WO2021233474A1

WO2021233474A1 - External network identity authentication method, system, device, and storage medium based on internal network connection

Info

Publication number: WO2021233474A1
Application number: PCT/CN2021/101502
Authority: WO
Inventors: 简伟明; 皮爱平; 黄飞鹰; 梁华贵; 陈吉宏; 黄伟涛; 郑则润; 陈秋榕
Original assignee: 巽腾(广东)科技有限公司
Priority date: 2020-05-18
Filing date: 2021-06-22
Publication date: 2021-11-25
Also published as: CN111683085A; CN111683085B

Abstract

An external network identity authentication method, a system, a device, and a storage medium based on an internal network connection. The method comprises: an information collection device (901) collecting biometric information of a user, said information collection device (901) accessing an internal system by means of an internal network (S101); an identity authentication device (902) obtaining at least one type of biometric information collected by the information collection device (901) (S102); said identity authentication device (902) sending said at least one kind of biometric information to an identity authentication server (903), said identity authentication device (902) accessing said identity authentication server (903) by means of an external network (S103); and the identity authentication device (902) receiving authentication information sent by the identity authentication server (903), and generating an authentication result according to said authentication information (S104). The present method improves the efficiency of user identity authentication, and, while ensuring the safety and reliability of identity authentication, simplifies the authentication process.

Description

External network identity authentication method, system, equipment and storage medium based on internal network connection

Technical field

The embodiments of the present application relate to the field of identity authentication technology, and in particular, to an external network identity authentication method, system, device, and storage medium based on an internal network connection.

Background technique

Identity authentication refers to the confirmation of the user's identity through special means. For example, when the user goes to the bank to handle business, the user's identity needs to be authenticated to determine the business handling authority. In the process of identity authentication in industry scenarios such as industry and commerce, taxation, finance, public security law, transportation, etc., due to the particularity of the industry, it has high requirements for information security. Usually its original authentication equipment cannot connect to the external network, resulting in low authentication efficiency, The process is cumbersome, and it is impossible to efficiently realize the identity authentication based on the user's biological characteristics.

Summary of the invention

The embodiment of the present invention provides an external network identity authentication method, system, equipment and storage medium based on internal network connection, which can efficiently realize user identity authentication.

In the first aspect, an embodiment of the present invention provides an external network identity authentication method based on an internal network connection, and the method includes:

The information collection device collects the user's biometric information, and the information collection device accesses the internal system through the internal network;

The identity authentication device acquires at least one type of biometric information collected by the information collection device;

Sending the at least one kind of biometric information to an identity authentication server by the identity authentication device, and the identity authentication device accesses the identity authentication server through an external network;

The identity authentication device receives the authentication information sent by the identity authentication server, and generates an authentication result according to the authentication information.

Optionally, the identity authentication device is integrated and installed in the information collection device.

Optionally, the internal system includes a plurality of the information collection devices, the identity authentication device is integratedly installed in at least one of the plurality of information collection devices, and the plurality of information collection devices pass through the The internal network communicates, and the external network identity authentication method based on the internal network connection further includes:

In the internal system, an information collection device equipped with the identity authentication device is integrated to receive biometric information sent by other information collection devices, and the information collection device includes at least one biometric information collection device;

The identity authentication device acquires at least one type of biometric information collected by the other information collection device.

Optionally, the identity authentication device and the information collection device are connected through a USB data cable.

Optionally, before the identity authentication device acquires at least one type of biometric information collected by the information collection device, the method further includes:

Establish a USB communication connection between the information collection device and the identity authentication device.

Optionally, the identity authentication device and the information collection device are connected via Bluetooth.

The identity authentication device sends a Bluetooth authentication request to the information collection device;

The information collection device authenticates the identity authentication device, and if the authentication passes, creates a Bluetooth pairing connection authentication with the identity authentication device.

Optionally, the collection of biometric information of the user by the information collection device includes:

The user's face image information is collected by the living body face collection camera device integrated with the information collection equipment.

Optionally, the identity authentication device is connected to the living body face collection and camera device, and correspondingly, the identity authentication device acquiring at least one type of biometric information collected by the information collection device includes:

The identity authentication device acquires the standard-compliant living face image information of the user collected by the camera of the living face collection camera.

Optionally, the identity authentication device and the living body face acquisition and camera device are combined into an independent device for integrated installation.

Optionally, after the identity authentication device acquires the user's face image information collected by the camera of the living body face collection camera, the method further includes:

Performing live body detection on the face image information;

Correspondingly, sending the at least one kind of biometric information to the identity authentication server by the identity authentication device includes:

If it is determined to be a living body face image, sending the face image information to the identity authentication server.

Optionally, the sending the face image information to the identity authentication server includes:

Perform feature extraction on the facial image information to obtain facial image characteristics, and send the facial image characteristics to the identity authentication server; and/or

The original face image in the face image information is sent to the identity authentication server.

The identity authentication device obtains the video data shot by the living body face collection and camera device, and records and saves the video data.

Optionally, after recording and saving the video data, the method further includes:

The identity authentication device transfers the video data to the information collection device.

Optionally, when the identity authentication device sends the at least one kind of biometric information to the identity authentication server, the method further includes:

The device identifier of the identity authentication device or the information collection device is sent to the identity authentication server for the identity authentication server to perform identity authentication comparison based on the device identity and the biometric information to generate authentication information.

Sending auxiliary authentication information to the identity authentication server, where the auxiliary authentication information includes one or more of name, ID number, user account, mobile phone number, and location information;

The identity authentication server performs identity authentication comparison according to the biological feature information and the auxiliary authentication information to generate authentication information.

Optionally, after the authentication result is generated according to the authentication information, the method further includes:

Save the authentication result in the identity authentication device and/or the information collection device locally within a preset time period;

The identity authentication device searches locally whether there is an authentication result corresponding to the biometric information, and if it does not exist, sends the at least one kind of biometric information to the identity authentication server.

In the second aspect, an embodiment of the present invention also provides an external network identity authentication system based on internal network connection, including:

An information collection device for collecting user's biometric information, and the information collection device is connected to an internal system through an internal network;

Identity authentication device, configured to obtain at least one type of biometric information collected by the information collection device, and send the at least one type of biometric information to an identity authentication server, and the identity authentication device accesses the identity authentication through an external network server;

The identity authentication server is configured to receive the biometric information sent by the identity authentication device, generate authentication information based on the biometric information, and send the authentication information to the identity authentication device;

The identity authentication device is further configured to receive authentication information sent by the identity authentication server, and generate an authentication result according to the authentication information.

In a third aspect, an embodiment of the present invention also provides an identity authentication device, the device includes: one or more processors; a storage device, configured to store one or more programs, when the one or more programs are The one or more processors execute, so that the one or more processors implement:

Acquire at least one type of biometric information collected by an information collection device, and send the at least one type of biometric information to an identity authentication server. The identity authentication device accesses the identity authentication server through an external network, and the information collection device passes Internal network access to internal system;

Receiving the authentication information sent by the identity authentication server, and generating an authentication result according to the authentication information.

Optionally, the internal system includes a plurality of the information collection devices, the identity authentication device is integratedly installed in at least one of the plurality of information collection devices, and the plurality of information collection devices pass through the The internal network communicates.

Optionally, the identity authentication device and the information collection device are connected via a USB data cable or via Bluetooth.

In a fourth aspect, embodiments of the present invention also provide a storage medium containing computer-executable instructions, which are used to execute when executed by a computer processor:

In the embodiment of the present invention, the user's biometric information is collected through an information collection device, which accesses the internal system through an internal network; the identity authentication device obtains at least one type of biometric information collected by the information collection device; The identity authentication device sends the at least one kind of biometric information to the identity authentication server, and the identity authentication device accesses the identity authentication server through an external network; the identity authentication device receives the authentication information sent by the identity authentication server, and according to The authentication information generates an authentication result. As a result, the efficiency of user identity authentication is improved, and the authentication process is simplified on the premise of ensuring the safety and reliability of identity authentication.

Description of the drawings

FIG. 1 is a flowchart of an external network identity authentication method based on an internal network connection provided by an embodiment of the present invention;

2 is a flowchart of another method for external network identity authentication based on internal network connection provided by an embodiment of the present invention;

FIG. 3 is a flowchart of another external network identity authentication method based on internal network connection provided by an embodiment of the present invention;

FIG. 4 is a flowchart of another external network identity authentication method based on internal network connection provided by an embodiment of the present invention;

FIG. 5 is a flowchart of another external network identity authentication method based on internal network connection provided by an embodiment of the present invention;

FIG. 6 is a flowchart of another external network identity authentication method based on internal network connection provided by an embodiment of the present invention;

FIG. 7 is a flowchart of another external network identity authentication method based on internal network connection provided by an embodiment of the present invention;

FIG. 8 is a sequence diagram corresponding to the flowchart provided in FIG. 7 according to the embodiment of the present invention;

9 is a schematic structural diagram of an external network identity authentication system based on internal network connection provided by an embodiment of the present invention;

10 is a schematic structural diagram of another external network identity authentication system based on internal network connection provided by an embodiment of the present invention;

11 is a schematic structural diagram of another external network identity authentication system based on internal network connection provided by an embodiment of the present invention;

12 is a schematic structural diagram of another external network identity authentication system based on internal network connection provided by an embodiment of the present invention;

13 is a schematic structural diagram of another external network identity authentication system based on internal network connection provided by an embodiment of the present invention;

14 is a schematic structural diagram of another external network identity authentication system based on internal network connection provided by an embodiment of the present invention;

15 is a schematic structural diagram of another external network identity authentication system based on internal network connection provided by an embodiment of the present invention;

16 is a schematic structural diagram of another external network identity authentication system based on internal network connection provided by an embodiment of the present invention;

FIG. 17 is a schematic structural diagram of an identity authentication device provided by an embodiment of the present invention.

Detailed ways

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It can be understood that the specific embodiments described here are only used to explain the embodiments of the present invention, but not to limit the embodiments of the present invention. In addition, it should be noted that, for ease of description, the drawings only show a part but not all of the structures related to the embodiments of the present invention.

Figure 1 is a flowchart of an external network identity authentication method based on an intranet connection provided by an embodiment of the present invention. This embodiment can be applied to external network identity authentication of an information collection device’s intranet connection. The method can be used by information collection equipment, The implementation of identity authentication equipment includes the following steps:

Step S101: The information collection device collects biometric information of the user, and the information collection device accesses the internal system through the internal network.

Among them, the information collection equipment can be equipment installed in places where identity authentication is required, such as identity authentication terminal equipment in the bank's office hall, integrated terminal equipment in the tax office hall, high-speed rail self-service ticketing terminal equipment, and subway biological Identify gates. Among them, the biometric information can be one or more of face information, iris information, sclera information, eye print information, fingerprint information, palm print information, palm vein information, finger vein information, voice print information, and DNA information. Install the corresponding one or more biological feature collection sensors on the information collection equipment to collect the user's biological feature information. Optionally, a face image is usually selected as the user's biometric information for identity authentication.

In one embodiment, the information collection device accesses the internal system through the internal network. Among them, the internal system can be the internal platform system of the bank, the taxation system of the tax authority, etc., and the ticketing system of the subway and high-speed rail. Each information collection device is connected to its corresponding internal system through the intranet to realize the data information. Internal transmission.

In one embodiment, the information collection device collects the biometric information of the user through an integrated biometric collector, such as collecting a live face image of the user through a live face collection camera.

Step S102: The identity authentication device acquires at least one type of biometric information collected by the information collection device.

After the biometric information of the user is collected by the information collection device, it is sent to the identity authentication device, and the identity authentication device obtains the biometric information. Optionally, the identity authentication equipment includes communication modules (such as 4G, 5G, WIFI, wired network modules, etc.), processing modules (such as ARM, DSP, CPU, single-chip processing unit), storage modules, and device interfaces (such as USB, Bluetooth modules) Etc.), the communication module is used to realize the connection of the external network for data communication with the identity authentication server, the processing module is used to perform data processing, the storage module is used to store programs and data information, and the device interface is used to realize the connection of the information collection device data communication.

Step S103: The identity authentication device sends the at least one kind of biometric information to an identity authentication server, and the identity authentication device accesses the identity authentication server through an external network.

Among them, the identity authentication server can be a cloud server device that is set up to compare user biometric information for identity authentication. For example, the identity authentication server of the public security system stores a large amount of user identity information and corresponding information in the identity authentication server. The biometric information is compared with the biometric information sent by the identity authentication device to obtain the authentication information. After the identity authentication server obtains the authentication information, the authentication information is correspondingly sent to the corresponding identity authentication device.

In one embodiment, the identity authentication device is connected to an external network through an internally integrated communication module, such as establishing a wireless communication connection with the identity authentication server through a 5G module, so as to perform data communication with the identity authentication server. Specifically, it includes the identity authentication device sending the biometric information to the identity authentication server, and receiving the authentication information sent by the identity authentication server.

Step S104: The identity authentication device receives the authentication information sent by the identity authentication server, and generates an authentication result according to the authentication information.

After the identity authentication device receives the authentication information sent by the identity authentication server, it generates an authentication result accordingly. Exemplarily, the authentication information may be a comparison result of biometric information, such as a similarity value. The authentication result can be identity authentication success/pass, or identity authentication failure. Further, for some application scenarios (such as a bank's personal loan system), when the identity authentication is successful, the authentication result also contains the user's personal information or user account information.

Correspondingly, after the authentication result is generated according to the authentication information, the identity authentication device can send the authentication result back to the information collection device, and display it on the integrated display screen of the information collection device.

It can be seen from the above scheme that the information collection device is connected to the intranet system by means of an intranet connection, and at least one type of biometric information of the user collected by the information collection device is obtained through the identity authentication device, and connected to the outside via the communication module of the identity authentication device. The network communicates with the identity authentication server to obtain the authentication information and then obtain the authentication result. Under the condition that the information collection device is not connected to the external network, the external network is used for identity authentication. The information collection device only needs to perform data with the identity authentication device. Transmission ensures the security of information, improves the efficiency of user identity authentication, and simplifies the authentication process on the premise of ensuring the safety and reliability of identity authentication.

Fig. 2 is a flowchart of another external network identity authentication method based on internal network connection provided by an embodiment of the present invention, and another method of user identity authentication is provided. As shown in Figure 2, the technical solution is as follows:

Step S201: The information collection device collects at least one type of biometric information of the user, and the information collection device accesses the internal system through the internal network.

Step S202: The identity authentication device obtains at least one type of biometric information collected by the information collection device.

Step S203: The identity authentication device sends the at least one kind of biometric information to an identity authentication server, and the identity authentication device accesses the identity authentication server through an external network.

Step S204: In the internal system, integrate the information collection device installed with the identity authentication device, receive the biometric information sent by other information collection devices, and send it to the identity authentication server through the identity authentication device.

In one embodiment, the identity authentication device is integrated and installed in the information collection device, for example, the identity authentication device is integrated and installed in the circuit board of the information collection device in the form of a circuit board. Among them, multiple information collection devices can be connected to an internal system, such as multiple information collection devices set up in one service hall, or information collection devices set up in other adjacent service halls, among multiple information collection devices. At least one of the devices is integrated with an identity recognition device, and the information collection equipment section integrated with the identity recognition device receives the biometric information sent by other information collection devices, and sends it to the identity authentication server through the identity authentication device for identity authentication, each of which Each information collection device includes at least one biometric information collection device, and the biometric information that can be collected includes facial information, fingerprints, palm prints, finger veins, palm veins, voice prints, and iris.

Step S205: The identity authentication device receives the authentication information sent by the identity authentication server, and generates an authentication result according to the authentication information.

It can be seen from the above scheme that the identity authentication device is integrated into the information collection device in a modular form, the information collection device is connected to the system in the internal network and sends the biometric information to the identity recognition device, and the identity recognition device is connected to the identity authentication server through the external network to perform identity At the same time, the identity authentication equipment can be integrated in any information collection equipment in the intranet, which can realize the authentication of the information collection equipment in multiple other intranets, which saves the overall equipment cost, optimizes the equipment hardware layout, and improves Identity authentication efficiency.

FIG. 3 is a flowchart of another external network identity authentication method based on internal network connection provided by an embodiment of the present invention, and shows a specific connection method of the identity authentication device and the information collection device. As shown in Figure 3, the technical solution is as follows:

Step S301: The information collection device collects at least one type of biometric information of the user, and the information collection device accesses the internal system through the internal network.

Step S302: Establish a USB communication connection between the information collection device and the identity authentication device.

Step S303: The information collection device installs an authentication installation program of the identity authentication device, where the authentication installation program is used to implement data communication between the identity authentication device and the information collection device.

In one embodiment, the identity authentication device is connected to the information collection device in a USB communication mode, and is used to receive at least one type of biometric information sent by the information collection device, and feed back the authentication result to the information collection device.

Before the identity authentication device acquires at least one type of biometric information collected by the information collection device, the information collection device usually first installs a corresponding authentication installation program. Optionally, when a connection is established between the identity authentication device and the information collection device, the identity authentication device automatically initiates an installation request for the authentication installation program of the information collection device. After the information collection device has been installed with the authentication installation program, the two can perform safe biological Transmission of characteristic information, auxiliary authentication information and identity authentication results.

Step S304: The identity authentication device obtains at least one type of biometric information collected by the information collection device.

Step S305: The identity authentication device sends the at least one kind of biometric information to an identity authentication server, and the identity authentication device accesses the identity authentication server through an external network.

Step S306: The identity authentication device receives the authentication information sent by the identity authentication server, and generates an authentication result according to the authentication information.

From the above scheme, it can be seen that the information collection device is connected to the internal system through the intranet, the identity authentication device is connected through the USB, and the identity authentication device is connected to the identity authentication server through the external network, which can be easily realized through the external network while ensuring the security of the internal network information. In order to achieve identity authentication, the user does not need to use ID card verification for authentication, which improves the efficiency of user identity authentication, and simplifies the authentication process on the premise of ensuring the safety and reliability of identity authentication.

FIG. 4 is a flowchart of another external network identity authentication method based on internal network connection provided by an embodiment of the present invention, and shows a specific connection method of the identity authentication device and the information collection device. As shown in Figure 4, the technical solution is as follows:

Step S401: The information collection device collects at least one type of biometric information of the user, and the information collection device accesses the internal system through the internal network.

Step S402: The identity authentication device sends a Bluetooth authentication request to the information collection device.

Step S403: The information collection device authenticates the identity authentication device, and if the authentication is passed, it creates a Bluetooth pairing connection authentication with the identity authentication device.

In one embodiment, the information collection device and the identity authentication device use a Bluetooth connection for information communication, wherein when the Bluetooth communication connection is established, for example, before the Bluetooth pairing connection authentication is started, the information collection device authenticates the identity authentication device. If the authentication is passed, a Bluetooth pairing connection authentication with the identity authentication device is created, thereby improving the security of the Bluetooth network. If the authentication fails, it is determined to be an illegal access device, and the information collection device does not perform Bluetooth pairing connection.

Step S404: The identity authentication device acquires at least one type of biometric information collected by the information collection device.

Step S405: The identity authentication device sends the at least one kind of biometric information to an identity authentication server, and the identity authentication device accesses the identity authentication server through an external network.

Step S406: The identity authentication device receives the authentication information sent by the identity authentication server, and generates an authentication result according to the authentication information.

It can be seen from the above scheme that the information collection device is connected to the internal system through the intranet, the identity authentication device is connected through Bluetooth, and the identity authentication device is connected to the identity authentication server through the external network. This can be easily realized through the external network while ensuring the security of the internal network information. The identity authentication is ensured while ensuring the security of the Bluetooth network, improving the efficiency of user identity authentication, and simplifying the authentication process on the premise of ensuring the safety and reliability of identity authentication.

Fig. 5 is a flowchart of another external network identity authentication method based on internal network connection provided by an embodiment of the present invention, and shows a specific setting method of identity authentication equipment and information collection equipment. As shown in Figure 5, the technical solution is as follows:

Step S501: Collect the user's face image information through the living body face collection and camera device integrated with the information collection device, and the living body face collection and camera device is connected to the identity authentication device.

In one embodiment, the biometric information is the user's face image information, and the face image information is collected by a living body face collection and camera device, which is integrated in the information collection device, and the living body face collection The camera device is connected with the identity authentication device, that is, the identity authentication device is respectively connected with the camera of the living body face collection camera and the processing unit of the information collection device.

Step S502: The identity authentication device obtains the user's face image information collected by the living body face collecting and camera device.

In one embodiment, the identity authentication device is integrated and installed inside the living body face acquisition camera device, the identity authentication device and the living body face acquisition camera device are combined into an independent device, and the identity authentication device preferentially obtains the images taken by the living body face acquisition camera device. The face image can be sent to the identity authentication server for authentication after obtaining the face image. In another embodiment, the identity authentication device is not integratedly installed inside the living body face acquisition camera device, and it is connected to the living body face acquisition camera device in an external connection manner to obtain the face captured by the living body face acquisition camera device image.

Step S503: The identity authentication device sends the face image information to an identity authentication server, and the identity authentication device accesses the identity authentication server through an external network.

In one embodiment, after acquiring the facial image information, the identity authentication device performs feature extraction on the facial image information to obtain facial image characteristics, and sends the facial image characteristics to the identity authentication server to reduce data Transmission pressure and comparison processing time of the identity authentication server. In another embodiment, the original face image in the face image information may also be sent to the identity authentication server for identification and authentication.

Step S504: The identity authentication device receives the authentication information sent by the identity authentication server, and generates an authentication result according to the authentication information.

From the above scheme, it can be seen that the information collection equipment is connected to the internal system through the intranet to perform special functions in specific scenarios, and the integrated live face capture camera device collects face image information and passes the identity authentication connected to the live face capture camera device. The device is sent to the identity authentication server, and the identity authentication device is connected to the identity authentication server through the external network. While ensuring the security of the internal network information, the identity authentication is conveniently realized through the external network, which improves the efficiency of user identity authentication and ensures On the premise that identity authentication is safe and reliable, the authentication process is simplified.

Fig. 6 is a flowchart of another external network identity authentication method based on internal network connection provided by an embodiment of the present invention, and shows the flow of another identity authentication method. As shown in Figure 6, the technical solution is as follows:

Step S601: Collect the user's face image information through the living body face collection and camera device integrated with the information collection device, and the living body face collection and camera device is connected to the identity authentication device.

Step S602: The identity authentication device acquires the user's face image information collected by the living body face collecting and camera device, and performs living body detection on the face image information.

In one embodiment, the identity authentication device has a live body detection function, that is, performs live body detection and verification on the acquired facial image information.

Step S603: If it is determined that it is a living body face image, send the face image information to the identity authentication server, and the identity authentication device accesses the identity authentication server through an external network.

In one embodiment, when it is determined that the face image information corresponds to a living user, the face image information is sent to the identity authentication server for identity authentication.

Step S604: The identity authentication device receives the authentication information sent by the identity authentication server, and generates an authentication result according to the authentication information.

From the above scheme, it can be seen that the information collection equipment is connected to the internal system through the intranet to perform special functions in specific scenarios, and the integrated live face capture camera device collects face image information and passes the identity authentication connected to the live face capture camera device. After the device performs the live detection, it sends the face image information determined to be a living user to the identity authentication server for authentication to further optimize the identity authentication process. Among them, the identity authentication device connects to the identity authentication server through the external network, ensuring the internal network In the case of information security, identity authentication is conveniently realized through the external network, which improves the efficiency of user identity authentication, and simplifies the authentication process while ensuring the safety and reliability of identity authentication.

On the basis of the above technical solution, after the identity authentication device obtains the user's face image information collected by the camera of the living body face collection camera, the method further includes: the identity authentication device obtains the living body face collection camera The video data shot by the device is recorded and saved. In one embodiment, the identity authentication device has a video saving function to save the acquired content captured by the camera. Correspondingly, after the video data is recorded and saved, the method further includes: the identity authentication device transfers the video data to the information collection device. That is, the identity authentication device also includes a video transfer function to transfer the saved video data to the information collection device. It can be seen from the above that the identity authentication device is further integrated with video recording, audio recording, and transfer-out functions, which improves the identity recognition and subsequent information query, and optimizes the identity authentication process.

On the basis of the above technical solution, when the identity authentication device sends the at least one kind of biometric information to the identity authentication server, the method further includes: sending the identity authentication device or the device identification of the information collection device to the identity authentication server The identity authentication server is used for the identity authentication server to perform identity authentication comparison according to the device identifier and the biometric information to generate authentication information. In one embodiment, the identity authentication server determines the location area range of the user who currently needs to be authenticated according to the identity of the identity authentication device or the information collection device, and obtains the authentication information and the received biological information corresponding to all users in the area. The characteristic information is verified and compared to reduce the amount of compared data and significantly improve the efficiency of identity authentication. Exemplarily, the identity authentication server updates the location trajectory of each registered user in real time. After receiving the biometric information sent by the identity authentication device, it determines the area that currently needs to be authenticated according to the identity of the information collection device. The device identification corresponds to a fixed location area. After determining the location area of the identity authentication user, all users in the area that are tracked in real time are determined accordingly, the legal authentication information saved by the user is retrieved, and the biometric information and multiple stored authentication information Compare them one by one.

In another embodiment, when the identity authentication device sends the at least one kind of biometric information to the identity authentication server, the method further includes: sending location information of the identity authentication device or the information collection device to the identity The authentication server is used for the identity authentication server to perform identity authentication comparison based on the location information and the biometric information to generate authentication information. In this embodiment, the location of the identity authentication device or the information collection device can be randomly changed. At this time, during the identity authentication process, the location of the identity authentication device or the information collection device is acquired in real time, such as acquiring the corresponding GPS data, according to the acquisition Determine the associated preset area. After the location area is determined, all users in the area that are tracked in real time are determined accordingly, the legal authentication information saved by the user is retrieved, and the biometric information and multiple stored authentication information are compared one by one . In another embodiment, when the identity authentication device sends at least one kind of biometric information to the identity authentication server, it further includes: sending auxiliary authentication information to the identity authentication server, the auxiliary information including name, ID number, user account, Mobile phone number, etc., to achieve auxiliary verification of user identity, thereby improving verification accuracy and verification efficiency.

FIG. 7 is a flowchart of another external network identity authentication method based on an internal network connection provided by an embodiment of the present invention, and FIG. 8 is a sequence diagram corresponding to the flowchart provided in FIG. 7 according to an embodiment of the present invention. As shown in Figure 7 and Figure 8, the technical solutions are as follows:

Step S701: Establish a communication connection between the information collection device and the identity authentication device.

Step S702: The information collection device collects the biometric information of the user, and the information collection device accesses the internal system through the internal network.

Step S703: The identity authentication device acquires at least one type of biometric information collected by the information collection device.

Step S704: The identity authentication device searches locally whether there is an authentication result corresponding to the biometric information, if it is, then the authentication is successful, if not, then step S705 is executed.

In one embodiment, the authentication results for a preset time (such as 7 days or 30 days, etc.) can be stored locally, and several (such as keeping 3000 records) of authentication results can be stored locally. When performing identity authentication, you can first It is queried locally whether there is a corresponding authentication result, if it exists, the authentication is successful, and if it does not exist, step S705 is executed.

Step S705: The identity authentication device sends the at least one kind of biometric information to an identity authentication server, and the identity authentication device accesses the identity authentication server through an external network.

Step S706: The identity authentication device receives the authentication information sent by the identity authentication server, and generates an authentication result according to the authentication information.

Step S707: The identity authentication device sends the authentication result back to the information collection device, and displays it on the display screen integrated with the information collection device.

Step S708: Save the authentication result in the identity authentication device and/or the information collection device locally within a preset time period.

In one embodiment, after the identity authentication device generates an authentication result, the authentication result can be saved accordingly for subsequent identity authentication.

It can be seen from the above that by storing the authentication result locally, the problem of low efficiency caused by multiple authentication queries in a short period of time is avoided, and the authentication process is simplified, and the identity authentication time is saved.

FIG. 9 is a schematic structural diagram of an external network identity authentication system based on an internal network connection provided by an embodiment of the present invention. As shown in Figure 9, the system includes:

An information collection device 901 is used to collect biometric information of a user, and the information collection device is connected to an internal system through an internal network;

In one embodiment, the information collection device 901 is integrated with one or more biological feature collection devices. Illustratively, as shown in FIG. 9, it includes a camera 9011, a fingerprint collection device 9012, a voiceprint collection device 9013, and palm veins. Collection device 9014 and so on.

The identity authentication device 902 is configured to obtain at least one kind of biometric information collected by the information collection device, and send the at least one kind of biometric information to an identity authentication server, and the identity authentication device accesses the identity through an external network Authentication server

The identity authentication server 903 is configured to receive the biometric information sent by the identity authentication device, generate authentication information according to the biometric information, and send the authentication information to the identity authentication device;

The identity authentication device 902 is further configured to receive authentication information sent by the identity authentication server, and generate an authentication result according to the authentication information.

In this solution, the user’s biometric information is collected through an information collection device, which accesses the internal system through an internal network; the identity authentication device obtains at least one type of biometric information collected by the information collection device; the identity authentication The device sends the at least one kind of biometric information to the identity authentication server, and the identity authentication device accesses the identity authentication server through an external network; the identity authentication device receives the authentication information sent by the identity authentication server, and according to the The authentication information generates an authentication result. As a result, the efficiency of user identity authentication is improved, and the authentication process is simplified on the premise of ensuring the safety and reliability of identity authentication.

Optionally, as shown in FIG. 10, FIG. 10 is a schematic structural diagram of another external network identity authentication system based on an internal network connection provided by an embodiment of the present invention. The identity authentication device 902 is integrated and installed in the information collection 901 in the equipment.

Optionally, as shown in FIG. 11, FIG. 11 is a schematic structural diagram of another external network identity authentication system based on an internal network connection provided by an embodiment of the present invention, and the internal system includes a plurality of the information collection devices 901, the identity authentication device 902 is integrated and installed in any one of the multiple information collection devices 901, the multiple information collection devices 901 communicate through the internal network, and the information collection device 901 also uses At:

Receiving biometric information sent by other information collection equipment 901;

The identity authentication device 902 is also used to obtain the biometric information collected by the other information collection device 901. In another embodiment, as shown in FIG. 12, FIG. 12 is a schematic structural diagram of another external network identity authentication system based on an internal network connection provided by an embodiment of the present invention. The identity authentication device 902 is placed in the information collection device 901 outside.

Optionally, FIG. 13 is a schematic structural diagram of another external network identity authentication system based on an internal network connection provided by an embodiment of the present invention. As shown in Figure 13, the identity authentication device 902 and the information collection 901 device Connect via USB data cable.

Optionally, the identity authentication device 902 is further configured to: before acquiring the biometric information collected by the information collection device 901, establish a USB communication connection with the information collection device 901;

Send the authentication installation program to the information collection device 901 for the information collection device 901 to install the authentication installation program.

Optionally, FIG. 14 is a schematic structural diagram of another external network identity authentication system based on an internal network connection provided by an embodiment of the present invention. As shown in Figure 14, the identity authentication device 902 and the information collection 901 device Connect via Bluetooth.

Optionally, the identity authentication device 902 is further configured to: send a Bluetooth authentication request to the information collection device 901 before acquiring the biometric information collected by the information collection device 901;

The information collection device 901 is also used to: authenticate the identity authentication device 902, and if the authentication is passed, create Bluetooth pairing authentication with the identity authentication device.

Optionally, the information collection device 901 is specifically configured to:

Optionally, FIG. 15 is a schematic structural diagram of another external network identity authentication system based on an internal network connection provided by an embodiment of the present invention. As shown in Figure 15, the identity authentication device 902 is integrated and installed on the living person. Inside the face collection camera device, correspondingly, the identity authentication device 902 is specifically used for:

Obtain the user's face image information collected by the camera of the living body face collection camera device.

Optionally, FIG. 16 is a schematic structural diagram of another external network identity authentication system based on an internal network connection provided by an embodiment of the present invention. As shown in Figure 16, the identity authentication device 902 and the living body face collection and camera device External connection, correspondingly, the identity authentication device 902 is specifically used for:

Optionally, the identity authentication device 902 is further configured to:

After the identity authentication device 902 acquires the user's face image information collected by the camera of the living body face collection camera device, perform living body detection on the face image information;

If it is determined to be a living body face image, the face image information is sent to the identity authentication server 903.

Optionally, the identity authentication device 902 is specifically configured to:

Perform feature extraction on the facial image information to obtain facial image characteristics, and send the facial image characteristics to the identity authentication server 903; and/or

Optionally, the identity authentication device 902 is further configured to: after the identity authentication device 902 obtains the user's face image information collected by the camera of the living body face collection camera device, obtain the living body face collection camera device The captured video data is recorded and saved.

Optionally, the identity authentication device 902 is further configured to transfer the video data to the information collection device 901 after recording and saving the video data.

Optionally, the identity authentication device 902 is further configured to send the identity authentication device 902 or the information collection device when the identity authentication device 902 sends the at least one type of biometric information to the identity authentication server 903 The device identification of 901 is sent to the identity authentication server 903 for the identity authentication server 903 to perform identity authentication comparison and generate authentication information according to the device identity and the biometric information.

Optionally, the identity authentication device 902 is further configured to send auxiliary authentication information to the identity authentication server 903 when the identity authentication device 902 sends the at least one kind of biometric information to the identity authentication server 903, so The auxiliary authentication information includes one or more of name, ID number, user account, mobile phone number, and location information; the identity authentication server 903 performs identity authentication comparison based on the biometric information and the auxiliary authentication information Generate authentication information.

Optionally, the identity authentication device 902 is further configured to: after generating an authentication result according to the authentication information, save the authentication result in the identity authentication device and/or the information collection within a preset period of time Local collection of equipment;

The identity authentication device 902 searches locally whether there is an authentication result corresponding to the biometric information, and if it does not exist, sends the at least one kind of biometric information to the identity authentication server 903.

FIG. 17 is a schematic structural diagram of an identity authentication device provided by an embodiment of the present invention. As shown in FIG. 17, the device includes a processor 201, a memory 202, a communication module 203, and a device interface 204; wherein the number of processors 201 can be There are one or more. One processor 201 is taken as an example in FIG. 17; the processor 201, memory 202, communication module 203, and device interface 204 in the device can be connected by a bus or other means. example.

As a computer-readable storage medium, the memory 202 can be used to store software programs, computer-executable programs, and modules, such as program instructions/modules corresponding to the method for identity authentication based on an external network connection based on an internal network in an embodiment of the present invention. The processor 201 executes various functional applications and data processing of the device by running the software programs, instructions, and modules stored in the memory 202, that is, realizes the above-mentioned external network identity authentication method based on the internal network connection.

The memory 202 may mainly include a program storage area and a data storage area. The program storage area may store an operating system and an application program required by at least one function; the data storage area may store data created according to the use of the terminal, and the like. In addition, the memory 202 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, a flash memory device, or other non-volatile solid-state storage devices. In some examples, the memory 202 may further include a memory remotely provided with respect to the processor 201, and these remote memories may be connected to the device through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

The communication module 203 can realize the communication connection with the identity authentication server.

The device interface 204 can implement data communication with the information collection device.

The embodiment of the present invention also provides a storage medium containing computer-executable instructions, when the computer-executable instructions are executed by a computer processor, are used to execute an external network identity authentication method based on an internal network connection, and the method includes:

Through the above description of the embodiments, those skilled in the art can clearly understand that the embodiments of the present invention can be implemented by software and necessary general-purpose hardware. Of course, it can also be implemented by hardware, but the former is better in many cases. Implementation mode. Based on this understanding, the technical solutions of the embodiments of the present invention can be embodied in the form of software products, which can be stored in a computer-readable storage medium, such as a computer. Floppy disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), flash memory (FLASH), hard disk or optical disk, etc., including several instructions to make a computer device (which can be A personal computer, a server, or a network device, etc.) execute the methods described in the various embodiments of the embodiments of the present invention.

It is worth noting that, in the above embodiment of the external network identity authentication device based on the internal network connection, the various units and modules included are only divided according to the functional logic, but are not limited to the above division, as long as the corresponding The function is sufficient; in addition, the specific name of each functional unit is only for the convenience of distinguishing each other, and is not used to limit the protection scope of the embodiment of the present invention.

Note that the above are only preferred embodiments of the embodiments of the present invention and applied technical principles. Those skilled in the art will understand that the embodiments of the present invention are not limited to the specific embodiments described herein, and various obvious changes, readjustments and substitutions can be made to those skilled in the art without departing from the protection scope of the embodiments of the present invention. . Therefore, although the embodiments of the present invention have been described in more detail through the above embodiments, the embodiments of the present invention are not limited to the above embodiments. Without departing from the concept of the embodiments of the present invention, more other equivalents may be included. Embodiments, and the scope of the embodiments of the present invention is determined by the scope of the appended claims.

Claims

The external network identity authentication method based on internal network connection is characterized in that it includes:

The information collection device collects the user's biometric information, and the information collection device accesses the internal system through the internal network;

The identity authentication device acquires at least one type of biometric information collected by the information collection device;

Sending the at least one kind of biometric information to an identity authentication server by the identity authentication device, and the identity authentication device accesses the identity authentication server through an external network;

The identity authentication device receives the authentication information sent by the identity authentication server, and generates an authentication result according to the authentication information.
The external network identity authentication method based on the internal network connection according to claim 1, wherein the identity authentication device is integratedly installed in the information collection device.
The external network identity authentication method based on intranet connection according to claim 2, wherein the internal system includes a plurality of the information collection devices, and the identity authentication device is integrated and installed in the plurality of information collection devices. At least one of the devices, the multiple information collection devices communicate through the internal network, and the external network identity authentication method based on the internal network connection further includes:

In the internal system, an information collection device equipped with the identity authentication device is integrated to receive biometric information sent by other information collection devices, and the information collection device includes at least one biometric information collection device;

The identity authentication device acquires at least one type of biometric information collected by the other information collection device.
The external network identity authentication method based on internal network connection according to claim 1, wherein the identity authentication device and the information collection device are connected through a USB data cable.
The external network identity authentication method based on internal network connection according to claim 3, characterized in that, before the identity authentication device obtains at least one kind of biometric information collected by the information collection device, the method further comprises:

Establish a USB communication connection between the information collection device and the identity authentication device.
The external network identity authentication method based on internal network connection according to claim 1, wherein the identity authentication device and the information collection device are connected via Bluetooth.
The external network identity authentication method based on intranet connection according to claim 6, characterized in that, before the identity authentication device obtains at least one kind of biometric information collected by the information collection device, the method further comprises:

The identity authentication device sends a Bluetooth authentication request to the information collection device;

The information collection device authenticates the identity authentication device, and if the authentication passes, creates a Bluetooth pairing connection authentication with the identity authentication device.
The external network identity authentication method based on internal network connection according to claim 1, wherein the information collection device collecting user's biometric information includes:

The user's face image information is collected by the living body face collection camera device integrated with the information collection equipment.
The external network identity authentication method based on intranet connection according to claim 8, wherein the identity authentication device is connected to the living body face collection and camera device, and correspondingly, the identity authentication device obtains the information At least one type of biometric information collected by the collection device includes:

The identity authentication device acquires the standard-compliant living face image information of the user collected by the camera of the living face collection camera.
The external network identity authentication method based on the internal network connection according to claim 8, wherein the identity authentication device and the living body face acquisition camera device are combined into a single device for integrated installation.
The external network identity authentication method based on intranet connection according to claim 9, characterized in that, after the identity authentication device obtains the user's face image information collected by the camera of the living body face collection camera, the method further comprises: :

Performing live body detection on the face image information;

Correspondingly, sending the at least one kind of biometric information to the identity authentication server by the identity authentication device includes:

If it is determined to be a living body face image, sending the face image information to the identity authentication server.
The external network identity authentication method based on internal network connection according to claim 11, wherein said sending said facial image information to said identity authentication server comprises:

Perform feature extraction on the facial image information to obtain facial image characteristics, and send the facial image characteristics to the identity authentication server; and/or

The original face image in the face image information is sent to the identity authentication server.
The external network identity authentication method based on intranet connection according to claim 9, characterized in that, after the identity authentication device obtains the user's face image information collected by the camera of the living body face collection camera, the method further comprises: :

The identity authentication device obtains the video data shot by the living body face collection and camera device, and records and saves the video data.
The external network identity authentication method based on internal network connection according to claim 13, characterized in that, after recording and saving the video data, the method further comprises:

The identity authentication device transfers the video data to the information collection device.
The method according to any one of claims 1-14, wherein when the identity authentication device sends the at least one kind of biometric information to an identity authentication server, the method further comprises:

The device identifier of the identity authentication device or the information collection device is sent to the identity authentication server for the identity authentication server to perform identity authentication comparison based on the device identity and the biometric information to generate authentication information.
The method according to any one of claims 1-14, wherein when the identity authentication device sends the at least one kind of biometric information to an identity authentication server, the method further comprises:

Sending auxiliary authentication information to the identity authentication server, where the auxiliary authentication information includes one or more of name, ID number, user account, mobile phone number, and location information;

The identity authentication server performs identity authentication comparison according to the biological feature information and the auxiliary authentication information to generate authentication information.
The method according to any one of claims 1-14, wherein after generating an authentication result according to the authentication information, the method further comprises:

Save the authentication result in the identity authentication device and/or the information collection device locally within a preset time period;

Correspondingly, sending the at least one kind of biometric information to the identity authentication server by the identity authentication device includes:

The identity authentication device searches locally whether there is an authentication result corresponding to the biometric information, and if it does not exist, sends the at least one kind of biometric information to the identity authentication server.
The external network identity authentication system based on internal network connection is characterized in that it includes:

An information collection device for collecting user's biometric information, and the information collection device is connected to an internal system through an internal network;

Identity authentication device, configured to obtain at least one type of biometric information collected by the information collection device, and send the at least one type of biometric information to an identity authentication server, and the identity authentication device accesses the identity authentication through an external network server;

The identity authentication server is configured to receive the biometric information sent by the identity authentication device, generate authentication information based on the biometric information, and send the authentication information to the identity authentication device;

The identity authentication device is further configured to receive authentication information sent by the identity authentication server, and generate an authentication result according to the authentication information.
An identity authentication device, the device includes: one or more processors; a storage device, used to store one or more programs, when the one or more programs are executed by the one or more processors, so that The one or more processors implement:

Acquire at least one type of biometric information collected by an information collection device, and send the at least one type of biometric information to an identity authentication server. The identity authentication device accesses the identity authentication server through an external network, and the information collection device passes Internal network access to internal system;

Receiving the authentication information sent by the identity authentication server, and generating an authentication result according to the authentication information.
The identity authentication device according to claim 19, wherein the internal system includes a plurality of the information collection devices, and the identity authentication device is integrated and installed in at least one of the plurality of information collection devices, so The multiple information collection devices communicate through the internal network.
The identity authentication device according to claim 19, wherein the identity authentication device and the information collection device are connected via a USB data cable or via Bluetooth.
A storage medium containing computer-executable instructions, which are used to execute when executed by a computer processor:

Acquire at least one type of biometric information collected by an information collection device, and send the at least one type of biometric information to an identity authentication server. The identity authentication device accesses the identity authentication server through an external network, and the information collection device passes Internal network access to internal system;

Receiving the authentication information sent by the identity authentication server, and generating an authentication result according to the authentication information.