CN110647641A - Authentication method, apparatus, computer equipment and storage medium - Google Patents

Abstract

The present application relates to an identity verification method, apparatus, computer equipment and storage medium. The method includes: acquiring business data; the business data includes a user ID of a target user and a live face image; determining an identity verification type according to a business scenario corresponding to the business data and the user ID; when the identity verification type is When the type is preset, a query statement of the user ID is generated; based on the query statement, the reference face image corresponding to the user ID is queried and pulled in the multiplexing library; when the on-site face image is compared with the reference face image If they are consistent, the authentication of the target user is passed. By adopting this method, interactive resources can be saved.

Description

Authentication method, apparatus, computer equipment and storage medium

technical field

The present application relates to the field of computer technology, and in particular, to an identity verification method, apparatus, computer equipment and storage medium.

Background technique

In various business scenarios, it is often necessary to verify whether the user is the user. With the development of computer technology, a variety of authentication methods have emerged. For example, authentication based on biometric features such as face images and fingerprints. Traditionally, the authentication based on face images mainly adopts the method of online verification, which requires calling the biometric database interface of the People's Bank of China or the Ministry of Public Security to compare the face images collected on the spot with the corresponding faces in the biometric database constructed by the People's Bank of China or the Ministry of Public Security. Images are compared. However, this method requires frequent calls to the interface and takes up a lot of interaction resources.

SUMMARY OF THE INVENTION

Based on this, it is necessary to provide an authentication method, apparatus, computer device and storage medium that can save interactive resources in response to the above technical problems.

An identity verification method, the method comprising: acquiring business data; the business data includes a user identifier of a target user and a live face image; determining an identity verification type according to a business scenario corresponding to the business data and the user identifier; When the identity verification type is a preset type, a query statement of the user identification is generated; based on the query statement, the reference face image corresponding to the user identification is queried and pulled in the multiplexing library; If the image is consistent with the reference face image, the identity verification of the target user is passed.

In one embodiment, the acquiring business data includes: in the environment provided by the first parent application for running the sub-application, running the selected first sub-application; establishing the first sub-application and the second sub-application The communication connection of the sub-application; the second sub-application runs in the environment provided by the second parent application on the user terminal for running the sub-application; the user terminal sent by the user terminal is received through the sub-application ID, where the user ID is the user's identity information stored in the second parent application obtained by the user terminal through the second sub-application.

In one embodiment, the obtaining service data includes: obtaining service data to be transmitted, and screening image data in the service data; storing the screened image data in a first server; receiving and storing the data returned by the first server and storing The image identifier corresponding to the image data; sending the character data and the image identifier in the business data to the second server; when the image data needs to be used, the image data is pulled from the first server according to the image identifier.

In one embodiment, before pulling the reference face image corresponding to the user ID in the multiplexing library based on the query statement, the method further includes: synchronizing the verified live face image and Corresponding attribute information; the attribute information includes a user ID; symmetrically decrypt the on-site face image according to a pre-stored public key; perform asymmetric encryption on the decrypted on-site face image; encrypt the encrypted on-site face image The reference face image as the corresponding user identification is stored in the multiplexing library.

In one embodiment, the method further includes: when the authentication type does not belong to a preset type, or the reference face image corresponding to the user ID does not exist in the multiplexing library, invoking a data interface from the first The third-party library pulls the reference face image corresponding to the user identification.

An identity verification device, comprising: an on-site image acquisition module for acquiring business data; the business data includes a user identification of a target user and an on-site face image; a reference image acquisition module for corresponding to a business scenario according to the business data and the user ID to determine the identity verification type; when the identity verification type is a preset type, generate a query statement for the user ID; query and pull the corresponding user ID based on the query statement in the multiplexing library A reference face image; an image comparison and verification module, configured to pass the identity verification of the target user when the on-site face image is consistent with the reference face image.

In one embodiment, the live image acquisition module is further configured to run the selected first sub-application in the environment provided by the first parent application for running the sub-application; establish the first sub-application with The communication connection of the second sub-application; the second sub-application runs in the environment provided by the second parent application on the user terminal for running the sub-application; the sub-application receives the data sent by the user terminal through the sub-application The user identifier is the user's identity information stored in the second parent application obtained by the user terminal through the second sub-application.

In one embodiment, the on-site image acquisition module is further configured to acquire service data to be transmitted, and screen the image data in the service data; store the screened image data in the first server; receive and store the data returned by the first server. The image identification corresponding to the image data; sending the character data and the image identification in the business data to the second server; when the image data needs to be used, the image data is pulled from the first server according to the image identification.

A computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the steps of the identity verification method provided in any one of the embodiments of the present application when the processor executes the computer program.

A computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, implements the steps of the identity verification method provided in any one of the embodiments of this application.

The above authentication method, device, computer equipment and storage medium build a local multiplexing library for storing existing customer information, and preset different authentication methods for business data in different business scenarios. When handling a business of a preset type of business scenario, if the user identity needs to be verified, you can first obtain a reference face image based on the multiplexing library; if there is an ID picture corresponding to the corresponding ID number in the multiplexing library, The reference face image corresponding to the corresponding user ID can be directly extracted from the local multiplexing library, and authentication can be realized by comparing the reference face image and the on-site face image without calling the network verification interface, reducing the need for communication with third-party libraries. interaction frequency, thereby saving interaction resources.

Description of drawings

Fig. 1 is the application scene diagram of the authentication method in one embodiment;

2 is a schematic flowchart of an identity verification method in one embodiment;

3 is a structural block diagram of an identity verification device in one embodiment;

Fig. 4 is the internal structure diagram of the computer device in one embodiment;

FIG. 5 is an internal structure diagram of a computer device in another embodiment.

Detailed ways

In order to make the purpose, technical solutions and advantages of the present application more clearly understood, the present application will be described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application, but not to limit the present application.

The authentication method provided in this application can be applied to the application environment shown in FIG. 1 . Referring to FIG. 1, the identity verification method is applied to an identity verification system. The authentication system includes a terminal 110 and a server 120 . The authentication method can be done at the terminal 110 or the server 120 . After the terminal 110 obtains the service data, the terminal 110 can use the above-mentioned authentication method to perform identity authentication on the target user. Alternatively, the terminal 110 may, after acquiring the service data, send the service data to the server 120 through the network, and the server 120 may use the above-mentioned authentication method to authenticate the target user. The terminal 102 can be, but is not limited to, various personal computers, notebook computers, smart phones, tablet computers and portable wearable devices, and the server 104 can be implemented by an independent server or a server cluster composed of multiple servers.

In one embodiment, as shown in FIG. 2 , an authentication method is provided, and the method is applied to the terminal or server in FIG. 1 as an example for description, including the following steps:

Step S202, acquiring service data; the service data includes the user ID of the target user and the on-site face image.

When the target user needs to handle a certain business, the business can be handled based on the business data entered on the user terminal, or the business personnel can enter the business data at the counter to assist in the business handling. For the convenience of description, the user terminal, the service terminal, and the server are collectively referred to as computer equipment hereinafter. Computer equipment acquires business data collected on-site. Depending on the business to be handled, the content of the business data can be different. For example, in the loan application business scenario, the business data to be transmitted may be loan review data, including at least one of loan character data, ID card image data, business license image data, and real estate certificate image data.

If identity verification is required for the business handled, the business data includes the user ID of the target user and the on-site face image. The user identifier is identity information that can uniquely identify the target user, such as a certificate number, a mobile phone number, and the like. The on-site face image refers to the face image collected in the real scene of business processing.

Step S204: Determine the identity verification type according to the business scenario corresponding to the business data and the user ID.

The authentication method provided in this embodiment is suitable for various business scenarios. Different business scenarios have different authentication methods (hereinafter referred to as "authentication types"). For example, services in some business scenarios allow authentication according to a preset authentication type, while services in some business scenarios are not allowed. One of the preset authentication types (hereinafter referred to as "preset types") refers to first querying the corresponding reference face image in the pre-built multiplexing library according to the user ID. When there is no corresponding benchmarking person in the multiplexing library When the face image is called, the third-party interface is called to pull the corresponding reference face image from the third-party library.

Step S206, when the authentication type is a preset type, generate a query statement for the user ID.

The computer device pre-stores SQL statement templates corresponding to various business scenarios. The computer device replaces the query label in the SQL statement template with the user ID of the target user to be verified, and obtains a query statement for querying the reference face image corresponding to the user ID in the multiplexing library.

Step S208, query and pull the reference face image corresponding to the user ID in the multiplexing library based on the query statement.

Based on the generated query statement, the computer device queries the multiplexing library whether there is a reference face image corresponding to the user identification. If it exists, it means that the target user is an old user, and the computer device directly pulls the corresponding reference face image from the multiplexing library for authentication.

In one embodiment, the above-mentioned authentication method further includes: when the authentication type does not belong to the preset type, or the reference face image corresponding to the user ID does not exist in the multiplexing library, invoking the data interface to pull the user from the third-party library Identifies the corresponding reference face image.

If the authentication type does not belong to the preset type, it means that the current business does not allow authentication according to the above method, and the computer device calls the biometric library interface of the People's Bank of China or the Ministry of Public Security to pull the data from a third-party library such as the biometric library of the People's Bank of China or the Ministry of Public Security. Take the benchmark face image.

If the reference face image corresponding to the user ID does not exist in the multiplexing library, it means that the target user is a new user, and the computer device invokes the third-party interface to pull the reference face image from the third-party library in the above-mentioned manner. The on-site face image is compared with the reference face image to realize online verification.

Step S210, when the on-site face image is consistent with the reference face image, the identity verification of the target user is passed.

The computer equipment extracts the image features of the live face image and the reference face image respectively, calculates the similarity of the two image features, and compares whether the similarity reaches a threshold. If it is, the authentication is passed; otherwise, the authentication fails.

In one embodiment, the image features corresponding to each reference face image are also stored in the multiplexing library, so that the corresponding image features can be directly extracted when subsequent reference face images are used for identity verification, reducing frequent extraction of the same image. The cumbersome image features improve the efficiency of image comparison, thereby improving the efficiency of identity verification.

According to the user identification, the unique face image that is used as the benchmark for user authentication and comparison can be accurately determined, so that only the face image collected on the spot needs to be compared with the unique face image determined according to the user identification, which not only further improves the authentication Efficiency, since the interference of other biometrics in the biometric library to the feature comparison process is reduced, the accuracy of authentication results can also be improved.

In this embodiment, a local multiplexing library for storing existing customer information is constructed, and different authentication methods are preset for business data in different business scenarios. When handling a business of a preset type of business scenario, if the user identity needs to be verified, you can first obtain a reference face image based on the multiplexing library; if there is an ID picture corresponding to the corresponding ID number in the multiplexing library, The reference face image corresponding to the corresponding user ID can be directly extracted from the local multiplexing library, and authentication can be realized by comparing the reference face image and the on-site face image without calling the network verification interface, reducing the need for communication with third-party libraries. interaction frequency, thereby saving interaction resources.

In one embodiment, acquiring the business data includes: running the selected first sub-application in the environment provided by the first parent application for running the sub-application; establishing the first sub-application and the second sub-application The communication connection of the program; the second sub-application runs in the environment provided by the second parent application on the user terminal for running the sub-application; the user identification sent by the user terminal is received through the sub-application, The user identifier is user identity information obtained by the user terminal through the second sub-application and stored in the second parent application.

A first parent application and a first sub-application running on the first parent application run on the service terminal. A second parent application and a second sub-application running on the second parent application run on the user terminal. The second sub-application running on the user terminal communicates with the first sub-application running on the service terminal through the second service platform and the first service platform. The first service platform is a platform that provides services for the first parent application, and the second service platform is a platform that provides services for the second parent application. The service terminal can be a tablet computer, a gate, a cash register, etc. with a face image collection function.

The second parent application and the first parent application are native applications directly running on the operating system. For example, the second parent application may be a social application, email referral, payment application, or game application, etc., which can provide the identity information of the user to be verified. Social applications, including instant messaging applications, SNS (Social Network Service, social networking site) applications or live broadcast applications. The first parent application may be a social application, a payment application, or a ticket checking application, etc. that can perform identity verification and perform different business operations according to the identity verification result. The second sub-application and the first sub-application are applications that can run in the environment provided by the native application. The second parent application and the first parent application may specifically be the communication client used for the interaction between the business party and the user, and the corresponding second sub-application and the first sub-application may be referred to as mini programs (Mini Programs). Program). The second sub-application and the first sub-application may be the same sub-application with the same function.

The user may in advance authorize the second sub-application to automatically run on the second parent application after the second parent application is started, to be discoverable by the surrounding service terminals, and to authorize the read right of the user ID. When the target user needs to be authenticated, the service terminal sends a connection request to the user terminal through the first sub-application. The second sub-application establishes a communication link with the service terminal in response to the connection request. The communication link is a point-to-point transmission channel established between the user terminal and the service terminal based on a preset near-field communication method.

The user terminal acquires the user identifier belonging to the second parent application through the second sub-application. Wherein, the user identifier is an identifier displayed or recorded in the second parent application program to refer to the target user, and specifically may be the identity information entered by the user when logging in to the second parent application program, such as user account number, user mobile phone number, etc.; It can also be a character string obtained by encrypting the user ID and used to uniquely identify the current user ID, which corresponds to the user ID and is stored in the second service platform, such as an openid (user unique ID) belonging to an instant messaging application. If the user ID read from the second parent application is a user account, the second child application further reads the user mobile phone number associated with the user account from the second parent application, and determines the read user mobile phone number as End User ID. The user terminal sends the user identification to the service terminal based on the communication link, so that the service terminal pulls the reference face image based on the user identification.

In this embodiment, the second parent application runs a second sub-application capable of communicating with the authentication device, and the second sub-application also has the ability to read from the second parent application based on a connection request initiated by the service terminal The ability to obtain user IDs and automatically provide feedback on the read user IDs. With the help of the second sub-application, the automatic acquisition of the user ID can be realized, the tediousness of manually inputting the user ID by the user is avoided, and the authentication efficiency is improved.

In one embodiment, through the first sub-application on the first parent application, establishing a communication link with the second sub-application on the second parent application on the user terminal includes: through the first parent application The first sub-application running on the program initiates a connection request, and sends the connection request to the second mother application on the user terminal through the first service platform corresponding to the first mother application program and the second service platform corresponding to the second mother application program in turn. The second sub-application running on the application; after receiving the response of the second sub-application to the connection request, establish a communication link with the second sub-application on the second parent application on the user terminal.

The user can establish a cross-application connection with the business party through the second sub-application. Specifically, the second parent application is started and run on the user terminal, and the second child application is invoked through the second parent application. The first parent application is started and run on the service terminal, and the first child application is called up through the first parent application. When the target user needs to be authenticated, the service terminal uses the preset near-field communication technology to detect the surrounding signals used to establish a communication link in real time, and uses the first sub-application to determine the user who sends out the signal whose strength meets the preset condition. The terminal ID of the terminal. The terminal identifier can uniquely identify the terminal of the target user, and may be an identifier of a signal sent out for establishing a communication link. The terminal identifier may specifically be a Bluetooth mac address (Media Access Control Address) or the like according to different ways of sending a signal for establishing a communication link.

The first sub-application acquires the identifier of the second parent application, and generates a connection request according to the identifier of the second parent application and the determined terminal identifier. The first sub-application sends the connection request to the first service platform through the first parent application. After receiving the connection request, the first service platform checks that the second parent application identifier is an application identifier belonging to the second parent application, then marks the connection request as a cross-application request, and sends the second parent application identifier corresponding to the second parent application identifier. The second service platform initiates a cross-application connection request. According to the terminal identifier carried in the connection request, the second service platform sends the connection request to the corresponding user terminal. The user terminal responds to the connection request through the second sub-application running on the second parent application, and establishes a communication link with the service terminal.

In this embodiment, it is only necessary to run the second sub-application in the second parent application and run the first sub-application in the first parent application, and then the second parent application can be based on the existing second parent application. The service platform and the first service platform corresponding to the first parent application program realize the connection between the user terminal and the service terminal, and can realize the rapid acquisition of the user ID without adding any hardware equipment.

In one embodiment, acquiring service data includes: acquiring service data to be transmitted, and screening image data in the service data; storing the screened image data in a first server; receiving a response from the first server corresponding to the stored image data Send the character data and image identification in the business data to the second server; when the image data needs to be used, pull the image data from the first server according to the image identification.

If the terminal sends the acquired service data to the server for verification and verification, the terminal needs to transmit a large amount of service data including image data, and the data volume of the image data is relatively large. During the transmission of service data, the transmission of service data will be prolonged. time, and it is easy to cause network congestion. In this embodiment, if the terminal sends the service data to the server, and the server uses the above authentication method to authenticate the target user, the image data can be stored separately when the service data is uploaded to improve data transmission efficiency.

Specifically, the terminal analyzes the service data uploaded by the user, analyzes and recognizes the image data in the service data, and extracts the recognized image data from the service data. For example, if the business data is loan review data, the loan review data includes loan character data and ID card image data, and the terminal filters the loan review data to obtain ID card image data.

The terminal pre-stores the server address of the first server. The first server is a server for storing image data. The terminal root sends the filtered image data to the first server corresponding to the server address.

In one embodiment, after screening the image data, the terminal counts the data amount of the screened image data, and compares the counted data amount with the preset data amount. When the counted data amount is greater than the preset data amount, The screened image data is stored in the first server; when the amount of data collected is less than the preset amount of data, the service data is directly sent to the second server, that is, the above-mentioned server 120 .

The first server stores the received image data, and generates an image identifier corresponding to the stored image data. The first server returns the generated image identification to the terminal. The icon identifiers correspond one-to-one with the stored image data. The image identifier may be a storage address of the image data, or a result value of performing a hash operation on the image feature data in the image data, or may be a storage sequence number generated according to the storage order of the image data. It is easy to understand that the image identification may also be other identification information, such as randomly generating a number uniquely corresponding to the image data, etc., which is not limited.

The business data includes image data and character data. The terminal encapsulates the character data in the service data and the received image identifier, obtains a transmission data packet corresponding to the service data, and sends the transmission data packet to the second server. The second server parses the transmission data packet, obtains character data and image identifiers in the service data, and pulls image data from the first server according to the obtained image identifiers.

In this embodiment, the image data is filtered from the service data, and after the filtered image data is stored in the first server; only the image identifier of the image data returned by the first server and the character data in the service data are transmitted to the first server. For the second server, the second server pulls the image data from the first server according to the image identifier, which reduces the data volume of the service data sent to the second server, thereby improving the service data transmission efficiency.

In one embodiment, before pulling the reference face image corresponding to the user ID in the multiplexing library based on the query statement, the method further includes: synchronizing the verified live face image and corresponding attribute information in multiple service libraries; The information includes the user ID; symmetrically decrypt the live face image according to the pre-stored public key; perform asymmetric encryption on the decrypted live face image; store the encrypted live face image as the reference face image corresponding to the user ID to the reuse library.

The reference face image in the multiplexing library may be a verified user's on-site face image collected in the historical business processing process. For group companies, it can be obtained by collecting the verified on-site face images collected by multiple subsidiaries. Specifically, in order to protect the privacy of user information, different subsidiaries may use different encryption logics such as AES (Advanced Encryption Standard, Advanced Encryption Standard), binary encryption, etc. to encrypt user information including user identification, and store the encrypted user information. to their respective business libraries.

The computer equipment synchronizes the verified on-site face images and corresponding attribute information in multiple service libraries. The attribute information includes the user ID corresponding to the live face image, the collection time, the verification result, the data provider, and encrypted information. In , the data provider refers to the subsidiary that collects the corresponding on-site face images. The encrypted information includes an encryption method and corresponding decryption logic. For example, when the encryption method is asymmetric encryption, the corresponding decryption logic includes the public key used for decryption.

The computer equipment uses the public key to decrypt the live face image. The computer equipment re-encrypts each live face image obtained by decryption according to the unified encryption logic, and stores the encrypted live face image as the reference face image of the corresponding user identification in the multiplexing library.

In another embodiment, the computer device further performs standardization processing on the attribute information of the live face image, and stores the standardized attribute information in the multiplexing library. Subsequently, based on the attribute information, it can be determined whether the corresponding reference face image in the multiplexing library meets the calling conditions proposed by the caller. For example, the calling condition may be that the collection time is within 6 months.

In this embodiment, a multiplexing library can be obtained by collecting on-site face images in multiple service libraries, thereby improving the construction efficiency of the multiplexing library.

It should be understood that although the various steps in the flowchart of FIG. 2 are shown in sequence according to the arrows, these steps are not necessarily executed in the sequence shown by the arrows. Unless explicitly stated herein, the execution of these steps is not strictly limited to the order, and these steps may be performed in other orders. Moreover, at least a part of the steps in FIG. 2 may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed and completed at the same time, but may be executed at different times. The execution of these sub-steps or stages The sequence is also not necessarily sequential, but may be performed alternately or alternately with other steps or sub-steps of other steps or at least a portion of a phase.

In one embodiment, as shown in FIG. 3, an identity verification device is provided, including: a live image acquisition module 302, a live image acquisition module 302, and an image comparison verification module 306, wherein:

The on-site image acquisition module 302 is used to acquire service data; the service data includes the user ID of the target user and the on-site face image.

The reference image acquisition module 304 is configured to determine the authentication type according to the corresponding business scenario of the business data and the user ID; when the authentication type is a preset type, generate a query statement of the user ID; based on the query statement, query and pull from the multiplexing library The reference face image corresponding to the user ID.

The image comparison and verification module 306 is configured to pass the identity verification of the target user when the on-site face image is consistent with the reference face image.

In one embodiment, the live image acquisition module 302 is further configured to run the selected first sub-application in the environment provided by the first parent application for running the sub-application; establish the first sub-application and the first sub-application The communication connection between the two sub-applications; the second sub-application runs in the environment provided by the second parent application on the user terminal for running the sub-application; the sub-application receives the data sent by the user terminal through the sub-application A user identifier, where the user identifier is the user's identity information stored in the second parent application obtained by the user terminal through the second sub-application.

In one embodiment, the on-site image acquisition module 302 is further configured to acquire service data to be transmitted, screen image data in the service data; store the screened image data to the first server; receive the returned and stored data from the first server image identification corresponding to the image data; sending the character data and image identification in the business data to the second server; when the image data needs to be used, pulling the image data from the first server according to the image identification.

In one embodiment, the above-mentioned identity verification apparatus further includes a multiplexing library building module 308 for synchronizing the verified on-site face images and corresponding attribute information in multiple service libraries; The public key decrypts the live face image symmetrically; performs asymmetric encryption on the decrypted live face image; and stores the encrypted live face image as the reference face image of the corresponding user identification in the multiplexing library.

In one embodiment, the reference image obtaining module 304 is further configured to call the data interface to pull from the third-party library when the authentication type does not belong to the preset type, or when the reference face image corresponding to the user ID does not exist in the multiplexing library The reference face image corresponding to the user ID.

For the specific limitation of the identity verification device, reference may be made to the above limitation on the identity verification method, which will not be repeated here. Each module in the above-mentioned identity verification device can be implemented in whole or in part by software, hardware and combinations thereof. The above modules can be embedded in or independent of the processor in the computer device in the form of hardware, or stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

In one embodiment, a computer device is provided, and the computer device may be a server, and its internal structure diagram may be as shown in FIG. 4 . The computer device includes a processor, memory, a network interface, and a multiplexing library connected by a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium, an internal memory. The nonvolatile storage medium stores an operating system, a computer program, and a multiplexing library. The internal memory provides an environment for the execution of the operating system and computer programs in the non-volatile storage medium. The multiplexing library of the computer device is used to store reference face images. The network interface of the computer device is used to communicate with an external terminal through a network connection. The computer program, when executed by the processor, implements an authentication method.

In one embodiment, a computer device is provided, and the computer device may be a terminal, and its internal structure diagram may be as shown in FIG. 5 . The computer equipment includes a processor, memory, a network interface, a display screen, and an input device connected by a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium, an internal memory. The nonvolatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the execution of the operating system and computer programs in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external terminal through a network connection. The computer program, when executed by the processor, implements an authentication method. The display screen of the computer equipment may be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer equipment may be a touch layer covered on the display screen, or a button, a trackball or a touchpad set on the shell of the computer equipment , or an external keyboard, trackpad, or mouse.

Those skilled in the art can understand that the structures shown in FIG. 4 and FIG. 5 are only block diagrams of partial structures related to the solution of the present application, and do not constitute a limitation on the computer equipment to which the solution of the present application is applied. A computer device may include more or fewer components than those shown in the figures, or combine certain components, or have a different arrangement of components.

A computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, implements the steps of the identity verification method provided in any one of the embodiments of this application.

Those skilled in the art can understand that all or part of the processes in the methods of the above embodiments can be implemented by instructing relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium , when the computer program is executed, it may include the processes of the above-mentioned method embodiments. Wherein, any reference to memory, storage, database or other medium used in the various embodiments provided in this application may include non-volatile and/or volatile memory. Nonvolatile memory may include read only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous chain Road (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

The technical features of the above embodiments can be combined arbitrarily. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features It is considered to be the range described in this specification.

The above examples only represent several embodiments of the present application, and the descriptions thereof are more specific and detailed, but should not be construed as a limitation on the scope of the invention patent. It should be pointed out that for those skilled in the art, without departing from the concept of the present application, several modifications and improvements can be made, which all belong to the protection scope of the present application. Therefore, the scope of protection of the patent of the present application shall be subject to the appended claims.

Claims (10)

1. An identity verification method, the method comprising: Acquiring business data; the business data includes the user identification of the target user and the on-site face image; Determine the authentication type according to the business scenario corresponding to the business data and the user identifier; When the authentication type is a preset type, generating a query statement for the user ID; Query and pull the reference face image corresponding to the user ID in the multiplexing library based on the query statement; When the on-site face image is consistent with the reference face image, the identity verification of the target user is passed. 2. The method according to claim 1, wherein the acquiring service data comprises: In the environment provided by the first parent application for running the sub-application, run the selected first sub-application; establishing a communication connection between the first sub-application and the second sub-application; the second sub-application runs in the environment for running the sub-application provided by the second parent application on the user terminal; The user identification sent by the user terminal is received through the sub-application, where the user identification is the user's identity information stored in the second parent application and obtained by the user terminal through the second sub-application. 3. The method according to claim 1, wherein the acquiring service data comprises: Obtain the business data to be transmitted, and filter the image data in the business data; storing the filtered image data to the first server; receiving an image identifier corresponding to the stored image data returned by the first server; sending the character data and image identification in the business data to the second server; When the image data needs to be used, the image data is pulled from the first server according to the image identifier. 4. The method according to claim 1, wherein, before the reference face image corresponding to the user identification is pulled in the multiplexing library based on the query statement, the method further comprises: Synchronizing verified on-site face images and corresponding attribute information in multiple service libraries; the attribute information includes user identification; Symmetrically decrypt the on-site face image according to the pre-stored public key; Perform asymmetric encryption on the decrypted live face image; The encrypted on-site face image is stored in the multiplexing library as the reference face image of the corresponding user identification. 5. The method according to claim 1, wherein the method further comprises: When the authentication type does not belong to the preset type, or the reference face image corresponding to the user ID does not exist in the multiplexing library, the data interface is invoked to pull the reference face corresponding to the user ID from a third-party library face image. 6. An identity verification device, comprising: an on-site image acquisition module, used for acquiring business data; the business data includes the user identification of the target user and the on-site face image; a reference image acquisition module, configured to determine an identity verification type according to the business scenario corresponding to the business data and the user identifier; when the identity verification type is a preset type, generate a query statement for the user identifier; based on the query The statement queries and pulls the reference face image corresponding to the user ID in the multiplexing library; The image comparison and verification module is configured to pass the identity verification of the target user when the on-site face image is consistent with the reference face image. 7 . The device according to claim 6 , wherein the on-site image acquisition module is further configured to establish a connection with the first child application on the first parent application on the user terminal through the second child application on the second parent application. 8 . A communication link between applications; receiving a user identification sent by the user terminal based on the communication link through the second sub-application; the user identification is a user belonging to a user acquired by the user terminal through the second sub-application The identity information of the second parent application. 8 . The device according to claim 6 , wherein the on-site image acquisition module is further configured to acquire service data to be transmitted, and screen the image data in the service data; and store the screened image data in the first server. 9 . ; Receive the image identification corresponding to the stored image data returned by the first server; Send the character data and the image identification in the business data to the second server; When the image data needs to be used, pull the image from the first server according to the image identification data. 9. A computer device, comprising a memory and a processor, wherein the memory stores a computer program, wherein the processor implements the steps of the method according to any one of claims 1 to 5 when the processor executes the computer program . 10. A computer-readable storage medium on which a computer program is stored, characterized in that, when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 5 are implemented.

Images