TWI770412B - Electronic device and method for performing identity registration procedure - Google Patents

Abstract

An electronic device having an image capture device, a communication device, a storage device and a processor is provided. Specifically, when loading an application and receiving an identity registration request, the processor performs an identity registration procedure in response to the identity registration request. The identity registration procedure comprises the following steps: activating the image capture device to obtain an user image by the processor; analyzing, by the processor, the user image to obtain a face identification feature value and sending a device identity code, the user image and the face identification feature value to an identity management server for registration; and finishing the identity registration procedure after receiving a confirm message from the identity management server by the processor.

Description

Electronic device and method for performing identity registration procedure

The present invention relates to an identity processing technology, and more particularly, to an electronic device for performing an identity registration procedure and a method thereof.

At present, most of the technologies using biometric identification are to perform biometric identification on the device side, and send the biometric identification result back to the server requesting biometric identification. Therefore, the connection between the server and the user is only the "device", not the server and the "user". For example, if the user's mobile phone is lost, and before the user deactivates various types of services, the password of the mobile phone has been cracked by a malicious user and the result of biometric identification has been tampered with. At this time, malicious users have the opportunity to use the user's mobile phone to perform various types of operations. In particular, if the malicious user is the user's relatives and friends, it is more difficult for the user to immediately discover the malicious user's intention and prevent the tragedy from happening. However, if the biometric identification is performed by the server, there will be problems such as too large transmission packets and too long identification time.

Therefore, at the moment when financial services are provided, how to provide a simple registration method for users to use biometric services, and to allow financial services to directly link users with users to improve security is a problem for those skilled in the art.

The present invention provides an electronic device and a method thereof, so as to provide a simple registration method to allow users to use biometric identification, and at the same time, to improve the security of services.

The electronic device of the present invention is used for performing an identity registration procedure, and has an image capturing device, a communication device, a storage device and a processor. The image capturing device is used for capturing user images. The communication device is connected to the identity management server. The storage device is used to store the application program and device identification code. The processor is connected to the image capturing device, the communication device, the storage device and the processor for identifying the user image. When the processor loads the application and receives the registration request, the processor executes the identity registration procedure in response to the registration request. The identity registration procedure includes: enabling the image capture device by the processor to obtain the user image; analyzing the user image by the processor to obtain the facial recognition feature value, and combining the device identification code, the user image and the facial recognition feature The value is sent to the identity management server for registration; and the processor completes the identity registration process after receiving the confirmation message from the own branch management server.

The method for performing an identity registration procedure of the present invention is applicable to an electronic device, and the electronic device corresponds to the device identification code. The method of performing the identity registration procedure includes the following steps. When a registration request is received, an identity registration procedure is executed in response to the registration request, wherein the identity registration procedure includes: enabling an image capture device to obtain a user image; analyzing the user image to obtain a facial recognition feature value, and using the device The identification code, the user image and the facial recognition feature value are sent to the identity management server for registration; and after receiving the confirmation message from the own sub-management server, the identity registration process is completed.

Based on the above, the electronic device and the method for performing the identity registration process of the present invention can allow the user to automatically capture the user's image, analyze and complete the identity registration process after clicking the registration request in a simple and easy way. , and does not increase the burden on the user's operation. At the same time, it also simplifies the network resources and time consumed by the packet transmission, and also simplifies the time consumed by the image comparison. In addition, when the server confirms the user's identity, it also pulls the level of biometric identification back to be directly related to the user, which improves the security of the transaction.

In order to make the above-mentioned features and advantages of the present invention more obvious and easy to understand, the following embodiments are given and described in detail with the accompanying drawings as follows.

FIG. 1 is a schematic diagram of an electronic device according to an embodiment of the present invention. Referring to FIG. 1 , the electronic device 100 has an image capturing device 110 , a communication device 120 , a storage device 130 and a processor 140 .

The image capturing device 110 is used to acquire user images. Specifically, the image capturing device 110 is, for example, various types of built-in cameras, or external cameras connected through various types of ports, for example, by An external camera connected to a universal serial bus (Universal serial bus, USB), Bluetooth (Bluetooth), Wi-Fi, etc., but the present invention is not limited to this.

The communication device 120 has a communication capability for transmitting and receiving various kinds of information. In an embodiment of the present invention, the communication device 120 is implemented by a communication chip and/or various types of network interface controllers (NICs). communication, GSM), Personal Handy-phone System (PHS), Code Division Multiple Access (CDMA) system, Wideband Code Division Multiple Access (WCDMA) system, Long Term Evolution (LTE) system, Worldwide interoperability for Microwave Access (WiMAX) system, Wireless Fidelity (Wireless Fidelity, Wi-Fi) system or components for signal transmission of Bluetooth, the present invention does not limited to this.

The storage device 130 stores various software, firmware, and data required for the operation of the electronic device 100 , in particular, the storage device 130 stores application programs and device identification codes. In this embodiment, the application program has a series of code, and after being loaded and executed by the processor 130, the identity registration process can be completed. The device identification code is a unique identification code corresponding to the electronic device 100, for example, a machine code. The storage device 130 can be any type of fixed or removable random access memory (Random Access Memory, RAM), read-only memory (Read-Only Memory, ROM), flash memory (flash memory), hard disk The present invention is not limited thereto.

The processor 140 is connected to the image capturing device 110 , the communication device 120 and the storage device 130 . The processor 140 is, for example, a central processing unit (Central Processing Unit, CPU), or other programmable general-purpose or special-purpose microprocessors (Microprocessors), digital signal processors (Digital Signal Processors, DSPs), programmable A programmable controller, an application specific integrated circuit (ASIC) or other similar components or a combination of the above components, the present invention is not limited thereto.

In an embodiment of the present invention, the electronic device 100 may be a user's personal electronic device, such as a mobile phone, a notebook computer, and a tablet computer, but the present invention is not limited thereto.

FIG. 2 is a schematic flowchart of an identity registration process according to an embodiment of the present invention. The identity registration procedure of this embodiment is at least applicable to the electronic device shown in FIG. 1 . In the following description, the details of the operation of the electronic device and the flow of the identity registration procedure will be described with reference to FIG. 1 and FIG. 2 .

Before performing the identity registration process, the processor 130 loads the application program in the storage device 130 so that the processor 140 can complete all the processes of the identity registration process.

In step S210, the processor 140 receives the registration request to execute the identity registration procedure in response to the registration request. This registration request is selected and issued by the user. When the processor 140 receives the registration request, it will run the identity registration program.

In step S220, the processor 140 enables the image capturing device 110 to enable the image capturing device 110 to capture the user image. In detail, after the processor 1440 enables the image capture device 110, the user can see the user's image on the display screen of the electronic device 100, and when the user triggers the "photograph" button, or the electronic device 100 is automatically activated After the countdown of seconds expires, the image capturing device 110 acquires a user image of the corresponding user. In one embodiment, if the image capturing device 110 captures too much background information, the processor 140 will perform graphic analysis on the captured user image to capture the head region belonging to the user. In addition, if the processor 140 determines that there are obstacles (eg, masks, hats, sunglasses, etc.) in the part of the user image belonging to the user's head area after identification, the user's facial features and eyebrows cannot be clearly identified. , at this time, the processor 140 will issue a warning notification and lock the button of "take a picture" to remind the user that this is an illegal photo mode, but the present invention is not limited to this.

In step S230, the processor 140 analyzes the user image to obtain the facial recognition feature value. In an embodiment of the present invention, the facial recognition feature values are, for example, the distance between the eyes is 3 cm, the width of the nose is 2.5 cm, the chin is 2 cm, the width of the lip is 3.5 cm, and the width from the nose to the cheek is 4 cm, etc. By way of example, the present invention is not limited thereto.

It is worth mentioning that between step S220 and step S230, or after step S230, the processor 140 will also perform a biometric identification program to prevent malicious users from using pictures or videos to pretend to be users for identity registration. Specifically, in one embodiment, the processor 140 acquires a plurality of user images through the image capturing device 110 , for example, a user image is captured every 0.01 seconds. Next, the processor 140 will identify whether a dynamic change occurs in the specific part, and if the dynamic change occurs in the specific part, it is determined that the user's image conforms to the living body recognition procedure, and the image or image is not trying to confuse people. For example, a specific part is an eye, and the corresponding dynamic change is blinking. Or, for example, a specific part is an artery, and the corresponding dynamic change is the subtle light and shadow changes on the face. Alternatively, the specific part is, for example, the pupil, and the corresponding dynamic change is, for example, pupil constriction. Alternatively, the specific part is, for example, the entire head, and the corresponding dynamic change is, for example, the position of the head and the background, or the proportion of the head, the position of the facial features relative to the entire face, etc. The present invention is not limited to this.

In step S240, the processor 140 transmits the device identification code, the user image and the facial recognition feature value to the identity management server through the communication device 120 for registration. Besides, the processor 140 also transmits the user account currently corresponding to the application to the identity management server. In response to this, the identity management server binds the user account with the device identification code, the user image and the facial recognition feature value. Specifically, each user account can only correspond to one device identification code, user image and facial recognition feature value, so as to ensure that the user's data is not stolen by other devices. Therefore, if the user account corresponding to the user image already has the corresponding device ID, user image and facial recognition feature value, the identity management server will send a confirmation SMS to the mobile phone number corresponding to the user account, (for example, , containing an SMS verification code or an SMS with a confirmation link) to allow the user to respond to the Let the user confirm whether to replace the bound device. When receiving the confirmation instruction, the identity management server will replace the device identification code existing in the user account with the device identification code in the storage device 130 . After the binding is completed, the identity management server returns a corresponding "binding complete" confirmation message.

In step S250, the processor 140 completes the identity registration process after receiving the confirmation message from the sub-management server through the communication device 120. After completing the identity registration process, the user can use various services for data exchange with the identity management server. For example, if the identity management server is the bank's customer management database and is connected to various types of services of the bank, users can use various types of banking services on the premise that the identity registration process has been completed, for example, Automatic deposit and withdrawal machines, online banking, online application for personal credit loans, mobile transfer, fund purchase, credit card application, insurance purchase, loan repayment, etc. all over Taiwan.

It is worth mentioning that after completing the identity registration process, the relevant information of the user is established in the identity management server. When using various types of services in the future, the user will no longer need to enter the account number, but will use the The user's face is used as the basis for reading the user's identity. After reading the user's identity, the user needs to perform a second level of verification to ensure that the user's identity is safe. In this way, the facial feature recognition value can not only be directly related to the user, but also the lack of fineness of the facial feature recognition value can be compensated by the verification of the second layer, so that the security can be maintained. In this case, the fineness of image recognition and the processing time are balanced.

Specifically, in the facial recognition feature value adopted in the present invention, the facial features of the user have been converted into actual parameters. Therefore, when identifying the user's facial image by using the facial recognition feature value subsequently, the identity management server does not necessarily need to obtain the user's complete facial image, but only needs to know the corresponding facial image to be recognized. If the facial recognition feature value is stored, the user account corresponding to the facial image to be recognized can be screened out from the stored facial recognition feature value, which simplifies the network resources and time consumed by packet transmission, and also simplifies the image ratio. to the time spent.

The following will use cardless withdrawal for instructions. If the user selects the "Withdrawal" service in the ATM, at this time, the ATM will activate its own camera accordingly, obtain the image of the user in front of the ATM, and send it to the identity management server. device. The identity management server can analyze the image of the user in front of the ATM, find the user in front of the ATM corresponding to the user image and facial recognition feature values recorded by the identity management server, register and The user image recorded in the identity management server is used to obtain the user account corresponding to the user in front of the ATM. In addition, the ATM and/or the identity management server will require the user to perform further identity verification based on the user account.

In an embodiment of the present invention, during the process of performing the identity registration procedure, the processor 140 further receives a verification method setting option, so that the user can further set the subsequent verification method. For example, the authentication method setting options include device-side biometric authentication, push authentication, account password authentication, or operating machine password input authentication. Device-side biometric authentication is that the user pre-sets personal biometric features on the device-side, such as facial features, fingerprint features, iris features, and the like. When the ATM requires the user to perform further identity verification, for example, when the identity management server finds the user account, it will push the verification message to the application corresponding to the mobile phone number of the user account. In this case, use The user must open the app, and the app will bring up the device verification process, allowing the user to perform biometric identification. If the result of biometric identification is that the user is a legitimate user, the application program will reply the option of "verify OK" through the communication device 120 and send it to the ATM through the identity management server.

Push verification will push the verification message to the app corresponding to the user account's mobile number when the ATM asks the user for further identity verification, for example, when the identity management server finds the user's account. . At this time, the user must open the application and click the "Confirm" button in the verification message. The application will reply with the option of "Confirm" through the communication device 120 and send it to the ATM through the identity management server.

Or, when the ATM requires the user to perform further identity verification, for example, when the identity management server finds the user account, it will simultaneously push the verification number to the application corresponding to the mobile phone number of the user account and automatically. in the cash machine. At this time, the user must enter the verification number displayed in the application in the ATM. When the ATM determines that the number entered by the user is consistent with the verification number sent by the identity management server, it will determine that the user is legitimate. user of .

Account password verification is that when the identity management server finds the user account, it pushes a request for entering the password to the application corresponding to the mobile phone number of the user account. At this point, the user must enter their registered password in the application and return it to the identity management server. The identity management server determines that the number certificate input by the user is authentic, and determines that the user is a legitimate user.

The operation machine password input verification is to transmit the user account and its registered password to the ATM when the identity management server finds the user account. At this time, the user must input his registered password in the ATM, and when the ATM determines that the password is correct, the user is judged to be a legitimate user. However, in the embodiments of the present invention, the above verification method is not limited.

To sum up, the electronic device and the method for performing the identity registration procedure of the present invention can allow the user to automatically capture the user's image, analyze and complete the identity after clicking the registration request in a simple and easy way. The registration procedure does not increase the burden on the user's operation. At the same time, the facial recognition feature values used in the present invention have converted the user's facial features into actual parameters. Therefore, when using the facial recognition feature values to identify the user's facial image in the subsequent process , the identity management server does not necessarily need to obtain the complete facial image of the user, it only needs to obtain the facial recognition feature value corresponding to the facial image to be recognized, and then it can filter out the corresponding facial recognition feature value from the stored facial recognition feature value. The user account of the facial image to be recognized simplifies the network resources and time consumed by the packet transmission, and also simplifies the time consumed by the image comparison. In addition, when the server confirms the user's identity, it also pulls the level of biometric identification back to be directly related to the user, which improves the security of the transaction. At the same time, users are also exempted from the necessity of recording account numbers or carrying physical cards.

Although the present invention has been disclosed above by the embodiments, it is not intended to limit the present invention. Anyone with ordinary knowledge in the technical field can make some changes and modifications without departing from the spirit and scope of the present invention. Therefore, The protection scope of the present invention shall be determined by the scope of the appended patent application.

100: Electronics 110: Image capture device 120: Communication device 130: Storage Device 140: Processor S210~S250: Steps

FIG. 1 is a schematic diagram of an electronic device according to an embodiment of the present invention. FIG. 2 is a schematic flowchart of an identity registration process according to an embodiment of the present invention.

100: Electronics

110: Image capture device

120: Communication device

130: Storage Device

140: Processor

Claims (4)

An electronic device for performing an identity registration procedure, comprising: an image capture device for acquiring user images; a communication device for connecting to an identity management server; a storage device for storing an application program and a device identification code; and a processor connected to the image capture device, the communication device, the storage device and the processor, wherein the processor loads the application and receives a registration request, in response to the registration request, the processor The processor executes the identity registration process, wherein the identity registration process includes: enabling the image capture device by the processor to obtain the user image, wherein when the processor executes the identity registration process, the image capture device is also The acquisition device acquires a plurality of user images, so as to perform a biometric identification program according to the plurality of user images, wherein the biometric identification program further includes: identifying the plurality of users by the processor according to the time series of the plurality of user images determine whether the specific parts of the user images have dynamic changes, and when the specific parts of the plurality of user images have dynamic changes, determine that the plurality of user images conform to the living body recognition program; the processor analyzes the user images, to obtain a facial recognition feature value, and transmit the device identification code, the user image and the facial recognition feature value to the identity management server for registration; After the confirmation message from the device, Completing the identity registration process, wherein the identity registration process further includes: identifying the user image by the processor to determine whether there is an obstacle in the head area of the corresponding user in the user image, and identifying the user image in the user image When there is an obstacle in the head area, a warning notification will be issued. The electronic device according to claim 1, wherein the processor further receives a verification method setting option, and the verification method setting option corresponds to device-side biometric verification, push verification, account password verification or operating machine password input verify. A method for performing an identity registration process, which is applicable to an electronic device, and the electronic device corresponds to a device identification code, the method comprises: when a registration request is received, performing an identity registration process in response to the registration request, wherein the identity The registration process includes: activating an image capture device to acquire a user image; acquiring a plurality of user images through the image capture device, so as to perform a biometric identification program according to the plurality of user images, wherein the biometric identification program It also includes: identifying whether the specific parts of the plurality of user images have dynamic changes according to the time series of the plurality of user images, and determining whether the specific parts of the plurality of user images have dynamic changes A user image conforms to the living body recognition program; analyze the user image to obtain a facial recognition feature value, and transmit the device identification code, the user image and the facial recognition feature value to an identity management server for processing login; and after receiving a confirmation message from the identity management server, complete the identity A sub-registration process, wherein the identity registration process further includes: identifying the user image to determine whether there is an obstacle in the head area of the corresponding user in the user image, and there is an obstacle in the head area of the user image When an obstacle is encountered, a warning notification is issued. The method according to item 3 of the scope of the application, further comprising: receiving a verification method setting option, the verification method setting option corresponding to device-side biometric verification, push verification, account password verification or operating machine password input verification.

Images