WO2023016289A1 - 远程身份认证方法及相关设备 - Google Patents

远程身份认证方法及相关设备 Download PDF

Info

Publication number
WO2023016289A1
WO2023016289A1 PCT/CN2022/109435 CN2022109435W WO2023016289A1 WO 2023016289 A1 WO2023016289 A1 WO 2023016289A1 CN 2022109435 W CN2022109435 W CN 2022109435W WO 2023016289 A1 WO2023016289 A1 WO 2023016289A1
Authority
WO
WIPO (PCT)
Prior art keywords
authentication
electronic device
remote
identity authentication
interface
Prior art date
Application number
PCT/CN2022/109435
Other languages
English (en)
French (fr)
Inventor
金务文
韩锋
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Publication of WO2023016289A1 publication Critical patent/WO2023016289A1/zh

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90—Details of database functions independent of the retrieved data types
    • G06F16/95—Retrieval from the web
    • G06F16/955—Retrieval from the web using information identifiers, e.g. uniform resource locators [URL]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/32—User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints

Definitions

  • the present application relates to the technical field of terminals, in particular to a remote identity authentication method and related equipment.
  • smart terminals for identity authentication
  • identity authentication using a smart terminal is generally aimed at the current device owner himself, that is, the authentication object is the current device owner himself. If the authentication is not the owner of the current device, the current device cannot be used for identity authentication.
  • a smart courier cabinet helps family members to collect express delivery, the recipient's mobile phone is required to scan the QR code for identity authentication. If the mobile phone currently held is not the recipient's mobile phone, the QR code cannot be scanned for identity verification certified.
  • the embodiment of the present application discloses a remote identity authentication method and related equipment, which can perform identity authentication across regions, devices, and authentication subjects, and realize convenient and quick remote identity authentication.
  • the first aspect of the present application discloses a remote identity authentication method applied to a first electronic device, the method comprising: when initiating identity authentication, displaying an authentication device selection interface, the authentication device selection interface including a second electronic device; If the second electronic device is selected from the authentication device selection interface to perform remote authentication, establish a remote authentication channel with the second electronic device; receive the second authentication sent by the second electronic device through the remote authentication channel information, so as to authenticate the user of the second electronic device.
  • the remote identity authentication method provided by the application can conveniently and quickly perform remote identity authentication on the holder of the trusted device.
  • the remote identity authentication method provided by this application breaks the regional and device restrictions of traditional identity authentication methods, and can perform identity authentication across regions, devices, and authentication subjects, and realizes convenient and fast remote identity authentication.
  • the establishing a remote authentication channel with the second electronic device includes: sending an authentication request to the second electronic device; receiving an authentication response returned by the second electronic device; To an authentication response of accepting authentication, establish a remote authentication channel with the second electronic device.
  • the method further includes: displaying an interface for waiting to establish an authentication channel.
  • the method further includes: displaying an authentication failure interface if an authentication response denying authentication is received.
  • the second electronic device includes a second authentication information collector, and the second authentication information is collected by the second electronic device using the second authentication information collector.
  • the method further includes: displaying a first remote authentication interface.
  • the second authentication information includes a real-time video
  • the method further includes: if it is detected that the received real-time video includes multiple human faces, displaying the setting view in the first remote authentication interface Box prompt information.
  • the establishment of the remote authentication channel with the second electronic device includes: sending remote authentication confirmation information to the second electronic device; identifying the user of the second electronic device for the A response action to the remote authentication confirmation message; if it is recognized that the user of the second electronic device accepts the authentication response action, establish a remote authentication channel with the second electronic device.
  • the method further includes: establishing a trust relationship between the first electronic device and the second electronic device.
  • the establishment of the trust relationship between the first electronic device and the second electronic device includes: adding the second electronic device as a distributed device of the first electronic device; Or establish social circles for the first electronic device and the second electronic device.
  • the initiating identity authentication includes: initiating identity authentication by scanning a two-dimensional code on the self-service terminal; or initiating identity authentication through near field communication.
  • the method further includes: if local authentication is performed, acquiring first authentication information of the first electronic device, so as to authenticate a user of the first electronic device.
  • the first electronic device includes a first authentication information collector
  • the obtaining the first authentication information of the first electronic device includes: using the first authentication information collector to collect the The first authentication information.
  • the second aspect of the present application discloses a computer-readable storage medium, including computer instructions.
  • the computer instructions When the computer instructions are run on an electronic device, the electronic device is made to execute the remote identity authentication method as described in the first aspect.
  • the third aspect of the present application discloses an electronic device, the electronic device includes a processor and a memory, the memory is used to store instructions, and the processor is used to call the instructions in the memory, so that the electronic device performs the following steps: The remote identity authentication method described in the first aspect.
  • the fourth aspect of the present application discloses a chip system, which is applied to electronic equipment; the chip system includes an interface circuit and a processor; the interface circuit and the processor are interconnected through lines; the interface circuit is used to receive signals from the memory of the electronic device, And send a signal to the processor, the signal includes a computer instruction stored in the memory; when the processor executes the computer instruction, the chip system executes the remote identity authentication method as described in the first aspect.
  • the fifth aspect of the present application discloses a computer program product, which causes the computer to execute the remote identity authentication method as described in the first aspect when the computer program product runs on the computer.
  • the sixth aspect of the present application discloses an apparatus, which has the function of implementing the behavior of the electronic device in the method provided by the first aspect.
  • the functions may be implemented by hardware, or may be implemented by executing corresponding software through hardware.
  • Hardware or software includes one or more modules corresponding to the above functions.
  • FIG. 1 is a schematic diagram of an application scenario of a remote identity authentication method provided by an embodiment of the present application.
  • Fig. 2 is a flow chart of the remote identity authentication method provided by the embodiment of the present application.
  • Fig. 3 is a schematic diagram of an authentication device selection interface displayed by the first electronic device in the embodiment of the present application.
  • Fig. 4 is a schematic diagram of an interface for waiting to establish an authentication channel displayed by the first electronic device in the embodiment of the present application.
  • Fig. 5 is a schematic diagram of a remote authentication confirmation interface displayed by the second electronic device in the embodiment of the present application.
  • Fig. 6 is a schematic diagram of an authentication failure interface displayed by the first electronic device in the embodiment of the present application.
  • Fig. 7 is a schematic diagram of a first remote authentication interface displayed by the first electronic device in the embodiment of the present application.
  • Fig. 8 is a schematic diagram of a second remote authentication interface displayed by the second electronic device in the embodiment of the present application.
  • FIG. 9 is a schematic diagram of a first remote authentication interface displayed by the first electronic device when multiple faces are detected in the received real-time video in the embodiment of the present application.
  • Fig. 10 is a flowchart of a remote identity authentication method provided by another embodiment of the present application.
  • FIG. 11 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.
  • FIG. 1 is a schematic diagram of an application scenario of a remote identity authentication method provided by an embodiment of the present application.
  • the remote identity authentication method provided by the embodiment of the present application is applied to a first electronic device (which may be called a master device) 10 and a second electronic device (which may be called a slave device) 11 .
  • the first electronic device 10 and the second electronic device 11 may be smart terminals.
  • the first electronic device 10 is an operable device (such as a mobile phone, a tablet, a smart watch, etc.), and the first electronic device 10 includes a display screen.
  • the second electronic device 11 may be an operable device (such as a mobile phone, a large screen, etc.), or an inoperable device (such as a smart camera).
  • the second electronic device 11 may or may not include a display screen.
  • both the first electronic device 10 and the second electronic device 11 are mobile phones.
  • the first electronic device 10 is a mobile phone
  • the second electronic device 11 is a smart camera.
  • the first electronic device 10 includes a first authentication information collector 100 .
  • the first electronic device 10 may include multiple first authentication information collectors 100 to support multiple authentication methods.
  • the first electronic device 10 includes a first camera, a first fingerprint collector and a first iris collector, and the authentication methods supported by the first electronic device 10 include code scanning authentication, face authentication, fingerprint authentication and iris authentication.
  • the second electronic device 11 includes a second authentication information collector 110 .
  • the second electronic device 11 may include multiple second authentication information collectors 110 to support multiple authentication methods.
  • the second electronic device 11 includes a second camera, a second fingerprint collector and a second iris collector, and the authentication methods supported by the second electronic device 11 include code scanning authentication, face authentication, fingerprint authentication and iris authentication.
  • the first electronic device 10 can be used to authenticate the user of the second electronic device 11 .
  • the non-recipient's mobile phone can be used to authenticate the recipient (that is, the family member).
  • the identity authentication of the patients ie family members
  • the first electronic device 10 may be used to perform identity authentication on the second electronic device 11 in multiple authentication methods.
  • the authentication methods supported by the second electronic device 11 include code scanning authentication, face authentication, fingerprint authentication, and iris authentication
  • the first electronic device 10 can be used to perform code scanning authentication, face authentication, and fingerprint authentication on the second electronic device 11. and iris authentication.
  • the remote identity authentication method provided by the embodiment of the present application breaks the region and device restrictions of traditional authentication methods, and can perform identity authentication across regions, devices, and authentication subjects, and realizes convenient and fast remote identity authentication.
  • Fig. 2 is a flow chart of the remote identity authentication method provided by the embodiment of the present application.
  • the second electronic device is an operable device, and the second electronic device includes a display screen.
  • the second electronic device is a mobile phone or a large screen (ie, a smart screen).
  • a first electronic device establishes a trust relationship with a second electronic device.
  • a long-term trust relationship can be established between the first electronic device and the second electronic device.
  • the second electronic device may be added as a distributed device of the first electronic device, so as to establish a long-term trust relationship between the first electronic device and the second electronic device.
  • a social circle (such as a family circle) may be established for the first electronic device and the second electronic device, so as to establish a long-term trust relationship between the first electronic device and the second electronic device. If a long-term trust relationship is established between the first electronic device and the second electronic device, after a trust relationship (that is, a long-term trust relationship) is established, multiple remote authentications can be performed on the second electronic device.
  • a temporary trust relationship may be established between the first electronic device and the second electronic device.
  • a temporary trust relationship can be established between the first electronic device and the second electronic device through telephone, network and other means. If a temporary trust relationship is established between the first electronic device and the second electronic device, each time remote authentication is performed on the second electronic device, a trust relationship (ie, a temporary trust relationship) needs to be established once.
  • a trust relationship between the first electronic device and the second electronic device may be established by the first electronic device.
  • the second electronic device may establish a trust relationship with the first electronic device and the second electronic device.
  • the first electronic device may send a trust relationship establishment request to the second electronic device, and after the second electronic device receives the trust relationship establishment request, if it agrees If the information relationship is established, an agreement response is returned. If the first electronic device receives the consent response returned by the second electronic device, a trust relationship between the first electronic device and the second electronic device is established.
  • a trust relationship is established between the first electronic device and the second electronic device, in order to improve the security of remote authentication.
  • no trust relationship may be established between the first electronic device and the second electronic device in advance.
  • the first electronic device displays an authentication device selection interface.
  • the first electronic device scans a QR code (such as a pickup QR code or a registration QR code) on a self-service terminal (such as a smart express cabinet or a self-service registration machine) to initiate identity authentication.
  • a QR code such as a pickup QR code or a registration QR code
  • a self-service terminal such as a smart express cabinet or a self-service registration machine
  • the first electronic device may initiate identity authentication in other ways.
  • the first electronic device may initiate identity authentication (for example, pressing a registration button on the application interface) through a preset application program on the first electronic device (for example, an application program for making an appointment for a doctor).
  • the first electronic device initiates identity authentication through Near Field Communication (NFC) (for example, an access control system, a visitor initiates identity authentication through NFC, and pulls up the remote identification of the owner).
  • NFC Near Field Communication
  • the authentication device selection interface includes a local authentication option and a remote authentication option, which are used for the user to select a local or a trusted device for identity authentication.
  • the authentication device selection interface includes an authentication device list, and the authentication device list includes local devices (ie local authentication options) and trusted devices (ie remote authentication options).
  • the local machine is used for local authentication
  • the trusted device is used for remote authentication. If the user selects the local device, it means that local authentication is performed, and if the user selects a trusted device, it means that remote authentication is performed.
  • Fig. 3 is a schematic diagram of an authentication device selection interface displayed by the first electronic device in the embodiment of the present application.
  • the authentication device selection interface includes a text prompt of "select authentication device”, and the authentication device selection interface also includes authentication devices such as "MateXXX (this machine)", “living room camera”, “dad (family circle)”, etc.
  • “MateXXX (local machine)” is the local authentication option
  • "living room camera” and “Dad (family circle)” are remote authentication options.
  • the authentication device selection interface may include two options of "local authentication” and "remote authentication”. If the user selects the "remote authentication” option, a list of trusted devices may pop up, and the user may select a remote device (such as a second electronic device) from the list of trusted devices to perform remote authentication.
  • the first electronic device uses the first authentication information collector to collect the first authentication information, so as to verify the user of the first electronic device. Authentication.
  • the first authentication information is authentication information of a user of the first electronic device.
  • the first electronic device uses the first camera to collect the face image of the user of the first electronic device or uses the fingerprint collector of the first electronic device to collect the fingerprint of the user of the first electronic device.
  • the authentication information collector used by the first electronic device corresponds to the identity authentication initiated by the first electronic device. For example, if the first electronic device initiates face authentication, the first electronic device uses the first camera to capture the face image of the user of the first electronic device; if the first electronic device initiates fingerprint authentication, the first electronic device uses the first The fingerprint collector collects the fingerprint of the user of the first electronic device.
  • the first electronic device may send the first authentication information to the self-service terminal, and the self-service terminal performs identity authentication on the user of the first electronic device according to the first authentication information.
  • the self-service terminal may send the first authentication information to a corresponding authentication server for identity authentication.
  • the first electronic device may obtain pre-stored first authentication information to authenticate the user of the first electronic device.
  • the first electronic device sends an authentication request to the second electronic device.
  • the authentication request may include an authentication method field, which is used to indicate the authentication method adopted by the remote authentication.
  • the authentication method field corresponding to scan code authentication is 0, the authentication method field corresponding to face authentication is 1, the authentication method field corresponding to fingerprint authentication is 2, and the authentication method field corresponding to iris authentication is 3.
  • face authentication is required, the first electronic device sends an authentication request with an authentication method field of 1 to the second electronic device.
  • fingerprint authentication is required, the first electronic device sends an authentication request with an authentication method field of 2 to the second electronic device.
  • the first electronic device can send the scanned QR code together with the authentication request to the second electronic device, so that the second electronic device can pass the two-dimensional code. QR code for identity authentication.
  • the first electronic device displays an interface for waiting to establish an authentication channel.
  • Fig. 4 is a schematic diagram of an interface for waiting to establish an authentication channel displayed by the first electronic device in the embodiment of the present application.
  • the interface of waiting to establish an authentication channel includes the text information of "waiting for XX to establish remote authentication".
  • the waiting interface for establishing the authentication channel may further include a "cancel" button for canceling the establishment of the remote authentication channel.
  • the second electronic device After receiving the authentication request, the second electronic device returns an authentication response of accepting authentication or rejecting authentication to the first electronic device according to a user operation.
  • the second electronic device may return an authentication response accepting authentication to the first electronic device, or return an authentication response rejecting authentication to the first electronic device.
  • the second electronic device after receiving the authentication request, displays a remote authentication confirmation interface on the second electronic device for confirming whether to agree to perform remote authentication.
  • Fig. 5 is a schematic diagram of a remote authentication confirmation interface displayed by the second electronic device in the embodiment of the present application.
  • the remote authentication confirmation interface may include the text message "XXX is inviting you to perform remote authentication", and the remote authentication confirmation interface may also include an "accept” button and a “reject” button.
  • the "Accept” button is used to accept/agree to perform remote authentication
  • the "Reject” button is used to reject/disagree to perform remote authentication.
  • the second electronic device may return an authentication response of accepting authentication or rejecting authentication to the first electronic device according to a user operation on the remote authentication confirmation interface. If the user of the second electronic device selects/clicks the "Accept” button, the second electronic device returns an authentication response of accepting the authentication to the first electronic device. If the user of the second electronic device selects/clicks the "deny” button, the second electronic device returns an authentication response denying authentication to the first electronic device.
  • the second electronic device may return an authentication response of accepting authentication or rejecting authentication to the first electronic device according to other user operations. For example, after the remote authentication confirmation interface is displayed on the second electronic device, if the user presses the power button of the second electronic device to turn off the screen of the second electronic device, the second electronic device returns an authentication response denying authentication to the first electronic device.
  • the first electronic device fails to establish a remote authentication channel with the second electronic device.
  • the first electronic device displays an authentication failure interface.
  • the authentication failure interface may include authentication failure prompt information for prompting remote authentication failure.
  • the prompt message of authentication failure can also be used to prompt to reselect the device for authentication.
  • Fig. 6 is a schematic diagram of an authentication failure interface displayed by the first electronic device in the embodiment of the present application.
  • the authentication failure interface includes an authentication failure prompt message of "remote authentication failed, please re-select the device for authentication”.
  • the authentication failure interface may further include a "OK" button. If the user selects the "OK” button, the authentication device selection interface will be displayed again.
  • the first electronic device establishes a remote authentication channel with the second electronic device.
  • the first electronic device establishes a video channel with the second electronic device.
  • the second electronic device uses the second authentication information collector to collect second authentication information, and sends the second authentication information to the first electronic device, so as to authenticate the user of the second electronic device.
  • the second authentication information is authentication information of a user of the second electronic device.
  • the second electronic device uses the second camera to capture the real-time image/video of the user of the second electronic device, and sends the real-time image/video of the user of the second electronic device to the first electronic device, so that the user of the second electronic device Authenticate.
  • Fig. 7 is a schematic diagram of a first remote authentication interface displayed by the first electronic device in the embodiment of the present application.
  • the first remote authentication interface includes text information of "remote authentication in progress", and the first remote authentication interface may further include an "End” button for ending the remote authentication. If the user presses the "End” button on the first remote authentication interface, the remote authentication ends.
  • Fig. 8 is a schematic diagram of a second remote authentication interface displayed by the second electronic device in the embodiment of the present application.
  • the second remote authentication interface includes text information of "remote authentication in progress", and the second remote authentication interface may further include an "End” button for ending the remote authentication. If the user presses the "End” button on the second remote authentication interface, the remote authentication ends.
  • the first remote authentication interface is the same as the second remote authentication interface. In other embodiments of the present application, the first remote authentication interface may be different from the second remote authentication interface.
  • the second electronic device sends the real-time video to the first electronic device, and if it detects that the received real-time video includes multiple human faces, the first electronic device displays the setting view in the first remote authentication interface Box prompt information. For example, if it is detected that the received real-time video includes multiple human faces, the first electronic device sends out a prompt message of "Multiple human faces have been detected, please set a viewfinder frame". If it is detected that the received real-time video includes multiple human faces, the user can set a viewing frame on the first remote authentication interface.
  • FIG. 9 is a schematic diagram of a first remote authentication interface displayed by the first electronic device when multiple faces are detected in the received real-time video in the embodiment of the present application.
  • the first remote authentication interface may include a prompt message "Multiple faces have been detected, please set a viewfinder frame".
  • the first electronic device may send the second authentication information to the self-service terminal, and the self-service terminal performs identity authentication according to the second authentication information.
  • the self-service terminal may send the second authentication information to a corresponding authentication server for identity authentication.
  • the second authentication information may be pre-stored in the second electronic device, and the second electronic device sends the pre-stored second authentication information to the first electronic device, so that the user of the second electronic device may Authentication.
  • both the first electronic device and the second electronic device can choose to end the remote authentication.
  • the remote authentication ends.
  • the remote authentication ends.
  • the remote identity authentication method provided by the embodiment of the present application can conveniently and quickly perform remote identity authentication on the owner of the trusted device.
  • the remote identity authentication method provided by the embodiment of the present application breaks the region and device restrictions of traditional identity authentication methods, and can perform identity authentication across regions, devices, and authentication subjects, and realizes convenient and fast remote identity authentication.
  • Fig. 10 is a flow chart of the remote identity authentication method provided by the embodiment of the present application.
  • the second electronic device is an inoperable device, and the second electronic device does not include a display screen.
  • the following takes the second electronic device as a smart camera as an example for description.
  • a first electronic device establishes a trust relationship with a second electronic device.
  • the second electronic device may be added as a distributed device of the first electronic device, so as to establish a trust relationship between the first electronic device and the second electronic device.
  • a social circle (such as a family circle) may be established for the first electronic device and the second electronic device, so as to establish a trust relationship between the first electronic device and the second electronic device.
  • a trust relationship can be established between the first electronic device and the second electronic device in other ways, such as establishing trust between the first electronic device and the second electronic device through telephone, network, etc. relation.
  • a trust relationship between the first electronic device and the second electronic device may be established by the first electronic device.
  • the second electronic device may establish a trust relationship with the first electronic device and the second electronic device.
  • the first electronic device may send a trust relationship establishment request to the second electronic device, and after the second electronic device receives the trust relationship establishment request, if it agrees If the information relationship is established, an agreement response is returned. If the first electronic device receives the consent response returned by the second electronic device, a trust relationship between the first electronic device and the second electronic device is established.
  • the first electronic device displays an authentication device selection interface.
  • the first electronic device scans a QR code (such as a pickup QR code or a registration QR code) on a self-service terminal (such as a smart express cabinet or a self-service registration machine) to initiate identity authentication.
  • a QR code such as a pickup QR code or a registration QR code
  • a self-service terminal such as a smart express cabinet or a self-service registration machine
  • the first electronic device may initiate identity authentication in other ways.
  • the first electronic device may initiate identity authentication (for example, pressing a registration button on the application interface) through a preset application program on the first electronic device (for example, an application program for making an appointment for a doctor).
  • the authentication device selection interface includes a local authentication option and a remote authentication option, which are used for the user to select a local or a trusted device for identity authentication.
  • the authentication device selection interface includes an authentication device list, and the authentication device list includes local devices (ie local authentication options) and trusted devices (ie remote authentication options).
  • the local machine is used for local authentication
  • the trusted device is used for remote authentication. If the user selects the local device, it means that local authentication is performed, and if the user selects a trusted device, it means that remote authentication is performed.
  • the first electronic device uses the first authentication information collector to collect first authentication information for identity authentication.
  • the first authentication information is authentication information of a user of the first electronic device.
  • the first electronic device uses the first camera to collect the face image of the user of the first electronic device or uses the fingerprint collector of the first electronic device to collect the fingerprint of the user of the first electronic device.
  • the authentication information collector used by the first electronic device corresponds to the identity authentication initiated by the first electronic device. For example, if the first electronic device initiates face authentication, the first electronic device uses the first camera to capture the face image of the user of the first electronic device; if the first electronic device initiates fingerprint authentication, the first electronic device uses the first The fingerprint collector collects the fingerprint of the user of the first electronic device.
  • the first electronic device may send the first authentication information to the self-service terminal, and the self-service terminal performs identity authentication on the user of the first electronic device according to the first authentication information.
  • the self-service terminal may send the first authentication information to a corresponding authentication server for identity authentication.
  • the first electronic device sends remote authentication confirmation information to the second electronic device.
  • the purpose of the first electronic device sending the remote authentication confirmation information to the second electronic device is to ensure that the remote authentication is performed with the informed consent of the user of the second electronic device.
  • the second electronic device is a smart camera
  • the first electronic device can send a voice to the second electronic device to prompt the user of the second electronic device to perform related operations (such as opening mouth, blinking, nodding, etc.).
  • the first electronic device may send the voice of "XXX is inviting you to perform remote authentication, please nod if you agree" to the second electronic device.
  • the first electronic device displays an interface of waiting for an authentication channel to be established.
  • Fig. 4 is a schematic diagram of an interface for waiting to establish an authentication channel displayed by the first electronic device in the embodiment of the present application.
  • the interface of waiting to establish an authentication channel includes the text information of "waiting for XX to establish remote authentication".
  • the waiting interface for establishing the authentication channel may further include a "cancel" button for canceling the establishment of the remote authentication channel.
  • the first electronic device identifies a response action of the user of the second electronic device to the remote authentication confirmation information.
  • the second electronic device may send the image or video captured in real time to the first electronic device, and the first electronic device recognizes the response action of the user of the second electronic device based on the image or video captured in real time by the second electronic device, for example, identifying the response action as Nod or shake your head.
  • the first electronic device establishes a remote authentication channel with the second electronic device.
  • the response action of the user of the second electronic device is nodding, it is determined that the user of the second electronic device accepts authentication, and the first electronic device establishes a remote authentication channel with the second electronic device.
  • the second electronic device uses the second authentication information collector to collect second authentication information, and sends the second authentication information to the first electronic device for identity authentication.
  • the second authentication information is authentication information of a user of the second electronic device.
  • Fig. 7 is a schematic diagram of a first remote authentication interface displayed by the first electronic device in the embodiment of the present application.
  • the first remote authentication interface includes text information of "remote authentication in progress", and the first remote authentication interface may further include an "End” button for ending the remote authentication. If the user presses the "End” button on the first remote authentication interface, the remote authentication ends.
  • the second electronic device sends the real-time video to the first electronic device, and if it detects that the received real-time video includes multiple human faces, the first electronic device displays the setting view in the first remote authentication interface Box prompt information. For example, if it is detected that the received real-time video includes multiple human faces, the first electronic device sends out a prompt message of "Multiple human faces have been detected, please set a viewfinder frame". If it is detected that the received real-time video includes multiple human faces, the user can set a viewing frame on the first remote authentication interface.
  • FIG. 9 is a schematic diagram of a first remote authentication interface displayed by the first electronic device when multiple faces are detected in the received real-time video in the embodiment of the present application.
  • the first remote authentication interface may include a prompt message "Multiple faces have been detected, please set a viewfinder frame".
  • the first electronic device may send the second authentication information to the self-service terminal, and the self-service terminal performs identity authentication according to the second authentication information.
  • the self-service terminal may send the second authentication information to a corresponding authentication server for identity authentication.
  • the first electronic device closes the remote authentication channel.
  • the remote identity authentication method provided by the embodiment of the present application can conveniently and quickly perform remote identity authentication on the owner of the trusted device.
  • the remote identity authentication method provided by the embodiment of the present application breaks the region and device restrictions of traditional identity authentication methods, and can perform identity authentication across regions, devices, and authentication subjects, and realizes convenient and fast remote identity authentication.
  • the second electronic device is inoperable, the informed consent of the user of the second electronic device is ensured, and the security of identity authentication is improved.
  • FIG. 11 is a schematic structural diagram of an electronic device (a first electronic device or a second electronic device) provided by an embodiment of the present application.
  • the electronic device 110 may include: a radio frequency (Radio Frequency, RF) circuit 1101, a memory 1102, an input unit 1103, a display unit 1104, a sensor 1105, an audio circuit 1106, a Wi-Fi module 1107, a processor 1108 and Power supply 1109 and other components.
  • RF Radio Frequency
  • FIG. 11 does not constitute a limitation on the electronic device, and the electronic device may include more or fewer components than shown in the figure, or combine some components, or arrange different components.
  • the RF circuit 1101 can be used to send and receive information or receive and send signals during a call. In particular, after receiving the downlink information from the base station, it transfers it to the processor 1108 for processing; in addition, it sends uplink data to the base station.
  • the RF circuit 1101 includes, but is not limited to: an antenna, at least one amplifier, a transceiver, a coupler, a low noise amplifier (Low Noise Amplifier, LNA), a duplexer, and the like.
  • the memory 1102 can be used to store software programs and modules, and the processor 1108 executes various functional applications and data processing of the electronic device by running the software programs and modules stored in the memory 1102 .
  • the memory 1102 can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application program required by a function (such as a sound playback function, an image playback function, etc.); Data created by the use of electronic devices (such as audio data, phonebook, etc.), etc.
  • the memory 1102 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid-state storage devices.
  • the input unit 1103 can be used to receive input numbers or character information, and generate key signal input related to user settings and function control of the electronic device.
  • the input unit 1103 may include a touch panel 11031 and other input devices 11032 .
  • the touch panel 11031 also referred to as a touch screen, can collect touch operations of the user on or near it (for example, the user uses any suitable object or accessory such as a finger, a stylus, etc. on the touch panel 11031 or near the touch panel 11031 operation), and drive the corresponding connection device according to the preset program.
  • the touch panel 11031 may include two parts, a touch detection device and a touch controller.
  • the touch detection device detects the user's touch orientation, and detects the signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts it into contact coordinates, and sends it to the to the processor 1108, and receive and execute commands sent by the processor 1108.
  • the touch panel 11031 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic wave.
  • the input unit 1103 may also include other input devices 11032 .
  • other input devices 11032 may include, but are not limited to, one or more of physical keyboards, function keys (such as volume control keys, switch keys, etc.), trackballs, mice, joysticks, and the like.
  • the display unit 1104 may be used to display information input by or provided to the user and various menus of the electronic device.
  • the display unit 1104 may include a display panel 11041.
  • the display panel 11041 may be configured in the form of a liquid crystal display (Liquid Crystal Display, LCD), an organic light-emitting diode (Organic Light-Emitting Diode, OLED), or the like.
  • the touch panel 11031 can cover the display panel 11041, and when the touch panel 11031 detects a touch operation on or near it, it sends it to the processor 1108 to determine the type of the touch event, and then the processor 1108 according to the touch event Type provides a corresponding visual output on the display panel 11041.
  • the touch panel 11031 and the display panel 11041 are used as two independent components to realize the input and output functions of the electronic device, in some embodiments, the touch panel 11031 and the display panel 11041 can be integrated And realize the input and output function of electronic equipment.
  • the electronic device may also include at least one sensor 1105, such as a light sensor, a motion sensor, and other sensors.
  • the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel 11041 according to the brightness of the ambient light, and the proximity sensor may turn off the display panel 11041 and the / or backlighting.
  • the accelerometer sensor can detect the magnitude of acceleration in various directions (generally three axes), and can detect the magnitude and direction of gravity when it is stationary, and can be used to identify the posture of electronic equipment (such as horizontal and vertical screen switching, Related games, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, tap), etc.; in addition, electronic devices can also be configured with other sensors such as gyroscopes, barometers, hygrometers, thermometers, and infrared sensors. This will not be repeated here.
  • the audio circuit 1106, the speaker 11061, and the microphone 11062 can provide an audio interface between the user and the electronic device.
  • the audio circuit 1106 can transmit the electrical signal converted from the received audio data to the speaker 11061, and the speaker 11061 converts it into an audio signal for output; After being received, it is converted into audio data, and after being processed by the audio data output processor 1108, it is sent to another electronic device through the RF circuit 1101, or the audio data is output to the memory 1102 for further processing.
  • Wi-Fi is a short-distance wireless transmission technology. Electronic devices can help users send and receive emails, browse web pages, and access streaming media through the Wi-Fi module 1107, which provides users with wireless broadband Internet access.
  • FIG. 11 shows the Wi-Fi module 1107, it can be understood that it is not a necessary component of the electronic device, and can be omitted as needed without changing the essence of the invention.
  • the processor 1108 is the control center of the electronic device, and uses various interfaces and lines to connect various parts of the entire electronic device, by running or executing software programs and/or modules stored in the memory 1102, and calling data stored in the memory 1102 , to perform various functions of the electronic equipment and process data, so as to monitor the electronic equipment as a whole.
  • the processor 1108 may include one or more processing units; preferably, the processor 1108 may integrate an application processor and a modem, wherein the application processor mainly processes the operating system, user interface and application programs, etc., and the modem mainly processes Wireless communication. It can be understood that the foregoing modem processor may not be integrated into the processor 1108 .
  • the electronic device also includes a power supply 1109 (such as a battery) for supplying power to various components.
  • a power supply 1109 (such as a battery) for supplying power to various components.
  • the power supply can be logically connected to the processor 1108 through a power management system, so that functions such as charging, discharging, and power consumption management can be implemented through the power management system .
  • the electronic device may also include a camera, a Bluetooth module, etc., which will not be repeated here.
  • the electronic device described in FIG. 11 may be used to implement part or all of the processes in the method embodiments introduced in this application. For reference, relevant descriptions in the foregoing method embodiments may not be repeated here.
  • This embodiment also provides a computer storage medium, in which computer instructions are stored, and when the computer instructions are run on the electronic device, the electronic device executes the above-mentioned related method steps to realize the remote identity authentication method in the above-mentioned embodiment .
  • This embodiment also provides a computer program product, which, when running on the electronic device, causes the electronic device to execute the above related steps, so as to realize the remote identity authentication method in the above embodiment.
  • an embodiment of the present application also provides a device, which may specifically be a chip, a component or a module, and the device may include a connected processor and a memory; wherein the memory is used to store computer-executable instructions, and when the device is running, The processor can execute the computer-executable instructions stored in the memory, so that the chip executes the remote identity authentication method in the above method embodiments.
  • the electronic device, computer storage medium, computer program product or chip provided in this embodiment is all used to execute the corresponding method provided above, therefore, the beneficial effects it can achieve can refer to the corresponding method provided above The beneficial effects in the method will not be repeated here.
  • the disclosed devices and methods may be implemented in other ways.
  • the device embodiments described above are only illustrative.
  • the division of the modules or units is only a logical function division. In actual implementation, there may be other division methods.
  • multiple units or components can be combined Or it can be integrated into another device, or some features can be omitted, or not implemented.
  • the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.
  • the unit described as a separate component may or may not be physically separated, and a component displayed as a unit may be one physical unit or multiple physical units, that is, it may be located in one place, or may be distributed to multiple different places. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.
  • each functional unit in each embodiment of the present application may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit.
  • the above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.
  • the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a readable storage medium.
  • the technical solution of the embodiment of the present application is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the software product is stored in a storage medium Among them, several instructions are included to make a device (which may be a single-chip microcomputer, a chip, etc.) or a processor (processor) execute all or part of the steps of the methods described in the various embodiments of the present application.
  • the aforementioned storage media include: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), magnetic disk or optical disc and other media that can store program codes. .

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Databases & Information Systems (AREA)
  • Data Mining & Analysis (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本申请提供一种远程身份认证方法及相关设备，应用于第一电子设备，所述方法包括：在发起身份认证时，显示认证设备选择界面，认证设备选择界面包括第二电子设备；若从认证设备选择界面选择第二电子设备进行远程认证，建立与第二电子设备的远程认证通道；接收第二电子设备通过远程认证通道发送的第二认证信息，以对第二电子设备的用户进行身份认证。本申请可以跨地域、跨设备、跨认证主体进行身份认证，实现了方便快捷的远程身份认证。

Description

远程身份认证方法及相关设备
本申请要求于2021年8月13日提交中国专利局、申请号为202110931124.1、发明名称为“远程身份认证方法及相关设备”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及终端技术领域，尤其涉及一种远程身份认证方法及相关设备。
背景技术
利用智能终端进行身份认证越来越普遍。例如，在智能快递柜收取快递时，使用手机扫描取件二维码进行身份认证，手机或者笔记本启动时进行指纹或者人脸认证，手机支付(如支付宝或微信支付)时进行指纹或者人脸认证。目前，利用智能终端进行身份认证一般都是针对当前设备机主本人，即认证对象为当前设备机主本人。若要认证的不是当前设备机主本人，则无法利用当前设备进行身份认证。例如，在智能快递柜帮家人收取快递时，需要收件人的手机扫描取件二维码进行身份认证，如果当前持有的不是收件人的手机，则无法扫描取件二维码进行身份认证。
发明内容
本申请实施例公开了一种远程身份认证方法及相关设备，可以跨地域、跨设备、跨认证主体进行身份认证，实现了方便快捷的远程身份认证。
本申请第一方面公开了一种远程身份认证方法，应用于第一电子设备，所述方法包括：在发起身份认证时，显示认证设备选择界面，所述认证设备选择界面包括第二电子设备；若从所述认证设备选择界面选择所述第二电子设备进行远程认证，建立与所述第二电子设备的远程认证通道；接收所述第二电子设备通过所述远程认证通道发送的第二认证信息，以对所述第二电子设备的用户进行身份认证。
本申请提供的远程身份认证方法可以方便快捷地对可信任设备的持有人进行远程身份认证。本申请提供的远程身份认证方法打破了传统身份认证方式的地域和设备限制，可以跨地域、跨设备、跨认证主体进行身份认证，实现了方便快捷的远程身份认证。
在一些可选的实施方式中，所述建立与所述第二电子设备的远程认证通道包括：向所述第二电子设备发送认证请求；接收所述第二电子设备返回的认证响应；若接收到接受认证的认证响应，建立与所述第二电子设备的远程认证通道。
在一些可选的实施方式中，所述向所述第二电子设备发送认证请求之后，所述方法还包 括：显示等待建立认证通道界面。
在一些可选的实施方式中，所述方法还包括：若接收到拒绝认证的认证响应，显示认证失败界面。
在一些可选的实施方式中，所述第二电子设备包括第二认证信息采集器，所述第二认证信息是所述第二电子设备使用所述第二认证信息采集器采集得到的。
在一些可选的实施方式中，接收所述第二认证信息之后，所述方法还包括：显示第一远程认证界面。
在一些可选的实施方式中，所述第二认证信息包括实时视频，所述方法还包括：若检测到接收的实时视频中包括多个人脸，在所述第一远程认证界面中显示设置取景框的提示信息。
在一些可选的实施方式中，所述建立与所述第二电子设备的远程认证通道包括：向所述第二电子设备发送远程认证确认信息；识别所述第二电子设备的用户针对所述远程认证确认信息的响应动作；若识别到所述第二电子设备的用户接受认证的响应动作，建立与所述第二电子设备的远程认证通道。
在一些可选的实施方式中，所述方法还包括：建立所述第一电子设备与所述第二电子设备的信任关系。
在一些可选的实施方式中，所述建立所述第一电子设备与所述第二电子设备的信任关系包括：将所述第二电子设备添加为所述第一电子设备的分布式设备；或者对所述第一电子设备和所述第二电子设备建立社交圈。
在一些可选的实施方式中，所述发起身份认证包括：扫描自助服务终端上的二维码发起身份认证；或者通过近场通信发起身份认证。
在一些可选的实施方式中，所述方法还包括：若进行本机认证，获取所述第一电子设备的第一认证信息，以对所述第一电子设备的用户进行身份认证。
在一些可选的实施方式中，所述第一电子设备包括第一认证信息采集器，所述获取所述第一电子设备的第一认证信息包括：使用所述第一认证信息采集器采集所述第一认证信息。
本申请第二方面公开了一种计算机可读存储介质，包括计算机指令，当所述计算机指令在电子设备上运行时，使得所述电子设备执行如第一方面所述的远程身份认证方法。
本申请第三方面公开了一种电子设备，所述电子设备包括处理器和存储器，所述存储器用于存储指令，所述处理器用于调用所述存储器中的指令，使得所述电子设备执行如第一方面所述的远程身份认证方法。
本申请第四方面公开了一种芯片系统，该芯片系统应用于电子设备；芯片系统包括接口电路和处理器；接口电路和处理器通过线路互联；接口电路用于从电子设备的存储器接收信号，并向处理器发送信号，信号包括存储器中存储的计算机指令；当处理器执行该计算机指令时，芯片系统执行如第一方面所述的远程身份认证方法。
本申请第五方面公开了一种计算机程序产品，当计算机程序产品在计算机上运行时，使得计算机执行如第一方面所述的远程身份认证方法。
本申请第六方面公开了一种装置，该装置具有实现上述第一方面所提供的方法中电子设备行为的功能。功能可以通过硬件实现，也可以通过硬件执行相应的软件实现。硬 件或软件包括一个或多个与上述功能相对应的模块。
应当理解地，上述提供的第二方面所述的计算机可读存储介质，第三方面所述的电子设备，第四方面所述的芯片系统、第五方面所述的计算机程序产品，及第六方面所述的装置均与上述第一方面的方法对应，因此，其所能达到的有益效果可参考上文所提供的对应的方法中的有益效果，此处不再赘述。
附图说明
图1是本申请实施例提供的远程身份认证方法的应用场景示意图。
图2是本申请实施例提供的远程身份认证方法的流程图。
图3是本申请实施例中第一电子设备显示的认证设备选择界面的示意图。
图4是本申请实施例中第一电子设备显示的等待建立认证通道界面的示意图。
图5是本申请实施例中第二电子设备显示的远程认证确认界面的示意图。
图6是本申请实施例中第一电子设备显示的认证失败界面的示意图。
图7是本申请实施例中第一电子设备显示的第一远程认证界面的示意图。
图8是本申请实施例中第二电子设备显示的第二远程认证界面的示意图。
图9是本申请实施例中，检测到接收的实时视频中包括多个人脸时，第一电子设备显示的第一远程认证界面的示意图。
图10是本申请另一实施例提供的远程身份认证方法的流程图。
图11是本申请实施例提供的电子设备的结构示意图。
具体实施方式
为了便于理解，示例性的给出了部分与本申请实施例相关概念的说明以供参考。
需要说明的是，本申请中“至少一个”是指一个或者多个，“多个”是指两个或多于两个。“和/或”，描述关联对象的关联关系，表示可以存在三种关系，例如，A和/或B可以表示：单独存在A，同时存在A和B，单独存在B的情况，其中A，B可以是单数或者复数。本申请的说明书和权利要求书及附图中的术语“第一”、“第二”、“第三”、“第四”等(如果存在)是用于区别类似的对象，而不是用于描述特定的顺序或先后次序。
为了更好地理解本申请实施例提供的远程身份认证方法及相关设备，下面首先对本申请远程身份认证方法的应用场景进行描述。
图1是本申请实施例提供的远程身份认证方法的应用场景示意图。
如图1所示，本申请实施例提供的远程身份认证方法应用于第一电子设备(可称为主设备)10与第二电子设备(可称为从设备)11。第一电子设备10与第二电子设备11可以是智能终端。第一电子设备10是可操作设备(例如手机、平板、智能手表等)，第一电子设备10包括显示屏。第二电子设备11可以是可操作设备(例如手机、大屏等)，也可以是不可操作设备(例如智能摄像头)。第二电子设备11可以包括显示屏，也可以不包括显示屏。在本申请的一个具体实施例中，第一电子设备10和第二电子设备11均为手机。在本申请的另一个具体实施例中，第一电子设备10为手机，第二电子设备11为智能摄像头。
第一电子设备10包括第一认证信息采集器100。第一电子设备10可以包括多个第一认证信息采集器100，以支持多种认证方式。例如，第一电子设备10包括第一摄像头、第一指纹采集器和第一虹膜采集器，第一电子设备10支持的认证方式包括扫码认证、人脸认证、指纹认证和虹膜认证。
第二电子设备11包括第二认证信息采集器110。第二电子设备11可以包括多个第二认证信息采集器110，以支持多种认证方式。例如，第二电子设备11包括第二摄像头、第二指纹采集器和第二虹膜采集器，第二电子设备11支持的认证方式包括扫码认证、人脸认证、指纹认证和虹膜认证。
根据本申请实施例提供的远程身份认证方法，当需要对第二电子设备11的用户/机主进行身份认证时，可以利用第一电子设备10对第二电子设备11的用户进行身份认证。例如，在智能快递柜帮家人收取快递的场景中，可以利用非收件人的手机对收件人(即家人)进行身份认证。又如，在医院的自助挂号机上帮家人挂号的场景中，可以利用非就诊人的手机对就诊人(即家人)进行身份认证。若第二电子设备11支持多种认证方式，可以利用第一电子设备10对第二电子设备11进行多种认证方式的身份认证。例如，第二电子设备11支持的认证方式包括扫码认证、人脸认证、指纹认证和虹膜认证，可以利用第一电子设备10对第二电子设备11进行扫码认证、人脸认证、指纹认证和虹膜认证。本申请实施例提供的远程身份认证方法打破了传统认证方式的地域和设备限制，可以跨地域、跨设备、跨认证主体进行身份认证，实现了方便快捷的远程身份认证。
图2是本申请实施例提供的远程身份认证方法的流程图。图2所示实施例中，第二电子设备为可操作设备，第二电子设备包括显示屏。例如，第二电子设备为手机或大屏(即智慧屏)。
201，第一电子设备与第二电子设备建立信任关系。
在本申请的一个实施例中，可以在第一电子设备与第二电子设备之间建立长期的信任关系。例如，可以将第二电子设备添加为第一电子设备的分布式设备，从而在第一电子设备与第二电子设备之间建立长期的信任关系。又如，可以对第一电子设备和第二电子设备建立社交圈(例如家庭圈)，从而在第一电子设备与第二电子设备之间建立长期的信任关系。如果在第一电子设备与第二电子设备之间建立长期的信任关系，则建立一次信任关系(即长期的信任关系)后，可以对第二电子设备进行多次远程认证。
在本申请的其他实施例中，可以在第一电子设备与第二电子设备之间建立临时的信任关系。例如，可以通过电话、网络等方式在第一电子设备与第二电子设备之间建立临时的信任关系。如果在第一电子设备与第二电子设备之间建立临时的信任关系，则每次对第二电子设备进行远程认证，都需要建立一次信任关系(即临时的信任关系)。
可以由第一电子设备建立第一电子设备与第二电子设备的信任关系。或者，可以由第二电子设备建立与第一电子设备与第二电子设备的信任关系。由第一电子设备建立第一电子设备与第二电子设备的信任关系时，第一电子设备可以向第二电子设备发送信任关系建立请求，第二电子设备接收到信任关系建立请求后，若同意建立信息关系，则返回同意响应。若第一电子设备接收到第二电子设备返回的同意响应，则建立第一电子设备与第二电子设备之间的信任关系。
本实施例中，在第一电子设备在发起身份认证之前，在第一电子设备与第二电子设 备之间建立信任关系，目的是提高远程认证的安全性。在本申请其他的实施例中，可以不预先在第一电子设备与第二电子设备之间建立信任关系。
202，第一电子设备在发起身份认证时，显示认证设备选择界面。
在本申请的一个实施例中，第一电子设备扫描自助服务终端(例如智能快递柜或自助挂号机)上的二维码(例如取件二维码或挂号二维码)发起身份认证。例如，在智能快递柜帮家人收取快递的场景中，可以扫描取件二维码发起身份认证。又如，在医院的自助挂号机上帮家人挂号的场景中，可以扫描挂号二维码发起身份认证。
在本申请其他的实施例中，第一电子设备可以通过其他方式发起身份认证。例如，第一电子设备可以通过第一电子设备上的预设应用程序(例如预约就诊的应用程序)发起身份认证(例如按下应用界面的挂号按钮)。又如，第一电子设备通过近场通信(Near Field Communication，NFC)发起身份认证(例如门禁系统，访客通过NFC发起身份认证，拉起主人的远程识别)。
认证设备选择界面包括本机认证选项和远程认证选项，用于供用户选择本机或是可信任设备进行身份认证。
在本申请的一个实施例中，认证设备选择界面包括认证设备列表，认证设备列表包括本机(即本机认证选项)和可信任设备(即远程认证选项)。其中，本机用于进行本机认证，可信任设备用于进行远程认证。若用户选择本机，则表示进行本机认证，若用户选择可信任设备，则表示进行远程认证。
图3是本申请实施例中第一电子设备显示的认证设备选择界面的示意图。如图3所示，认证设备选择界面包括“选择认证设备”的文字提示，认证设备选择界面还包括“MateXXX(本机)”、“客厅摄像头”、“爸爸(家庭圈)”等认证设备，其中，“MateXXX(本机)”为本机认证选项，“客厅摄像头”、“爸爸(家庭圈)”为远程认证选项。
在本申请的另一个实施例中，认证设备选择界面可以包括“本机认证”和“远程认证”两个选项。若用户选择“远程认证”选项，可以弹出可信任设备列表，用户可以从可信任设备列表中选择远程设备(例如第二电子设备)进行远程认证。
203，若用户选择进行本机认证(例如图3中点击“MateXXX(本机)”)，第一电子设备使用第一认证信息采集器采集第一认证信息，以对第一电子设备的用户进行身份认证。
第一认证信息是第一电子设备的用户的认证信息。
例如，若用户选择进行本机认证，第一电子设备使用第一摄像头采集第一电子设备的用户的人脸图像或者使用第一电子设备的指纹采集器采集第一电子设备的用户的指纹。
第一电子设备使用的认证信息采集器与第一电子设备发起的身份认证相对应。例如，若第一电子设备发起人脸认证，则第一电子设备使用第一摄像头采集第一电子设备的用户的人脸图像；若第一电子设备发起指纹认证，则第一电子设备使用第一指纹采集器采集第一电子设备的用户的指纹。
第一电子设备可以将第一认证信息发送给自助服务终端，该自助服务终端根据第一认证信息对第一电子设备的用户进行身份认证。自助服务终端可以将第一认证信息发送给对应的认证服务器进行身份认证。
在本申请其他的实施例中，若进行本机认证，第一电子设备可以获取预先存储的第 一认证信息，以对第一电子设备的用户进行身份认证。
204，若用户选择第二电子设备进行远程认证，第一电子设备向第二电子设备发送认证请求。
认证请求可以包括认证方式字段，用于指明远程认证采用的认证方式。例如，扫码认证对应的认证方式字段为0，人脸认证对应的认证方式字段为1，指纹认证对应的认证方式字段为2，虹膜认证对应的认证方式字段为3。若需要进行人脸认证，第一电子设备向第二电子设备发送认证方式字段为1的认证请求。若需要进行指纹认证，第一电子设备向第二电子设备发送认证方式字段为2的认证请求。
若进行扫码认证(例如在智能快递柜上帮家人收取快递的场景)，第一电子设备可以将扫码的二维码与认证请求一起发送给第二电子设备，使第二电子设备通过该二维码进行身份认证。
在本申请的一个实施例中，第一电子设备向第二电子设备发送认证请求后，第一电子设备显示等待建立认证通道界面。
图4是本申请实施例中第一电子设备显示的等待建立认证通道界面的示意图。参阅图4所示，等待建立认证通道界面包括“等待XX建立远程认证”的文字信息。等待建立认证通道界面还可以包括“取消”按钮，用于取消建立远程认证通道。
205，接收到认证请求后，第二电子设备根据用户操作将接受认证或拒绝认证的认证响应返回第一电子设备。
第二电子设备可以将接受认证的认证响应返回第一电子设备，或者将拒绝认证的认证响应返回第一电子设备。
在本实施例中，第二电子设备接收到认证请求后，在第二电子设备上显示远程认证确认界面，用于确认是否同意进行远程认证。
图5是本申请实施例中第二电子设备显示的远程认证确认界面的示意图。如图5所示，远程认证确认界面可以包括“XXX正在邀请您进行远程认证”的文字信息，远程认证确认界面还可以包括“接受”按钮和“拒绝”按钮。“接受”按钮用于接受/同意进行远程认证，“拒绝”按钮用于拒绝/不同意进行远程认证。
第二电子设备可以根据远程认证确认界面上的用户操作向第一电子设备返回接受认证或拒绝认证的认证响应。若第二电子设备的用户选择/点击“接受”按钮，第二电子设备将接受认证的认证响应返回第一电子设备。若第二电子设备的用户选择/点击“拒绝”按钮，第二电子设备将拒绝认证的认证响应返回第一电子设备。
或者，第二电子设备可以根据其他用户操作向第一电子设备返回接受认证或拒绝认证的认证响应。例如，第二电子设备上显示远程认证确认界面后，若用户按下第二电子设备的电源键将第二电子设备灭屏，则第二电子设备向第一电子设备返回拒绝认证的认证响应。
206，若接收到拒绝认证的认证响应，第一电子设备与第二电子设备建立远程认证通道失败。
在本申请的一个实施例中，若接收到拒绝认证的认证响应，第一电子设备显示认证失败界面。认证失败界面可以包括认证失败提示信息，用于提示远程认证失败。认证失败提示信息还可以用于提示重新选择设备进行认证。
图6是本申请实施例中第一电子设备显示的认证失败界面的示意图。如图6所示，认证失败界面包括“远程认证失败，请重新选择设备进行认证”的认证失败提示信息。认证失败界面还可以包括“确定”按钮。若用户选择“确定”按钮，则重新显示认证设备选择界面。
207，若接收到接受认证的认证响应，第一电子设备建立与第二电子设备的远程认证通道。
例如，若接收到接受认证的认证响应，认证方式为人脸认证，第一电子设备建立与第二电子设备的视频通道。
208，第二电子设备使用第二认证信息采集器采集第二认证信息，将第二认证信息发送给第一电子设备，以对第二电子设备的用户进行身份认证。
第二认证信息是第二电子设备的用户的认证信息。
例如，第二电子设备使用第二摄像头采集第二电子设备的用户的实时图像/视频，将第二电子设备的用户的实时图像/视频发送给第一电子设备，以对第二电子设备的用户进行身份认证。
在本申请的一个实施例中，第一电子设备接收到第二认证信息后，显示第一远程认证界面。图7是本申请实施例中第一电子设备显示的第一远程认证界面的示意图。如图7所示，第一远程认证界面包括“正在进行远程认证”的文字信息，第一远程认证界面还可以包括“结束”按钮，用于结束远程认证。若用户按下第一远程认证界面上的“结束”按钮，则结束远程认证。
在本申请的一个实施例中，当第二电子设备利用第二认证信息采集器采集第二认证信息，将第二认证信息发送给第一电子设备时，第二电子设备可以显示第二远程认证界面。图8是本申请实施例中第二电子设备显示的第二远程认证界面的示意图。如图8所示，第二远程认证界面包括“正在进行远程认证”的文字信息，第二远程认证界面还可以包括“结束”按钮，用于结束远程认证。若用户按下第二远程认证界面上的“结束”按钮，则结束远程认证。
图7-8所示实施例中，第一远程认证界面与第二远程认证界面相同。在本申请其他的实施例中，第一远程认证界面与第二远程认证界面可以不同。
在本申请的一个实施例中，第二电子设备将实时视频发送给第一电子设备，若检测到接收的实时视频中包括多个人脸，第一电子设备在第一远程认证界面中显示设置取景框的提示信息。例如，若检测到接收的实时视频中包括多个人脸，第一电子设备发出“检测到多张人脸，请设置取景框”的提示信息。如果检测到接收的实时视频中包括多个人脸，用户可以在第一远程认证界面上设置取景框。
图9是本申请实施例中，检测到接收的实时视频中包括多个人脸时，第一电子设备显示的第一远程认证界面的示意图。如图9所示，当检测到接收的实时视频中包括多个人脸远程时，第一远程认证界面可以包括“检测到多张人脸，请设置取景框”的提示信息。
第一电子设备可以将第二认证信息发送给自助服务终端，该自助服务终端根据第二认证信息进行身份认证。自助服务终端可以将第二认证信息发送给对应的认证服务器进行身份认证。
在本申请其他的实施例中，第二认证信息可以预先存储在第二电子设备，第二电子设备将预先存储的第二认证信息发送给第一电子设备，以对第二电子设备的用户进行身份认证。
209，若结束远程认证，关闭远程认证通道。
在本申请的一个实施例中，第一电子设备、第二电子设备都可以选择结束远程认证。
例如，参见图7、图9所示，若用户按下第一远程认证界面上的“结束”按钮，则结束远程认证。或者，参见图8所示，若用户按下第二远程认证界面上的“结束”按钮，则结束远程认证。
目前智能设备和互联网发展迅猛，扫码认证和各种生物识别认证的应用场景越来越多，而绝大部分认证都是在本机对本人进行身份认证，或者远程对本人进行身份认证。本申请实施例提供的远程身份认证方法可以方便快捷地对可信任设备的持有人进行远程身份认证。本申请实施例提供的远程身份认证方法打破了传统身份认证方式的地域和设备限制，可以跨地域、跨设备、跨认证主体进行身份认证，实现了方便快捷的远程身份认证。
图10是本申请实施例提供的远程身份认证方法的流程图。图10所示实施例中，第二电子设备为不可操作设备，第二电子设备不包括显示屏。以下以第二电子设备为智能摄像头为例进行说明。
1001，第一电子设备与第二电子设备建立信任关系。
在本申请的一个实施例中，可以将第二电子设备添加为第一电子设备的分布式设备，从而在第一电子设备与第二电子设备之间建立信任关系。或者，可以对第一电子设备和第二电子设备建立社交圈(例如家庭圈)，从而在第一电子设备与第二电子设备之间建立信任关系。
在本申请的其他实施例中，可以通过其他方式在第一电子设备与第二电子设备之间建立信任关系，例如通过电话、网络等方式在第一电子设备与第二电子设备之间建立信任关系。
可以由第一电子设备建立第一电子设备与第二电子设备的信任关系。或者，可以由第二电子设备建立与第一电子设备与第二电子设备的信任关系。由第一电子设备建立第一电子设备与第二电子设备的信任关系时，第一电子设备可以向第二电子设备发送信任关系建立请求，第二电子设备接收到信任关系建立请求后，若同意建立信息关系，则返回同意响应。若第一电子设备接收到第二电子设备返回的同意响应，则建立第一电子设备与第二电子设备之间的信任关系。
1002，第一电子设备在发起身份认证时，显示认证设备选择界面。
在本申请的一个实施例中，第一电子设备扫描自助服务终端(例如智能快递柜或自助挂号机)上的二维码(例如取件二维码或挂号二维码)发起身份认证。例如，在智能快递柜帮家人收取快递的场景中，可以扫描取件二维码发起身份认证。又如，在医院的自助挂号机上帮家人挂号的场景中，可以扫描挂号二维码发起身份认证。
在本申请其他的实施例中，第一电子设备可以通过其他方式发起身份认证。例如，第一电子设备可以通过第一电子设备上的预设应用程序(例如预约就诊的应用程序)发起身份认证(例如按下应用界面的挂号按钮)。
认证设备选择界面包括本机认证选项和远程认证选项，用于供用户选择本机或是可信任设备进行身份认证。
在本申请的一个实施例中，认证设备选择界面包括认证设备列表，认证设备列表包括本机(即本机认证选项)和可信任设备(即远程认证选项)。其中，本机用于进行本机认证，可信任设备用于进行远程认证。若用户选择本机，则表示进行本机认证，若用户选择可信任设备，则表示进行远程认证。
1003，若用户选择进行本机认证(例如图3中点击“MateXXX(本机)”)，第一电子设备使用第一认证信息采集器采集第一认证信息以进行身份认证。
第一认证信息是第一电子设备的用户的认证信息。
例如，若用户选择进行本机认证，第一电子设备使用第一摄像头采集第一电子设备的用户的人脸图像或者使用第一电子设备的指纹采集器采集第一电子设备的用户的指纹。
第一电子设备使用的认证信息采集器与第一电子设备发起的身份认证相对应。例如，若第一电子设备发起人脸认证，则第一电子设备使用第一摄像头采集第一电子设备的用户的人脸图像；若第一电子设备发起指纹认证，则第一电子设备使用第一指纹采集器采集第一电子设备的用户的指纹。
第一电子设备可以将第一认证信息发送给自助服务终端，该自助服务终端根据第一认证信息对第一电子设备的用户进行身份认证。自助服务终端可以将第一认证信息发送给对应的认证服务器进行身份认证。
1004，若用户选择第二电子设备进行远程认证，第一电子设备向第二电子设备发送远程认证确认信息。
第一电子设备对第二电子设备发送远程认证确认信息，是为了确保在第二电子设备的用户知情同意的情况下进行远程认证。
在本实施例中，第二电子设备为智能摄像头，第一电子设备可以向第二电子设备发送语音，提示第二电子设备的用户进行相关操作(如张口、眨眼、点头等)。例如，第一电子设备可以向第二电子设备发送“XXX正在邀请您进行远程认证，如果同意请点头”的语音。
在本申请的一个实施例中，第一电子设备向第二电子设备发送远程认证确认信息后，第一电子设备显示等待建立认证通道界面。
图4是本申请实施例中第一电子设备显示的等待建立认证通道界面的示意图。参阅图4所示，等待建立认证通道界面包括“等待XX建立远程认证”的文字信息。等待建立认证通道界面还可以包括“取消”按钮，用于取消建立远程认证通道。
1005，第一电子设备识别第二电子设备的用户针对远程认证确认信息的响应动作。
第二电子设备可以将实时拍摄的图像或视频发送给第一电子设备，第一电子设备根据第二电子设备实时拍摄的图像或视频识别第二电子设备的用户的响应动作，例如识别响应动作为点头或是摇头。
1006，若识别到第二电子设备的用户接受认证的响应动作，第一电子设备建立与第二电子设备的远程认证通道。
例如，若识别到第二电子设备的用户的响应动作为点头，则确定第二电子设备的用户接受认证，第一电子设备建立与第二电子设备的远程认证通道。
1007，第二电子设备使用第二认证信息采集器采集第二认证信息，将第二认证信息发送给第一电子设备以进行身份认证。
第二认证信息是第二电子设备的用户的认证信息。
在本申请的一个实施例中，第一电子设备接收到第二认证信息后，显示第一远程认证界面。图7是本申请实施例中第一电子设备显示的第一远程认证界面的示意图。如图7所示，第一远程认证界面包括“正在进行远程认证”的文字信息，第一远程认证界面还可以包括“结束”按钮，用于结束远程认证。若用户按下第一远程认证界面上的“结束”按钮，则结束远程认证。
在本申请的一个实施例中，第二电子设备将实时视频发送给第一电子设备，若检测到接收的实时视频中包括多个人脸，第一电子设备在第一远程认证界面中显示设置取景框的提示信息。例如，若检测到接收的实时视频中包括多个人脸，第一电子设备发出“检测到多张人脸，请设置取景框”的提示信息。如果检测到接收的实时视频中包括多个人脸，用户可以在第一远程认证界面上设置取景框。
图9是本申请实施例中，检测到接收的实时视频中包括多个人脸时，第一电子设备显示的第一远程认证界面的示意图。如图9所示，当检测到接收的实时视频中包括多个人脸远程时，第一远程认证界面可以包括“检测到多张人脸，请设置取景框”的提示信息。
第一电子设备可以将第二认证信息发送给自助服务终端，该自助服务终端根据第二认证信息进行身份认证。自助服务终端可以将第二认证信息发送给对应的认证服务器进行身份认证。
1008，若结束远程认证，第一电子设备关闭远程认证通道。
或者，参见图7、图9所示，若用户按下第一远程认证界面上的“结束”按钮，则结束远程认证。
本申请实施例提供的远程身份认证方法可以方便快捷地对可信任设备的持有人进行远程身份认证。本申请实施例提供的远程身份认证方法打破了传统身份认证方式的地域和设备限制，可以跨地域、跨设备、跨认证主体进行身份认证，实现了方便快捷的远程身份认证。本实施例在第二电子设备不可操作时，确保第二电子设备的用户知情同意，提高身份认证的安全性。
图11是本申请实施例提供的一种电子设备(第一电子设备或第二电子设备)的结构示意图。如图11所示，电子设备110可以包括：射频(Radio Frequency，RF)电路1101、存储器1102、输入单元1103、显示单元1104、传感器1105、音频电路1106、Wi-Fi模块1107、处理器1108以及电源1109等部件。本领域技术人员可以理解，图11中示出的结构并不构成对电子设备的限定，电子设备可以包括比图示更多或更少的部件，或者组合某些部件，或者不同的部件布置。
RF电路1101可用于收发信息或在通话过程中，对信号进行接收和发送，特别地，接收基站的下行信息后，转给处理器1108进行处理；另外，将涉及上行的数据发送给基站。通常，RF电路1101包括，但不限于：天线、至少一个放大器、收发信机、耦合器、低噪声放大器(Low Noise Amplifier，LNA)、双工器等。
存储器1102可用于存储软件程序以及模块，处理器1108通过运行存储在存储器 1102中的软件程序以及模块，从而执行电子设备的各种功能应用以及数据处理。存储器1102可主要包括存储程序区和存储数据区，其中，存储程序区可存储操作系统、至少一个功能所需的应用程序(比如声音播放功能、图像播放功能等)等；存储数据区可存储根据电子设备的使用所创建的数据(比如音频数据、电话本等)等。此外，存储器1102可以包括高速随机存取存储器，还可以包括非易失性存储器，例如至少一个磁盘存储器件、闪存器件、或其他易失性固态存储器件。
输入单元1103可用于接收输入的数字或字符信息，以及产生与电子设备的用户设置以及功能控制有关的键信号输入。具体地，输入单元1103可包括触控面板11031以及其他输入设备11032。触控面板11031，也称为触摸屏，可收集用户在其上或附近的触摸操作(比如用户使用手指、触控笔等任何适合的物体或附件在触控面板11031上或在触控面板11031附近的操作)，并根据预先设定的程序驱动相应的连接装置。可选地，触控面板11031可包括触摸检测装置和触摸控制器两个部分。其中，触摸检测装置检测用户的触摸方位，并检测触摸操作带来的信号，将信号传送给触摸控制器；触摸控制器从触摸检测装置上接收触摸信息，并将它转换成触点坐标，再送给处理器1108，并接收处理器1108发来的命令并加以执行。此外，可以采用电阻式、电容式、红外线以及表面声波等多种类型实现触控面板11031。除了触控面板11031，输入单元1103还可以包括其他输入设备11032。具体地，其他输入设备11032可以包括但不限于物理键盘、功能键(比如音量控制按键、开关按键等)、轨迹球、鼠标、操作杆等中的一种或多种。
显示单元1104可用于显示由用户输入的信息或提供给用户的信息以及电子设备的各种菜单。显示单元1104可包括显示面板11041，可选地，可以采用液晶显示器(Liquid Crystal Display，LCD)、有机发光二极管(Organic Light-Emitting Diode,OLED)等形式来配置显示面板11041。进一步地，触控面板11031可覆盖显示面板11041，当触控面板11031检测到在其上或附近的触摸操作后，传送给处理器1108以确定触摸事件的类型，随后处理器1108根据触摸事件的类型在显示面板11041上提供相应的视觉输出。虽然在图11中，触控面板11031与显示面板11041是作为两个独立的部件来实现电子设备的输入和输出功能，但是在某些实施例中，可以将触控面板11031与显示面板11041集成而实现电子设备的输入和输出功能。
电子设备还可包括至少一种传感器1105，比如光传感器、运动传感器以及其他传感器。具体地，光传感器可包括环境光传感器及接近传感器，其中，环境光传感器可根据环境光线的明暗来调节显示面板11041的亮度，接近传感器可在电子设备移动到耳边时，关闭显示面板11041和/或背光。作为运动传感器的一种，加速计传感器可检测各个方向上(一般为三轴)加速度的大小，静止时可检测出重力的大小及方向，可用于识别电子设备姿态的应用(比如横竖屏切换、相关游戏、磁力计姿态校准)、振动识别相关功能(比如计步器、敲击)等；此外，电子设备还可配置的陀螺仪、气压计、湿度计、温度计、红外线传感器等其他传感器，在此不再赘述。
音频电路1106、扬声器11061，传声器11062可提供用户与电子设备之间的音频接口。音频电路1106可将接收到的音频数据转换后的电信号，传输到扬声器11061，由扬声器11061转换为声音信号输出；另一方面，传声器11062将收集的声音信号转换为电信号，由音频电路1106接收后转换为音频数据，再将音频数据输出处理器1108处理后， 经RF电路1101发送给另一电子设备，或者将音频数据输出至存储器1102以便进一步处理。
Wi-Fi属于短距离无线传输技术，电子设备通过Wi-Fi模块1107可以帮助用户收发电子邮件、浏览网页和访问流式媒体等，它为用户提供了无线的宽带互联网访问。虽然图11示出了Wi-Fi模块1107，但是可以理解的是，其并不属于电子设备的必需构成，完全可以根据需要、在不改变发明本质的范围内进行省略。
处理器1108是电子设备的控制中心，利用各种接口和线路连接整个电子设备的各个部分，通过运行或执行存储在存储器1102内的软件程序和/或模块，以及调用存储在存储器1102内的数据，执行电子设备的各种功能和处理数据，从而对电子设备进行整体监控。可选地，处理器1108可包括一个或多个处理单元；优选的，处理器1108可集成应用处理器和调制解调器，其中，应用处理器主要处理操作系统、用户界面和应用程序等，调制解调器主要处理无线通信。可以理解的是，上述调制解调处理器也可以不集成到处理器1108中。
电子设备还包括给各个部件供电的电源1109(比如电池)，可选地，电源可以通过电源管理系统与处理器1108逻辑相连，从而通过电源管理系统实现管理充电、放电、以及功耗管理等功能。
尽管未示出，电子设备还可以包括摄像头、蓝牙模块等，在此不再赘述。
图11中描述的电子设备可以用于实施本申请介绍的方法实施例中的部分或全部流程，可参见前述方法实施例中的相关阐述，这里不再赘述。
本实施例还提供一种计算机存储介质，该计算机存储介质中存储有计算机指令，当该计算机指令在电子设备上运行时，使得电子设备执行上述相关方法步骤实现上述实施例中的远程身份认证方法。
本实施例还提供了一种计算机程序产品，当该计算机程序产品在电子设备上运行时，使得电子设备执行上述相关步骤，以实现上述实施例中的远程身份认证方法。
另外，本申请的实施例还提供一种装置，这个装置具体可以是芯片，组件或模块，该装置可包括相连的处理器和存储器；其中，存储器用于存储计算机执行指令，当装置运行时，处理器可执行存储器存储的计算机执行指令，以使芯片执行上述各方法实施例中的远程身份认证方法。
其中，本实施例提供的电子设备、计算机存储介质、计算机程序产品或芯片均用于执行上文所提供的对应的方法，因此，其所能达到的有益效果可参考上文所提供的对应的方法中的有益效果，此处不再赘述。
通过以上的实施方式的描述，所属领域的技术人员可以清楚地了解到，为描述的方便和简洁，仅以上述各功能模块的划分进行举例说明，实际应用中，可以根据需要而将上述功能分配由不同的功能模块完成，即将装置的内部结构划分成不同的功能模块，以完成以上描述的全部或者部分功能。
在本申请所提供的几个实施例中，应该理解到，所揭露的装置和方法，可以通过其它的方式实现。例如，以上所描述的装置实施例仅仅是示意性的，例如，该模块或单元的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式，例如多个单元或组件可以结合或者可以集成到另一个装置，或一些特征可以忽略，或不执行。另一点，所 显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口，装置或单元的间接耦合或通信连接，可以是电性，机械或其它的形式。
该作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是一个物理单元或多个物理单元，即可以位于一个地方，或者也可以分布到多个不同地方。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。
另外，在本申请各个实施例中的各功能单元可以集成在一个处理单元中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个单元中。上述集成的单元既可以采用硬件的形式实现，也可以采用软件功能单元的形式实现。
该集成的单元如果以软件功能单元的形式实现并作为独立的产品销售或使用时，可以存储在一个可读取存储介质中。基于这样的理解，本申请实施例的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的全部或部分可以以软件产品的形式体现出来，该软件产品存储在一个存储介质中，包括若干指令用以使得一个设备(可以是单片机，芯片等)或处理器(processor)执行本申请各个实施例所述方法的全部或部分步骤。而前述的存储介质包括：U盘、移动硬盘、只读存储器(Read-Only Memory，ROM)、随机存取存储器(Random Access Memory，RAM)、磁碟或者光盘等各种可以存储程序代码的介质。
以上所述，仅为本申请的具体实施方式，但本申请的保护范围并不局限于此，任何在本申请揭露的技术范围内的变化或替换，都应涵盖在本申请的保护范围之内。因此，本申请的保护范围应以所述权利要求的保护范围为准。

Claims (15)

  1. 一种远程身份认证方法，应用于第一电子设备，其特征在于，所述方法包括：
    在发起身份认证时，显示认证设备选择界面，所述认证设备选择界面包括第二电子设备；
    若从所述认证设备选择界面选择所述第二电子设备进行远程认证，建立与所述第二电子设备的远程认证通道；
    接收所述第二电子设备通过所述远程认证通道发送的第二认证信息，以对所述第二电子设备的用户进行身份认证。
  2. 如权利要求1所述的远程身份认证方法，其特征在于，所述建立与所述第二电子设备的远程认证通道包括：
    向所述第二电子设备发送认证请求；
    接收所述第二电子设备返回的认证响应；
    若接收到接受认证的认证响应，建立与所述第二电子设备的远程认证通道。
  3. 如权利要求2所述的远程身份认证方法，其特征在于，所述向所述第二电子设备发送认证请求之后，所述方法还包括：
    显示等待建立认证通道界面。
  4. 如权利要求2所述的远程身份认证方法，其特征在于，所述方法还包括：
    若接收到拒绝认证的认证响应，显示认证失败界面。
  5. 如权利要求1所述的远程身份认证方法，其特征在于，所述第二电子设备包括第二认证信息采集器，所述第二认证信息是所述第二电子设备使用所述第二认证信息采集器采集得到的。
  6. 如权利要求1所述的远程身份认证方法，其特征在于，接收所述第二认证信息之后，所述方法还包括：
    显示第一远程认证界面。
  7. 如权利要求6所述的远程身份认证方法，其特征在于，所述第二认证信息包括实时视频，所述方法还包括：
    若检测到接收的实时视频中包括多个人脸，在所述第一远程认证界面中显示设置取景框的提示信息。
  8. 如权利要求1所述的远程身份认证方法，其特征在于，所述建立与所述第二电子设备的远程认证通道包括：
    向所述第二电子设备发送远程认证确认信息；
    识别所述第二电子设备的用户针对所述远程认证确认信息的响应动作；
    若识别到所述第二电子设备的用户接受认证的响应动作，建立与所述第二电子设备的远程认证通道。
  9. 如权利要求1至8任一项所述的远程身份认证方法，其特征在于，所述方法还包括：
    建立所述第一电子设备与所述第二电子设备的信任关系。
  10. 如权利要求9所述的远程身份认证方法，其特征在于，所述建立所述第一电子设备 与所述第二电子设备的信任关系包括：
    将所述第二电子设备添加为所述第一电子设备的分布式设备；或者
    对所述第一电子设备和所述第二电子设备建立社交圈。
  11. 如权利要求1至8任一项所述的远程身份认证方法，其特征在于，所述发起身份认证包括：
    扫描自助服务终端上的二维码发起身份认证；或者
    通过近场通信发起身份认证。
  12. 如权利要求1至8任一项所述的远程身份认证方法，其特征在于，所述方法还包括：
    若进行本机认证，获取所述第一电子设备的第一认证信息，以对所述第一电子设备的用户进行身份认证。
  13. 如权利要求12所述的远程身份认证方法，其特征在于，所述第一电子设备包括第一认证信息采集器，所述获取所述第一电子设备的第一认证信息包括：
    使用所述第一认证信息采集器采集所述第一认证信息。
  14. 一种电子设备，其特征在于，所述电子设备包括处理器和存储器，所述存储器用于存储指令，所述处理器用于调用所述存储器中的指令，使得所述电子设备执行如权利要求1至13任一项所述的远程身份认证方法。
  15. 一种芯片系统，其特征在于，所述芯片系统应用于电子设备；所述芯片系统包括接口电路和处理器；所述接口电路和所述处理器通过线路互联；所述接口电路用于从所述电子设备的存储器接收信号，并向所述处理器发送信号，所述信号包括所述存储器中存储的计算机指令；当所述处理器执行该计算机指令时，所述芯片系统执行如权利要求1至13任一项所述的远程身份认证方法。
PCT/CN2022/109435 2021-08-13 2022-08-01 远程身份认证方法及相关设备 WO2023016289A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202110931124.1A CN115705419A (zh) 2021-08-13 2021-08-13 远程身份认证方法及相关设备
CN202110931124.1 2021-08-13

Publications (1)

Publication Number Publication Date
WO2023016289A1 true WO2023016289A1 (zh) 2023-02-16

Family

ID=85180210

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2022/109435 WO2023016289A1 (zh) 2021-08-13 2022-08-01 远程身份认证方法及相关设备

Country Status (2)

Country Link
CN (1) CN115705419A (zh)
WO (1) WO2023016289A1 (zh)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103729926A (zh) * 2014-01-20 2014-04-16 陈万兴 基于智能终端远程授权的蓝牙门禁控制系统及其控制方法
US20170104741A1 (en) * 2015-10-07 2017-04-13 Ali Sadr Apparatus, method and system providing remote user authentication
WO2019061219A1 (zh) * 2017-09-29 2019-04-04 华为技术有限公司 一种屏幕解锁的方法及终端
CN110210207A (zh) * 2019-05-30 2019-09-06 中国联合网络通信集团有限公司 授权方法及设备

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103729926A (zh) * 2014-01-20 2014-04-16 陈万兴 基于智能终端远程授权的蓝牙门禁控制系统及其控制方法
US20170104741A1 (en) * 2015-10-07 2017-04-13 Ali Sadr Apparatus, method and system providing remote user authentication
WO2019061219A1 (zh) * 2017-09-29 2019-04-04 华为技术有限公司 一种屏幕解锁的方法及终端
CN110210207A (zh) * 2019-05-30 2019-09-06 中国联合网络通信集团有限公司 授权方法及设备

Also Published As

Publication number Publication date
CN115705419A (zh) 2023-02-17

Similar Documents

Publication Publication Date Title
US10834237B2 (en) Method, apparatus, and storage medium for controlling cooperation of multiple intelligent devices with social application platform
EP3764253B1 (en) Method for quickly opening application or application function, and terminal
WO2017185711A1 (zh) 控制智能设备的方法、装置、系统和存储介质
WO2021115199A1 (zh) 验证信息共享方法及电子设备
WO2015003522A1 (zh) 人脸识别方法、装置和移动终端
CN109716854B (zh) 一种连接建立方法、设备、系统及介质
WO2021114952A1 (zh) 数据处理方法、终端设备、蓝牙设备及存储介质
WO2018161743A1 (zh) 指纹识别方法及相关产品
WO2018045487A1 (zh) 数据共享的方法与终端
WO2018161353A1 (zh) 一种分享照片的方法和装置
WO2016078504A1 (zh) 身份鉴权方法和装置
JP5373151B2 (ja) 情報処理装置、情報処理装置の制御方法、被制御装置、被制御装置の制御方法、サーバ、サーバの制御方法、ペアリングシステム、制御プログラム、および記録媒体
CN109068319A (zh) 一种通话方法、第一终端及第二终端
WO2021190373A1 (zh) 一种交互方法、交互系统和显示设备
CN108369618A (zh) 一种指纹识别方法及终端设备
CN109521684A (zh) 一种家居设备控制方法及终端设备
WO2022247762A1 (zh) 电子设备及其指纹解锁方法、指纹解锁装置
CN110536001A (zh) 一种通话方法及电子设备
EP3585127B1 (en) Wireless communication-based connection method and terminal
WO2021057243A1 (zh) 便签信息显示方法、便签信息发送方法及电子设备
CN109451143B (zh) 一种通话方法及移动终端
US11153427B2 (en) Mobile terminal and method for controlling the same
WO2023016289A1 (zh) 远程身份认证方法及相关设备
US11784834B2 (en) Electronic devices and corresponding methods for verifying device security prior to use
CN110891262A (zh) 一种蓝牙配对的方法、系统和终端设备

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 22855272

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE