WO2021190070A1

WO2021190070A1 - Biological verification method and apparatus

Info

Publication number: WO2021190070A1
Application number: PCT/CN2020/142549
Authority: WO
Inventors: 胡锦华
Original assignee: 支付宝(杭州)信息技术有限公司
Priority date: 2020-03-25
Filing date: 2020-12-31
Publication date: 2021-09-30
Also published as: CN111400690A; CN114817884A; CN111400690B

Abstract

A biological verification method and an apparatus, used for solving the problems where current means for biological verification impose high terminal integrated performance requirements, are unable to satisfy requirements for operational risk, and can easily cause biological information of users to be leaked. The method comprises: in response to a service request sent by a service requester, a biological verification request with respect to the service requester is sent to a second application. Once an information acquisition instruction sent by the second application is received, biological feature information for the service requester matching a means for biological verification is obtained (S104). The obtained biological feature information is sent to the second application, the second application being used for performing verification on the biological feature information. A first verification result sent by the second application is received, and whether to process the service request is determined according to the first verification result (S108).

Description

Biological verification method and device

Technical field

This specification relates to the field of biological identification technology, and in particular to a biological verification method and device.

Background technique

As the application programs on user terminals become more and more extensive, the security of user information has become a key issue that must be resolved in today's information age. The information verification module integrated within the application program is usually used to verify the legitimacy or security of the information. However, taking into account the technical and operational capabilities of the application itself, this verification method will not only increase the difficulty of integration of the application, but also cannot fight against criminals for a long time, resulting in reduced risk operation capabilities. In addition, this verification method needs to store user information locally in the terminal, which not only occupies terminal resources, but also easily leads to leakage of user information.

Summary of the invention

On the one hand, one or more embodiments of this specification provide a biometric verification method applied to a first application, including: in response to a service request sent by a service requester, sending a biometric verification method for the service requester to a second application. A verification request, where the biometric verification request includes the identification information of the first application and the biometric verification mode corresponding to the service requester. When receiving the information obtaining instruction sent by the second application, obtain the biometric information of the service requester that matches the biometric verification mode. Send the acquired biometric information to the second application, where the second application is used to verify the biometric information, and send the first verification result corresponding to the biometric information to The first application. Receiving the first verification result sent by the second application, and determining whether to process the service request according to the first verification result.

On the other hand, one or more embodiments of the present specification provide a biometric verification method applied to a second application, including: receiving a biometric verification request for a service requester sent by the first application, the biometric verification request Including the identification information of the first application and the biometric verification method for the service requester. Send an information acquisition instruction to the first application, where the information acquisition instruction is used to instruct the first application to acquire the biometric information of the service requester that matches the biometric verification method, and combine the biometric information Send to the second application. Receiving the biometric information sent by the first application. The biometric information is verified to obtain a first verification result, and the first verification result is sent to the first application.

In another aspect, one or more embodiments of the present specification provide a biometric verification device, which is applied to a first application, and includes: a first sending module, in response to a service request sent by a service requester, sending information to a second application The biometric verification request of the service requester, where the biometric verification request includes the identification information of the first application and the biometric verification mode corresponding to the service requester. The first obtaining module, when receiving the information obtaining instruction sent by the second application, obtains the biometric information of the service requester that matches the biometric verification mode. The second sending module sends the acquired biometric information to the second application, and the second application is used to verify the biometric information and to compare the first biometric information corresponding to the biometric information. The verification result is sent to the first application. The first determining module receives the first verification result sent by the second application, and determines whether to process the service request according to the first verification result.

In another aspect, one or more embodiments of the present specification provide a biometric verification device applied to a second application, including: a first receiving module, which receives a biometric verification request for a service requester sent by the first application, so The biometric verification request includes identification information of the first application and a biometric verification method for the service requester. The third sending module sends an information acquisition instruction to the first application, where the information acquisition instruction is used to instruct the first application to acquire the biometric information of the service requester that matches the biometric verification method, and to The biometric information is sent to the second application. The second receiving module receives the biometric information sent by the first application. The first verification module verifies the biometric information to obtain a first verification result, and sends the first verification result to the first application.

In still another aspect, one or more embodiments of the present specification provide a biometric verification device, including: a processor; and a memory arranged to store computer-executable instructions that, when executed, cause the processing to Device: In response to the service request sent by the service requester, send a biometric verification request for the service requester to the second application, the biometric verification request including the identification information of the first application and the service requester Corresponding biological verification method. When receiving the information obtaining instruction sent by the second application, obtain the biometric information of the service requester that matches the biometric verification mode. Send the acquired biometric information to the second application, where the second application is used to verify the biometric information, and send the first verification result corresponding to the biometric information to The first application. Receiving the first verification result sent by the second application, and determining whether to process the service request according to the first verification result.

In still another aspect, one or more embodiments of the present specification provide a biometric verification device, including: a processor; and a memory arranged to store computer-executable instructions that, when executed, cause the processing to Device: receiving a biometric verification request for a service requester sent by a first application, where the biometric verification request includes identification information of the first application and a biometric verification method for the service requester. Send an information acquisition instruction to the first application, where the information acquisition instruction is used to instruct the first application to acquire the biometric information of the service requester that matches the biometric verification method, and combine the biometric information Send to the second application. Receiving the biometric information sent by the first application. The biometric information is verified to obtain a first verification result, and the first verification result is sent to the first application.

In another aspect, one or more embodiments of this specification provide a storage medium for storing computer-executable instructions that, when executed, realize the following process: in response to a business request sent by a business requester, The second application sends a biometric verification request for the service requester, where the biometric verification request includes identification information of the first application and a biometric verification mode corresponding to the service requester. When receiving the information obtaining instruction sent by the second application, obtain the biometric information of the service requester that matches the biometric verification mode. Send the acquired biometric information to the second application, where the second application is used to verify the biometric information, and send the first verification result corresponding to the biometric information to The first application. Receiving the first verification result sent by the second application, and determining whether to process the service request according to the first verification result.

In yet another aspect, one or more embodiments of this specification provide a storage medium for storing computer-executable instructions that, when executed, implement the following process: receiving a service requester sent by a first application A biometric verification request, where the biometric verification request includes identification information of the first application and a biometric verification method for the service requester. Send an information acquisition instruction to the first application, where the information acquisition instruction is used to instruct the first application to acquire the biometric information of the service requester that matches the biometric verification method, and combine the biometric information Send to the second application. Receiving the biometric information sent by the first application. The biometric information is verified to obtain a first verification result, and the first verification result is sent to the first application.

Description of the drawings

In order to more clearly describe the technical solutions in one or more embodiments of this specification, the following will briefly introduce the drawings needed in the description of the embodiments. Obviously, the drawings in the following description are only one of the descriptions of this specification. For some of the embodiments described in or multiple embodiments, for those of ordinary skill in the art, other drawings may be obtained based on these drawings without creative work.

Fig. 1 is a schematic flowchart of a biological verification method according to an embodiment of the present specification;

Fig. 2 is a schematic flowchart of a biological verification method according to another embodiment of the present specification;

Fig. 3 is a schematic flow chart of a biological verification method according to still another embodiment of the present specification;

Fig. 4 is a schematic block diagram of a biological verification device according to an embodiment of the present specification;

Fig. 5 is a schematic block diagram of a biological verification device according to another embodiment of the present specification;

Fig. 6 is a schematic block diagram of a biological verification device according to an embodiment of the present specification;

Fig. 7 is a schematic block diagram of a biological verification device according to another embodiment of the present specification.

Detailed ways

One or more embodiments of this specification provide a biometric verification method and device to solve the problems that existing biometric verification methods have high requirements for terminal integration performance, fail to meet risk operation requirements, and easily lead to leakage of user biometric information.

In order to enable those skilled in the art to better understand the technical solutions in one or more embodiments of this specification, the following will combine the drawings in one or more embodiments of this specification to compare The technical solution is described clearly and completely. Obviously, the described embodiments are only a part of the embodiments in this specification, rather than all the embodiments. Based on one or more embodiments of this specification, all other embodiments obtained by a person of ordinary skill in the art without creative work shall fall within the protection scope of one or more embodiments of this specification.

Fig. 1 is a schematic flowchart of a biological verification method according to an embodiment of the present specification. As shown in Fig. 1, the method is applied to the first application and includes steps S102 to S108.

S102: In response to the service request sent by the service requester, send a biometric verification request for the service requester to the second application, where the biometric verification request includes identification information of the first application and a biometric verification mode corresponding to the service requester.

Among them, the biological verification method can be any existing biological verification method, such as fingerprint recognition, iris recognition, face recognition, and the like.

The first application can be any application installed on a terminal device (such as a mobile phone, a personal computer, etc.). The identification information of the first application may be one or more items of information such as the application name, application icon, and code corresponding to the application of the first application.

The biometric verification method corresponding to the service requester, that is, the biometric verification method used when performing the biometric verification on the service requester. The biometric verification mode corresponding to the service requester may be specified by the service requester, or may be randomly specified by the first application.

The service request may be any request that can be processed by the first user. For example, if the first application is a mobile banking APP, the service request may be a transfer request, a payment request, or the like.

S104: When receiving the information obtaining instruction sent by the second application, obtain the biometric information of the service requester that matches the biometric verification mode.

Among them, the biometric information that matches the biometric verification mode, that is, the acquired biometric information is consistent with the type of information that the biometric verification mode needs to verify. For example, if the biometric verification method is face recognition, then the matching biometric information is facial feature information (or facial feature information); if the biometric verification method is fingerprint recognition, then the matching biometric information is fingerprint feature Information; if the biometric verification method is iris recognition, then the matching biometric information is iris feature information; and so on.

S106: Send the acquired biometric information to a second application, where the second application is used to verify the biometric information, and send the first verification result corresponding to the biometric information to the first application.

S108: Receive a first verification result sent by the second application, and determine whether to process the service request according to the first verification result.

Wherein, the first verification result includes verification success information or verification failure information. The second application can determine whether to process the service request according to the first verification result. Optionally, if the first verification result includes verification success information, the service request is processed; or, other information related to the service request is further verified. If the first verification result includes verification failure information, refuse to process the service request or perform biometric verification on the service requester again.

Using the technical solutions of one or more embodiments of this specification, by sending a biometric verification request for the service requester to the second application, the second application performs biometric verification on the service requester, and feeds back the biometric verification result to the service requester. The first application enables the first application to use the biometric authentication mechanism of the third-party application (ie, the second application) to achieve biometric verification without the need for the first application to integrate a biometric verification module, thereby reducing the integration difficulty of the first application; and, Since the biometric verification mechanism of the second application is used for biometric verification, only a copy of the biometric information of the service requester needs to be stored on the second application side instead of local storage, thus avoiding the problem of occupying local resources of the terminal , To reduce the risk of leakage of biometric information.

In one embodiment, before sending the biometric verification request for the service requester to the second application, it may also be determined whether the service requester agrees to use the biometric verification mechanism of the second application for biometric verification. If the service requester agrees to use the biometric verification mechanism of the second application for biometric verification, the biometric verification method for performing the biometric verification on the service requester may be further determined. The biological verification method can be any existing biological verification method, such as fingerprint recognition, iris recognition, face recognition, etc.

When determining whether the service requester agrees to use the biometric verification mechanism of the second application for biometric verification, first prompt information may be sent, and the first prompt information is used to prompt the service requester whether to use the second application for biometric verification. For example, the first prompt message "Whether to use the second application for biometric verification" is displayed on the screen of the terminal device where the first application is located. If the service requester selects "Yes", it can be determined that the service requester agrees to use the second application for biometric verification; if the service requester selects "No", it can be determined that the service requester does not agree to use the second application for biometric verification .

When receiving a confirmation operation for the first prompt information input by the service requester (for example, the service requester selects "Yes"), the biometric verification request is sent to the second application, so that whether to use it can be selected according to the needs of the service requester The biological verification mechanism of the second application improves the service processing experience of the service requester.

In the case that the service requester agrees to use the second application for biometric verification, the biometric verification method for performing the biometric verification on the service requester may be further determined. Specifically, the biometric verification mode for performing the biometric verification on the service requester can be determined according to the biometric verification mode information input by the service requester. For example, the message "Please select the biometric verification method" is displayed on the screen of the terminal device where the first application is located. At this time, the options corresponding to multiple biometric verification methods should also be displayed for the service requester to choose, and the service requester should The method corresponding to the selected option is used as the biological verification method of this biological verification.

Of course, the service requester can also select multiple options, that is, multiple biometric verification methods. In this case, the second application can be used to sequentially perform biological verification in different ways. For example, if the service requester selects the two methods of "face recognition" and "fingerprint recognition" in turn, when the second application performs the biometric verification, the face recognition method is first used to perform the biometric verification on the service requester. When the face recognition is passed, the fingerprint recognition method is used to perform biometric verification on the service requester. Obviously, the use of multiple biological verification methods for biological verification can improve the accuracy of the biological verification results, thereby enhancing the security of business processing.

In one embodiment, after receiving the first verification result of the service requester sent by the second application, if the first verification result is that the verification is passed, then the service for the service request may be further sent to the second application The verification request, so that the second application verifies the validity of the service request according to the service verification request, and sends the second verification result corresponding to the validity to the first application. After the first application receives the second verification result sent by the second application, if the second verification result is that the verification is passed, the service request is processed.

In this embodiment, the verification of the legality of the service request may include any one or more of verifications, such as: verifying whether the service type corresponding to the service request belongs to a specified type; verifying whether the parameters of the service request are correct; verifying the service Whether the business content corresponding to the request is reasonable; etc.

In this embodiment, after the first application uses the biological verification mechanism of the second application to perform biological verification, the second application may also be used to further verify whether the service request is legal, thereby ensuring the security of service processing to the greatest extent.

In an embodiment, the first verification result includes callback function address information of a service interface that provides a biometric verification service for the second application. Based on the callback function address information, when the first application uses the second application to verify the legality of the service request, it can directly send the service verification request to the service interface corresponding to the callback function address information without going through the second application itself. The business verification request is forwarded to the service interface, thereby saving application resource overhead and improving the speed of business verification.

In one embodiment, after receiving the first verification result of the service requester sent by the second application, if the first verification result is that the verification fails, then a second prompt message is sent, the second prompt message It is used to prompt the service requester to re-enter the biometric information. When the biometric information re-entered by the service requester is acquired, the re-acquired biometric information is sent to the second application for re-verification, and it is determined whether to process the service request according to the verification result of the re-verification.

In this embodiment, if the first verification result is that the verification fails, the biological verification can be performed again, thereby avoiding the verification failure caused by the service requester's operation error. In addition, a threshold for the number of biometric verifications can be preset, that is, when the number of biometric verifications reaches the threshold, if the biometric verification still fails, the biometric verification is no longer performed, and the service request can be rejected at this time.

Fig. 2 is a schematic flowchart of a biological verification method according to another embodiment of the present specification. As shown in Fig. 2, the method is applied to a second application, including S202-S208.

S202: Receive a biometric verification request for a service requester sent by a first application, where the biometric verification request includes identification information of the first application and a biometric verification method for the service requester.

The first application can be any application installed on a terminal device (such as a mobile phone, a personal computer, etc.). The identification information of the first application may be one or more pieces of information such as the application name, application icon, and code corresponding to the application of the first application.

S204: Send an information acquisition instruction to the first application, where the information acquisition instruction is used to instruct the first application to acquire the biometric information matching the biometric verification mode of the service requester, and send the biometric information to the second application.

S206: Receive the biometric information sent by the first application.

S208: Perform verification on the biometric information to obtain a first verification result, and send the first verification result to the first application.

In one embodiment, when the second application verifies the biometric information, it can call a service interface for providing biometric verification services, and the service interface verifies the biometric information and returns the first verification result To the second application.

In one embodiment, the first verification result includes information about whether the verification is passed (for example, the verification is passed or the verification is not passed) and the callback function address information of the service interface that provides the biological verification service for the second application. Wherein, based on the callback function address information contained in the first verification result, when the second application can verify the validity of the service request for the first application, the first application can directly send the service verification request to the callback function address The service interface corresponding to the information does not require the second application to forward the service verification request to the service interface, thereby saving application resource overhead and improving the speed of service verification.

In one embodiment, the second application may receive the service verification request for the service request sent by the first application, and verify the legality of the service request according to the service verification request to obtain the second verification result, and then Send the second verification result to the first application. So that the first application determines whether to process the service request based on the second verification result.

In this embodiment, after the second application receives the business verification request for the business request sent by the first application, it can call the service interface for providing the verification service, and the service interface verifies the validity of the business request , And return the second verification result to the second application, and then the second application returns the verification result to the first application.

The technical solution provided by the foregoing embodiment can perform a biometric check on the service requester based on the biometric check request sent by the first application for the service requester, and feed back the biometric check result to the first application, so that the first application The biometric verification mechanism of the third-party application (ie the second application) can be used to achieve biometric verification without the need for the first application to integrate a biometric verification module, thereby reducing the difficulty of integration of the first application; and, because it is a biological verification using the second application The authentication mechanism performs biometric verification, so only a copy of the biometric information of the service requester needs to be stored on the second application side, instead of local storage, thus avoiding the problem of occupying the local resources of the terminal and reducing the risk of leakage of biometric information .

Fig. 3 is a schematic flowchart of a biometric verification method according to still another embodiment of this specification. As shown in Fig. 3, the service requester is the first user, and the method includes S301 to S311.

S301: When the first application receives the service request sent by the first user, it sends a first prompt message to prompt the first user whether to use the second application for biometric verification.

S302: When the first application receives a confirmation operation for the first prompt information input by the first user, determine a biometric verification mode for performing a biometric verification on the first user.

In this step, the biological verification method can be any existing biological verification method, such as fingerprint recognition, iris recognition, face recognition, etc. The biometric verification mode for performing the biometric verification on the first user may be determined according to the biometric verification mode information input by the first user. For example, the message "Please select the biometric verification method" is displayed on the screen of the terminal device where the first application is located. At this time, the options corresponding to multiple biometric verification methods should also be displayed for the first user to choose. The method corresponding to the selected option is used as the biological verification method of this biological verification.

S303: The first application sends a biometric verification request for the first user to the second application, where the biometric verification request includes the identification information of the first application and the biometric verification mode corresponding to the service requester.

S304: Based on the biometric verification request, the second application sends an information acquisition instruction to the first application to instruct the first application to acquire the biometric information of the first user that matches the biometric verification mode.

S305: The first application obtains the biometric information of the first user that matches the biometric verification mode, and sends the biometric information to the second application.

In this step, when the first application obtains the biometric information of the first user that matches the biometric verification mode, it can call the information obtaining function that matches the biometric verification mode. For example, if the biometric verification method is face recognition, the first application can display a window for obtaining facial information on the terminal screen. When the first user puts his facial image in the window, the first application can obtain To the face information of the first user. For another example, if the biometric verification method is fingerprint recognition, the first application may display a window for entering fingerprints on the terminal screen, or prompt the first user to enter fingerprints through designated buttons on the terminal. After the first user enters the fingerprint through the window or the designated button, the first application will obtain the fingerprint information of the first user.

S306: The second application calls the biometric verification service interface to perform biometric verification on the first user based on the acquired biometric information, obtains the first verification result, and returns the first verification result to the second application.

S307: The second application sends the received first verification result to the first application.

S308: The first application judges whether the biometric verification of the first user is passed according to the first verification result; if yes, execute S309; if not, return to S305, that is, obtain the biometric information of the first user again and perform the biometric verification again. Test.

S309: The first application sends a service verification request for the service request to the second application.

The service verification request is used to request the second application to verify the legitimacy of the service request, and the service verification request includes related information of the service request, such as service type, service content, and so on.

S310: The second application verifies the legality of the service request, obtains a second verification result, and returns the second verification result to the first application.

Among them, the validity check of the service request may include any one or more of checks, such as: checking whether the service type corresponding to the service request belongs to the specified type; checking whether the parameters of the service request are correct; checking whether the service request corresponds to Whether the content of the business is reasonable; etc.

S311: If the second verification result is that the verification is passed, the first application processes the service request.

In the technical solution provided in this embodiment, the first application sends a biometric verification request for the first user to the second application, and the second application performs biometric verification on the first user, and feeds back the biometric verification result to the first user. The application enables the first application to use the biometric authentication mechanism of the third-party application (ie, the second application) to achieve biometric verification, without the need for the first application to integrate a biometric verification module, thereby reducing the integration difficulty of the first application; and, because it is The biometric verification mechanism of the second application is used for biometric verification. Therefore, only a copy of the biometric information of the first user needs to be stored on the second application side instead of local storage, thus avoiding the problem of occupying local resources of the terminal and reducing The risk of leakage of biometric information.

In summary, specific embodiments of the subject matter have been described. Other embodiments are within the scope of the appended claims. In some cases, the actions recited in the claims can be performed in a different order and still achieve desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or sequential order shown in order to achieve the desired result. In certain embodiments, multitasking and parallel processing may be advantageous.

The above is the biological verification method provided by one or more embodiments of this specification. Based on the same idea, one or more embodiments of this specification also provide a biological verification device.

Fig. 4 is a schematic flow chart of a biological verification device according to an embodiment of the present specification. As shown in Fig. 4, the device is applied to a first application and includes: a first sending module 410, which responds to the service requester sending The service request of the service requester is sent to the second application for a biometric verification request for the service requester; the biometric verification request includes the identification information of the first application and the biometric verification method corresponding to the service requester; An acquisition module 420, when receiving the information acquisition instruction sent by the second application, acquire the biometric information of the service requester that matches the biometric verification mode; the second sending module 430 will acquire Send the biometric information to the second application; the second application is used to verify the biometric information, and send the first verification result corresponding to the biometric information to the second application An application; a first determining module 440, receiving the first verification result sent by the second application; and determining whether to process the service request according to the first verification result.

In one embodiment, the device further includes: a first prompt module that sends first prompt information before the biometric verification request for the service requester is sent to the second application; the first prompt information It is used to prompt the service requester whether to use the second application for biometric verification.

The first sending module 410 includes: a first sending unit that sends the biometric verification request to the second application when a confirmation operation for the first prompt information input by the service requester is received.

In an embodiment, the device further includes: a second determining module, which, before sending the biometric verification request for the service requester to the second application, according to the biometric verification mode input by the service requester Information to determine the biometric verification mode for performing biometric verification on the service requester.

In an embodiment, the first determining module 440 includes: a second sending unit, if the first verification result is that the verification is passed, then send the service verification for the service request to the second application Request; the second application is used to verify the legitimacy of the service request according to the service verification request, and send a second verification result corresponding to the legitimacy to the first application; a receiving unit, Receiving the second verification result sent by the second application; a processing unit, if the second verification result is a verification pass, then processing the service request.

In an embodiment, the first verification result includes callback function address information of a service interface that provides a biometric verification service for the second application.

The second sending unit is further configured to send the service verification request to the service interface according to the callback function address information.

In one embodiment, the first determination module 440 includes: a prompt unit, if the first verification result is that the verification fails, then a second prompt message is issued; the second prompt message is used to prompt the The service requester re-enters the biometric information; the determining unit, when the biometric information re-entered by the service requester is obtained, sends the re-acquired biometric information to the second application. Check again, and determine whether to process the service request according to the check result of the check again.

Using the device of one or more embodiments of this specification, by sending a biometric verification request for the service requester to the second application, the second application performs biometric verification on the service requester, and feeds back the biometric verification result to the second application. An application that enables the first application to use the biometric authentication mechanism of the third-party application (ie, the second application) to achieve biometric verification without the need for the first application to integrate a biometric verification module, thereby reducing the integration difficulty of the first application; and, because It uses the biometric authentication mechanism of the second application for biometric verification, so only a copy of the biometric information of the service requester needs to be stored on the second application side instead of local storage, thus avoiding the problem of occupying local resources of the terminal. Reduce the risk of leakage of biometric information.

Those skilled in the art should understand that the above-mentioned biological verification device can be used to implement the aforementioned biological verification method applied to the first application, and the detailed description should be similar to the previous method description. In order to avoid cumbersomeness, this I won’t repeat it here.

FIG. 5 is a schematic flowchart of a biological verification device according to another embodiment of the present specification. As shown in FIG. 5, the device is applied to a second application and includes: a first receiving module 510, which receives transmissions from the first application The biometric verification request for the service requester; the biometric verification request includes the identification information of the first application and the biometric verification method for the service requester; the third sending module 520 sends the first application The application sends an information acquisition instruction; the information acquisition instruction is used to instruct the first application to acquire the biometric information of the service requester that matches the biometric verification method, and send the biometric information to the first application Two applications; a second receiving module 530, which receives the biometric information sent by the first application; a first verification module 540, which verifies the biometric information to obtain a first verification result, and compares the The first check result is sent to the first application.

In one embodiment, the device further includes: a third receiving module, which receives a service verification request for the service request sent by the first application; and a second verification module, based on the service verification request, The legality of the service request is verified to obtain a second verification result; the fourth sending module sends the second verification result to the first application.

In one embodiment, the first verification result includes information about whether the verification is passed or not and callback function address information of a service interface that provides a biometric verification service for the second application.

Using the device of one or more embodiments of this specification, it is possible to perform biometric verification on the service requester based on the biometric verification request sent by the first application for the service requester, and feed back the biometric verification result to the first application, This enables the first application to use the biometric authentication mechanism of the third-party application (ie, the second application) to achieve biometric verification without the need for the first application to integrate a biometric verification module, thereby reducing the difficulty of integration of the first application; and, because the second application is used The biometric authentication mechanism of the second application performs biometric verification, so only a copy of the biometric information of the service requester needs to be stored on the second application side instead of local storage, thereby avoiding the problem of occupying the local resources of the terminal and reducing the biometrics Risk of information leakage.

Those skilled in the art should understand that the above-mentioned biological verification device can be used to implement the aforementioned biological verification method applied to the second application. The detailed description should be similar to the previous method description. To avoid cumbersomeness, this I won’t repeat it here.

Based on the same idea, one or more embodiments of this specification also provide a biological verification device, as shown in FIG. 6. The biometric verification device may have relatively large differences due to different configurations or performances, and may include one or more processors 601 and a memory 602, and the memory 602 may store one or more storage applications or data. Among them, the memory 602 may be short-term storage or persistent storage. The application program stored in the memory 602 may include one or more modules (not shown in the figure), and each module may include a series of computer-executable instructions for the biometric verification device. Furthermore, the processor 601 may be configured to communicate with the memory 602, and execute a series of computer-executable instructions in the memory 602 on the biometric verification device. The biometric verification device may also include one or more power sources 603, one or more wired or wireless network interfaces 604, one or more input and output interfaces 605, and one or more keyboards 606.

Specifically, in this embodiment, the biometric verification device includes a memory and one or more programs. One or more programs are stored in the memory, and one or more programs may include one or more modules, and each Each module may include a series of computer-executable instructions for the biological verification device, and the one or more programs configured to be executed by one or more processors include computer-executable instructions for performing the following: in response to a service request The service request sent by the party sends a biometric verification request for the service requester to the second application; the biometric verification request includes the identification information of the first application and the biometric verification method corresponding to the service requester When receiving the information acquisition instruction sent by the second application, acquire the biometric information of the service requester that matches the biometric verification mode; send the acquired biometric information to the The second application; the second application is used to verify the biometric information, and send the first verification result corresponding to the biometric information to the first application; receive the second application to send And determining whether to process the service request according to the first verification result.

Optionally, when the computer-executable instructions are executed, the processor may also cause the processor to send first prompt information before sending the biometric verification request for the service requester to the second application; A prompt message is used to prompt the service requester whether to use the second application for biometric verification; the sending of a biometric verification request for the service requester to the second application includes: when the service is received When the requester enters the confirmation operation for the first prompt information, the biometric verification request is sent to the second application.

Optionally, when the computer-executable instructions are executed, the processor may also cause the processor to: before sending the biometric verification request for the service requester to the second application, according to the biometric input by the service requester The verification mode information determines the biometric verification mode for performing biometric verification on the service requester.

Optionally, when the computer-executable instruction is executed, the processor may also cause the processor to: if the first verification result is a pass, send a business verification for the business request to the second application. Verification request; the second application is used to verify the legitimacy of the service request according to the service verification request, and send a second verification result corresponding to the legitimacy to the first application; receive The second verification result sent by the second application; if the second verification result is a verification pass, the service request is processed.

Optionally, the first verification result includes address information of a callback function of a service interface that provides a biometric verification service for the second application; when the computer-executable instruction is executed, the processor may also cause the processor to: The callback function address information sends the service verification request to the service interface.

Optionally, when the computer-executable instructions are executed, the processor may also cause the processor to: if the first verification result is that the verification fails, send a second prompt message; the second prompt message is used for Prompt the service requester to re-enter the biometric information; when the biometric information re-entered by the service requester is obtained, the re-acquired biometric information is sent to the second application for processing Check again, and determine whether to process the service request according to the check result of the check again.

Based on the same idea, one or more embodiments of this specification also provide a biological verification device, as shown in FIG. 7. The biometric verification device may have relatively large differences due to different configurations or performances, and may include one or more processors 701 and a memory 702, and the memory 702 may store one or more storage applications or data. Among them, the memory 702 may be short-term storage or persistent storage. The application program stored in the memory 702 may include one or more modules (not shown in the figure), and each module may include a series of computer-executable instructions for the biometric verification device. Furthermore, the processor 701 may be configured to communicate with the memory 702, and execute a series of computer-executable instructions in the memory 702 on the biometric verification device. The biometric verification device may also include one or more power supplies 703, one or more wired or wireless network interfaces 704, one or more input and output interfaces 705, and one or more keyboards 706.

Specifically, in this embodiment, the biometric verification device includes a memory and one or more programs. One or more programs are stored in the memory, and one or more programs may include one or more modules, and each Each module may include a series of computer-executable instructions for the biological verification device, and the one or more programs configured to be executed by one or more processors include computer-executable instructions for performing the following: receiving a first application The sent biometric verification request for the service requester; the biometric verification request includes the identification information of the first application and the biometric verification method for the service requester; and the information acquisition instruction is sent to the first application The information acquisition instruction is used to instruct the first application to acquire the biometric information of the service requester that matches the biometric verification method, and to send the biometric information to the second application; The biological characteristic information sent by the first application; the biological characteristic information is verified to obtain a first verification result, and the first verification result is sent to the first application.

Optionally, the first verification result includes information about whether the verification is passed or not and callback function address information of a service interface that provides a biometric verification service for the second application.

Optionally, when the computer-executable instructions are executed, the processor may also cause the processor to: receive a service verification request for the service request sent by the first application; The validity of the service request is verified to obtain a second verification result; the second verification result is sent to the first application.

One or more embodiments of this specification also propose a computer-readable storage medium that stores one or more programs, and the one or more programs include instructions. When the instructions include multiple application programs When executed, the electronic device can make the electronic device execute the above-mentioned biometric verification method, and is specifically used to execute: in response to the service request sent by the service requester, send a biometric verification request for the service requester to the second application The biometric verification request includes the identification information of the first application and the biometric verification method corresponding to the service requester; when the information acquisition instruction sent by the second application is received, the service requester is acquired The biometric information matching the biometric verification method; sending the acquired biometric information to the second application; the second application is used to verify the biometric information, and Sending the first verification result corresponding to the biometric information to the first application; receiving the first verification result sent by the second application; and determining whether to process according to the first verification result The business request.

One or more embodiments of this specification also propose a computer-readable storage medium that stores one or more programs, and the one or more programs include instructions. When the instructions include multiple application programs When the electronic device is executed, the electronic device can execute the above-mentioned biological verification method, and is specifically configured to perform: receiving a biological verification request sent by the first application for the service requester; the biological verification request includes the first application The identification information of an application and the biometric verification method for the service requester; send an information acquisition instruction to the first application; the information acquisition instruction is used to instruct the first application to acquire the service requester’s information Biometric information matching the biometric verification method, and sending the biometric information to the second application; receiving the biometric information sent by the first application; verifying the biometric information, The first verification result is obtained, and the first verification result is sent to the first application.

The systems, devices, modules, or units illustrated in the above embodiments may be specifically implemented by computer chips or entities, or implemented by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cell phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or Any combination of these devices.

For the convenience of description, when describing the above device, the functions are divided into various units and described separately. Of course, when implementing one or more embodiments of this specification, the functions of each unit may be implemented in the same one or more software and/or hardware.

Those skilled in the art should understand that one or more embodiments of this specification can be provided as a method, a system, or a computer program product. Therefore, one or more embodiments of this specification may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, one or more embodiments of this specification may adopt computer programs implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes. The form of the product.

One or more embodiments of this specification are described with reference to flowcharts and/or block diagrams of methods, devices (systems), and computer program products according to the embodiments of this application. It should be understood that each process and/or block in the flowchart and/or block diagram, and the combination of processes and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing equipment to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing equipment are generated It is a device that realizes the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing equipment to work in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction device. The device implements the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be loaded on a computer or other programmable data processing equipment, so that a series of operation steps are executed on the computer or other programmable equipment to produce computer-implemented processing, so as to execute on the computer or other programmable equipment. The instructions provide steps for implementing the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

In a typical configuration, the computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

The memory may include non-permanent memory in computer readable media, random access memory (RAM) and/or non-volatile memory, such as read-only memory (ROM) or flash memory (flash RAM). Memory is an example of computer readable media.

Computer-readable media include permanent and non-permanent, removable and non-removable media, and information storage can be realized by any method or technology. The information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical storage, Magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media can be used to store information that can be accessed by computing devices. According to the definition in this article, computer-readable media does not include transitory media, such as modulated data signals and carrier waves.

It should also be noted that the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or equipment including a series of elements not only includes those elements, but also includes Other elements that are not explicitly listed, or also include elements inherent to such processes, methods, commodities, or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, commodity, or equipment that includes the element.

One or more embodiments of this specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. This application can also be practiced in distributed computing environments. In these distributed computing environments, tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the difference from other embodiments. In particular, as for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment.

The above description is only one or more embodiments of this specification, and is not intended to limit this specification. For those skilled in the art, one or more embodiments of this specification may have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of one or more embodiments of this specification should be included in the scope of the claims of one or more embodiments of this specification.

Claims

A biological verification method applied to the first application, including:

In response to the service request sent by the service requester, a biometric verification request for the service requester is sent to the second application; the biometric verification request includes the identification information of the first application and the corresponding information of the service requester Biological verification method;

When receiving the information acquisition instruction sent by the second application, acquiring the biometric information of the service requester that matches the biometric verification mode;

Send the acquired biometric information to the second application; the second application is used to verify the biometric information, and send the first verification result corresponding to the biometric information to The first application;

Receiving the first verification result sent by the second application; and determining whether to process the service request according to the first verification result.
The method according to claim 1, before the sending a biometric verification request for the service requester to the second application, the method further comprises:

Sending first prompt information; the first prompt information is used to prompt the service requester whether to use the second application for biometric verification;

The sending a biometric verification request for the service requester to the second application includes:

When a confirmation operation for the first prompt information input by the service requester is received, the biometric verification request is sent to the second application.
The method according to claim 2, before the sending a biometric verification request for the service requester to the second application, the method further comprises:

According to the biometric verification mode information input by the service requester, the biometric verification mode for performing the biometric verification on the service requester is determined.
The method according to claim 1, wherein the determining whether to process the service request according to the first check result comprises:

If the first verification result is that the verification is passed, then a service verification request for the service request is sent to the second application; the second application is used to verify the service according to the service verification request The legality of the service request, and sending the second verification result corresponding to the legality to the first application;

Receiving the second verification result sent by the second application;

If the second verification result is that the verification is passed, the service request is processed.
The method according to claim 4, wherein the first verification result includes callback function address information of a service interface that provides a biometric verification service for the second application;

The sending a service verification request for the service request to the second application includes:

According to the callback function address information, the service verification request is sent to the service interface.
The method according to claim 1, wherein the determining whether to process the service request according to the first check result comprises:

If the first verification result is that the verification fails, a second prompt message is sent; the second prompt message is used to prompt the service requester to re-enter the biometric information;

When the biometric information re-entered by the service requester is acquired, the re-acquired biometric information is sent to the second application for re-verification, and based on the re-verification calibration The verification result determines whether to process the service request.
A biological verification method, applied to the second application, includes:

Receiving a biometric verification request for a service requester sent by a first application; the biometric verification request includes the identification information of the first application and a biometric verification method for the service requester;

Send an information acquisition instruction to the first application; the information acquisition instruction is used to instruct the first application to acquire the biometric information of the service requester that matches the biometric verification method, and to convert the biometric information Sent to the second application;

Receiving the biometric information sent by the first application;

The biometric information is verified to obtain a first verification result, and the first verification result is sent to the first application.
8. The method according to claim 7, wherein the first verification result includes information about whether the verification is passed or not and callback function address information of a service interface that provides a biometric verification service for the second application.
The method according to claim 7, further comprising:

Receiving a service verification request for the service request sent by the first application;

Verify the legality of the service request according to the service verification request to obtain a second verification result;

Send the second verification result to the first application.
A biological verification device applied to the first application, including:

The first sending module, in response to the service request sent by the service requester, sends a biometric verification request for the service requester to the second application; the biometric verification request includes the identification information of the first application and the The biometric verification method corresponding to the service requester;

The first obtaining module, when receiving the information obtaining instruction sent by the second application, obtains the biometric information of the service requester that matches the biometric verification mode;

The second sending module sends the acquired biometric information to the second application; the second application is used to verify the biometric information and to compare the first biometric information corresponding to the biometric information. Sending the verification result to the first application;

The first determining module receives the first verification result sent by the second application; and determines whether to process the service request according to the first verification result.
The device according to claim 10, further comprising:

The first prompting module sends first prompt information before the biometric verification request for the service requester is sent to the second application; the first prompt information is used to prompt the service requester whether to use the The second application performs biological verification;

The first sending module includes:

The first sending unit sends the biometric verification request to the second application when receiving the confirmation operation for the first prompt information input by the service requester.
The device according to claim 11, further comprising:

The second determining module, before the biometric verification request for the service requester is sent to the second application, determines to perform the biometric verification on the service requester according to the biometric verification mode information input by the service requester The biological verification method of the test.
A biological verification device applied to a second application, including:

The first receiving module receives a biometric verification request for a service requester sent by a first application; the biometric verification request includes identification information of the first application and a biometric verification method for the service requester;

The third sending module sends an information acquisition instruction to the first application; the information acquisition instruction is used to instruct the first application to acquire the biometric information of the service requester that matches the biometric verification method, and to Sending the biometric information to the second application;

The second receiving module receives the biometric information sent by the first application;

The first verification module verifies the biometric information to obtain a first verification result, and sends the first verification result to the first application.
The device according to claim 13, further comprising:

The third receiving module receives the service verification request for the service request sent by the first application;

A second verification module, to verify the legality of the service request according to the service verification request to obtain a second verification result;

The fourth sending module sends the second check result to the first application.
A biological verification device applied to the first application, including:

Processor; and

A memory arranged to store computer-executable instructions which, when executed, cause the processor to:

In response to the service request sent by the service requester, a biometric verification request for the service requester is sent to the second application; the biometric verification request includes the identification information of the first application and the corresponding information of the service requester Biological verification method;

When receiving the information acquisition instruction sent by the second application, acquiring the biometric information of the service requester that matches the biometric verification mode;

Send the acquired biometric information to the second application; the second application is used to verify the biometric information, and send the first verification result corresponding to the biometric information to The first application;

Receiving the first verification result sent by the second application; and determining whether to process the service request according to the first verification result.
A biological verification device applied to the second application, including:

Processor; and

A memory arranged to store computer-executable instructions which, when executed, cause the processor to:

Receiving a biometric verification request for a service requester sent by a first application; the biometric verification request includes the identification information of the first application and a biometric verification method for the service requester;

Send an information acquisition instruction to the first application; the information acquisition instruction is used to instruct the first application to acquire the biometric information of the service requester that matches the biometric verification method, and to convert the biometric information Sent to the second application;

Receiving the biometric information sent by the first application;

The biometric information is verified to obtain a first verification result, and the first verification result is sent to the first application.
A storage medium for storing computer-executable instructions, which, when executed, implement the following processes:

In response to the service request sent by the service requester, a biometric verification request for the service requester is sent to the second application; the biometric verification request includes the identification information of the first application and the corresponding information of the service requester Biological verification method;

When receiving the information acquisition instruction sent by the second application, acquiring the biometric information of the service requester that matches the biometric verification mode;

Send the acquired biometric information to the second application; the second application is used to verify the biometric information, and send the first verification result corresponding to the biometric information to The first application;

Receiving the first verification result sent by the second application; and determining whether to process the service request according to the first verification result.
A storage medium for storing computer-executable instructions, which, when executed, implement the following processes:

Receiving a biometric verification request for a service requester sent by a first application; the biometric verification request includes the identification information of the first application and a biometric verification method for the service requester;

Send an information acquisition instruction to the first application; the information acquisition instruction is used to instruct the first application to acquire the biometric information of the service requester that matches the biometric verification method, and to convert the biometric information Sent to the second application;

Receiving the biometric information sent by the first application;

The biometric information is verified to obtain a first verification result, and the first verification result is sent to the first application.