WO2022068066A1

WO2022068066A1 - User authentication method, apparatus, and system for video conference

Info

Publication number: WO2022068066A1
Application number: PCT/CN2020/135586
Authority: WO
Inventors: 陈志明
Original assignee: 常熟九城智能科技有限公司
Priority date: 2020-09-30
Filing date: 2020-12-11
Publication date: 2022-04-07
Also published as: CN113271428A

Abstract

The present invention provides a user authentication method, apparatus, and system for a video conference, used to authenticate conference participants. The method comprises the following steps: acquiring device authorization information of user terminals participating in a conference; acquiring, according to the device authorization information, respective video conference level permissions of the user terminals; acquiring, according to the video conference level permissions, real-time images of respective participating users from the user terminals; and authorizing, according to the real-time images of the participating users, a corresponding video conference level to each participating user. Two-factor authentication is performed via user devices and facial images, thereby effectively preventing an impostor from participating in a conference, and effectively protecting the rights and interests of participating users.

Description

A video conference user authentication method, device and system

technical field

The present disclosure relates to the technical field of video conferences, and in particular, to a video conference user authentication method, device and system.

Background technique

With the development of Internet technology, there are more and more application scenarios of video conferencing. Since it is not affected by the space where the participants are located, the scale of video conferencing is also increasing.

technical problem

In the prior art, when a participant needs to access a video conference, authorization is usually required, and the authorization method is generally based on the terminal used by the participating user. The user applies for uploading the permission to participate in the conference through the terminal. You can use this terminal to conduct online video conferences. However, sometimes users may lose the authorized terminal for some reasons, which will lead to other people using the authorized terminal to participate in the conference, which brings unnecessary risks and even causes users to suffer losses in severe cases. .

technical solutions

In order to at least overcome the above deficiencies in the prior art, the purpose of the present disclosure is to provide a video conference user authentication method, device and system.

In a first aspect, the present disclosure provides a video conference user authentication method for authenticating participants participating in a video conference, and the video conference user authentication method includes the following steps:

Obtain the device authorization information of the user's participating terminal;

According to the device authorization information, obtain the video conference level permission in the user participating terminal;

Acquire a real-time image of each participating user in the user participating terminal according to the video conference grade authority;

The video conference level corresponding to each participant user is authorized according to the real-time image of the participant user.

In a second aspect, an embodiment of the present disclosure provides a video conference user authentication device, the device comprising:

The authorization information acquisition module is used to acquire the device authorization information of the user participating terminal;

a video level analysis module, configured to obtain the video conference level authority in the user participating terminal according to the device authorization information;

The image authorization information acquisition module, according to the video conference grade authority, acquires the real-time image of each participating user in the user participating terminal;

The final authorization module authorizes the video conference level corresponding to each participant user according to the real-time image of the participant user.

In a third aspect, an embodiment of the present disclosure further provides a video conference user authentication system, the system includes a video conference user authentication device and a cloud data server, where the cloud data server includes a processor, a machine-readable storage medium, and a network interface , the machine-readable storage medium, the network interface and the processor are connected through a bus system, the network interface is used to communicate with at least one user terminal, and the machine-readable storage medium is used to store A program, instruction or code, the processor is configured to execute the program, instruction or code in the machine-readable storage medium to execute the video conference user authentication method in the first aspect or any possible design of the first aspect .

In a fourth aspect, embodiments of the present disclosure provide a computer-readable storage medium, where instructions are stored in the computer-readable storage medium, and when executed, cause a computer to execute the first aspect or any possible design of the first aspect Video conference user authentication method in .

beneficial effect

Based on any one of the above aspects, the present disclosure obtains the device authorization information of the user participating terminal; Real-time image of each participating user; authorize the video conference level corresponding to each participating user according to the real-time image of the participating user. Through the dual authorization authentication of the device and the user's face image, it can effectively avoid the possibility of other people participating in the conference by impersonating, and effectively protect the rights and interests of the participating users.

Description of drawings

1 is a schematic diagram of an application scenario of a video conference user authentication system provided by an embodiment of the present disclosure;

2 is a schematic flowchart of a video conference user authentication method provided by an embodiment of the present disclosure;

3 is a schematic diagram of functional modules of a video conference user authentication device provided by an embodiment of the present disclosure;

FIG. 4 is a schematic structural block diagram of a cloud data server for implementing the above-mentioned video conference user authentication method according to an embodiment of the present disclosure.

Embodiments of the present invention

The present disclosure will be specifically described below with reference to the accompanying drawings in the specification, and the specific operation methods in the method embodiments may also be applied to the apparatus embodiments or the system embodiments.

FIG. 1 is an interactive schematic diagram of a video conference user authentication system 10 provided by an embodiment of the present disclosure. The video conference user authentication system 10 may include a cloud data server 100 and a user participating terminal 200 connected in communication with the cloud data server 100 . The video conference user authentication system 10 shown in FIG. 1 is only a feasible example, and in other feasible embodiments, the video conference user authentication system 10 may also include only a part of the components shown in FIG. 1 or Other components may also be included.

In this embodiment, the user participating terminal 200 may include a mobile device, a tablet computer, a laptop computer, etc., or any combination thereof. In some embodiments, mobile devices may include smart home devices, wearable devices, smart mobile devices, virtual reality devices, or augmented reality devices, etc., or any combination thereof. In some embodiments, the smart home devices may include control devices of smart electrical devices, smart monitoring devices, smart TVs, smart cameras, etc., or any combination thereof. In some embodiments, the wearable device may include a smart bracelet, smart shoelaces, smart glass, smart helmets, smart watches, smart clothing, smart backpacks, smart accessories, etc., or any combination thereof. In some embodiments, a smart mobile device may include a smartphone, a personal digital assistant, a gaming device, etc., or any combination thereof. In some embodiments, the virtual reality device and/or augmented reality device may include a virtual reality helmet, virtual reality glass, virtual reality patch, augmented reality helmet, augmented reality glass, or augmented reality patch, etc., or any combination thereof. For example, virtual reality devices and/or augmented reality devices may include various virtual reality products and the like.

In this embodiment, the Internet of Things cloud data server 100 and the user participant terminal 200 in the video conference user authentication system 10 can cooperate to execute the video conference user authentication method described in the following method embodiments. Specifically, the cloud data server 100 and the user For part of the execution steps of the terminal 200 participating in the conference, reference may be made to the detailed description of the following method embodiments.

In order to solve the technical problems in the foregoing background technology, FIG. 2 is a schematic flowchart of a video conference user authentication method provided by an embodiment of the present disclosure. The video conference user authentication method provided by this embodiment can be Executed by the server 100, the following describes the video conference user authentication method in detail.

Step S110, obtaining the device authorization information of the user participating terminal;

Step S120, according to the device authorization information, obtain the video conference level authority in the user participating terminal;

Step S130, obtaining a real-time image of each participating user in the user participating terminal according to the video conference grade authority;

Step S140, authorize the video conference level corresponding to each participant user according to the real-time image of the participant user.

In a possible embodiment, step S130 further includes:

Step S131, obtaining the first edge of the real-time image of each of the participating users;

Step S132, determining a face recognition area according to the first edge;

Step S133, expanding the parallel edge of the face recognition area to obtain the second edge;

Step S134, acquiring the second edge as the actual edge of the real-time image of the participating user.

In a possible embodiment, step S131 further includes:

Step S1311, obtaining the parallel edge and the vertical edge in the real-time image of each participating user;

Step S1312: Calculate the first edge of the real-time image of each participating user according to the parallel edge and the vertical edge.

In a possible embodiment, the method includes:

Step S150, by traversing the authorization database, the video conference level authority of the user participating terminal is obtained.

In a possible embodiment, step S150 further includes:

Step S151, obtaining authority data in the device authorization information;

Step S152, establishing a search index according to the authority data;

Step S153, traverse the authorization database according to the search index.

Step S154, if the search index exists in the authorization database, mark the user participating terminal as passed, and further prepare for image recognition.

Step S155, if the search index does not exist in the authorization database, send the search index to the management server, suspend the preparation for image recognition, mark the user participating terminal as failed, and feed back the result to the user to guide the process. The user re-applies for registration.

FIG. 3 is a schematic diagram of functional modules of a video conference user authentication apparatus 300 according to an embodiment of the present disclosure. In this embodiment, the video conference user authentication apparatus 300 can be divided into functional modules according to the method embodiment performed by the cloud data server 100. , that is, the following functional modules corresponding to the video conference user authentication apparatus 300 can be used to execute the above-mentioned method embodiments executed by the cloud data server 100 . Wherein, the video conference user authentication device 300 may include an authorization information acquisition module 310, a video level analysis module 320, an image acquisition module 330 and a final authorization module 340. functions are explained in detail.

The authorization information acquisition module 310 may be configured to perform the above-mentioned step S110, that is, to acquire the device authorization information of the user participating terminal.

The video level analysis module 320 may be configured to perform the above step S120, that is, to obtain the video conference level permission in the user participating terminal according to the device authorization information.

The image acquisition module 330 may be configured to perform the above-mentioned step S130, that is, to acquire a real-time image of each user participating in the conference in the user participating terminal according to the video conference level authority.

The final authorization module 340 may be configured to perform the above step S140, that is, to authorize the video conference level corresponding to each participant user according to the real-time image of the participant user.

It should be noted that it should be understood that the division of each module of the above apparatus is only a division of logical functions, and may be fully or partially integrated into a physical entity in actual implementation, or may be physically separated. And these modules can all be implemented in the form of software calling through processing elements; they can also all be implemented in hardware; some modules can also be implemented in the form of calling software through processing elements, and some modules can be implemented in hardware. For example, the authorization information acquisition module 310 may be a separately established processing element, or may be integrated into a certain chip of the above-mentioned device to be implemented, in addition, it may also be stored in the memory of the above-mentioned device in the form of program code, and is executed by a certain of the above-mentioned device. A processing element invokes and executes the functions of the above authorization information acquisition module 310 . The implementation of other modules is similar. In addition, all or part of these modules can be integrated together, and can also be implemented independently. The processing element described herein may be an integrated circuit with signal processing capabilities. In the implementation process, each step of the above-mentioned method or each of the above-mentioned modules can be completed by an integrated logic circuit of hardware in the processor element or an instruction in the form of software.

For example, the above modules may be one or more integrated circuits configured to implement the above methods, such as one or more specific integrated circuits (application specific integrated circuit, ASIC), or, one or more microprocessors (digital signal processor, DSP), or, or, one or more field programmable gate arrays (field programmable gate array, FPGA) and so on. For another example, when one of the above modules is implemented in the form of a processing element scheduler code, the processing element may be a general-purpose processor, such as a central processing unit (central processing unit). unit, CPU) or other processor that can invoke program code. For another example, these modules can be integrated together and implemented in the form of a system-on-a-chip (SOC).

FIG. 4 shows a schematic diagram of the hardware structure of a cloud data server 100 for implementing the above-mentioned control device provided by an embodiment of the present disclosure. As shown in FIG. 4 , the cloud data server 100 may include a processor 110 and a machine-readable storage medium 120 , bus 130 and transceiver 140 .

In a specific implementation process, at least one processor 110 executes computer-executable instructions stored in the machine-readable storage medium 120 (for example, included in the video conference user authentication apparatus 300 shown in FIG. 3 ), so that the processor 110 can execute In the video conference user authentication method according to the above method embodiment, the processor 110, the machine-readable storage medium 120 and the transceiver 140 are connected through the bus 130, and the processor 110 can be used to control the transceiver 140. The aforementioned user-participating terminal 200 performs data transmission and reception.

For the specific implementation process of the processor 110, reference may be made to the various method embodiments executed by the cloud data server 100 above, and the implementation principles and technical effects thereof are similar, and are not described again in this embodiment.

In the above-mentioned embodiment shown in FIG. 4 , it should be understood that the processor may be a central processing unit (English: Central Processing Unit, CPU), and may also be other general-purpose processors, digital signal processors (English: Digital Signal Processor, DSP), application-specific integrated circuits (English: Application Specific Integrated Circuit, ASIC) and so on. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of the method disclosed in conjunction with the invention can be directly embodied as executed by a hardware processor, or executed by a combination of hardware and software modules in the processor.

Machine-readable storage medium 120 may include high-speed RAM memory, and may also include non-volatile storage NVM, such as at least one disk storage.

The bus 130 may be an industry standard architecture (Industry Standard Architecture, ISA) bus, Peripheral Component Interconnect (PCI) bus or Extended Industry Standard Architecture (Extended Industry Standard Architecture, EISA) bus, etc. The bus 130 may be classified into an address bus, a data bus, a control bus, and the like. For convenience of representation, the buses in the drawings of the present application are not limited to only one bus or one type of bus.

In addition, an embodiment of the present disclosure further provides a readable storage medium, where computer-executable instructions are stored in the readable storage medium, and when a processor executes the computer-executable instructions, the above video conference user authentication method is implemented.

The above-mentioned readable storage medium may be implemented by any type of volatile or non-volatile storage device or combination thereof, such as Static Random Access Memory (SRAM), Electrically Erasable Programmable Read-Only Memory (EEPROM) , Erasable Programmable Read Only Memory (EPROM), Programmable Read Only Memory (PROM), Read Only Memory (ROM), Magnetic Memory, Flash Memory, Magnetic Disk or Optical Disk. A readable storage medium can be any available medium that can be accessed by a general purpose or special purpose computer.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present disclosure, but not to limit them; although the present disclosure has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: The technical solutions described in the foregoing embodiments can still be modified, or some or all of the technical features thereof can be equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the embodiments of the present disclosure. scope.

Claims

A video conference user authentication method for authenticating participants participating in a video conference, wherein the video conference user authentication method comprises the following steps:

Obtain the device authorization information of the user's participating terminal;

According to the device authorization information, obtain the video conference level permission in the user participating terminal;

Acquire a real-time image of each participating user in the user participating terminal according to the video conference grade authority;

The video conference level corresponding to each participant user is authorized according to the real-time image of the participant user.
The authentication method according to claim 1, wherein the step of acquiring the real-time image of each user participating in the conference in the user participating terminal according to the video conference grade authority comprises:

obtaining the first edge of the real-time image of each of the participating users;

Determine a face recognition area according to the first edge;

Extending the parallel edges of the face recognition area to obtain a second edge;

The second edge is acquired as the actual edge of the real-time image of the participating users.
The authentication method according to claim 2, wherein the step of obtaining the first edge of the real-time image of each participating user comprises:

Obtain the parallel and vertical edges in the live image of each participating user;

The first edge of the real-time image of each participating user is calculated according to the parallel edge and the vertical edge.
The authentication method according to any one of claims 1 to 3, wherein,

The step of obtaining the video conference level authority in the user participating terminal is realized by traversing the authorization database, and the step of traversing the authorization database includes:

Obtain permission data in device authorization information;

Establish a search index according to the permission data;

traversing the authorization database according to the search index;

If the search index exists in the authorization database, the user participating terminal is identified as passed, and further image recognition preparations are performed;

If the search index does not exist in the authorization database, send the search index to the management server, stop the preparation for image recognition, at the same time mark the user participating terminal as failed, and feed back the result to the user, instructing the user to repeat the process Apply for registration.
A video conference user authentication device, characterized in that the device comprises:

The authorization information acquisition module is used to acquire the device authorization information of the user participating terminal;

a video level analysis module, configured to obtain the video conference level authority in the user participating terminal according to the device authorization information;

an image authorization information acquisition module, configured to acquire a real-time image of each participant in the user participant terminal according to the video conference grade authority;

The final authorization module is used to authorize the video conference level corresponding to each participant user according to the real-time image of the participant user.
A video conference user authentication system, the system includes a video conference user authentication device and a cloud data server, wherein the cloud data server includes a processor, a machine-readable storage medium and a network interface, the machine-readable The storage medium, the network interface and the processor are connected through a bus system, the network interface is used for communicating with at least one user terminal, the machine-readable storage medium is used for storing programs, instructions or codes, The processor is configured to execute programs, instructions or codes in the machine-readable storage medium, so as to execute the video conference user authentication method of any one of claims 1-4.
A computer-readable storage medium for storing instructions/executable codes, when the instructions/executable codes are executed by a processor of an electronic device, the electronic device enables the electronic device to implement any one of claims 1-4. method described.