CN105704714A - Service authentication method and service authentication device for mobile health service - Google Patents

Abstract

The present invention provides a service authentication method and a service authentication device for a mobile health service, wherein the service authentication method includes: receiving dynamic physical sign data information collected by a device worn on a human body and ID information of the device; Extracting the human body feature information from the dynamic physical sign data information to obtain user identity information; authenticating the user identity information and the ID information of the device to obtain a service authentication result; When the result indicates that both the user identity information and the device are legal, service interaction with the device is established. The scheme of the present invention adopts the personal sign information extracted from the dynamic sign information of the human body to distinguish users for user identity verification, which saves the manufacturing cost of acquisition equipment on the one hand, and increases the security of user identity authentication on the other hand.

Description

Service authentication method and service authentication device for mobile health service

technical field

The present invention relates to the field of communication technologies, in particular to a service authentication method and a service authentication device for mobile health services.

Background technique

Existing identification methods based on human biometrics have certain security risks, such as: face recognition may have fake photos and masks, voice recognition may be faked through recording, handwriting recognition may be imitated by handwriting, etc. . These external features of the human body, such as human faces, are easily disturbed, controlled and forged by the external environment and human factors, and the security is difficult to be effectively guaranteed.

For example, the existing technologies that use human body information for identity authentication and recognition generally include the following: voice, face, fingerprint, iris, veins, palm prints, gait, etc. These features are basically the external characteristics of the human body. At the same time, these characteristics are stable or change slowly, and are easily affected and changed by the external environment and human factors, and are easy to be forged, disguised and maliciously changed. It is difficult to distinguish whether the collected signals come from a real living human body. Therefore, there is a great potential safety hazard.

In order to solve the technical problems encountered above, the existing technology uses the dynamic sign information of the human body to assist, judge whether it is from a living body, and then use the static information to verify the user's identity, which increases the security of the user's identity verification. , but added some additional dynamic sign information collection equipment.

Contents of the invention

The purpose of the present invention is to provide a service authentication method and a service authentication device for mobile health services, which can solve the problem that the security of the current user identity authentication system in the mobile health service is low, and additional acquisition equipment is added to the mobile health service system, resulting in collection The problem of high equipment manufacturing costs.

In order to solve the above technical problems, an embodiment of the present invention provides a service authentication method for a mobile health service, which includes:

Receive the dynamic sign data information collected by the device worn on the human body and the ID information of the device;

Extracting human body feature information from the dynamic physical sign data information to obtain user identity information;

Authenticating the user identity information and the ID information of the device to obtain a service authentication result;

When the service authentication result indicates that both the user identity information and the device are legal, establish service interaction with the device.

Wherein, the step of receiving the dynamic sign data information collected by the device worn on the human body and the ID information of the device includes:

The dynamic sign data information collected by the device worn on the human body and the ID information of the device are received in a wired or wireless manner.

Wherein, before receiving the dynamic sign data information collected by the device worn on the human body and the ID information of the device, the method further includes:

receiving service request information from the device;

Processing the received service request information, sending service authentication request information to the device, so that the device sends the collected dynamic physical sign data information and the device ID information.

Wherein, the step of receiving the dynamic sign data information collected by the device worn on the human body and the ID information of the device includes:

Receive the dynamic sign data information collected by the equipment worn on the human body in the form of continuous wave and discrete wave.

Wherein, the step of extracting human body feature information from the dynamic physical sign data information and obtaining user identity information includes:

The human body feature information is extracted from the dynamic sign data information in the continuous wave form and the dynamic sign data information in the discrete wave form to obtain user identity information.

Wherein, the step of extracting the human body feature information from the dynamic physical sign data information in the form of continuous wave, and obtaining the user identity information includes:

Periodically detect the dynamic sign data information in the form of continuous wave;

Perform smoothing processing to remove low-frequency noise and high-frequency noise on the waveform of each cycle to obtain a smooth waveform of each cycle;

The time-domain human body feature information and the frequency-domain human body feature information are extracted sequentially from the smooth waveform of each cycle;

The statistical model is used to parametrically model the continuous period human body characteristic information in the time domain and the continuous frequency domain human characteristic information, and obtain the first parameter information of the parameterized model of the time domain human characteristic information and the frequency domain human characteristic information respectively. Second parameter information of the parametric model;

The first parameter information and the second parameter information are used as user identity identification information.

Wherein, the step of extracting human body feature information from the dynamic physical sign data information in the form of discrete waves, and obtaining user identity information includes:

According to the basic curve model of the dynamic sign data in parametric form, fitting the dynamic sign data information in the form of a discrete wave to obtain the fitted curve waveform;

Using a statistical model to extract time-domain human body feature information and frequency-domain human body feature information on the fitted curve waveform;

The time-domain human body characteristic information and frequency-domain human body characteristic information of the fitted curve waveform are used as user identification information.

Wherein, the step of performing service authentication on the user identity information and the ID information of the device, and obtaining a service authentication result includes:

Perform legality authentication on the ID information of the device, and obtain a device legality authentication result;

When the device legality authentication result indicates that the device is legal, comparing the user identity information with pre-saved user body feature information to obtain a comparison result;

When the comparison result indicates that the user identity information is legal, a successful service authentication result is acquired.

In order to solve the above technical problems, an embodiment of the present invention also provides a mobile health service service authentication device, which includes:

The first receiving module is used to receive the body sign data information collected by the device worn on the human body and the ID information of the device;

An extraction module, configured to extract dynamic feature information from the human body sign data information, and obtain dynamic feature information;

An authentication module, configured to authenticate the dynamic feature information and the ID information of the device, and obtain an authentication result;

An establishing module, configured to establish service interaction with the device when the authentication result indicates that the dynamic feature information and the device are legal.

Wherein, the first receiving module includes:

The first receiving sub-module is configured to receive the physical sign data information collected by the device worn on the human body and the ID information of the device in a wired or wireless manner.

Wherein, the service authentication device also includes:

a second receiving module, configured to receive service request information from the device;

A sending module, configured to process the received service request information, and send service authentication request information to the device, so that the device sends the collected dynamic physical sign data according to the service authentication request information information along with the ID information of the device.

Wherein, the first receiving module includes:

The second receiving sub-module is used to receive the dynamic sign data information collected by the equipment worn on the human body in the form of continuous waves and in the form of discrete waves.

Wherein, the extraction module includes:

The extraction sub-module is used to extract the human body feature information from the dynamic physical sign data information in the continuous wave form and the dynamic physical sign data information in the discrete wave form, and obtain user identification information.

Wherein, the extraction submodule includes:

The detection unit is used to periodically detect the dynamic sign data information in the form of a continuous wave;

The processing unit is used to perform smoothing processing for removing low-frequency noise and high-frequency noise on the waveform of each cycle, and obtain the smooth waveform of each cycle;

The first extraction unit is used to sequentially extract time-domain human body feature information and frequency-domain human body feature information from the smooth waveform of each cycle;

The modeling unit is used to perform parametric modeling on the continuous period human body characteristic information in the time domain and the frequency domain human characteristic information in the continuous period by using a statistical model, respectively obtain the first parameter information of the parameterized model of the time domain human characteristic information and The second parameter information of the parametric model of the frequency domain human body characteristic information;

The first determining unit is configured to use the first parameter information and the second parameter information as user identity identification information.

Wherein, the extraction submodule includes:

The fitting unit is used to fit the dynamic sign data information in the form of a discrete wave according to the basic curve model of the dynamic sign data in a parameterized form to obtain a fitted curve waveform;

The second extraction unit is used to extract time-domain human body feature information and frequency-domain human body feature information from the fitted curve waveform by using a statistical model;

The second determining unit is configured to use the time-domain human body characteristic information and frequency-domain human body characteristic information of the fitted curve waveform as user identification information.

Wherein, the authentication module includes:

An authentication unit, configured to perform legality authentication on the ID information of the device, and obtain a device legality authentication result;

A comparison unit, configured to compare the user identity information with pre-saved user body feature information to obtain a comparison result when the device legality authentication result indicates that the device is legal;

An acquiring unit, configured to acquire a successful service authentication result when the comparison result indicates that the user identity information is legal.

The beneficial effects of above-mentioned technical scheme of the present invention are as follows:

The solution of the present invention uses the personal sign information extracted from the dynamic sign information of the human body to distinguish users for user identity verification; the solution of the present invention avoids the use of static biological sign information of the human body for user identity verification on the one hand. Static biometric information is easy to be forged and the security is not high; on the other hand, it saves the manufacturing cost of acquisition equipment.

Description of drawings

Fig. 1 shows the schematic flow chart of the service authentication method of the mobile health service of the present invention;

Fig. 2 shows the schematic flow chart of extracting human body feature information from the dynamic physical sign data information in continuous wave form in the mobile health platform in a specific embodiment of the present invention;

Fig. 3 shows the schematic flow chart of extracting human body feature information from the dynamic physical sign data information in the form of discrete waves by the mobile health platform in a specific embodiment of the present invention;

Fig. 4 shows a schematic structural diagram of a mobile health service service authentication device of the present invention;

Fig. 5 shows the second structural diagram of the service authentication device of the mobile health service of the present invention;

Fig. 6 shows the third structural diagram of the service authentication device of the mobile health service of the present invention;

FIG. 7 shows a fourth schematic structural diagram of a service authentication device for a mobile health service according to the present invention.

detailed description

In order to make the technical problems, technical solutions and advantages to be solved by the present invention clearer, the following will describe in detail with reference to the drawings and specific embodiments.

As shown in Figure 1, an embodiment of the present invention provides a service authentication method for a mobile health service, including the following steps:

Step 11, receiving the dynamic sign data information collected by the device worn on the human body and the ID information of the device;

Step 12, extracting human body feature information from the dynamic physical sign data information, and obtaining user identity information;

Step 13, authenticating the user identity information and the ID information of the device, and obtaining a service authentication result;

Step 14, when the service authentication result indicates that both the user identity information and the device are valid, establish service interaction with the device.

The above step 11 to step 14 will be described in detail below in conjunction with the accompanying drawings and specific embodiments:

First, before starting step 11, the user is wearing a portable wearable sign collection device (which may be the device mentioned in step 11, hereinafter referred to as the device), and when intending to use the mobile health service, when the user manually initiates or the device Automatic initiation When wishing to interact with the mobile health service platform (hereinafter referred to as the platform) for data and services, the device will first initiate a service request to the platform.

Since the platform needs to identify the device and its current user to distinguish whether it is a legal device or a legal user authorized to use the mobile health service, the platform will send the service request to the device after receiving the service request sent by the device. The device sends a service authentication request, so that after receiving the service authentication request, the device sends the collected dynamic physical sign data information and the ID information of the device to the platform in a wired or wireless manner. Specifically, the device sends these data information to the platform. After compressed, packaged and encrypted with the device ID information, it is sent to the platform. Wherein, the dynamic sign data information at least includes: ECG data information, heart rate data information, pulse data information, respiration data information, blood pressure data information, blood glucose data information and the like.

The platform decompresses and decrypts the compressed and encrypted dynamic sign data information and device ID sent by the received device, so as to obtain the dynamic sign data information and device ID, and then performs device authentication and user identity authentication successively.

First, the platform authenticates the device:

The platform first judges whether the device has been legally registered according to the device ID. If it is an illegal device, the device task will be terminated, and the result of the illegal device will be fed back to the user; if it is a legal device, the next step of user identity authentication will be performed. . It mainly obtains the user's human body characteristic information from the dynamic physical sign data information, and uses the human body characteristic information as the user identification information, and then performs the authentication of the user identification information.

Among them, the above-mentioned dynamic sign data information can be divided into two categories, one is the dynamic sign data information in the form of continuous wave, such as: ECG data, pulse data, respiration data; the other is the dynamic sign data in the form of discrete wave Information, such as: heart rate data, blood pressure data, blood oxygen data. For the two types of dynamic physical sign data, the platform obtains the user's body feature information in different ways:

(1) Extracting the human body feature information from the dynamic physical sign data information in the continuous wave form, and obtaining the processing method of the user identity information as shown in Figure 2, including the following steps:

Step 21, performing periodic detection on the quasi-periodic dynamic sign data information in the form of a continuous wave;

Step 22, smoothing the waveform of each cycle to remove low-frequency noise and high-frequency noise, to obtain a smooth waveform of each cycle;

Step 23, extracting the time-domain human body feature information and frequency-domain human body feature information sequentially for each period of the smooth waveform;

Step 24, use the statistical model to parametrically model the continuous period human body characteristic information in the time domain and the frequency domain human characteristic information in the continuous period, respectively obtain the first parameter information of the parametric model of the time domain human body characteristic information and the frequency domain human body characteristic information Second parameter information of the parameterized model of feature information;

Step 25, using the first parameter information and the second parameter information as user identity identification information.

(2) Extracting the human body feature information from the dynamic physical sign data information in the form of discrete waves, and obtaining the processing method of the user identity information, as shown in Figure 3, including the following steps:

Step 31, by performing statistics and averaging a large amount of dynamic sign data in professional medical databases, performing curve fitting on time-varying discrete sign data (for example: polynomial fitting, multi-Gaussian combination, trigonometric function superposition fitting, etc.), And the envelope of the curve is averaged to obtain the basic curve model (expressed in parametric form) of the dynamic sign data;

Step 32, according to the basic curve model of the dynamic sign data in a parameterized form, the above-mentioned dynamic sign data information in the form of discrete waves (such as heart rate data, blood pressure data or blood oxygen data) is fitted to obtain the fitted curve waveform;

Step 33, using a statistical model to extract time-domain human body feature information and frequency-domain human body feature information from the fitted curve waveform;

Step 34, using the time-domain human body characteristic information and frequency-domain human body characteristic information of the fitted curve waveform as user identification information.

The platform compares the obtained user identity information with the user identity information registered and saved in the system. If the comparison is unsuccessful, the device task will be terminated, and the user identity authentication result will be fed back to the device to remind the user whether to try again. Initiate a service request; if the comparison is successful, the device will send authentication confirmation information to the platform. At this time, the platform and the device can establish business interaction, and the platform will check the user's physical condition according to the above dynamic physical sign data. The specific user identity authentication process is illustrated as follows:

The platform simultaneously receives dynamic sign data information in continuous wave form (ECG data, pulse data, respiration data) and dynamic sign data information in discrete wave form (heart rate data, blood pressure data, blood oxygen data), if the extracted The human body characteristic information is within the threshold range of the corresponding pre-stored human body characteristic data information, that is, all the human body characteristic information is compared successfully, and the user identity authentication is passed; if more than 2 pieces of human body characteristic information are compared unsuccessfully, then It is considered that the user authentication fails. For example: after the platform obtains the ECG data information in the form of continuous wave, after obtaining the user identity information through the above steps 21 to 25, it is combined with the pre-stored human body identification information obtained by analyzing the user's ECG data to identify the user. When the characteristic data information is within the threshold range, the comparison is successful; the platform obtains the pulse data information in the form of continuous wave, and after obtaining the user identity information through the above steps 21 to 25, it analyzes the user pulse data with the pre-stored When the obtained human body characteristic data information for identifying the user is within the threshold range, the comparison is successful; the platform obtains the blood oxygen data information in the form of a discrete wave, and after obtaining the user identity information through the above steps 31 to 34, and When the pre-stored human body characteristic data information obtained by analyzing the user's blood oxygen data is within the threshold range, the comparison is successful; the comparison process of other extracted human body characteristic information is also the same. If the comparison of two pieces of human body feature information is unsuccessful, or the comparison of more than two pieces of human body feature information is unsuccessful, it is considered that the user identity authentication has failed.

In summary, the solution of the present invention uses the personal sign information extracted from the dynamic sign information of the human body to distinguish users for user identity verification; the solution of the present invention avoids the use of static biological sign information of the human body for user identity verification on the one hand. Verification, human body static biological sign information is easy to falsify and the security is not high; on the other hand, it saves the manufacturing cost of collection equipment, that is, there is no need to add some biological sign collection equipment that has nothing to do with health services.

As shown in Figure 4, an embodiment of the present invention also provides a mobile health service service authentication device, which includes:

The first receiving module 41 is configured to receive the body sign data information collected by the device worn on the human body and the ID information of the device;

An extraction module 42, configured to extract dynamic feature information from the human body sign data information, and obtain dynamic feature information;

An authentication module 43, configured to authenticate the dynamic feature information and the ID information of the device, and obtain an authentication result;

The establishment module 44 is configured to establish service interaction with the device when the authentication result indicates that the dynamic feature information and the device are legal.

Wherein, the first receiving module 41 includes:

The first receiving sub-module is configured to receive the physical sign data information collected by the device worn on the human body and the ID information of the device in a wired or wireless manner.

Wherein, the service authentication device, as shown in Figure 5, also includes:

The second receiving module 51 is configured to receive service request information from the device;

A sending module 52, configured to process the received service request information, and send service authentication request information to the device, so that the device sends the collected dynamic signs according to the service authentication request information Data information and ID information of the device.

Wherein, the first receiving module 41 includes:

The second receiving sub-module is used to receive the dynamic sign data information collected by the equipment worn on the human body in the form of continuous waves and in the form of discrete waves.

Wherein, the extraction module 42, as shown in Figure 6, includes:

The extraction sub-module 61 is used to extract the human body feature information from the dynamic sign data information in the continuous wave form and the dynamic sign data information in the discrete wave form, and obtain user identity information.

Wherein, the extraction submodule 61 includes:

The detection unit is used to periodically detect the dynamic sign data information in the form of a continuous wave;

The processing unit is used to perform smoothing processing for removing low-frequency noise and high-frequency noise on the waveform of each cycle, and obtain the smooth waveform of each cycle;

The first extraction unit is used to sequentially extract time-domain human body feature information and frequency-domain human body feature information from the smooth waveform of each cycle;

The modeling unit is used to perform parametric modeling on the continuous period human body characteristic information in the time domain and the frequency domain human characteristic information in the continuous period by using a statistical model, respectively obtain the first parameter information of the parameterized model of the time domain human characteristic information and The second parameter information of the parametric model of the frequency domain human body characteristic information;

The first determining unit is configured to use the first parameter information and the second parameter information as user identity identification information.

Wherein, the extraction sub-module 61 includes:

The fitting unit is used to fit the dynamic sign data information in the form of a discrete wave according to the basic curve model of the dynamic sign data in a parameterized form to obtain a fitted curve waveform;

The second extraction unit is used to extract time-domain human body feature information and frequency-domain human body feature information from the fitted curve waveform by using a statistical model;

The second determining unit is configured to use the time-domain human body characteristic information and frequency-domain human body characteristic information of the fitted curve waveform as user identification information.

Wherein, the authentication module 43, as shown in Figure 7, includes:

An authentication unit 71, configured to perform legality authentication on the ID information of the device, and obtain a device legality authentication result;

The comparison unit 72 is configured to compare the user identity information with pre-saved user body feature information to obtain a comparison result when the device legality authentication result indicates that the device is legal;

The obtaining unit 73 is configured to obtain a successful service authentication result when the comparison result indicates that the user identity information is legal.

It should be noted that the service authentication device is a device including the above-mentioned service authentication method, and the implementation of the embodiment of the above-mentioned method is applicable to the embodiment of the device, and can also achieve the same technical effect.

The above description is a preferred embodiment of the present invention, it should be pointed out that for those of ordinary skill in the art, without departing from the principle of the present invention, some improvements and modifications can also be made, and these improvements and modifications can also be made. It should be regarded as the protection scope of the present invention.

Claims (16)

1. A service authentication method for a mobile health service, comprising: Receive the dynamic sign data information collected by the device worn on the human body and the ID information of the device; Extracting human body feature information from the dynamic physical sign data information to obtain user identity information; Authenticating the user identity information and the ID information of the device to obtain a service authentication result; When the service authentication result indicates that both the user identity information and the device are legal, establish service interaction with the device. 2. The service authentication method according to claim 1, wherein the step of receiving the dynamic sign data information collected by the device worn on the human body and the ID information of the device comprises: The dynamic sign data information collected by the device worn on the human body and the ID information of the device are received in a wired or wireless manner. 3. The service authentication method according to claim 1, characterized in that, before receiving the dynamic sign data information collected by the device worn on the human body and the ID information of the device, the method further comprises: receiving service request information from the device; Processing the received service request information, sending service authentication request information to the device, so that the device sends the collected dynamic physical sign data information and the device ID information. 4. The service authentication method according to claim 1, wherein the step of receiving the dynamic sign data information collected by the device worn on the human body and the ID information of the device comprises: Receive the dynamic sign data information collected by the equipment worn on the human body in the form of continuous wave and discrete wave. 5. The service authentication method according to claim 4, wherein the step of performing extraction of human body feature information on the dynamic physical sign data information and obtaining user identity information includes: The human body feature information is extracted from the dynamic sign data information in the continuous wave form and the dynamic sign data information in the discrete wave form to obtain user identity information. 6. The service authentication method according to claim 5, wherein the step of extracting human body feature information from the dynamic physical sign data information in a continuous wave form, and obtaining user identity information includes: Periodically detect the dynamic sign data information in the form of continuous wave; Perform smoothing processing to remove low-frequency noise and high-frequency noise on the waveform of each cycle to obtain a smooth waveform of each cycle; The time-domain human body feature information and the frequency-domain human body feature information are extracted sequentially from the smooth waveform of each cycle; The statistical model is used to parametrically model the continuous period human body characteristic information in the time domain and the continuous frequency domain human characteristic information, and obtain the first parameter information of the parameterized model of the time domain human characteristic information and the frequency domain human characteristic information respectively. Second parameter information of the parametric model; The first parameter information and the second parameter information are used as user identity identification information. 7. The service authentication method according to claim 5, wherein the step of extracting human body feature information from the dynamic physical sign data information in discrete wave form, and obtaining user identity information includes: According to the basic curve model of the dynamic sign data in parametric form, the dynamic sign data information in the form of discrete waves is fitted to obtain the fitted curve waveform; Using a statistical model to extract time-domain human body feature information and frequency-domain human body feature information on the fitted curve waveform; The time-domain human body characteristic information and frequency-domain human body characteristic information of the fitted curve waveform are used as user identification information. 8. The service authentication method according to claim 1, wherein the step of performing service authentication on the user identity information and the ID information of the device, and obtaining a service authentication result comprises: Perform legality authentication on the ID information of the device, and obtain a device legality authentication result; When the device legality authentication result indicates that the device is legal, comparing the user identity information with pre-saved user body feature information to obtain a comparison result; When the comparison result indicates that the user identity information is legal, a successful service authentication result is obtained. 9. A service authentication device for a mobile health service, comprising: The first receiving module is used to receive the body sign data information collected by the device worn on the human body and the ID information of the device; An extraction module, configured to extract dynamic feature information from the human body sign data information, and obtain dynamic feature information; An authentication module, configured to authenticate the dynamic feature information and the ID information of the device, and obtain an authentication result; An establishing module, configured to establish service interaction with the device when the authentication result indicates that the dynamic feature information and the device are legal. 10. The service authentication device according to claim 9, wherein the first receiving module comprises: The first receiving sub-module is configured to receive the physical sign data information collected by the device worn on the human body and the ID information of the device in a wired or wireless manner. 11. The service authentication device according to claim 9, characterized in that, the service authentication device further comprises: a second receiving module, configured to receive service request information from the device; A sending module, configured to process the received service request information, and send service authentication request information to the device, so that the device sends the collected dynamic physical sign data according to the service authentication request information information along with the ID information of the device. 12. The service authentication device according to claim 9, wherein the first receiving module comprises: The second receiving sub-module is used to receive the dynamic sign data information collected by the equipment worn on the human body in the form of continuous waves and in the form of discrete waves. 13. The service authentication device according to claim 12, wherein the extracting module comprises: The extraction sub-module is used to extract the human body feature information from the dynamic physical sign data information in the continuous wave form and the dynamic physical sign data information in the discrete wave form, and obtain user identification information. 14. The service authentication device according to claim 13, wherein the extracting submodule comprises: The detection unit is used to periodically detect the dynamic sign data information in the form of a continuous wave; The processing unit is used to perform smoothing processing for removing low-frequency noise and high-frequency noise on the waveform of each cycle, and obtain the smooth waveform of each cycle; The first extraction unit is used to sequentially extract time-domain human body feature information and frequency-domain human body feature information from the smooth waveform of each cycle; The modeling unit is used to perform parametric modeling on the continuous period human body characteristic information in the time domain and the continuous period frequency domain human characteristic information by using a statistical model, respectively obtain the first parameter information of the parameterized model of the time domain human characteristic information and The second parameter information of the parametric model of the frequency domain human body feature information; The first determining unit is configured to use the first parameter information and the second parameter information as user identity identification information. 15. The service authentication device according to claim 13, wherein the extracting submodule comprises: The fitting unit is used to fit the dynamic sign data information in the form of a discrete wave according to the basic curve model of the dynamic sign data in a parametric form to obtain a fitted curve waveform; The second extraction unit is used to extract time-domain human body feature information and frequency-domain human body feature information from the fitted curve waveform by using a statistical model; The second determining unit is configured to use the time-domain human body characteristic information and frequency-domain human body characteristic information of the fitted curve waveform as user identification information. 16. The service authentication device according to claim 9, wherein the authentication module comprises: An authentication unit, configured to perform legality authentication on the ID information of the device, and obtain a device legality authentication result; A comparison unit, configured to compare the user identity information with pre-saved user body feature information to obtain a comparison result when the device legality authentication result indicates that the device is legal; An acquiring unit, configured to acquire a successful service authentication result when the comparison result indicates that the user identity information is legal.