WO2017000357A1

WO2017000357A1 - Authorization and authentication method and apparatus, and related devices

Info

Publication number: WO2017000357A1
Application number: PCT/CN2015/085877
Authority: WO
Inventors: 陈历伟
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-06-30
Filing date: 2015-07-31
Publication date: 2017-01-05
Also published as: CN106326705A

Abstract

An authorization and authentication method and apparatus, and related devices. The method comprises: when it is necessary to acquire authorization and authentication information, collecting an electrocardiogram waveform of a current user to perform identity confirmation (S101); and after the current user passes the identity confirmation, acquiring the authorization and authentication information (S102). By means of the method, the difference of human electrocardiogram signals is used to perform identity confirmation, which can be applied to occasions of authorized payment and authorized login, for example: before a communication terminal such as a cellphone and a computer directly reads payment authentication information about a user, automatically identifying biological feature information about the user, i.e. an electrocardiogram waveform, to perform identity confirmation, and reading the payment authentication information for payment after the identity confirmation is passed. Therefore, the method has no impact on the user experience, and also increases the payment security.

Description

Authorization authentication method, device and related equipment

The present application claims priority to Chinese Patent Application No. 20151037272, filed on Jun. 30, 2015, the entire disclosure of which is incorporated herein by reference. In this application.

Technical field

The present invention relates to the field of terminal authorization authentication technologies, and in particular, to an authorization authentication method, device, and related device.

Background technique

When users purchase online through mobile phones or home computers, they may involve secret-free payment. The secret-free payment means that the user does not need to input any account password to pay directly, but the confidential payment requires authentication information to be successful, for example, the current market. There is a more popular wearable authentication method: writing authentication information into a wearable device chip, wearing the wearable device directly on the body, or a portable device integrated into the user's clothes or accessories, such as a watch only , smart bracelets, etc. When the mobile phone pays, the connected wearable device reads the authentication information for authentication, so that the secret payment can be made.

However, there is a security risk loophole in the prior art: when the mobile phone and the wearable device are in the hands of others, it is equivalent to losing the payment password, and others can pay for the secret, which is very risky.

Summary of the invention

The technical problem to be solved by the present invention is to provide an authorization authentication method, device and related equipment, improve the security of authorization authentication such as payment, and reduce the payment risk.

The technical solution adopted by the present invention is that the authorization authentication method includes:

When the authorization authentication information needs to be obtained, the current user's ECG waveform is collected for identity confirmation;

After the current user is authenticated by the identity, the authorization authentication information is acquired.

Further, the current user's ECG waveform is collected for identity confirmation, including:

Collecting the current user's ECG waveform compared to the pre-stored user's ECG waveform Yes, if they match, they will be confirmed by identity, otherwise the identity confirmation will fail.

Further, the authorization authentication information includes: authentication information required for payment, a payment password required for payment, a verification code required for payment, or a login password required for login;

The electrocardiogram waveform includes a waveform of at least one of a P wave, a QRS wave, and a T wave in the electrocardiographic signal.

The invention also provides an authorization authentication method, and the process executed on the communication terminal side includes:

When the authorization authentication information needs to be obtained, the wearable device is triggered to collect the current user's ECG waveform for identity confirmation, and receive the identity confirmation result sent by the wearable device;

The authorization authentication information is acquired when the current user confirms by identity.

Further, triggering the wearable device to collect the current user's ECG waveform for identity confirmation, including:

Trigger the wearable device to collect the current user's ECG waveform and compare it with the pre-stored user's ECG waveform. If they match, the identity is confirmed, otherwise the identity confirmation fails.

The present invention also provides an authorization authentication method, and the process performed on the wearable device side includes:

Under the trigger of the communication terminal, the current user's electrocardiogram waveform is collected for identity confirmation, and the result of the identity confirmation is sent to the communication terminal, so that the communication terminal obtains the authorization authentication information when the current user confirms by the identity. .

The current user's ECG waveform is compared with the pre-stored user's ECG waveform. If they match, the identity is confirmed, otherwise the identity confirmation fails.

The electrocardiogram waveform includes: at least one of a P wave, a QRS wave, and a T wave in the electrocardiographic signal One of the waveforms.

The present invention also provides an authorization authentication device, which is disposed in a communication terminal, and the device includes:

The triggering module is configured to trigger the wearable device to collect the current user's ECG waveform for identity confirmation when receiving the authorization authentication information, and receive the identity confirmation result sent by the wearable device;

The authorization authentication module is configured to obtain the authorization authentication information when the current user confirms by identity.

The present invention also provides an authorization authentication device, which is disposed in a wearable device, and the device includes:

The acquisition comparison module is configured to collect the current user's electrocardiogram waveform for identity confirmation under the trigger of the communication terminal;

The result output module is configured to send the result of the identity confirmation to the communication terminal, so that the communication terminal obtains the authorization authentication information when the current user confirms by the identity.

The invention also provides a communication terminal comprising a communication bus, a transceiver, a memory and a processor, wherein:

The communication bus is configured to implement connection communication between the transceiver device, the memory, and the processor;

The memory stores a set of program codes, and the processor calls the program code stored in the memory to perform the following operations:

The transceiver device is configured to trigger the wearable device to collect the current user's ECG waveform for identity confirmation when receiving the authorization authentication information, and receive the identity confirmation result sent by the wearable device;

The processor is configured to obtain the authorization authentication information when the current user confirms by identity.

The present invention also provides a wearable device including a communication bus, a transceiver, a memory, and Processor, where:

The processor is configured to collect, according to a trigger of the communication terminal, an ECG waveform of the current user for identity confirmation;

The transceiver device is configured to send the result of the identity confirmation to the communication terminal, so that the communication terminal obtains the authorization authentication information when the current user confirms by the identity.

With the above technical solution, the present invention has at least the following advantages:

The authorization authentication method, device and related device according to the present invention use the difference of the human body ECG signal for identity confirmation, and can be applied to authorized payment and authorized login, etc., for example, directly reading the user in a communication terminal such as a mobile phone or a computer. Before the payment of the authentication information, the user biometric information, that is, the ECG waveform, is automatically identified for identity confirmation, and the payment authentication information can be read for payment after the identity confirmation is passed. Therefore, it does not affect the user's experience, but also increases the security of payment.

DRAWINGS

1 is a flowchart of an authorization authentication method according to a first embodiment of the present invention;

2 is a flowchart of performing an authorization authentication method on a communication terminal side according to a second embodiment of the present invention;

3 is a flowchart of performing an authorization authentication method on a wearable device side according to a third embodiment of the present invention;

4 is a schematic structural diagram of a component of an authorization authentication apparatus according to a fourth embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a component of an authorization authentication apparatus according to a fifth embodiment of the present invention; FIG.

Figure 6 is a block diagram showing the overall design of an eighth embodiment of the present invention;

7 is a schematic diagram of a typical electrocardiographic signal according to an eighth embodiment of the present invention;

8 is a flowchart of an ECG waveform identification process for a confidential payment according to an eighth embodiment of the present invention;

9 is a schematic structural diagram of a communication terminal according to a ninth embodiment of the present invention;

FIG. 10 is a schematic structural diagram of a wearable device according to a ninth embodiment of the present invention.

detailed description

The present invention will be described in detail below with reference to the accompanying drawings and preferred embodiments.

A first embodiment of the present invention, an authorization authentication method, as shown in FIG. 1, includes the following specific steps:

In step S101, when the authorization authentication information needs to be acquired, the current user's electrocardiogram waveform is collected for identity confirmation;

Specifically, the current user's ECG waveform is collected for identity confirmation, including:

The current user's ECG waveform is compared with the pre-stored user's ECG waveform. If they match, the identity is confirmed, otherwise the identity confirmation fails. In the embodiment of the present invention, the electrocardiogram waveform for comparison includes: a waveform of at least one of a P wave, a QRS wave, and a T wave in the electrocardiographic signal.

In the embodiment of the present invention, the authorization authentication information includes: authentication information required for payment, a payment password required for payment, a verification code required for payment, or a login password required for login;

Step S102: After the current user passes the identity confirmation, the authorization information is acquired.

Specifically, obtaining the authorization authentication information may be used for payment authentication, and may also be used for login authentication.

The method flow described in this embodiment may all be performed by one communication terminal, such as a smart terminal such as a mobile phone. Simply install the ECG module for collecting the user's ECG waveform in the mobile phone, and improve the authorization authentication process for various applications in the mobile phone. When the authorization authentication information needs to be obtained, the acquisition module is triggered to collect the user. The electrocardiogram waveform has already appeared in the prior art, and the user only needs to ensure that the collection module contacts the designated part of the body, and the operation is convenient.

In the following, based on the first embodiment, the introduction is completed by the communication terminal and the wearable device. Two embodiments of the above authorization authentication process are the second embodiment and the third embodiment.

A second embodiment of the present invention is an authorization authentication method. As shown in FIG. 2, the process performed on the communication terminal side includes the following specific steps:

Step S201, when the authorization authentication information needs to be obtained, triggering the wearable device to collect the current user's electrocardiogram waveform for identity confirmation, and receiving the identity confirmation result sent by the wearable device;

Specifically, in step S201, the wearable device is triggered to collect the current user's electrocardiogram waveform for identity confirmation, including:

In this embodiment, the authorization authentication information includes: authentication information required for payment, a payment password required for payment, a verification code required for payment, or a login password required for login; authorization authentication The information may be stored in the wearable device or stored in the communication terminal.

Step S202: Acquire the authorization authentication information when the current user confirms by identity.

A third embodiment of the present invention is an authorization authentication method. As shown in FIG. 3, the process performed on the wearable device side includes:

Step S301, collecting the current user's electrocardiogram waveform for identity confirmation under the trigger of the communication terminal;

Specifically, in step S301, the current user's electrocardiogram waveform is collected for identity confirmation, including:

Step S302: Send the result of the identity confirmation to the communication terminal, so that the communication terminal obtains the authorization authentication information when the current user confirms by the identity.

Specifically, the authorization authentication information includes: authentication information required for payment, a payment password required for payment, a verification code required for payment, or a login password required for login;

The fourth embodiment of the present invention corresponds to the second embodiment. The embodiment introduces an authorization authentication device, which is disposed in the communication terminal. As shown in FIG. 4, the device includes the following components:

The triggering collection module 401 is configured to trigger the wearable device to collect the current user's ECG waveform for identity confirmation when receiving the authorization authentication information, and receive the identity confirmation result sent by the wearable device;

The authorization authentication module 402 is configured to obtain the authorization authentication information when the current user confirms by identity.

The fifth embodiment of the present invention corresponds to the third embodiment. This embodiment describes an authorization authentication device, which is disposed in a wearable device. As shown in FIG. 5, the device includes the following components:

The collection comparison module 501 is configured to collect the current user's electrocardiogram waveform for identity confirmation under the trigger of the communication terminal;

The result output module 502 is configured to send the result of the identity confirmation to the communication terminal, so that the communication terminal obtains the authorization authentication information when the current user confirms by the identity.

A sixth embodiment of the present invention introduces a communication terminal including the authorization authentication apparatus in the fourth embodiment. As shown in FIG. 9, the communication terminal of this embodiment includes a communication bus 900, a transceiver 901, a memory 902, and a processor 903. The number of processors 903 of the communication terminal may be one or more, and one processor is shown in FIG. For example), where:

The communication bus 900 is configured to implement connection communication between the transceiver device 901, the memory 902, and the processor 903;

The memory 902 stores a set of program codes, and the processor 903 calls the program code stored in the memory 902 for performing the following operations:

The transceiver device 901 is configured to trigger the wearable device to collect the current user's ECG waveform for identity confirmation when receiving the authorization authentication information, and receive the identity confirmation result sent by the wearable device;

The processor 903 is configured to perform acquisition of the authorization authentication information when the current user confirms by identity.

A seventh embodiment of the present invention introduces a wearable device including the authorization authentication device in the fifth embodiment. As shown in FIG. 10, the wearable device of this embodiment includes a communication bus 1000, a transceiver 1001, a memory 1002, and a processor 1003. The number of processors 1003 of the wearable device may be one or more, one in FIG. The processor is an example), where:

The communication bus 1000 is configured to implement connection communication between the transceiver device 1001, the memory 1002, and the processor 1003.

The memory 1002 stores a set of program codes, and the processor 1003 calls the program code stored in the memory 1002 for performing the following operations:

The processor 1003 is configured to collect, according to a trigger of the communication terminal, an ECG waveform of the current user for identity confirmation;

The transceiver device 1001 is configured to send the result of the identity confirmation to the communication terminal, so that the communication terminal obtains the authorization authentication information when the current user confirms by the identity.

According to the eighth embodiment of the present invention, the present embodiment is based on the foregoing embodiment, and a process in which a mobile intelligent terminal cooperates with a wearable device to perform double-authentication of the secret-free payment as an example, and is described in conjunction with FIGS. 6-8. An application example of the present invention.

The solution of the embodiment of the present invention provides a method for double authentication of a wearable device for secret payment. The ECG chip is embedded on the wearable device, and the ECG chip can interact with the main chip on the wearable device; the ECG chip Collecting, storing, and comparing the ECG signature waveforms; when the mobile intelligent terminal needs to write the user payment authentication information for the first time, the ECG chip starts and automatically collects and stores the ECG characteristic waveform of the user. Before the mobile intelligent terminal directly reads the user payment authentication information, the user biometric information, that is, the ECG waveform, is automatically identified for identity confirmation, and the payment authentication information can be read to perform the confidential payment. Therefore, it does not affect the user's experience, but also increases the security of payment.

The overall design block diagram of the embodiment of the present invention is shown in FIG. 6. The mobile intelligent terminal can perform connection communication with the open wearable device through wireless communication methods such as Bluetooth or infrared. Wearable device built-in heart The electric chip has an acquisition module, a storage module and a comparison module. The main chip of the wearable device and the ECG chip can communicate through the hardware interface. The ECG chip is controlled by the main chip of the wearable device.

As shown in FIG. 7, a typical electrocardiographic signal is composed of a P wave, a QRS wave, and a T wave. The waveforms in the electrocardiogram are the combined effects of many myocardial cell action potentials on the surface. P wave reflects the depolarization process of atrial muscle, its frequency is low, mainly between 10 ~ 15Hz; QRS wave reflects the depolarization process of ventricular muscle, its waveform is steep, the frequency is mainly between 10 ~ 40Hz; The T wave reflects the repolarization process of the ventricular muscle, and the frequency is mainly between 10 and 15 Hz;

The identification assumes that the waveform of the ECG signal remains relatively stable for a certain period of time. This condition is basically satisfied by normal people. Even during anxiety, stress, and exercise, the QRS waveform remains stable due to heart rate changes, thus ensuring individual characteristics. Stability, universality and collectability. At the same time, the difference between the individual ECG main receptor type, age, weight, mood, gender, heart position, heart size, heart geometry, chest structure, exercise status, cardiac physiological characteristics, etc., therefore also meet the unique requirements of biological identification .

As shown in FIG. 8, the ECG waveform identification process for the confidential payment of the embodiment of the present invention is as follows:

Step 1: The user initiates a payment request;

Step 2: The mobile intelligent terminal reads the authentication information from the wearable device.

Step 3: The wearable device starts the ECG chip;

Step 4, the ECG chip collects a waveform diagram of the user's electrocardiogram;

Step 5, reading characteristic waveform data stored in the ECG database;

Step 6, the ECG chip compares the ECG characteristic data of the user;

Step 7, compare the results of the identity passed?

Step 8, if passed, the authentication information can be read to perform secret-free payment;

Step 9. If the authentication information is not passed, the authentication information cannot be read.

The method for performing double authentication for the wearable device of the wearable device according to the embodiment of the present invention, before the mobile intelligent terminal directly reads the user payment authentication information from the wearable device, the wearable device automatically recognizes the user's biometric information ECG waveform for identity Confirmation does not affect the user's experience, but also increases the security of payment.

The technical means and functions of the present invention for achieving the intended purpose can be more deeply and specifically understood by the description of the specific embodiments. However, the accompanying drawings are only for the purpose of illustration and description, and are not intended to limit.

Claims

An authorization authentication method, characterized in that it comprises:

When the authorization authentication information needs to be obtained, the current user's ECG waveform is collected for identity confirmation;

After the current user is authenticated by the identity, the authorization authentication information is acquired.
The authorization authentication method according to claim 1, wherein the current user's electrocardiogram waveform is collected for identity confirmation, including:

The current user's ECG waveform is compared with the pre-stored user's ECG waveform. If they match, the identity is confirmed, otherwise the identity confirmation fails.
The authorization authentication method according to claim 1 or 2, wherein the authorization authentication information comprises: authentication information required for payment, a payment password required for payment, a verification code required for payment, Or the login password required when logging in;

The electrocardiogram waveform includes a waveform of at least one of a P wave, a QRS wave, and a T wave in the electrocardiographic signal.
An authorization authentication method, characterized in that the process performed on the communication terminal side includes:

When the authorization authentication information needs to be obtained, the wearable device is triggered to collect the current user's ECG waveform for identity confirmation, and receives the identity confirmation result sent by the wearable device; and when the current user confirms by the identity, the authorization authentication information is performed. Obtain.
The authorization authentication method according to claim 4, wherein the triggering the wearable device to collect the current user's electrocardiogram waveform for identity confirmation comprises:

Trigger the wearable device to collect the current user's ECG waveform and compare it with the pre-stored user's ECG waveform. If they match, the identity is confirmed, otherwise the identity confirmation fails.
The authorization authentication method according to claim 4 or 5, wherein the authorization authentication information comprises: authentication information required for payment, a payment password required for payment, a verification code required for payment, Or the login password required when logging in;

The electrocardiogram waveform includes a waveform of at least one of a P wave, a QRS wave, and a T wave in the electrocardiographic signal.
An authorization authentication method, characterized in that the process performed on the wearable device side includes:

Under the trigger of the communication terminal, the current user's electrocardiogram waveform is collected for identity confirmation, and the result of the identity confirmation is sent to the communication terminal, so that the communication terminal obtains the authorization authentication information when the current user confirms by the identity. .
The authorization authentication method according to claim 7, wherein the collecting the current user's electrocardiogram waveform for identity confirmation comprises:

The current user's ECG waveform is compared with the pre-stored user's ECG waveform. If they match, the identity is confirmed, otherwise the identity confirmation fails.
The authorization authentication method according to claim 7 or 8, wherein the authorization authentication information comprises: authentication information required for payment, a payment password required for payment, a verification code required for payment, Or the login password required when logging in;

The electrocardiogram waveform includes a waveform of at least one of a P wave, a QRS wave, and a T wave in the electrocardiographic signal.
An authorization authentication device is provided in a communication terminal, the device comprising:

The triggering module is configured to trigger the wearable device to collect the current user's ECG waveform for identity confirmation when receiving the authorization authentication information, and receive the identity confirmation result sent by the wearable device;

The authorization authentication module is configured to obtain the authorization authentication information when the current user confirms by identity.
An authorization authentication device is provided in a wearable device, the device comprising:

The acquisition comparison module is configured to collect the current user's electrocardiogram waveform for identity confirmation under the trigger of the communication terminal;

The result output module is configured to send the result of the identity confirmation to the communication terminal, so that the communication terminal obtains the authorization authentication information when the current user confirms by the identity.
A communication terminal, comprising: a communication bus, a transceiver, a memory, and a processor, wherein:

The communication bus is configured to implement connection communication between the transceiver device, the memory, and the processor;

The memory stores a set of program codes, and the processor calls the program code stored in the memory to perform the following operations:

The transceiver device is configured to trigger the wearable device to collect the current user's ECG waveform for identity confirmation when receiving the authorization authentication information, and receive the identity confirmation result sent by the wearable device;

The processor is configured to obtain the authorization authentication information when the current user confirms by identity.
A wearable device, comprising: a communication bus, a transceiver, a memory, and a processor, wherein:

The communication bus is configured to implement connection communication between the transceiver device, the memory, and the processor;

The memory stores a set of program codes, and the processor calls the program code stored in the memory to perform the following operations:

The processor is configured to collect, according to a trigger of the communication terminal, an ECG waveform of the current user for identity confirmation;

The transceiver device is configured to send the result of the identity confirmation to the communication terminal, so that the communication terminal obtains the authorization authentication information when the current user confirms by the identity.