TWI825517B - Identity verification system and method - Google Patents

Abstract

An identity verification system and method are provided. The identity verification system includes: a terminal device, a transceiver, a storage medium, an input/output device, and a processor. The identity verification method includes: receiving an input data by the input/output device; executing an identity process corresponding to the input data by the processor; according to the identity process, inputting an identity verification information by the terminal device; generating a device binding information by the processor; storing the device binding information and the identity verification information in the storage medium.

Description

Identity verification systems and methods

The present invention relates to identity verification systems and methods, and in particular to an identity verification system and method for performing biometric identification through a terminal device.

When handling existing services and businesses that require identity verification, you still need to have a card reader and physical identity proof (such as ID card, natural person certificate). This means that users must make sure to bring various proofs with them when handling various businesses. or file. Moreover, when users must prove their identity information, they must also bring physical proof of identity. As a result, users often fail to carry physical proof of identity and are unable to handle business (for example, opening a bank account, checking in).

The present invention provides an identity verification system and method that can simplify the work process related to identity verification, thereby improving efficiency, user experience and data security.

An identity verification system of the present invention includes a terminal device, a transceiver, and a storage device. storage media, input and output devices, and processors. The transceiver communicates to the terminal device. The processor is coupled to the storage medium and the transceiver, and accesses and executes multiple modules. Multiple modules include: instruction receiving module, verification judgment module and verification receiving module. The command receiving module is used to receive input data input from the input/output device. The verification and judgment module receives the input data and executes the corresponding verification program in response to the verification program of the input data. The verification receiving module receives the identity verification data sent from the terminal device through the transceiver, generates device binding information based on the identity verification data and verification procedures, and stores the device binding information in the storage medium.

An identity verification method of the present invention includes: receiving input data from an input and output device; a processor receiving the input data, and executing a verification program corresponding to the input data; the terminal device inputs identity verification data according to the verification program; the processor receives the identity verification data, And execute the device binding program; the terminal device transmits device binding information to the processor according to the device binding program; the processor stores the identity verification data and device binding information in the storage medium; the verification process includes through the terminal device The biometric unit performs the biometric identification process.

Based on the above, the present invention can improve the efficiency of identity verification and the security of user data through the verification process including the execution of the biometric recognition process by the biometric unit of the terminal device. According to this, after the user completes the binding of his or her personal identity information to the mobile phone, when encountering any business or situation that requires identity verification, the user can present the identity certificate (for example, QR barcode) through the bound mobile phone, and then Improve the inconvenience of having to have a card reader and a physical ID card when handling business or services that require identity verification.

100: Identity verification system

110: Input and output device

120: Transceiver

130:Storage media

140: Processor

200:Terminal device

S210, S220, S230, S240, S250: steps

FIG. 1 is a schematic diagram of an identity verification system according to an embodiment of the present invention.

FIG. 2 illustrates a flow chart of an identity verification method according to an embodiment of the present invention.

FIG. 1 illustrates a schematic diagram of an identity verification system 100 according to an embodiment of the present invention. The identity verification system 100 may include a terminal device 200, an input and output device 110, a transceiver 120, a storage medium 130 and a processor 140. Also, the terminal device 200 includes a biometric unit.

The processor 140 is, for example, a central processing unit (CPU), or other programmable general-purpose or special-purpose micro control unit (MCU), microprocessor, or digital signal processing unit. Digital signal processor (DSP), programmable controller, application specific integrated circuit (ASIC), graphics processing unit (GPU), image signal processor (ISP) ), image processing unit (IPU), arithmetic logic unit (ALU), complex programmable logic device (CPLD), field programmable gate array (field programmable gate array) , FPGA) or other similar components or a combination of the above components. The processor 140 may be coupled to the storage medium 130 and the transceiver 120, And used to execute and process multiple modules, pre-stored user data and various applications stored in the storage medium 130 .

The identity verification system 100 can be communicatively connected (ie, wirelessly connected) to the terminal device 200 through the transceiver 120 . In another embodiment, the transceiver 120 and the terminal device 200 are communicatively connected to the server, and then the communication connection is achieved through the server. The terminal device 200 may be a user's electronic device, such as a mobile phone, a tablet, a laptop, a smart watch, a smart wearable device, and other electronic devices. The server can be a cloud server, a local server, or a server created by a bank or company account.

The biometric unit may be a fingerprint sensor, a face sensor, a sound sensor, an image capture device, an iris sensor or a finger vein sensor, etc. The biometric unit can capture the image of the sensing object to output the biometric image to the processor 140 of the terminal device 200, and then transmit it to the processor 140 through the transceiver 120. Moreover, the biometric recognition program executed by the terminal device 200 through the biometric unit may be voiceprint recognition, facial recognition, fingerprint recognition, palmprint recognition, iris recognition, retina recognition, body shape recognition, keyboard tapping recognition, signature recognition, and finger recognition. At least one of the vein identification.

The input/output device 110 is, for example, a keyboard, a mouse, a trackpad, a tablet, a monitor, a touch screen, a speaker, a sound receiver, a projection device, a device with near field communication (NFC), a device with wireless communication, etc. , this disclosure is not limited thereto.

The storage medium 130 is, for example, any type of fixed or removable random access memory (RAM), read-only memory (ROM), or flash memory. , hard disk drive (HDD), solid state drive (SSD) or similar components or a combination of the above components, and are used to store multiple modules, multiple user information, identity verification information, various types of components that can be executed by the processor 140 Applications and operating procedures.

The transceiver 120 transmits and receives signals in a wireless or wired manner. Transceiver 120 may also perform, for example, low noise amplification, impedance matching, mixing, up or down frequency conversion, filtering, amplification, and similar operations.

The identity verification system 100 can be communicatively connected to one or more terminal devices 200 through the transceiver 120 . The identity verification system 100 can perform data transmission and/or data synchronization with the terminal device 200 through the transceiver 120 . The terminal device 200 can be a system, a user identity verification device, or a hardware device with related applications, so that authorized and/or authenticated personnel can access the storage medium 130 of the identity verification system 100 through the terminal device 200 . Stored information.

FIG. 2 illustrates a flow chart of an identity verification method according to an embodiment of the present invention. The identity verification method of the present invention is applicable to electronic devices, and the electronic device can be any electronic device (for example, computers, tablets, and touch computers) installed with the identity verification system 100 . In one embodiment, the input/output device 110 receives input data (step S210). Specifically, the input data may be a binding request of a terminal device (for example, a mobile phone), an identity verification request, a service item request that requires identity verification, etc. For example, the user inputs a request to register and bind a mobile phone to the processor 140 through a mouse or keyboard. In the present invention, the processor 140 accesses and executes multiple modules, and the multiple modules include: an instruction receiving module, a verification judgment module, and a verification receiving module.

After step S210, the processor 140 receives the input data, and according to the input The data executes the corresponding verification procedure (step S220). Specifically, the processor 140 executes the instruction receiving module to receive input data input from the input/output device 110 . Furthermore, the processor 140 executes the verification judgment module to respond to the verification program of the input data, and then executes the corresponding verification program.

After step S220, the terminal device 200 inputs the identity verification data into the processor 140 according to the data in the verification program (step S230). Next, the processor 140 receives the identity verification data and generates device binding based on the identity verification data and the verification procedure (step S240). After step S240, the processor 140 stores the identity verification data and device binding information in the storage medium 130 (step S250). It is worth noting that the verification process includes executing a biometric recognition process through the biometric unit of the terminal device 200 .

In one embodiment, the input-output device 110 includes a display, and the verification program is to execute an authentication graphic program. Specifically, the authentication pattern procedure is that the processor 140 displays a specific pattern on the display, and the terminal device 200 executes the corresponding verification procedure by scanning the specific pattern, and outputs the identity verification result to the verification receiving module. For example, when the user wants to complete the identity verification of his terminal device 200, the user inputs user information through the keyboard or mouse (i.e., the input-output device 110) and the card reader (i.e., the input-output device 110) and The service item to be executed (ie, input data) is sent to the computer (ie, processor 140) (step S210). User information includes email address, mobile phone number, function settings to be activated, ID card information, digital ID card information, industrial and commercial certificate information, natural person certificate information, etc. Then, the processor 140 executes the corresponding verification program according to the content of the input data. (Step S220). Processor 140 passes The two-dimensional barcode (ie, specific graphic) is displayed on the display (ie, input-output device 110). Then, the user scans the two-dimensional barcode with his mobile phone (i.e., terminal device 200), and the mobile phone activates the biometric unit to perform the biometric identification process. The mobile phone transmits identity verification information through the transceiver 120 according to the results of the biometric identification process. to the processor 140 to further confirm the user's identity (step S230).

After receiving the identity verification data, the processor 140 generates device binding information based on the identity verification data and the executed verification process (step S240). Device binding information includes records of the user's name or ID number and the bound mobile device identification code (such as mobile phone number, mobile phone identification code and mobile phone electronic voucher). Next, the processor 140 stores the identity verification data and the device binding information in the server (ie, the storage medium 130) (step S250). The server of the present invention can be a cloud server or a local server. In this way, the user's terminal device 200 (i.e., mobile phone) completes the binding of the user information and the mobile phone, thereby allowing the user to handle services that require identity verification or situations where the user's identity needs to be proven in daily life (for example, When checking in), the user can show the bound mobile phone device to save the need to reuse the card reader or show the physical ID card. Identity verification information includes at least one of contactless chip card information, contact chip card information, biometric features, email address and mobile phone number, and biometric features include fingerprints, iris features, facial images, voiceprints and signatures At least one of them.

In another embodiment, the input data includes information of a specific terminal device 200, and the verification procedure is to perform a push authentication procedure. The push authentication procedure is transmitted by the processor 140 through the transceiver 120 based on the verification procedure and the information of the specific terminal device 200 The identity verification program is sent to the corresponding terminal device 200 (for example, a mobile phone), and the verification receiving module receives the identity verification result returned from the corresponding terminal device 200. Specifically, the difference between this embodiment and the previous embodiment is that when executing step S230, the processor 140 transmits the identity verification program data to the mobile phone designated by the user (ie, the terminal device 200) through push. middle. In one embodiment, the verification procedure is a chip verification procedure. The chip verification procedure is that the processor 140 detects the chip input data and generates a two-dimensional barcode on the display in response to the chip input data matching the user data. The terminal device 200 passes The device binding information is sent to the processor 140 by scanning the two-dimensional barcode.

In another embodiment, the input data includes specified service items, and the processor 140 generates permission information of the terminal device 200 based on the identity verification result and the device binding information. The processor 140 responds to the matching of the terminal device 200 and the permission information of the terminal device. , execute the program corresponding to the specified service item. Specifically, the user uses the bound mobile phone to input the service items that he or she wants to apply for or perform (for example, apply for a loan, handle transfers, and any business items that require identity verification). The processor 140 receives the service item request transmitted by the mobile phone (ie, the terminal device 200) that has gone through the binding program, and then executes the corresponding service item. In another implementation mode, when the user is inspected, the user can present his or her bound mobile phone to prove the user's identity information. In another embodiment, after the processor 140 receives the service request sent by the mobile phone through the binding process, the processor 140 returns the identity verification confirmation to the mobile phone, so that the mobile phone executes the biometric identification program again, thereby ensuring that the Instructions sent by the user himself to improve the user's security and user experience.

Based on the above, the identity verification system 100 and the identity verification method disclosed in the present invention provide functions that facilitate binding the user's identity information to the terminal device 200 . Furthermore, the verification process includes a method in which the biometric unit of the terminal device 200 executes the biometric recognition process, thereby improving the efficiency of identity verification and the security of user data. Furthermore, after the user completes the binding of his or her personal identity information to the mobile phone, the user can present identity proof (for example, QR barcode) through the bound mobile phone when encountering any business or situation that requires identity verification. Accordingly, the identity verification system 100 and method of the present invention can achieve high convenience; and, after only the first binding, the bound mobile phone can replace the physical identity card or physical identity card in daily life. Identity chip cards, thereby improving the inconvenience of having to have a card reader and a physical ID card when handling business or services that require identity verification.

S210, S220, S230, S240, S250: steps

Claims (9)

An identity verification system, including: a terminal device; an input and output device for receiving input data; a transceiver that is communicatively connected to the terminal device; a storage medium; a processor that is coupled to the storage medium and the transceiver, and the processor Configured to access and execute a plurality of modules, wherein the modules include: an instruction receiving module to receive the input data input from the input and output device; a verification and judgment module to receive the input data, and In response to the verification procedure of the input data, the corresponding verification procedure is executed; the verification receiving module receives the identity verification data transmitted from the terminal device through the transceiver, and generates a device binding based on the identity verification data and the verification procedure. determine the information, and store the device binding information in the storage medium; wherein the verification process includes performing a biometric identification process through the biometric unit of the terminal device; wherein the input data includes an identity confirmation request and designated service items, And after receiving the designated service item transmitted by the terminal device, the processor returns the identity confirmation request to the terminal device, and the terminal device executes the verification procedure again in response to the identity confirmation request to generate an identity verification result. Generate terminal device permission information based on the identity verification result and the device binding information, and the processor responds to the The terminal device matches the authority information of the terminal device and executes the program corresponding to the designated service item. The identity verification system of claim 1, wherein the input and output device includes a display, and the verification program is to execute an authentication graphic program. The authentication graphic program is for the processor to display a specific graphic on the display, and the terminal device scans The specific graphic is used to execute the corresponding verification program and output the identity verification result to the verification receiving module. The identity verification system as described in claim 1, wherein the input data includes information of a specific terminal device, and the verification procedure is to execute a push authentication procedure, and the push authentication procedure is based on the verification procedure and the specific terminal by the processor. The information of the device transmits the identity verification program to the corresponding terminal device, and the verification receiving module receives the identity verification result returned from the corresponding terminal device. The identity verification system of claim 2 or 3, wherein the verification program executed by the terminal device includes outputting the corresponding identity verification result in response to a match between the input data and the identity verification data. The identity verification system as described in claim 1, wherein the identity verification information includes at least one of contactless chip card information, contact chip card information, the biometric feature, an email address and a mobile phone number, and the biometric feature includes At least one of fingerprints, iris features, facial images, voiceprints, and signatures. An identity verification method, suitable for electronic devices, the identity verification method includes: receiving input data from an input and output device; The processor receives the input data and performs a verification procedure corresponding to the input data; the terminal device inputs identity verification data according to the verification procedure; the processor receives the identity verification data and generates device binding based on the identity verification data and the verification procedure Information; the processor stores the identity verification data and the device binding information in a storage medium; wherein the verification process includes executing a biometric recognition process through the biometric unit of the terminal device; wherein the input data includes an identity confirmation request and a designated service item. After receiving the designated service item transmitted by the terminal device, the processor returns the identity confirmation request to the terminal device. The terminal device executes the verification procedure again in response to the identity confirmation request to generate an identity verification result. , the processor generates terminal device permission information based on the identity verification result and the device binding information, and the processor executes a program corresponding to the designated service item in response to the matching of the terminal device and the terminal device permission information. The identity verification method as described in claim 6, wherein the identity verification information includes contactless chip card information, contact chip card information, fingerprints, iris features, facial images, voiceprints, signatures, email addresses and mobile phone numbers At least one of them. The identity verification method as described in claim 6, wherein the verification procedure is a two-dimensional barcode verification procedure. The two-dimensional barcode verification procedure is that the processor displays a specific pattern on the display, and the terminal device executes the corresponding process by scanning the specific pattern. of the verification process, and output the identity verification result to the processor. The identity verification method as described in claim 6, wherein the verification procedure is a chip verification procedure, and the chip verification procedure is that the processor detects the chip input data and generates a two-dimensional barcode in response to the chip input data matching the user information. On the display, the terminal device sends the device binding information to the processor by scanning the two-dimensional barcode.

Images