WO2016141561A1

WO2016141561A1 - Iris identity authentication accessory and system

Info

Publication number: WO2016141561A1
Application number: PCT/CN2015/073981
Authority: WO
Inventors: 王晓鹏
Original assignee: 北京释码大华科技有限公司
Priority date: 2015-03-11
Filing date: 2015-03-11
Publication date: 2016-09-15
Also published as: CN107430688A

Abstract

An iris identity authentication accessory connected to a mobile terminal for communication, comprising:an optical camera component (210) suitable for performing optical imaging on a region of interest containing a user's iris;an image sensor (240) suitable for converting an optical image of the region of interest containing the user's iris into an original electronic image;an interface unit (220) suitable for connecting an iris identity authentication accessory (200) to a mobile terminal (100), so as to enable the iris identity authentication accessory (200) to communicate with the mobile terminal (100);a data processing unit (250) suitable for processing the original electronic image output by an image sensor (240), and transmitting the processed electronic image to the mobile terminal (100) by means of the interface unit (220), so as to facilitate the mobile terminal (100) in comparing same with an iris template and authenticating a user identity;and an ID circuit module (260) comprising an iris identity authentication accessory ID serial number storage region, so as to facilitate the mobile terminal (100) in reading a unique ID serial number therefrom.Also disclosed is an iris identity authentication system.

Description

Iris identity certification attachments and systems

Technical field

The invention relates to payment authentication technology, in particular to an iris identity authentication accessory and system.

Background technique

With the rapid development of payment methods such as mobile payment, biometric technology has been more and more widely applied to mobile payment to improve the security of payment. For example, the currently proposed identity authentication means (such as Alipay's fingerprint payment) using fingerprints instead of passwords for mobile payment is more unique and convenient than digital passwords, which can effectively reduce the risk of password leakage. Memory complex payment passwords enhance the user experience. However, fingerprints are easy to leave characteristic marks due to their contact properties, and can be easily copied by materials such as silica gel. Some network e-commerce platforms have generally sold fingerprint sets, and many incidents of fingerprinting by others have occurred frequently. In particular, even if it is not falsified, the fingerprint can be stolen by a third party when the user is not awake (such as sleeping or drunk), which has a great risk in the field of mobile payment. Another safer and more reliable biometric method is iris authentication. Compared to fingerprint recognition, iris recognition has many advantages: many biometric points, high feature stability, non-contact identification, more accurate, and difficult to forge. More secure. Therefore, iris payment has a greater advantage in the field of mobile payment.

However, the application of iris authentication in mobile payment requires mobile phone hardware support, especially the need for dedicated iris acquisition imaging sensors, which is difficult to popularize in mobile terminals such as mobile phones. How to make the mobile terminal have the iris identity authentication function is a major bottleneck of current iris mobile payment.

Summary of the invention

To this end, the present invention provides an iris authentication device and system for mobile payment, which effectively solves the problem of enabling existing mobile terminals without changing the hardware structure of existing mobile terminals (such as mobile phones and tablet computers). It has the functions of iris recognition and iris identity authentication, which effectively solves the bottleneck of iris mobile payment.

According to one aspect of the invention, an iris identity authentication accessory is provided, comprising: an optical lens component adapted to optically image a region of interest comprising a user's iris. Image sensor suitable for interested in containing the user's iris The optical image of the area is converted into an electronic image. The interface unit is adapted to connect the iris identity authentication accessory to the mobile terminal, so that the iris identity authentication accessory communicates with the mobile terminal. And a data processing unit adapted to process the electronic image output by the image sensor and transmit the processed electronic image to the mobile terminal through the interface unit, so that the mobile terminal compares the iris template and authenticates the user identity. The ID circuit module includes at least one unique iris identity authentication accessory ID serial number storage area from which the mobile terminal can read the unique ID serial number.

Optionally, in the iris identity authentication accessory according to the invention, the interface unit is further adapted to power the iris identity authentication accessory when connected to the mobile terminal.

Optionally, the iris identity authentication accessory according to the present invention further comprises a power supply unit adapted to supply power to the iris identity authentication accessory.

Optionally, in the iris identity authentication accessory according to the present invention, the interface unit comprises any one of a USB OTG interface, an audio jack or a headphone jack, a Bluetooth interface, and a WIFI interface.

Optionally, in the iris identity authentication accessory according to the present invention, the USB OTG interface includes any one of USB 2.0, USB 3.0, and MicroUSB interfaces.

Optionally, in the iris identity authentication accessory according to the present invention, the housing is further included, wherein the USB OTG interface is physically and fixedly connected to the housing. In this way, the iris identity authentication accessory can be fixed on the mobile terminal device, so that the mobile terminal has the overall function of iris recognition.

Optionally, in the iris identity authentication accessory according to the present invention, the data processing unit further includes an encryption module adapted to perform encryption processing on the electronic image. The encryption algorithm may use a symmetric encryption algorithm, an asymmetric encryption algorithm, a public key private key encryption algorithm, a quantum encryption algorithm, or other specific encryption algorithms. The image may be compressed and outputted by a non-open source image compression technique. The encrypted human eye or iris image needs to be decrypted before it can be opened. Otherwise, even if the hacker intercepts the data stream collected by the iris authentication accessory during the transmission process, the hacker cannot parse and obtain the user's iris image, which is very strong. Hardware cryptography and anti-aggression have unique advantages in applications that require high data security (such as mobile payment).

Optionally, in the iris identity authentication accessory according to the present invention, the registered iris template storage module is further included, and is adapted to store the registered iris template data of the user in an encrypted manner. At the same time, the storage module can also store the original iris image collected by the user and the processed iris image.

Optionally, in the iris identity authentication accessory according to the present invention, the ID circuit module further includes an encryption circuit and/or a decryption circuit. Each individual iris identity accessory device has a unique unique device ID serial number. The The ID serial number is generated or stored by the ID circuit module and can be encrypted by an encryption circuit to be output in an encrypted format. After the iris identity authentication attachment establishes a communication connection with the mobile terminal, the mobile terminal reads the device ID serial number, and if the serial number is encrypted, the mobile terminal decrypts and restores the ID serial number. The mobile terminal identifies the validity of the iris identity authentication accessory device connected thereto by the device ID serial number. If the ID serial number read in is illegal, the iris identity authentication accessory device is refused to be identified, and subsequent iris identification work is not performed.

Optionally, in the iris identity authentication accessory according to the present invention, the optical lens component further includes a lens, a lens mount adapted to fix the lens, and a filter adapted to allow infrared light to pass therethrough.

Optionally, in the iris identity authentication accessory according to the present invention, the optical lens component further includes a focus adjustment unit adapted to adjust the focal length of the lens.

Optionally, in the iris identity authentication accessory according to the present invention, after the interface unit is physically connected to the mobile terminal, the lens imaging direction and the display screen of the mobile terminal connected thereto are on the same side of the mobile terminal. In particular, when the mobile terminal that authenticates the accessory inserted through the USB OTG interface performs iris authentication, the user can preview the user's own iris video or image collected by the accessory on the display screen of the mobile terminal to improve the user experience.

Optionally, in the iris identity authentication accessory according to the invention, at least one LED lamp is further included, adapted to provide illumination for iris imaging.

Optionally, in the iris identity authentication accessory according to the invention, an LED lamp control module is further included, adapted to adjust the mode of the LED lamp and/or the brightness of the LED lamp.

Alternatively, in the iris identity authentication accessory according to the present invention, the mode of the LED lamp includes a normally lit mode and a blinking mode.

Optionally, in the iris identity authentication accessory according to the present invention, the LED light control module is further adapted to adjust the brightness of the LED light according to a predetermined mode in order to obtain an electronic image of the user's pupil and thus zooming, thereby facilitating living body detection.

Optionally, in the iris identity authentication accessory according to the invention, the LED light comprises one of an infrared light LED or a visible light LED.

According to still another aspect of the present invention, there is also provided an iris identity authentication system comprising: an iris identity authentication accessory and a mobile terminal according to the present invention. The mobile terminal includes a display unit adapted to display the iris imaging of the user in real time. The interface unit is adapted to be connected to and communicate with the iris identity authentication accessory to initiate the iris identity authentication accessory to collect an electronic image containing the characteristics of the user's eye, and to read the ID serial number of the iris identity authentication accessory and transmit it to the mobile terminal. Iris The identity authentication accessory identification unit is adapted to identify the iris identity authentication accessory according to the iris identity authentication accessory ID serial number. The iris identity authentication unit is adapted to generate a user iris template according to the electronic image, and authenticate the identity of the user according to the result of the comparison between the iris template and the registered iris template data of the user.

Alternatively, in the iris identity authentication system according to the present invention, the user's registered iris template data is stored in the registered iris template memory of the iris identity authentication attachment.

Alternatively, in the iris identity authentication system according to the present invention, the user's registered iris template data is stored in the server.

Optionally, in the iris identity authentication system according to the present invention, the mobile terminal further comprises a mobile payment unit adapted to send an identity authentication request to the iris identity authentication unit and to receive the identity authentication result from the iris identity authentication unit.

Optionally, the iris identity authentication system according to the present invention further includes an image processing unit adapted to analyze the distance between the user and the iris identity authentication accessory according to the pupil spacing of the eyes of the user in the collected electronic image or the pupil diameter of the single eye, and generate a distance adjustment. The indication signal prompts the user to change the mobile terminal/iris identity authentication attachment to the eye distance.

Optionally, in the iris identity authentication system according to the present invention, the image processing unit is further adapted to calculate the pupil spacing of the two eyes in the electronic image or the pupil diameter of the single eye to analyze the distance between the user and the optical lens component to generate the distance adjustment control. The signal is used to control the focal length adjustment unit in the iris authentication accessory to achieve autofocusing of the iris lens by the optical lens.

Optionally, in the iris identity authentication system according to the present invention, the iris identity authentication unit is adapted to generate any one of the following manners to generate a user iris template according to the electronic image, and according to the iris template and the user's registered iris template data. The result of the comparison is used to authenticate the user's identity: the iris template and the user's registered iris template data are compared in the mobile terminal, and the user identity is authenticated according to the comparison result; the iris template is sent to the server so that the server will Comparing the iris template with the registration template data of the user stored in the server, and receiving the comparison result sent by the server to authenticate the user identity; sending the iris template and the registration template data of the user to the server, So that the server compares the iris template with the registration template data of the user, and receives the comparison result sent by the server to authenticate the user identity; and sends the iris template to the iris identity authentication attachment for the iris identity Certified attachment to the iris template and iris identity attachment User registration iris template stored data results to authenticate the user's identity than sending the comparison, iris authentication and receiving attachments.

According to yet another aspect of the present invention, there is also provided an iris identity authentication accessory comprising an optical lens component adapted to optically image a region of interest comprising a user's iris. Image sensor suitable for interested in containing the user's iris The optical image of the area is converted into an electronic image. The interface unit is adapted to connect the iris identity authentication accessory to the mobile terminal, so that the iris identity authentication accessory communicates with the mobile terminal. The ID circuit module includes at least one unique iris identity authentication accessory ID serial number storage area from which the mobile terminal can read the unique ID serial number. The iris template storage module is registered and is adapted to store the registered iris template data of the user in an encrypted manner. The data processing unit is adapted to process the electronic image output by the image sensor to acquire the iris template, compare the iris template with the registered iris template data of the user, and send the comparison result to the mobile terminal through the interface unit.

According to still another aspect of the present invention, an iris identity authentication system is provided, including an iris identity authentication accessory and a mobile terminal. The mobile terminal includes an interface unit adapted to connect with and communicate with the iris identity authentication accessory, obtain an ID serial number of the iris identity authentication accessory, and a comparison result of the iris template and the registered iris template data of the user. The iris identity authentication accessory identification unit is adapted to identify the iris identity authentication accessory according to the iris identity authentication accessory ID serial number. An iris identity authentication unit adapted to authenticate a user's identity based on the comparison result.

According to the iris identity authentication technical solution of the present invention, by connecting with the mobile terminal by using an independent iris identity authentication accessory, high-quality iris images can be obtained and iris identity authentication can be performed. The iris identity authentication accessory according to the present invention realizes acquisition and processing of iris images by a plurality of hardware units, and can provide a high quality iris image to the mobile terminal without increasing the burden on the mobile terminal. Further, the iris identity authentication accessory according to the present invention has a unique ID serial number, which can perform anti-counterfeiting identification on the iris identity authentication accessory, thereby ensuring that the iris identity authentication accessory for iris recognition is a legally authorized device and prevents illegal users. Attacks are made by falsifying unauthorized iris authentication attachments. Further, the iris identity authentication accessory according to the present invention can store the encrypted registered iris template, thereby maintaining the independence and security of the registered iris template. The iris identity authentication accessory according to the present invention can be conveniently connected with different mobile terminals. On the basis of not customizing the mobile terminal hardware, the mobile terminal can replace the traditional identity by adopting the iris identity authentication method in applications such as mobile payment. Password authentication and fingerprint authentication have higher security.

In addition, the iris identity authentication technical solution according to the present invention further provides an iris identity authentication accessory, which implements image processing on the collected region of interest within the authentication accessory to obtain the user iris template. Further, the The authentication accessory can compare the user iris template with the registered user iris data stored in the authentication accessory, so that the identity authentication can be completed within the independent accessory, thereby greatly improving the confidentiality of the user iris data. In addition, the iris identity authentication accessory can conveniently connect with different mobile terminals and other devices for fast identity authentication, which greatly improves the user experience.

DRAWINGS

In order to achieve the above and related objects, certain illustrative aspects are described herein in conjunction with the following description and the accompanying drawings. Within the scope of the claimed subject matter. The above as well as other objects, features and advantages of the present invention will become more apparent from the Detailed Description Throughout the disclosure, the same reference numbers generally refer to the same parts or elements.

Figure 1 shows a mobile terminal 100 in accordance with one embodiment of the present invention;

2 shows a schematic diagram of an iris identity authentication system in accordance with one embodiment of the present invention;

FIG. 3 shows a schematic diagram of an iris identity authentication accessory 200 in accordance with one embodiment of the present invention; FIG.

4 shows a schematic diagram of an iris identity authentication accessory 200 in accordance with yet another embodiment of the present invention;

FIG. 5 illustrates an example of a user actually using an iris identity authentication system in accordance with one embodiment of the present invention; FIG.

FIG. 6 is a block diagram showing the structure of an iris identity authentication accessory 200 according to an embodiment of the present invention;

FIG. 7 is a structural block diagram of an iris identity authentication application in a mobile terminal according to an embodiment of the present invention; FIG.

8A and 8B respectively show examples of user interfaces in a single-eye iris registration process and a binocular iris registration process;

FIG. 9 shows a block diagram of a structure of an iris identity authentication accessory 300 in accordance with yet another embodiment of the present invention.

detailed description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While the embodiments of the present invention have been shown in the drawings, the embodiments Rather, these embodiments are provided so that this disclosure will be more fully understood and the scope of the disclosure will be fully disclosed.

FIG. 1 is a block diagram showing the structure of a mobile terminal 100. The mobile terminal 100 can include a memory interface 102, one or more Data processors, image processors and/or central processing unit 104, and peripheral interface 106.

Memory interface 102, one or more processors 104, and/or peripheral interface 106 can be either discrete components or integrated into one or more integrated circuits. In the mobile terminal 100, various components may be coupled by one or more communication buses or signal lines. Sensors, devices, and subsystems can be coupled to the peripheral interface 106 to help implement a variety of functions.

For example, motion sensor 110, light sensor 112, and distance sensor 114 can be coupled to peripheral interface 106 to facilitate functions such as orientation, illumination, and ranging. Other sensors 116 may also be coupled to peripheral interface 106, such as a positioning system (e.g., a GPS receiver), a temperature sensor, a biometric sensor, or other sensing device, thereby facilitating the implementation of related functions.

Camera subsystem 120 and optical sensor 122 may be used to facilitate implementation of camera functions such as recording photos and video clips, where the camera subsystem and optical sensor may be, for example, a charge coupled device (CCD) or a complementary metal oxide semiconductor (CMOS) ) Optical sensor. Communication functions may be facilitated by one or more wireless communication subsystems 124, which may include radio frequency receivers and transmitters and/or optical (e.g., infrared) receivers and transmitters. The particular design and implementation of wireless communication subsystem 124 may depend on one or more communication networks supported by mobile terminal 100. For example, the mobile terminal 100 may be designed to include a supporting LTE, 3G, GSM communications network, GPRS network, EDGE network, Wi-Fi or WiMax network, and the network subsystem 124 Bluebooth ^TM.

The audio subsystem 126 can be coupled to the speaker 128 and the microphone 130 to assist in implementing voice-enabled functions such as voice recognition, voice replication, digital recording, and telephony functions. I/O subsystem 140 may include touch screen controller 142 and/or one or more other input controllers 144. Touch screen controller 142 can be coupled to touch screen 146. For example, the touch screen 146 and the touch screen controller 142 can detect contact and movement or pause with any of a variety of touch sensing technologies, including but not limited to capacitive, Resistive, infrared and surface acoustic wave technology. One or more other input controllers 144 may be coupled to other input/control devices 148, such as one or more buttons, rocker switches, thumb wheels, infrared ports, USB ports, and/or pointing devices such as styluses . The one or more buttons (not shown) may include up/down buttons for controlling the volume of the speaker 128 and/or the microphone 130.

Memory interface 102 can be coupled to memory 150. The memory 150 can include high speed random access memory and/or nonvolatile memory, such as one or more magnetic disk storage devices, one or more optical storage devices, and/or flash memory (eg, NAND, NOR). The memory 150 can store an operating system 152, such as Android, IOS. Or an operating system like Windows Phone. The operating system 152 can include instructions for processing basic system services and performing hardware dependent tasks. The memory 150 can also store the application 154. The operating system 152 is loaded from the memory 150 and executed by the processor 104 while the mobile device is running. Application 154 is also loaded from memory 150 at runtime and executed by processor 104. The application 154 runs on the operating system and utilizes an interface provided by the operating system and the underlying hardware to implement various functions desired by the user, such as instant messaging, web browsing, and picture management. The application 154 can be provided independently of the operating system or can be provided by the operating system.

In general, the requirements for image acquisition hardware and the hardware requirements required for iris authentication are different for users' camera and camera operations. The camera subsystem 120 and optical sensor 122 of the mobile terminal are adapted to perform normal visible light imaging operations, and are less suitable for iris acquisition requiring infrared illumination, particularly image texture features of Asian black eyeballs. Alternatively, camera subsystem 120 may perform multiplexing of normal photography and iris acquisition, but has limited effectiveness for iris acquisition. Accordingly, the present invention provides an iris identity authentication accessory 200 for a mobile terminal. The iris identity authentication accessory 200 can be connected to the mobile terminal 100 for iris identity authentication.

Figure 2 illustrates an iris identity authentication system in accordance with one embodiment of the present invention. The iris identity authentication system includes an iris identity authentication accessory 200 and a mobile terminal 100. When the mobile terminal 100 performs network authentication, login, and unlocking, and the like, the user can perform identity verification through the iris identity authentication accessory 200 and the application in the mobile terminal 100, thereby realizing that the hardware of the mobile terminal 100 itself is not required to be changed. Based on the device, the mobile terminal 100 has the function of iris identity authentication. In this way, the user only needs to be equipped with the small and inexpensive iris authentication accessory 200, which enables the existing mobile terminal including the mobile phone, the tablet computer and the like to have the functions of iris collection and identity authentication.

FIG. 3 shows a schematic diagram of an iris identity authentication accessory 200 of a mobile terminal in accordance with one embodiment of the present invention. As shown in FIG. 3, the iris identity authentication accessory 200 of the present embodiment includes an optical lens component 210. The optical lens component 210 is adapted to optically image a region of interest containing a user's iris. The optical lens component 210 further includes a lens, a lens mount adapted to fix the lens, and a filter adapted to allow infrared light to pass therethrough. In addition, the optical lens component may further include a focus adjustment unit. The user can adjust the focus distance of the focus adjustment unit, so that when acquiring an optical image, there is a higher image quality and a more free shooting distance.

FIG. 4 shows a schematic diagram of an iris identity authentication accessory 200 in accordance with yet another embodiment of the present invention. As shown in FIG. 4, at least one LED lamp 270 may be disposed around the optical lens component 210, which is adapted to provide illumination for image acquisition of the optical lens component. For example, an infrared LED lamp having a wavelength in the range of 600 to 1200 nm is provided on both sides of the optical lens unit 210. Thus, the LED lamps distributed around the optical lens component 210 can be cross-illuminated. In particular, in use When the user wears glasses, the way of cross-illumination can reduce the reflection interference of the spectacle lens. The iris identity authentication accessory 200 in accordance with the present invention may also include an LED light control module. The LED light control module is capable of controlling the illumination mode of the LED light. For example, the LED light control module can control the LED light to switch between the blinking mode and the long light mode, which can reduce power consumption. In yet another embodiment, the LED control module is capable of controlling the brightness of the LED lamp to vary in a predetermined manner. For example, when the iris identity authentication accessory 200 performs the image acquisition of the eye region, the LED light gradually darkens according to a certain rule, and then gradually becomes brighter by the dark, so as to stimulate the pupil of the person to perform size conversion. In this way, the iris identity authentication accessory 200 can obtain a feedback electronic image that results in a pupil zoom change. In this way, the iris identity authentication system 200 can perform the living body detection by the eye electronic image obtained by the feedback, that is, whether the vital signs of the living body providing the eye image are normal. Furthermore, the iris identity authentication system can perform security authentication based on the judgment result of the vital signs, thereby ensuring that the object to be verified is the eye of the real living body, not the organ or the fake model that has been detached from the human body. Live detection with pupil scaling changes provides a higher level of security than other biometrics such as fingerprints.

As shown in Figures 3 and 4, the iris identity authentication accessory has an outer casing 230 externally. The circuit structure of the iris authentication accessory is located inside the outer casing 230. The shape of the outer casing 230 can be arbitrarily set according to different arrangements of internal structures or aesthetic factors. Additionally, the iris identity authentication accessory in accordance with the present invention can communicate with the mobile terminal 100 in a variety of ways. The iris identity authentication accessory includes an interface unit 220 adapted to connect the iris identity authentication accessory to the mobile terminal. For example, the interface unit 220 includes any one of a USB OTG interface, an audio jack or a headphone jack, a Bluetooth interface, and a WIFI interface. Among them, the USB OTG interface includes any one of USB2.0, USB3.0 and MicroUSB interfaces. In the embodiment shown in Figures 3 and 4, the interface unit includes a USB OTG interface. USB OTG is an acronym for USB On-The-Go, which is mainly used for data connections between various devices or mobile devices, especially PDAs, mobile phones, and consumer devices. USB OTG can connect a variety of different devices such as digital cameras, camcorders, and printers to solve the inconvenience of exchanging data between various devices or memory cards. Generally, the mobile terminal has an OTG interface type as a female port, and the OTG interface type owned by the iris authentication accessory 200 is a public port. By inserting the OTG male port of the iris identity authentication accessory 200 onto the OTG female port of the mobile terminal, the iris identity authentication accessory (including the casing, circuit hardware, lens, etc.) can be fixed on the mobile terminal 100, so that the mobile terminal has the iris The overall function of identification. The OTG interface of the iris authentication accessory is fixedly connected to the outer casing and the circuit structure.

FIG. 5 illustrates an example of a user actually using an iris identity authentication system in accordance with one embodiment of the present invention. As shown in FIG. 5, when the iris authentication accessory 200 is connected to the mobile terminal 100 through the OTG interface, the imaging direction of the lens of the iris authentication accessory 200 and the display screen of the mobile terminal 100 are on the same side of the mobile terminal. In this way, the user can hold the mobile terminal 100 to conveniently align the optical lens component 210 of the iris identity authentication accessory 200 with the human eye. The area can simultaneously see the real-time imaging of the eye area collected by the iris person authentication accessory on the screen of the mobile terminal 100, so that the user can adjust the spatial position and the use distance of the iris image collection in time, thereby improving the speed of the user identity authentication. And improve the user experience. The orientation of the OTG interface of the current mobile terminal is not the same, so that there may be a case where the imaging direction of the optical lens component 210 and the display of the mobile terminal 100 after the iris identity authentication accessory 200 is inserted into a mobile terminal 100 The screen is on the same side. After inserting another mobile terminal 100, the imaging direction of the optical lens component 210 is on the opposite side of the display screen, so that the user does not see the real-time in the display screen of the mobile terminal 100 when facing the optical lens component 210 of the iris identity authentication accessory 200. Imaging. In order to avoid this, the iris authentication accessory 200 according to the present invention can set its own OTG interface orientation for a mobile terminal that is oriented toward a specific OTG interface, thereby ensuring that the iris identity authentication accessory is inserted into the mobile terminal after the optical lens component 210 is inserted. The imaging direction is on the same side of the mobile terminal as the display screen of the mobile terminal 100. Alternatively, a lens rotation mechanism may be added to the iris identity authentication accessory 200 to change the imaging direction of the optical lens component 210 thereof.

FIG. 6 shows a block diagram of the structure of an iris identity authentication accessory 200 in accordance with one embodiment of the present invention. As shown in FIG. 6, the iris identity authentication accessory of the mobile terminal includes an optical lens component 210, an image sensor 240, an interface unit 220, a data processing unit 250, and an ID circuit module 260.

Image sensor 240 is adapted to convert an optical image of a region of interest comprising a user's iris into an electronic image.

The interface unit 220 is adapted to connect to the mobile terminal 100 and to communicate. The connection methods mentioned here include physical detachable connection methods and wireless connection methods. The interface unit 220 can select any one of the general connection standard structures.

The data processing unit 250 is adapted to convert and process the raw image data output by the image sensor 240, and transmit the processed iris electronic image to the mobile terminal 100 through the interface unit 220, so that the mobile terminal 100 receives the iris electronic image, The iris template is generated by the iris recognition algorithm, and the user identity is authenticated by comparing the iris template with the registered iris template data of the user. The iris electronic image may be a monocular image or a binocular image. According to an embodiment of the present invention, the method of measuring the Hamming distance is adopted, and the iris comparison result is smaller than the specified Hamming distance threshold, and the recognition result is the same user. When the comparison result is greater than the specified threshold, the mobile terminal 100 recognizes that the real-time iris template corresponds to a different user of the registered iris template. The processing of the electronic image by the data processing unit 250 includes performing denoising processing on the electronic image, and selecting an electronic image having a higher quality of the iris image included from the plurality of electronic images. The data processing unit 250 can transmit the processed electronic image to the mobile terminal 100 through the interface unit 220.

The ID circuit module 260 includes at least one unique iris identity authentication accessory ID serial number storage area from which the mobile terminal can read the unique ID serial number. In this way, the application of the mobile terminal 100 can verify the identity of the iris identity authentication attachment by using the ID serial number, thereby ensuring that the legally registered iris identity authentication attachment can perform corresponding operations to ensure the identity security of the user. Thus, through the iris identity authentication accessory 200 as shown in FIG. 6, the iris feature based identity verification can be performed in the usual, non-hardware customized mobile terminal 100, and the secure operation of the mobile payment can be completed. In addition, the ID circuit module 260 can also include an encryption circuit and/or a decryption module. The mobile terminal can parse the ID data acquired from the ID circuit module only after the mobile terminal resides in the decryption application or plug-in corresponding to the ID circuit. In this way, the unique ID serial number corresponding to the iris identity authentication accessory 200 is stored with higher security, and is not easily intercepted and the ID identity is stolen. Each individual iris identity accessory device has a unique device ID serial number. The ID serial number is generated or stored by the ID circuit module and can be encrypted by an encryption circuit. Thus, the ID circuit module 260 can output the ID serial number in an encrypted format. When the iris identity authentication accessory 200 establishes a communication connection with the mobile terminal 100, the mobile terminal 100 reads the device ID serial number. If the ID serial number is encrypted, the mobile terminal is decrypted to restore the ID serial number. The mobile terminal identifies the validity of the iris identity authentication accessory 200 connected thereto by the ID serial number. For example, the application in the mobile terminal knows the legal device ID serial number list or the legality determination rule, and can determine whether the read device ID serial number is legal. If it is determined that the read ID serial number is illegal, the iris identity authentication accessory device is rejected, and the subsequent iris identification work is not performed.

In one embodiment in accordance with the invention, interface unit 220 is a USB OTG interface. The iris identity authentication accessory can obtain power from the mobile terminal through the USB OTG interface. In this way, the circuit structure of the iris authentication accessory can be further compressed to reduce the volume of the iris identity authentication accessory 200. In one embodiment in accordance with the present invention, the mobile terminal 100 launches the iris authentication accessory 200 by application and acquires data transmitted by the iris authentication accessory 200. The application manipulates the iris authentication accessory 200 through the underlying USB video class (UVC) driver of the mobile terminal 100. The user can install the iris collection application on the mobile terminal 100 and obtain the system ROOT authority of the application. Of course, the application can also be released as system software on the mobile terminal 100, and the user no longer needs to obtain the system root authority of the application.

In still another embodiment in accordance with the present invention, interface unit 220 is a wireless interface (e.g., Bluetooth or WiFi). The circuit structure inside the iris authentication accessory includes a power supply unit (not shown) that supplies power to the iris authentication accessory. Thus, the iris identity authentication accessory 200 can be moved at will. Alternatively, the iris authentication accessory can position the iris authentication accessory at a location suitable for the user's use by a positioning structure (eg, hook, mount, etc.) disposed on its outer casing 230.

In still another embodiment of the present invention, the data processing unit 250 further includes an encryption module adapted to perform an encryption process on the electronic image. The data processing unit 250 performs denoising processing on the electronic image acquired in the image sensor, and selects an electronic image with better imaging quality. The encryption module then performs an encryption process on the electronic image to be transmitted. After the encrypted electronic image arrives at the mobile terminal 100, the application in the mobile terminal 100 decrypts the electronic image to acquire an iris image. In this way, the iris identity authentication accessory 200 encrypts the transmitted data itself, thereby ensuring the security of the electronic image containing the user's iris data. The encryption algorithm may use a symmetric encryption algorithm, an asymmetric encryption algorithm, a public key private key encryption algorithm, a quantum encryption algorithm, or other specific encryption algorithms. The iris identity authentication accessory 200 can also use a non-open source image compression technology to compress and output images for encryption. The encrypted human eye or iris image needs to be decrypted to be opened. Otherwise, even if the illegal user intercepts the data stream collected by the iris authentication accessory 200 during the transmission process, the user's iris image cannot be obtained from the data stream. In this way, the iris authentication accessory 200 has strong hardware encryption and anti-aggression, and has unique advantages in an application scenario where data security is highly demanded, such as mobile payment.

Further, when the data processing unit 250 transmits to the mobile terminal 100 through the interface unit 220, various image transmission formats may be employed. The transmitted image format can be an uncompressed image format (such as Raw Data) or a processed image format such as YUV, RGB, or UVC, and can be encrypted. For example, data processing unit 250 may convert the raw electronic image output from image sensor 240 into a UVC image. Accordingly, after the mobile terminal 100 acquires the UVC image, the original UVC image can be parsed as needed and subsequent processing such as extracting iris features can be performed. In addition, in still another embodiment according to the present invention, the data processing unit 250 may filter each frame of the original image output from the image sensor 240, obtain image data of higher iris image quality, and then meet the iris recognition requirements. The image is transmitted to the mobile terminal 100 through the interface unit 220. In this way, the amount of data transmitted by the iris identity authentication accessory 200 to the mobile terminal 100 is reduced, the data processing amount of the mobile terminal is also reduced, and the efficiency of iris identity authentication is improved.

The iris identity authentication accessory 200 may further include a registered iris template storage module (not shown) adapted to store the user's registered iris template data in an encrypted manner. In this way, the user can choose to store the registered iris template data in a separate device (i.e., the iris identity authentication accessory of the present invention). When the iris authentication accessory 200 is connected to the mobile terminal 100, the mobile terminal 100 can read the encrypted iris template data from the iris template storage module, and then compare with the iris image acquired in real time to confirm the current iris recognition. Whether the user identity is consistent with the identity of the user represented by the registered iris template data. In this way, the user can use the iris identity authentication attachment storing the registered iris template data for identity authentication on different mobile terminals, thereby improving the user identity authentication. Convenience. In addition, storing the user's registered iris template in an encrypted manner in the iris identity authentication attachment provides a higher level of security than storing the registered iris template data in a mobile terminal (typically stored in a memory card) Sex.

FIG. 7 is a block diagram showing the structure of an iris identity authentication application in a mobile terminal according to an embodiment of the present invention. The iris authentication application resides in the mobile terminal 100. The iris identity authentication application includes a display unit 161, an interface unit 162, an iris identity authentication accessory identification unit 163, and an iris identity authentication unit 164. In still another embodiment of the present invention, the iris authentication application in the mobile terminal may further include an image processing unit.

The display unit 161 is adapted to display the iris preview image of the user in real time. In this way, the user can adjust the position of the iris identity authentication accessory relative to the eye area based on the displayed iris imaging to obtain higher quality iris imaging. In addition, the display unit is also capable of displaying a human-machine interface during the iris registration and recognition process and an indication signal, such as three colors of red, green and blue, to indicate the distance between the user and the iris acquisition device. Among them, red indicates that the distance is too close, green indicates that the distance is appropriate, and blue indicates that the distance is too far.

The image processing unit is adapted to analyze the distance of the user from the optical lens component based on the pupil spacing of the two eyes in the electronic image or the pupil diameter of the single eye to generate a distance adjustment indication signal to prompt the user to change the distance between the mobile terminal and the eye. 8A and 8B show examples of user interfaces in the single-eye iris registration process and the binocular iris registration process, respectively. A first area 410 and a second area 420 are included in the interface as shown in FIG. 8A. The first area 410 is an iris acquisition preview area. Alerts for the number of registrations can also be displayed in this preview area. For example, if “0” is displayed in the interface, it means that the iris authentication accessory has not registered the iris template data that can be used for the registered user registration. The second area 420 displays prompt information for the user adjustment operation. For example, the display content is that the user should aim one eye at the round frame (of course, other shapes and border colors can also be used), and the indicator light from the far and near mobile phone to the mobile phone indicator or the iris authentication accessory turns green. Keep your phone stable to get high quality user iris data. The first region 510, the second region 520, and the third region 530 are included in the interface shown in FIG. 8B. In the third area, the user can preview the binocular image. The first area 510 can include three sections, each section corresponding to an identification to indicate a different range of distances between the mobile terminal and the eye. For example, the three parts are red, green, and blue. Red indicates that the distance is too close, green indicates that the distance is appropriate, and blue indicates that the distance is too far. When the user holds the mobile terminal for the position adjustment, a buoy can be displayed in the three parts to indicate the distance of the current position. In this way, the user can quickly adjust the distance between the mobile terminal and the eye according to the position of the buoy. The second area 520 can indicate the number of times the iris is registered by color or text. For example, when the eye pattern in the second region completely turns green, it indicates the completion of one iris registration. In addition to the color, the mobile terminal 100 can also use the indicator sound to prompt the user to use the distance. The interface unit 162 is adapted to be associated with the iris identity authentication accessory 200 Connect, read the device ID serial number of the iris identity authentication accessory 200, or the acquired iris electronic image and the registered iris template data. In this way, the iris authentication application can acquire the electronic image of the region of interest containing the user's iris and the iris identity authentication attachment ID serial number, and has performed secure identity authentication.

The operating system of the mobile terminal 100 turns on the ROOT authority of the USB OTG, so that the mobile terminal 100 can successfully identify the iris identity authentication accessory 200 connected to the mobile terminal, and activates the master-slave mode, and the mobile terminal 100 can communicate with the iris identity through the USB OTG protocol. The authentication accessory 200 performs signal communication to control the power supply and opening of the iris identity authentication accessory. Then, the iris authentication accessory 200 performs iris biometric feature collection and image encryption transmission to the mobile terminal according to the instruction of the mobile terminal 100. The mobile terminal decodes the iris feature image and generates an iris template, and then performs the comparison.

In still another embodiment of the present invention, the mobile terminal 100 may transmit the encrypted image data of the iris identity authentication accessory 200 to the server. In this way, after decrypting the image data, the server compares it with the iris template data registered by the user stored in the server, and then returns the comparison result to the mobile terminal.

In still another embodiment according to the present invention, the mobile terminal 100 may generate an iris template based on image data acquired from the iris identity authentication accessory 200. The mobile terminal 100 then returns the iris template to the iris identity authentication accessory 200. Thus, the data processing unit of the iris identity authentication accessory 200 can compare the iris template with the registered iris template data of the user stored in the iris identity authentication accessory 200, and transmit the comparison result to the mobile terminal 100.

The iris identity authentication accessory identification unit 163 is adapted to identify the iris identity authentication accessory 200 based on the iris identity authentication accessory ID serial number. The iris identity authentication unit 164 is adapted to generate a user iris template according to the electronic image, and authenticate the identity of the user according to the result of the comparison between the iris template and the registered iris template data of the user. Wherein, the user's registered iris template is adapted to be compared with the iris features in the real-time iris image. In addition to being available from the iris identity authentication accessory with the registered iris template, the mobile terminal 100 may also choose to download from the server.

Further, in still another embodiment of the present invention, the iris authentication application in the mobile terminal may further include a mobile payment unit. The mobile payment unit is adapted to send an identity authentication request to the iris identity authentication unit 164 and an identity authentication result from the iris identity authentication unit. For example, when the user performs online shopping, the mobile payment unit sends an identity authentication request to the iris identity authentication unit 164 when preparing for network payment. After the iris authentication unit completes the authentication process, the mobile payment unit can receive the authentication result to complete the payment operation or refuse to pay.

In still another embodiment in accordance with the present invention, the image sensor is adapted to calculate the pupil spacing of the two eyes in the electronic image or the pupil diameter of the single eye to analyze the distance of the user from the optical lens component to generate a distance adjustment control signal for control The focal length adjustment unit in the iris authentication accessory realizes the autofocus of the iris lens for the optical lens. In this way, after aligning the optical lens component of the iris identity authentication accessory 200 with the eye area of the user, the user does not need to manually adjust the distance between the iris identity authentication accessory 200 and the eye within a normal distance range, but through the focus adjustment unit. Autofocus to improve user experience.

FIG. 9 shows a block diagram of an 300 of an iris identity authentication accessory in accordance with yet another embodiment of the present invention. As shown in FIG. 9, the iris identity authentication accessory 300 of the mobile terminal includes an optical lens component 310, an image sensor 340, an interface unit 320, a registered iris template storage module 330, a data processing unit 350, and an ID circuit module 360. An optical lens component 360 is adapted to optically image a region of interest comprising a user's iris. An image sensor 340 is adapted to convert an optical image of the region of interest comprising the user's iris into an original electronic image. The ID circuit module 360 includes at least one unique iris identity authentication accessory ID serial number storage area from which the mobile terminal can read the unique ID serial number. The registered iris template storage module 330 is adapted to store the registered iris template data of the user in an encrypted manner. The interface unit 320 is adapted to connect the iris identity authentication accessory 300 to the mobile terminal 100 such that the iris identity authentication accessory 300 communicates with the mobile terminal 100. The data processing unit 350 is adapted to process the original electronic image output by the image sensor 340 to acquire an iris template, compare the iris template with the registered iris template data of the user, and send the comparison result through the interface unit. To the mobile terminal.

Specifically, the user can quickly connect the iris authentication accessory to any selected mobile terminal when performing operations such as mobile payment, login, and unlocking. The user can control the opening and subsequent work of the iris authentication accessory through an application in the mobile terminal corresponding to the iris authentication accessory 300 (for example, a separate application in the mobile terminal or a plug-in for the payment application, etc.). When the user needs to authenticate, the user can quickly collect images of the eye area through the iris identity authentication accessory. The iris acquisition accessory image acquisition sensor 340 transmits the image data to the data processing unit 350 using an iris extraction algorithm to generate a real-time iris template. The iris extraction algorithm can use a variety of well-known algorithms, and will not be described here. The data processing unit 350 also acquires the iris template data registered by the user from the registered iris template storage module 330, and then compares the real-time generated iris template with the iris template data registered by the user. In this way, the iris authentication accessory 300 can complete the authentication of the iris identity in the case of not outputting the user iris data, thereby reducing the possibility that the user data is illegally acquired, and can be quickly connected and used with a plurality of mobile terminals. Greatly improve user experience and security. The interface unit 320 of the iris authentication accessory 300 of the embodiment may be any one of a USB OTG interface, an audio jack or a headphone jack, a Bluetooth interface, and a WIFI interface. In particular, since the amount of transmitted data of the iris authentication accessory 300 is small (for example, it is not necessary to transmit electronic image data), the interface unit 320 can also quickly use a protocol standard such as a headphone jack with a lower data transmission rate. Get the comparison knot fruit.

In addition, the iris identity authentication accessory 300 of the present embodiment can separately configure the power supply unit to supply power to the entire iris identity authentication accessory. Alternatively, the iris authentication accessory 300 can also be powered by the mobile terminal 100 through the interface unit 320 when directly connected to the mobile terminal 100.

In one embodiment in accordance with the invention, the iris identity authentication system includes an iris identity authentication accessory 300 and a mobile terminal 100. The mobile terminal 100 also has an interface unit corresponding to the iris identity authentication accessory 300. The mobile terminal 100 can communicate with the iris identity authentication accessory 300 through the interface unit. After establishing the connection with the iris identity authentication accessory 300, the mobile terminal 100 first obtains the ID serial number of the iris identity authentication accessory 300, and then sends it to the server for ID identification to confirm whether the iris identity authentication accessory is a legally registered device to ensure identity. Legal and user security of authentication. If the ID serial number does not pass the authentication, the mobile terminal 100 ends the communication connection with the iris identity authentication accessory and prompts the user. If the ID serial number is authenticated, the mobile terminal 100 maintains the connection with the iris identity authentication accessory 300 and waits for the user to issue an indication to the iris identity authentication accessory 300 to obtain the iris identity comparison when performing mobile payment or application login. In this way, in the iris identity authentication system of the embodiment, the iris identity authentication accessory 300 can quickly establish an identity authentication system with any of the usual mobile terminals 100, especially for the user's private data, which can greatly improve the user. User experience and data security.

A8: The iris identity authentication accessory according to the present invention further includes a registered iris template storage module adapted to store the user's registered iris template data in an encrypted manner. A9: An iris identity authentication accessory according to the present invention, wherein the ID circuit module further comprises an encryption circuit and/or a decryption circuit. A10: The iris identity authentication accessory according to the present invention, wherein the optical lens component further comprises a lens, a lens mount adapted to fix the lens, and a filter adapted to allow infrared light to pass therethrough. A11: The iris identity authentication accessory of A10, wherein the optical lens component further comprises a focal length adjustment unit adapted to adjust a focal length of the lens. A12: The iris identity authentication accessory according to A10 or A11, wherein after the interface unit is physically connected to the mobile terminal, the lens imaging direction and the display screen of the mobile terminal connected thereto are on the same side of the mobile terminal. A13: An iris identity authentication accessory in accordance with the present invention, further comprising at least one LED light adapted to provide illumination for iris imaging. A14: The iris identity authentication accessory according to A13, further comprising an LED light control module adapted to adjust the mode of the LED light and/or the brightness of the LED light. A15: The iris identity authentication accessory of A13, wherein the mode of the LED light comprises a constant light mode and a blinking mode. A16: The iris identity authentication accessory of A14, wherein the LED light control module is further adapted to adjust the brightness of the LED light according to a predetermined mode to obtain an electronic image of the user's pupil and thus zooming. A17: The iris identity authentication accessory of A16, wherein the LED light comprises an infrared light LED Or one of the visible LEDs.

A19: An iris identity authentication system according to the present invention, wherein the registered iris template data of the user is stored in a registered iris template memory of an iris identity authentication attachment. A20: An iris identity authentication system according to the present invention, wherein the registered iris template data of the user is stored in a mobile terminal or a server. A21: An iris identity authentication system according to the present invention, wherein the mobile terminal further comprises a mobile payment unit adapted to send an identity authentication request to the iris identity authentication unit and to receive the identity authentication result from the iris identity authentication unit. A22: The iris identity authentication system according to the present invention further includes: an image processing unit, configured to analyze a distance between the user and the iris identity authentication accessory according to a pupil distance of the user's eyes in the collected electronic image or a pupil diameter of the single eye, and generate a distance adjustment. The indication signal prompts the user to change the mobile terminal/iris identity authentication attachment to the eye distance. A23: The iris identity authentication system according to A22, wherein the image processing unit is further adapted to: calculate a pupil spacing of the two eyes in the electronic image or a pupil diameter of the single eye to analyze a distance between the user and the optical lens component to generate a distance adjustment control The signal is used to control the focal length adjustment unit in the iris authentication accessory to achieve autofocusing of the iris lens by the optical lens. A24: The iris identity authentication system according to the present invention, wherein the iris identity authentication unit is adapted to generate a user iris template according to an electronic image according to any one of the following manners, and according to the iris template and the user's registered iris template data. Aligning the results to authenticate the identity of the user: comparing the iris template and the registered iris template data of the user in the mobile terminal, and authenticating the identity of the user according to the comparison result; sending the iris template to In the server, the server compares the iris template with the registered iris template data of the user stored in the server, and receives the comparison result sent by the server to authenticate the user identity; and the iris template and the user's registration The iris template data is sent to the server, so that the server compares the iris template with the registered iris template data of the user, and receives the comparison result sent by the server to authenticate the user identity; and sends the iris template to the iris Identity authentication attachment so that the iris authentication attachment will be rainbow Iris template data registered user templates and iris authentication attachments stored the results in order to authenticate the user's identity than sending the comparison, iris authentication and receiving attachments. A26: The iris identity authentication accessory according to the present invention, wherein the interface unit comprises any one of a USB OTG interface, an audio jack or a headphone jack, a Bluetooth interface, and a WIFI interface. A27: The iris identity authentication accessory according to the present invention further includes a power supply unit adapted to supply power to the iris identity authentication accessory.

In addition, those skilled in the art will appreciate that, although some embodiments described herein include certain features that are included in other embodiments and not in other features, combinations of features of different embodiments are intended to be within the scope of the present invention. Different embodiments are formed and formed. For example, in the following claims, any one of the claimed embodiments can be used in any combination.

Furthermore, some of the described embodiments are described herein as a combination of methods or method elements that can be implemented by a processor of a computer system or by other means for performing the functions. Accordingly, a processor having the necessary instructions for implementing the method or method elements forms a means for implementing the method or method elements. Furthermore, the elements described herein of the device embodiments are examples of means for performing the functions performed by the elements for the purpose of carrying out the invention.

As used herein, the use of the ordinal "first", "second", "third", etc., to describe a generic object merely means a different instance referring to a similar object, and is not intended to imply such The objects being described must have a given order in time, space, ordering, or in any other way.

While the present invention has been described in terms of a limited number of embodiments, it will be understood by those skilled in the art that In addition, it should be noted that the language used in the specification has been selected primarily for the purpose of readability and teaching, and is not intended to be interpreted or limited. Therefore, many modifications and changes will be apparent to those skilled in the art without departing from the scope of the invention. The disclosure of the present invention is intended to be illustrative, and not restrictive, and the scope of the invention is defined by the appended claims.

Claims

An iris identity authentication attachment that includes:

An optical lens component adapted to optically image a region of interest comprising a user's iris;

An image sensor adapted to convert an optical image of a region of interest comprising a user's iris into an original electronic image;

An interface unit, configured to connect the iris identity authentication accessory to the mobile terminal, so that the iris identity authentication accessory communicates with the mobile terminal;

a data processing unit adapted to process the original electronic image output by the image sensor and transmit the processed electronic image to the mobile terminal through the interface unit, so that the mobile terminal compares the iris template and authenticates the user identity;

The ID circuit module includes at least one unique iris identity authentication accessory ID serial number storage area from which the mobile terminal can read the unique ID serial number.
The iris identity authentication accessory of claim 1 wherein said interface unit is further adapted to power the iris identity authentication accessory when connected to the mobile terminal.
The iris identity authentication accessory of claim 1 further comprising a power supply unit adapted to power the iris identity authentication accessory.
The iris identity authentication accessory of claim 1, wherein the interface unit comprises any one of a USB OTG interface, an audio jack or a headphone jack, a Bluetooth interface, and a WIFI interface.
The iris identity authentication accessory of claim 4, wherein the USB OTG interface comprises any one of a USB 2.0, a USB 3.0, and a MicroUSB interface.
The iris identity authentication accessory of claim 1 further comprising a housing, wherein said USB OTG interface is physically and fixedly coupled to the housing.
The iris identity authentication accessory of claim 1 wherein said data processing unit further comprises an encryption module adapted to perform an encryption process on said electronic image.
An iris identity authentication system comprising:

An iris identity authentication accessory according to any one of claims 1 to 7;

a mobile terminal, the mobile terminal comprising:

a display unit adapted to display a user's iris imaging in real time;

An interface unit, configured to connect with the iris identity authentication accessory and communicate to initiate an iris identity authentication accessory to collect an electronic image containing the characteristics of the user's eye, and read an ID serial number of the iris identity authentication accessory and transmit the same to the mobile terminal;

An iris identification accessory identification unit adapted to identify the iris identity authentication accessory according to an iris identity authentication attachment ID serial number; and

The iris identity authentication unit is adapted to generate a user iris template according to the electronic image, and authenticate the identity of the user according to the result of the comparison between the iris template and the registered iris template data of the user.
An iris identity authentication attachment that includes:

An optical lens component adapted to optically image a region of interest comprising a user's iris;

An image sensor adapted to convert an optical image of a region of interest comprising a user's iris into an original electronic image;

An interface unit, configured to connect the iris identity authentication accessory to the mobile terminal, so that the iris identity authentication accessory communicates with the mobile terminal;

An ID circuit module comprising at least one unique iris identity authentication accessory ID serial number storage area for reading a unique ID serial number therefrom by the mobile terminal;

Registering an iris template storage module adapted to store the user's registered iris template data in an encrypted manner;

a data processing unit adapted to process the original electronic image output by the image sensor to acquire an iris template, compare the iris template with the registered iris template data of the user, and send the comparison result to the mobile through the interface unit terminal.
An iris identity authentication system comprising:

The iris identity authentication accessory of claim 9;

a mobile terminal, the mobile terminal comprising:

An interface unit, configured to connect with and communicate with the iris identity authentication accessory, obtain an ID serial number of the iris identity authentication accessory, and compare the iris template with the registered iris template data of the user;

An iris identification accessory identification unit adapted to identify an iris identity authentication attachment according to an iris identity authentication attachment ID serial number; and

An iris identity authentication unit adapted to authenticate a user's identity based on the comparison result.