RU2787960C1 - Method and device for authentication of near-field information, electronic device and computer storage medium - Google Patents

Abstract

FIELD: information authentication.

SUBSTANCE: invention relates to the field of information authentication, in particular to a method for authentication of near-field information. The method contains stages of: reception of information about the current location of an object to be authenticated, with subsequent determination of a raster region of a target, where the object is located; reception of an information authentication request sent by a service terminal of the target in the raster region of the target; determination, from the first correlation table related to the raster region of the target and in accordance with information about the service terminal of the target, of permissible users of the service terminal of the target, and determination of biometrical information of corresponding permissible users; personal authentication in accordance with current biometrical information of the object and biometrical information of corresponding permissible users. In the method, authentication of information about the object to be authenticated is performed based on current biometrical information of the object, and, thus, the user does not need to show a physical identification card, which simplifies an information authentication process and improves interaction with the user during information authentication. Information about the current location of the object is sent to a server only when the object is in a predetermined range of business allowed by the use to guarantee confidentiality of the location of the user.

EFFECT: increase in the efficiency and convenience of operation of an authentication process.

18 cl, 8 dwg

Description

Cross-references to related applications

This patent application claims priority over PRC Patent Application No. CN201811608291.7 titled "Method and Apparatus for Authenticating Near Field Information, Electronic Apparatus and Computer Storage Environment Therefor", filed with the PRC Patent Office on December 26, 2018, the contents of which incorporated in this application by reference in its entirety.

The field of technology to which the invention belongs

The invention relates to the field of information authentication, in particular to a method for authenticating near field information, as well as devices, electronic equipment and computer storage media for this.

Prerequisites for the creation of the invention

With the continuous development of network technology and automation device technology, in various fields, including banks, e-tax, e-police, e-vehicle control offices, airports, high-speed railway stations, hotels, etc., a variety of electronic self-service terminals have emerged, which are constantly developed and used, which not only saves operating costs, but also increases work efficiency, that is, increases the convenience of solving issues by people.

However, physical identification is often required when receiving a service. In today's electronic age, it is impossible to receive various services without ID, which will inevitably affect people's travel.

Thus, the existing methods of information authentication using physical identification cards are impractical and inconvenient.

Brief description of the invention

In this regard, the purpose of the present invention is to provide a near field information authentication method, as well as a device, electronic equipment and computer storage medium for this, in order to somewhat solve the problems associated with the low practicality and inconvenience of existing information authentication methods.

The first aspect of the invention provides a method for authenticating near field information for authenticating near field information, characterized in that it is applied to a server and contains the following steps: obtaining information about the current location of the object to be authenticated, and then determining the target grid area where the object to be authenticated is located. authentication, wherein when the object to be authenticated is within a preset range of its authorized merchants, the user terminal of the object to be authenticated periodically sends information about the current location of the object to be authenticated to the server; receiving an information authentication request sent by a target service terminal in the target grid area, wherein the information authentication request carries information about the target service terminal and information about the living biological state of the object to be authenticated; the target service terminal information contains information about authorized sub-merchants who own the target service terminal, the target service terminal number, and location information of the target service terminal, which is the terminal performing authentication of the object information to be authenticated; determining valid users of the target service terminal in the first relationship table of the target grid area according to information about the target service terminal, and determining information about the biological characteristics of each of the valid users; wherein the first relationship table is a relationship table between user accounts of authorized merchants and their valid users in the target grid area, wherein the first relationship table is a dynamically changing relationship table; according to the information about the biological characteristics of the object to be authenticated as a living body and the information about the biological characteristics of each of the allowed users, completing the authentication of the information about the object to be authenticated and obtaining the information authentication result.

The stage of obtaining information about the current location of the object to be authenticated includes determining the authorized merchants of the object to be authenticated, while the authorized merchants are merchants after the object to be authenticated performs an authorization operation in relation to the merchants through its user terminal, among the authorized merchants. merchants include at least one authorized sub-merchant; sending location information of each of the authorized sub-merchants to a user terminal of the entity to be authenticated, so that the user terminal of the entity to be authenticated determines whether its location information and the location information of each authorized sub-merchant are within a predetermined range; when the user terminal of the entity to be authenticated determines that its location information and the location information of authorized sub-merchants are within the preset range, obtaining the current location information of the user terminal, and using the current location information of the user terminal as the current location information of the entity to be authenticated.

Upon receiving information about the current location of the object to be authenticated, before receiving the information authentication request sent by the target service terminal in the target grid area, the method further comprises establishing a relationship between the authorized sub-merchant of the object to be authenticated and the user account of the object to be authenticated , in the first relationship table.

The step of determining the valid users of the target service terminal in the first relationship table of the target grid area according to the target service terminal information is to obtain the first relationship table of the target grid area; determining a first relationship table of the target of the authorized sub-merchant that owns the target service terminal in the first relationship table in the target grid area; obtaining a user account included in the first target relationship table and using this account as a valid user account; designating a user corresponding to a valid user account as a valid user of the target's service terminal.

According to the information about the biological characteristics of the object to be authenticated as a living body and the information about the biological characteristics of each of the allowed users, the step of completing the authentication of the information of the object to be authenticated includes determining whether the information about the biological characteristics of the object to be authenticated is living body directly obtained from the real living body; if yes, then the information about the biological characteristics of the object to be authenticated is compared with the information about the biological characteristics of each of the allowed users; according to the results of the comparison, determining whether there is information about the biological characteristics of the target corresponding to the information about the biological characteristics of the object to be authenticated as a living body in the information about the biological characteristics of all valid users; if available, a determination is made as to whether the information about the target's biological characteristics is unique; if so, determining a valid user corresponding to the target biological information as the object to be authenticated and completing the authentication of the object to be authenticated information is performed.

If said information is not unique, then the information is authenticated based on the location information of each of the valid users corresponding to the target biological information.

The step of authenticating the information based on the location information of each of the valid users, the corresponding information about the biological characteristics of the target, includes comparing the location information of each of the valid users, the corresponding information about the biological characteristics of the target, with the location information of the target service terminal; determining whether, as a result of the comparison, a valid user closest to the target service terminal, according to the location information of the latter, is unique; if so, identifying it with a valid user as an entity to be authenticated, and completing authentication of the information of the entity to be authenticated.

If this valid user is not unique, then an information authentication request is sent to the user terminal of each of the valid users closest to the location of the target service terminal; when receiving confirmation information sent by each of the valid users closest to the location of the target service terminal, determination of confirmation information is performed based on the information authentication request to obtain a determination result; according to the results of the determination, the completion of the authentication of the information of the object to be authenticated.

When the information authentication is payment information authentication, the information authentication result is the payment information authentication result, and the payment information authentication result contains the user account of the entity to be authenticated; upon completion of authentication of the information of the entity to be authenticated, the following steps are further performed: sending the authentication result of the payment information and the service request to the payment system, so that the payment system searches for the payment account corresponding to the user account as a result of the authentication of the payment information, and completing the payment transaction based on the payment billing and service request; creating an account maintenance request according to the completion information of the payment transaction, and sending the account maintenance request to the account system so that the account system generates an electronic payment invoice upon the account maintenance request, and sending the electronic payment invoice to the email address specified by the user or to target service terminal.

When the information authentication is identity information authentication, the information authentication result is the identity information authentication result, and the identity information authentication result contains the user account of the entity to be authenticated; upon completion of the authentication of the information of the object to be authenticated, the following steps are further performed: sending the identity authentication result of the identity information authentication and the service request to the identity authentication system, so that the identity authentication system converts the user account on the results of the identity information authentication into personal identity information, and completing the authentication of the identity information. information in accordance with personal identification information and service request.

In addition, before determining the authorized merchant of the object to be authenticated, the following steps are additionally performed: receiving the merchant authorization request sent by the object to be authenticated through its user terminal, wherein the merchant authorization request is a request generated by the object to be authenticated after setting the function a near field for the merchant at his user terminal, wherein the merchant's authorization request carries information about the merchant; based on the merchant authorization request, completing the merchant authorization, upon the merchant authorization request from the entity to be authenticated; and obtaining information about the location of all sub-traders.

The method further includes receiving out of the preset range information sent by the user terminal of the entity to be authenticated; deleting information about the user account of the object to be authenticated in the first relationship table according to the out of the preset range information.

In addition, if information about the current location of the user terminal of the entity to be authenticated is not received within a predetermined time, and the user account record of the entity to be authenticated is in the first relationship table, then further deletion of the user account record information of the entity to be authenticated is performed. , to be authenticated, from the first relationship table.

The method further includes receiving information about the service terminal sent by the service terminal, wherein the service terminal information contains information about the sub-merchant that owns the service terminal, the number and location of the service terminal; creating a second relationship table between the serial numbers of the sub-merchant and the service terminal in the grid area corresponding to the sub-merchant owning the service terminal according to the information of the service terminal, the second relationship table being a dynamically changing relationship table.

In the proposed method, when the information about the biological characteristics of the object to be authenticated is information about the biological characteristics of a face, the information about the biological characteristics of the face is information about the biological characteristics of a living human face of the object to be authenticated, and the information about the biological characteristics of a living human face has one of the following forms: information about the biological characteristics of a living human face contains information about the facial expression of the object to be authenticated, information about the biological characteristics of a living human face does not contain information about the facial expression of the object to be authenticated.

The second aspect of the invention provides a device for authenticating near-field information, characterized in that it is applicable to a server and contains an acquisition module configured to obtain information about the current location of the object to be authenticated, and then determine the target grid area where the object is located, to be authenticated, wherein when the object to be authenticated is within a preset range of its authorized merchants, the user terminal of the object to be authenticated periodically sends the current location information of the object to be authenticated to the server; a receiving unit, configured to receive an information authentication request sent by the target service terminal in the target grid area, wherein the information authentication request carries information about the target service terminal and information about the biological characteristics of the object to be authenticated as a living body; wherein the target service terminal information contains information of authorized sub-merchants who own the target service terminal, the number and location of the target service terminal, the target service terminal being a terminal performing authentication of the object information to be authenticated; a determining unit, configured to determine the valid users of the target service terminal in the first relationship table of the target grid area according to the information of the target service terminal, and to determine biological characteristic information of each of the valid users; wherein the first relationship table is a relationship table between user accounts of authorized merchants and their valid users in the target grid area, wherein the first relationship table is a dynamically changing relationship table; an information authentication module configured to complete authentication of the information of the object to be authenticated, and obtain the information authentication result, in accordance with the valid information about the biological characteristics of the object to be authenticated and the information about the biological characteristics of each of the allowed users.

The third aspect of the invention provides an electronic device containing a memory device, a processor and a computer program stored in the memory device, configured to operate under the control of the processor, characterized in that the processor executes a computer program for implementing the steps of the method described in any of the embodiments described above implementation of the method.

A fourth aspect of the invention provides a computer storage medium with non-volatile program code executable by a processor, characterized in that the program code causes the processor to execute the method described in any of the method embodiments described above.

In one of the embodiments of the invention, first, obtaining information about the current location of the object to be authenticated, then determining the target grid area where the object to be authenticated is located; then, receiving an authentication request of information sent by the target service terminal in the target grid area is performed; further, determining a valid user of the target service terminal in the first relationship table in the target grid area according to information about the target service terminal, and determining information about the biological characteristics of each of the valid users; finally, according to the biological characteristics information of the living body of the subject to be authenticated and each acting user, completion of the authentication of the information of the subject to be authenticated is performed to obtain the information authentication result. From the above description, it can be seen that in this case, when the information is authenticated is performed for the entity to be authenticated, this is achieved by the biological information of the entity to be authenticated, and the user does not need to present a physical ID card, which facilitates travel by simplifying the information authentication process and improving the user experience when performing information authentication; in addition, only when the object to be authenticated is within the preset range of its authorized merchant, the current location information of the object to be authenticated is sent to the server to ensure the privacy and security of the user's location, reducing the number of biological characteristics to be identified, improving identification accuracy, reducing misrecognition rate and reduced investment in hardware; at the same time, the use of information about the biological characteristics of the living body for information authentication can improve the accuracy of information authentication with good usability to solve technical problems of low usability and inconvenience of existing information authentication methods.

Other features and advantages of the invention will be described below and in part will become clear from the description or implementation of the invention. The purpose and advantages of the invention are realized and achieved by structures specifically indicated in the description, claims and drawings.

In order to make the objects, features and advantages of the invention more clear and understandable, the preferred embodiments of the invention will be described in detail below with reference to the accompanying drawings (drawings).

Brief Description of Attached Graphics

In order to more clearly illustrate specific embodiments of the invention or prior art, the following will briefly present the figures used in describing specific embodiments of the invention or prior art. It should be clear that the figures in the following description illustrate only some embodiments of the invention. From these figures, those skilled in the art can derive other figures without any inventive savvy.

In FIG. 1 is a flowchart of a near field information authentication method according to one embodiment of the invention.

In FIG. 2 is a flowchart of a method for determining valid users in a first relationship table of a grid area according to target service terminal information according to an embodiment of the invention.

In FIG. 3 is a flowchart of a method for authenticating information based on information about the biological characteristics of the living body of the subject to be authenticated and information about the biological characteristics of each of the valid users, according to one embodiment of the invention.

In FIG. 4 is a flowchart of a method for performing information authentication based on the location information of each of the valid users corresponding to the target biological information, according to one embodiment of the invention.

Figure 5 illustrates examples of facial expressions according to one of the embodiments of the invention.

In FIG. 6 illustrates examples of facial expressions with facial key points according to one embodiment of the invention.

In FIG. 7 is an exemplary block diagram of a device for authenticating near field information according to one embodiment of the invention.

In FIG. 8 is an exemplary block diagram of an electronic device according to one embodiment of the invention.

Detailed description of the invention

In order to make the purpose, technical solutions and advantages of the present invention clearer, they will be described in detail with reference to the accompanying drawings. It should be clear that the embodiments of the invention described here are not all possible options. On the basis of these options, however, those skilled in the art without the use of inventive ingenuity can obtain other embodiments of the invention that are within its scope.

At present, identity authentication technology is applied to many services such as mobile payments and identity recognition. Existing service processing often requires users to provide physical credentials (including resident ID cards, bank cards, Hong Kong and Macau passports, etc.). The physical credentials are then read at the appropriate card reader, after which identity verification is performed to complete the authentication task. The user experience is poor. If the user forgets to bring or loses their physical credentials, they will not be able to perform identity authentication, resulting in the inability to receive various services, and this will seriously affect the user's travel plan. On this basis, the invention provides options for a near-field identity authentication method, devices, electronic equipment, and computer storage media therefor, which can simplify the identity authentication process, improve the user experience when performing identity authentication, facilitate user travel, and ensure the privacy and security of the user's location. . In addition, it can improve the accuracy of identity authentication.

To facilitate understanding of this embodiment, first, the near field identity authentication method disclosed in the embodiment of the present application is detailed.

Option 1

The invention provides a method for authenticating near field information. It should be noted that the steps shown in the flowcharts in the accompanying drawings may be performed on a computer system, such as a set of computer-executable instructions. In addition, although the flowchart shows a logical sequence, in some cases the steps shown or described may be performed in a different order than shown.

In FIG. 1 is a flowchart of a near field information authentication method according to one embodiment of the invention.

As can be seen in FIG. 1, the method comprises the following steps:

Step S102: Obtaining the current location information of the object to be authenticated, then determining the target grid area in which the object to be authenticated is located, and when the object to be authenticated is within a preset range of its authorized merchants, the user terminal of the object to be authenticated , periodically sends information about the current location of the object to be authenticated to the server.

In the considered embodiment, the server can be the executive body for the method. In particular, it can be a service cloud.

In an actual embodiment of the grid service cloud, a grid area may be divided into specific areas, and a grid server may be set up for the divided grid area. In particular, when the grid area is divided, the area of the divided grid area can be set according to actual conditions. If the population density in a certain area is high, then by dividing the grid area, the area of each part of it can be reduced; and if the population density in a certain area is low, then by dividing the grid area, the area of each part of it can be increased. To improve the use of Grid servers, when configuring Grid servers for divided Grid areas, each Grid area can be mapped to one Grid server, or multiple Grid areas can be mapped to one Grid server. The invention is not limited to a specific embodiment.

In this case, only when the object to be authenticated is within the preset range of its authorized merchant, the user terminal of the object to be authenticated will periodically send information about the current location of the object to be authenticated to the grid service cloud (typically every two minutes, but the invention is not limited to a specific length of this time period), and then the grid service cloud obtains information about the current location of the object to be authenticated, and the target grid area and the corresponding grid server of the object to be authenticated can be determined according to the information about the current location of the entity to be authenticated (as can be seen from the above, there are merchants in the grid area of the target authorized by the entity to be authenticated).

The user terminal of the entity to be authenticated periodically sends information about the current position of the entity to be authenticated to the server using one or more positioning technologies such as BDS (BeiDou Navigation Satellite System), GPS (Global Positioning System), LBS (Location Service). ), AGPS (Global Positioning System), GSM (Global Mobile Communications System), by locating by IP address (Internet Protocol), WiFi (wireless validity), by locating by gyroscope, etc., to determine the location of the user terminal of the object to be authenticated, and then obtain information about the current location of the object to be authenticated.

It should be noted that the user terminal may be a mobile phone or laptop, tablet computer, smart watch, smart bracelet, smart glasses, smart headphones, smart button type device, etc. The invention is not limited to the form of the user terminal as long as it provides the ability to determine and it is convenient to carry.

Step S104: Receiving an information authentication request sent by a target service terminal in the target grid area, wherein the information authentication request carries information about the target service terminal and information about the biological characteristics of the object to be authenticated as a living body; wherein the target service terminal information contains information of authorized sub-merchants who own the target service terminal, the target service terminal number, and location information of the target service terminal that performs authentication of the object information to be authenticated.

In this embodiment, the target service terminal may be a payment terminal and/or an identity authentication terminal. Payment terminals include cash registers, point of sale terminals, self-service payment machines, smart scanners, handheld devices, tablet computers, smart TVs, mobile phones, grab-ka gaming machines, gaming machines and self-service payment machines, self-service machines and intelligent payment equipment etc.; identity authentication terminals may include self-service terminals (e-government self-service terminals, e-banking self-service terminals, e-tax self-service terminals, hotel check-in self-service terminals, ATMs, automatic cash withdrawal machines, queuing machines, dispensing machines number check machines, self-service printing machines, self-service billing machines, self-service ticket machines, self-service transaction machines, etc.), shared equipment, intelligent robots, drones, identity authentication machines, equipment for identifying participants and dignitaries, smart access control devices, smart video intercom equipment, smart gates, etc. There may be other service terminals, the invention is not limited to specific service terminals.

When the target service terminal in the target grid area processes the corresponding service, an information authentication request is generated. This request contains information about the target's service terminal and information about the biological characteristics of the living body of the object to be authenticated. The target service terminal information includes information of an authorized sub-merchant who owns the target service terminal, the target service terminal number (specifically, the target service terminal ID), and location information of the target service terminal. One or more of the following technologies can be applied to determine the location of the target service terminal of the target service terminal: manual positioning, BDS, GPS, LBS, AGPS, GSM, IP address, WiFi, gyroscope positioning, etc. d.

It should be noted that when any service terminal is installed in the shopping center to which it belongs, it will be linked to the merchant to which it belongs. To help you understand the process, here is an example: if an authenticator authorizes a Wal-Mart merchant, it will default to an authenticator in all Wal-Mart branches (i.e. they are sub-merchants in this case). When POS B is installed at Wal-Mart A, POS B communicates with Wal-Mart A.

In addition, biological characteristic information may contain one or more biological characteristics such as face, iris, sclera, eye mapping, palm veins, palm prints, ear mapping, finger veins, voice, etc. The structure of collecting biological characteristics and the method for determining the previously stored biological characteristics of the living body collects information about the biological characteristics of the living body of the object to be authenticated. Preferably, face recognition technology can be selected to obtain information about the biological characteristics of the object to be authenticated. At present, face recognition technology has reached the level of one error in ten million, so the accuracy of personality recognition can be improved with face recognition technology. Through the use of living body face recognition technology, it is possible to prevent others from using mobile phone images, videos, photos, 3D head printer masks, etc., which are trying to pass off as objects to be authenticated, thereby increasing the security of information authentication. In addition, in order to prevent the theft and scanning of the user's face in uncontrolled states such as normal sleep, coma, intoxication, or even death, which can lead to loss of funds, face recognition technology can be applied in combination with facial recognition technology. To prevent the theft of funds, the subject to be authenticated can give the face the expression necessary for identification, based on their preferences; keep in mind that two people can look exactly the same when they are siblings, twins or even not related by blood, that is, human faces are not unique, but despite similar appearances, facial expressions are different, and this can prevent confusion in the personality of users who are similar to each other, such as twins.

Step S106: determining the valid users of the target service terminal in the first relationship table of the target grid area according to the information of the target service terminal, and determining information about the biological characteristics of each of the valid users; the first relationship table is a relationship table between the user accounts of authorized merchants and their valid users in the target grid area, and the first relationship table is a dynamically changing relationship table.

The first relationship table is a relationship table between each authorized merchant in the target grid area and the user account that performs the authorized operation on it. For example, if the user performing the authorization operation for authorized merchant C is D, then the first relationship table contains the relationship between authorized merchant C and user D's account.

The first relationship table is a dynamically changing relationship table, and the process of dynamically changing the first relationship table will be described in detail below.

Because the target service terminal information includes information about the authorized sub-merchant that owns the target service terminal, it is possible to search for a valid user corresponding to an authorized sub-merchant, and specifically to search for a valid user corresponding to an authorized sub-merchant in the first table. relationships, and determine information about the biological characteristics of each of the allowed users, while the allowed user corresponds to the user authorized for the authorized sub-trader.

Step S108: According to the information about the biological characteristics of the object to be authenticated as a living body and the information about the biological characteristics of each of the allowed users, the authentication of the information of the object to be authenticated is completed and the information authentication result is obtained.

The biological property information of the living body of the subject to be authenticated is compared with the biological property information of each of the valid users, and the authentication of the identity of the subject to be authenticated is completed according to the matching result. This process will be described in detail below.

In one of the embodiments of the invention, first, obtaining information about the current location of the object to be authenticated, and then determining the target grid area in which the object to be authenticated is located; then, the information authentication request sent by the target service terminal in the target grid area is received; further, determining a valid user of the target service terminal in the first relationship table in the target grid area according to information about the target service terminal, and determining information about the biological characteristics of each of the valid users; finally, according to information about the biological characteristics of the living body of the subject to be authenticated and each of the allowed users, the authentication of the information of the subject to be authenticated is completed to obtain an information authentication result. From the above description, it can be seen that in this embodiment, when information authentication is performed on the subject to be authenticated, this is achieved using the biological information of the subject to be authenticated, and the user does not need to present a physical identification card, which simplifies the information authentication process and improves perception of the user during the authentication of information; in addition, only when the object to be authenticated is within the preset range of its authorized merchant, information about the current location of the object to be authenticated is sent to the server to ensure the privacy and security of the user's location; at the same time, the use of information about the biological characteristics of a living body for information authentication can improve the accuracy of information authentication with good applicability to solve problems related to the low applicability and inconvenience of existing information authentication methods.

The proposed near field information authentication method has been briefly described above, followed by a more detailed description.

The following describes in detail a specific embodiment of the invention in terms of a method for authenticating near field information.

When an entity to be authenticated wants to use the proposed near field information authentication method, it first performs registration. The specific process is as follows:

(1) Receiving a registration command sent by the user terminal of the entity to be authenticated, wherein the registration command contains the user account of the entity to be authenticated.

Usually, the entity to be authenticated should download the corresponding software, install and run the software, and then enter the user account, password, and mobile phone number of the entity to be authenticated in the registration interface, click the registration button, and send the registration command to the server.

(2) Sending prompt information to the user terminal of the entity to be authenticated to prompt the entity to be authenticated to download the identification information, where the identification information includes information about the biological characteristics of the entity to be authenticated.

The biological information may be information such as a static image, an on-site image, and an on-site facial image. Additionally, information such as the name or identification number of the entity to be authenticated must be uploaded to prevent attackers from impersonating other users' biological information as their own.

(3) Obtaining the identification information loaded by the entity to be authenticated through its user terminal and checking whether the identification information is legal.

Said identification information may be transmitted to the relevant authentication department to check whether the basic information about the object to be authenticated (eg, name, identification number, etc.) matches the information about the biological characteristics. When it is determined that the basic information corresponds to the biological characteristics information, it can be determined that the identification information of the object to be authenticated is legitimate.

(4) If the identification information is legal, then the information about the biological characteristics of the subject to be authenticated and the user account of the subject to be authenticated are stored, and the registration is completed.

In particular, once the registration is completed, the entity to be authenticated can optionally link its user account to its payment account (which can be a bank card number, a WeChat account, an Alipay account, etc.) to facilitate subsequent payments.

When a merchant wants to use the proposed near field information authentication method, he also performs registration. The process is briefly described below: the merchant needs to download the appropriate administrator software, install and run the software, then enter the merchant's name in the registration interface, link the address information, click the register button, and send the registration command to the server; then the server checks the registration command, and after passing the check, the registration of the trader is completed; upon completion of registration, the service terminal required for the merchant is initialized, and this service terminal is attached to the merchant; in addition, after the program is installed, the service terminal displays a QR code (containing information about the merchant), so that the user terminal of the entity to be authenticated scans the QR code, thereby completing the authorization of the entity to be authenticated for the merchant.

Upon completion of the registration of the merchant in the grid area to which the merchant belongs, a merchant object will be created and the server will establish a relationship table between the serial numbers of all service terminals of the merchant and the merchant (that is, the second relationship table). When the merchant has a newly added service terminal, the service terminal information sent by the newly added service terminal is obtained (in particular, the service terminal information will be sent when the newly added service terminal is turned on), while the service terminal information includes sub-merchant information, to which the service terminal belongs, the number of the service terminal, and the location of the service terminal (location information may be sent by the service terminal regularly because the location of some service terminals, such as the credit card ATM on the bus, changes, so it needs to be sent regularly so that it can be determined the grid area to which the service terminal belongs in real time); a second relationship table between sub-merchants and service terminal numbers is set in the grid area corresponding to the sub-merchant owning the service terminal according to the information of the service terminal. It should be noted that if among the service terminal numbers recorded in the second relationship table there is a service terminal corresponding to the number in the off state, then the service terminal number corresponding to the service terminal turned off will also be deleted from the second relationship table, that is, the second relationship table will also is dynamically changing.

When an entity to be authenticated wants to authorize a merchant, there are two ways to do so.

First method: the entity to be authenticated scans said QR code with the software on its user terminal. When scanning is complete, the near field function is selected. The user terminal of the object to be authenticated generates a merchant authorization request and sends a merchant authorization request to the service. Thus, the server can complete the authorization of the merchant on the authorization request of the merchant of the object to be authenticated based on the authorization request of the merchant, and the server sends the location information of each sub-merchant corresponding to the authorization request of the merchant to the user terminal of the object to be authenticated.

The second method: the entity to be authenticated searches the list of merchant names in its user terminal software (name search, search near a fixed location on the map, etc.), selects the merchant, and sets the near field function for the merchant, and the user terminal of the object to be authenticated, generate a merchant authorization request, and send the merchant authorization request to the server. Thus, the server can complete the authorization of the entity to be authenticated for the merchant corresponding to the authorization request of the merchant based on the authorization request of the merchant, and the server sends the location information of each sub-merchant corresponding to the authorization request of the merchant to the user terminal of the entity to be authenticated.

The authorization process for the server as the executor of this process: receiving the authorization request of the merchant sent by the entity to be authenticated through its user terminal, wherein the authorization request of the merchant is a request generated after the entity to be authenticated has set the near field function by towards the merchant at his user terminal, wherein the merchant's authorization request carries information about the merchant; based on the merchant authorization request, completion of the authorization of the object to be authenticated for the merchant corresponding to the merchant authorization request; and obtaining information about the location of all sub-traders.

Upon completion of user authorization for the merchant, the server determines the authorized merchant of the object to be authenticated, wherein the authorized merchant becomes the merchant of the object to be authenticated after the latter has authorized the merchant through its user terminal, the authorized merchant being at least one authorized sub - merchant; the location information of each authorized sub-merchant is sent to the user terminal of the entity to be authenticated, so that the latter's user terminal can determine whether its location information and the location information of each authorized sub-merchant are within a predetermined range; when the user terminal determines that its location information and the location information of one or more authorized sub-merchants are within the preset range, the user terminal of the entity to be authenticated sends its current location to the server, and then the server obtains the current location information of that user terminal. terminal and uses the current location information of the user terminal as the current location information of the object to be authenticated; when the user terminal of the entity to be authenticated determines that its location information is not within the preset range of the location information of any authorized sub-merchant, the user terminal of the entity to be authenticated does not send its current location to the server, thereby increasing the confidentiality of the user's location, and his safety.

In addition, it should be noted that when determining the authorized merchant of the object to be authenticated, the authorized merchant of this object can be found in the service cloud, and then the location information of each authorized sub-merchant of all authorized merchants of the object to be authenticated is sent to the user terminal the object to be authenticated; it may also happen that when the user terminal of the entity to be authenticated sends its current location, it also sends information about authorized merchants in the preset range of its location to the server, so that the server does not need to find all authorized merchants of the entity to be authenticated and send location information of each authorized sub-merchant of all authorized merchants to the user terminal of the entity to be authenticated. To the user terminal of the entity to be authenticated, only the location information of each sub-merchant of the authorized merchant corresponding to the information of the authorized merchant sent by the user terminal is sent. Such a solution can reduce the working resources of the server, the amount of calculations and the amount of transmitted information. The present invention is not limited to the two methods of implementation discussed above. The first method or the second method may be implemented, and both methods of implementation are within the scope of the invention.

One user terminal may correspond to one user account, or to several user accounts at the same time, which is not specifically limited by the invention.

After the server obtains information about the current location of the entity to be authenticated, it establishes a relationship between the authorized sub-merchant of the entity to be authenticated and the user account of the entity to be authenticated in the first relationship table, that is, the relationship between the authorized sub-merchant (the merchant authorized for the entity to be authenticated) and the user account of the entity to be authenticated is added to the first relationship table (this is an extension of the first relationship table).

The process of pruning the first relationship table is described below.

One of the methods is as follows: out of the preset range information sent by the user terminal of the object to be authenticated is obtained; and deleting entry information about the user account of the object to be authenticated in the first relationship table according to the out of the preset range information.

Another method: if the current location information of the user terminal of the entity to be authenticated is not received within a predetermined time, and there is an entry of the user account of the entity to be authenticated in the first relationship table, then the user account entry of the entity to be authenticated is deleted. from the first relationship table.

When the object to be authenticated is within the preset range of its authorized merchant, the user terminal of the object to be authenticated will periodically send its current location information to the server. If the current location information of the entity to be authenticated is not received within the preset time, the user terminal of the entity to be authenticated is considered to be off or the user has left the preset range. In this case, the entry about the user account of the object to be authenticated will be removed from the first relationship table, which increases the confidentiality of information about the user's location and security, and saves server resources.

When an entity to be authenticated moves from a preset range containing its authorized merchants to another preset range including its authorized merchants, then the user account record of the entity to be authenticated will be deleted in the grid area corresponding to the first preset range , and a relationship will be established between the user account of the object to be authenticated and its authorized seller in the grid area corresponding to the second preset range.

When the entity to be authenticated needs to perform information authentication, it will collect information about the biological characteristics of the entity to be authenticated as a living body through the target's service terminal and then send it to the server. The server receives information including information about the service terminal of the target and information about the biological characteristics of the object to be authenticated as a living body. After requesting authentication of the information in the first relationship table of the target grid area, according to the target service terminal information, a valid user of the target service terminal is determined. The process illustrated in Fig. 2 includes the following steps:

Step S201: Obtaining the first relationship table of the target grid area.

There can be multiple merchants in the target grid area, and the first relationship table in the target grid area contains the relationships between multiple merchants and their user accounts.

Step S202: determining the first relationship table of the target of the authorized sub-merchant who owns the target service terminal in the first relationship table in the target grid area.

Step S203: Obtaining a user account included in the first target relationship table and using the user account included in the first target relationship table as a valid user account.

Step S204: Using the user corresponding to the valid account as the valid user of the target service terminal.

After receiving the valid users of the service terminal of the target, the biological property information of each of the valid users (including the biological property information obtained during registration) is further determined, then according to the biological property information of the living body of the object to be authenticated and the biological property information each of the allowed users completes the identification of the object to be authenticated. The process illustrated in FIG. 3 includes the following steps:

Step S301: determining whether biological characteristics information of the object to be authenticated as a living body is obtained directly from the real living body.

When performing information authentication, it is first determined whether the biological characteristic of the object to be authenticated as a living body is obtained directly from the real living body, so as to further prevent identity spoofing through photographs and videos. The invention provides for the authentication of information about the object to be authenticated through information about the biological characteristics of the object to be authenticated as a living body. The entity to be authenticated is not required to provide information such as passwords, QR codes, or identity documents, which simplifies the information authentication process and improves interaction with the entity to be authenticated when performing information authentication; furthermore, since the entity to be authenticated is not required to provide the above information, it reduces the risk of fraudulent use of passwords and QR codes and loss of identity documents, and enhances the security of information authentication.

Alternatively, when the biological characteristics information of the living body is the characteristics of a living face, it can be combined with the facial recognition technology to effectively prevent the user from being identified and scanned without their knowledge and theft of funds.

Step S302: If yes (the information is obtained directly from the living body), then the biological property information of the object to be authenticated is matched with the biological property information of each of the allowed users.

To obtain the matching result, information about the biological characteristics of the object to be authenticated as a living body is sequentially compared with information about the biological characteristics of each of the allowed users.

Step S303: If not (the information is not obtained from a living body), it is impossible to complete the authentication of the information of the object to be authenticated.

If the service terminal has a living body recognition algorithm installed, the service terminal does not send a service request; if the living body recognition algorithm is installed on the server, then the server sends information to the service terminal that the user cannot be found at the moment.

Step S304: Based on the matching result, it is determined whether there is biological property information of the target that matches the biological property information of the object to be authenticated as a living body in the biological property information of each of the allowed users.

In one embodiment of the invention, when the threshold degree of similarity between the biological characteristics information of any valid user and the biological characteristics information of the object to be authenticated as a living body is higher than a predetermined threshold value, the biological characteristics information of the valid user is considered to be the same as information about the biological characteristics of the object to be authenticated as a living body.

For example, information about the biological characteristics of the object H to be authenticated is compared with information about the biological characteristics of the legitimate user E, information about the biological characteristics of the legitimate user F, and information about the biological characteristics of the legitimate user G. The similarity between the information about the biological characteristics of the legitimate user E, the information about the biological characteristics of the allowed user F and the information about the biological characteristics of the allowed user G on the one hand and the information about the biological characteristics of the object H to be authenticated, and let the degree of similarity between the information about the biological characteristics of the allowed user E and the information about the biological characteristics of the object H to be authenticated , is equal to 70%, the degree of similarity between the information about the biological characteristics of the allowed user F and the information about the biological With some characteristics of the object H to be authenticated, it turns out to be 80%, and the degree of similarity between the information about the biological characteristics of the allowed user G and the information about the biological characteristics of the object H to be authenticated turns out to be 95%.

Case 1: If the preset similarity threshold is 90%, then only the similarity between the biological characteristics information of the valid user G and the biological characteristics information of the object H to be authenticated is satisfied, and then the biological characteristics information of the target is considered to be the biological characteristics information of the valid user. user G.

Case 2: If the preset similarity threshold is 98%, then there is no target biological property information corresponding to the biological property information of the object H to be authenticated in the biological property information of the allowed user, in which case the information is not authenticated, and the server sends information about the failed authentication to the service terminal.

Case 3: If the preset similarity threshold is 75%, then the similarity between the biological characteristics information of the legitimate user F and the biological characteristics information of the object H to be authenticated satisfies the requirement, and the similarity between the biological characteristics information of the legitimate user G and the information about biological characteristics of the object H to be authenticated satisfy the requirements, and then information about the biological characteristics of the target is considered information about the biological characteristics of the allowed user F and information about the biological characteristics of the allowed user G.

Step S305: If there is information about the biological characteristics of the target, then it is checked whether the information about the biological characteristic of the target is unique.

Step S306: If there is no information on the biological characteristics of the target, it is confirmed that the authentication of the information has failed.

Step S307: If the target biological property information is unique, then the valid user corresponding to the target biological property information is considered as the subject to be authenticated, and the authentication of the object to be authenticated information is completed.

Step S308: If the target biological property information is not unique, then the information is authenticated based on the location information of each of the valid users corresponding to the target biological property information.

When the biological property information of multiple valid users matches the biological property information of the object to be authenticated as a living body (i.e., there is information on multiple sets of biological property of the target), additional authentication information is required (for example, Case 3 in step S304 above) . Information authentication is performed based on the location information of each of the allowed users, the corresponding target biological information. The process illustrated in FIG. 4 proceeds as follows:

Step S401: comparing the location information of each of the allowed users, the corresponding information about the biological characteristics of the target, with the location information of the target service terminal.

As in Case 3 in step S304 above, when the target biological property information is valid user F biological property information and valid user G biological property information, the valid user F location information is further compared with the target service terminal location information and information the location information of the valid user G is compared with the location information of the target service terminal to obtain a comparison result.

Step S402: Determining, based on the result of the comparison, whether the valid user closest to the location information of the target service terminal is unique.

If it is determined in step S401 that the valid user F and the valid user G are closest to the location information of the target service terminal, then...

Case 1: after comparison, it turns out that the distance between the valid user F and the target service terminal is 2 m, and the distance between the valid user G and the target service terminal is 50 m. Then the valid user closest to the location information of the target service terminal is the valid user F.

Case 2: After comparison, it turned out that the distance between the valid user F and the target service terminal is 3 m, and the distance between the valid user G and the target service terminal is 3 m (or the deviation from 3 m is within the preset tolerance). Then there are two valid users that are closest to the target service terminal location information: one is valid user F and the other is valid user G.

Step S403: If the valid user closest to the location information of the target service terminal is unique, then the valid user that is closest to the location information of the target service terminal is considered as the entity to be authenticated, and the process of authenticating the information of the object to be authenticated , ends.

If the valid user closest to the location information of the target service terminal determined in step S402 is unique, then the valid user closest to the location information of the target service terminal is considered to be the entity to be authenticated, and the authentication of the entity information to be authenticated is ends. As in Case 1 in step S402, the entity to be authenticated is a valid user F.

Step S404: If the valid user closest to the location information of the target service terminal determined in step S402 is not unique, an information authentication request is sent to the user terminal of each of the valid users closest to the location information of the target service terminal.

If the valid user closest to the target service terminal location information determined in step S402 is not unique, an information authentication request is sent to the user terminal of each of the valid users with the shortest distance to the target service terminal location information. As in Case 2 in step S402, an information authentication request is sent to the user terminal of the actual user F and to the user terminal of the actual user G.

The information authentication request may include asking the user to press a confirmation button, enter a confirmation code, and/or provide other information about the user's biological characteristics, etc.

Step S405: When confirmation information sent by each valid user closest to the location information of the target service terminal is received, based on the information authentication request, confirmation information is determined to obtain a determination result.

The result of the determination may be that the confirmation information is incorrect or the confirmation information is correct.

Step S406: Authentication completion of the object information to be authenticated according to the determination result.

When the determination result is that the confirmation information is correct, it is determined that the confirmation information returned by the user terminal matches the information of the object to be authenticated, and the user corresponding to the user terminal is considered to be the object to be authenticated, and authentication of the object information to be authentication is completed; if the determination result is that the confirmation information is incorrect, it is determined that the confirmation information returned by the user terminal does not match the information about the entity to be authenticated, and the user corresponding to the user terminal is not the entity to be authenticated.

In addition, when the information authentication is payment information authentication, the information authentication result is the payment information authentication result, which contains the user account of the entity to be authenticated; upon completion of the authentication of the information about the object to be authenticated, the payment information authentication result and the service request are additionally sent to the payment system so that the payment system can find the payment account corresponding to this user account as a result of the payment information authentication, completing the payment transaction based on the payment account and service request; generating an account maintenance request based on the information to complete the payment transaction, sending the account maintenance request to the billing system so that the billing system can generate an electronic payment invoice in accordance with the account maintenance request, and sending the electronic payment invoice to the email address specified by the user or to the service target terminal.

This situation is a process that is only executed when the service request requires payment, and when the service request does not require payment, the process is not executed. This implementation method combines identity authentication (in particular, to obtain the user account of the entity to be authenticated) and mobile payment transactions in many cases where payment transactions are required (for example, in cases such as buying tickets at a high-speed rail station, registering in hotel, etc.), which simplifies the tedious operation of multiple authentication.

When the information authentication is identity information authentication, the information authentication result is the identity information authentication result, and the identity information authentication result contains the user account of the entity to be authenticated; upon completion of the authentication of the information of the object to be authenticated, further sending the authentication result of the identity information and the service request to the identity authentication system, so that the identity authentication system converts the user account resulting from the authentication of the identity information into personal identity information, and completes the authentication of the identity information in accordance with personal identification information and service request.

Preferably, when the biological property information of the subject to be authenticated is biological property information of a face, the biological property information of the face is biological property information of a living human face of the subject to be authenticated, and the biological property information of a living human face has any of of the following forms: information about the biological characteristics of a living human face contains information about the facial expression of the object to be authenticated, information about the biological characteristics of a living human face does not contain information about the facial expression of the object to be authenticated.

It should be noted that in order to improve the operation efficiency and response speed of the network service cloud, step S108 and its specific process (steps S301 to S307 and steps S401 to S406) can be performed in the biological characteristics authentication service cloud, then the biological characteristics information authentication process does not depend on the grid service cloud, which can reduce the computational volume of the grid service cloud and ensure the smooth operation of the system.

In embodiments of the invention, in order to improve the accuracy of information authentication, information about the biological characteristics of a living human face is used for information authentication, which may contain information about the facial expression of the object to be authenticated, or not contain information about the facial expression of the object to be authenticated.

When the information about the biological characteristics of a living human face contains information about the facial expression of an object to be authenticated, to obtain information about the biological characteristics of a living human face containing information about the facial expression of an object to be authenticated, a combination of living human face recognition technology and facial recognition technology is used, wherein the living human face recognition technology includes a living body recognition technology and a face recognition technology. First, it is determined by the living body recognition technology whether the face information of the subject to be authenticated is the biological characteristics of the face of a living person, then the face recognition technology is used to match the user corresponding to the subject to be authenticated, and then the facial expressions are matched by the technology recognition of facial expressions, and according to the results of the comparison, the authentication of the information of the object to be authenticated is completed.

As can be seen in FIG. 5, which illustrates examples of facial expressions, the system extracts key points of facial expressions of the subject to be authenticated based on the facial expression of the subject to be authenticated: see FIG. 6, which illustrates examples of facial expressions with facial key points. In particular, during face posture authentication, whether facial postures are the same or similar is determined based on the similarity of positions of facial expression features to prevent fraudulent use of the identity of people with the same appearance.

The invention combines real-time facial recognition technology and facial recognition technology to prevent other people from impersonating legitimate users through cell phone images, videos, photographs, masks, and 3D printed heads; this reduces the risk of funds being stolen by others, as well as effectively distinguishing between two or more apparently similar users; the risk of fraud using personal data without the knowledge of the owner is significantly prevented; and be effectively prevented from confusing the identities of twins and other similar individuals.

The user can also set the alarm expression. When the user is under compulsion to transfer funds, facial information can be collected using facial alarm expression, and based on the alarm expression, the system can realize an alarm operation, thereby improving the personal safety and security of the user's property.

An exemplary implementation of the proposed near field information authentication method is shown below.

The zoo has four entrances: north, south, east and west. When the entity to be authenticated selects the near field function setting for this zoo, it means that the entity to be authenticated has authorized the zoo. The server will return the location information of said four zoo entrances to the user terminal of the entity to be authenticated (which can be considered as four authorized sub-merchants in the sense of the present invention, assuming that the zoo is relatively large and the four entrances are in different grid areas).

When the object to be authenticated is far from the four entrances (outside the zoo or in the center of the zoo, that is, not in the grid areas of these four entrances), the user terminal only reads the location information of the object to be authenticated, but does not send information to the server about your location.

When the object to be authenticated approaches one of the four entrances (that is, when it enters the grid area of one of the entrances), the user terminal sends its current location information to the server.

Upon receiving the current location information sent by the user terminal, the server creates an authentication object in the grid area corresponding to an input near the object to be authenticated, and creates a relationship table between the input and the user account of the object to be authenticated (that is, an authorized sub-merchant). in the sense of the present invention).

When the object to be authenticated arrives at the entrance gate, it can directly scan its face to enter the zoo.

Thus, embodiments of the invention may provide at least one of the following functions.

(1) High precision. The invention is based on existing high-precision biological feature recognition technology, as well as near-field authorization technology and grid technology to reduce the number of biological features that need to be downloaded to ensure comparison accuracy (i.e., the way in which the entity to be authenticated authorizes the trader ) to ensure the accuracy of the comparison and to prevent disputes caused by misidentification.

(2) High speed and low cost. With near-field authorization and grid technology, the number of biological characteristics that need to be loaded is reduced, comparison speed is increased, comparison can be performed in milliseconds, equipment costs are reduced, and input and maintenance costs are reduced.

Simplicity and convenience, good user interaction. When a single valid user is matched in the system, the entity does not need to pull out a mobile phone for authentication, and only biological scanning can be relied on for identification, which reduces the number of work steps and is simpler, more convenient, and faster.

(4) Prevention of fraudulent use of personal information at a distance. The accuracy of AGPS is up to 2km, and the accuracy of GPS can be 10m, so through AGPS, the range can be effectively controlled within a radius of 3km, and when using GPS, the range can be effectively controlled within a radius of 15m, which effectively prevents the fraudulent use of a user's personal information by intruders for outside the effective area and prevents a large number of illegal activities related to the fraudulent use of information.

(5) Protecting the privacy of the user's location. The entity to be authenticated will send its location information to the server only when it is within the predefined range of authorized sub-merchants, thereby protecting the privacy and security of the user's location.

(6) Helping the police to quickly solve the case. In the case of forced transfer of funds and escape, users can be found in the shortest possible time using the merchant's location information or user's location information, and cases can be resolved quickly.

(7) Prevention of fraudulent use of personal data. The use of living body biotechnology can prevent identity forgery. Using the example of a human face, using face recognition technology on a living body can prevent other people from impersonating the user through images, videos, photographs, masks and heads printed on a 3D printer.

(8) Prevention of theft of funds. When the biological characteristic used is face recognition, facial recognition technology can be used together. If the entity to be authenticated does not deliberately bind the facial expression to the authentication operation and read the face, then the mobile payment action of the entity to be authenticated cannot be performed, which can effectively prevent the fraudulent use of the entity to be authenticated and theft of funds in the normal state , in a dream, in a state of intoxication, coma, death, etc.

(9) Prevention of confusion in the personalities of twins. Using facial recognition technology, everyone can customize their own facial expressions for authentication according to their personal preferences; even if people look the same, facial expressions for authentication do not match. Therefore, it can effectively prevent confusion about the identities of twins and other similar people.

(10) Safety of funds in the account. When the mobile phone is lost or the mobile phone number is obtained by other people, through the combined use of living body biological recognition technology, even combined with living body facial expression recognition technology, unless it is personally controlled, it will be impossible to perform information authentication operations, which guarantees security. account identification information.

(11) Two in one is easier. The integration of identity authentication and near field payment can alleviate the tedious operation of multiple authentication.

Option 2

The invention also provides a device for authenticating near field information. The device for authenticating the near field information is basically adapted to perform the method for authenticating the near field information described above in terms of its embodiments. The device for authenticating the near field information provided by the invention will be specifically described below.

In FIG. 7 is an exemplary block diagram of a device for authenticating near field information according to an embodiment of the invention. As can be seen in FIG. 7, the main components of the near field information authentication device are an acquisition unit 10, a reception unit 20, a determination unit 30, and an information authentication unit 40, wherein:

the obtaining module, configured to obtain information about the current location of the object to be authenticated, then determines the grid area of the target in which the object to be authenticated is located, while when the object to be authenticated is within a preset range of its authorized merchants, the user the terminal of the object to be authenticated periodically sends information about the current location of the object to be authenticated to the server;

a receiving unit, configured to receive an information authentication request sent by the target service terminal in the target grid area, wherein the information authentication request carries information about the target service terminal and information about the biological characteristics of the object to be authenticated as a living body; the target service terminal information contains authorized sub-merchants who own the target service terminal and location information of the target service terminal, the target service terminal is a terminal performing authentication of the object information to be authenticated;

a determining unit, configured to determine valid users of the target service terminal in the first relationship table of the target grid area according to information of the target service terminal, and determining information about biological characteristics of each of the valid users; the first relationship table is a relationship table between authorized merchants' user accounts and their valid users in the target grid area, the first relationship table is a dynamically changing relationship table;

an information authentication module configured to, in accordance with the valid information about the biological characteristics of the object to be authenticated and the information about the biological characteristics of each of the allowed users, complete the authentication of the information about the object to be authenticated and obtain the information authentication result.

In one of the embodiments of the invention, first, obtaining information about the current location of the object to be authenticated, and then determining the target grid area in which the object to be authenticated is located; then, the information authentication request sent by the target service terminal in the target grid area is received; further determining a valid user of the target service terminal in the first relationship table in the target grid area according to information about the target service terminal, and determining information about the biological characteristics of each of the valid users; finally, according to information about the biological characteristics of the living body of the subject to be authenticated and each of the allowed users, completing the authentication of the information of the subject to be authenticated to obtain the information authentication result. It can be seen from the above description that, in this embodiment, when information authentication is performed on an entity to be authenticated, this is achieved by biological information of the entity to be authenticated, and the user does not need to present a physical identification card, which simplifies the information authentication process and improves perception of the user during the authentication of information; in addition, only when the object to be authenticated is within the preset range of its authorized merchant, information about the current location of the object to be authenticated is sent to the server to ensure the privacy and security of the user's location; at the same time, the use of information about the biological characteristics of a living body for information authentication can improve the accuracy of information authentication with good applicability to solve technical problems related to the low applicability and inconvenience of existing information authentication methods.

Optionally, the device may be configured to determine authorized merchants of the entity to be authenticated, wherein the authorized merchants are merchants after the entity to be authenticated performs authorization against these merchants through its user terminal, the authorized merchants include at least one authorized sub-merchant; sending the location information of each authorized sub-merchant to the user terminal of the entity to be authenticated, so that the user terminal of the entity to be authenticated determines whether its location information and the location information of each authorized sub-merchant within a predetermined range; when the user terminal of the entity to be authenticated determines that its location information and the location information of authorized sub-merchants are within the preset range, obtaining the current location information of the user terminal, and using the current location information of the user terminal as the current location information of the entity to be authenticated.

Optionally, the device may also be configured to establish a relationship between the authorized sub-merchant of the entity to be authenticated and the user account of the entity to be authenticated in the first relationship table.

Optionally, the determination module may be configured to obtain the first grid-area relationship table of the target; determine a first relationship table of an authorized sub-seller who owns the target service terminal in the first relationship table in the target grid area; obtain a user account included in the first target relationship table and use the user account included in the first target relationship table as a valid user account; designate a user corresponding to this valid account as a valid user of the target's service terminal.

Optionally, the information authentication module may be configured to determine whether information about the biological characteristics of the object to be authenticated as a living body is obtained directly from a real living body; if yes, then the information about the biological characteristics of the object to be authenticated is compared with the information about the biological characteristics of each of the allowed users; according to the results of the comparison, it is determined whether there is information about the biological characteristics of the target corresponding to the information about the biological characteristics of the object to be authenticated as a living body in the information about the biological characteristics of each of the allowed users; if available, it is determined whether the information on the target biological characteristics is unique; if it is unique, then the valid user corresponding to the target biological information is considered to be the object to be authenticated, and the authentication of the information of the object to be authenticated is completed.

Optionally, the information authentication module may be configured, if the information is not unique, to perform authentication of the information based on the location information of each of the valid users corresponding to the biological characteristic information of the target.

Optionally, the information authentication module may be configured to compare the location information of each of the valid users corresponding to the target biological information with the location information of the target's service terminal; determine, from the results of the comparison, whether the valid user closest to the location information of the target service terminal is unique; if it is unique, then the valid user that is closest to the location information of the target service terminal is considered the entity to be authenticated, and the authentication of the information of the entity to be authenticated is completed.

Optionally, the information authentication module may be configured, if the information is not unique, to send an information authentication request to the user terminal of each of the valid users closest to the location information of the target service terminal; when receiving confirmation information sent by each valid user closest to the location information of the target service terminal, based on the information authentication request, the confirmation information is determined to obtain a determination result; according to the results of the determination, the authentication of the information of the object to be authenticated is completed.

Optionally, when the information authentication is payment information authentication, the information authentication result is the payment information authentication result, which contains the user account of the entity to be authenticated; the device is further adapted to send the payment information authentication result and the service request to the payment system, so that the payment system searches for a payment account corresponding to the user account in the payment information authentication result, and completes the payment transaction based on the payment account and the service request; creating an account service request in accordance with the payment transaction completion information and sending the account service request to the account system so that the account system generates an electronic payment account in accordance with the account service request, and sending the electronic payment invoice to an email address specified by the user, or to the service terminal of the target.

Optionally, when the information authentication is identity information authentication, the information authentication result is the identity information authentication result, and the identity information authentication result contains the user account of the entity to be authenticated; the device is further adapted to send the identity authentication result and the service request to the identity authentication system, so that the identity authentication system converts the user account of the identity authentication result into personal identity information, and completes the identity information authentication according to the identity information and the request service.

Optionally, the device may be configured to receive a merchant authorization request sent by the entity to be authenticated via its user terminal, wherein the merchant authorization request is a request generated by the entity to be authenticated after setting the near field function for the merchant on its user terminal , wherein the merchant authorization request contains information about the merchant; based on the merchant authorization request, completing the merchant authorization corresponding to the merchant authorization request with the entity to be authenticated; and obtaining information on the whereabouts of all sub-traders.

Optionally, the device may be configured to receive pre-range out of range information sent by the user terminal of the entity to be authenticated; deleting from the first relationship table an entry of the user account of the object to be authenticated according to the out of the preset range information.

Optionally, the device may be configured to, if the current location information of the user terminal of the entity to be authenticated is not received within a predetermined time, and there is information on the user account of the entity to be authenticated in the first relationship table, then delete from the first relationship table information about the user account of the object to be authenticated.

Optionally, the device may be configured to receive service terminal information sent by the service terminal, wherein the service terminal information includes information about the sub-merchant that owns the service terminal, the service terminal number, and the location of the service terminal; creating a second relationship table between the serial numbers of the sub-merchant and the service terminal in a grid area corresponding to the sub-merchant owning the service terminal according to the information of the service terminal, the second relationship table being dynamically changing.

Optionally, the device may be configured, when the biological characteristics information of the object to be authenticated is information about the biological characteristics of a face, the information about the biological characteristics of the face is information about the biological characteristics of a living human face of the object to be authenticated, and the characteristic information about a living human face can be one of the following: biological characteristics information of a living human face contains information about the facial expression of the object to be authenticated, information about the biological characteristics of a living human face does not contain information about the facial expression of the object to be authenticated.

The implementation principles and technical effects of the apparatus presented in the embodiments thereof are the same as those in the embodiments of the method described above. For a description of the parts not mentioned in the embodiments of the device, you can refer to the description of the above embodiments of the method.

Another aspect of the invention provides an electronic device. As can be seen in FIG. 8, the electronic device includes a processor 50, a memory 51, a bus 52, and a communication interface 53; the processor 50, the communication interface 53 and the storage device 51 are connected by a bus 52; the processor 50 is configured to execute an executable module stored in the storage device 51, such as a computer program. When executing a computer program, the processor implements the steps of the method described above.

The storage device 51 may comprise high speed random access memory (RAM) or non-volatile memory such as at least one disk memory. The connection between the network element of the system and at least one other network element of the system is realized through at least one communication interface 53 (which may be wired or wireless), and may be used the Internet, a wide area network, a local area network, a metropolitan area network, etc. .

Bus 52 may be an ISA bus, a PCI bus, an EISA bus, etc. The bus can be divided into an address bus, a data bus, and a control bus. For ease of presentation in Fig. 8 shows only one double arrow, but this does not mean that there is only one tire or one type of tire.

The memory device 51 is configured to store the program, and the processor 50 is configured to execute this program after receiving the appropriate command. The method performed by the sequential process determining device in any of the above embodiments may be applied to the processor 50 or implemented by the processor 50.

Processor 50 may be implemented on a chip capable of processing signals. During implementation, the steps of the method may be performed by hardware logic in processor 50 or by software instructions. Processor 50 may be a general purpose processor, including a central processing unit, a network processor, etc.; it can also be a digital signal processor, an ASIC, a field-programmable gate array or other programmable logic devices, discrete gates or transistorized logic devices, and discrete hardware components. The options, steps, and logics disclosed in the embodiments of the invention may be implemented or performed. A general purpose processor may be a microprocessor, or any conventional processor, etc. The method steps disclosed in embodiments of the invention may be directly implemented as being executed by hardware and software modules in a decoding processor, or by a combination of hardware and software modules in a decoding processor. The software module may be located in main memory, flash memory and/or read only memory, programmable read only memory or electrically erasable programmable memory and/or registers and other mature storage media known in the art. The storage medium is located in the storage device 51, and the processor 50 reads information from the storage device 51 and performs the steps of the method in conjunction with the hardware.

Yet another aspect of the invention provides a computer-readable medium having non-volatile program code executable by a processor, which program code causes the processor to perform the steps of the method described in Embodiment 1 above.

In the description, unless specifically stated otherwise, the terms "installed", "connected/connected" and "connected" should be understood in a broad sense. Connections can be fixed, removable or integral; the connection may be mechanical or electrical; a connection can be direct or indirect, through an intermediate medium, and a connection can be an internal connection between two components. Those skilled in the art can understand the meaning of the above terms in this application under specific circumstances.

In the description, the terms "center", "top", "bottom", "left", "right", "vertical", "horizontal", "inner", "outer", etc., indicate orientation or positional relationships , are based on the orientations or positional relationships shown in the drawings and are intended only for convenience and simplification of the description of the invention, and do not indicate or imply that the indicated device or element must have a particular orientation. Therefore, the design and operation cannot be considered as a limitation of the invention. In addition, the terms "first", "second" and "third" are used for descriptive purposes only and should not be construed as indicating or implying relative importance.

It will be appreciated by those skilled in the art that the particular workflow of the system, apparatus, and assembly described above may correspond to that described in the discussion of the method embodiments, and therefore will not be repeated here for convenience and brevity.

It should be clear that in the embodiments described in this application, the disclosed system, device and method can be implemented in a different way. The device embodiments described above are merely illustrative. For example, the division into blocks is only a logical functional division, and there may be other divisions in the actual implementation. For example, several blocks or components may be combined or integrated into another system, or certain functions may be ignored or not implemented. In addition, an interconnection, direct connection, or communication connection that is displayed or discussed may be an indirect connection or communication connection through some interfaces, devices, or units, and may be in electrical, mechanical, or other forms.

Blocks described as separate components may or may not be physically separate, and components shown as blocks may or may not be physical blocks, i.e. they may be located in one place or distributed over several network blocks. Some or all of the blocks may be selected according to actual needs to achieve the objectives of the respective embodiments of the invention.

In addition, functional blocks in various embodiments of the invention may be integrated into one operating unit, or each block may exist physically separately, or two or more blocks may be combined into one block.

If a function is implemented in the form of a software function block and sold or used as a standalone product, it may be stored on a non-volatile computer-readable storage medium executable by a processor. Based on this understanding, the proposed technical solution, in essence or in part, which contributes to the technology, or part of the technical solution, which can be embodied in the form of a software product previously stored in a storage medium and includes several commands that cause a computing device (which can be a personal computer, server, network device, etc.) perform all or part of the steps of the method described above. Said storage medium may be a U-disk, mobile hard disk, ROM, random access memory, magnetic disks or optical disks, and other media that can store program codes.

It should be noted that the above embodiments of the invention are only specific examples of its implementation, used to illustrate and not to limit the technical solution. The scope of the invention is not limited to them, although the invention has been described in detail with reference to these variants, and specialists in the art should understand that any of them who are familiar with the art within the scope disclosed in this application may change the technical the features described in the above embodiments of the invention, or can easily come up with changes or equivalently replace some of the specifications. However, these modifications, changes or substitutions do not change the essence of the technical solution and are covered by the scope of the invention. The scope of the invention is defined by the appended claims.

Claims (56)

1. A near field information authentication method, characterized in that it is applied to a server, and includes - obtaining information about the current location of the object to be authenticated, and then determining the grid area of the target in which the object to be authenticated is located, while when the object to be authenticated is in the preset range of its authorized merchants, the user terminal of the object to be authenticated , periodically sends information about the current location of the object to be authenticated to the server, - receiving an information authentication request sent by the target service terminal in the target grid area, wherein the information authentication request carries information about the target service terminal and current information about the biological characteristics of the object to be authenticated, while the information about the target service terminal contains authorized sub-traders, which belongs to the target service terminal, the target service terminal number, and the location information of the target service terminal, which is the terminal performing authentication of the information of the object to be authenticated, - determining the allowed users of the target service terminal in the first relationship table of the target grid area according to the information about the target service terminal, and determining information about the biological characteristics of each of the allowed users, wherein the first relationship table is a table of relationships between the user accounts of authorized merchants and their valid users in the grid area of the target, with the first relationship table being a dynamically changing relationship table, - completing the authentication of the information of the object to be authenticated, and obtaining the result of the authentication of the information in accordance with the biological characteristics information of the object to be authenticated as a living body and the biological characteristics information of each of the allowed users. 2. The method according to claim 1, characterized in that the stage of obtaining information about the current location of the object to be authenticated includes the following operations: - determining the authorized merchants of the object to be authenticated, wherein the authorized merchants become merchants after the object to be authenticated performs authorization in relation to these merchants through its user terminal, while the number of authorized merchants includes at least one authorized sub-merchant, - sending the location information of each authorized sub-merchant to the user terminal of the entity to be authenticated, so that the user terminal of the entity to be authenticated determines whether its location information and the location information of each authorized sub-merchant are within a preset range, - obtaining information about the current location of the user terminal, and using the current location information of the user terminal as information about the current location of the object to be authenticated, if the user terminal of the object to be authenticated determines that its location information and the location information of authorized sub-traders are in preset range. 3. The method according to claim. 1, characterized in that after receiving information about the current location of the object to be authenticated, before receiving the information authentication request sent by the target service terminal in the target grid area, additionally performs - establishing a link between the authorized sub-merchant of the object to be authenticated and the user account of the object to be authenticated in the first relationship table. 4. The method according to claim 1, characterized in that the step of determining valid users of the target service terminal in the first relationship table of the target grid area according to the information of the target service terminal includes the following operations: - getting the first grid-area relationship table of the target, - determining the first relationship table of the target of the authorized sub-merchant who owns the service terminal of the target in the first relationship table in the grid area of the target, obtaining a user account included in the first target relationship table and using this user account included in the first target relationship table as a valid user account, - designation of the user corresponding to this valid account as a valid user of the target's service terminal. 5. The method according to claim. 1, characterized in that, in accordance with the current information about the biological characteristics of the object to be authenticated, and information about the biological characteristics of each of the valid users, the stage of completing the authentication of information about the object to be authenticated includes the following operations: - determining whether information about the biological characteristics of the object to be authenticated as a living body is obtained directly from a real living body, - if yes, then the information about the biological characteristics of the object to be authenticated is compared with the information about the biological characteristics of each of the allowed users, - according to the matching result, it is determined whether there is information about the biological characteristics of the target, which corresponds to the information about the biological characteristics of the object to be authenticated as a living body in the information about the biological characteristics of each of the allowed users, - if such information is available, then it is determined whether information about the biological characteristics of the target is unique, - if this information is unique, then the valid user corresponding to the information about the biological characteristics of the target is considered the object to be authenticated, and the authentication of the information of the object to be authenticated is completed. 6. The method according to claim 5, further comprising the step of authenticating the information based on the location information of each of the valid users, the corresponding information about the biological characteristics of the target, if said information is not unique. 7. The method according to claim 6, characterized in that the step of authenticating the information based on the location information of each of the allowed users, the corresponding information about the biological characteristic of the target, includes the following operations: - comparing the location information of each of the allowed users, the corresponding information about the biological characteristics of the target, with the location information of the target's service terminal, - based on the results of the comparison, determining whether the valid user closest to the location information of the target service terminal is unique, - if it is unique, then the valid user who is closest to the location information of the target service terminal is considered the entity to be authenticated, and the authentication of the entity information to be authenticated is completed. 8. The method according to p. 7, characterized in that it additionally includes the following steps: - sending an information authentication request to the user terminal of each of the valid users closest to the target service terminal location information, if the valid user closest to the target service terminal location information is not unique, - determining the confirmation information for obtaining a determination result upon receiving the confirmation information sent by each of the valid users closest to the location information of the target service terminal, based on the information authentication request, - according to the results of the determination, the completion of the authentication of the information of the object to be authenticated. 9. The method according to claim 1, characterized in that when the information authentication is payment information authentication, the information authentication result is the payment information authentication result, which contains the user account of the entity to be authenticated, and upon completion of the entity information authentication, to be authenticated, the method further includes the following steps: - sending the payment information authentication result and service request to the payment system, so that the payment system searches for a payment account corresponding to the user account obtained as a result of payment information authentication, and completing the payment transaction based on the payment account and service request, - generating an account service request in accordance with the payment transaction completion information and sending the account service request to the account system, so that the account system generates an electronic payment account in accordance with the account service request, and sending the electronic payment invoice to the email address specified by the user, or to the service terminal of the target. 10. The method according to claim 1, wherein when the information authentication is identity information authentication, the information authentication result is the identity information authentication result that contains the user account of the object to be authenticated, and upon completion of the authentication of the object information , subject to authentication, is additionally performed - sending the identity information authentication result and the service request to the identity authentication system, so that the personality authentication system converts the user account of the identity information authentication result into personal identity information, and completing the authentication of the identity information in accordance with the personal identity information and the service request. 11. The method according to claim 2, characterized in that before determining the authorized trader of the object to be authenticated, the following operations are additionally performed: - receiving the merchant authorization request sent by the entity to be authenticated through its user terminal, wherein the merchant authorization request is a request generated by the entity to be authenticated after setting the near field function for the merchant on its user terminal, and the merchant authorization request contains information about the merchant - based on the merchant authorization request, completing the merchant authorization corresponding to the merchant authorization request of the object to be authenticated and obtaining location information of all sub-traders. 12. The method according to p. 1, characterized in that it additionally includes the following steps: - receiving out of the preset range information sent by the user terminal of the entity to be authenticated, - deleting from the first relationship table the record of the user account of the object to be authenticated, in accordance with the out of the preset range information. 13. The method according to p. 1, characterized in that it further includes - deleting the entry about the user account of the object to be authenticated from the first relationship table, if information about the current location of the user terminal of the object to be authenticated is not received within a predetermined time, and information about the user account entry of the object to be authenticated is in the first relationship table. 14. The method according to p. 1, characterized in that it additionally includes the following steps: - receiving service terminal information sent by the service terminal, wherein the service terminal information includes the sub-merchant who owns the service terminal, the number of the service terminal, and the location of the service terminal, creating a second relationship table between the serial number of the submerchant and the service terminal in the grid area corresponding to the submerchant owning the service terminal according to the service terminal information, the second relationship table being a dynamically changing relationship table. 15. The method according to p. 1, characterized in that - when the information about the biological characteristics of the object to be authenticated is information about the biological characteristics of a face, the information about the biological characteristics of the face is information about the biological characteristics of a living human face of the object to be authenticated, and the information about the biological characteristics of a living human face has one of the following forms: information about the biological characteristics of a living human face contains information about the facial expression of the object to be authenticated, information about the biological characteristics of a living human face does not contain information about the facial expression of the object to be authenticated. 16. A device for authenticating near field information, characterized in that it is applied to the server and contains the following components: - a receiving module, configured to obtain information about the current location of the object to be authenticated, and then determine the grid area of the target in which the object to be authenticated is located, while when the object to be authenticated is in a preset range of its authorized merchants, the user terminal of the object to be authenticated periodically sends information about the current location of the object to be authenticated to the server, - a receiving module configured to receive an information authentication request sent by a target service terminal in the target grid area, wherein the information authentication request carries information about the target service terminal and current information about the biological characteristics of the object to be authenticated, while information about the service terminal of the target contains information about authorized sub-traders who own the target service terminal, the target service terminal number, and location information of the target service terminal, which is the terminal that performs authentication of the object information to be authenticated, - a determination module configured to determine the valid users of the target service terminal in the first relationship table of the target grid area according to the information of the target service terminal and determine information about the biological characteristics of each of the eligible users, the first relationship table being a relationship table between user accounts records of authorized merchants and their allowed users in the grid area of the target, with the first relationship table being a dynamically changing relationship table, - an information authentication module configured to, in accordance with the information about the biological characteristics of the object to be authenticated as a living body and the information about the biological characteristics of each of the allowed users, complete the authentication of the information about the object to be authenticated and obtain the information authentication result. 17. An electronic device for authenticating near field information, comprising a memory device, a processor and a computer program stored in the memory device and capable of operating under the control of the processor, characterized in that the processor is configured to execute a computer program to implement the steps of the method according to any one of paragraphs. 1–15. 18. A computer-readable medium having a non-volatile program code executable by a processor, characterized in that the processor is configured in accordance with the program code to perform the method according to any one of paragraphs. 1–15.

Images