WO2022233313A1

WO2022233313A1 - User identity information authentication method, system, apparatus and device, and storage medium

Info

Publication number: WO2022233313A1
Application number: PCT/CN2022/091134
Authority: WO
Inventors: 简伟明; 皮爱平; 黄飞鹰; 梁华贵; 陈吉宏; 黄伟涛; 郑则润; 陈秋榕
Original assignee: 简伟明
Priority date: 2021-05-06
Filing date: 2022-05-06
Publication date: 2022-11-10
Also published as: CN113177797A

Abstract

A user identity information authentication method. The method comprises: receiving first user information that is sent by a trusted device; generating a first check code on the basis of the first user information, and determining a device to be authenticated that matches the first user information; and a server matching the first check code with a third check code that is stored therein, and if the first check code is the same as the third check code, modifying a stored trust level of the device to be authenticated, so as to complete the authentication of user identity information. Further disclosed are a user identity information authentication system, apparatus and device, and a storage medium.

Description

User identity information authentication method, system, device, device and storage medium

technical field

The embodiments of the present application relate to the technical field of identity authentication, and in particular, to a user identity information authentication method, system, device, user identity information authentication device, and storage medium.

Background technique

Identity authentication refers to the confirmation of the user's identity through special means. In industry and commerce, taxation, finance, public security, transportation and other industry scenarios, the process of identity authentication is required. For example, when a user goes to a bank to conduct business, the user's identity needs to be authenticated To determine the authority to handle the business.

One of the important links in identity authentication is the verification of personal identity information, that is, to ensure the credibility of the user's face, name and ID number.

At present, it is commonly used in combination with APP or applet, that is, when users register with the APP or applet, they enter personal information such as personal information and face information, and then send it to the server, or keep a piece of personal identification information in the APP or applet. terminal. The personally identifiable information in the above process is completed by the user himself, and its credibility cannot be ensured without verification of the identity information. In order to ensure the credibility of personal identity information, there are usually several methods: one is to verify the identity online through an authoritative personal information certification agency, which is fast, convenient and fast, but the certification cost is relatively high; the other is to verify the identity online. It is authenticated through offline devices. The common method is to put the ID card on the identity verification device with an ID card reader, read the ID card information, and then collect the live face image on the scene and conduct a person with the face of the ID card. After the face recognition comparison, the QR code is generated after confirming that it is the person. The user uses the corresponding APP or applet to identify the QR code on the screen to complete the verification of personal identity information and user account information to ensure that the personal identity information on the server and mobile It is credible, but this operation method has many steps, takes a long time, and has high learning cost for users. It is difficult to master, and it is not convenient for the elderly to use.

SUMMARY OF THE INVENTION

Embodiments of the present application provide a user identity information authentication method, system, device, device, and storage medium, so as to minimize user operation steps in the identity information authentication process and improve the convenience of identity authentication.

In a first aspect, an embodiment of the present application provides a method for authenticating user identity information, including:

receiving first user information sent by a trusted device, where the first user information is collected by the trusted device;

A first verification code is generated based on the first user information, and a device to be authenticated that matches the first user information is determined, wherein the second user information is pre-stored in the device to be authenticated, and the trusted device The credibility level of the collected first user information is higher than the credibility level of the second user information stored in the device to be authenticated;

Determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored trust level of the device to be authenticated, and complete Authentication of user identity information.

Further, after modifying the stored trust level of the device to be authenticated, the method further includes:

Send the first verification code to the device to be authenticated, for the device to be authenticated to match the first verification code and the second verification code, if the matching is successful, the device to be authenticated The device modifies the authentication level and notifies the user, wherein the second verification code is generated according to the second user information stored in the device to be authenticated.

Further, the trusted device includes an ID card reading device, a trusted ID reader, and a passport reader, and the first user information includes an ID card reading device, a trusted ID reader, and a passport reader, and the first user information includes an ID card reading device, a trusted ID reader, and a passport reader. User information includes ID card information, citizen certification, citizen card, qualification certificate, driver's license, and passport.

Further, the generating a first check code based on the first user information includes:

The first check code is generated by calculating the hash value of the name and the ID card number in the ID card information through a hash algorithm.

Further, the determining the device to be authenticated that matches the first user information includes:

Obtain the location information of the trusted device, and determine the terminal device within the preset range of the location information;

query the stored face features of the user corresponding to the terminal device;

Perform feature extraction on the face image in the ID card information to obtain machine-readable face features;

The machine-readable face feature is compared with the user face feature stored correspondingly in each terminal device, and the terminal device that satisfies the comparison result is determined as the device to be authenticated.

Further, before querying the stored facial features of the user corresponding to the terminal device, the method further includes:

determining the authentication level of the recorded terminal equipment within the preset range;

Correspondingly, the query and storage of the user face features corresponding to the terminal device include:

Query the face features of the user corresponding to the terminal device whose authentication level meets the preset level.

In a second aspect, an embodiment of the present application provides a user identity information authentication system, including a server, a device to be authenticated, and a trusted device;

The trusted device is used to send the first user information to the server, and the first user information is collected by the trusted device; the server, the server, is used to receive the first user information, based on the first user information A first check code is generated from user information, and a device to be authenticated that matches the first user information is determined, wherein the credibility level of the first user information collected by the trusted device is higher than that of the to-be-authenticated device the trust level of the second user information stored by the device; and

Determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored trust level of the device to be authenticated, and sending the first verification code and the modified authentication level to the device to be authenticated;

The device to be authenticated is configured to generate a second check code based on the stored second user information, and receive the first check code sent by the server, if the first check code and the second check code If the codes are consistent, the stored authentication level is updated to the modified authentication level.

Further, the first user information includes ID card information, and the server is used for:

Further, the server is also used for:

Determine the recorded authentication level of the terminal device within the preset range; query the user face feature corresponding to the terminal device whose authentication level meets the preset level.

In a third aspect, an embodiment of the present application provides a user identity information authentication device, including:

User information receiving module: used to receive first user information sent by a trusted device, where the first user information is collected by the trusted device;

Verification code generation module: used to generate a first verification code based on the first user information, and determine a device to be authenticated that matches the first user information, wherein the device to be authenticated is pre-stored with a second user information, the credibility level of the first user information collected by the trusted device is higher than the credibility level of the second user information stored by the device to be authenticated;

Authentication device verification module: used to determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored Authenticate the trust level of the device and complete the authentication of user identity information.

Further, it also includes:

A verification code sending module, configured to send the first verification code to the device to be authenticated, for the device to be authenticated to match the first verification code and the second verification code, if If the match is successful, the device to be authenticated modifies the authentication level and notifies the user, wherein the second check code is generated according to the second user information stored by the device to be authenticated.

In a fourth aspect, an embodiment of the present application provides a user identity information authentication device, characterized by comprising: a memory and one or more processors;

the memory for storing one or more programs;

When the one or more programs are executed by the one or more processors, the one or more processors implement the user identity information authentication method according to any one of the first aspect of the present application.

In a fifth aspect, an embodiment of the present application provides a storage medium containing computer-executable instructions, where the computer-executable instructions, when executed by a computer processor, are used to execute the user identity information authentication method described in the first aspect .

In a fifth aspect, the embodiments of the present application also provide a method for authenticating user identity information, including:

receiving a first check code sent by a trusted device, where the first check code is generated by the trusted device based on the collected first user information;

Determine the device to be authenticated that matches the first check code, wherein the device to be authenticated is pre-stored with second user information, and the credibility level of the first user information collected by the trusted device is higher than all Describe the trust level of the second user information stored by the device to be authenticated;

In a sixth aspect, an embodiment of the present application further provides a user identity information authentication system, including a server, a device to be authenticated, and a trusted device, wherein,

The trusted device is used to send the first check code to the server, where the first check code is calculated by the trusted device based on the collected first user information; the server is used to receive the first check code code to determine the device to be authenticated that matches the first check code, wherein the trust level of the first user information collected by the trusted device is higher than the trust level of the second user information stored by the device to be authenticated confidence level; and

The embodiment of the present application is applied to a server, receives first user information sent by a trusted device, generates a first check code according to the first user information, and determines a device to be authenticated that matches the first user information based on the first user information, the server Matching the first check code with the third check code stored by itself, if the first check code and the third check code are the same, modify the stored trust level of the device to be authenticated, Complete the authentication of user identity information; the entire identity information authentication process greatly reduces the steps that require the direct participation of users, avoids cumbersome operations for users, and reduces the time for users to queue operations, greatly improves user convenience, and increases user experience. It reduces equipment investment costs, is convenient for the elderly to use, and has strong universality.

Description of drawings

1 is a flowchart of a method for authenticating user identity information provided by an embodiment of the present application;

2 is a flowchart of another user identity information authentication method provided by an embodiment of the present application;

3 is a flowchart of another user identity information authentication method provided by an embodiment of the present application;

4 is a flowchart of another user identity information authentication method provided by an embodiment of the present application;

5 is a schematic structural diagram of a user identity information authentication system provided by an embodiment of the present application;

6 is a schematic structural diagram of a user identity information authentication device provided by an embodiment of the present application;

7 is a schematic structural diagram of another user identity information authentication device provided by an embodiment of the present application;

FIG. 8 is a schematic structural diagram of a user identity information authentication device provided by an embodiment of the present application.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present application clearer, the specific embodiments of the present application will be further described in detail below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are only used to explain the present application, but not to limit the present application. In addition, it should be noted that, for the convenience of description, the drawings only show some but not all of the contents related to the present application. Before discussing the exemplary embodiments in greater detail, it should be mentioned that some exemplary embodiments are described as processes or methods depicted as flowcharts. Although a flowchart depicts various operations (or steps) as a sequential process, many of the operations may be performed in parallel, concurrently, or concurrently. Additionally, the order of operations can be rearranged. The process may be terminated when its operation is complete, but may also have additional steps not included in the figures. The processes may correspond to methods, functions, procedures, subroutines, subroutines, and the like.

The embodiments of the present application provide a user identity information authentication method, system, device, user identity information authentication device, and storage medium. The embodiment of the present application is applied to a server, receives first user information sent by a trusted device, generates a first check code according to the first user information, and determines a device to be authenticated that matches the first user information based on the first user information, the server Matching the first check code with the third check code stored by itself, if the first check code and the third check code are the same, modify the stored trust level of the device to be authenticated, Complete the authentication of user identity information; the entire identity information authentication process greatly reduces the steps that require the direct participation of users, avoids cumbersome operations for users, and reduces the time for users to queue operations, greatly improves user convenience, and increases user experience. It reduces equipment investment costs, is convenient for the elderly to use, and has strong universality.

As an example of the complete business process of this application, first determine the authentication level of the trusted device, and obtain the ID photo and personal information from the trusted device, where the personal information includes the country, name, ID number, etc. on the ID card Personal identity information; then the trusted device sends the personal identity information and identity information device ID, or sends the personal identity information and device location information to the server, the identity information device ID refers to the device ID of the trusted device, through which the device ID can Get the location information of trusted devices. The server uses a hash algorithm or a national secret algorithm to generate a first check code for the personal identity information, and determines a mobile device within a preset range according to the location information of the trusted device. Record the device to be authenticated, that is, the identity authentication level and the second verification code of the mobile device, in the database connected to the server, determine whether the personal identity authentication level managed by the mobile device is lower than the authentication level of the trusted device, and further determine that the conditions are met Whether the second check code of the mobile device matches the first check code, and further compare the facial features of the user associated with the qualified mobile device and the ID card photo obtained by the trusted device for face recognition, Modify the certification level of eligible mobile devices. The server notifies the application of the corresponding mobile device, and sends the first check code and authentication level. The mobile device verifies whether the user's second check code matches the first check code. When the match is successful, the mobile device can be modified. User authentication level, and notify the user. Wherein, in the server, a third verification code is also stored.

Detailed descriptions are given below.

1 shows a flowchart of a method for authenticating user identity information provided by an embodiment of the present application. The method for authenticating user identity information provided by an embodiment of the present application can be performed by a user identity information authentication device, which can be implemented by hardware and/or software and integrated in computer equipment.

The following description takes the user identity information authentication device executing the user identity information authentication method as an example for description. Referring to Figure 1, the user identity information authentication method includes:

101: Receive first user information sent by a trusted device, where the first user information is collected by the trusted device.

In this embodiment of the present application, the subject executing the user identity information authentication method may be a server, including a cloud server. Among them, the trusted device is usually installed in the device where the identity authentication needs to be performed to collect and identify user information. A trusted device can be a dedicated device that only provides user identity information collection, or can be a terminal device that combines other functions, such as an identity authentication terminal device set up in a bank office, an integrated terminal device set in a tax office, and a high-speed rail automatic terminal. Ticket collection terminal equipment, etc. The first user information may include user name, biometric information, ID number, mobile phone number and other information. Biometric information includes one or more of face information, iris information, sclera information, fingerprint information, palmprint information, voiceprint information, and DNA information, and the face information includes living face information and face-based photos The parsed face information, the living face information obtains the user's face information through the face recognition technology, and improves the accuracy of the identity recognition. In other exemplary embodiments, the first user information may further include a country of origin. For example, if a user is from country A, but has an ID card in country B, the user's nationality is the nationality of country A, but the country to which he belongs is country B.

In this embodiment, the first user information is collected by a trusted device. Preferably, the trusted device includes an ID card reading device, a trusted ID reader, a passport reader, a driver's license reader, etc., then the first user information includes ID information. The ID information is, for example, a complete ID number or a partial ID number, and may also include the user's name, user photo information of the certificate (printed user photo information of the certificate and/or chip user photo information of the certificate), based on the certificate The user's photo information can obtain the user's face feature information. Only when the trusted device reads the ID card, it obtains the ID card information and uploads it to the server. That is, reading the ID card through a trusted device is equivalent to starting the identity information authentication process.

102: Generate a first verification code based on the first user information, and determine a device to be authenticated that matches the first user information, where the device to be authenticated stores a second verification code, wherein the device to be authenticated The second user information is pre-stored in the device, and the credibility level of the first user information collected by the trusted device is higher than the credibility level of the second user information stored by the device to be authenticated.

The server generates a first check code for the first user information from the trusted device, and the first check code is used to perform a handshake and identity confirmation with the device to be authenticated. At the same time, the server matches the devices to be authenticated that meet the conditions based on the first user information. The device to be authenticated is usually a terminal device held by a user, including mobile terminal devices such as smart phones, smart bracelets, smart keychains, smart necklaces, smart watches, notebook computers, and tablet computers. The second user information is pre-stored in the device to be authenticated. It can be understood that the device to be authenticated has the function of entering the second user information. Similarly, the second user information includes the user name, face feature information, ID number, mobile phone number Wait. Wherein, the facial feature information can be acquired through face acquisition devices such as face scanners, cameras, cameras, etc., and the user can also upload a personal face photo on the device to be authenticated. Moreover, when the device to be authenticated pre-stores the second user information, it calculates and generates a second verification code based on the second user information.

In the embodiment, the first verification code generated by the server for the first user information can be a complete name plus an ID card number. It can also be special information, such as CTID, which is an encrypted ID card information composed of 256 characters. In addition, it can also be the surname of the name plus the total number of characters of the name plus the first three digits of the ID card plus the last three digits of the ID card. The above-mentioned three expression forms of the first check code are only used as exemplary embodiments, and are not limited to the above-mentioned three expression forms.

In this embodiment, the trust level of the first user information collected by the trusted device is higher than the trust level of the second user information stored by the device to be authenticated. Specifically, in this embodiment, the data authentication level is divided into five levels. Level 0 means no identity information. At the same time, when the application is just installed and the user has not performed any identity information operation on it; level 1 Indicates virtual information, usually user-defined avatars, nicknames, and Open IDs automatically generated by the system; Level 2 means no credibility, usually refers to the identity information filled in by the user, which is from the user's self-filling, no After any verification, it is not credible information; Level 3 is preliminary credible, and OCR (Optical Character Recognition, Optical Character Recognition) ID card identification and authentication is usually required on the basis of Level 3 information; Level 4 means commercial credibility , indicating that the information has been certified by a third-party agency and can be certified for commercial transaction operations, including third-party agency certification such as Ali certification, WeChat certification, Baidu certification, UnionPay certification, telecom certification, Google certification, Amazon certification, and commercial NFC ID card certification; Level 5 means legal trustworthiness, including ID card reader authentication, eID authentication, CTID (Internet ID) authentication, passport reader, driver's license reader, police NFC ID authentication and public security bureau authentication and other local laws and regulations Certification. Preferably, the data authentication in the trusted device disclosed in the embodiment of the present application conforms to the 5-level ID card authentication method, that is, the first user information collected by the trusted device is legally trusted and belongs to the highest level of data authentication; Or the data authentication in the trusted device disclosed in the embodiment of the present application conforms to the 4-level ID card authentication method, that is, the first user information collected by the trusted device is commercial trustworthy and belongs to a higher level of data authentication reliability. . The second user information pre-stored in the device to be authenticated is usually entered by the user independently, and in this case, the second user information belongs to the second level of data authentication without other verification. If the second user information pre-stored in the device to be authenticated comes from other devices, or is independently entered by the user but has been verified by other platforms, such as WeChat authentication, the actual level of the second user information is defined according to the actual situation.

In this embodiment, the purpose of verifying user information with a low trust level is to determine the trust level of the user information. If the data trust level corresponding to the device to be authenticated is already the highest level, it indicates that it is legally trustworthy, and no need Verify again. Therefore, in this embodiment, determining the matching device to be authenticated includes checking the data level of the terminal device, and only selecting the device to be authenticated whose trust level is lower than that of the trusted device to perform the next action. In fact, each terminal device will periodically or uninterruptedly report location information to the server, and will also periodically or uninterruptedly report its own data authentication level to the server. Therefore, when the server receives the first user of the trusted device When the device to be authenticated that matches the first user information is determined, the device to be authenticated with the data authentication level equal to or even higher than the trusted device can be excluded according to the data authentication level reported by each terminal device.

Since personally identifiable information involves personal privacy, in order to ensure the security of personal identity information, ordinary devices and enterprises cannot store personally identifiable information. In order to ensure the security of personal identity information, for example, in the scenario where the trusted device of this application selects an ID card reader device, the trusted device reads the ID card information, and obtains the mobile phone number of the corresponding user according to the ID card information, and selects the The last n digits of the mobile phone number, where n is an integer greater than 1. And the user's photo, the user's name and the last n digits of the mobile phone number in the ID card information are packaged as the first user information. Therefore, when the present application calculates and generates the first check code based on the first user information, it may be generated by calculating the hash value of the last n digits of the user's name and mobile phone number through a hash algorithm. From the perspective of convenience, the content category included in the second user information may be the same as the first user information, including user ID card information, and the user's mobile phone number or the last n digits of the mobile phone number. The second check code can also be generated by calculating the hash value of the last n digits of the user's name and mobile phone number by a hash algorithm.

In another exemplary embodiment, the first user information may only include the user's ID card information, that is, not include the mobile phone number, but include the ID card number, name, and face information. Then, the first check code can be generated by calculating the hash value of the name and the ID card number in the ID card information through a hash algorithm. Similarly, the second user information may include ID number, name, and face information. Correspondingly, the second check code may also use a hash algorithm to calculate the hash value of the name and ID number in the ID card information. generate.

103: Determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored trust level of the device to be authenticated , complete the authentication of user identity information.

The server cannot store identity information, so the server pre-stores a third check code, where the third check code is generated from user information corresponding to different users. Since the server generates the first check code based on the first user information and matches it to the device to be authenticated, the third check code corresponding to the device to be authenticated is associated. Specifically, the server checks the consistency of the first check code and the second check code. If the two are consistent, it proves that the first check code matches the second check code, and the availability of the device to be authenticated can be modified. information level, so as to complete the authentication of user identity information.

In another embodiment, a user identity information authentication method provided by the present application is as shown in FIG. 2 , including:

201: Receive first user information sent by a trusted device, where the first user information is collected by the trusted device.

202: Generate a first verification code based on the first user information, and determine a device to be authenticated that matches the first user information. Similarly, in this exemplary embodiment, second user information is pre-stored in the device to be authenticated, and the trust level of the first user information collected through the trusted device is higher than the second user information stored by the device to be authenticated The trust level of user information.

203: Determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored trust level of the device to be authenticated , complete the authentication of user identity information.

In the foregoing steps 201 to 203, the execution process and principle are the same as those in the foregoing previous embodiment, and are not repeated in this embodiment. The main difference between this embodiment and the previous embodiment is that, after modifying the stored trust level of the device to be authenticated, this embodiment further includes:

204: Send the first verification code to the device to be authenticated, for the device to be authenticated to match the first verification code and the second verification code, if the matching is successful, the The to-be-authenticated device modifies the authentication level and notifies the user, wherein the second check code is generated according to the second user information stored by the to-be-authenticated device.

In this embodiment, based on the consistency check of the first check code and the third check code by the server, the device to be authenticated checks the consistency of the first check code and the second check code. , if the two are consistent, it indicates that the first check code and the second check code match, and the match is successful, and the device to be authenticated modifies the authentication level and notifies the user.

The device to be authenticated sends the matching result to the user. In this embodiment, when the matching result is that the matching is successful, the second user information of the device to be authenticated is credible. In the server of the present application, after receiving the trust level reported by each terminal device, the trust level of each terminal device is stored. Therefore, when the server receives the matching result of the device to be authenticated and the matching result is successful, it indicates that the identity authentication is successful, and Update the trust level.

As shown in FIG. 3 , the embodiment of the present application also provides another user identity information authentication method, including:

301: Receive first user information sent by a trusted device, where the first user information is collected by the trusted device.

This embodiment is applied to the server, and the server authenticates the identity information of other terminal devices based on the trusted device that has obtained the trust level certification. Wherein, the user inputs the first user information through the trusted device, and the first user information is usually generated immediately rather than pre-stored in the trusted device. Trusted devices, as devices that have obtained the trust level certification, are usually used in the scenarios of banks, high-speed railways, and government affairs, such as bank identity authentication terminals, high-speed railway ID card check terminals, and government affairs self-service terminals. The first user information is usually ID card information.

302: Generate a first check code based on the first user information.

In this embodiment, the server calculates the first check code on the basis of obtaining the first user information. Optionally, the first user information includes ID number, name, face biometric information, and the first check code. The hash value of the name and the ID card number in the ID card information can be calculated and generated by a hash algorithm.

303: Acquire location information of the trusted device, and determine a terminal device within a preset range of the location information.

When the user inputs the first user information through the trusted device, it is equivalent to starting the identity information authentication process, and the server immediately receives the first user information, and searches for terminal devices within a preset range accordingly. It should be noted that the terminal device periodically or uninterruptedly reports its own location information to the server, so the server actually stores the location information of each terminal device. In an exemplary embodiment, the location information of the trusted device is also stored in the server. Based on the location information of the trusted device, and according to a preset range set in advance, terminal devices within the preset range are selected. In other exemplary embodiments, the first user information may also include a device ID of a trusted device in addition to the user's personal identity information, and the device ID can correspond to query the registered address of the trusted device. In addition, the location information of the trusted device can be collected by a satellite positioning device, a Bluetooth positioning device, or other positioning devices. Similarly, the location information of the terminal device can also be collected by a satellite positioning device, a Bluetooth positioning device, or other positioning devices. The preset range is, for example, a circular area formed based on the trusted device as the center and based on the center and the preset radius. Therefore, searching for a terminal device within a preset range is to select a circular area formed with the trusted device as the center according to the location information of the trusted device in combination with the preset radius, and determine the terminal device located in the center area according to the location information of the terminal device. The terminal device is used as an alternative device to be authenticated to perform the next matching process.

304: Query the stored face features of the user corresponding to the terminal device.

The matching of the geographic location is the first step in determining the device to be authenticated in the embodiment of the present application, so as to exclude other terminal devices within the preset range and reduce the subsequent workload. Afterwards, further matching is performed on the authentication device based on the user's facial features. Specifically, each terminal device is paired with the user's facial features. The user face feature is, for example, a face image collected as one type of content of the second user information when the user enters the second user information, including two different types of face photos and live face features.

305: Perform feature extraction on the face image in the ID card information to obtain machine-readable face features.

The trusted device scans the ID card and reads the ID card information, including the face image in the ID card. After uploading the ID card information to the server, the server further identifies and analyzes the face image to obtain machine-readable face features. In the previous step, the face image of the second user information is assumed to be a face photo, since the shooting time of the face photo of the second user information is different from the shooting time of the face image in the ID card information, Even the face photos taken by the same user under different light, time, scene, and character status are not exactly the same. Therefore, in this application, the terminal device is further verified and matched based on the face image.

306: Compare the machine-readable face feature with the user face feature stored correspondingly in each terminal device, and determine the terminal device that satisfies the comparison result as the device to be authenticated.

In this embodiment, the device to be authenticated stores a second check code, and the second check code is calculated and generated by the device to be authenticated according to the pre-stored second user information, wherein the data collected by the trusted device The trust level of the first user information is higher than the trust level of the second user information stored by the device to be authenticated.

307: Determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored trust level of the device to be authenticated , complete the authentication of user identity information.

Referring to FIG. 4 , the embodiment of the present application further provides another method for authenticating user identity information, including:

401: Receive first user information sent by a trusted device, where the first user information is collected by the trusted device.

Similarly, in this embodiment, the main body that executes the user identity information authentication method may be a server, and the first user information includes the user's face feature, name, and ID number, or includes the user's face feature, name, and the last n digits of the mobile phone number. .

402: Generate a first check code based on the first user information.

The server in this embodiment generates a first check code based on the first user information, and the first check code is a unique value, so it has sufficient reliability. Specifically, the hash value of the last n digits of the user's name and mobile phone number can be calculated by a hash algorithm to generate the first check code, or the hash value of the user's name and ID number can be calculated by a hash algorithm to generate the first check code. code.

403: Acquire location information of the trusted device, and determine terminal devices within a preset range of the location information.

When the user inputs the first user information through the trusted device, it is equivalent to starting the identity information authentication process, and the server immediately receives the first user information, and searches for terminal devices within a preset range accordingly. It should be noted that the terminal device periodically or uninterruptedly reports its own location information to the server, so the server actually stores the location information of each terminal device. At the same time, the location information of the trusted device is also stored in the server. Based on the location information of the trusted device, and according to a preset range set in advance, terminal devices within the preset range are selected. Specifically, the location information of the trusted device can be collected by a satellite positioning device, a Bluetooth positioning device or other positioning devices. Similarly, the location information of the terminal device can also be collected by a satellite positioning device, a Bluetooth positioning device or other positioning devices. The preset range, for example, takes the trusted device as a reference point, and selects a grid area formed by a preset number of grids based on the reference point. For example, the preset number of grids is 8, so to search for terminal devices within the preset range is, according to the location information of trusted devices, all areas with 8 grid numbers of the upper, lower, left, and right of the location information are included as grid areas. The location information of the terminal device determines that the terminal device located in the grid area is the device to be authenticated.

404: Determine the recorded authentication level of the terminal device within the preset range.

The purpose of this application is to authenticate a terminal device whose data authentication trust level is lower than the trust level of the trusted device, so as to upgrade and update the trust level of the terminal device in the future. In this embodiment, in order to determine the device to be authenticated, a terminal device that is within a preset range and whose authentication level also meets the conditions is selected for subsequent matching.

405: Query the user face feature corresponding to the terminal device whose authentication level meets the preset level.

In this application, the fact that the authentication level satisfies the preset level actually means that a terminal device with an authentication level lower than a trusted device is selected. Since the authentication level of the terminal device is low, the corresponding trusted level is lower than level 4, which is usually untrustworthy. Further authentication is required to make the end device's data trusted. Therefore, the terminal device whose authentication level is lower than the level of the trusted device is screened to perform the next face comparison and matching.

406: Perform feature extraction on the face image in the ID card information to obtain machine-readable face features.

407: Compare the machine-readable face feature with the user face feature stored correspondingly in each terminal device, and determine the terminal device that satisfies the comparison result as the device to be authenticated.

The device to be authenticated stores a second check code, and the second check code is calculated and generated by the device to be authenticated according to the pre-stored second user information, wherein the first user obtained by the trusted device is collected. The trust level of the information is higher than the trust level of the second user information stored by the device to be authenticated.

408: Determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored trust level of the device to be authenticated , complete the authentication of user identity information.

FIG. 5 shows a schematic structural diagram of a user identity information authentication system provided by an embodiment of the present application. As shown in FIG. 5 , a user identity information authentication system provided by an embodiment of the present application includes a server 501 , a device to be authenticated 502 and Trusted device 503, specifically:

The trusted device 503 is used to send the first user information to the server, where the first user information is collected by the trusted device; in this embodiment, the first user information may be ID card information, the ID card information Obtained by the trusted device reading the user's ID card. The second user information may be pre-stored in the device to be authenticated and entered by the user through the device to be authenticated, including the user's facial features, name and ID number.

The server 501 is configured to receive the first user information, generate a first verification code based on the first user information, and determine a device to be authenticated that matches the first user information, wherein The trust level of the first user information collected by the trust device is higher than the trust level of the second user information stored by the device to be authenticated; and

Determine the stored third verification code corresponding to the device to be authenticated, if the first verification code and the third verification code are the same, modify the stored trust level of the device to be authenticated, and sending the first verification code and the modified authentication level to the device to be authenticated;

The device to be authenticated 502 is configured to generate a second check code based on the stored second user information, and receive the first check code sent by the server, if the first check code and the second check code If the verification codes are consistent, the stored authentication level is updated to the modified authentication level.

Please continue to refer to FIG. 5, this embodiment shows another user identity information authentication system, including a server 501, a device to be authenticated 502, and a trusted device 503, wherein:

The trusted device 503 is used to send the first user information to the server, where the first user information is collected by the trusted device; the first user information includes ID card information.

The server 502 is configured to acquire the location information of the trusted device, and determine the terminal device within the preset range of the location information; query the stored facial features of the user corresponding to the terminal device; The face features are compared with the user face features stored corresponding to each terminal device, and the terminal device that satisfies the comparison result is determined as the device to be authenticated.

The to-be-authenticated device 501 is configured to generate a second check code based on the stored second user information, and receive the first check code sent by the server, if the first check code and the second check code If the verification codes are consistent, the stored authentication level is updated to the modified authentication level.

Preferably, the above-mentioned trusted device is an ID card reading device, and the ID card reading device can scan the ID card to identify ID card information. Therefore, in the basic application embodiment, the first user information includes ID card information.

In this embodiment, the device to be authenticated is determined by combining the screening of the terminal device based on the location information and comparing the name and the ID number. The trusted device is internally provided with a geographic information collection device such as a satellite positioning device, a Bluetooth positioning device, or other positioning devices, to collect the location information of the trusted device and upload it to the server for storage. Correspondingly, the terminal device also has a positioning device to collect the location information of the terminal device, and upload the collected location information to the server. Therefore, when the preset range considered to be set is set, the terminal devices that meet the preset range can be screened out according to the location information of the trusted device and the location information of each terminal device.

As a supplement to the acquisition of the location information in this embodiment, the displacement of the terminal device can also be collected through an acceleration sensor, a direction sensor, etc., and then the current location information of the terminal device can be obtained, which is suitable for places with no signal or poor signal, such as a basement, and geographic locations such as satellites. The location information of the terminal device can still be acquired even when the information acquisition device fails.

When a terminal device that meets the preset range is selected, it means that other terminal devices outside the preset range are screened, which reduces the workload of subsequent processes and narrows the range. In this step, the name and ID number corresponding to the terminal device are queried. The name and ID number may be included in the second user information, or may be for each terminal device previously entered by the user and corresponding to the terminal device. Further, a relationship table may be formed, and the relationship table records each terminal device and the name and ID number corresponding to each terminal device respectively. Therefore, when the name and ID number of the terminal device need to be queried, the required name and ID number can be obtained by traversing the relationship table.

In this step, the server parses and identifies the ID card information from the trusted device, and can obtain the name and ID number in the ID card information. Specifically, when the trusted device reads the ID card, it obtains the ID card information, and the embodiment of the ID card information can be in the form of a picture, which is equivalent to a scanned copy of the ID card, or it can be in the form of a list, that is, by reading the ID card You can directly obtain the name, ID number, and face features of the user, and display it in the form of a list, or in the form of text and pictures, and so on. The name included in the ID card information of the first user information is compared with the name stored in the terminal device, and the ID card number of the ID card information is compared with the ID card number stored in the terminal device.

In this step, the step of specifically determining the device to be authenticated that matches the first user information may be to first select a terminal device within a preset range based on a trusted device, and then identify the identity card information of the first user information to obtain The stored name and ID number are compared with the stored name and ID number.

In this embodiment, the second user information includes the user's face feature corresponding to the device to be authenticated, the server stores the trust level of each terminal device, and also stores the availability of the trusted device. trust level, wherein the trust level of the trusted device in this embodiment is legal trust, that is, the trust level with the highest level.

In the embodiment of the present application, the comparison between the machine-readable facial feature and the user's facial feature corresponding to the device to be authenticated is actually the similarity between the computer-readable facial feature and the user's facial feature of the device to be authenticated.

The comparison result satisfies the preset condition, that is, the similarity between the machine-readable face feature and the user face feature of the device to be authenticated reaches a preset threshold, indicating that the identity authentication is successful at this time, and the credibility of the device to be authenticated is updated. grade. The usual practice is to upgrade the trust level of the terminal device to be consistent with the trusted device, that is, legal trust.

As shown in FIG. 6 , an embodiment of the present application provides an apparatus for authenticating user identity information, including: a user information receiving module 601 , a verification code generating module 602 and an authentication device verification module 603 . Specifically, the user information receiving module 601 is configured to receive first user information sent by a trusted device, and the first user information is collected by the trusted device; the check code generation module 602 is configured to generate a check code based on the first user information to generate a first check code, and determine the device to be authenticated that matches the first user information, wherein the device to be authenticated pre-stores second user information, and the first user obtained through the trusted device The credibility level of the information is higher than the credibility level of the second user information stored by the device to be authenticated; the authentication device verification module 603 is used to determine the stored third verification code corresponding to the device to be authenticated. If the first check code is the same as the third check code, the stored trust level of the device to be authenticated is modified to complete the authentication of the user identity information.

In this embodiment, the trusted device includes an ID card reading device, a trusted ID reader, and a passport reader, and the first user information includes ID card information, citizen authentication, citizen card, qualification certificate, driver's license, The passport calculates the hash value of the name and the ID card number in the ID card information through a hash algorithm to generate the first check code. Correspondingly, the hash value of the name and the ID card number in the ID card information can also be calculated by a hash algorithm to generate the first check code.

Determining the device to be authenticated that matches the first user information in the verification code generation module 602 includes: acquiring the location information of the trusted device, determining the terminal device within the preset range of the location information; querying the stored the user's face feature corresponding to the terminal device; the feature extraction is performed on the face image in the ID card information to obtain the machine-readable face feature; the machine-readable face feature is corresponding to the user's face stored in each terminal device The features are compared, and the terminal device that satisfies the comparison result is determined as the device to be authenticated.

Further, before querying the stored facial features of the user corresponding to the terminal device, the method further includes: determining the recorded authentication level of the terminal device within the preset range. Correspondingly, the querying the stored user face features corresponding to the terminal device includes: querying the user face features corresponding to the terminal devices whose authentication level meets a preset level.

As a preferred implementation of this embodiment, the server stores the trust level of each terminal device, the receiving a matching result sent by the device to be authenticated, and completing identity authentication based on the matching result, including: The matching result sent by the device to be authenticated is received, and if the matching is successful, the identity authentication is successful, and the trust level is updated.

As shown in FIG. 7 , the embodiment of the present application further provides another user identity information authentication device. The user identity information authentication device provided by this embodiment adds a verification code transmission based on the user identity information authentication device shown in FIG. 6 . Module 704 , that is, the user identity information authentication device in the embodiment of the present application includes: a user information receiving module 701 , a verification code generating module 702 , an authentication device verification module 703 and a verification code sending module 704 .

Specifically, the verification code sending module 704 is configured to send the first verification code to the device to be authenticated, for the device to be authenticated to perform the first verification code and the second verification code If the match is successful, the device to be authenticated modifies the authentication level and notifies the user, wherein the second check code is generated according to the second user information stored by the device to be authenticated

The user information receiving module 701 is used to receive the first user information sent by the trusted device, and the first user information is collected by the trusted device; the authentication device determination module 702 is used to determine and the first user information The matching device to be authenticated obtains the stored second user information corresponding to the device to be authenticated, wherein the credibility level of the first user information collected through the trusted device is higher than the stored second user information The identity authentication completion module 703 is configured to generate a matching result according to the first user information and the second user information, and complete the identity authentication based on the matching result.

In this embodiment, the first user information includes ID card information, citizen authentication, citizen card, qualification certificate, driver's license, and passport. The authentication device includes: acquiring the location information of the trusted device, and determining the terminal device within the preset range of the location information; querying the stored name and ID number corresponding to the terminal device; The identified name and ID number are compared with the stored name and ID number; the terminal device with the same comparison result is determined as the device to be authenticated.

Further optionally, the second user information includes a user face feature corresponding to the device to be authenticated, and the server stores the trust level of each terminal device. In the identity authentication completion module 803, the generating a matching result according to the first user information and the second user information, and completing the identity authentication based on the matching result, includes: performing an operation on the face image in the ID card information. The feature extraction obtains the machine-readable face feature; compares the machine-readable face feature with the user face feature corresponding to the device to be authenticated; if the comparison result satisfies the preset conditions, the identity authentication is successful, and the the reliability level.

As shown in FIG. 8, an embodiment of the present application further provides a user identity information authentication device, including: a memory 801 and one or more processors 802; the memory 801 is used to store one or more programs; One or more programs are executed by the one or more processors 802 so that the one or more processors implement the user identity information authentication method as described in this application.

Embodiments of the present application further provide a storage medium containing computer-executable instructions, where the computer-executable instructions are used to execute the user identity information authentication method provided by the above embodiments when executed by a computer processor, the user identity information authentication method The method includes: receiving first user information sent by a trusted device, where the first user information is collected by the trusted device; generating a first check code based on the first user information, and determining the same value as the first user information. A device to be authenticated that matches user information, wherein the device to be authenticated has second user information pre-stored, and the credibility level of the first user information collected by the trusted device is higher than the first user information stored by the device to be authenticated. 2. The credibility level of the user information; determine the stored third check code corresponding to the device to be authenticated, and if the first check code and the third check code are the same, modify the stored Authenticate the trust level of the device and complete the authentication of user identity information.

storage medium - any of various types of memory devices or storage devices. The term "storage medium" is intended to include: installation media, such as CD-ROMs, floppy disks, or tape devices; computer system memory or random access memory, such as DRAM, DDR RAM, SRAM, EDO RAM, Rambus RAM, etc. ; non-volatile memory, such as flash memory, magnetic media (eg hard disk or optical storage); registers or other similar types of memory elements, etc. The storage medium may also include other types of memory or combinations thereof. In addition, the storage medium may be located in the first computer system in which the program is executed, or may be located in a second, different computer system connected to the first computer system through a network such as the Internet. The second computer system may provide program instructions to the first computer for execution. The term "storage medium" may include two or more storage media that may reside in different locations (eg, in different computer systems connected by a network). The storage medium may store program instructions (eg, embodied as a computer program) executable by one or more processors.

Of course, a storage medium containing computer-executable instructions provided by the embodiments of the present application is not limited to the user identity information authentication method described above, and the computer-executable instructions can also execute the user identity information provided by any embodiment of the present application. Related operations in the information authentication method.

The user identity information authentication device, device and storage medium provided in the above embodiments can perform the user identity information authentication method provided by any embodiment of this application. For technical details not described in detail in the above embodiments, please refer to any implementation of this application. The user identity information authentication method provided by the example.

The above are only the preferred embodiments of the present application and the applied technical principles. The present application is not limited to the specific embodiments described herein, and various obvious changes, readjustments and substitutions that can be made by those skilled in the art will not depart from the protection scope of the present application. Therefore, although the present application has been described in detail through the above embodiments, the present application is not limited to the above embodiments, and can also include more other equivalent embodiments without departing from the concept of the present application. The scope is determined by the scope of the claims.

Claims

A method for authenticating user identity information, comprising:

receiving first user information sent by a trusted device, where the first user information is collected by the trusted device;

A first verification code is generated based on the first user information, and a device to be authenticated that matches the first user information is determined, wherein the second user information is pre-stored in the device to be authenticated, and the trusted device The credibility level of the collected first user information is higher than the credibility level of the second user information stored in the device to be authenticated;

Determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored trust level of the device to be authenticated, and complete Authentication of user identity information.
The user identity information authentication method according to claim 1, wherein after modifying the stored trust level of the device to be authenticated, the method further comprises:

Send the first verification code to the device to be authenticated, for the device to be authenticated to match the first verification code and the second verification code, if the matching is successful, the device to be authenticated The device modifies the authentication level and notifies the user, wherein the second verification code is generated according to the second user information stored in the device to be authenticated.
The user identity information authentication method according to claim 2, wherein the trusted device includes an ID card reading device, a trusted ID reader, and a passport reader, and the first user information includes ID card information, citizen Certification, Citizenship Card, Qualification Certificate, Driver's License, Passport.
The user identity information authentication method according to claim 3, wherein the generating a first check code based on the first user information comprises:

The first check code is generated by calculating the hash value of the name and the ID card number in the ID card information through a hash algorithm.
The user identity information authentication method according to claim 3, wherein the determining the device to be authenticated that matches the first user information comprises:

Obtain the location information of the trusted device, and determine the terminal device within the preset range of the location information;

query the stored face features of the user corresponding to the terminal device;

Perform feature extraction on the face image in the ID card information to obtain machine-readable face features;

The machine-readable face feature is compared with the user face feature stored correspondingly in each terminal device, and the terminal device that satisfies the comparison result is determined as the device to be authenticated.
The method for authenticating user identity information according to claim 5, wherein before querying the stored facial features of the user corresponding to the terminal device, the method further comprises:

determining the authentication level of the recorded terminal equipment within the preset range;

Correspondingly, the query and storage of the user face features corresponding to the terminal device include:

Query the face features of the user corresponding to the terminal device whose authentication level meets the preset level.
A method for authenticating user identity information, comprising:

receiving a first check code sent by a trusted device, where the first check code is generated by the trusted device based on the collected first user information;

Determine the device to be authenticated that matches the first check code, wherein the device to be authenticated is pre-stored with second user information, and the credibility level of the first user information collected by the trusted device is higher than all Describe the trust level of the second user information stored by the device to be authenticated;

Determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored trust level of the device to be authenticated, and complete Authentication of user identity information.
A user identity information authentication system, comprising a server, a device to be authenticated and a trusted device, characterized in that the trusted device is used to send first user information to the server, and the first user information passes through the trusted device acquisition; a server, configured to receive the first user information, generate a first check code based on the first user information, and determine the device to be authenticated that matches the first user information, wherein through the The trust level of the first user information collected by the trust device is higher than the trust level of the second user information stored by the device to be authenticated; and

Determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored trust level of the device to be authenticated, and sending the first verification code and the modified authentication level to the device to be authenticated;

The device to be authenticated is configured to generate a second check code based on the stored second user information, and receive the first check code sent by the server, if the first check code and the second check code If the codes are consistent, the stored authentication level is updated to the modified authentication level.
The user identity information authentication system according to claim 8, wherein the first user information includes ID card information, and the server is used for:

Obtain the location information of the trusted device, and determine the terminal device within the preset range of the location information;

query the stored face features of the user corresponding to the terminal device;

The machine-readable face feature is compared with the user face feature stored correspondingly in each terminal device, and the terminal device that satisfies the comparison result is determined as the device to be authenticated.
The user identity information authentication system according to claim 9, wherein the server is further used for:

Determine the recorded authentication level of the terminal device within the preset range; query the user face feature corresponding to the terminal device whose authentication level meets the preset level.
A user identity information authentication system, comprising a server, a device to be authenticated and a trusted device, characterized in that:

The trusted device is used to send the first check code to the server, where the first check code is calculated by the trusted device based on the collected first user information; the server is used to receive the first check code code to determine the device to be authenticated that matches the first check code, wherein the trust level of the first user information collected by the trusted device is higher than the trust level of the second user information stored by the device to be authenticated confidence level; and

Determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored trust level of the device to be authenticated, and sending the first verification code and the modified authentication level to the device to be authenticated;

The device to be authenticated is configured to generate a second check code based on the stored second user information, and receive the first check code sent by the server, if the first check code and the second check code If the codes are consistent, the stored authentication level is updated to the modified authentication level.
A device for authenticating user identity information, comprising:

User information receiving module: used to receive first user information sent by a trusted device, where the first user information is collected by the trusted device;

Verification code generation module: used to generate a first verification code based on the first user information, and determine a device to be authenticated that matches the first user information, wherein the device to be authenticated is pre-stored with a second user information, the credibility level of the first user information collected by the trusted device is higher than the credibility level of the second user information stored by the device to be authenticated;

Authentication device verification module: used to determine the stored third verification code corresponding to the device to be authenticated, and if the first verification code and the third verification code are the same, modify the stored Authenticate the trust level of the device and complete the authentication of user identity information.
The device for authenticating user identity information according to claim 12, further comprising:

A verification code sending module, configured to send the first verification code to the device to be authenticated, for the device to be authenticated to match the first verification code and the second verification code, if If the match is successful, the device to be authenticated modifies the authentication level and notifies the user, wherein the second check code is generated according to the second user information stored by the device to be authenticated.
A user identity information authentication device, comprising: a memory and one or more processors;

the memory for storing one or more programs;

When the one or more programs are executed by the one or more processors, the one or more processors implement the user identity information authentication method according to any one of claims 1-7.
A storage medium containing computer-executable instructions, wherein the computer-executable instructions are used to execute the user identity information authentication method according to any one of claims 1-7 when executed by a computer processor.