WO2020125260A1

WO2020125260A1 - Identity authentication method and device, storage medium, and electronic apparatus

Info

Publication number: WO2020125260A1
Application number: PCT/CN2019/116368
Authority: WO
Inventors: 黄晓庆; 郭潮波; 骆磊
Original assignee: 深圳前海达闼云端智能科技有限公司
Priority date: 2018-12-17
Filing date: 2019-11-07
Publication date: 2020-06-25
Also published as: CN109766679A; CN109766679B

Abstract

The present application relates to an identity authentication method and device, a storage medium, and an electronic apparatus. The method comprises: obtaining first DNA data of a target object to be verified; comparing the first DNA data with every DNA data item in a database so as to obtain a similarity between each DNA data item in the database and the first DNA data; if each DNA data item in the database contains second DNA data having a similarity to the first DNA data greater than or equal to a first threshold, determining that the target object is a first user corresponding to the second DNA data; and granting, according to a user level of the first user, a corresponding use permission to the target object. Identity authentication can be achieved by means of the collected DNA data of the target object, thereby reducing influences of environmental factors on an authentication process, and improving the security of the process.

Description

Identity authentication method, device, storage medium and electronic equipment

Technical field

The present disclosure relates to the technical field of equipment security, and in particular, to an identity authentication method, device, storage medium, and electronic equipment.

Background technique

At present, most types of electronic devices do not recognize users. For example, home robots, regardless of who gives orders, will be executed in the same way, lacking intelligence. For some electronic devices, a certain authentication method is used to authenticate the user's identity, and only the authenticated user has the right to use the electronic device. For example, fingerprint recognition or facial recognition methods are currently popular to authenticate users. Because different users can be identified, each user can be processed in a differentiated manner, and the user experience can be greatly improved.

However, there are still some shortcomings in the current fingerprint recognition or facial recognition, for example, it is easily affected by the environment, for example, the face is easily affected by the brightness of the ambient light, and the recognition rate will be significantly reduced in a low-brightness environment. In addition, it will also be affected by the angle of the face influences. In addition, the current identity authentication methods still have some security problems. For example, there is a possibility of forgery for fingerprint recognition or facial recognition. Especially for fingerprint recognition, the difficulty of forgery is lower, and it is easier to forge, so the security is lower.

Summary of the invention

The purpose of the present disclosure is to provide an identity authentication method, device, storage medium, and electronic equipment for solving the problems that the existing identity authentication technology is easily affected by the environment and has low security.

To achieve the above objective, in a first aspect of the present disclosure, an identity authentication method is provided. The method includes:

Obtain the first DNA data of the target object to be verified;

Comparing the first DNA data with all DNA data in the database to obtain the similarity between each DNA data in the database and the first DNA data;

When there is second DNA data whose similarity to the first DNA data is greater than or equal to a first threshold in all DNA data in the database, it is determined that the target object is the first corresponding to the second DNA data user;

According to the user level of the first user, corresponding usage rights are opened for the target object.

Optionally, the opening of corresponding usage rights for the target object according to the user level of the first user includes:

When the first user is the user with the highest level, the corresponding use authority is opened for the target object according to the highest authority level;

When the first user is not the highest-ranking user, according to the similarity between the first DNA data and the DNA data belonging to the highest-ranking user among all DNA data in the database, the corresponding object is opened for the target object Use permissions.

Optionally, when the first user is not the highest-ranking user, the target is based on the similarity between the first DNA data and the DNA data of the highest-ranking user among all DNA data in the database. The object opens corresponding usage rights, including:

When the first user is not the highest-ranking user, each target DNA data and the first DNA data are obtained from the similarity between each DNA data in the database and the first DNA data Similarity, the target DNA data is the DNA data corresponding to the highest level user in the database;

Determining the highest similarity among the similarities between each target DNA data and the first DNA data;

Determining the first permission level corresponding to the first similarity interval in which the highest similarity is located in multiple similarity intervals, the multiple similarity intervals corresponding to preset multiple permission levels, respectively, The permission level is lower than the highest permission level;

According to the first permission level, corresponding use permissions are opened for the target object.

Optionally, the method further includes: when the second DNA data does not exist in all DNA data in the database, determining that the target object is the first authentication;

According to the similarity between the first DNA data and the DNA data belonging to the user of the highest level among all the DNA data in the database, corresponding usage rights are opened for the target object.

Optionally, according to the similarity between the first DNA data and the DNA data of the highest-ranking user among all the DNA data in the database, opening corresponding usage rights for the target object includes:

When it is determined that the target object has the credential of the user of the highest level, it is determined that the target object is the user of the highest level;

Determine the permission level of the target object as the highest permission level; or,

When it is determined that the target object does not have the voucher, from the similarity between each DNA data in the database and the first DNA data, obtain the data of each target DNA data and the first DNA data Similarity, the target DNA data is the DNA data corresponding to the highest level user in the database;

When the highest similarity is less than the second threshold, it is determined that the target object has not passed authentication;

When the highest similarity is greater than or equal to the second threshold, determine the second permission level corresponding to the second similarity interval in which the highest similarity is located in multiple similarity intervals, as the permission of the target object Level, the multiple similarity intervals respectively correspond to multiple preset permission levels, and the multiple permission levels are lower than the highest permission level;

According to the permission level of the target object, the corresponding use permission is opened for the target object.

Optionally, the method further includes: dividing the value range between the first threshold and the second threshold to obtain multiple consecutive intervals as the multiple similarity intervals;

Corresponding the plurality of similarity intervals to the plurality of permission levels respectively, and the permission levels of the plurality of permission levels are positively related to the value range of the plurality of similarity intervals.

Optionally, the opening of corresponding use rights for the target object according to the permission level of the target object includes:

Register the target object as a second user;

Storing the correspondence between the second user and the first DNA data, user indication information, and the highest similarity degree in the database, and the user level indication information is used to indicate whether the second user Is the highest level user;

Register the target object as a second user;

Storing the correspondence between the second user, the first DNA data, and user permission indication information in the database, where the user permission indication information is used to indicate the permission level that the second user has;

Acquiring user authority indication information corresponding to the first user stored during the first authentication of the first user;

Acquiring the permission level of the first user according to the user permission instruction information corresponding to the first user;

According to the permission level of the first user, the corresponding use permission is opened for the target object.

Optionally, when there is second DNA data whose similarity to the first DNA data is greater than or equal to a first threshold in all the DNA data, it is determined that the target object corresponds to the second DNA data Of the first users, including:

Acquiring the first biological characteristic of the target object;

When there is second DNA data whose similarity to the first DNA data is greater than or equal to a first threshold in all the DNA data, determine the first user corresponding to the second DNA data;

Acquiring the second biometrics of the first user stored in the database;

When the first biometric matches the second biometric, it is determined that the target object is the first user.

In a second aspect, an identity authentication device is provided, the device including:

The collection module is used to obtain the first DNA data of the target object to be verified;

A comparison module, configured to compare the first DNA data with all DNA data in a database to obtain the similarity between each DNA data in the database and the first DNA data;

The user confirmation module is configured to determine that the target object is the second when all DNA data in the database has second DNA data whose similarity to the first DNA data is greater than or equal to a first threshold The first user corresponding to the DNA data;

The first authorization module is configured to open corresponding usage rights for the target object according to the user level of the first user.

Optionally, the first authorization module is used to:

Optionally, the first authorization module includes:

The first similarity recognition submodule is used to obtain each of the similarities between each DNA data in the database and the first DNA data when the first user is not the user with the highest rank The similarity between the target DNA data and the first DNA data, the target DNA data is the DNA data corresponding to the highest level user in the database;

A first similarity determination submodule, configured to determine the highest similarity among the similarities between each target DNA data and the first DNA data;

The first permission confirmation submodule is used to determine the first permission level corresponding to the first similarity interval in which the highest similarity is located in multiple similarity intervals, and the multiple similarity intervals are respectively different from the preset Corresponding to multiple permission levels, the multiple permission levels are lower than the highest permission level;

The first authorization submodule is configured to open corresponding usage rights for the target object according to the first authority level.

Optionally, the device further includes:

A determining module, configured to determine that the target object is the first authentication when the second DNA data does not exist in all DNA data in the database;

The second authorization module is configured to open corresponding usage rights for the target object based on the similarity between the first DNA data and the DNA data of the user with the highest rank among all the DNA data in the database.

Optionally, the second authorization module includes:

An identity verification submodule, configured to determine that the target object is the highest level user when it is determined that the target object has the credential of the highest level user;

A second permission confirmation submodule, configured to determine the permission level of the target object as the highest permission level;

The second similarity recognition sub-module is used to obtain each target from the similarity between each DNA data in the database and the first DNA data when it is determined that the target object does not have the credential The similarity between the DNA data and the first DNA data, and the target DNA data is the DNA data corresponding to the highest level user in the database;

A second similarity determination submodule, configured to determine the highest similarity among the similarities between each target DNA data and the first DNA data;

A second authorization submodule, configured to determine that the target object has not passed authentication when the highest similarity is less than the second threshold;

The second permission confirmation submodule is configured to determine, when the highest similarity is greater than or equal to a second threshold, the second similarity interval in which the highest similarity is located among multiple similarity intervals Two permission levels, which are the permission levels of the target object, the multiple similarity intervals correspond to preset multiple permission levels, and the multiple permission levels are lower than the highest permission level;

The second authorization sub-module is also used to open corresponding usage rights for the target object according to the permission level of the target object.

Optionally, the device further includes:

An interval dividing module, configured to divide the value range between the first threshold and the second threshold to obtain multiple consecutive intervals as the multiple similarity intervals;

The correlation module is configured to correspond the multiple similarity intervals to the multiple permission levels, and the permission levels of the multiple permission levels are positively related to the value range of the multiple similarity intervals.

Optionally, the second authorization submodule is used to:

Register the target object as a second user;

Optionally, the second authorization submodule is used to:

Register the target object as a second user;

Optionally, the first authorization module includes:

An information acquisition submodule, configured to acquire the user authority indication information corresponding to the first user and stored during the first authentication of the first user;

A permission acquisition sub-module for acquiring the permission level of the first user according to the user permission instruction information corresponding to the first user;

The third authorization submodule is configured to open corresponding usage rights for the target object according to the authority level of the first user.

Optionally, the user confirmation module includes:

A biometrics acquisition sub-module for acquiring the first biometrics of the target object;

The user determination sub-module is used to determine the first corresponding to the second DNA data when there is second DNA data whose similarity to the first DNA data is greater than or equal to a first threshold in all the DNA data user;

A reading sub-module for acquiring the second biometrics of the first user stored in the database;

The user confirmation sub-module determines that the target object is the first user when the first biological feature matches the second biological feature.

In a third aspect, a computer-readable storage medium is provided on which a computer program is stored, and when the computer program is executed by a processor, the steps of the method of the first aspect described above are implemented.

In a fourth aspect, an electronic device is provided, including: a memory on which a computer program is stored;

A processor is configured to execute the computer program in the memory to implement the steps of the method in the first aspect.

In the above technical solution, by acquiring the first DNA data of the target object to be verified; the first DNA data is compared with all the DNA data in the database to obtain each DNA data in the database and the first DNA data and Similarity; when there is second DNA data whose similarity to the first DNA data is greater than or equal to the first threshold in all DNA data in the database, determine that the target object is the first user corresponding to the second DNA data; The user level of the first user is to open corresponding usage rights for the target object. Through the above technical solution, identity authentication can be realized through the collected DNA data of the target object, which can reduce the influence of environmental factors on the authentication process, and because the DNA is not forged, the security of the authentication process can be improved.

Other features and advantages of the present disclosure will be described in detail in the detailed description section that follows.

BRIEF DESCRIPTION

The drawings are used to provide a further understanding of the present disclosure, and constitute a part of the specification, together with the following specific embodiments to explain the present disclosure, but do not constitute a limitation of the present disclosure. In the drawings:

FIG. 1 is a schematic flowchart of an identity authentication method according to an exemplary embodiment of the present disclosure.

Fig. 2 is a schematic flowchart of a method for determining authority according to an exemplary embodiment of the present disclosure.

Fig. 3 is a schematic flowchart of another method for determining authority according to an exemplary embodiment of the present disclosure.

FIG. 4 is a schematic flowchart of another identity authentication method according to an exemplary embodiment of the present disclosure.

FIG. 5 is a schematic flowchart of still another identity authentication method according to an exemplary embodiment of the present disclosure.

FIG. 6 is a schematic flowchart of still another method for determining authority according to an exemplary embodiment of the present disclosure.

7 is a schematic flowchart of a user determination method according to an exemplary embodiment of the present disclosure.

Fig. 8 is a block diagram of an identity authentication device according to an exemplary embodiment of the present disclosure.

Fig. 9 is a block diagram of a first authorization module according to an exemplary embodiment of the present disclosure.

Fig. 10 is a block diagram of another identity authentication device according to an exemplary embodiment of the present disclosure.

Fig. 11 is a block diagram of a second authorization module according to an exemplary embodiment of the present disclosure.

Fig. 12 is a block diagram of another first authorization module according to an exemplary embodiment of the present disclosure.

Fig. 13 is a block diagram of a user confirmation module according to an exemplary embodiment of the present disclosure.

Fig. 14 is a block diagram of an electronic device according to an exemplary embodiment.

detailed description

The specific embodiments of the present disclosure will be described in detail below with reference to the drawings. It should be understood that the specific embodiments described herein are only used to illustrate and explain the present disclosure, and are not intended to limit the present disclosure.

FIG. 1 is a schematic flowchart of an identity authentication method according to an exemplary embodiment of the present disclosure. The method may be applied to an electronic device. As shown in FIG. 1, the method may include the following steps:

Step 101: Obtain first DNA data of a target object to be verified.

Exemplarily, the aforementioned electronic device may be, for example, a robot, and the robot is provided with a device capable of detecting DNA, such as a DNA detection sensor. Compared with the original technology, blood analysis is needed for comparison and verification, and a longer waiting time is required. Current DNA detection sensors can collect DNA data through any tissue containing cells, such as hair, dander, sweat, saliva, etc. can be used as samples to identify and collect DNA data. Correspondingly, the robot may also be provided with a cleaning device (the cleaning device and the DNA detection sensor may be an integrated device, used to prevent the residual substances from the previous detection from affecting the accuracy of the next detection, or may be a one-time one Device).

When a target object, such as a person wants to use the robot, the DNA detection sensor can detect any substance in the target object's hair, dander, sweat, or saliva to obtain the target object's DNA data.

Step 102: Compare the first DNA data with all the DNA data in the database to obtain the similarity between each DNA data in the database and the first DNA data.

For example, one or more DNA data may be recorded in the database, and the one or more DNA data may be obtained by the electronic device and stored in the database when the user who has previously used the electronic device authenticates for the first time Yes, when there are multiple DNA data in the database, it means that there have been multiple different users who have completed the authentication.

Therefore, the currently collected first DNA data can be compared with all the DNA data in the database to obtain the similarity between each DNA data in the database and the first DNA data.

Step 103: When there is second DNA data whose similarity to the first DNA data is greater than or equal to the first threshold in all DNA data in the database, it is determined that the target object is the first user corresponding to the second DNA data.

Wherein, if the second DNA data exists, the similarity with the first DNA data of the current target object reaches the first threshold, it may indicate that the target object is not the first authentication, and it can be considered that the current target object It is the first user corresponding to the second DNA data. Therefore, the first threshold should be set to a higher value, for example, the first threshold should be a threshold that can be regarded as the same person in genetic biology, for example, the first threshold is set to 99.999% (the threshold can also be based on safety Sexual needs further increase or decrease), if there is second DNA data with a similarity to the first DNA data greater than or equal to 99.999%, it can be considered that the target object with the first DNA data currently being authenticated is the second The first user corresponding to the DNA data.

Step 104: According to the user level of the first user, open corresponding usage rights for the target object.

Since the first user is not the first authentication when the above-mentioned second DNA data exists, the current authority level of the target object can be determined according to the information related to the user level that has been determined when the first user is authenticated for the first time To open corresponding usage rights for them.

In the above technical solution, by acquiring the first DNA data of the target object to be verified; comparing the first DNA data with all the DNA data in the database to obtain each DNA data and the first DNA data of all the DNA data Similarity to; when all DNA data has second DNA data whose similarity to the first DNA data is greater than or equal to the first threshold, determine that the target object is the first user corresponding to the second DNA data; according to the A user's user level opens corresponding usage rights for the target object. Through the above technical solution, identity authentication can be realized through the collected DNA data of the target object, which can reduce the influence of environmental factors on the authentication process, and because the DNA is not forged, the security of the authentication process can be improved.

FIG. 2 is a schematic flowchart of a method for determining authority according to an exemplary embodiment of the present disclosure. As shown in FIG. 2, in the first implementation, step 104 is based on the user level of the first user. The steps for the object to open the corresponding use rights may include the following steps:

Step 1041: When the first user is the highest-level user, the highest authority level is opened for the target object.

In step 1042, when the first user is not the highest-ranking user, the corresponding usage right is opened for the target object according to the similarity between the first DNA data and the DNA data of the highest-ranking user among all DNA data.

Among them, in the system of the electronic device, multiple permission levels can be set, and users of different levels have different permission levels, and the higher the permission level, the more functions of the electronic device can be used. For example, the highest authority level can use all the functions of the electronic device. Below the highest authority level, there can be multiple authority levels with lower rights. Some functions of the electronic device can be used. As the level decreases, the lower the permission level, the fewer functions can be used.

Because the data of multiple users may already exist in the database, and there may be one or more users of the highest level among these different users, with the highest permission level, which is what we usually call super users, or super management Administrator (hereinafter referred to as the super user), the user with the highest permission level can use all the functions of the electronic device, such as the administrator in the Windows system or the root in the Linux system.

Exemplarily, when the first user is the highest-level user in the system, that is, a super user, it means that the current target object is a super user, so the highest permission level can be opened for the target object. When the first user is not the highest user, that is, not a super user, it can be determined according to the similarity between the first DNA data and the DNA data belonging to the super user in the database, because the similarity of the DNA data can reflect the relationship of bleeding Therefore, the blood relationship between the current target object and the super user can be determined according to the similarity between the first DNA data and the DNA data of the super user, so that part of the access rights are opened for the target object according to the distance of the blood relationship.

Further, FIG. 3 is a schematic flowchart of another method for determining authority according to an exemplary embodiment of the present disclosure. As shown in FIG. 3, when the first user is not the highest-level user according to step 1042, according to the first The similarity between the DNA data and the DNA data belonging to the highest-level user among all DNA data, the step of opening the corresponding use right for the target object is OK, and may include the following steps:

Step 10421, when the first user is not the user with the highest rank, the similarity between each target DNA data and the first DNA data is acquired from the similarity between each DNA data in the database and the first DNA data, the target DNA The data is the DNA data in the database corresponding to the highest level user.

Step 10422: Determine the highest similarity among the similarities between each target DNA data and the first DNA data.

Step 10423: Determine the first permission level corresponding to the first similarity interval in which the highest similarity is among the multiple similarity intervals.

Wherein, the multiple similarity intervals correspond to preset multiple permission levels, and the multiple permission levels are lower than the highest permission level. The correspondence between the above multiple similarity intervals and the multiple permission levels can be set in the following manner:

First, the value range between the first threshold and the second threshold is divided to obtain multiple consecutive intervals, which are used as the multiple similarity intervals. Wherein, the second threshold may be a DNA data similarity threshold determined according to genetic biology and having no blood relationship or a long blood relationship, that is, if the similarity of two DNA data is lower than the second threshold, the two DNAs The two persons corresponding to the data do not have a blood relationship or are far away.

Secondly, the multiple similarity intervals are respectively corresponding to the multiple permission levels, wherein the permission levels of the multiple permission levels are positively related to the value range of the multiple similarity intervals. That is, it can be understood that the higher the value of the similarity interval value range, the higher the permission level corresponding to the similarity interval.

Step 10424: Open the corresponding usage rights for the target object according to the first authority level.

For example, when the first user is not a super user, the DNA data belonging to the super user in all DNA data of the database can be determined, and the similarity between each DNA data from the database and the first DNA data (in step 102 In the determination), the similarity between the DNA data of each super user in the database and the first DNA data is obtained, and thereby the maximum similarity between the first DNA data and the DNA data of the super user is further obtained.

For example, the first threshold may be X1%, and the second threshold may be X4%, then multiple intermediate thresholds X2% and X3% may be set, where X1% is greater than X2%, X2% is greater than X3%, and X3% is greater than X4%. To divide the range between X1% and X4% into multiple similarity intervals, such as [X4%, X3%), [X3%, X2%), [X2%, X1%). In addition, the range greater than X1% and the range less than X4% can be divided into [0%, X4%), [X4%, X3%), [X3%, X2%), [X2%, X1%) and [X1%, 100%] five similarity intervals, corresponding to five levels of authority, of which [X1%, 100%] corresponds to the highest authority level, [X2%, X1%), [X3%, X2%), [X4%, X3%) and [0%, X4%) the corresponding permission levels of the four intervals decrease one by one. For example, the highest similarity is [X1%, 100%], you can use all the functions of the electronic device, in [X2%, X1%) you can use most of the functions of the electronic device, in [X3%, X2%) you can use a small part of the electronic device Functions, in [X4%, X3%), you can use the most basic functions of the electronic device, in [0%, X4%), there is no permission to use. Among them, the above-mentioned "all functions", "most functions", "a few functions", "basic functions" can be understood as the preset usable range corresponding to different permission levels, and the corresponding usable functions The number decreases one by one, and the number of specific functions that can be used in "All functions", "Most functions", "Small functions", "Most basic functions", and the specific functions that can be used in electronic devices can be based on actual needs To set, there is no limit here.

It is understandable that different similarity intervals actually correspond to the distance of blood relationship. For example, if the similarity is in the range of [X1%, 100%], it can be considered as the person, and if the similarity is in the range of [X2%, X1%), it can be considered as an immediate relative, such as parents and children, and the similarity is in [ X3%, X2%) can be regarded as brothers and sisters, and the similarity of [X4%, X3%) can be regarded as side blood relatives, such as aunt, uncle, uncle, uncle, or cousin Sisters, and the similarity is in the range of [0%, X4%), it can be considered that the blood relationship is too far, or there is no blood relationship. Among them, the above X1%, X2%, X3% and X4% can be determined according to the genetic biology theory, and the number of intervals can also be increased or decreased according to actual needs, which is not specifically limited in the present disclosure.

Therefore, after obtaining the highest similarity between the first DNA data and the DNA data of each super user, the current authority level of the target object can be determined according to the correspondence between the similarity interval and the authority. For example, if the highest similarity between the first DNA data and the DNA data of each super user is at [X2%, X1%), the permission level of the target object is the permission level corresponding to [X2%, X1%). The similarity at [X2%, X1%) indicates that the target object has a close blood relationship with a super user, and the target object can be allowed to use most functions of the electronic device. Through the above method, even if the target object to be authenticated has not been authenticated on the electronic device, it can be authenticated through the blood relationship, so that one person can be authenticated and used by the whole family, so under the condition of ensuring high security, The certification process is greatly simplified, making the certification process of electronic devices easier and faster.

FIG. 4 is a schematic flowchart of another identity authentication method according to an exemplary embodiment of the present disclosure. As shown in FIG. 4, in the first implementation, the user level according to the first user in step 104 is The steps of opening the corresponding usage rights for the target object may include the following steps:

Step 1043: Obtain the user authority indication information corresponding to the first user stored during the first authentication of the first user.

Exemplarily, the permission level of the first user may be the highest permission level or any permission level lower than the highest permission level, where the permission level of the first user is the highest permission when the first user is the highest level user Level; when the first user is not the highest level user, the permission level of the first user is based on the DNA data of the highest level user among the first DNA data and all DNA data in the database when the first user authenticates for the first time Similarity is determined. Among them, for the method of determining the permission level during the first authentication, refer to steps 1046 to 1047 described below.

Step 1044: Acquire the permission level of the first user according to the user permission instruction information corresponding to the first user.

Step 1045: According to the permission level of the first user, open corresponding usage permissions for the target object.

Exemplarily, when the permission level of the first user is the highest permission level, the use permission of all functions of the electronic device may be opened for the target object. If the permission level of the first user is not the highest permission level, the corresponding permission to use some functions of the electronic device is opened. The functions of some functions can be determined by referring to the method described in step 10424.

FIG. 5 is a schematic flowchart of yet another identity authentication method according to an exemplary embodiment of the present disclosure. As shown in FIG. 5, the method may further include:

Step 1046, when the second DNA data does not exist in all DNA data in the database, it is determined that the target object is the first authentication.

There is no second DNA data mentioned above, that is, there is no DNA data whose similarity to the first DNA data reaches the first threshold, so it can be explained that there is no current DNA data of the target object in the database, so it can be confirmed The target object is the first authentication.

Step 1047: According to the similarity between the first DNA data and the DNA data belonging to the user of the highest level among all the DNA data, the corresponding use right is opened for the target object.

Further, FIG. 6 is a schematic flowchart of still another method for determining authority according to an exemplary embodiment of the present disclosure. As shown in FIG. 6, step 1047 according to the first DNA data and all DNA data belong to the highest level The similarity of the user's DNA data, the step of opening the corresponding usage rights for the target object, may include the following steps:

Step 10461, when it is determined that the target object has the credential of the user of the highest level, it is determined that the target object is the user of the highest level.

Step 10462: Determine the permission level of the target object as the highest permission level.

Exemplarily, since this is the first time that the target object is authenticated, if the target object can be registered as the highest-level user, the target object has the highest permission level, if the target object fails to register as the highest-level user, then The third authority level corresponding to the target object needs to be determined according to the implementation method of steps 10461 to 10464 above. Among them, whether it can be registered as the highest-level user can be based on whether the target object has the credential of the highest-level user at the time of authentication. The credential may include, for example, the username and password corresponding to the highest-level user, or the key/password, Or connect to external hardware used to authenticate the highest-level user (such as external hardware with a mobile certificate, digital certificate, or electronic key, such as Ukey), or the current authentication is a verification code generated by the invitation of another highest-level user, or in the electronic After the reset button on the device is triggered, the target object acts as the first authenticated user, and so on. The above-mentioned credential or method for authenticating the highest-level user is only exemplary, including but not limited to.

Or, perform steps 10463 to 10467:

Step 10463, when it is determined that the target object does not have the credential, the similarity between each target DNA data and the first DNA data is acquired from the similarity between each DNA data in the database and the first DNA data, the target The DNA data is the DNA data in the database corresponding to the user of the highest level.

Step 10464: Determine the highest similarity among the similarities between each target DNA data and the first DNA data.

Step 10465, when the highest similarity is less than the second threshold, it is determined that the target object has not passed the authentication.

Step 10466: When the highest similarity is greater than or equal to the second threshold, determine the second authority level corresponding to the second similarity interval in which the highest similarity is located among the multiple similarity intervals as the authority level of the target object.

Wherein, the multiple similarity intervals correspond to preset multiple permission levels, and the multiple permission levels are lower than the highest permission level, which are the same as the multiple similarity intervals shown in step 10423. The degree interval is a plurality of continuous intervals obtained by dividing the value range between the first threshold and the second threshold, and the authority levels of the multiple permission levels here are positively related to the value ranges of the multiple similarity intervals. Related.

Step 10467: According to the permission level of the target object, open the corresponding use permission for the target object.

Among them, the implementation method of the above steps 10463 to 10466 is the same as the method shown in the above steps 10421 to 10424, and refer to the steps 10421 to 10424. For example, the above multiple similarity intervals can be exhibited in [X4%, X3%), [X3%, X2%), [X2%, shown in step 10424 X1%). Since the target object has not been authenticated, there will be no DNA data with a similarity exceeding X1% in the database, so there is no [X1%, 100%] interval. Therefore, it can be judged that the obtained highest similarity belongs to [0%, X4%), [X4%, X3%), [X3%, X2%), [X2%, X1%) and [X1%, 100%] which similarity interval, suppose the highest similarity is in [ X2%, X1%), the third authority level is the authority level corresponding to the interval [X2%, X1%).

Therefore, after obtaining the highest similarity between the first DNA data and the DNA data of each super user, the current authority level of the target object can be determined according to the correspondence between the similarity interval and the authority. For example, if the highest similarity between the first DNA data and the DNA data of each super user is at [X2%, X1%), the third authority level of the target object is the authority level corresponding to [X2%, X1%), according to The description in step 10424, since the similarity of DNA data at [X2%, X1%) indicates that the target object has a close blood relationship with a super user, it can allow the target object to use most functions of the electronic device. The permission level corresponding to [X2%, X1%) is second only to the highest permission level. Therefore, after the use permission is opened for the target object according to the third permission level, the target object can use most functions of the electronic device. When the highest similarity is less than the second threshold, that is, in the interval [0%, X4%), it means that the target object is far away from all super users or there is no blood relationship. At this time, it can be determined that the target object is not Pass the authentication and refuse to use the electronic device.

Wherein, the step of opening corresponding usage rights for the target object according to the permission level of the target object in step 10467 may include:

Step 1a, register the target object as the second user.

Step 2a: Store the correspondence between the second user and the first DNA data, user indication information, and highest similarity in the database. The user level indication information is used to indicate whether the second user is the highest level user. For each target object for the first authentication, registration and storage can be performed according to the above steps 1a to 3a, so that based on the user level indication information, when the same user is authenticated again, the user’s The above information identifies whether the user is the highest level user. For example, when step 1042 or 1046 is executed again, it can be confirmed which DNA data in the database belongs to the user of the highest level according to the above-mentioned corresponding relationship between the DNA data of each user recorded in the database and the user instruction information.

Step 3a: According to the permission level of the target object, open the corresponding use permission for the target object.

Among them, there is no fixed execution order between steps 1a-2a and step 3a, and one of them may be executed first, or they may be executed simultaneously.

Or, in another implementation manner, the step of opening corresponding usage rights for the target object according to the permission level of the target object in step 10467 may include:

Step 1b, register the target object as the second user.

Step 2b: Store the correspondence between the second user and the first DNA data and user permission indication information in the database, where the user permission indication information is used to indicate the permission level the second user has.

Step 3b: According to the permission level of the target object, open the corresponding use permission for the target object.

Among them, there is no fixed execution order between steps 1b-2b and step 3b, and one of them may be executed first, or they may be executed simultaneously. For each target object for the first authentication, registration and storage can be performed according to the above steps 1b to 3b, so that when the same user performs authentication again, the user can be directly obtained based on the above information of the user stored in the database Whether it is the highest level user, and the user's authority level. For example, when steps 1043-1044 are executed again, the user's authority level can be confirmed according to the correspondence between each user's DNA data and user authority instruction information recorded in the database. Optionally, for the above steps 1a-3a, 1b-3b, other information corresponding to the DNA data, such as user name, gender, etc., may also be enriched during authentication or during subsequent use.

In addition, in order to further improve the security of the authentication process, it may be considered to jointly verify the DNA data and other biometric information during authentication. For example, FIG. 7 is a user determination method according to an exemplary embodiment of the present disclosure. The schematic diagram of the process, as shown in FIG. 7, when there is second DNA data with similarity to the first DNA data greater than or equal to the first threshold in all DNA data described in step 103, determine that the target object is the second DNA data The corresponding steps of the first user may include the following steps:

Step 1031: Acquire the first biological characteristic of the target object. Wherein, the first biometrics may include: at least one of biometrics such as fingerprints, facial features, irises, voiceprints and the like.

Step 1032, when there is second DNA data whose similarity to the first DNA data is greater than or equal to the first threshold value in all DNA data, determine the first user corresponding to the second DNA data.

Step 1033: Obtain the second biometrics of the first user stored in the database.

Step 1034, when the first biometric and the second biometric match, it is determined that the target object is the first user.

That is, through the above method, when the target object matches any existing user's DNA data and biological characteristics, it can be identified as the user himself, thereby further improving the security of the authentication process.

FIG. 8 is a block diagram of an identity authentication device according to an exemplary embodiment of the present disclosure. As shown in FIG. 8, the device 800 may include:

The collection module 801 is used to obtain the first DNA data of the target object to be verified;

The comparison module 802 is used to compare the first DNA data with all the DNA data in the database to obtain the similarity between each DNA data in the database and the first DNA data;

The user confirmation module 803 is used to determine that the target object is the first user corresponding to the second DNA data when there is second DNA data with similarity to the first DNA data greater than or equal to the first threshold in all DNA data in the database ;

The first authorization module 804 is configured to open corresponding usage rights for the target object according to the user level of the first user.

Optionally, the first authorization module 804 may be used for:

When the first user is the user with the highest level, the corresponding user authority is opened for the target object according to the highest authority level;

When the first user is not the highest-ranking user, the corresponding usage rights are opened for the target object according to the similarity between the first DNA data and the DNA data of the highest-ranking user among all DNA data in the database.

Optionally, FIG. 9 is a block diagram of a first authorization module according to an exemplary embodiment of the present disclosure. As shown in FIG. 9, the first authorization module 804 may include:

The first similarity recognition sub-module 8041 is used to obtain each target DNA data and the first DNA from the similarity between each DNA data in the database and the first DNA data when the first user is not the highest level user The similarity of the data, the target DNA data is the DNA data corresponding to the highest level user in the database;

The first similarity determination submodule 8042 is used to determine the highest similarity of the similarity between each target DNA data and the first DNA data;

The first permission confirmation sub-module 8043 is used to determine the first permission level corresponding to the first similarity interval in which the highest similarity is located in multiple similarity intervals, and the multiple similarity intervals are respectively different from the preset multiple Corresponding to the authority level, the multiple authority levels are lower than the highest authority level;

The first authorization submodule 8044 is configured to open corresponding usage rights for the target object according to the first authority level.

Optionally, FIG. 10 is a block diagram of another identity authentication device according to an exemplary embodiment of the present disclosure. As shown in FIG. 10, the device 800 may further include:

The determining module 805 is configured to determine that the target object is the first authentication when the second DNA data does not exist in all DNA data in the database;

The second authorization module 806 is configured to open corresponding usage rights for the target object according to the similarity between the first DNA data and the DNA data of the highest-level user among all the DNA data in the database.

Optionally, FIG. 11 is a block diagram of a second authorization module according to an exemplary embodiment of the present disclosure. As shown in FIG. 11, the second authorization module 806 may include:

The identity verification sub-module 8061 is used to determine that the target object is the highest level user when it is determined that the target object has the credentials of the highest level user;

The second permission confirmation submodule 8062 is used to determine the permission level of the target object as the highest permission level;

The second similarity recognition sub-module 8063 is configured to acquire each target DNA data and the first from the similarity between each DNA data in the database and the first DNA data when it is determined that the target object does not have the above-mentioned credentials Similarity of DNA data, the target DNA data is the DNA data corresponding to the highest level user in the database;

The second similarity determination submodule 8064 is used to determine the highest similarity among the similarities between each target DNA data and the first DNA data;

The second authorization submodule 8065 is configured to determine that the target object has not passed the authentication when the highest similarity is less than the second threshold.

The second permission confirmation sub-module 8062 is used to determine the second permission level corresponding to the second similarity interval where the highest similarity is in a plurality of similarity intervals when the highest similarity is greater than or equal to the second threshold, as For the permission level of the target object, the above-mentioned multiple similarity intervals respectively correspond to preset multiple permission levels, and the multiple permission levels are lower than the highest permission level;

The second authorization sub-module 8065 is also used to open corresponding usage rights for the target object according to the permission level of the target object.

Optionally, the device 800 further includes: an interval dividing module 807, configured to divide the value range between the first threshold and the second threshold to obtain multiple consecutive intervals as the multiple similarities Degree interval

The correlation module 808 is configured to correspond the multiple similarity intervals to the multiple permission levels, and the permission levels of the multiple permission levels are positively related to the value range of the multiple similarity intervals.

Optionally, the second authorization submodule 8065 is used to: register the target object as a second user;

Store the correspondence between the second user and the first DNA data, user indication information, and the highest similarity in the database, and the user level indication information is used to indicate whether the second user is the highest level user;

Or, the second authorization submodule 8065 is used to: register the target object as the second user;

Store the correspondence between the second user, the first DNA data, and the user permission indication information in the database, where the user permission indication information is used to indicate the permission level that the second user has;

Optionally, FIG. 12 is a block diagram of a first authorization module according to an exemplary embodiment of the present disclosure. As shown in FIG. 12, in another implementation manner, the first authorization module 804 may include:

The information obtaining sub-module 8045 is used to obtain the user authority indication information corresponding to the first user stored during the first authentication of the first user;

The rights acquisition submodule 8046 is configured to obtain the rights level of the first user according to the user rights indication information corresponding to the first user;

The third authorization submodule 8047 is configured to open corresponding usage rights for the target object according to the authority level of the first user.

Optionally, FIG. 13 is a block diagram of a user confirmation module according to an exemplary embodiment of the present disclosure. As shown in FIG. 13, the user confirmation module 803 may include:

The biometrics obtaining sub-module 8031 is used to obtain the first biometrics of the target object;

The user determination submodule 8032 is configured to determine the first user corresponding to the second DNA data when there is second DNA data with similarity to the first DNA data greater than or equal to the first threshold in all DNA data;

A reading sub-module 8033, which is used to obtain the second biometrics of the first user stored in the database;

The user confirmation sub-module 8034 determines that the target object is the first user when the first biometric and the second biometric match.

Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment related to the method, and will not be elaborated here.

Fig. 14 is a block diagram of an electronic device according to an exemplary embodiment. As shown in FIG. 14, the electronic device 1400 may include a processor 1401 and a memory 1402. The electronic device 1400 may also include one or more of a multimedia component 1403, an input/output (I/O) interface 1404, and a communication component 1405. The electronic device may be a robot, such as a home robot.

The processor 1401 is used to control the overall operation of the electronic device 1400 to complete all or part of the steps in the above-mentioned identity authentication method. The memory 1402 is used to store various types of data to support operation on the electronic device 1400, and the data may include, for example, instructions for any application programs or methods operating on the electronic device 1400, and application-related data, For example, contact data, messages sent and received, pictures, audio, video, etc. The memory 1402 may be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (Static Random Access Memory, SRAM for short), electrically erasable programmable read-only memory ( Electrically Erasable Programmable Read-Only Memory (EEPROM for short), erasable programmable read-only memory (Erasable Programmable Read-Only Memory (EPROM), Programmable Read-Only Memory (PROM), Read-Only Memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The multimedia component 1403 may include a screen and an audio component. The screen may be, for example, a touch screen, and the audio component is used to output and/or input audio signals. For example, the audio component may include a microphone for receiving external audio signals. The received audio signal may be further stored in the memory 1402 or transmitted through the communication component 1405. The audio component also includes at least one speaker for outputting audio signals. The I/O interface 1404 provides an interface between the processor 1401 and other interface modules. The other interface modules may be a keyboard, a mouse, a button, and so on. These buttons can be virtual buttons or physical buttons. The communication component 1405 is used for wired or wireless communication between the electronic device 1400 and other devices. Wireless communication, such as Wi-Fi, Bluetooth, Near Field Communication (NFC), 2G, 3G, or 4G, or a combination of one or more of them, so the corresponding communication component 1405 may include: Wi-Fi module, Bluetooth module, NFC module.

In an exemplary embodiment, the electronic device 1400 may be used by one or more application specific integrated circuits (Application Specific Integrated Circuit (ASIC), Digital Signal Processor (DSP), Digital Signal Processing Device (DSPD), Programmable Logic Device (PLD), on-site Programmable gate array (Field Programmable Gate Array, FPGA for short), controller, microcontroller, microprocessor or other electronic components are used to implement the above-mentioned identity authentication method.

In another exemplary embodiment, a computer-readable storage medium including program instructions is also provided. When the program instructions are executed by a processor, the steps of the foregoing identity authentication method are implemented. For example, the computer-readable storage medium may be the above-mentioned memory 1402 including program instructions, which may be executed by the processor 1401 of the electronic device 1400 to complete the above-mentioned identity authentication method.

The preferred embodiments of the present disclosure have been described in detail above with reference to the accompanying drawings. However, the present disclosure is not limited to the specific details in the above embodiments. Within the scope of the technical concept of the present disclosure, various simple modifications can be made to the technical solutions of the present disclosure. These simple modifications all fall within the protection scope of the present disclosure.

In addition, it should be noted that the specific technical features described in the above specific embodiments can be combined in any suitable manner without contradictions. In order to avoid unnecessary repetition, the present disclosure The combination method will not be explained separately.

In addition, various combinations of various embodiments of the present disclosure can also be arbitrarily combined, as long as it does not violate the idea of the present disclosure, it should also be regarded as what is disclosed in the present disclosure.

Claims

An identity authentication method, characterized in that the method includes:

Obtain the first DNA data of the target object to be verified;

Comparing the first DNA data with all DNA data in the database to obtain the similarity between each DNA data in the database and the first DNA data;

When there is second DNA data whose similarity to the first DNA data is greater than or equal to a first threshold in all DNA data in the database, it is determined that the target object is the first corresponding to the second DNA data user;

According to the user level of the first user, corresponding usage rights are opened for the target object.
The method according to claim 1, wherein the opening of corresponding usage rights for the target object according to the user level of the first user includes:

When the first user is the user with the highest level, the corresponding use authority is opened for the target object according to the highest authority level;

When the first user is not the highest-ranking user, according to the similarity between the first DNA data and the DNA data belonging to the highest-ranking user among all DNA data in the database, the corresponding object is opened for the target object Use permissions.
The method according to claim 2, wherein when the first user is not the highest-ranking user, the DNA belonging to the highest-ranking user among the first DNA data and all DNA data in the database The similarity of the data to open corresponding usage rights for the target object includes:

When the first user is not the highest-ranking user, each target DNA data and the first DNA data are obtained from the similarity between each DNA data in the database and the first DNA data Similarity, the target DNA data is the DNA data corresponding to the highest level user in the database;

Determining the highest similarity among the similarities between each target DNA data and the first DNA data;

Determining the first permission level corresponding to the first similarity interval in which the highest similarity is located in multiple similarity intervals, the multiple similarity intervals corresponding to preset multiple permission levels, respectively, The permission level is lower than the highest permission level;

According to the first permission level, corresponding use permissions are opened for the target object.
The method according to claim 1, wherein the method further comprises:

When the second DNA data does not exist in all DNA data in the database, it is determined that the target object is the first authentication;

According to the similarity between the first DNA data and the DNA data belonging to the user of the highest level among all the DNA data in the database, corresponding usage rights are opened for the target object.
The method according to claim 4, characterized in that, based on the similarity between the first DNA data and the DNA data of the highest-ranking user among all the DNA data in the database, open correspondence is provided for the target object Usage rights, including:

When it is determined that the target object has the credential of the user of the highest level, it is determined that the target object is the user of the highest level;

Determine the permission level of the target object as the highest permission level; or,

When it is determined that the target object does not have the voucher, from the similarity between each DNA data in the database and the first DNA data, obtain the data of each target DNA data and the first DNA data Similarity, the target DNA data is the DNA data corresponding to the highest level user in the database;

Determining the highest similarity among the similarities between each target DNA data and the first DNA data;

When the highest similarity is less than the second threshold, it is determined that the target object has not passed authentication;

When the highest similarity is greater than or equal to the second threshold, determine the second permission level corresponding to the second similarity interval in which the highest similarity is located in multiple similarity intervals, as the permission of the target object Level, the multiple similarity intervals respectively correspond to multiple preset permission levels, and the multiple permission levels are lower than the highest permission level;

According to the permission level of the target object, the corresponding use permission is opened for the target object.
The method according to claim 3 or 5, wherein the method further comprises:

Dividing the value range between the first threshold and the second threshold to obtain multiple consecutive intervals as the multiple similarity intervals;

Corresponding the plurality of similarity intervals to the plurality of permission levels respectively, and the permission levels of the plurality of permission levels are positively related to the value range of the plurality of similarity intervals.
The method according to claim 5, wherein the opening of the corresponding use rights for the target object according to the permission level of the target object includes:

Register the target object as a second user;

Storing the correspondence between the second user and the first DNA data, user indication information, and the highest similarity degree in the database, and the user level indication information is used to indicate whether the second user Is the highest level user;

According to the permission level of the target object, the corresponding use permission is opened for the target object.
The method according to claim 5, wherein the opening of the corresponding use rights for the target object according to the permission level of the target object includes:

Register the target object as a second user;

Storing the correspondence between the second user, the first DNA data, and user permission indication information in the database, where the user permission indication information is used to indicate the permission level that the second user has;

According to the permission level of the target object, the corresponding use permission is opened for the target object.
The method according to claim 8, wherein the opening of the corresponding usage rights for the target object according to the user level of the first user includes:

Acquiring user authority indication information corresponding to the first user stored during the first authentication of the first user;

Acquiring the permission level of the first user according to the user permission instruction information corresponding to the first user;

According to the permission level of the first user, the corresponding use permission is opened for the target object.
The method according to claim 1, wherein the target is determined when there is second DNA data having a similarity to the first DNA data greater than or equal to a first threshold value in all the DNA data The object is the first user corresponding to the second DNA data, including:

Acquiring the first biological characteristic of the target object;

When there is second DNA data whose similarity to the first DNA data is greater than or equal to a first threshold in all the DNA data, determine the first user corresponding to the second DNA data;

Acquiring the second biometrics of the first user stored in the database;

When the first biometric matches the second biometric, it is determined that the target object is the first user.
An identity authentication device, characterized in that the device includes:

The collection module is used to obtain the first DNA data of the target object to be verified;

A comparison module, configured to compare the first DNA data with all DNA data in a database to obtain the similarity between each DNA data in the database and the first DNA data;

The user confirmation module is configured to determine that the target object is the second when all DNA data in the database has second DNA data whose similarity to the first DNA data is greater than or equal to a first threshold The first user corresponding to the DNA data;

The first authorization module is configured to open corresponding usage rights for the target object according to the user level of the first user.
The device according to claim 11, wherein the first authorization module is configured to:

When the first user is the user with the highest level, the corresponding use authority is opened for the target object according to the highest authority level;

When the first user is not the highest-ranking user, according to the similarity between the first DNA data and the DNA data belonging to the highest-ranking user among all DNA data in the database, the corresponding object is opened for the target object Use permissions.
The apparatus according to claim 12, wherein the first authorization module comprises:

The first similarity recognition submodule is used to obtain each of the similarities between each DNA data in the database and the first DNA data when the first user is not the user with the highest rank The similarity between the target DNA data and the first DNA data, the target DNA data is the DNA data corresponding to the highest level user in the database;

A first similarity determination submodule, configured to determine the highest similarity among the similarities between each target DNA data and the first DNA data;

The first permission confirmation submodule is used to determine the first permission level corresponding to the first similarity interval in which the highest similarity is located in multiple similarity intervals, and the multiple similarity intervals are respectively different from the preset Corresponding to multiple permission levels, the multiple permission levels are lower than the highest permission level;

The first authorization submodule is configured to open corresponding usage rights for the target object according to the first authority level.
The device according to claim 11, wherein the device further comprises:

A determining module, configured to determine that the target object is the first authentication when the second DNA data does not exist in all DNA data in the database;

The second authorization module is configured to open corresponding usage rights for the target object based on the similarity between the first DNA data and the DNA data of the user with the highest rank among all the DNA data in the database.
The device according to claim 14, wherein the second authorization module comprises:

An identity verification submodule, configured to determine that the target object is the highest level user when it is determined that the target object has the credential of the highest level user;

A second permission confirmation submodule, configured to determine the permission level of the target object as the highest permission level;

The second similarity recognition sub-module is used to obtain each target from the similarity between each DNA data in the database and the first DNA data when it is determined that the target object does not have the credential The similarity between the DNA data and the first DNA data, and the target DNA data is the DNA data corresponding to the highest level user in the database;

A second similarity determination submodule, configured to determine the highest similarity among the similarities between each target DNA data and the first DNA data;

A second authorization submodule, configured to determine that the target object has not passed authentication when the highest similarity is less than the second threshold;

The second permission confirmation submodule is configured to determine, when the highest similarity is greater than or equal to a second threshold, the second similarity interval in which the highest similarity is located among multiple similarity intervals Two permission levels, which are the permission levels of the target object, the multiple similarity intervals correspond to preset multiple permission levels, and the multiple permission levels are lower than the highest permission level;

The second authorization sub-module is also used to open corresponding usage rights for the target object according to the permission level of the target object.
The device according to claim 13 or 15, wherein the device further comprises:

An interval dividing module, configured to divide the value range between the first threshold and the second threshold to obtain multiple consecutive intervals as the multiple similarity intervals;

The correlation module is configured to correspond the multiple similarity intervals to the multiple permission levels, and the permission levels of the multiple permission levels are positively related to the value range of the multiple similarity intervals.
The apparatus according to claim 15, wherein the second authorization submodule is configured to:

Register the target object as a second user;

Storing the correspondence between the second user and the first DNA data, user indication information, and the highest similarity degree in the database, and the user level indication information is used to indicate whether the second user Is the highest level user;

According to the permission level of the target object, the corresponding use permission is opened for the target object.
The apparatus according to claim 15, wherein the second authorization submodule is configured to:

Register the target object as a second user;

Storing the correspondence between the second user, the first DNA data, and user permission indication information in the database, where the user permission indication information is used to indicate the permission level that the second user has;

According to the permission level of the target object, the corresponding use permission is opened for the target object.
The apparatus according to claim 18, wherein the first authorization module comprises:

An information acquisition submodule, configured to acquire the user authority indication information corresponding to the first user and stored during the first authentication of the first user;

A permission acquisition sub-module for acquiring the permission level of the first user according to the user permission instruction information corresponding to the first user;

The third authorization submodule is configured to open corresponding usage rights for the target object according to the authority level of the first user.
The device according to claim 11, wherein the user confirmation module comprises:

A biometrics acquisition sub-module for acquiring the first biometrics of the target object;

The user determination sub-module is used to determine the first corresponding to the second DNA data when there is second DNA data whose similarity to the first DNA data is greater than or equal to a first threshold in all the DNA data user;

A reading sub-module for acquiring the second biometrics of the first user stored in the database;

The user confirmation sub-module determines that the target object is the first user when the first biological feature matches the second biological feature.
A computer-readable storage medium on which a computer program is stored, characterized in that when the computer program is executed by a processor, the steps of the method according to any one of claims 1-10 are implemented.
An electronic device, characterized in that it includes:

Memory, on which computer programs are stored;

A processor, configured to execute the computer program in the memory, to implement the steps of the method according to any one of claims 1-10.