CN106341380A - Method, device and system for performing remote identity authentication on user - Google Patents

Method, device and system for performing remote identity authentication on user Download PDF

Info

Publication number
CN106341380A
CN106341380A CN201510667095.7A CN201510667095A CN106341380A CN 106341380 A CN106341380 A CN 106341380A CN 201510667095 A CN201510667095 A CN 201510667095A CN 106341380 A CN106341380 A CN 106341380A
Authority
CN
China
Prior art keywords
user
equipment
video
network equipment
authentication
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201510667095.7A
Other languages
Chinese (zh)
Other versions
CN106341380B (en
Inventor
吕文华
胡菡
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing collection and payment information security technology Co., Ltd.
Original Assignee
Precious Science And Technology Ltd Of Receipt And Payment
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Precious Science And Technology Ltd Of Receipt And Payment filed Critical Precious Science And Technology Ltd Of Receipt And Payment
Priority to CN201510667095.7A priority Critical patent/CN106341380B/en
Publication of CN106341380A publication Critical patent/CN106341380A/en
Application granted granted Critical
Publication of CN106341380B publication Critical patent/CN106341380B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0861Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan

Landscapes

  • Engineering & Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Biomedical Technology (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer And Data Communications (AREA)
  • Telephonic Communication Services (AREA)

Abstract

The invention provides a system for performing remote identity authentication on a user. The system comprises firs equipment, second equipment and network equipment, and the system can perform living body authentication and intelligent authentication on the user via a video connection between the first equipment and the second equipment, so as to obtain a remote authentication result of the user. According to the method, the device and the system, a design criterion subject to manual authentication and supplemented by intelligent authentication is adopted, the remote identity authentication method which has the advantages of high efficiency, high accuracy, low false judgment rate and low missed judgment rate and is convenient for subsequent audit, the operation is convenient, the use is safe, and the defects of the existing counter manual method and the existing machine intelligent method are effectively avoided.

Description

A kind of methods, devices and systems for user is carried out with long-distance identity-certifying
Technical field
The present invention relates to field of computer technology, more particularly, to one kind is for carrying out remotely to user Identity authentication method, device and system.
Background technology
At present, user could obtain the field of respective service after being frequently encountered by and needing to carry out authentication Scape.In prior art, mainly user is entered using sales counter manual type and long-distance intelligent mode Row authentication.Above two mode has the disadvantages that 1) sales counter manual type requirement use Family must be arrived sales counter and be handled, and limited larger by geographical conditions, not convenient, may Bring great inconvenience for user, and the construction cost of outlet is also higher;Additionally, it is managed The impact of the factors such as reason system, personnel's professional skill, sales counter manual type there is also responsibility cannot The drawbacks of identification.2) long-distance intelligent mode is highly prone to light, veil and user's cooperation Degree impact, False Rate of a relatively high thereby increases and it is possible to the correlation not meeting current policies regulation occurs The situation of regulation.
Content of the invention
It is an object of the invention to provide a kind of method for user is carried out with long-distance identity-certifying, Device and system.
According to an aspect of the present invention, one kind is provided to be used for user is carried out far in the first equipment Journey identity authentication method, wherein, the method comprises the following steps:
Service request from user is sent to the network equipment, wherein, the described network equipment is complete The login authentication of described user in pairs;
Set up described first equipment by the described network equipment to be connected with the video between the second equipment, Wherein, described video is connected to carry out living body authentication and intelligent authentication to described user;
Receive the remote authentication knot for described user from the second equipment via the described network equipment Really.
According to another aspect of the present invention, additionally provide a kind of be used in the second equipment to The method that family carries out long-distance identity-certifying, wherein, the method comprises the following steps:
Receive and show from the network equipment, user service request, wherein, described network Equipment has completed the login authentication to the contact staff using described second equipment;
Indicate to send to the described network equipment according to the calling of described contact staff and be directed to described use The video call request at family, to be set up and described first equipment between by the described network equipment Video connects, and wherein, described video is connected to carry out living body authentication and intelligence to described user Certification;
Receive and show to connect based on described video from the network equipment and described user is carried out The intelligent authentication result of intelligent authentication;
Remote authentication result for described user is supplied to described via the described network equipment First equipment, wherein, according to described intelligent authentication result and is based on institute by described contact staff State video to connect the living body authentication that described user is carried out to determine described remote authentication result.
According to a further aspect in the invention, additionally provide one kind to be used for user in the network device The method carrying out long-distance identity-certifying, wherein, the method comprises the following steps:
Receive from the first equipment user service request, and by described service request send to Second equipment, wherein, the described network equipment has completed to described user and has set using described second The login authentication of standby contact staff;
According to the video call request for described user from described second equipment, set up institute The video stated between the first equipment and described second equipment is connected, and wherein, described video connects to be used In living body authentication and intelligent authentication are carried out to described user;
Connected according to described video and intelligent authentication is carried out to described user, obtain intelligent authentication knot Really, and by described intelligent authentication result send to described second equipment;
Institute will be transmitted to from described second equipment for the remote authentication result of described user State the first equipment.
According to a further aspect in the invention, additionally provide one kind to be used for user in the first equipment Carry out the device of long-distance identity-certifying, wherein, this device includes:
First dispensing device, for the service request from user is sent to the network equipment, its In, the described network equipment has completed the login authentication to described user;
First sets up device, for setting up described first equipment and second by the described network equipment Video between equipment connects, and wherein, described video is connected to carry out live body to described user Certification and intelligent authentication;
First receiving device, for receiving being directed to from the second equipment via the described network equipment The remote authentication result of described user.
According to a further aspect in the invention, additionally provide one kind to be used for user in the second equipment Carry out the device of long-distance identity-certifying, wherein, this device includes:
3rd reception device, please from the network equipment, user service for receiving and showing Ask, wherein, the described network equipment has completed stepping on to the contact staff using described second equipment Record checking;
Calling apparatus for initiating, sets to described network for being indicated according to the calling of described contact staff Preparation send the video call request for described user, to be set up by the described network equipment and institute The video stated between the first equipment connects, and wherein, described video is connected to described user is entered Row living body authentication and intelligent authentication;
4th reception device, for receiving and showing from the network equipment based on described video even Connect the intelligent authentication result that described user is carried out with intelligent authentication;
Second dispensing device, for by the remote authentication result for described user via described net Network equipment is supplied to described first equipment, wherein, is recognized according to described intelligence by described contact staff Demonstrate,prove result and the living body authentication that described user is carried out is connected to determine based on described video State remote authentication result.
According to a further aspect in the invention, additionally provide one kind to be used for user in the network device Carry out the device of long-distance identity-certifying, wherein, this device includes:
5th dispensing device, for receiving the service request of the user from the first equipment, and will Described service request sends to the second equipment, and wherein, the described network equipment has completed to described use Family and the login authentication of the contact staff using described second equipment;
Second sets up device, for according to the regarding for described user from described second equipment Frequency call request, the video set up between described first equipment and described second equipment is connected, its In, described video is connected to carry out living body authentication and intelligent authentication to described user;
Intelligent authentication device, recognizes for described user being carried out with intelligence according to the connection of described video Card, obtains intelligent authentication result, and described intelligent authentication result is sent to described second equipment;
First retransmission unit, for will be long-range for described user from described second equipment Authentication result is transmitted to described first equipment.
According to the opposing party's aspect of the present invention, additionally provide one kind for long-range body is carried out to user The system of part certification, this system includes the first equipment of the present invention, the second equipment and network Equipment.
Compared with prior art, the invention has the advantages that 1) take and with mutual authentication be Standard, is aided with the design criteria of intelligent authentication, there is provided a kind of high efficiency, high accuracy, low mistake Sentence rate, low misdetection rate and be easy to the long-distance identity-certifying mode of follow-up audit, easy to operate, Using safety, effectively prevent sales counter manual type and the defect existing for machine intelligence mode, Can active balance False Rate and misdetection rate, again can on the premise of meeting national policy regulation, Bring easily Consumer's Experience for client;2) do not need user to carry out scene to handle, so as to Enough conveniently and efficiently provide the user remote service, and will not be limited by geographical conditions, simultaneously Reduce the construction cost of outlet;3) can connect user is carried out far based on video Journey authentication, the process of this long-distance identity-certifying includes the living body authentication to user and intelligence is recognized Card is so that remote authentication result combines intelligent authentication result and contact staff lives to user The subjective authentication result of realization card, so that the accuracy of remote authentication result is higher and big Reduce greatly False Rate and misdetection rate;4) network equipment can store intelligent authentication result and remote Journey authentication result, can provide perfect technical support for operating audit, consequently facilitating after carrying out Continuous examination & verification, and can be prevented effectively from what responsibility present in current sales counter manual type cannot be assert Drawback.
Brief description
By reading the detailed description that non-limiting example is made made with reference to the following drawings, The other features, objects and advantages of the present invention will become more apparent upon:
Fig. 1 is the system tray for user is carried out with long-distance identity-certifying of one example of the present invention Structure schematic diagram;
Fig. 2 is the method for carrying out long-distance identity-certifying to user of one embodiment of the invention Schematic flow sheet;
Fig. 3 is the system for user is carried out with long-distance identity-certifying of one embodiment of the invention Structural representation.
In accompanying drawing, same or analogous reference represents same or analogous part.
Specific embodiment
Below in conjunction with the accompanying drawings the present invention is described in further detail.
Fig. 1 is the system tray for user is carried out with long-distance identity-certifying of one example of the present invention Structure schematic diagram.This system includes the network equipment, multiple first equipment and multiple second equipment.
Wherein, the described network equipment includes but is not limited to single network server, multiple network clothes The server group of business device composition or based on cloud computing (cloud computing) by calculating in a large number Machine or the cloud of webserver composition, wherein, cloud computing is one kind of Distributed Calculation, by one One super virtual computer of group's loosely-coupled computer collection composition;Described network equipment institute The network at place includes but is not limited to internet, wide area network, Metropolitan Area Network (MAN), LAN, vpn network Deng.It should be noted that preferably, the described network equipment supports networking Ministry of Public Security identity card letter Breath online checking, and the described network equipment supports the business functions such as Workflow Management.
Wherein, the terminal device that described first equipment is used by user;Preferably, described One equipment includes but is not limited to: smart mobile phone, panel computer, notebook, pc machine etc..The The operating system that one equipment is supported includes but is not limited to: ios, android, mac, windows Etc. operating system that is existing or being likely to occur in the future.Wherein, the first equipment can pass through network Connect to the described network equipment.It should be noted that user by the first equipment come with customer service people Member is communicated, to ask to service.
Wherein, the terminal device that described second equipment is used by contact staff, generally by servicing Provider is providing.Preferably, described second equipment is pc machine.Second equipment is supported Operating system includes but is not limited to: mac, windows etc. are existing or are in the future likely to occur Operating system.Wherein, the second equipment can be by network connection to the described network equipment.Need Illustrate, contact staff can be communicated with user by the second equipment, and user is carried out Long-distance identity-certifying, to provide a user with service.
It should be noted that the described network equipment, the first equipment, the second equipment and network are only Citing, other existing or be likely to occur from now on the network equipment, the first equipment, the second equipment As being applicable to the present invention, within also should being included in the scope of the present invention, and with way of reference It is incorporated herein.
Fig. 2 is the method for carrying out long-distance identity-certifying to user of one embodiment of the invention Schematic flow sheet.Step s101, step s102, step are included according to the method for the present embodiment Rapid s103, step s104, step s105, step s106, step s107, step s108, Step s109, step s110, step s111.
It should be noted that before the operation of execution the present embodiment, it is right that the network equipment has completed User using the first equipment and the login authentication of the contact staff using the second equipment, That is, user logs on to the network equipment by the first equipment, and contact staff has passed through the second equipment Log on to the network equipment.
For example, user input in the first equipment its log-on message (as user.name, Account password, identity type (as " user "), identifying code etc.), this login is believed by the first equipment Breath is supplied to the network equipment, to carry out login authentication to this user in the network device, when this use When login authentication is passed through at family, this user passes through the first equipment Successful login to the network equipment.
Again for example, contact staff inputs its log-on message (as contact staff in the second equipment Name on account, account password, identity type (as " attending a banquet "), identifying code etc.), the second equipment This log-on message is supplied to the network equipment, to step on to this contact staff in the network device Record checking, when this contact staff passes through login authentication, this contact staff passes through the first equipment and becomes Work(logs on to the network equipment.It should be noted that it is preferable that working as contact staff in this example When not possessing the fixing number of attending a banquet, the network equipment is automatically to be divided by each contact staff of checking Join a uniquely number of attending a banquet, and record each contact staff (or second equipment) and the number of attending a banquet Between current corresponding relation.
Afterwards, in step s101, the first equipment by the service request from user send to The network equipment.
Wherein, the service that described service request is asked for instruction user, described service request Including any information related to the service that user is asked;Preferably, described service request bag Include but be not limited to: the identification information (as account title, id etc.) of user, user ask The type of service, the information such as title or numbering, the customer service accepting this service specified by user Number of attending a banquet of personnel etc..
Wherein, user can be by the first equipment, execution be clicked on or gesture operation indicates its institute The service of request.
As an example, user clicks on " financing product in the webpage that the first equipment is presented Product ", the first equipment sends the service request " finance product " from user to the network equipment.
In step s102, the network equipment receives the service request of the user from the first equipment, And send this service request to the second equipment.
Wherein, the network equipment can using various ways determine for receive this service request second Equipment.
For example, comprise attending a banquet of the contact staff specified by user in the service request of user Number " 0001 ", the network equipment determines that for the second equipment receiving this service request be the number of attending a banquet The second equipment that the contact staff of " 0001 " is used.
Again for example, the number of attending a banquet of contact staff, net are not comprised in the service request of user Network equipment, according to the not busy busy condition of each the second equipment (or the number of attending a banquet) current, determines and is used for connecing Receive this service request the second equipment (as from multiple second equipment being currently at not busy state with Machine selects second equipment, the second equipment as receiving this service request).
Specifically, the network equipment receives, based on connecting between the first equipment, the clothes being derived from user Business request, and based on the connection between the second equipment, this service request is sent and set to second Standby.
It should be noted that preferably, the network equipment can be only by the partial information in service request Send to the second equipment, for example, service request includes: user.name, Yong Husuo The number of attending a banquet specified by the title of service of request and user, the network equipment is directly by user's The title of the service that name on account and user are asked is supplied to and the number of attending a banquet specified by user The second corresponding equipment.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any reception sets from first The service request of standby user, and this service request is sent to the implementation of the second equipment, Should be included in the scope of the present invention.
In step s103, the second equipment receives and shows from the network equipment, user Service request.
Specifically, the second equipment is received based on the connection between the network equipment and is derived from the network equipment , the service request of user, and show this service request in this second equipment, for customer service Personnel understand the demand for services of user, thus providing the user corresponding service.
It should be noted that preferably, if currently still there being the clothes of the other users being not handled by Business request, then this service request being derived from user needs to rank, in this case, second Equipment can be worked as this service request and is located at queue (namely this service request becomes and is currently needed for foremost The service request processing) when, just show this service request.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any receive and show be derived from The implementation of the network equipment, user service request, should be included in the scope of the present invention Interior.
In step s104, the second equipment indicates to the network equipment according to the calling of contact staff Send the video call request for user, to set up and the first equipment between by the network equipment Video connect.
Wherein, described video is connected to carry out living body authentication and intelligent authentication to described user. Wherein, described living body authentication is used for representing that contact staff manually carries out in itself to user and has and regards Feel the real-time mutual authentication of effect, such as to the real-time limbs behavior of user, real-time respondent behavior etc. The mutual authentication being carried out, this authentication mode has subjectivity.Wherein, described intelligent authentication is used In representing to execute, by the network equipment, the automatic machinery intelligent authentication that user is carried out, such as right The machine intelligence certifications such as vocal print feature certification that user is carried out, recognition of face certification, this authenticating party Formula has objectivity.
Wherein, contact staff can be initiated calling and referred to by execution scheduled operation in the second equipment Show, such as when contact staff will accept from the service request of user, contact staff sets second Click on " starting to service " button in the standby service page being presented, to initiate calling instruction.
As an example, when contact staff will accept from the service request of user a, visitor The personnel that take currently are being directed to click in the service page of user a " starting to service " button, to initiate Calling instruction;Second equipment indicates according to this calling and sends regarding for user a to the network equipment Frequency call request, is set with setting up the second equipment and user a is used first by the network equipment Video between standby connects, thus providing service for user a.
Afterwards, network equipment execution step s105 and the first equipment execution step s106, with logical Cross the network equipment and be connected setting up the video between the first equipment and the second equipment.In step s105 In, the network equipment please according to the video call for described user from described second equipment Ask, the video set up between described first equipment and described second equipment is connected.In step s106 In, the video that the first equipment is set up by the network equipment between the first equipment and the second equipment connects Connect.
Specifically, set up the video between the first equipment and the second equipment by the network equipment to be connected Implementation include: the network equipment receive from the second equipment the video call for user Request, and the request of this video call is sent the first equipment being used to user;First equipment Reception is from the video call request of the second equipment, and asks when user's instruction accepts this video call When asking, send the response message for the request of this video call to the network equipment;Afterwards, network Equipment is based on this response message, by interacting with the first equipment, the second equipment, to set up Video between first equipment and the second equipment is connected.
After video connection establishment, contact staff is connected by this video and user carries out video Communication, to carry out living body authentication to user.
Afterwards, in step s107, the network equipment carries out intelligence according to video connection to user Certification, obtains intelligent authentication result, and this intelligent authentication result is sent to the second equipment.
Wherein, described intelligent authentication result is used for the result that instruction carries out intelligent authentication to user, This intelligent authentication result can behave as represent similarity concrete numerical value (as 0.4122), Authentication grade (as different similarity degrees in different authentication grade correspondences) etc..Need explanation It is that described intelligent authentication result can be used in subsequently being given counterevidence, and is convenient for follow-up checks.
Wherein, described intelligent authentication includes any automation authenticating party that can carry out based on video Formula, such as vocal print feature identification, recognition of face etc..
Specifically, the network equipment carries out intelligent authentication according to video connection to user, obtains intelligence Authentication result, and this intelligent authentication result is sent to the implementation of the second equipment include but not It is limited to:
1) the second equipment, according to the shooting instruction from contact staff, sends to the network equipment and claps Take the photograph configured information, so that the network equipment is based on video and connects shooting acquisition at least one user figure Piece;Then, the network equipment receives the shooting configured information from the second equipment, and according to this bat Take the photograph configured information and be directed to video connection execution shooting operation, obtain at least one user's picture;Connect , the network equipment carries out recognition of face according to this at least one user's picture to described user, obtains Obtain intelligent authentication result;Then, the network equipment sends this intelligent authentication result to the second equipment.
Wherein, contact staff can voluntarily determine when to initiate to shoot instruction, e.g., contact staff When discovery active user's image is more clear, click directly on predetermined button " candid photograph " to initiate to clap Take the photograph instruction;And for example, by video speech, contact staff informs that user adjusts direction and sitting posture, and To initiate to shoot instruction by clicking on predetermined button " candid photograph " when user's adjustment completes.
Wherein, described shoot configured information include any shooting with contact staff indicate related Information, such as shoots configured information and includes: for indicating the information captured immediately, being used for referring to Show the information of number of times of capturing, be used for indicating information of time interval between adjacent candid photograph etc..
Wherein, the network equipment connects from current video according to the shooting configured information that it receives Middle shooting obtains at least one user's picture.For example, shoot between configured information with 1s is immediately Every capturing 5 user's pictures, then the network equipment according to this shooting configured information immediately from working as forward sight Frequency is captured for interval with 1s in flowing and is obtained 5 user's pictures.
Wherein, the network equipment passes through to shoot at least one the user's picture obtaining, and sets with network The samples pictures of the user prestoring in standby are (as identity card picture, residence permit photo, passport The effectively photo such as photo) compare, user is carried out recognition of face, obtain intelligent authentication As a result, this intelligent authentication result is used for indicating in this at least one user's picture and samples pictures Human face similarity degree.For example, the network equipment is based on intelligent cloud calculation, will capture the use obtaining The identity card picture of family picture and the user prestoring is compared, and to carry out face to user Identification, and obtain intelligent authentication result, this intelligent authentication result indicates this user's picture and user Identity card picture human face similarity degree be 0.4122.
It should be noted that this implementation 1) in, because contact staff can control suitable When send shooting instruction so that the standard of intelligent authentication result that the network equipment is obtained Exactness is higher.
2) network equipment obtains at least one user's picture at random from current video connection, and Recognition of face is carried out to user according to this at least one user's picture, and the face being obtained is known Other result sends to the second equipment as Intelligent Recognition result;Or, the network equipment is from working as forward sight Frequency intercepts the audio stream of user in connecting, and according to this audio stream and this user of prestoring Sample voice feature, to carry out vocal print feature identification to this user, and by the vocal print being obtained Recognition result sends to the second equipment as intelligent authentication result;Or, the network equipment combines upper State face recognition result and vocal print recognition result to determine the intelligent authentication result for user, and This intelligent authentication result is sent to the second equipment.
This implementation 1) do not need the participation of contact staff, can more quickly and easily obtain Intelligent authentication result.
It should be noted that above-mentioned implementation 1) and 2) can combine, for example, net Network equipment adopts above-mentioned implementation 1) user is carried out recognition of face, obtain recognition of face As a result, and using implementation 2) vocal print feature identification is carried out to user, obtain Application on Voiceprint Recognition Result;Afterwards, the network equipment this face recognition result comprehensive and vocal print recognition result obtain to calculate User must be carried out with the intelligent authentication result of intelligent authentication.Scheme after this combines can be further Ensure the accuracy of intelligent authentication result.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any right according to video connection User carries out intelligent authentication, obtains intelligent authentication result, and by this intelligent authentication result send to The implementation of the second equipment, should be included in the scope of the present invention.
In step s108, the second equipment receives and shows from the network equipment based on described Video connects the intelligent authentication result that described user is carried out with intelligent authentication.
As an example, the network equipment adopts the implementation 1 of above-mentioned steps s107) come Obtain intelligent authentication result, and intelligent authentication result is sent to the second equipment;In step s108 In, the second equipment receives and shows that the network equipment is schemed based on shooting at least one user being obtained Piece carries out the intelligent authentication result of intelligent authentication to user.
As another example, the network equipment adopts the implementation 2 of above-mentioned steps s107) To obtain intelligent authentication result, and intelligent authentication result is sent to the second equipment;In step In s108, the second equipment receives and shows this intelligent authentication result.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any receive and show be derived from The intelligent authentication that based on the connection of described video, described user is carried out with intelligent authentication of the network equipment The implementation of result, should be included in the scope of the present invention.
In step s109, the second equipment is by the remote authentication result for user via described The network equipment is supplied to described first equipment.
Wherein, connected according to described intelligent authentication result and based on video by described contact staff Remote authentication result for user is determined to the living body authentication that described user is carried out.Wherein, Described remote authentication result is used for whether instruction user passes through long-distance identity-certifying.
Wherein, contact staff is connected based on the video between the first equipment and the second equipment, and it is right to come User carries out living body authentication.
As an example, contact staff is based on video connection and carries out video calling with user, and Instruction is initiated to user by voice, so that user's execution voice answer-back behavior, so that customer service Personnel carry out living body authentication according to the voice answer-back behavior of user to user.As contact staff exists Voice instruction " what identification card number is " is initiated in video, after user hears the instruction of this voice, language Its identification card number of sound response, contact staff will be aobvious with service page for the identification card number being used for response The identification card number showing is compared, and to carry out living body authentication to user.
As another example, contact staff is based on video connection and carries out video calling with user, And instruction is initiated to user by voice, corresponding limbs behavior is executed with instruction user, thus Contact staff is made to carry out living body authentication according to the limbs behavior of user to user.As contact staff Initiate voice instruction in video " identity card please be lifted by left hand, and make identity card front be illustrated in In video pictures ", after user hears the instruction of this voice, indicate corresponding to execute according to this voice Limbs behavior, so that contact staff carries out living body authentication according to its limbs behavior to user.
As a kind of preferred version, the second equipment execution step s112, the network equipment executes step Rapid s113, and the first equipment execution step s114 and step s115, so that contact staff can It is connected based on the video between the first equipment and the second equipment, to carry out living body authentication to user.
In step s112, the second equipment sends word via the network equipment to the first equipment and refers to Show information, so that contact staff is based on video connection and knows that user is directed to word configured information and is held The respondent behavior of row, and living body authentication is carried out to user according to this respondent behavior.
Wherein, described word configured information is used for representing that contact staff refers to Client-initiated word Show;Wherein, the second equipment can obtain word configured information using various ways;For example, customer service Personnel input word configured information in the text input box of service page, and the second equipment obtains should Word configured information;Again for example, the predetermined button that contact staff clicks on service page " is lifted Left hand ", according to this predetermined button, the second equipment determines that word configured information is " lifting left hand ".
Wherein, described respondent behavior is used for instruction user done by described word configured information Response, contact staff can by video connect know this respondent behavior, and pass through this response Behavior carries out living body authentication to user.Preferably, described respondent behavior includes but is not limited to: language Sound respondent behavior, limbs should be.
In step s113, the word configured information from the second equipment is forwarded by the network equipment To the first equipment, so that user connects answer corresponding with word configured information of execution based on video Answer behavior.
In step s114, the first equipment is connected it in foundation with the video between the second equipment Afterwards, receive the word configured information from the second equipment via the network equipment.
In step s115, the first equipment assumes described word configured information to user, so that User connects the execution respondent behavior corresponding with word configured information based on video.
As an example, contact staff inputs word in the text input box of service page and refers to Show information " asking voice answering identification card number ";In step s112, the second equipment is via network Equipment sends this word configured information to the first equipment;In step s113, the network equipment will This word configured information is transmitted to the first equipment;In step s114, the first equipment receives This word configured information;In step s115, the first equipment assumes the instruction of this word to user Information;Afterwards, user executes voice answer-back behavior, contact staff according to this word configured information Connected based on video and know the voice answer-back behavior of user, and according to the response content of user come right User carries out living body authentication.
Specifically, the second equipment acquisition contact staff enters according to intelligent authentication result and to user The remote authentication result determined by living body authentication of row, and by this remote authentication result via network Equipment is sent to the first equipment, to be supplied to user.
Preferably, the second equipment can be determined by the operation behavior of user long-range for user Authentication result.For example, when contact staff clicks on " passing through " on the service page in the second equipment During button, the second equipment obtains the remote authentication result for user according to this clicking operation, should Remote authentication result instruction user passes through long-distance identity-certifying;When contact staff is in the second equipment Service page on click on " not passing through " button when, the second equipment according to this clicking operation obtain pin Remote authentication result to user, this remote authentication result instruction user is recognized by remote identity Card.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any will be for described user Remote authentication result be supplied to the implementation of described first equipment via the described network equipment, Should be included in the scope of the present invention.
In step s110, the network equipment is by remotely the recognizing for user from the second equipment Card result is transmitted to the first equipment.
In step s111, the first equipment receives the pin from the second equipment via the network equipment Remote authentication result to user.
Wherein, the first equipment assumes this remote authentication result to user.
It should be noted that preferably, when remote authentication result instruction user passes through certification, Operating personnel are after determining this remote authentication result, corresponding by executing in the second equipment Service operations are providing the user respective service.
It should be noted that preferably, when remote authentication result instruction user is not authenticated, Operating personnel, after determining this remote authentication result, stop providing service (as led to for this user Cross click " stop service " button and is connected interrupting the video between user, with stopping as user There is provided service).
As a kind of preferred version, the method for the present embodiment is further comprising the steps of: the network equipment According to the log-on message of user, obtain the customer attribute information of user;Then, the network equipment will This customer attribute information sends to the second equipment;Afterwards, the second equipment receives and shows this user Attribute information.
Wherein, described customer attribute information includes any information related to user property;Preferably Ground, described customer attribute information includes but is not limited to: the accounts information of user, name, identity Card number, identity card picture and current geographic position etc..
As an example, the network equipment, according to the log-on message of user, obtains the identity of user License piece;Then, the network equipment sends this identity card picture to the second equipment;Afterwards, Two equipment receive this identity card picture, and service page specific location (as video clip Left side) show this identity card picture.
This preferred version can be easy to contact staff and further appreciate that user, and contributes to customer service people Member carries out living body authentication based on customer attribute information to user.
It should be noted that preferably, when the service request of user is arranged in foremost, or, Set up between first equipment and the second equipment after video is connected, execute the behaviour of this preferred version Make.
As another kind of preferred version, the method for the present embodiment is further comprising the steps of: network sets The standby storage service log information corresponding with described service request.
Wherein, described service log information includes any carrying out long-distance identity-certifying to user During the information that produces, this service log information can be used in subsequently being consulted and auditing.
Preferably, described service log information include following at least one:
1) customer attribute information (as title, type of credential, passport NO. etc.);
2) handling time information, for indicate operating personnel process user service request when Between;
3) accept the relevant information (as title, employee number etc.) of the contact staff of service request;
4) intelligent authentication result and remote authentication result;
5) the user and client personnel behavioural information during long-distance identity-certifying;
6) other relevant informations (as serial number, intelligent authentication channel, are audited to certification Personnel etc.).
It should be noted that above-mentioned service log information is only for example, rather than the limit to the present invention System, any information producing during user is carried out with long-distance identity-certifying, all should comprise In the range of service log information of the present invention.
Wherein, the network equipment can be during long-distance identity-certifying and/or long-distance identity-certifying The operation of storage service record information after completing.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any storage and described service Ask the implementation of corresponding service log information, should be included in the scope of the present invention Interior.
According to the scheme of the present embodiment, take and be defined by mutual authentication, be aided with setting of intelligent authentication Meter criterion, there is provided a kind of high efficiency, high accuracy, low False Rate, low misdetection rate and just In the long-distance identity-certifying mode of follow-up audit, effectively prevent sales counter manual type and machine intelligence Can defect existing for mode, easy to operate, using safety, can active balance False Rate and Misdetection rate, can be that client brings easily user on the premise of meeting national policy regulation again Experience;Do not need user to carry out scene to handle such that it is able to conveniently and efficiently provide the user remote Journey services, and without being limited by geographical conditions, reduces the construction cost of outlet simultaneously; Can connect user is carried out with long-distance identity-certifying, the mistake of this long-distance identity-certifying based on video Journey includes the living body authentication to user and intelligent authentication so that remote authentication result combines intelligence Authentication result and contact staff carry out the subjective authentication result of living body authentication to user, so that The accuracy of remote authentication result is higher and greatly reduces False Rate and misdetection rate;Network sets Standby can store intelligent authentication result and remote authentication as a result, it is possible to provide perfect for operating audit Technical support, consequently facilitating carrying out follow-up checks, and it is artificial to be prevented effectively from current sales counter The drawbacks of responsibility present in mode cannot be assert.
Fig. 3 is the system for user is carried out with long-distance identity-certifying of one embodiment of the invention Structural representation.This system includes the first equipment, the second equipment and the network equipment;Wherein, Described first equipment include for long-distance identity-certifying is carried out to user device (hereinafter referred to as " first device "), this first device further includes that the first dispensing device 101, first is set up Device 106, first receiving device 111;Wherein, described second equipment is included for user Carry out the device (hereinafter referred to as " second device ") of long-distance identity-certifying, this second device is entered One step includes the 3rd reception device 103, calling apparatus for initiating 104, the 4th reception device 108 With the second dispensing device 109;Wherein, the described network equipment is included for carrying out remotely to user The device (hereinafter referred to as " 3rd device ") of authentication, this 3rd device further includes 5th dispensing device 102, second set up device 105, intelligent authentication device 107 and first turn Transmitting apparatus 110.
It should be noted that before the operation of execution the present embodiment, it is right that the network equipment has completed User using the first equipment and the login authentication of the contact staff using the second equipment, That is, user logs on to the network equipment by the first equipment, and contact staff has passed through the second equipment Log on to the network equipment.
For example, user input in the first equipment its log-on message (as user.name, Account password, identity type (as " user "), identifying code etc.), this is stepped on by the first equipment Record information is supplied to the network equipment, in the network device login authentication is carried out to this user, when When this user passes through login authentication, this user passes through the first equipment Successful login to the network equipment.
Again for example, contact staff inputs its log-on message (as contact staff in the second equipment Name on account, account password, identity type (as " attending a banquet "), identifying code etc.), second This log-on message is supplied to the network equipment by equipment, to enter to this contact staff in the network device Row login authentication, when this contact staff passes through login authentication, this contact staff sets by first Standby Successful login is to the network equipment.It should be noted that it is preferable that working as customer service in this example When personnel do not possess the fixing number of attending a banquet, the network equipment is by each contact staff of checking certainly Move the distribution one uniquely number of attending a banquet, and record each contact staff (or second equipment) and sit Current corresponding relation between seat number.
Afterwards, the service request from user is sent by the first dispensing device 101 of the first equipment To the network equipment.
Wherein, the service that described service request is asked for instruction user, described service request Including any information related to the service that user is asked;Preferably, described service request bag Include but be not limited to: the identification information (as account title, id etc.) of user, user ask The type of service, the information such as title or numbering, the customer service accepting this service specified by user Number of attending a banquet of personnel etc..
Wherein, user can be by the first equipment, execution be clicked on or gesture operation indicates its institute The service of request.
As an example, user clicks on " financing product in the webpage that the first equipment is presented Product ", the first dispensing device 101 of the first equipment by the service request from user, " produce by financing Product " send to the network equipment.
The service that 5th dispensing device 102 of the network equipment receives the user from the first equipment please Ask, and this service request is sent to the second equipment.
Wherein, the 5th dispensing device 102 can be determined using various ways and ask for receiving this service The second equipment asked.
For example, comprise attending a banquet of the contact staff specified by user in the service request of user Number " 0001 ", the 5th dispensing device 102 determines the second equipment for receiving this service request The second equipment being used for the contact staff of the number of attending a banquet " 0001 ".
Again for example, do not comprise the number of attending a banquet of contact staff in the service request of user, the Five dispensing devices 102 according to the not busy busy condition of each the second equipment (or the number of attending a banquet) current, really Fixed the second equipment being used for receiving this service request is (as from being currently at multiple the second of not busy state Randomly choose second equipment in equipment, set as second for receiving this service request Standby).
Specifically, the 5th dispensing device 102 is received based on the connection between the first equipment and is derived from The service request of user, and based on the connection between the second equipment by this service request send to Second equipment.
It should be noted that preferably, the 5th dispensing device 102 can be only by service request Partial information sends to the second equipment, and for example, service request includes: user.name, The number of attending a banquet specified by the title of the service that user is asked and user, the 5th dispensing device The title of 102 services directly asked user.name with user is supplied to and user The second corresponding equipment of the specified number of attending a banquet.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any reception sets from first The service request of standby user, and this service request is sent to the implementation of the second equipment, Should be included in the scope of the present invention.
3rd reception device 103 of the second equipment receives and shows from the network equipment, user Service request.
Specifically, the 3rd reception device 103 of the second equipment is based on the second equipment and the network equipment Between connect to receive and be derived from the network equipment, user service request, and in this second equipment Middle this service request of display, so that contact staff understands the demand for services of user, thus be user Corresponding service is provided.
It should be noted that preferably, if currently still there being the clothes of the other users being not handled by Business request, then this service request being derived from user needs to rank, in this case, the 3rd Reception device 103 can be worked as this service request and be located at queue (namely this service request becomes foremost It is currently needed for the service request processing) when, just show this service request.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any receive and show be derived from The implementation of the network equipment, user service request, should be included in the scope of the present invention Interior.
The calling apparatus for initiating 104 of the second equipment indicates according to the calling of contact staff and sets to network Preparation send for user video call request, with by the network equipment set up with the first equipment it Between video connect.
Wherein, described video is connected to carry out living body authentication and intelligent authentication to described user. Wherein, described living body authentication is used for representing that contact staff manually carries out in itself to user and has and regards Feel the real-time mutual authentication of effect, such as to the real-time limbs behavior of user, real-time respondent behavior etc. The mutual authentication being carried out, this authentication mode has subjectivity.Wherein, described intelligent authentication is used In representing to execute, by the network equipment, the automatic machinery intelligent authentication that user is carried out, such as right The machine intelligence certifications such as vocal print feature certification that user is carried out, recognition of face certification, this authenticating party Formula has objectivity.
Wherein, contact staff can be initiated calling and referred to by execution scheduled operation in the second equipment Show, such as when contact staff will accept from the service request of user, contact staff sets second Click on " starting to service " button in the standby service page being presented, to initiate calling instruction.
As an example, when contact staff will accept from the service request of user a, visitor The personnel that take currently are being directed to click in the service page of user a " starting to service " button, to send out Play calling instruction;Calling apparatus for initiating 104 indicates to send to the network equipment according to this calling and is directed to The video call request of user a, to set up the second equipment and user a institute by the network equipment Video between the first equipment using connects, thus providing service for user a.
Afterwards, the second of the network equipment is set up device 105 and the first of the first equipment and sets up device 106 execute operation, to set up regarding between the first equipment and the second equipment by the network equipment Frequency connects.The second of the network equipment sets up device 105 according to being directed to from described second equipment The video call request of described user, sets up between described first equipment and described second equipment Video connects.The first of first equipment is set up device 106 and sets up the first equipment by the network equipment Video between the second equipment is connected.
Specifically, set up the video between the first equipment and the second equipment by the network equipment to be connected Implementation include: the second of the network equipment is set up device 105 and receives from the second equipment Video call for user is asked, and this video call request transmission to user is used First equipment;The first of first equipment is set up device 106 reception and exhales from the video of the second equipment Cry request, and when user's instruction accepts the request of this video call, send to the network equipment and be directed to The response message of this video call request;Afterwards, the second of the network equipment sets up device 105 base In this response message, by interacting with the first equipment, the second equipment, to set up first and to set Standby video between the second equipment is connected.
After video connection establishment, contact staff is connected by this video and user carries out video Communication, to carry out living body authentication to user.
Afterwards, the intelligent authentication device 107 of the network equipment carries out intelligence according to video connection to user Energy certification, obtains intelligent authentication result, and this intelligent authentication result is sent to the second equipment.
Wherein, described intelligent authentication result is used for the result that instruction carries out intelligent authentication to user, This intelligent authentication result can behave as represent similarity concrete numerical value (as 0.4122), Authentication grade (as different similarity degrees in different authentication grade correspondences) etc..Need explanation It is that described intelligent authentication result can be used in subsequently being given counterevidence, and is convenient for follow-up checks.
Wherein, described intelligent authentication includes any automation authenticating party that can carry out based on video Formula, such as vocal print feature identification, recognition of face etc..
Specifically, the intelligent authentication device 107 of the network equipment connects according to video and user is carried out Intelligent authentication, obtains intelligent authentication result, and this intelligent authentication result is sent to the second equipment Implementation include but is not limited to:
1) second device of the second equipment further includes the 4th dispensing device (not shown), Intelligent authentication device 107 further includes filming apparatus (not shown), face identification device (figure Do not show) and the 6th dispensing device (not shown).
4th dispensing device of the second equipment indicates according to the shooting from contact staff, to network Equipment sends and shoots configured information, so that the network equipment is based on video connection shooting and obtains at least one Individual user's picture;Then, the shooting that the filming apparatus of the network equipment receive from the second equipment refers to Show information, and according to this shooting configured information be directed to video connect execution shooting operation, obtain to Few user's picture;Then, according to this, at least one uses the face identification device of the network equipment Family picture carries out recognition of face to described user, obtains intelligent authentication result;Then, network sets The 6th standby dispensing device sends this intelligent authentication result to the second equipment.
Wherein, contact staff can voluntarily determine when to initiate to shoot instruction, e.g., contact staff When discovery active user's image is more clear, click directly on predetermined button " candid photograph " to initiate Shoot instruction;And for example, by video speech, contact staff informs that user adjusts direction and sitting posture, And to initiate to shoot instruction by clicking on predetermined button " candid photograph " when user's adjustment completes.
Wherein, described shoot configured information include any shooting with contact staff indicate related Information, such as shoots configured information and includes: for indicating the information captured immediately, being used for referring to Show the information of number of times of capturing, be used for indicating information of time interval between adjacent candid photograph etc..
Wherein, the shooting configured information that the filming apparatus of the network equipment receive according to it is come from working as Front video shoots in connecting and obtains at least one user's picture.For example, shoot configured information immediately 5 user's pictures are captured for interval with 1s, then the filming apparatus of the network equipment are according to this shooting Configured information obtains 5 user's pictures with 1s for interval candid photograph immediately from current video stream.
Wherein, the face identification device of the network equipment passes through to shoot at least one user obtaining The samples pictures of the user prestoring in picture, with the network equipment are (as identity card picture, residence Live the effectively photo such as license piece, passport photograph) compare, to carry out recognition of face to user, Obtain intelligent authentication result, this intelligent authentication result be used for indicating this at least one user's picture with Human face similarity degree in samples pictures.For example, the face identification device of the network equipment is based on intelligence Cloud computing mode, will capture the identity card picture of the user's picture obtaining and the user prestoring Compare, to carry out recognition of face to user, and obtain intelligent authentication result, this intelligence is recognized Card result indicates that this user's picture is 0.4122 with the human face similarity degree of the identity card picture of user.
It should be noted that this implementation 1) in, because contact staff can control suitable When send shooting instruction so that face identification device obtained intelligent authentication knot The degree of accuracy of fruit is higher.
2) intelligent authentication device 107 is random obtains at least one user from current video connects Picture, and recognition of face is carried out to user according to this at least one user's picture, and will be obtained Face recognition result send to the second equipment as Intelligent Recognition result;Or, intelligent authentication Device 107 intercepts the audio stream of user from current video connection, and according to this audio stream and The sample voice feature of this user prestoring, to carry out vocal print feature identification to this user, And the Application on Voiceprint Recognition being obtained result is sent to the second equipment as intelligent authentication result;Or Person, intelligent authentication device 107 to determine with reference to above-mentioned face recognition result and vocal print recognition result For the intelligent authentication result of user, and this intelligent authentication result is sent to the second equipment.
This implementation 1) do not need the participation of contact staff, can more quickly and easily obtain Intelligent authentication result.
It should be noted that above-mentioned implementation 1) and 2) can combine, for example, net The intelligent authentication device 107 of network equipment adopts above-mentioned implementation 1) to carry out face to user Identification, obtains face recognition result, and adopts implementation 2) vocal print feature is carried out to user Identification, obtains Application on Voiceprint Recognition result;Afterwards, intelligent authentication device 107 this recognition of face comprehensive Result and vocal print recognition result obtain, to calculate, the intelligent authentication knot that user is carried out with intelligent authentication Really.Scheme after this combination can be further ensured that the accuracy of intelligent authentication result.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any right according to video connection User carries out intelligent authentication, obtains intelligent authentication result, and by this intelligent authentication result send to The implementation of the second equipment, should be included in the scope of the present invention.
4th reception device 108 of the second equipment receives and shows from the network equipment based on institute State video and connect the intelligent authentication result that described user is carried out with intelligent authentication.
As an example, the 4th reception device 108 of the second equipment further includes that the 5th connects Receiving apparatus (not shown).The intelligent authentication device 107 of the network equipment adopts its implementation 1) To obtain intelligent authentication result, and intelligent authentication result is sent to the second equipment;Second equipment The 5th reception device receive and show the network equipment based on shoot obtained at least one use Family picture carries out the intelligent authentication result of intelligent authentication to user.
As another example, the intelligent authentication device 107 of the network equipment adopts its implementation 2) obtaining intelligent authentication result, and intelligent authentication result is sent to the second equipment;Second 4th reception device 108 of equipment receives and shows this intelligent authentication result.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any receive and show be derived from The intelligent authentication that based on the connection of described video, described user is carried out with intelligent authentication of the network equipment The implementation of result, should be included in the scope of the present invention.
Second dispensing device 109 of the second equipment is by the remote authentication result for user via institute State the network equipment and be supplied to described first equipment.
Wherein, connected according to described intelligent authentication result and based on video by described contact staff Remote authentication result for user is determined to the living body authentication that described user is carried out.Wherein, Described remote authentication result is used for whether instruction user passes through long-distance identity-certifying.
Wherein, contact staff is connected based on the video between the first equipment and the second equipment, and it is right to come User carries out living body authentication.
As an example, contact staff is based on video connection and carries out video calling with user, and Instruction is initiated to user by voice, so that user's execution voice answer-back behavior, so that customer service Personnel carry out living body authentication according to the voice answer-back behavior of user to user.As contact staff exists Voice instruction " what identification card number is " is initiated in video, after user hears the instruction of this voice, Its identification card number of voice answer-back, contact staff is by the identification card number and the service page that are used for response The identification card number of display is compared, and to carry out living body authentication to user.
As another example, contact staff is based on video connection and carries out video calling with user, And instruction is initiated to user by voice, corresponding limbs behavior is executed with instruction user, thus Contact staff is made to carry out living body authentication according to the limbs behavior of user to user.As contact staff Initiate voice instruction in video " identity card please be lifted by left hand, and make identity card front be illustrated in In video pictures ", after user hears the instruction of this voice, indicate corresponding to execute according to this voice Limbs behavior, so that contact staff carries out living body authentication according to its limbs behavior to user.
As a kind of preferred version, the second device of the second equipment further includes the 3rd transmission dress Put (not shown), the further second retransmission unit (not shown) of 3rd device of the network equipment, The first device of the first equipment further includes the second reception device (not shown) and assumes device (not shown).
3rd dispensing device of the second equipment sends word via the network equipment to the first equipment and refers to Show information, so that contact staff is based on video connection and knows that user is directed to word configured information and is held The respondent behavior of row, and living body authentication is carried out to user according to this respondent behavior.
Wherein, described word configured information is used for representing that contact staff refers to Client-initiated word Show;Wherein, the 3rd dispensing device can obtain word configured information using various ways;For example, Contact staff inputs word configured information in the text input box of service page, and the 3rd sends dress Put this word configured information of acquisition;Again for example, what contact staff clicked on service page predetermined presses Button " lifts left hand ", according to this predetermined button, the 3rd dispensing device determines that word configured information is " lifting left hand ".
Wherein, described respondent behavior is used for instruction user done by described word configured information Response, contact staff can by video connect know this respondent behavior, and pass through this response Behavior carries out living body authentication to user.Preferably, described respondent behavior includes but is not limited to: language Sound respondent behavior, limbs should be.
Word configured information from the second equipment is forwarded by the second retransmission unit of the network equipment To the first equipment, so that user connects answer corresponding with word configured information of execution based on video Answer behavior.
Second reception device of the first equipment is connected it in foundation with the video between the second equipment Afterwards, receive the word configured information from the second equipment via the network equipment.
The device that presents of the first equipment assumes described word configured information to user, so that user's base Connect the execution respondent behavior corresponding with word configured information in video.
As an example, contact staff inputs word in the text input box of service page and refers to Show information " asking voice answering identification card number ";3rd dispensing device of the second equipment is via network Equipment sends this word configured information to the first equipment;Second retransmission unit of the network equipment should Word configured information is transmitted to the first equipment;Second reception device of the first equipment receives this article Word configured information;The device that presents of the first equipment assumes this word configured information to user;Afterwards, User executes voice answer-back behavior according to this word configured information, and contact staff is based on video and connects Know the voice answer-back behavior of user, and live body is carried out to user according to the response content of user Certification.
Specifically, second dispensing device 109 of the second equipment obtains contact staff and is recognized according to intelligence Card result and the remote authentication result determined by living body authentication that user is carried out, and this is remote Journey authentication result is sent to the first equipment via the network equipment, to be supplied to user.
Preferably, the second dispensing device 109 of the second equipment can by the operation behavior of user Lai Determine the remote authentication result for user.For example, the clothes in the second equipment as contact staff When clicking on " passing through " button on the business page, the second dispensing device 109 of the second equipment is according to this Clicking operation obtains the remote authentication result for user, and this remote authentication result instruction user is led to Cross long-distance identity-certifying;" do not lead to when contact staff clicks on the service page in the second equipment Cross " button when, the second dispensing device 109 of the second equipment obtains according to this clicking operation and is directed to The remote authentication result of user, this remote authentication result instruction user is recognized by remote identity Card.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any will be for described user Remote authentication result be supplied to the implementation of described first equipment via the described network equipment, Should be included in the scope of the present invention.
First retransmission unit 110 of the network equipment will be long-range for user from the second equipment Authentication result is transmitted to the first equipment.
The first receiving device 111 of the first equipment receives from the second equipment via the network equipment Remote authentication result for user.
Wherein, the first receiving device 111 of the first equipment assumes this remote authentication result to user.
It should be noted that preferably, when remote authentication result instruction user passes through certification, Operating personnel are after determining this remote authentication result, corresponding by executing in the second equipment Service operations are providing the user respective service.
It should be noted that preferably, when remote authentication result instruction user is not authenticated, Operating personnel, after determining this remote authentication result, stop providing service (as led to for this user Cross click " stop service " button and is connected interrupting the video between user, with stopping as use Family provides service).
As a kind of preferred version, the 3rd device of the network equipment also includes acquisition device and (schemes not Show) and the 7th dispensing device (not shown), the second device of the second equipment also includes display dress Put (not shown).The acquisition device of the network equipment, according to the log-on message of user, obtains user Customer attribute information;Then, the 7th dispensing device of the network equipment is by this customer attribute information Send to the second equipment;Afterwards, the display device of the second equipment receives and shows this user property Information.
Wherein, described customer attribute information includes any information related to user property;Preferably Ground, described customer attribute information includes but is not limited to: the accounts information of user, name, identity Card number, identity card picture and current geographic position etc..
As an example, the acquisition device of the network equipment, according to the log-on message of user, obtains The identity card picture of user;Then, the 7th dispensing device of the network equipment is by this identity card picture Send to the second equipment;Afterwards, the display device of the second equipment receives this identity card picture, and Show this identity card picture in the specific location (on the left of video clip) of service page.
This preferred version can be easy to contact staff and further appreciate that user, and contributes to customer service people Member carries out living body authentication based on customer attribute information to user.
It should be noted that preferably, when the service request of user is arranged in foremost, or, Set up between first equipment and the second equipment after video is connected, execute the behaviour of this preferred version Make.
As another kind of preferred version, the 3rd device of the network equipment also includes storage device (figure Do not show).The storage device of the network equipment stores the service log corresponding with described service request Information.
Wherein, described service log information includes any carrying out long-distance identity-certifying to user During the information that produces, this service log information can be used in subsequently being consulted and auditing.
Preferably, described service log information include following at least one:
1) customer attribute information (as title, type of credential, passport NO. etc.);
2) handling time information, for indicate operating personnel process user service request when Between;
3) accept the relevant information (as title, employee number etc.) of the contact staff of service request;
4) intelligent authentication result and remote authentication result;
5) the user and client personnel behavioural information during long-distance identity-certifying;
6) other relevant informations (as serial number, intelligent authentication channel, are audited to certification Personnel etc.).
It should be noted that above-mentioned service log information is only for example, rather than the limit to the present invention System, any information producing during user is carried out with long-distance identity-certifying, all should comprise In the range of service log information of the present invention.
Wherein, the storage device of the network equipment can be during long-distance identity-certifying and/or remote Journey authentication complete after storage service record information operation.
It should be noted that the example above is only better described technical scheme, and Non- limitation of the present invention, it should be appreciated by those skilled in the art that any storage and described service Ask the implementation of corresponding service log information, should be included in the scope of the present invention Interior.
According to the scheme of the present embodiment, take and be defined by mutual authentication, be aided with setting of intelligent authentication Meter criterion, there is provided a kind of high efficiency, high accuracy, low False Rate, low misdetection rate and just In the long-distance identity-certifying mode of follow-up audit, effectively prevent sales counter manual type and machine intelligence Can defect existing for mode, easy to operate, using safety, can active balance False Rate and Misdetection rate, can be that client brings easily user on the premise of meeting national policy regulation again Experience;Do not need user to carry out scene to handle such that it is able to conveniently and efficiently provide the user remote Journey services, and without being limited by geographical conditions, reduces the construction cost of outlet simultaneously; Can connect user is carried out with long-distance identity-certifying, the mistake of this long-distance identity-certifying based on video Journey includes the living body authentication to user and intelligent authentication so that remote authentication result combines intelligence Authentication result and contact staff carry out the subjective authentication result of living body authentication to user, so that The accuracy of remote authentication result is higher and greatly reduces False Rate and misdetection rate;Network sets Standby can store intelligent authentication result and remote authentication as a result, it is possible to provide perfect for operating audit Technical support, consequently facilitating carrying out follow-up checks, and it is artificial to be prevented effectively from current sales counter The drawbacks of responsibility present in mode cannot be assert.
It should be noted that preferably, in the present invention, first device in the first equipment and Second device in second equipment can behave as browser, browser plug-in or client.
It should be noted that the present invention can be by reality in the software and/or software assembly with hardware Apply, for example, assembly of the invention can adopt special IC (asic) or any other class To realize like hardware device.In one embodiment, the software program of the present invention can be by place Reason device executes to realize steps described above or function.Similarly, the software program (bag of the present invention Include the data structure of correlation) can be stored in computer readable recording medium storing program for performing, for example, ram Memory, magnetically or optically driver or floppy disc and similar devices.In addition, some steps of the present invention Rapid or function can employ hardware to realize, and for example, coordinates thus executing each as with processor Step or the circuit of function.
It is obvious to a person skilled in the art that the invention is not restricted to above-mentioned one exemplary embodiment Details, and without departing from the spirit or essential characteristics of the present invention, can be with it His concrete form realizes the present invention.Therefore, no matter from the point of view of which point, all should be by embodiment Regard exemplary as, and be nonrestrictive, the scope of the present invention is by claims Rather than described above limit, it is intended that by fall claim equivalency implication and In the range of all changes be included in the present invention.Should not be by any accompanying drawing mark in claim Note is considered as limiting involved claim.Furthermore, it is to be understood that " inclusion " one word is not excluded for other lists Unit or step, odd number is not excluded for plural number.Multiple units of statement or device in system claims Can also be realized by software or hardware by a unit or device.The first, the second grade word Pragmatic is representing title, and is not offered as any specific order.

Claims (23)

1. a kind of method being used for carrying out long-distance identity-certifying to user in the first equipment, wherein, The method comprises the following steps:
Service request from user is sent to the network equipment, wherein, the described network equipment is complete The login authentication of described user in pairs;
Set up described first equipment by the described network equipment to be connected with the video between the second equipment, Wherein, described video is connected to carry out living body authentication and intelligent authentication to described user;
Receive the remote authentication knot for described user from the second equipment via the described network equipment Really.
2. method according to claim 1, wherein, the method also includes:
After setting up described video and connecting, receive via the described network equipment and set from described second Standby word configured information;
Assume described word configured information to user, so that described user is based on described video connection and holds The row respondent behavior corresponding with described word configured information.
3. a kind of method being used for carrying out long-distance identity-certifying to user in the second equipment, wherein, The method comprises the following steps:
Receive and show that wherein, described network sets from the network equipment, user service request The standby login authentication having completed to the contact staff using described second equipment;
Sent for described user's to the described network equipment according to the calling instruction of described contact staff Video call is asked, to set up the video and described first equipment between by the described network equipment even Connect, wherein, described video is connected to carry out living body authentication and intelligent authentication to described user;
Receive and show to connect based on described video from the network equipment and intelligence is carried out to described user The intelligent authentication result of certification;
Remote authentication result for described user is supplied to described first via the described network equipment Equipment, wherein, according to described intelligent authentication result and is based on described video by described contact staff Connect the living body authentication that described user is carried out to determine described remote authentication result.
4. method according to claim 3, wherein, the method also includes:
Send word configured information via the described network equipment to described first equipment, so that customer service people Member is connected based on described video knows that user is directed to the response row performed by described word configured information For, and living body authentication is carried out to user according to described respondent behavior.
5. the method according to claim 3 or 4, wherein, the method also includes:
According to the shooting instruction from described contact staff, send to the network equipment and shoot configured information, So that the described network equipment is based on described video and connects shooting at least one user's picture of acquisition;
Wherein, described receive and show from the network equipment based on described video connect to described use The step that family carries out the intelligent authentication result of intelligent authentication includes:
Receive and show that the network equipment is based at least one user's picture described and carries out intelligence to described user The intelligent authentication result of energy certification.
6. the method according to any one of claim 3 to 5, wherein, the method also includes:
Receive and show the customer attribute information of the described user from the described network equipment.
7. a kind of method being used in the network device carrying out long-distance identity-certifying to user, wherein, The method comprises the following steps:
Receive the service request of the user from the first equipment, and described service request is sent to the Two equipment, wherein, the described network equipment has completed to described user with using described second equipment The login authentication of contact staff;
According to the video call request for described user from described second equipment, set up described Video between first equipment and described second equipment is connected, and wherein, it is right that described video is connected to Described user carries out living body authentication and intelligent authentication;
Connected according to described video and intelligent authentication carried out to described user, obtain intelligent authentication result, And send described intelligent authentication result to described second equipment;
Described will be transmitted to from described second equipment for the remote authentication result of described user One equipment.
8. method according to claim 7, wherein, the method also includes:
Word configured information from described second equipment is transmitted to described first equipment, so that institute State user and the execution respondent behavior corresponding with described word configured information is connected based on described video.
9. method according to claim 7, wherein, described according to described video connect to institute State user and carry out intelligent authentication, obtain intelligent authentication result, and described intelligent authentication result is sent Step to described second equipment includes:
Receive the shooting configured information from described second equipment, and according to described shooting configured information Connect execution shooting operation for described video, obtain at least one user's picture;
Recognition of face is carried out according at least one user's picture described to described user, obtains intelligence and recognize Card result;
Described intelligent authentication result is sent to described second equipment.
10. the method according to any one of claim 7 to 9, wherein, the method is also wrapped Include:
According to the log-on message of described user, obtain the customer attribute information of described user;
Described customer attribute information is sent to described second equipment.
11. methods according to any one of claim 7 to 10, wherein, the method is also wrapped Include:
Store the service log information corresponding with described service request.
12. a kind of be used for user carried out with the device of long-distance identity-certifying in the first equipment, wherein, This device includes:
First dispensing device, for sending the service request from user to the network equipment, wherein, The described network equipment has completed the login authentication to described user;
First sets up device, sets with second for setting up described first equipment by the described network equipment Video between standby connects, and wherein, described video is connected to carry out living body authentication to described user And intelligent authentication;
First receiving device, for receiving from the second equipment for institute via the described network equipment State the remote authentication result of user.
13. devices according to claim 12, wherein, this device also includes:
Second reception device, for after setting up described video and connecting, via the described network equipment Receive the word configured information from described second equipment;
Assume device, for assuming described word configured information to user, so that described user is based on Described video connects the execution respondent behavior corresponding with described word configured information.
14. a kind of be used for user carried out with the device of long-distance identity-certifying in the second equipment, wherein, This device includes:
3rd reception device, for receiving and showing from the network equipment, user service request, Wherein, the described network equipment has completed the login of the contact staff using described second equipment is tested Card;
Calling apparatus for initiating, for indicating to the described network equipment according to the calling of described contact staff Send the video call request for described user, to set up and described the by the described network equipment Video between one equipment connects, and wherein, described video is connected to carry out live body to described user Certification and intelligent authentication;
4th reception device, is connected based on described video from the network equipment for receiving and showing Described user is carried out with the intelligent authentication result of intelligent authentication;
Second dispensing device, for by the remote authentication result for described user via described network Equipment is supplied to described first equipment, wherein, is tied according to described intelligent authentication by described contact staff Fruit and being connected based on described video determines described long-range to the living body authentication that described user is carried out Authentication result.
15. devices according to claim 14, wherein, described device also includes:
3rd dispensing device, refers to for sending word via the described network equipment to described first equipment Show information, so that contact staff is based on described video connection and knows that user is directed to described word instruction letter The performed respondent behavior of breath, and living body authentication is carried out to user according to described respondent behavior.
16. devices according to claims 14 or 15, wherein, this device also includes:
4th dispensing device, for according to the shooting instruction from described contact staff, setting to network Preparation send shooting configured information, so that the described network equipment is based on described video and connects shooting acquisition extremely Few user's picture;
Wherein, described 4th reception device includes:
5th reception device, is based at least one user's picture described to institute for receiving the network equipment State the intelligent authentication result that user carries out intelligent authentication.
17. devices according to any one of claim 14 to 16, wherein, this device is also Including:
Display device, the user for receiving and showing the described user from the described network equipment belongs to Property information.
18. a kind of be used in the network device user carried out with the device of long-distance identity-certifying, wherein, This device includes:
5th dispensing device, for receiving the service request of the user from the first equipment, and by institute State service request to send to the second equipment, wherein, the described network equipment completed to described user and Login authentication using the contact staff of described second equipment;
Second sets up device, for according to the video for described user from described second equipment Call request, the video set up between described first equipment and described second equipment is connected, wherein, Described video is connected to carry out living body authentication and intelligent authentication to described user;
Intelligent authentication device, carries out intelligent authentication for connecting according to described video to described user, Obtain intelligent authentication result, and described intelligent authentication result is sent to described second equipment;
First retransmission unit, for by remotely the recognizing for described user from described second equipment Card result is transmitted to described first equipment.
19. devices according to claim 18, wherein, this device also includes:
Second retransmission unit, for being transmitted to institute by the word configured information from described second equipment State the first equipment, so that described user is based on described video and connects execution and described word configured information Corresponding respondent behavior.
20. devices according to claim 18, wherein, described intelligent authentication device includes:
Filming apparatus, for receiving the shooting configured information from described second equipment, and according to institute State shooting configured information and be directed to described video connection execution shooting operation, obtain at least one user figure Piece;
Face identification device, for entering pedestrian according at least one user's picture described to described user Face identifies, obtains intelligent authentication result;
6th dispensing device, for sending described intelligent authentication result to described second equipment.
21. devices according to any one of claim 18 to 20, wherein, this device is also Including:
Obtain device, for the log-on message according to described user, the user obtaining described user belongs to Property information;
7th dispensing device, for sending described customer attribute information to described second equipment.
22. devices according to any one of claim 18 to 21, wherein, this device is also Including:
Storage device, for storing the service log information corresponding with described service request.
A kind of 23. systems for user is carried out with long-distance identity-certifying, this system includes first and sets Standby, the second equipment and the network equipment, wherein, described first equipment includes such as claim 12 Or the device described in 13, described second equipment includes as any one of claim 14 to 17 institute The device stated, the described network equipment includes the device as any one of claim 18 to 22.
CN201510667095.7A 2015-10-15 2015-10-15 A kind of methods, devices and systems for being used to carry out user long-distance identity-certifying Active CN106341380B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201510667095.7A CN106341380B (en) 2015-10-15 2015-10-15 A kind of methods, devices and systems for being used to carry out user long-distance identity-certifying

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510667095.7A CN106341380B (en) 2015-10-15 2015-10-15 A kind of methods, devices and systems for being used to carry out user long-distance identity-certifying

Publications (2)

Publication Number Publication Date
CN106341380A true CN106341380A (en) 2017-01-18
CN106341380B CN106341380B (en) 2018-02-16

Family

ID=57826696

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510667095.7A Active CN106341380B (en) 2015-10-15 2015-10-15 A kind of methods, devices and systems for being used to carry out user long-distance identity-certifying

Country Status (1)

Country Link
CN (1) CN106341380B (en)

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109302452A (en) * 2018-09-03 2019-02-01 视联动力信息技术股份有限公司 A kind of method and apparatus of business processing
CN109377185A (en) * 2018-11-13 2019-02-22 广州市华标科技发展有限公司 Wisdom certificates handling just police uniform business method, apparatus, system, background service equipment and medium
CN109509131A (en) * 2018-11-13 2019-03-22 广州市华标科技发展有限公司 Wisdom certificates handling convenience service method, apparatus, system, certificates handling terminal and medium
WO2019232996A1 (en) * 2018-06-05 2019-12-12 平安科技(深圳)有限公司 Video-based service processing system and method, user terminal, and storage medium
CN111784507A (en) * 2020-07-01 2020-10-16 中国银行股份有限公司 Remote auditing method, device, equipment and storage medium
CN113378135A (en) * 2021-06-08 2021-09-10 华中科技大学 Method for inquiring and verifying private data of computer
CN114677634A (en) * 2022-05-30 2022-06-28 成都新希望金融信息有限公司 Surface label identification method and device, electronic equipment and storage medium

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110072500A1 (en) * 2009-09-08 2011-03-24 Thomas Varghese Client Identification System Using Video Conferencing Technology
CN102622588A (en) * 2012-03-08 2012-08-01 无锡数字奥森科技有限公司 Dual-certification face anti-counterfeit method and device
CN102968612A (en) * 2012-07-27 2013-03-13 中国工商银行股份有限公司 Bank identity identification method and system
CN104348778A (en) * 2013-07-25 2015-02-11 信帧电子技术(北京)有限公司 Remote identity authentication system, terminal and method carrying out initial face identification at handset terminal

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110072500A1 (en) * 2009-09-08 2011-03-24 Thomas Varghese Client Identification System Using Video Conferencing Technology
CN102622588A (en) * 2012-03-08 2012-08-01 无锡数字奥森科技有限公司 Dual-certification face anti-counterfeit method and device
CN102968612A (en) * 2012-07-27 2013-03-13 中国工商银行股份有限公司 Bank identity identification method and system
CN104348778A (en) * 2013-07-25 2015-02-11 信帧电子技术(北京)有限公司 Remote identity authentication system, terminal and method carrying out initial face identification at handset terminal

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2019232996A1 (en) * 2018-06-05 2019-12-12 平安科技(深圳)有限公司 Video-based service processing system and method, user terminal, and storage medium
CN109302452A (en) * 2018-09-03 2019-02-01 视联动力信息技术股份有限公司 A kind of method and apparatus of business processing
CN109377185A (en) * 2018-11-13 2019-02-22 广州市华标科技发展有限公司 Wisdom certificates handling just police uniform business method, apparatus, system, background service equipment and medium
CN109509131A (en) * 2018-11-13 2019-03-22 广州市华标科技发展有限公司 Wisdom certificates handling convenience service method, apparatus, system, certificates handling terminal and medium
CN111784507A (en) * 2020-07-01 2020-10-16 中国银行股份有限公司 Remote auditing method, device, equipment and storage medium
CN113378135A (en) * 2021-06-08 2021-09-10 华中科技大学 Method for inquiring and verifying private data of computer
CN113378135B (en) * 2021-06-08 2023-08-25 华中科技大学 Method for inquiring and verifying privacy data of computer
CN114677634A (en) * 2022-05-30 2022-06-28 成都新希望金融信息有限公司 Surface label identification method and device, electronic equipment and storage medium
CN114677634B (en) * 2022-05-30 2022-09-27 成都新希望金融信息有限公司 Surface label identification method and device, electronic equipment and storage medium

Also Published As

Publication number Publication date
CN106341380B (en) 2018-02-16

Similar Documents

Publication Publication Date Title
CN106341380A (en) Method, device and system for performing remote identity authentication on user
CN105303632B (en) A kind of mobile monitor is registered system and method for work
CN104636501B (en) A kind of artificial instant translation system of multi-media network and method
CN104038476B (en) It is a kind of for log in management method, equipment and system
CN101055561B (en) Electronic conference assistance method, and information terminal device in electronic conference system
CN106686339A (en) Electronic Meeting Intelligence
CN106685916A (en) Electronic meeting intelligence
CN102724296B (en) Network client monitoring system
RU2673010C1 (en) Method for monitoring behavior of user during their interaction with content and system for its implementation
CN105844247A (en) Bi-camera cabinet machine and face recognition and second-generation ID card identification system
CN110489527A (en) Banking intelligent consulting based on interactive voice and handle method and system
CN104899556A (en) System for counting persons in classroom based on image recognition
CN109658040A (en) Method, apparatus, equipment and the computer storage medium of conference management
CN109118606A (en) A kind of attendance checking through facial recognition process authentication method
CN107896226A (en) A kind of network identification system based on iris recognition
CN110033399A (en) A kind of information publication, extracting method and the system of the wisdom class board based on recognition of face
WO2019200737A1 (en) Real estate data uploading method and apparatus, computer device, and storage medium
CN104540035B (en) A kind of accessible video sign language calling system and method
US20150079959A1 (en) Smart Microphone
CN110322086A (en) A kind of education writing on the blackboard checking system based on Intelligent hardware and cloud platform
CN201518138U (en) Identification authentication terminal unit for public services
KR101403645B1 (en) Apparatus, method and computer readable recording medium for a ready studying using a smart phone
CN111951135A (en) Invigilating method and system for on-line double-machine-position examinees
KR102052600B1 (en) System for sit registration
CN115311920B (en) VR practical training system, method, device, medium and equipment

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20180628

Address after: 101599 Beijing Miyun District ten mile town credit cooperatives West 101 National Road north 3 building 101

Patentee after: Beijing collection and payment information security technology Co., Ltd.

Address before: 100091 the Summer Palace road 66, the Summer Palace, Beijing, 8110 rooms, Jiale happy business hotel

Patentee before: The precious Science and Technology Ltd. of receipt and payment