WO2020233009A1

WO2020233009A1 - Identity authentication method and apparatus, computing device, and storage medium

Info

Publication number: WO2020233009A1
Application number: PCT/CN2019/117696
Authority: WO
Inventors: 蒋旭昂
Original assignee: 平安普惠企业管理有限公司
Priority date: 2019-05-23
Filing date: 2019-11-12
Publication date: 2020-11-26
Also published as: CN110247898B; CN110247898A

Abstract

An identity authentication method and apparatus, a computing device, and a storage medium, relating to the field of human face recognition. The method comprises: when an identity authentication request from a user terminal is received, returning protocol information to the user terminal; when an instruction of accepting the protocol information is received, obtaining a pixel value of a camera of the user terminal; according to the pixel value of the camera, determining the total time length of video recording and determining whether to start dual identity authentication; according to a predetermined rule, indicating a video of which the background recording time length of the camera of the user terminal is the total time length to serve as identity authentication information, wherein when it is determined to start dual identity authentication, the obtained dual identity authentication information received by the user terminal according to an indication is used as the identity authentication information; receiving the identity document information of the user terminal; and based on the identity authentication information and the identity document information, determining that the identity of a user is legal. By means of the method, the present invention improves the security of identity authentication, and achieves balance between the security of identity authentication and resource consumption during identity authentication.

Description

Identity verification method, device, computing device and storage medium

This application is based on and claims the priority of the Chinese patent application filed on May 23, 2019, with the application number CN 201910434967.3 and the name "Identity Verification Method, Device, Medium and Electronic Equipment", the entire content of which is hereby incorporated as reference.

Technical field

This application relates to the field of face recognition technology, and in particular to an identity verification method, device, computing device, and computer non-volatile readable storage medium.

Background technique

User identity legality verification is one of the indispensable links in many network services. Therefore, user identity legality verification is the focus of network security.

The inventor of the present application realizes that at present, when users use software running on the terminal, such as an App (Application, application) or small program on a mobile phone terminal, to perform operations such as requesting to open a specific service, they often use fingerprints or signatures. In this way, the accuracy of identifying the user’s identity is low and the risk is high; in addition, the user’s identity can also be verified by calling the camera of the terminal, such as the front camera of the mobile phone. Face recognition is performed to verify whether the user's identity is legal. In this way, recording consumes more resources such as storage and bandwidth, and the cost is higher.

Summary of the invention

In order to solve or at least partially solve the above technical problems, the purpose of this application is to provide an identity verification method, device, computing device, and computer non-volatile readable storage medium.

In the first aspect, an identity verification method is provided, including:

When receiving the identity verification request from the client, returning to the client the protocol information containing the user identity verification means, wherein the user identity verification means in the protocol information includes video recording;

In response to receiving an instruction from the client to accept the protocol information, acquiring the pixel value of the camera of the client;

According to the pixel value of the camera, determine the total duration of the recording and whether to start dual identity verification;

In the case of determining to start the dual identity verification, instruct the user end's camera to record a video with the total duration in the background for the total duration according to a predetermined rule, and instruct the user end to receive the dual identity verification information from the user to obtain all The identity verification video and the dual identity verification information returned by the user terminal are used as identity verification information;

In the case of determining not to start dual identity verification, instruct the camera of the user end to record a video whose duration is the total duration in the background according to a predetermined rule, and obtain the identity verification video returned by the user end as the identity verification information;

Receiving the ID information uploaded by the client;

It is determined that the user's identity is legal based on the identity verification information and the identity document information.

In a second aspect, an identity verification device is provided, including:

The return module is configured to, when receiving an identity verification request from the client, return to the client the protocol information including the means of user identity verification;

The obtaining module is configured to obtain the pixel value of the camera of the user end in response to receiving an instruction to accept the protocol information from the user end;

The first determining module is configured to determine the total duration of recording and whether to start dual identity verification according to the pixel value of the camera;

The indication module is configured to instruct the user terminal’s camera to record a video whose duration is the total duration in the background according to a predetermined rule, and instruct the client terminal to receive the dual identity verification from the user. Identity verification information, the identity verification video returned by the client and the double identity verification information are obtained as identity verification information; and

The receiving module is configured to receive the identity document information uploaded by the user terminal;

The second determining module is configured to determine that the user's identity is legal based on the identity verification information and the identity document information.

In a third aspect, a computing device is provided, including a memory and a processor, the memory is used to store a program of the processor's identity verification method, and the processor is configured to execute the identity verification method via the program Perform the following processing: when receiving an identity verification request from the user end, return to the user end the protocol information containing the user identity verification means, wherein the user identity verification means in the protocol information includes a video recording; The client’s instruction for accepting the protocol information obtains the pixel value of the user’s camera; according to the pixel value of the camera, the total duration of recording and whether to start dual identity verification is determined; when it is determined to start dual identity verification Next, according to a predetermined rule, instruct the camera of the user end to record a video of the total duration in the background, and instruct the user end to receive the dual identity verification information from the user to obtain the identity verification video and The dual identity verification information is used as identity verification information; if it is determined that dual identity verification is not to be initiated, the user’s camera is instructed to record a video whose duration is the total duration in the background according to a predetermined rule to obtain the user The identity verification video returned by the terminal is used as identity verification information; the identity document information uploaded by the user terminal is received; the identity of the user is determined to be legal based on the identity verification information and the identity document information.

In a fourth aspect, a computer non-volatile readable storage medium storing computer readable instructions is provided, and a program of an identity verification method is stored thereon. When the program of the identity verification method is executed by a processor, the following processing is implemented : When receiving an identity verification request from the client, the protocol information containing the user identity verification means is returned to the client, wherein the user identity verification means in the protocol information includes video recording; in response to receiving the request from the client Accept the instructions of the protocol information to obtain the pixel value of the camera on the client side; determine the total recording time and whether to start dual identity verification according to the pixel value of the camera; in the case of determining to start dual identity verification, The predetermined rule instructs the camera of the client to record a video with the total duration in the background, and instructs the client to receive the dual identity verification information from the user to obtain the identity verification video returned by the client and the second Re-identification information is used as identity verification information; in the case of determining not to start double-identity verification, instruct the camera of the user end to record a video with the total duration in the background according to a predetermined rule, and obtain the return of the user end The identity verification video is used as identity verification information; receiving identity document information uploaded by the user terminal; and determining that the user's identity is legal based on the identity verification information and the identity document information.

The above-mentioned identity verification method, device, computing device and computer non-volatile readable storage medium use video recording for identity verification, which improves the security of identity verification. At the same time, the total recording volume is determined according to the pixel value of the camera. The length of time and whether to start the dual identity verification action achieves a balance between the security of identity verification and the resource consumption during identity verification.

It should be understood that the above general description and the following detailed description are only exemplary and cannot limit the application.

Description of the drawings

Fig. 1 is a schematic diagram showing an application scenario of an identity verification method according to an exemplary embodiment;

Fig. 2 is a flowchart showing an identity verification method according to an exemplary embodiment;

FIG. 3 is a detailed flowchart of step 230 of an embodiment shown according to the embodiment corresponding to FIG. 2;

4 is a flowchart of a predetermined rule according to an embodiment shown in the embodiment corresponding to FIG. 2;

FIG. 5 is a detailed flowchart of step 270 of an embodiment shown according to the embodiment corresponding to FIG. 2;

Fig. 6 is a block diagram showing an identity verification device according to an exemplary embodiment;

Fig. 7 is an exemplary block diagram showing a computing device for implementing the aforementioned identity verification method according to an exemplary embodiment;

Fig. 8 shows a computer non-volatile readable storage medium for implementing the above-mentioned identity verification method according to an exemplary embodiment.

Detailed ways

Here, exemplary embodiments will be described in detail, and examples thereof are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings indicate the same or similar elements. The implementation manners described in the following exemplary embodiments do not represent all implementation manners consistent with the present application. On the contrary, they are only examples of devices and methods consistent with some aspects of the application as detailed in the appended claims.

In addition, the drawings are only schematic illustrations of the application, and are not necessarily drawn to scale. The same reference numerals in the figures denote the same or similar parts, and thus their repeated description will be omitted. Some of the block diagrams shown in the drawings are functional entities and do not necessarily correspond to physically or logically independent entities.

This application first provides an identity verification method. The so-called identity verification here refers to the legitimacy of the identity information provided by the user to determine whether the user’s identity information is authentic and credible. The method of this application can be fixed to various terminals, such as servers, cloud computing physical infrastructure, smart phones, tablet computers, desktop computers, notebook computers, iPads, self-service terminals, etc. Anything that has computing processing functions and can communicate with external devices Communication terminal.

Fig. 1 is a schematic diagram showing an application scenario of an identity verification method according to an exemplary embodiment. As shown in FIG. 1, it includes a user's mobile terminal, namely a smart phone 110, and an implementation terminal of the application, namely a server 120. The server 120 is connected to the smart phone 110 through a communication link composed of a cellular network, a backbone network, and other network facilities, so as to complete the transfer of data and information. The architecture between the smart phone 110 and the server 120 may be a C/S (Client/Server, client/server) architecture or a B/S (Brower/Server, browser/server) architecture. When a user accesses the server 120 by using a browser or App (Application) installed on the smartphone 110, if he wants to use certain services provided by the server 120 (such as payment, transfer, etc.), he may need to perform Identity verification is used to ensure that user accounts are not stolen or to ensure that users are eligible to use specific services. Common methods of identity verification can be online signature, fingerprint verification, video verification, etc. All of these methods require the user to use a smartphone 110 to communicate with the server 120. Submitting information for identity verification, for example, video verification requires the user to use the smart phone 110 to record the user's own video and upload it to the server 120.

Fig. 2 is a flow chart showing an identity verification method according to an exemplary embodiment. As shown in Figure 2, it includes the following steps:

Step 210: When receiving the identity verification request from the client, the protocol information including the user's identity verification means is returned to the client.

Wherein, the user identity verification means in the protocol information includes video recording.

The protocol information and the means of user authentication contained in it are all text information recorded in the form of words, symbols, etc.

The identity verification request is an Internet request sent by the client to the local end, and it can be a request based on various Internet protocols, for example, it can be a request under the HTTP/HTTPS protocol.

In one embodiment, the received identity verification request from the client includes a service identifier, and when the identity verification request from the client is received, returning to the client the protocol information including the user identity verification means includes:

When receiving an identity verification request from the user end, obtain the business identifier included in the identity verification request;

Obtaining the user identity verification means corresponding to the business identity by using the preset correspondence table of the business identity and the user identity verification means;

In the case where the acquired user identity verification means corresponding to the business identity includes video recording, adding the user identity verification means to a preset protocol information template to obtain protocol information including the user identity verification means;

Return the protocol information including the means of user identity verification to the client.

In one embodiment, the specific method of returning the protocol information containing the user authentication means to the client is to return to the user a page recording the protocol information containing the user authentication means, for example, it may be written in HTML5 language Web page.

In one embodiment, the specific method of returning the protocol information containing the user authentication means to the user terminal is to return to the user terminal a web page recorded with a link to the protocol information. When the user is in the user The client clicks on the link to access the page where the protocol information containing the user's authentication method is recorded.

Step 220: In response to receiving an instruction from the client to accept the protocol information, obtain the pixel value of the camera of the client.

In one embodiment, the user's action of accepting the agreement information at the user end triggers the sending of an instruction to accept the agreement information to the local end.

For example, when the user accepts the protocol information on the client side, he will click a button or other control; when the local end monitors the action of the corresponding control, it is equivalent to getting an instruction from the client side to accept the protocol information.

In one embodiment, the user communicates with the local terminal through an application installed on the user terminal. When receiving an instruction from the user terminal to accept the protocol information, the application will be triggered to read the pixel value of the camera of the user terminal and Return to this end.

For example, the system on the user side provides the Camera.getParameters() interface, which provides a way to obtain the camera parameters of the device. The application installed on the user side contains an instruction to call the interface. When receiving the The instructions of the protocol information will execute the instructions that call the interface to obtain the camera parameters of the device returned by the interface, where the camera parameters include the pixel value of the camera.

In one embodiment, the user communicates with the local terminal through an application installed on the user terminal. When the user terminal installs the application, the user terminal sends the identifier of the user terminal and the pixel value of the camera to the local terminal, and the local terminal transmits the The identification of the user end and the pixel value of the camera are correspondingly stored in the database. Each instruction from the user end received by the local end carries the identification of the user end, and the response is to receiving an instruction from the user end to accept the protocol information , Obtaining the pixel value of the camera of the user end includes:

In response to receiving an instruction from the client to accept the protocol information, acquiring the identifier of the client in the instruction;

Query the database to obtain the pixel value of the camera stored corresponding to the identifier of the user terminal.

In one embodiment, the user communicates with the local terminal through an application installed on the client terminal. When receiving an instruction from the client terminal to accept the protocol information, the application will be triggered to read the model of the client terminal and return to the local terminal. At the end, the obtaining the pixel value of the camera of the user end includes:

When the model of the client terminal is obtained, the pixel value of the camera corresponding to the model of the client terminal is acquired through the preset correspondence table of the client terminal model and the pixel value of the camera as the pixel value of the camera of the client terminal.

In one embodiment, the user communicates with the local end through an application installed on the user end, and the application can read file information stored on the user end. In response to receiving an instruction from the user end to accept the protocol information, Obtaining the pixel value of the camera of the user end includes: in response to receiving an instruction from the user end to accept the protocol information, obtaining a request from the user end for the resolution of the photo stored on the user end; receiving the user end The terminal returns the resolution of the stored photo; according to the resolution, the pixel value of the camera of the user terminal is determined.

For example, if the resolution of the received photo is 3000×4000, it can be determined that the pixel value of the camera of the user end is 12 million pixels.

Step 230: Determine the total duration of recording and whether to start dual identity verification according to the pixel value of the camera.

Dual identity verification is an additional identity verification method based on the video.

In one embodiment, the dual identity verification is: sending a prompt voice instruction information to the client terminal, instructing the user of the client terminal to take a predetermined action. For example, the predetermined action may be opening the mouth, blinking, nodding, etc.

In an embodiment, step 230 is specifically performed in the following manner:

Determine the total duration of recording based on the pixel value of the camera and the following formula:

Among them, T _out is the determined total recording duration, P is the pixel value of the camera, _Pref is the first preset camera pixel reference value, T _ref1 is the first predetermined duration, and T _ref2 is the second predetermined duration, where, T _{ref2 is} less than or equal to T _ref1 ;

If P is greater than or equal to the second preset camera pixel reference value, determining not to start dual identity verification, wherein the second preset camera pixel reference value is less than the first preset camera pixel reference value;

In the case where P is less than the second preset camera pixel reference value, it is determined to start dual identity verification.

The advantage of this embodiment is that, on the one hand, when the pixel value of the camera is less than or equal to the preset pixel reference value of the camera, the recording duration is inversely proportional to the pixel value of the camera, that is, the smaller the pixel value of the camera, the The higher the total duration of the recorded video, the total duration of the video obtained is different for different pixel values of the camera, so that when the pixel value of the camera is small, the total duration of the video can be increased to obtain an identity verification video that contains more information. , To ensure the reliability and security of identity verification; on the other hand, when the pixel value of the camera exceeds the preset camera pixel reference value, by keeping the determined total recording time at a fixed value, you can To ensure the reliability of identity verification, make the total recording time small enough to reduce the consumption of resources such as bandwidth and storage space. In addition, when the pixel value of the camera is low enough, that is, the clarity of the identity video taken by the camera In the case that the security verification needs cannot be met, the security of the identity verification can be improved to a certain extent by starting the dual identity verification.

Referring to FIG. 3, a detailed flowchart of step 230 of an embodiment is shown, which specifically includes the following steps:

Step 231: When the pixel value of the camera reaches the first predetermined pixel value threshold, the preset first duration is used as the total duration of recording and it is determined not to start dual identity verification.

The first duration can be any duration, for example, it can be 10 minutes.

Step 232: When the pixel value of the camera is less than the first predetermined pixel value threshold and greater than or equal to the second predetermined pixel value threshold, use the preset second duration as the total duration of recording and determine not to start dual identity verification.

Wherein, the second duration is greater than the first duration.

Step 233: In the case that the pixel value of the camera is less than the second predetermined pixel value threshold, use the preset third duration as the total duration of recording and determine to start dual identity verification, wherein the third duration is greater than the second duration .

Wherein, the third duration is greater than the second duration.

It can be seen from this embodiment that the size relationship of the total duration selected as the recording is: third duration>second duration>first duration, and the size relationship of the total duration selected as the recording corresponding to the required camera pixel value is The third duration<the second duration<the first duration, it can be seen that as the obtained pixel value of the camera of the user end increases, the total duration of the selected video recording becomes shorter and shorter.

Therefore, the advantage of this embodiment is that the predetermined pixel value threshold is used to distinguish the recording duration, which ensures that when the pixel value of the camera is low, the video recording duration can be increased to obtain an identity verification video that contains more information. When the pixel value of the camera is very small, double identity verification must be started to ensure the reliability and security of identity verification.

Step 240: In the case where it is determined to start dual identity verification, instruct the camera of the client terminal to record a video with the total duration in the background according to a predetermined rule, and instruct the client terminal to receive dual identity verification information from the user To obtain the identity verification video and the double identity verification information returned by the client as identity verification information.

In one embodiment, the user end is a smart phone, and the camera of the user end is a front camera.

In one embodiment, the dual identity verification information is the action information received by the user terminal and merged into the identity verification video by the user according to an instruction. According to a predetermined rule, the user terminal’s camera is instructed to record in the background for the duration Video with a total length of time, and instruct the client to receive the dual identity verification information from the user, and obtain the identity verification video and the dual identity verification information returned by the client, as identity verification information, including: according to predetermined rules Instruct the camera of the client to record a video with the total duration in the background, and instruct the client to receive the dual identity verification information from the user, and obtain the dual identity returned by the client by means of a video stream The authentication video of the authentication information is used as the authentication information.

The advantage of this embodiment is that by combining the data of the identity verification video and the double identity verification information at the same time, it is avoided that the two pieces of data are received separately and the resource consumption is reduced.

In one embodiment, the way of receiving the identity verification video returned by the client is to receive the entire identity verification video obtained from the video returned by the client after the camera recording of the client ends.

The predetermined rule is a way to instruct the camera of the user end to record video in the background.

In one embodiment, the predetermined rule includes: obtaining the current time and two random numbers; determining the larger random number from the two random numbers as the first random number, and using the smaller random number as the first random number. Two random numbers; starting from the current time, every second is the time period of the first random number, instructing the camera of the user end to perform a video whose number of seconds is the difference between the first random number and the second random number Record until the total length of the recorded video reaches the total length.

The advantage of this embodiment is that when a random time is selected to instruct the client to start camera recording, a random time is selected to end the recording, which can further reduce the possibility of screen recording cheating due to the user's grasp of the recording start time in advance It further improves the authenticity of the obtained identity verification video, and improves the legality and security of identity verification.

In an embodiment, the obtaining the current time and two random numbers includes:

Obtain the current time and choose any random number; acquire another random number within the range where the absolute value of the difference with the random number is greater than the first predetermined random number threshold.

The advantage of this embodiment is that the distance between the two random numbers is limited to ensure that the distance between the two random numbers is large enough, so that the continuous recording time of the camera based on the two random numbers is large enough , To a certain extent, to ensure the reliability and safety of obtaining video.

In one embodiment, the predetermined rule includes:

In response to receiving an instruction from the user terminal to accept the protocol information, obtain the current time and two random numbers, where the two random numbers are integers less than a second predetermined random number threshold;

Any one of the two random numbers is selected as the third random number, and the other random number is used as the fourth random number;

Starting from the current time, every second is the time period of the third random number, instructing the camera of the user side to record the video of the time period of the fourth random number for the number of seconds until the recorded video Reach the stated duration;

The video recorded by the user terminal during all the time periods corresponding to the fourth random number is used as the identity verification video.

The advantage of this embodiment is that since the recording time interval and recording duration of the identity verification video are random, the credibility of the obtained identity verification video is improved.

Step 250: In the case where it is determined not to start dual identity verification, instruct the camera of the client terminal to record a video with the total duration in the background according to a predetermined rule, and obtain the identity verification video returned by the client terminal as identity verification information.

Since there is no need to start dual identity verification, only the identity verification video returned by the client can be used as the identity verification information. The method used in this step to instruct the camera of the client to record video is the same as the aforementioned predetermined The specific implementation of the rules can be the same or different, and will not be repeated here.

Step 260: Receive the identity document information uploaded by the user terminal.

The ID information uploaded by the user may be various information that can determine the user's face image, such as the front photo of the resident ID card or the passport photo.

Step 270: Determine that the user's identity is legal based on the identity verification information and the identity document information.

In an embodiment, the specific steps of step 270 are shown in FIG. 5, and step 270 specifically includes the following steps:

Step 271: In a case where the identity verification information includes dual identity verification information, verify whether the user's identity is legal based on the dual identity verification information.

In one embodiment, the dual identity verification information is a blinking action, and the verifying whether the user's identity is legal based on the dual identity verification information includes:

Determining whether the time for instructing the user terminal to receive the dual identity verification information from the user is consistent with the time for blinking;

If yes, it is determined to verify that the user's identity is legal based on the dual identity verification information;

If not, it is determined that verification of the identity of the user based on the dual identity verification information is illegal.

Step 272: If yes, determine that the user's identity is legal based on the identity verification video and the identity document information.

When the user's dual identity verification information is verified, it is necessary to verify the identity verification video.

Step 273: In the case that the identity verification information does not include dual identity verification information, determine that the user's identity is legal based on the identity verification video and the identity document information.

In one embodiment, the determining that the user's identity is legal based on the identity verification information and the identity document information includes: dividing the identity verification video into frames to obtain multiple image frames; and determining the divided image frames Whether the number of image frames in which the human face is consistent with the human face in the identity document information is greater than a predetermined image frame number threshold; if so, it is determined that the identity of the user is legal.

The method of dividing the authentication video into image frames can be achieved by calling tools such as Opencv and MATLAB.

In an embodiment, the determining that the user’s identity is legal based on the identity verification information and the identity document information includes: dividing the identity verification video into frames to obtain multiple image frames; In determining whether the number of image frames with a human face consistent with the human face in the identity document information is greater than a predetermined image frame number threshold; if so, it is determined that the identity of the user is legal.

In an embodiment, the judging whether the number of image frames in which the human face is consistent with the human face in the identity document information in the divided image frames is greater than a predetermined image frame number threshold includes:

For each image frame in the divided image frames, determining whether the face of the image frame is consistent with the face in the ID information;

Acquiring the number of image frames in which the human face consistent with the human face in the ID information is recorded;

It is determined whether the number is greater than a predetermined image frame number threshold.

The specific method of comparing whether the face in the image frame is consistent with the face in the ID information can be performed by using a trained neural network model, for example, a convolutional neural network model can be used to compare faces; It can also be done by calling an existing application programming interface.

The advantage of this embodiment is that, by judging all image frames by comparing faces, and then obtaining the number of image frames that record the faces consistent with the faces in the ID information, the identity verification video is legal Sex can be more guaranteed.

In an embodiment, judging whether the number of image frames in which the human face is consistent with the human face in the ID information is greater than a predetermined image frame number threshold in the divided image frames includes:

Starting from the first divided image frame, determine whether the face of each image frame is consistent with the face in the ID information;

Acquiring the number of image frames in which the determined human face is consistent with the human face in the ID information;

When the number is greater than the predetermined image frame number threshold, the judgment is ended, and it is determined that the number of image frames in the divided image frames with the human face consistent with the human face in the ID information is greater than the predetermined image frame number threshold.

Because in some cases, it is not necessary to judge all image frames to confirm whether the number of image frames in which the human face is consistent with the human face in the ID information in the divided image frames is greater than the predetermined number of image frames threshold, so This embodiment improves the efficiency of verifying the legality of the user's identity to a certain extent, and reduces the calculation overhead.

In an embodiment, the determining that the user's identity is legal based on the identity verification video and the identity document information includes:

Divide the identity verification video into frames to obtain multiple image frames; obtain the number of image frames in which the face is consistent with the face in the ID information as the first number; obtain the number of all divided image frames as The second number; determine the ratio of the first number to the second number; if the ratio is greater than a predetermined ratio threshold, it is determined that the identity of the user is legal.

Due to factors such as different screen recording times, the number of image frames divided into different identity verification videos may be different. The advantage of this embodiment is that the number of image frames that match the human face with the human face in the ID information is sum The relative size relationship of the number of all image frames is used as a standard for determining the legality of the user's identity, which improves the rationality and accuracy of identity verification.

Divide the identity verification video into frames to obtain multiple image frames;

Any random number within the range less than the predetermined fifth random number threshold is used as the fifth random number, and any random number within the range less than the predetermined sixth random number threshold is selected as the sixth random number;

From the plurality of image frames sorted by time, extract the image frame sorted as the fifth random number;

Starting from the image frame sorted as the fifth random number, acquiring an image frame for every image frame having the sixth random number;

In the case that the faces in all the extracted image frames are consistent with the faces in the ID information, it is determined that the identity of the user is legal.

The advantage of this embodiment is that the image frames are extracted by random sampling to verify whether the user's identity is legal, which reduces the amount of calculation, thereby improving the efficiency of user authentication. At the same time, the process of extracting image frames is completely random. , To ensure the security of identity verification.

Fig. 4 is a flowchart of a predetermined rule according to an embodiment shown in the embodiment corresponding to Fig. 2. As shown in Figure 4, it includes the following steps:

Step 410: Obtain the current time and a random number.

In one embodiment, the random number is acquired within a predetermined range. For example, the predetermined range may be [0,100].

Step 420: Calculate the sum of the current time and the time period in which the number of seconds is the random number, as the time for starting the camera of the user end to start recording.

For example, the current time is 20:18:09, and the obtained random number is 85. Since 85=00:01:25, the obtained time when the camera of the user terminal is started to start recording is 20:19:34.

Step 430: When the current time reaches the time when the camera of the client terminal is started to start recording, instruct the camera of the client terminal to start recording with the total duration to obtain an identity verification video.

The advantage of this embodiment is that since the time for instructing the camera on the user side to start recording is determined according to a random number, the time for instructing the camera on the user side to start recording is random. The advantage of this is that it avoids screen recording cheating caused by the user in advance of the recording start time, such as illegal acts such as authentication by an intermediary or counterfeit authentication by others, and improves the authenticity of the obtained identity verification video.

This application also provides an identity verification device, and the following are device embodiments of this application.

Fig. 6 is a block diagram showing an identity verification device according to an exemplary embodiment. As shown in FIG. 6, the identity verification device 600 includes:

The return module 610 is configured to, when receiving an identity verification request from the client, return to the client the protocol information including the user's identity verification means.

The obtaining module 620 is configured to obtain the pixel value of the camera of the user end in response to receiving an instruction from the user end to accept the protocol information.

The first determining module 630 is configured to determine the total duration of recording and whether to start dual identity verification according to the pixel value of the camera.

The indicating module 640 is configured to instruct the user terminal’s camera to record a video with the total duration in the background in the background according to a predetermined rule, and instruct the user terminal to receive the secondary identity verification from the user. Re-identification information, obtaining the identity verification video returned by the user terminal and the double identity verification information as identity verification information; and

In the case of determining not to start dual identity verification, instruct the camera of the client terminal to record a video with the total duration in the background according to a predetermined rule, and obtain the identity verification video returned by the client terminal as the identity verification information.

The receiving module 650 is configured to receive the identity document information uploaded by the user terminal.

The second determining module 660 is configured to determine that the user's identity is legal based on the identity verification information and the identity document information.

In one embodiment, the determining the total duration of recording and whether to start dual identity verification according to the pixel value of the camera includes:

In the case that the pixel value of the camera reaches the first predetermined pixel value threshold, use the preset first duration as the total duration of recording and determine not to start dual identity verification;

In the case that the pixel value of the camera is less than the first predetermined pixel value threshold and greater than or equal to the second predetermined pixel value threshold, the preset second duration is used as the total duration of the recording and the dual identity verification is determined not to be initiated, wherein The second duration is greater than the first duration;

In the case that the pixel value of the camera is less than the second predetermined pixel value threshold, the preset third duration is used as the total duration of the recording and the dual identity verification is determined to be initiated, wherein the third duration is greater than the second duration.

In one embodiment, the predetermined rule includes:

Get the current time and a random number;

Calculating the sum of the current time and the time period in which the number of seconds is the random number as the time for starting the camera of the user end to start recording;

When the current time reaches the time when the camera of the client terminal is activated to start recording, the camera of the client terminal is instructed to start recording with the total duration to obtain an identity verification video.

In one embodiment, the predetermined rule includes:

Get the current time and two random numbers;

Determining the larger random number among the two random numbers as the first random number, and using the smaller random number as the second random number;

Starting from the current time, every second is the time period of the first random number, instruct the camera of the user end to record the video with the difference between the first random number and the second random number in seconds until it has been The total length of the recorded video reaches the total length.

In one embodiment, the determining that the user's identity is legal based on the identity verification information and the identity document information includes:

In the case that the identity verification information includes dual identity verification information, verifying whether the identity of the user is legal based on the dual identity verification information;

If yes, determine that the user's identity is legal based on the identity verification video and the identity document information;

In the case that the identity verification information does not include dual identity verification information, it is determined that the user's identity is legal based on the identity verification video and the identity document information.

Judging whether the number of image frames in which the human face contained in the divided image frames is consistent with the human face in the ID information is greater than a predetermined image frame number threshold;

If it is, it is determined that the identity of the user is legal.

According to the third aspect of the present application, there is also provided a computing device that executes all or part of the steps of any one of the aforementioned identity verification methods. The computing equipment includes:

At least one processor; and

A memory communicatively connected with the at least one processor; wherein,

The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor, so that the at least one processor can execute as shown in any one of the above exemplary embodiments. Authentication method.

Those skilled in the art can understand that various aspects of the present application can be implemented as a system, method, or program product. Therefore, each aspect of the present application can be specifically implemented in the following forms, namely: complete hardware implementation, complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software implementations, which can be collectively referred to herein as "Circuit", "Module" or "System".

The computing device 700 according to this embodiment of the present application will be described below with reference to FIG. 7. The computing device 700 shown in FIG. 7 is only an example, and should not bring any limitation to the function and scope of use of the embodiments of the present application.

As shown in FIG. 7, the computing device 700 is represented in the form of a general-purpose computing device. The components of the computing device 700 may include, but are not limited to: the aforementioned at least one processing unit 710, the aforementioned at least one storage unit 720, and a bus 730 connecting different system components (including the storage unit 720 and the processing unit 710).

Wherein, the storage unit stores program code, and the program code can be executed by the processing unit 710, so that the processing unit 710 executes the various exemplary methods described in the "Embodiment Method" section of this specification. Implementation steps.

The storage unit 720 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 721 and/or a cache storage unit 722, and may further include a read-only storage unit (ROM) 723.

The storage unit 720 may also include a program/utility tool 724 having a set of (at least one) program module 725. Such program module 725 includes but is not limited to: an operating system, one or more application programs, other program modules, and program data, Each of these examples or some combination may include the implementation of a network environment.

The bus 730 may represent one or more of several types of bus structures, including a storage unit bus or a storage unit controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local area using any bus structure among multiple bus structures. bus.

The computing device 700 may also communicate with one or more external devices 900 (such as keyboards, pointing devices, Bluetooth devices, etc.), and may also communicate with one or more devices that enable a user to interact with the computing device 700, and/or communicate with Any device (such as a router, modem, etc.) that enables the computing device 700 to communicate with one or more other computing devices. This communication can be performed through an input/output (I/O) interface 750. In addition, the computing device 700 may also communicate with one or more networks (such as a local area network (LAN), a wide area network (WAN), and/or a public network, such as the Internet) through the network adapter 760. As shown in the figure, the network adapter 760 communicates with other modules of the computing device 700 through the bus 730. It should be understood that although not shown in the figure, other hardware and/or software modules can be used in conjunction with the computing device 700, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives And data backup storage system, etc.

Through the description of the foregoing embodiments, those skilled in the art can easily understand that the exemplary embodiments described herein can be implemented by software, or can be implemented by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present application can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (can be a CD-ROM, U disk, mobile hard disk, etc.) or on the network , Including several instructions to make a computing device (which may be a personal computer, server, terminal device, or network device, etc.) execute the method according to the embodiment of the present application.

According to the fourth aspect of the present application, there is also provided a computer non-volatile readable storage medium, on which is stored a program product capable of implementing the above method of this specification. In some possible implementation manners, various aspects of the present application can also be implemented in the form of a program product, which includes program code. When the program product runs on a terminal device, the program code is used to enable the The terminal device executes the steps according to various exemplary embodiments of the present application described in the above-mentioned "Exemplary Method" section of this specification.

Referring to FIG. 8, a computer non-volatile readable storage medium 800 for implementing the above method according to an embodiment of the present application is described, which may adopt a portable compact disk read-only memory (CD-ROM) and includes program code , And can run on terminal devices, such as personal computers. However, the program product of this application is not limited to this. In this document, the computer non-volatile readable storage medium can be any tangible medium that contains or stores a program, and the program can be used by or in combination with an instruction execution system, device, or device. In conjunction with.

The program product can use any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or device, or a combination of any of the above. More specific examples (non-exhaustive list) of readable storage media include: electrical connections with one or more wires, portable disks, hard disks, random access memory (RAM), read only memory (ROM), erasable Type programmable read only memory (EPROM or flash memory), optical fiber, portable compact disk read only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination of the above.

The computer-readable signal medium may include a data signal propagated in baseband or as a part of a carrier wave, and readable program code is carried therein. This propagated data signal can take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. The readable signal medium may also be any readable medium other than a readable storage medium, and the readable medium may send, propagate, or transmit a program for use by or in combination with the instruction execution system, apparatus, or device.

The program code contained on the readable medium can be transmitted by any suitable medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.

The program code used to perform the operations of this application can be written in any combination of one or more programming languages. The programming languages include object-oriented programming languages—such as Java, C++, etc., as well as conventional procedural Programming language-such as "C" language or similar programming language. The program code can be executed entirely on the user's computing device, partly on the user's device, executed as an independent software package, partly on the user's computing device and partly executed on the remote computing device, or entirely on the remote computing device or server Executed on. In the case of a remote computing device, the remote computing device can be connected to a user computing device through any kind of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using Internet service providers) Business to connect via the Internet).

In addition, the above-mentioned drawings are only schematic illustrations of the processing included in the method according to the exemplary embodiments of the present application, and are not intended for limitation. It is easy to understand that the processing shown in the above drawings does not indicate or limit the time sequence of these processings. In addition, it is easy to understand that these processes can be executed synchronously or asynchronously in multiple modules, for example.

It should be understood that the present application is not limited to the precise structure that has been described above and shown in the drawings, and various modifications and changes can be performed without departing from its scope. The scope of the application is only limited by the appended claims.

Claims

An identity verification method including:

When receiving the identity verification request from the client, returning to the client the protocol information containing the user identity verification means, wherein the user identity verification means in the protocol information includes video recording;

In response to receiving an instruction from the client to accept the protocol information, acquiring the pixel value of the camera of the client;

According to the pixel value of the camera, determine the total duration of the recording and whether to start dual identity verification;

In the case of determining to start the dual identity verification, instruct the user end's camera to record a video with the total duration in the background for the total duration according to a predetermined rule, and instruct the user end to receive the dual identity verification information from the user to obtain all The identity verification video and the dual identity verification information returned by the user terminal are used as identity verification information;

In the case of determining not to start dual identity verification, instruct the camera of the user end to record a video whose duration is the total duration in the background according to a predetermined rule, and obtain the identity verification video returned by the user end as the identity verification information;

Receiving the ID information uploaded by the client;

It is determined that the user's identity is legal based on the identity verification information and the identity document information.
The method according to claim 1, wherein the determining the total duration of recording and whether to start dual identity verification according to the pixel value of the camera comprises:

In the case that the pixel value of the camera reaches the first predetermined pixel value threshold, use the preset first duration as the total duration of recording and determine not to start dual identity verification;

In the case that the pixel value of the camera is less than the first predetermined pixel value threshold and greater than or equal to the second predetermined pixel value threshold, the preset second duration is used as the total duration of the recording and the dual identity verification is determined not to be initiated, wherein The second duration is greater than the first duration;

In the case that the pixel value of the camera is less than the second predetermined pixel value threshold, the preset third duration is used as the total duration of the recording and the dual identity verification is determined to be initiated, wherein the third duration is greater than the second duration.
The method according to claim 1, wherein the determining the total duration of recording and whether to start dual identity verification according to the pixel value of the camera comprises:

Determine the total duration of recording based on the pixel value of the camera and the following formula:

Among them, T out is the determined total recording duration, P is the pixel value of the camera, Pref is the first preset camera pixel reference value, T ref1 is the first predetermined duration, and T ref2 is the second predetermined duration, where, T ref2 is less than or equal to T ref1 ;

If P is greater than or equal to the second preset camera pixel reference value, determining not to start dual identity verification, wherein the second preset camera pixel reference value is less than the first preset camera pixel reference value;

In the case where P is less than the second preset camera pixel reference value, it is determined to start dual identity verification.
The method according to claim 1, wherein the predetermined rule comprises:

Get the current time and a random number;

Calculating the sum of the current time and the time period in which the number of seconds is the random number as the time for starting the camera of the user end to start recording;

When the current time reaches the time when the camera of the client terminal is activated to start recording, the camera of the client terminal is instructed to start recording with the total duration to obtain an identity verification video.
The method according to claim 1, wherein the predetermined rule comprises:

Get the current time and two random numbers;

Determine the larger random number among the two random numbers as the first random number, and use the smaller random number as the second random number;

Starting from the current time, every second is the time period of the first random number, instruct the camera of the user end to record the video with the difference between the first random number and the second random number in seconds until it has been The total length of the recorded video reaches the total length.
The method according to claim 1, wherein the determining that the user's identity is legal based on the identity verification information and the identity document information comprises:

In the case that the identity verification information includes dual identity verification information, verifying whether the identity of the user is legal based on the dual identity verification information;

If yes, determine that the user's identity is legal based on the identity verification video and the identity document information;

In the case that the identity verification information does not include double identity verification information, it is determined that the user's identity is legal based on the identity verification video and the identity document information.
The method according to claim 6, wherein the determining that the user's identity is legal based on the identity verification information and the identity document information comprises:

Divide the identity verification video into frames to obtain multiple image frames;

Judging whether the number of image frames in which the human face contained in the divided image frames is consistent with the human face in the identity document information is greater than a predetermined image frame number threshold;

If it is, it is determined that the identity of the user is legal.
An identity verification device includes:

The return module is configured to, when receiving an identity verification request from the client, return to the client the protocol information including the means of user identity verification;

The obtaining module is configured to obtain the pixel value of the camera of the user end in response to receiving an instruction to accept the protocol information from the user end;

The first determining module is configured to determine the total duration of recording and whether to start dual identity verification according to the pixel value of the camera;

The indication module is configured to instruct the user terminal’s camera to record a video whose duration is the total duration in the background according to a predetermined rule, and instruct the client terminal to receive the dual identity verification from the user. Identity verification information, the identity verification video returned by the client and the double identity verification information are obtained as identity verification information; and

In the case of determining not to start dual identity verification, instruct the camera of the user end to record a video whose duration is the total duration in the background according to a predetermined rule, and obtain the identity verification video returned by the user end as the identity verification information;

The receiving module is configured to receive the identity document information uploaded by the user terminal;

The second determining module is configured to determine that the user's identity is legal based on the identity verification information and the identity document information.
The device according to claim 8, wherein said determining the total duration of recording and whether to activate dual identity verification according to the pixel value of the camera comprises:

In the case that the pixel value of the camera reaches the first predetermined pixel value threshold, use the preset first duration as the total duration of the video recording and determine not to start dual identity verification;

In the case that the pixel value of the camera is less than the first predetermined pixel value threshold and greater than or equal to the second predetermined pixel value threshold, the preset second duration is used as the total duration of the recording and the dual identity verification is determined not to be initiated, wherein The second duration is greater than the first duration;

In the case that the pixel value of the camera is less than the second predetermined pixel value threshold, the preset third duration is used as the total duration of the recording and the dual identity verification is determined to be initiated, wherein the third duration is greater than the second duration.
8. The device according to claim 8, wherein said determining the total duration of recording and whether to activate dual identity verification according to the pixel value of the camera comprises:

Determine the total duration of recording based on the pixel value of the camera and the following formula:

Among them, T out is the determined total recording duration, P is the pixel value of the camera, Pref is the first preset camera pixel reference value, T ref1 is the first predetermined duration, and T ref2 is the second predetermined duration, where, T ref2 is less than or equal to T ref1 ;

If P is greater than or equal to the second preset camera pixel reference value, determining not to start dual identity verification, wherein the second preset camera pixel reference value is less than the first preset camera pixel reference value;

In the case where P is less than the second preset camera pixel reference value, it is determined to start dual identity verification.
The apparatus according to claim 8, wherein the predetermined rule comprises:

Get the current time and a random number;

Calculating the sum of the current time and the time period in which the number of seconds is the random number as the time for starting the camera of the user end to start recording;

When the current time reaches the time when the camera of the client terminal is activated to start recording, the camera of the client terminal is instructed to start recording with the total duration to obtain an identity verification video.
The apparatus according to claim 8, wherein the predetermined rule comprises:

Get the current time and two random numbers;

Determining the larger random number among the two random numbers as the first random number, and using the smaller random number as the second random number;

Starting from the current time, every second is the time period of the first random number, instruct the camera of the user end to record the video with the difference between the first random number and the second random number in seconds until it has been The total length of the recorded video reaches the total length.
The device according to claim 8, wherein the determining that the user's identity is legal based on the identity verification information and the identity document information comprises:

In the case that the identity verification information includes dual identity verification information, verifying whether the identity of the user is legal based on the dual identity verification information;

If yes, determine that the user's identity is legal based on the identity verification video and the identity document information;

In the case that the identity verification information does not include double identity verification information, it is determined that the user's identity is legal based on the identity verification video and the identity document information.
The apparatus according to claim 13, wherein the determining that the user's identity is legal based on the identity verification information and the identity document information comprises:

Divide the identity verification video into frames to obtain multiple image frames;

Judging whether the number of image frames in which the human face contained in the divided image frames is consistent with the human face in the identity document information is greater than a predetermined image frame number threshold;

If it is, it is determined that the identity of the user is legal.
A computing device includes a memory and a processor, the memory stores computer readable instructions, and when the computer readable instructions are executed by the processor, the processor executes:

When receiving the identity verification request from the client, returning to the client the protocol information containing the user identity verification means, wherein the user identity verification means in the protocol information includes video recording;

In response to receiving an instruction from the client to accept the protocol information, acquiring the pixel value of the camera of the client;

According to the pixel value of the camera, determine the total duration of the recording and whether to start dual identity verification;

In the case of determining to start the dual identity verification, instruct the user end's camera to record a video with the total duration in the background for the total duration according to a predetermined rule, and instruct the user end to receive the dual identity verification information from the user to obtain all The identity verification video and the dual identity verification information returned by the user terminal are used as identity verification information;

In the case of determining not to start dual identity verification, instruct the camera of the user end to record a video whose duration is the total duration in the background according to a predetermined rule, and obtain the identity verification video returned by the user end as the identity verification information;

Receiving the ID information uploaded by the client;

It is determined that the user's identity is legal based on the identity verification information and the identity document information.
The computing device according to claim 15, wherein the determining the total duration of recording and whether to start dual identity verification according to the pixel value of the camera comprises:

In the case that the pixel value of the camera reaches the first predetermined pixel value threshold, use the preset first duration as the total duration of the video recording and determine not to start dual identity verification;

In the case that the pixel value of the camera is less than the first predetermined pixel value threshold and greater than or equal to the second predetermined pixel value threshold, the preset second duration is used as the total duration of the recording and the dual identity verification is determined not to be initiated, wherein The second duration is greater than the first duration;

In the case that the pixel value of the camera is less than the second predetermined pixel value threshold, the preset third duration is used as the total duration of the recording and the dual identity verification is determined to be initiated, wherein the third duration is greater than the second duration.
The computing device according to claim 15, wherein the determining the total duration of recording and whether to start dual identity verification according to the pixel value of the camera comprises:

Determine the total duration of recording based on the pixel value of the camera and the following formula:

Among them, T out is the determined total recording duration, P is the pixel value of the camera, Pref is the first preset camera pixel reference value, T ref1 is the first predetermined duration, and T ref2 is the second predetermined duration, where, T ref2 is less than or equal to T ref1 ;

If P is greater than or equal to the second preset camera pixel reference value, determining not to start dual identity verification, wherein the second preset camera pixel reference value is less than the first preset camera pixel reference value;

In the case where P is less than the second preset camera pixel reference value, it is determined to start dual identity verification.
The computing device according to claim 15, wherein the predetermined rule comprises:

Get the current time and a random number;

Calculating the sum of the current time and the time period in which the number of seconds is the random number as the time for starting the camera of the user end to start recording;

When the current time reaches the time when the camera of the client terminal is activated to start recording, the camera of the client terminal is instructed to start recording with the total duration to obtain an identity verification video.
The computing device according to claim 15, wherein the predetermined rule comprises:

Get the current time and two random numbers;

Determining the larger random number among the two random numbers as the first random number, and using the smaller random number as the second random number;

Starting from the current time, every second is the time period of the first random number, instruct the camera of the user end to record the video with the difference between the first random number and the second random number in seconds until it has been The total length of the recorded video reaches the total length.
The computing device according to claim 15, wherein the determining that the identity of the user is legal based on the identity verification information and the identity document information comprises:

In the case that the identity verification information includes dual identity verification information, verifying whether the identity of the user is legal based on the dual identity verification information;

If yes, determine that the user's identity is legal based on the identity verification video and the identity document information;

In the case that the identity verification information does not include double identity verification information, it is determined that the user's identity is legal based on the identity verification video and the identity document information.
The computing device of claim 20, wherein the determining that the user's identity is legal based on the identity verification information and the identity document information comprises:

Divide the identity verification video into frames to obtain multiple image frames;

Judging whether the number of image frames in which the human face contained in the divided image frames is consistent with the human face in the identity document information is greater than a predetermined image frame number threshold;

If it is, it is determined that the identity of the user is legal.
A computer non-volatile readable storage medium storing computer readable instructions, which when executed by one or more processors, cause one or more processors to execute any one of claims 1 to 7 The method described in the item.