obtained after being pre-processed to the iris image of Fig. 9 (a)
The image of iris comparison area.In this example, iris comparison area is rectangular area.Fig. 9 (c) indicates the iris from Fig. 9 (b)
The image of predetermined number subregion is chosen in the image of comparison area.Preferably, four of the rectangular area of Fig. 9 (b) can be chosen
The image of the subregion at angle.After Fig. 9 (d) indicates that the image of four sub-regions to being chosen in Fig. 9 (c) is encrypted respectively, and
The pseudo- iris image that encrypted image is replaced into the image in Fig. 9 (b) on corresponding position and is generated.
At this point, pseudo- iris templates can be generated according to the pseudo- iris feature code extracted from the pseudo- iris image of Fig. 9 (d),
Since the parts of images in the puppet iris templates is encrypted by irreversible Encryption Algorithm, even if the puppet iris templates quilt
Criminal steals or replicates, and true complete personal iris image can not be also restored based on the puppet iris templates, therefore,
Effective protection individual privacy.
Fig. 9 (e)~Fig. 9 (f) shows the pseudo- iris templates generated based on Fig. 9 (d) to carry out the authentication of iris recognition
Process.
Particularly, Fig. 9 (e) is the iris image of the user of acquisition when carrying out authentication.Fig. 9 (f) is to Fig. 9 (e)
Iris image pre-processed after the obtained image of iris comparison area.Here, the iris image of Fig. 9 (a) is carried out pre-
The mode of processing is identical as to the iris image pretreated mode of progress of Fig. 9 (e), at this point, also obtaining the iris of a rectangle
Comparison area.Identity identifying method according to an exemplary embodiment of the present invention and equipment, can will be from the iris comparison area of Fig. 9 (f)
The feature of domain extraction is compared with the pseudo- iris feature of the pseudo- iris templates generated based on Fig. 9 (d), to determine to the user's
Whether authentication succeeds.
Puppet iris templates according to an exemplary embodiment of the present invention and the identity identifying method based on the puppet iris templates
And equipment, the puppet iris templates can be used for the authentication based on iris recognition technology of general place, but due to pseudo- iris mould
Plate is not real complete human iris, even if a human iris can not be restored to pass through important place by being stolen or replicating
Authentication, the individual privacy of can effectively protect user and the safety in utilization for improving iris recognition.
Specific illustrative embodiment is had been combined above and describes the present invention, but the implementation of the present invention is without being limited thereto.
In the spirit and scope of the present invention, various modifications can be carried out and modification by those skilled in the art, these modifications and variations will be fallen
Within the protection domain for entering claim restriction.
Claims (20)
1. a kind of production method of irreversible pseudo- iris templates, the method includes：
(A) iris image of user is acquired, and the iris image of acquisition is pre-processed, to obtain iris comparison area；
(B) image of predetermined number subregion is chosen from the iris comparison area；
(C) image of the predetermined number subregion is encrypted respectively using non-reversible algorithm；
(D) image of predetermined number subregion described in iris comparison area is replaced by encrypted image, to generate puppet
Iris image；
(E) pseudo- iris feature code is extracted from the pseudo- iris image to generate pseudo- iris templates；
In step (C), any image in the image of the predetermined number subregion is encrypted using non-reversible algorithm
The step of include：
(C1) it will indicate that the first matrix conversion of P × Q of any image is the first column vector of PQ × 1, wherein P and Q points
Not Wei the first matrix column number and line number, PQ be P and Q product, indicate the first column vector columns；
(C2) random matrix of PQ × PQ is generated, and the second of PQ × 1 is obtained according to the random matrix of generation and the first column vector
Column vector, wherein the element in the random matrix obeys the random distribution that mean value is 1/PQ；
(C3) random vector of PQ × 1 is generated, and the third row of PQ × 1 are obtained according to the random vector of generation and the second column vector
Vector, wherein the element in the random vector obeys the random distribution that mean value is 0；
(C4) the third column vector of PQ × 1 is converted to the second matrix of P × Q, wherein the second matrix of the P × Q indicates to add
Any image after close.
2. according to the method described in claim 1, wherein, in step (A), pretreated step is carried out to the iris image of acquisition
Suddenly include：Following processing is executed in order to the iris image of acquisition：Iris Location processing, iris image noise processed, iris
Effective coverage divides the normalized of processing and iris image.
3. according to the method described in claim 1, the method further includes after step (E)：
(F) the pseudo- iris templates of generation are supplied to identity authentication terminal, so that identity authentication terminal is based on the pseudo- iris mould
Plate carries out identity identifying and authenticating.
4. according to the method described in claim 1, wherein, step (A) further includes：The iris image of the user of acquisition is deposited
Storage,
Wherein, the method further includes after step (E)：(G) iris image of the user of storage is deleted.
5. according to the method described in claim 1, wherein, in step (C2), the of PQ × 1 is obtained using following formula
Two column vectors,
X2=AX1
Wherein, X2For the second column vector of PQ × 1, A is the random matrix of PQ × PQ, X1For the first column vector of PQ × 1.
6. according to the method described in claim 1, wherein, in step (C3), the of PQ × 1 is obtained using following formula
Three column vectors,
X3=X2+z
Wherein, X3For the third column vector of PQ × 1, z is the random vector of PQ × 1, X2For the second column vector of PQ × 1.
7. a kind of generation equipment of irreversible pseudo- iris templates, the equipment include：
Iris image acquiring unit acquires the iris image of user；
Image pre-processing unit pre-processes the iris image of acquisition, to obtain iris comparison area；
Image selection unit chooses the image of predetermined number subregion from the iris comparison area；
Encryption unit is encrypted the image of the predetermined number subregion using non-reversible algorithm respectively；
Image replacing unit, by the image of predetermined number subregion described in iris comparison area by encrypted image come generation
It replaces, to generate pseudo- iris image；
Template generation unit extracts pseudo- iris feature code to generate pseudo- iris templates from the pseudo- iris image；
Wherein, encryption unit includes：
First matrix conversion unit, by the first square of P × Q of any image in the image for indicating the predetermined number subregion
Battle array is converted to the first column vector of PQ × 1, wherein and P and Q is respectively the first matrix column number and line number, and PQ is the product of P and Q,
Indicate the columns of the first column vector；
Primary vector generation unit, generates the random matrix of PQ × PQ, and is obtained according to the random matrix of generation and the first column vector
To the second column vector of PQ × 1, wherein the element in the random matrix obeys the random distribution that mean value is 1/PQ；
Secondary vector generation unit, generates the random vector of PQ × 1, and is obtained according to the random vector of generation and the second column vector
The third column vector of PQ × 1, wherein the element in the random vector obeys the random distribution that mean value is 0；
The third column vector of PQ × 1 is converted to the second matrix of P × Q, wherein the P × Q's by the second matrix conversion unit
Second matrix indicates the encrypted any image.
8. equipment according to claim 7, wherein image pre-processing unit to the iris image of acquisition execute in order with
Lower processing：Iris Location processing, iris image noise processed, iris effective coverage divide at processing and the normalization of iris image
Reason.
9. equipment according to claim 7, the equipment further include：Communication unit provides the pseudo- iris templates of generation
To identity authentication terminal, identity identifying and authenticating is carried out so that identity authentication terminal is based on the pseudo- iris templates.
10. equipment according to claim 7, the equipment further include：
Storage unit stores the iris image of the user of acquisition；
Image-erasing unit, after template generation unit generates pseudo- iris templates, by the rainbow of the user stored in storage unit
Film image is deleted.
11. equipment according to claim 7, wherein primary vector generation unit obtains PQ × 1 using following formula
The second column vector,
X2=AX1
Wherein, X2For the second column vector of PQ × 1, A is the random matrix of PQ × PQ, X1For the first column vector of PQ × 1.
12. equipment according to claim 7, wherein secondary vector generation unit obtains PQ × 1 using following formula
Third column vector,
X3=X2+z
Wherein, X3For the third column vector of PQ × 1, z is the random vector of PQ × 1, X2For the second column vector of PQ × 1.
13. a kind of pseudo- iris templates generated based on method described in claim 1 carry out the authentication side of iris recognition
Method, the identity identifying method include：
(a) iris image of user is acquired, and the iris image of acquisition is pre-processed, to obtain iris comparison area；
(b) iris feature code is extracted from the iris comparison area, and calculates the iris feature code of extraction and the pseudo- iris of storage
The matching degree of the pseudo- iris feature code of template；
(c) matching degree being calculated is compared with matching threshold；
If (d) matching degree is less than matching threshold, fail to the authentication of the user；
If (e) matching degree is not less than matching threshold, the authentication of the user is passed through.
14. identity identifying method according to claim 13, the matching threshold is obtained by following steps：According to guarantor
Non-encrypted iris image accounts for the entirely ratio of pseudo- iris image in the dangerous factor, pseudo- iris templates and initial matching degree is described to obtain
Matching threshold.
15. identity identifying method according to claim 14, wherein matching threshold is obtained by following formula,
K=tck0
Wherein, K is matching threshold, and t is Insurance factor, and c is that non-encrypted iris image accounts for entire pseudo- iris figure in pseudo- iris templates
The ratio of picture, k0For initial matching degree.
16. identity identifying method according to claim 13, wherein step (a) further includes：To the iris of the user of acquisition
Image is stored,
Wherein, the identity identifying method further includes：After completing authentication to user, by the iris figure of the user of storage
As being deleted.
17. a kind of pseudo- iris templates that the equipment based on described in claim 7 generates set to carry out the authentication of iris recognition
Standby, the ID authentication device includes：Iris capturing instrument and certification terminal, iris capturing instrument include iris image acquiring unit,
Image pre-processing unit, iris feature code extraction unit and the first communication unit, certification terminal include the second communication unit, data
Library, calculator, comparator and controller,
Wherein, the iris image of iris image acquiring unit acquisition user,
Image pre-processing unit pre-processes the iris image of acquisition, to obtain iris comparison area,
Iris feature code extraction unit extracts iris feature code from the iris comparison area,
The iris feature code that iris feature code extraction unit extracts is sent to the second communication unit by the first communication unit,
The iris feature code of reception is sent to database to store by the second communication unit,
Calculator calculates the matching degree of the iris feature code of extraction and the pseudo- iris feature code of the pseudo- iris templates of storage,
The matching degree being calculated is compared by comparator with matching threshold,
Controller control when matching degree is less than matching threshold fails to the authentication of the user, matching degree not less than
Control passes through the authentication of the user when with threshold value.
18. ID authentication device according to claim 17, the matching threshold is obtained by following steps：According to guarantor
Non-encrypted iris image accounts for the entirely ratio of pseudo- iris image in the dangerous factor, pseudo- iris templates and initial matching degree is described to obtain
Matching threshold.
19. ID authentication device according to claim 18, wherein matching threshold is obtained by following formula,
K=tck0
Wherein, K is matching threshold, and t is Insurance factor, and c is that non-encrypted iris image accounts for entire pseudo- iris figure in pseudo- iris templates
The ratio of picture, k0For initial matching degree.
20. ID authentication device according to claim 17, the ID authentication device further include：
Storage unit stores the iris image of the user of acquisition；
Deleting unit deletes the iris image of the user of storage unit storage after completing authentication to user.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510938789.XA CN105488377B (en) | 2015-12-15 | The production method and equipment and identity identifying method and equipment of pseudo- iris templates |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510938789.XA CN105488377B (en) | 2015-12-15 | The production method and equipment and identity identifying method and equipment of pseudo- iris templates |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105488377A CN105488377A (en) | 2016-04-13 |
| CN105488377B true CN105488377B (en) | 2018-08-31 |
Family
ID=
Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101707401A (en) * | 2009-11-27 | 2010-05-12 | 甄为忠 | Electrical anti-misoperation locking system and anti-misoperation locking method based on iris identification |
Patent Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101707401A (en) * | 2009-11-27 | 2010-05-12 | 甄为忠 | Electrical anti-misoperation locking system and anti-misoperation locking method based on iris identification |
Non-Patent Citations (2)
| Title |
|---|
| 基于虹膜识别的身份认证系统算法研究;刘洋;《中国博士学位论文全文数据库 》;20100731;I138-33 * |
| 虹膜识别与密码学相结合的信息安全方法;张龙等;《2008年全国模式识别学术会议论文集》;20090331;第299-303页 * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9268990B2 (en) | Apparatus and method for producing an identification device | |
| US9813909B2 (en) | Cloud server for authenticating the identity of a handset user | |
| CN106030654B (en) | Face authenticating system | |
| CN106446867B (en) | A kind of double factor palm grain identification method based on accidental projection encryption | |
| Nanni et al. | Random subspace for an improved biohashing for face authentication | |
| CN106503655B (en) | A kind of electric endorsement method and sign test method based on face recognition technology | |
| KR101823145B1 (en) | Robust biometric feature extraction with and without reference point | |
| EP3655874B1 (en) | Method and electronic device for authenticating a user | |
| CN106778613A (en) | A kind of auth method and device based on the matching of face cut zone | |
| CN106650657A (en) | Authentication method and device based on full face binary matching | |
| CN106599841A (en) | Full face matching-based identity verifying method and device | |
| CN105488377B (en) | The production method and equipment and identity identifying method and equipment of pseudo- iris templates | |
| Burgbacher et al. | A behavioral biometric challenge and response approach to user authentication on smartphones | |
| CN109740437A (en) | A kind of identity identifying method and device | |
| Sinduja et al. | Sheltered iris attestation by means of visual cryptography (sia-vc) | |
| CN105488377A (en) | Production method and equipment of fake iris template and identity authentication method and equipment | |
| Priya et al. | An Effective Cardless Atm Transaction Using Computer Vision Techniques | |
| Patil et al. | Enhancement of feature extraction in image quality | |
| Sirdeshpande et al. | Amended Biometric Authentication using Secret Sharing | |
| Thenuwara | Biometric authentication system using multi-agent technology in border control | |
| Behera et al. | Localization of signatures in continuous Air writing | |
| Patil et al. | Enhancing security and privacy in biometrics based authentication system using multiple secret sharing | |
| Liu et al. | A one-card-pass user authentication scheme using image morphing | |
| Wang et al. | Enhancing QR Code System Security by Verifying the Scanner's Gripping Hand Biometric | |
| Arya et al. | Generating cancelable fingerprint using drawing code |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant |