A two-factor identity authentication method and device based on electroencephalogram spelling password

Abstract

The disclosure provides a two-factor identity authentication method and device based on electroencephalogram spelling password, the method comprising: presetting accounts and corresponding passwords of multiple users; constructing a user electroencephalogram template library, the user electroencephalogram template library comprising electroencephalogram signal templates of all users, wherein the electroencephalogram signal template of each user is obtained based on the electroencephalogram signal of the user when staring at each target key of a visual stimulation electroencephalogram spelling keyboard; obtaining an account of a test user; obtaining a target password input by the test user using the visual stimulation electroencephalogram spelling keyboard and a target electroencephalogram signal when inputting the target password; and determining whether the identity authentication passes based on the target password, the password corresponding to the account of the test user, and the target electroencephalogram signal and the electroencephalogram signal template of the test user in the user electroencephalogram template library. According to the method of the disclosure, the authentication security can be improved.

Description

Technical Field

[0001] This disclosure belongs to the field of electroencephalography (EEG) technology, and particularly relates to a two-factor authentication method and device based on EEG spelling password. Background Technology

[0002] With the increasing informatization and digitalization of modern society, people's demand for information security is growing. Traditional identity authentication methods, such as keys and ID cards, are not only risky to be stolen but also easily lost, causing many unnecessary troubles in people's lives. Emerging biometric identity authentication methods, such as fingerprints and facial recognition, also have their security risks. For example, fingerprints left everywhere can be easily copied into silicone fingerprint molds for theft, and facial recognition can be fooled by masks, thus threatening people's property security.

[0003] EEG authentication offers higher security compared to existing methods because EEG signals are highly complex and virtually impossible to replicate; EEG signals reflect the user's state and cannot be used normally under duress, thus providing anti-coercion capabilities; and EEG signals, due to their generation mechanism, possess a liveness detection capability.

[0004] On the one hand, existing EEG authentication technologies generally rely on resting-state or motor imagery. While the tasks are simple, their authentication speed is slow, requires numerous repetitions, and suffers from poor long-term stability, resulting in a poor user experience. In contrast, EEG spelling combined with user passwords utilizes a knowledge-based approach combined with biometrics, offering faster authentication and better long-term stability. On the other hand, current brain-computer interface (BCI) technologies are developing rapidly, with increasingly higher information transmission rates from EEG-based free spelling. However, when people use their thoughts to control virtual keyboards for typing communication, information security is not guaranteed. Anyone can impersonate another and steal interactive content, making authentication in BCI particularly crucial. Therefore, there is an urgent need for a two-factor authentication method based on EEG passwords that offers high authentication security. Summary of the Invention

[0005] This disclosure aims to at least partially address one of the technical problems in related technologies. To this end, this disclosure provides a two-factor authentication method and apparatus based on brainwave spelling passwords, primarily aimed at improving authentication security.

[0006] According to a first aspect of this disclosure, a two-factor authentication method based on brainwave spelling password is provided, comprising:

[0007] Multiple user accounts and corresponding passwords can be preset;

[0008] A user EEG template library is constructed, which includes EEG signal templates of all users, wherein each user's EEG signal template is obtained based on the user's EEG signal when gazing at each target key on a visually stimulated EEG spelling keyboard.

[0009] Obtain the accounts of the test users;

[0010] Acquire the target password input by the subject using the visual stimulation EEG spelling keyboard and the target EEG signal when the target password is input;

[0011] Based on the target password and the preset password corresponding to the subject's account, and the target EEG signal and the subject's EEG signal template in the user EEG template library, it is determined whether the identity authentication is successful.

[0012] In one embodiment of this disclosure, determining whether identity authentication is successful based on the target password corresponding to the preset password of the subject's account and the target EEG signal matching the subject's EEG signal template in the user EEG template library includes: determining whether the target password is the preset password corresponding to the subject's account; determining whether the target EEG signal matches the subject's EEG signal template in the user EEG template library; if the target password is the preset password corresponding to the subject's account and the target EEG signal matches the subject's EEG signal template in the user EEG template library, then identity authentication is successful.

[0013] In one embodiment of this disclosure, determining whether the target EEG signal matches the EEG signal template of the subject user in the user EEG template library includes: extracting a spatial filter and an EEG signal template corresponding to the subject user's account in the user EEG template library; spatially filtering the acquired target EEG signal through the extracted spatial filter to obtain a filtered EEG signal; fusing all filtered EEG signals of different frequency bands and performing algorithmic matching with the extracted EEG signal template to obtain matching results for each frequency band; obtaining a total matching result based on the matching results of all frequency bands; and if the total matching result is higher than a matching threshold, then the target EEG signal matches the EEG signal template of the subject user in the user EEG template library.

[0014] In one embodiment of this disclosure, obtaining the total matching result based on the matching results of all frequency bands includes: performing a weighted summation of the matching results of all frequency bands to obtain the total matching result.

[0015] In one embodiment of this disclosure, the method for obtaining the EEG signal template of each user includes: downsampling the collected EEG signal of the user; extracting multiple frequency bands from the sampled EEG signal using a filter bank; constructing a spatial filter for the user based on the EEG signal of each frequency band; filtering the EEG signal of each frequency band through the constructed spatial filter, and then fusing the filtered EEG signals to obtain the EEG signal template of the user.

[0016] In one embodiment of this disclosure, the acquisition locations of the acquired EEG signals include the locations Pz, PO5, PO3, Poz, PO4, PO6, O1, Oz, and O2 in the occipital region corresponding to the visual cortex.

[0017] According to a second aspect of this disclosure, a two-factor authentication device based on brainwave spelling password is also provided, comprising:

[0018] The preset module is used to preset accounts and corresponding passwords for multiple users;

[0019] A construction module is used to build a user EEG template library, which includes EEG signal templates of all users, wherein each user's EEG signal template is obtained based on the user's EEG signal when fixating on each target key in a visually stimulated EEG spelling keyboard.

[0020] The first acquisition module is used to acquire the accounts of the test users;

[0021] The second acquisition module is used to acquire the target password input by the subject using the visual stimulation EEG spelling keyboard and the target EEG signal when the target password is input.

[0022] The authentication module is used to determine whether the identity authentication is successful based on the preset password corresponding to the target password and the subject's account, and the target EEG signal and the subject's EEG signal template in the user EEG template library.

[0023] In one embodiment of this disclosure, the authentication module is specifically used to: determine whether the target password is a preset password corresponding to the subject user's account; determine whether the target EEG signal matches the subject user's EEG signal template in the user EEG template library; if the target password is a preset password corresponding to the subject user's account and the target EEG signal matches the subject user's EEG signal template in the user EEG template library, then the identity authentication is successful.

[0024] In one embodiment of this disclosure, the authentication module is specifically configured to: extract the spatial filter and EEG signal template corresponding to the subject's account in the user EEG template library; perform spatial filtering on the acquired target EEG signal through the extracted spatial filter to obtain a filtered EEG signal; fuse all filtered EEG signals of different frequency bands and perform algorithm matching with the extracted EEG signal template to obtain matching results for each frequency band; obtain a total matching result based on the matching results of all frequency bands; if the total matching result is higher than the matching threshold, then the target EEG signal matches the subject's EEG signal template in the user EEG template library.

[0025] According to a third aspect of this disclosure, a two-factor authentication device based on EEG spelling password is also provided, comprising: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to execute the two-factor authentication method based on EEG spelling password proposed in the first aspect of this disclosure.

[0026] In one or more embodiments of this disclosure, multiple user accounts and corresponding passwords are preset; a user EEG template library is constructed, which includes EEG signal templates for all users, wherein each user's EEG signal template is obtained based on the user's EEG signal when fixating on each target key on a visually stimulated EEG spelling keyboard; the user's account is obtained; the target password entered by the user using the visually stimulated EEG spelling keyboard and the target EEG signal when entering the target password are obtained; based on the target password and the preset password corresponding to the user's account, and the target EEG signal and the user's EEG signal template in the user EEG template library, it is determined whether the identity authentication is successful. In this case, by using EEG to freely spell user passwords and through dual identity authentication using passwords and obtained EEG signals, the authentication speed is improved and the authentication security is enhanced.

[0027] Additional aspects and advantages of this disclosure will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of this disclosure. Attached Figure Description

[0028] The above and / or additional aspects and advantages of this disclosure will become apparent and readily understood from the following description of the embodiments taken in conjunction with the accompanying drawings, in which:

[0029] Figure 1 A flowchart illustrating the two-factor authentication method based on EEG spelling password provided in this embodiment of the present disclosure is shown.

[0030] Figure 2This diagram illustrates the working process of the two-factor authentication method based on EEG spelling password provided in an embodiment of this disclosure.

[0031] Figure 3 A schematic diagram of the interface of the visual stimulation EEG spelling keyboard provided in an embodiment of this disclosure is shown;

[0032] Figure 4 A block diagram of a two-factor authentication device based on EEG spelling password provided in an embodiment of this disclosure is shown.

[0033] Figure 5 This is a block diagram of a two-factor authentication device based on EEG spelling password, used to implement the two-factor authentication method based on EEG spelling password in the embodiments of this disclosure. Detailed Implementation

[0034] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numerals in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with those of this disclosure. Rather, they are merely examples of apparatuses and methods consistent with some aspects of the embodiments of this disclosure as detailed in the appended claims.

[0035] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this disclosure. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0036] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this disclosure, "a plurality of" means at least two, such as two, three, etc., unless otherwise expressly and specifically defined. It should also be understood that the term "and / or" as used in this disclosure refers to and includes any or all possible combinations of one or more associated listed items.

[0037] Embodiments of this disclosure are described in detail below, examples of which are illustrated in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and intended to explain this disclosure, and should not be construed as limiting this disclosure.

[0038] This disclosure provides a two-factor authentication method and device based on brainwave spelling password. The main purpose of the two-factor authentication method and device provided in this disclosure is to improve authentication security.

[0039] In the first embodiment, Figure 1 A flowchart illustrating the two-factor authentication method based on EEG spelling password provided in this embodiment of the present disclosure is shown. Figure 2 This diagram illustrates the working process of the two-factor authentication method based on EEG spelling password provided in an embodiment of this disclosure. Figure 3 A schematic diagram of the interface of the visual stimulation EEG spelling keyboard provided in an embodiment of this disclosure is shown.

[0040] like Figure 1 As shown, this two-factor authentication method based on brainwave spelling passwords includes:

[0041] Step S11: Preset multiple user accounts and their corresponding passwords.

[0042] In simple terms, a user's account represents the user's identity, and different users have different accounts.

[0043] In step S11, the password can be, but is not limited to, a numeric password. The number of digits in a numeric password can be represented by n. n is a natural number greater than 1.

[0044] Step S12: Construct a user EEG template library. The user EEG template library includes EEG signal templates of all users, wherein each user's EEG signal template is obtained based on the EEG signal of that user when gazing at each target key on the visual stimulation EEG spelling keyboard.

[0045] Specifically, such as Figure 2 As shown, constructing a user EEG template library includes: presenting a visual stimulus EEG spelling keyboard (step S121); collecting EEG signals when each user gazes at each target key in the visual stimulus EEG spelling keyboard (step S122); generating an EEG signal template corresponding to each user using all the collected EEG signals of each user, thereby obtaining the user EEG template library (step S123).

[0046] In step S121, the visual stimulation EEG spelling keyboard is presented on the system's display screen. The visual stimulation EEG spelling keyboard can be simply referred to as an EEG spelling keyboard or a visual keyboard.

[0047] In some embodiments, the visual stimulation EEG spelling keyboard can be a numeric keyboard or an alphabetic keyboard. Figure 3 The visual stimulation EEG spelling keyboard shown is a numeric keypad. This keypad includes number keys 0 to 9, as well as a delete key and a confirm key.

[0048] In a straightforward manner, the target key in step S122 refers to the key corresponding to the user-preset password on the visual stimulation EEG spelling keyboard.

[0049] In step S122, each user should delete the character in the current position when looking at the delete key on the visual stimulation EEG spelling keyboard, and complete the password input when looking at the confirmation key.

[0050] In step S122, the locations for acquiring EEG signals include the locations Pz, PO5, PO3, Poz, PO4, PO6, O1, Oz, and O2 in the occipital region corresponding to the visual cortex.

[0051] In step S122, for each target key, multiple visual stimuli are performed on each user to obtain the EEG signal of the target key. The number of EEG signals corresponding to each input character is collected for each trial, for example, m trials.

[0052] In step S122, the collected EEG signals are those of the user in their standard physiological state, i.e., the user is sitting quietly in front of the computer screen, facing the screen at eye level, and looking at the visual keyboard presented in the center area of ​​the screen. The lighting in the collection environment should be moderate. By collecting the EEG signals of the user in their standard physiological state in the user EEG template library construction section, the non-coerciveness of the user identification process can be guaranteed.

[0053] In step S123, the specific method for obtaining the EEG signal template for each user includes: downsampling the collected EEG signal of the user; using a filter bank to extract multiple frequency bands from the sampled EEG signal; constructing a spatial filter for the user based on the EEG signal of each frequency band; filtering the EEG signal of each frequency band through the constructed spatial filter, and then fusing the filtered EEG signals to obtain the EEG signal template of the user.

[0054] In some embodiments, downsampling can be performed, for example, by downsampling the original EEG signal from 1000 Hz to 250 Hz.

[0055] In some embodiments, the multiple frequency bands captured may be, for example, five frequency bands: 6 to 18 Hz, 14 to 26 Hz, 22 to 34 Hz, 30 to 42 Hz, and 38 to 50 Hz.

[0056] In some embodiments, constructing a spatial filter for the user based on the EEG signal of each frequency band includes: constructing the user's spatial filter using an event-related component analysis algorithm for the EEG signal of each frequency band.

[0057] In some embodiments, the EEG signals of each frequency band are filtered by a constructed spatial filter, and then the filtered EEG signals are fused to obtain the EEG signal template of the user. This includes: filtering the EEG signals of each frequency band by a spatial filter, fusing the EEG signals of m trials to obtain the EEG signal template of the user; and forming a user EEG template library by combining the obtained spatial filter and EEG signal template of each user.

[0058] In some embodiments, the user's account and corresponding password preset in step S11 can also be stored in the user's EEG template library.

[0059] Step S13: Obtain the account of the test user.

[0060] In step S13, the subject's account is used to declare the subject's own identity.

[0061] Step S14: Obtain the target password entered by the subject using the visual stimulation EEG spelling keyboard and the target EEG signal when entering the target password.

[0062] In an easy-to-understand way, the test subjects used a visual stimulation EEG spelling keyboard to spell out a password. The target password in step S14 is the password that the test subjects entered by looking at the visual stimulation EEG spelling keyboard when performing identity authentication.

[0063] In step S14, the acquisition location of the target EEG signal is the same as in step S12, that is, the acquisition location of the target EEG signal includes the Pz, PO5, PO3, Poz, PO4, PO6, O1, Oz, and O2 locations in the occipital region corresponding to the visual cortex.

[0064] In step S14, the subject is subjected to multiple visual stimuli to obtain the target EEG signals corresponding to different target keys. The number of trials for the target EEG signals corresponding to each target key can be the same as the number of trials in step S12.

[0065] Step S15: Based on the preset password corresponding to the target password and the subject's account, and the target EEG signal and the subject's EEG signal template in the user EEG template library, determine whether the identity authentication is successful.

[0066] In step S15, based on the target password corresponding to the preset password of the subject's account and the target EEG signal matching the subject's EEG signal template in the user's EEG template library, it is determined whether the identity authentication is successful, including: determining whether the target password is the preset password corresponding to the subject's account (step S151); determining whether the target EEG signal matches the subject's EEG signal template in the user's EEG template library (step S152); if the target password is the preset password corresponding to the subject's account and the target EEG signal matches the subject's EEG signal template in the user's EEG template library, then the identity authentication is successful (step S153).

[0067] In step S151, as Figure 2 As shown, user password verification is performed. If the target password is the preset password corresponding to the test user's account, the verification is true and the password is correct.

[0068] In some embodiments, steps S151 and S152 can be performed simultaneously.

[0069] In some embodiments, step S151 can be executed first, and step S152 can be executed only if the target password in step S151 is the preset password corresponding to the subject's account. Figure 2 As shown, if the verification in step S151 is true, the algorithm matching in step S152 is performed on the collected target EEG signal.

[0070] In step S152, determining whether the target EEG signal matches the subject's EEG signal template in the user's EEG template library includes: extracting the spatial filter and EEG signal template corresponding to the subject's account in the user's EEG template library; spatially filtering the acquired target EEG signal through the extracted spatial filter to obtain a filtered EEG signal; fusing all filtered EEG signals in different frequency bands and performing algorithmic matching with the extracted EEG signal template to obtain the matching results for each frequency band; obtaining the total matching result based on the matching results of all frequency bands; if the total matching result is higher than the matching threshold, then the target EEG signal matches the subject's EEG signal template in the user's EEG template library.

[0071] In some embodiments, the process of fusing all filtered EEG signals from different frequency bands and matching them with an extracted EEG signal template using an algorithm includes: fusing all filtered EEG signals from different frequency bands in m trials and matching them with an extracted EEG signal template using an algorithm.

[0072] In step S152, the total matching result is obtained based on the matching results of all frequency bands, including: weighted summation of the matching results of all frequency bands to obtain the total matching result.

[0073] In some embodiments, such as Figure 2As shown, after the algorithm performs matching, the authenticity of the matching result is determined. Specifically, the total matching result is compared with the matching threshold. If the total matching result is greater than or equal to the matching threshold, it is considered true, and the authentication is successful (i.e., passed). The test user is the user declared in the user's EEG template library, and the test user obtains user privileges. If the total matching result is lower than the matching threshold, it is considered false, and the test user is not the user declared in the user's EEG template library, and the authentication fails.

[0074] In some embodiments, the weighting values ​​are, for example, 1.25, 0.6704, 0.5033, 0.4268, and 0.3837, and the corresponding matching threshold is 1.1.

[0075] To verify the above-mentioned two-factor authentication method based on brainwave spelling password, an experiment was conducted, and the experimental procedure is as follows:

[0076] The specific operation process for constructing the user EEG template library is as follows:

[0077] The experimental instruments used were Neuroscan, SynAmps2 amplifier or other types of EEG acquisition devices, which continuously recorded EEG signals in the occipital region (POz, PO3, PO4, PO5, PO6, Oz, O1, O2).

[0078] 1. Using the MATLAB toolbox psychtoolbox 3.0, a 60Hz refresh rate LCD monitor was used to present stimuli, with a virtual 12-target keyboard displayed on the screen.

[0079] 2. According to the user template library construction part of the two-factor authentication method based on EEG spelling password provided in this embodiment, a user EEG template library with a sample capacity of 10 people is constructed. Specifically, during downsampling, the original EEG signal is downsampled from 1000Hz to 250Hz. Five frequency bands are extracted: 6-18Hz, 14-26Hz, 22-34Hz, 30-42Hz, and 38-50Hz.

[0080] The specific steps for identity verification are as follows:

[0081] 1. Randomly select 7 people from the user template library. During the test, the test subjects are required to identify themselves and others, which are referred to as identity verification and unauthorized intrusion, respectively.

[0082] 2. Each subject's EEG data was collected during the process of spelling out a 6-digit numeric password once.

[0083] 3. Repeat the above process multiple times to verify the results. If the system output is consistent with the actual situation, it is considered correct; otherwise, it is incorrect. Calculate the accuracy rate. The statistical results are shown in Table 1.

[0084] Table 1: Statistical Results of Dual Authentication

[0085] Sample No. 1 97％ 100％ Sample No. 2 98.74％ 100％ Sample No. 3 96.35％ 100％ Sample No. 4 97.32％ 100％ Sample No. 5 98.3％ 100％ Sample No. 6 100％ 100％ Sample No. 7 95.3％ 100％

[0086] As can be seen from Table 1, the two-factor authentication method based on EEG spelling password provided in this embodiment has a very good overall verification effect, with a verification accuracy rate of over 95%, and 100% rejection of unauthorized intrusion.

[0087] In the two tests above: in step 230, the weighting values ​​are 1.25, 0.6704, 0.5033, 0.4268, and 0.3837; in step 300, the matching threshold is 1.1.

[0088] The data length used in the above results is 7.2 seconds, corresponding to 6 number inputs. It can be seen that the two-factor authentication method based on EEG spelling password provided in this embodiment of the present disclosure has a significantly improved recognition speed compared with other EEG identity recognition methods.

[0089] In the two-factor authentication method based on EEG spelling password in this embodiment, multiple user accounts and corresponding passwords are preset; a user EEG template library is constructed, which includes EEG signal templates for all users, wherein each user's EEG signal template is obtained based on the EEG signal when the user fixates on each target key on a visually stimulated EEG spelling keyboard; the user's account is obtained; the target password entered by the user using the visually stimulated EEG spelling keyboard and the target EEG signal when entering the target password are obtained; based on the target password and the preset password corresponding to the user's account, and the target EEG signal and the user's EEG signal template in the user EEG template library, the authentication is determined to be successful. In this case, by using EEG to freely spell user passwords and using dual authentication through password and obtained EEG signals, the authentication speed is improved and the authentication security is enhanced. Specifically, the two-factor authentication method disclosed herein comprises a user EEG template library construction section and an EEG authentication section. The user EEG template library construction section includes: presenting a visual stimulus EEG spelling keyboard, collecting the EEG signals of the subject user when looking at each target key, and generating an EEG signal template corresponding to the subject user using the EEG signals. The authentication section includes: the subject user declaring their identity, inputting a target password using the EEG spelling keyboard, collecting the target EEG signals of the subject user during the above process, verifying the correctness of the user's password, matching and verifying the subject user's target EEG signals with the templates in the user EEG template library, and determining whether the subject user is the user they declared in the user template library based on the password verification result and the EEG verification result. In this case, based on EEG spelling combined with a password, the user can perform identity authentication while engaging in brain-computer interaction, which not only improves performance but also ensures the security of the interaction content by adding identity authentication during the brain-computer interaction process. The two-factor authentication method disclosed herein has multiple beneficial effects. Specifically, it is based on visual stimulation, requires less behavioral input from the user, and is very quick; the user only needs to sit still in front of the screen and move their gaze to quickly identify the result. Compared with existing EEG authentication methods, this method combines knowledge and signals, improving security while achieving higher accuracy and faster recognition speed. By collecting EEG signals of users under standard physiological conditions during the user template library construction, the non-coercive nature of the user identification process can be guaranteed. The combination of event-related component analysis (ERA) algorithm and spatial filtering method with filter banks effectively improves the signal differences between users with low computational cost, which is of great significance for realizing real-time online systems.

[0090] The following are embodiments of the apparatus disclosed herein, which can be used to execute embodiments of the method disclosed herein. For details not disclosed in the apparatus embodiments of this disclosure, please refer to the embodiments of the method disclosed herein.

[0091] Please see Figure 4 , Figure 4 This diagram illustrates a block diagram of a two-factor authentication device based on EEG spelling password provided in an embodiment of this disclosure. This two-factor authentication device based on EEG spelling password can be implemented as all or part of a system through software, hardware, or a combination of both. The two-factor authentication device based on EEG spelling password in this embodiment can be simply referred to as an energy storage system configuration device. The two-factor authentication device 10 based on EEG spelling password includes a preset module 11, a construction module 12, a first acquisition module 13, a second acquisition module 14, and an authentication module 15, wherein:

[0092] Preset module 11 is used to preset the accounts and corresponding passwords of multiple users;

[0093] Module 12 is used to build a user EEG template library, which includes EEG signal templates of all users, wherein each user's EEG signal template is obtained based on the EEG signal of that user when gazing at each target key in the visual stimulation EEG spelling keyboard;

[0094] The first acquisition module 13 is used to acquire the account of the test user;

[0095] The second acquisition module 14 is used to acquire the target password input by the subject using the visual stimulation EEG spelling keyboard and the target EEG signal when the target password is input.

[0096] The authentication module 15 is used to determine whether the identity authentication is successful based on the preset password corresponding to the target password and the subject's account, and the target EEG signal and the subject's EEG signal template in the user's EEG template library.

[0097] Optionally, the acquisition locations of the acquired EEG signals include the Pz, PO5, PO3, Poz, PO4, PO6, O1, Oz, and O2 locations in the occipital region corresponding to the visual cortex.

[0098] Optionally, the construction module 12 is specifically used for: downsampling the collected EEG signal of the user; extracting multiple frequency bands from the sampled EEG signal using a filter bank; constructing a spatial filter for the user based on the EEG signal of each frequency band; filtering the EEG signal of each frequency band through the constructed spatial filter, and then fusing the filtered EEG signals to obtain the EEG signal template of the user.

[0099] Optionally, the authentication module 15 is specifically used to: determine whether the target password is the preset password corresponding to the subject's account; determine whether the target EEG signal matches the subject's EEG signal template in the user's EEG template library; if the target password is the preset password corresponding to the subject's account and the target EEG signal matches the subject's EEG signal template in the user's EEG template library, then the identity authentication is successful.

[0100] Optionally, the authentication module 15 is specifically used for: extracting the spatial filter and EEG signal template corresponding to the subject's account in the user's EEG template library; spatially filtering the acquired target EEG signal through the extracted spatial filter to obtain a filtered EEG signal; fusing all filtered EEG signals of different frequency bands and performing algorithmic matching with the extracted EEG signal template to obtain the matching result for each frequency band; obtaining the total matching result based on the matching results of all frequency bands; if the total matching result is higher than the matching threshold, then the target EEG signal matches the subject's EEG signal template in the user's EEG template library.

[0101] Optionally, the total matching result is obtained based on the matching results of all frequency bands, including: weighted summation of the matching results of all frequency bands to obtain the total matching result.

[0102] It should be noted that the two-factor authentication device based on EEG spelling cipher provided in the above embodiments is only illustrated by the division of the functional modules described above when executing the two-factor authentication method based on EEG spelling cipher. In practical applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the two-factor authentication device based on EEG spelling cipher can be divided into different functional modules to complete all or part of the functions described above. In addition, the two-factor authentication device based on EEG spelling cipher provided in the above embodiments and the two-factor authentication method based on EEG spelling cipher are based on the same concept, and the implementation process is detailed in the method embodiments, which will not be repeated here.

[0103] The sequence numbers of the embodiments disclosed above are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0104] In this embodiment of the two-factor authentication device based on EEG spelling password, a preset module is used to preset multiple user accounts and corresponding passwords; a construction module constructs a user EEG template library, which includes EEG signal templates for all users, wherein each user's EEG signal template is obtained based on the EEG signal of that user when fixating on each target key on a visually stimulated EEG spelling keyboard; a first acquisition module acquires the user's account; a second acquisition module acquires the target password entered by the user using the visually stimulated EEG spelling keyboard and the target EEG signal when entering the target password; an authentication module determines whether the authentication is successful based on the target password corresponding to the user's account (preset password), and the target EEG signal corresponding to the user's EEG signal template in the user EEG template library. In this case, by using EEG to freely spell user passwords and employing dual authentication through the password and the obtained EEG signal, the authentication speed is improved and the authentication security is enhanced. Specifically, the two-factor authentication device disclosed herein comprises a user EEG template library construction section and an EEG authentication section. The user EEG template library construction section includes: presenting a visual stimulus EEG spelling keyboard, collecting the EEG signals of the subject user when looking at each target key, and generating an EEG signal template corresponding to the subject user using the EEG signals. The authentication section includes: the subject user declaring their identity, inputting a target password using the EEG spelling keyboard, collecting the target EEG signals of the subject user during the above process, verifying the correctness of the user's password, matching and verifying the subject user's target EEG signals with the templates in the user EEG template library, and determining whether the subject user is the user they declared in the user template library based on the password verification result and the EEG verification result. In this case, based on EEG spelling combined with a password, the user can perform identity authentication while engaging in brain-computer interaction, which not only improves performance but also ensures the security of the interaction content by adding identity authentication during the brain-computer interaction process. The disclosed two-factor authentication device has multiple beneficial effects. Specifically, it is based on visual stimulation, requiring less behavioral input from the user and taking very little time. The user only needs to sit still in front of the screen and move their gaze to quickly identify the result. Compared with existing EEG authentication, this device uses a combination of knowledge and signal, which improves security while achieving higher accuracy and faster recognition speed. By collecting EEG signals of users under standard physiological conditions in the user template library construction section, the non-coercive nature of the user identification process can be guaranteed. The combination of event-related component analysis algorithm and spatial filtering method with filter banks effectively improves the signal differences between users with low computational cost, which is of great significance for realizing real-time online systems.

[0105] According to embodiments of this disclosure, this disclosure also provides a two-factor authentication device based on EEG spelling password, a readable storage medium, and a computer program product.

[0106] Figure 5 This is a block diagram of a brainwave-based two-factor authentication device for implementing the brainwave-based two-factor authentication method according to embodiments of the present disclosure. The brainwave-based two-factor authentication device is intended to represent various forms of digital computers, such as laptops, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframes, and other suitable computers. The brainwave-based two-factor authentication device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable brainwave-based two-factor authentication devices, and other similar computing devices. The components, connections and relationships between components, and functions shown in this disclosure are merely illustrative and are not intended to limit the implementation of the present disclosure as described and / or claimed herein.

[0107] like Figure 5 As shown, the two-factor authentication device 20 based on EEG spelling password includes a computing unit 21, which can perform various appropriate actions and processes according to a computer program stored in read-only memory (ROM) 22 or a computer program loaded from storage unit 28 into random access memory (RAM) 23. The RAM 23 may also store various programs and data required for the operation of the two-factor authentication device 20 based on EEG spelling password. The computing unit 21, ROM 22, and RAM 23 are interconnected via bus 24. Input / output (I / O) interface 25 is also connected to bus 24.

[0108] The two-factor authentication device 20 based on brainwave spelling passwords has multiple components connected to an I / O interface 25, including: an input unit 26, such as a keyboard or mouse; an output unit 27, such as various types of displays or speakers; a storage unit 28, such as a disk or optical disk, which is communicatively connected to a computing unit 21; and a communication unit 29, such as a network interface card (NIC), modem, or wireless transceiver. The communication unit 29 allows the two-factor authentication device 20 based on brainwave spelling passwords to exchange information / data with other two-factor authentication devices based on brainwave spelling passwords through computer networks such as the Internet and / or various telecommunications networks.

[0109] The computing unit 21 can be various general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of the computing unit 21 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various computing units running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. The computing unit 21 performs the various methods and processes described above, such as performing a two-factor authentication method based on EEG spelling ciphers. For example, in some embodiments, the two-factor authentication method based on EEG spelling ciphers can be implemented as a computer software program tangibly contained in a machine-readable medium, such as storage unit 28. In some embodiments, part or all of the computer program can be loaded and / or installed on the two-factor authentication device 20 based on EEG spelling ciphers via ROM 22 and / or communication unit 29. When the computer program is loaded into RAM 23 and executed by the computing unit 21, one or more steps of the two-factor authentication method based on EEG spelling ciphers described above can be performed. Alternatively, in other embodiments, computing unit 21 may be configured by any other suitable means (e.g., by means of firmware) to perform a two-factor authentication method based on EEG spelling password.

[0110] Various embodiments of the systems and techniques described above in this disclosure can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), two-factor authentication devices (CPLDs) based on brainwave spelling ciphers with programmable logic, computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0111] The program code used to implement the methods of this disclosure may be written in any combination of one or more programming languages. This program code may be provided to a processor or controller of a general-purpose computer, special-purpose computer, or other programmable data processing apparatus, such that when executed by the processor or controller, the program code causes the functions / operations specified in the flowcharts and / or block diagrams to be implemented. The program code may be executed entirely on a machine, partially on a machine, as a standalone software package partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0112] In this disclosure, a machine-readable medium can be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, apparatus, or EEG-based two-factor authentication device. The machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. Machine-readable media can be, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatuses, or EEG-based two-factor authentication devices, or any suitable combination of the foregoing. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage for EEG-based two-factor authentication devices, magnetic storage for EEG-based two-factor authentication devices, or any suitable combination of the foregoing.

[0113] To provide interaction with a user, the systems and techniques described herein can be implemented on a computer having: a display device for displaying information to the user (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor); and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the computer. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0114] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or middleware components (e.g., application servers), or frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), the Internet, and blockchain networks.

[0115] Computer systems can include clients and servers. Clients and servers are generally geographically separated and typically interact via communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. A server can be a cloud server, also known as a cloud computing server or cloud host, a hosting product within the cloud computing service ecosystem, addressing the shortcomings of traditional physical hosts and VPS (Virtual Private Server, or simply "VPS") services, such as high management difficulty and weak business scalability. Servers can also be servers for distributed systems or servers incorporating blockchain technology.

[0116] The embodiments of this disclosure have been described in detail above with reference to the accompanying drawings. It should be noted that implementations not illustrated or described in the drawings or the main text of the specification are forms known to those skilled in the art and are not described in detail. Furthermore, the definitions of the various elements and methods described above are not limited to the specific structures, shapes, or methods mentioned in the embodiments, and those skilled in the art can easily modify or substitute them.

[0117] Based on the above description, those skilled in the art should have a clear understanding of the two-factor authentication method based on EEG spelling password provided in this disclosure.

[0118] In summary, the two-factor authentication method based on EEG spelling password provided in this disclosure combines knowledge with EEG signals. It collects the EEG signals of the test users when they spell the password, and authenticates the test users' identities based on the two-factor authentication of the password and EEG signals. This improves the difference in EEG signals between users and effectively increases the speed and accuracy of recognition.

[0119] It should also be noted that directional terms mentioned in the embodiments, such as "up," "down," "front," "back," "left," and "right," are only for reference to the directions in the accompanying drawings and are not intended to limit the scope of protection of this disclosure. Throughout the drawings, the same elements are represented by the same or similar reference numerals. Conventional structures or constructions will be omitted where they may cause confusion in understanding this disclosure. Furthermore, the shapes and dimensions of the components in the drawings do not reflect actual size and proportion, but only illustrate the content of the embodiments of this disclosure. In addition, any reference signs placed between parentheses in the claims should not be construed as limiting the claims.

[0120] Similarly, it should be understood that, in order to simplify this disclosure and aid in understanding one or more of the various inventive aspects, in the foregoing description of exemplary embodiments of this disclosure, various features of this disclosure are sometimes grouped together in a single embodiment, figure, or description thereof. However, this approach to disclosure should not be construed as reflecting an intention that the claimed disclosure requires more features than are expressly recited in each claim. Rather, as reflected in the preceding claims, inventive aspects lie in fewer than all features of a single embodiment of the foregoing invention. Therefore, the claims following the detailed description are hereby expressly incorporated into that detailed description, wherein each claim itself is a separate embodiment of this disclosure.

[0121] It should be understood that the various forms of processes shown above can be used to rearrange, add, or delete steps. For example, the steps described in this disclosure can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution disclosed in this disclosure can be achieved, and this disclosure does not impose any limitations herein.

[0122] The specific embodiments described above do not constitute a limitation on the scope of protection of this disclosure. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this disclosure should be included within the scope of protection of this disclosure.

Claims

1. A two-factor identity authentication method based on electroencephalogram spelling password, characterized in that, include: Multiple user accounts and corresponding passwords can be preset; A user EEG template library is constructed, comprising EEG signal templates for all users. Each user's EEG signal template is obtained based on the user's EEG signals when fixating on each target key in a visually stimulated EEG spelling keyboard. The construction of the user EEG template library includes: presenting a visually stimulated EEG spelling keyboard; collecting EEG signals when each user fixates on each target key in the visually stimulated EEG spelling keyboard; and generating an EEG signal template corresponding to each user using all the collected EEG signals, thereby obtaining the user EEG template library. Obtain the accounts of the test users; Acquire the target password input by the subject using the visual stimulation EEG spelling keyboard and the target EEG signal when the target password is input; Based on the target password and the preset password corresponding to the subject's account, and the target EEG signal and the subject's EEG signal template in the user's EEG template library, the method determines whether the identity authentication is successful, including: determining whether the target password is the preset password corresponding to the subject's account; extracting the spatial filter and EEG signal template corresponding to the subject's account in the user's EEG template library; performing spatial filtering on the obtained target EEG signal through the extracted spatial filter to obtain a filtered EEG signal; fusing all filtered EEG signals of different frequency bands and performing algorithmic matching with the extracted EEG signal template to obtain matching results for each frequency band; obtaining a total matching result based on the matching results of all frequency bands; if the total matching result is higher than the matching threshold, then the target EEG signal matches the subject's EEG signal template in the user's EEG template library; if the target password is the preset password corresponding to the subject's account and the target EEG signal matches the subject's EEG signal template in the user's EEG template library, then the identity authentication is successful.

2. The two-factor authentication method based on EEG spelling password as described in claim 1, characterized in that, The overall matching result obtained based on the matching results of all frequency bands includes: The matching results of all frequency bands are weighted and summed to obtain the total matching result.

3. The two-factor authentication method based on EEG spelling password as described in claim 2, characterized in that, The method for obtaining the EEG signal template for each user includes: The collected EEG signals of the user were downsampled. Multiple frequency bands are extracted from the sampled and processed EEG signal using a filter bank; A spatial filter for the user is constructed based on the EEG signals of each frequency band; The EEG signals of each frequency band are filtered by a constructed spatial filter, and then the filtered EEG signals are fused to obtain the EEG signal template of the user.

4. The two-factor authentication method based on EEG spelling password as described in claim 3, characterized in that, The acquisition locations of the EEG signals include Pz, PO5, PO3, Poz, PO4, PO6, O1, Oz, and O2 locations in the occipital region corresponding to the visual cortex.

5. A two-factor authentication device based on brainwave spelling password, characterized in that, include: The preset module is used to preset accounts and corresponding passwords for multiple users; A construction module is used to build a user EEG template library, which includes EEG signal templates for all users. Each user's EEG signal template is obtained based on the user's EEG signals when fixating on each target key in a visually stimulated EEG spelling keyboard. The construction of the user EEG template library includes: presenting a visually stimulated EEG spelling keyboard; collecting EEG signals when each user fixates on each target key in the visually stimulated EEG spelling keyboard; generating an EEG signal template corresponding to each user using all the collected EEG signals of each user, thereby obtaining the user EEG template library. The first acquisition module is used to acquire the accounts of the test users; The second acquisition module is used to acquire the target password input by the subject using the visual stimulation EEG spelling keyboard and the target EEG signal when the target password is input. The authentication module is used to determine whether the identity authentication is successful based on the preset password corresponding to the target password and the subject user's account, and the target EEG signal and the subject user's EEG signal template in the user EEG template library. The authentication module is specifically used for: Determine whether the target password is a preset password corresponding to the subject user's account; Determine whether the target EEG signal matches the EEG signal template of the subject user in the user EEG template library; If the target password is the preset password corresponding to the subject's account and the target EEG signal matches the subject's EEG signal template in the user's EEG template library, then the identity authentication is successful. The authentication module is specifically used for: Extract the spatial filter and EEG signal template corresponding to the subject's account in the user EEG template library; The acquired target EEG signal is spatially filtered through the extracted spatial filter to obtain a filtered EEG signal. All filtered EEG signals in different frequency bands are fused and matched with the extracted EEG signal template to obtain the matching results for each frequency band. A total matching result is obtained based on the matching results of all frequency bands. If the total matching result is higher than the matching threshold, the target EEG signal is matched with the EEG signal template of the subject user in the user EEG template library.

6. A two-factor authentication device based on brainwave spelling password, characterized in that, include: At least one processor; And a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to perform the two-factor authentication method based on EEG spelling password as described in any one of claims 1-4.

Images