TWI772666B - Financial service device and method for providing identity verification function - Google Patents

Abstract

A financial service device for providing identity verification function, having an input device, an image capture device, a communication device and a processor, is provided. Specifically, the processor receives a service request, and in response thereto, activates the image capture device to obtain a current image. The processor sends a current image information corresponding to the current image to an identity management server, so as to obtain a user account corresponding to the current image. The processor sends a designated service item to the identity management server so as to perform an identity verification procedure according to a default verification method corresponding to the user account by the identity management server. The processor provides a service corresponding to the designated service when determining the identity verification procedure is finished.

Description

Financial service device and method for providing identity verification function

The present invention relates to an identity verification technology, and more particularly, to a financial service device with identity verification and a method for providing financial services.

At present, most of the technologies using biometric identification are to perform biometric identification on the device side, and send the biometric identification result back to the server requesting biometric identification. Therefore, the connection between the server and the user is only the "device", not the server and the "user". For example, if the user's mobile phone is lost, and before the user deactivates various types of services, the password of the mobile phone has been cracked by a malicious user and the result of biometric identification has been tampered with. At this time, malicious users have the opportunity to use the user's mobile phone to perform various types of operations. In particular, if the malicious user is the user's relatives and friends, it is more difficult for the user to immediately discover the malicious user's intention and prevent the tragedy from happening. However, if the biometric identification is performed by the server, there will be problems such as too large transmission packets and too long identification time. Nevertheless, biometric identification has high accuracy, and the identification results are close to unique characteristics. Therefore, with the gradual popularization of cardless transaction services, how to use the biometric technology to improve the security and convenience of the transaction is the subject of those skilled in the art.

The present invention provides a financial service device with identity verification function and a method for providing financial services, which adopts biometric identification technology for identity verification, which not only provides users with a convenient transaction method, but also maintains transaction security.

A financial service device providing an identity verification function according to an embodiment of the present invention includes an input device, an image capture device, a communication device, and a processor. The input device is used for receiving input operations. The image capturing device is used to obtain the current image. The communication device is used to connect to the identity management server. The processor is connected to the image capturing device and the communication device. The processor receives the service request, and in response to the service request, enables the image capture device to obtain the current image. The processor transmits the current image information corresponding to the current image to the identity management server through the communication device, so as to obtain the user account corresponding to the current image. The processor receives the specified service item through the input device. The processor transmits the specified service item to the identity management server, so that the identity management server executes the identity verification process according to the default verification method of the corresponding user account. When the processor determines that the identity verification procedure has been completed, the processor provides services corresponding to the specified service items.

The method for providing financial services according to an embodiment of the present invention is applicable to a financial service device. The method has the following steps: receiving a service request, in response to the service request, enabling an image capture device to obtain a current image; transmitting current image information corresponding to the current image to an identity management server to obtain a user account corresponding to the current image; receiving Designate service items; send the designated service items to the identity management server, so that the identity management server executes the identity verification process according to the default verification method of the corresponding user account; and when it is judged that the identity verification process has been completed, provide the corresponding designated service items service.

Based on the above, the present invention provides a financial service device with identity verification and a method for providing financial services to provide users with easier access to various types of financial services without carrying an ATM card or reciting an account number. In particular, before performing financial transactions, the financial service provider must capture the current image of the user and analyze the user's image. Therefore, compared with the use of the biometric technology of the device itself, the financial service provider device is upgraded from the connection between the "financial service provider device" and the "binding device" to the connection between the "financial service provider device" and the user himself. connection, which improves the security of the transaction.

In order to make the above-mentioned features and advantages of the present invention more obvious and easy to understand, the following embodiments are given and described in detail with the accompanying drawings as follows.

FIG. 1 is a schematic structural diagram of a financial service device according to an embodiment of the present invention. Referring to FIG. 1 , the financial service device 100 has an input device 110 , an image capture device 120 , a communication device 130 and a processor 140 .

The input device 110 is used to receive various types of operations performed by the user, such as inputting service requests, specifying service items, transaction amounts, and the like. The input device 110 is, for example, a keyboard, a mouse, a touch panel, a touch screen, etc. or any combination thereof, although the present invention is not limited thereto.

The image capture device 120 is used to obtain user images. Specifically, the image capture device 120 is, for example, various types of built-in cameras, or external cameras connected through various types of ports, such as general serial A bus bar (Universal serial bus, USB), Bluetooth (Bluetooth), Wi-Fi, etc., but the present invention is not limited to this.

The communication device 130 has a communication capability for transmitting and receiving various kinds of information. In particular, the communication device 130 can connect with the identity management server. The identity management server records various types of information of the user, such as but not limited to account numbers, passwords, user images, etc., and the present invention does not limit the implementation device of the identity management server. In an embodiment of the present invention, the communication device 130 is implemented by a communication chip and/or various types of network interface controllers (NICs), and the communication chip can support the Global System for Mobile communication, GSM), Personal Handy-phone System (PHS), Code Division Multiple Access (CDMA) system, Wideband Code Division Multiple Access (WCDMA) system, Long Term Evolution (LTE) system, Worldwide interoperability for Microwave Access (WiMAX) system, Wireless Fidelity (Wireless Fidelity, Wi-Fi) system or components for signal transmission of Bluetooth, the present invention does not limited to this.

The processor 140 is connected to the input device 110 , the image capture device 120 and the communication device 130 . The processor 140 is, for example, a central processing unit (Central Processing Unit, CPU), or other programmable general-purpose or special-purpose microprocessors (Microprocessors), digital signal processors (Digital Signal Processors, DSPs), programmable A programmable controller, an application specific integrated circuit (ASIC) or other similar components or a combination of the above components, the present invention is not limited thereto.

In an embodiment of the present invention, the financial service device 100 is, for example, an automatic teller machine, but the present invention is not limited thereto.

FIG. 2 is a schematic flowchart of a method for providing financial services according to an embodiment of the present invention. The method for providing financial services in this embodiment is at least applicable to the financial service device 100 in FIG. 1 , but the present invention is not limited thereto.

It should be noted that, before executing the method of providing financial services, the user must first register with the identity management server. Moreover, after the registration process is completed, the identity management server will record the user image and the default image feature value in the user account. In an embodiment of the present invention, the preset image feature values are, for example, the distance between the eyes is 3 cm, the width of the nose is 2.5 cm, the chin is 2 cm, the width of the lip is 3.5 cm, and the width from the nose to the cheek is 4 cm. By way of example, the present invention is not limited thereto.

It should be noted that, in the facial recognition feature value used in the present invention, the facial features of the user have been converted into actual parameters. Therefore, when identifying the user's facial image by using the facial recognition feature value subsequently, the identity management server does not necessarily need to obtain the user's complete facial image, but only needs to know the corresponding facial image to be recognized. If the facial recognition feature value is stored, the user account corresponding to the facial image to be recognized can be screened out from the stored facial recognition feature value, which simplifies the network resources and time consumed by packet transmission, and also simplifies the image ratio. to the time spent.

In step S210, the service request is received by the processor 140, and in response to the service request, the image capturing device is activated to obtain the current image. The current image may include the user and their background. In one embodiment, if the image capturing device 120 captures too much background information, the processor 140 will perform graphic analysis on the captured user image to capture the head region belonging to the user. In addition, if the processor 140 determines that there are obstacles (eg, masks, hats, sunglasses, etc.) in the part of the user image belonging to the user's head area after identification, the user's facial features and eyebrows cannot be clearly identified. , at this time, the processor 140 will issue a warning notification to remind the user to remove the obstacle, but the present invention is not limited to this.

In addition, before or after the step S210, the processor 140 will also perform a biometric identification process, so as to prevent malicious users from using pictures or videos to pretend to be users for identity authentication. Specifically, in one embodiment, the processor 140 acquires a plurality of user images through the image capturing device 120 , for example, a user image is captured every 0.01 seconds. Next, the processor 140 will identify whether a dynamic change occurs in the specific part, and if the dynamic change occurs in the specific part, it is determined that the user's image conforms to the living body recognition procedure, and the image or image is not trying to confuse people. For example, a specific part is an eye, and the corresponding dynamic change is blinking. Or, for example, a specific part is an artery, and the corresponding dynamic change is the subtle light and shadow changes on the face. Alternatively, the specific part is, for example, the pupil, and the corresponding dynamic change is, for example, pupil constriction. Alternatively, the specific part is, for example, the entire head, and the corresponding dynamic change is, for example, the position of the head and the background, or the proportion of the head, the position of the facial features relative to the entire face, etc. The present invention is not limited to this.

In step S220, the processor 140 further transmits the current image information corresponding to the current image to the identity management server through the communication device 130, so as to obtain the user account corresponding to the current image. The current image information includes, for example, the current image, the facial image feature value, or a combination of the two. For example, the processor 140 can transmit the current image to the identity management server through the communication device 130, so that the identity management server compares the current image with a plurality of sets of preset image feature values stored in the identity management server, to find a matching set of one of the preset image feature values. Thereby, the identity management server will return the user account corresponding to the matching default image feature value as the user account of the current user.

Alternatively, the processor 140 may analyze the current image in advance to obtain the facial image feature value of the current image, and transmit the facial image feature value of the current image to the identity management server. The identity management server compares the facial image feature value with a plurality of sets of preset image feature values stored in the identity management server to find a matching set of preset image feature values. Thereby, the identity management server will return the user account corresponding to the matching default image feature value as the user account of the current user.

It is worth mentioning that, if the identity management server finds multiple sets of matching default image feature values, the identity management server will send some information in the user account corresponding to the matching default image feature values through the communication device 130 . Return to the processor 140, for example, but not limited to, a preset user image and/or the user's name, so as to provide the current user to select one of the groups as the current user's user account.

After the user confirms that the user account found by the identity management server is correct, the user can further select the financial service to be executed. Therefore, in step S230, the processor 140 also receives the designated service items through the input device 110, such as but not limited to "withdrawal" and the amount "5000", or "transfer" and the amount "7000".

In step S240, the processor 140 transmits the specified service item to the identity management server, so that the identity management server executes the identity verification process according to the preset verification method corresponding to the user account. For example, if the current user wants to make a "withdrawal" and the amount is "5000", the processor 140 will transmit this information to the identity management server. The identity management server will push the specified service item to the device bound to the user account, and execute the identity verification procedure according to the default verification method of the corresponding user account. Specifically, the identity verification procedure corresponds to at least one of the device-side biometric verification procedure, the first push broadcast verification procedure, the second push broadcast verification procedure, the account password verification procedure and the operating machine password input verification procedure.

Specifically, users will receive push messages in their bound devices, such as "You have withdrawn 5000 on 2019/08/01, please complete the verification method to complete the transaction". Then, the identity management server will execute the corresponding identity verification procedure according to the default verification method.

Specifically, the identity verification procedure includes, for example, a device-side biometric verification procedure, a first push broadcast verification procedure, a second push broadcast verification procedure, an account password verification procedure, or an operating machine password input verification procedure. First, regarding the device-side biometric verification procedure, the user pre-sets personal biometric features on the device-side, such as facial features, fingerprint features, iris features, and the like. When the identity management server pushes the specified service item to the device bound to the user account, the biometric verification program will be activated at the same time, that is, the biometric verification request will be pushed to the application of the device bound to the corresponding user account. , the user must open the app to bring up the device verification process, and then allow the user to perform biometric identification. If the result of biometric identification is that the user is a legitimate user, the device bound to the user's account will reply the "Verify OK" option to the identity management server, and the identity management server will determine that the user has completed the identity verification process. And send a notification message that the identity verification process has been completed to the financial service device 100 .

Regarding the first push verification procedure, when the identity management server pushes the specified service item to the device bound to the user account, the first push verification procedure will be activated at the same time, that is, the push broadcast verification message is bound to the corresponding user account. in the application of the specified device. At this point, the user must open the application and click the "OK" button on the verification message. The device bound to the user account will send a reply message back to the identity management server according to the "Confirm" button, and after receiving the reply message, the identity management server will determine that the user has completed the identity verification process and send the identity verification A notification message that the procedure has been completed is sent to the financial service device 100 .

Regarding the second push verification procedure, when the identity management server pushes the specified service item to the device bound to the user account, the second push verification procedure will be activated at the same time, that is, the identity management server will push the verification number at the same time. to the application program of the device bound to the corresponding user account and the financial service device 100 . At this time, the user must input the verification number displayed in the application in the financial service device 100. When the financial service device 100 determines that the number entered by the user is consistent with the verification number sent by the identity management server, it determines that the user is legitimate user of .

Regarding the account and password verification process, when the identity management server pushes the specified service item to the device bound to the user account, the account and password verification process will be activated at the same time, that is, the identity management server will push the input password request to the corresponding user. in the application of the device bound to the user account. At this point, the user must enter their registered password in the application and return it to the identity management server. When the identity management server determines that the input number matches the default password of the corresponding user account, that is, the number entered by the user is correct, the identity management server will determine that the user has completed the identity verification process and send a notification that the identity verification process has been completed. message to the financial services device 100 .

The operation machine password input verification is that the user enters the registered password in the ATM, and the ATM sends the input number to the identity management server, and the identity management server determines whether the input number corresponds to the user's account. Set the password to be the same. When the ATM determines that the password input number is the same as the preset password corresponding to the user account, it determines that the user has completed the identity verification process, and sends a notification message to the financial service device 100 that the identity verification process has been completed. It should be noted that, in the embodiments of the present invention, the above-mentioned identity verification procedure is not limited.

In step S250, the processor 140 further provides the service corresponding to the designated service item when it is determined that the identity verification procedure has been completed. After receiving the notification message sent by the identity management server, or after the processor 140 determines by itself that the identity verification procedure has been completed, the processor 140 will provide the user with a cash withdrawal amount of 5,000 yuan.

It is worth mentioning that, in the present invention, since the relevant information of the user is built in the identity management server, when using various types of services in the future, the user will no longer need to enter the account number, but will be transferred to the user. 's face as a basis for reading the user's identity. After reading the user's identity, the user needs to perform a second-level verification to ensure that the user's identity is safe. In this way, the facial feature recognition value can not only be directly related to the user, but also the lack of fineness of the facial feature recognition value can be compensated by the verification of the second layer, so that the security can be maintained. In this case, the fineness of image recognition and the processing time are balanced.

To sum up, the present invention provides a financial service device with identity verification and a method for providing financial services to provide users with easier access to various types of financial services without carrying an ATM card or reciting account numbers. In particular, before performing financial transactions, the financial service provider must capture the current image of the user and analyze the user's image. Therefore, compared with the use of the biometric technology of the device itself, the financial service provider device is upgraded from the connection between the "financial service provider device" and the "binding device" to the connection between the "financial service provider device" and the user himself. connection, which improves the security of the transaction. In addition, the facial recognition feature values used in the present invention have converted the user's facial features into actual parameters. Therefore, the facial recognition feature values of the user are used to recognize the user's facial image in the subsequent process. When the identity management server does not necessarily need to obtain the complete facial image of the user, it only needs to obtain the facial recognition feature value corresponding to the facial image to be recognized, and then it can filter out the facial recognition feature value stored in it. Corresponding to the user account of the face image to be recognized, the network resources and time consumed by the packet transmission are simplified, and the time consumed by the image comparison is also simplified.

Although the present invention has been disclosed above by the embodiments, it is not intended to limit the present invention. Anyone with ordinary knowledge in the technical field can make some changes and modifications without departing from the spirit and scope of the present invention. Therefore, The protection scope of the present invention shall be determined by the scope of the appended patent application.

100: Financial Services Installations 110: Input device 120: Image capture device 130: Communication device 140: Processor S210~S250: Steps

FIG. 1 is a schematic structural diagram of a financial service device according to an embodiment of the present invention. FIG. 2 is a schematic flowchart of a method for providing financial services according to an embodiment of the present invention.

100: Financial Services Installations

110: Input device

120: Image capture device

130: Communication device

140: Processor

Claims (10)

A financial service device providing an identity verification function, comprising: an input device for receiving input operations; an image capture device for acquiring a current image; a communication device for connecting to an identity management server; and a processor for connecting to The image capture device and the communication device, wherein the processor receives a service request, and in response to the service request, activates the image capture device to obtain the current image, and the processor also transmits the corresponding image through the communication device. The current image information of the current image is sent to the identity management server to obtain the user account corresponding to the current image, the processor also receives a specified service item through the input device, and the processor also transmits the specified service item to the identity a management server, in which the identity management server executes an identity verification procedure according to the default verification method corresponding to the user account, and the processor also provides the service corresponding to the designated service item when it is judged that the identity verification procedure has been completed, The identity verification procedure includes a device-side biometric verification procedure. In the device-side biometric verification procedure, the identity management server pushes a biometric verification request to the device bound to the corresponding user account, and receives a message from the user. When the device is bound to the account and the biometric verification result is a correct reply message, it is determined that the user has completed the identity verification procedure, wherein the identity verification procedure includes the first push broadcast verification procedure, and the first push broadcast verification procedure is performed in the first push broadcast. In the verification process, the identity management server pushes the verification message to the application of the device bound to the corresponding user account, and when the application receives the user input message corresponding to the confirmation button, it returns a reply message to the identity a management server, when the identity management server receives the reply message from the device bound to the user account, it is determined that the user has completed the identity verification procedure, wherein the identity verification procedure includes a second push broadcast verification procedure, In the second push verification procedure, the identity management server pushes the verification message to the device bound to the corresponding user account and to the processor, wherein the verification message includes a verification number, and the processor passes When the input device receives the input number corresponding to the verification number, it is determined that the user has completed the identity verification procedure. The financial service device according to claim 1, wherein when receiving the current image information, the identity management server compares the current image information with a preset image feature value to match the current image information The user account corresponding to the default image feature value is used as the user account of the current image, and sent back to the processor through the communication device, wherein the current image information includes the current image and a current image feature value at least one of the. The financial service device of claim 1, wherein the processor further acquires a plurality of user images through the image capturing device, so as to perform a living body recognition program according to the plurality of user images. The financial service device as described in item 3 of the claimed scope, wherein the living body identification program further comprises: According to the time series of the plurality of user images, the processor identifies whether the specific parts of the plurality of user images have dynamic changes, and when dynamic changes occur in the specific parts of the plurality of user images, determine the The plurality of user images conform to the living body recognition procedure. The financial service device according to claim 1, wherein the identity verification program corresponds to a device-side biometric verification program, a first push verification program, a second push verification program, an account password verification program, and an operating machine password at least one of the input verification procedures, wherein, in the account password verification procedure, the identity management server pushes the input password request to the device corresponding to the user account binding, and receives the user account binding from the user account When inputting the password of the device, it is judged whether the input password matches the default password of the corresponding user account, and when the input password matches the default password of the user account, it is judged that the user has completed the identity verification procedure, wherein, In the operation machine password input verification program, the input password is received by the input device, and sent to the identity management server by the communication device, and the identity management server judges whether the input password is the same as that of the user The preset password corresponding to the account is consistent, and when the input password is consistent with the preset password corresponding to the user account, it is determined that the user has completed the identity verification procedure. A method for providing financial services, applicable to a financial service device, the method comprising: receiving a service request, in response to the service request, enabling an image capture device to obtain a current image; Send current image information corresponding to the current image to an identity management server to obtain a user account corresponding to the current image; receive a designated service item; send the designated service item to the identity management server for management by the identity The server executes an identity verification process according to the default verification method corresponding to the user account; and when it is determined that the identity verification process has been completed, provides a service corresponding to the designated service item, wherein the identity verification process includes a device-side biometric verification process, In the device-side biometric authentication program, the identity management server pushes a biometric authentication request to the device bound to the user account, and receives a biometric authentication result from the device bound to the user account and the biometric authentication result is correct When replying to the message, it is determined that the user has completed the identity verification procedure, wherein the identity verification procedure includes a first push broadcast verification procedure, and in the first push broadcast verification procedure, the identity management server pushes a verification message to the corresponding user In the application program of the device bound to the user account, when the application program receives the user input message corresponding to the confirmation button, it returns a reply message to the identity management server. When the response message of the bound device is sent, it is determined that the user has completed the identity verification procedure, wherein the identity verification procedure includes a second push broadcast verification procedure, and in the second push broadcast verification procedure, the identity management server pushes The verification message is bound to the device corresponding to the user account and the processor, wherein the verification message includes a verification number When the processor receives an input number corresponding to the verification number through the input device, the processor determines that the user has completed the identity verification procedure. The method of claim 6, wherein in the step of transmitting the current image information corresponding to the current image to the identity management server to obtain a user account corresponding to the current image, the method further comprises: When receiving the current image information, the identity management server compares the current image information with a preset image feature value, so as to use the user account corresponding to the preset image feature value that matches the current image information as the current image The user account of , wherein the current image information includes at least one of the current image and a current image feature value. The method of claim 6, wherein, in the step of receiving the service request and in response to the service request, enabling the image capture device to acquire the current image, further comprising: using the image capture device A plurality of user images are acquired, and a living body recognition procedure is performed according to the plurality of user images. The method of claim 8, wherein the living body recognition program further comprises: identifying whether specific parts of the plurality of user images have dynamic changes according to the time series of the plurality of user images, and determining whether the specific parts of the plurality of user images have dynamic changes, and When the specific parts of the plurality of user images are dynamically changed, it is determined that the plurality of user images conform to the living body recognition procedure. The method of claim 6, wherein the identity verification procedure corresponds to a device-side biometric verification procedure, a first push broadcast verification procedure, a second push broadcast verification procedure, an account password verification procedure, and an operating machine password input verification procedure At least one of the programs, wherein, in the account and password verification program, the identity management server pushes a password input request to the device corresponding to the user account binding, and receives a binding message from the user account. When the device is inputting a password, it is determined whether the input password matches the default password of the user account, and when the input password matches the default password of the user account, it is determined that the user has completed the identity verification procedure, wherein, in In the operation machine password input verification procedure, the financial service device receives the input password and transmits it to the identity management server, and the identity management server determines whether the input password corresponds to the user account The default password is consistent, and when the input password is consistent with the default password corresponding to the user account, it is determined that the user has completed the identity verification procedure.

Images