Secure login method through face recognition
By replacing U-key password input with facial recognition technology, the problem of U-key password being simple and easy to steal, cumbersome input and inability to distinguish the user's real identity is solved, achieving higher login convenience and security.
Patent Information
- Application Number
- CN202411697616.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-26
- Publication Date
- 2025-03-14
AI Technical Summary
The existing U-key password input method has the problem of simple passwords being stolen, cumbersome input, and inability to identify the user's real identity, resulting in insufficient security and convenience.
Face recognition technology instead of manually entering the U-key password, the camera is used to identify the user's face information and compare it with the bound user account to achieve secure login.
Improve the convenience and security of login, and users can set more complex U-key passwords, reduce the risk of password stolen, and record user's facial information through logs to ensure that responsibilities are clearly divided.
Smart Images
Figure CN119622692A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to a login method, and in particular to a secure login method through face recognition. Background Art
[0002] With the gradual deepening of the application of Internet business systems, some enterprises (such as power, communications and other enterprises) have increasingly prominent issues regarding the security protection of online information and business systems. In order to ensure the safe operation of network platforms and system platforms, these enterprises urgently need to do a good job in login security identity authentication, which gave birth to U-key. After the user inserts the U-key into the computer, the Windows system will identify the U-key. Since the U-key manufacturer and the Windows system have signed a long-term agreement, the Windows system will read the user name corresponding to the U-key, and the user will enter the U-key password that has been obtained. When the obtained user name matches the password entered by the user, the user can access the computer's application system authentication, business system authentication, enterprise intranet authentication, enterprise OA authentication, industry private network authentication, email encryption, digital signature, digital certificate, data signature, file, hard disk encryption data and other related permissions.
[0003] Of course, the U-key administrator can associate the U-key with one or more of the following according to the actual situation: application system authentication, business system authentication, enterprise intranet authentication, enterprise OA authentication, industry private network authentication, email encryption, digital signature, digital certificate, data signature, file, hard disk encryption data, etc. That is, when the user name and the password entered by the user match, the associated content can be unlocked, and the unassociated content can be accessed normally by just logging into the Windows system. For example, if the music player software is not associated with the U-key, then no matter whether it passes the U-key verification or not, as long as the user logs in through the Windows system verification, the music player software can be accessed normally.
[0004] In the actual process, since the above-mentioned application system authentication, business system authentication, enterprise intranet authentication, enterprise OA authentication, industry private network authentication, email encryption, digital signature, digital certificate, data signature, file, and hard disk encryption data can be associated with U-key, when the password of U-key is entered correctly, the associated content (such as software / system) can be accessed normally. On the contrary, when the password of U-key is entered incorrectly, the associated content (such as software / system) cannot be accessed. Of course, after the Windows system verification login is passed, other software / systems other than the above-mentioned content (such as software / system) associated with U-key can be accessed normally.
[0005] In view of this, the demand for U-key is indispensable for some enterprises (for example, electricity, communications, etc.).
[0006] However, during the use of these enterprise employees, it was gradually discovered that the method of using U-key to enter passwords would have at least the following problems:
[0007] 1. The U-key password is useless. When a user uses a computer with a Windows system, the computer will lock the screen as long as the computer is not in continuous use (for example, after leaving the workstation for a period of time). As a result, after entering the Windows system again, the user must enter the U-key password to unlock the associated content. Therefore, the user will set a simpler U-key password. For example, the user will set the U-key password to "123456", "000000", "111111" or some special days or the pinyin of the user's name, etc. In this case, the U-key password can be easily known by other personnel / users. After knowing the U-key password, other personnel / users can log in to the computer of the person / user, unlock the associated content, enter some associated content, and obtain associated information. When problems arise later, it is impossible to clarify responsibilities.
[0008] 2. It is troublesome to input the U-key password. Since the U-key password must be entered every time you log in, the process is very cumbersome and inconvenient for users. It will reduce the work enthusiasm of employees to a certain extent and is prone to the above-mentioned problems.
[0009] 3. Since the U-key password cannot identify the real identity of the user, anyone who knows the password can log in. If the computer user believes that his password has been obtained by other users and has caused a series of security problems, there is no definite evidence to show whether it is the computer user or other person who logged in, which makes it difficult to divide the responsibilities and there is a certain degree of unfairness.
[0010] In view of the above-mentioned disadvantages of manually inputting the U-key password by the user, it is necessary to develop a method of replacing the manual input of the U-key password by face recognition. Summary of the invention
[0011] The purpose of the present invention is to provide a secure login method through face recognition to solve the problems existing in the prior art.
[0012] According to one aspect of the present invention, there is provided a method for secure login through face recognition, comprising the following steps: S1. Face registration process: S101. Binding a user account, password and face features of a smart card;
[0013] S2. Face recognition secure login process:
[0014] S201. The camera recognizes the facial information of the current operating user and compares it with the built-in algorithm of the camera. After the comparison is successful, the user account bound to the facial information of the current operating user in step S101 is obtained.
[0015] If the comparison fails, the login is terminated and recorded;
[0016] Step S202, after the comparison is successful, the obtained user account is matched with the user account of the smart card currently connected to the computer. If the match is successful, the password is entered on behalf of the user. If the match fails, the login is terminated and recorded.
[0017] In some embodiments, a pre-installation step is further included, which includes the user turning on the computer. After turning on the computer, firstly, it is detected whether the smart card and the camera have been installed. If the smart card and / or the camera are not installed, a prompt message is given, and the prompt message may be: Your smart card and / or the camera are not installed, please check! At this time, the login will be terminated. When it is detected that the smart card and the camera have been installed, step S201 will be started.
[0018] In some implementations, the camera is a binocular camera, through which a stereoscopic image can be acquired, and liveness detection can be performed on the current operating user.
[0019] In some embodiments, during step S2, a log is generated, which records the face image of the current operating user and the corresponding time. When the user's computer is in a locked screen state (or enters the login interface state after booting up), during the re-login process, the camera will recognize the face information of the current operating user in real time, take a picture of the face information, and record it. At the same time, there will be a corresponding time. In this way, it is convenient for users to know that other users are in front of the computer and want to log in to the computer. Information security can be guaranteed to a certain extent, and the corresponding responsible person can be found when problems arise later.
[0020] In some implementations, the smart card is a U-Key, which is a common hardware device with a USB interface. The U-Key has a built-in single-chip microcomputer or smart card chip and a certain storage space, which can store the user's private key and digital certificate. The U-Key is a common hardware device, and the Windows system will identify the U-Key. Since the U-Key manufacturer and the Windows system have signed a long-term agreement, the Windows system will read the user name corresponding to the U-Key.
[0021] In some embodiments, the present invention further includes the following step S203: when the user has successfully logged into the computer, during the use process, the camera recognizes the facial information of the current operating user at intervals and performs a comparison. When the facial information of the current operating user is recognized three times in a row and the comparison fails, the associated content permissions are closed or the login interface or the screen is returned to the lock screen. At this time, the feedback is that the current user is not the owner of the computer. When the screen is locked, it will be recorded through the log. In this way, when a user lends a computer to other users, the associated content permissions will be automatically closed or the login interface will be returned after a period of time. It allows users to develop good usage habits and process associated file information on their own computers to prevent information leakage caused by using other people's computers and situations that cannot be clarified.
[0022] In some embodiments, the interval time for the camera to recognize the facial information of the current operating user is three minutes. In this way, when a user lends the computer to other users, after nine minutes, the application software permissions will be automatically closed or the login interface will be returned. Of course, in other embodiments, the interval time for the camera to recognize the facial information of the current operating user can also be four minutes, and the interval time can be adjusted according to actual conditions, and three consecutive times can also be set to four consecutive times, or other times. In addition, in other embodiments, this function can also be adjusted according to different user situations, such as: this function can be turned off.
[0023] In some implementations, the computer system is a Windows system, and the Windows system can directly obtain the user name information of the U-Key.
[0024] The beneficial effects of the present invention are as follows:
[0025] 1. Use face recognition instead of manually entering the U-Key password. Compared with manually entering the U-Key password, face recognition login is simple and fast.
[0026] 2. Compared with manually entering the U-Key password, since you can log in through face recognition, you can set the U-Key password to be more complex. Other users or personnel cannot know it or cannot remember it after knowing it. Other users or personnel basically cannot log in to the computer with the U-Key password. This can reduce or avoid the problem of other users or personnel knowing the U-Key password due to a simple password, logging in to the computer's associated permissions, and further causing losses.
[0027] 3. Compared with manually entering the U-Key password, the method of the present application will generate a log. The log can record the picture and the corresponding time after the camera recognizes the facial information of the current operating user and takes a picture of the facial information. When other users or personnel want to log in to the computer's associated permissions, the camera will take a picture of the facial information and record it to facilitate users to judge the situation of their own computers.
[0028] 4. Compared with manually entering the U-Key password, this application can also determine whether it is the person who is using it continuously through continuous face recognition and detection during use. If it is not the person who is using it continuously, the computer will lock the associated permissions again, making it impossible for the user to continue using it, which can prevent the leakage of associated information. To a certain extent, it can cultivate employees to use their own computers to complete related business, not to use other people's computers, and prevent problems with the company's related business caused by computer usage problems.
[0029] 5. In addition, since the facial information of the person logging in will be recorded in the log of this application, when the user of the computer believes that his password has been obtained by someone and a series of security problems have occurred, the log can clearly indicate whether it is the computer user. The division of responsibilities is clear, and there will be no situation where it is impossible to clearly indicate whether it is the computer user or other person logging in when logging in with a password. BRIEF DESCRIPTION OF THE DRAWINGS
[0030] Figure 1 The present invention is a flowchart of a method for secure login through face recognition according to an embodiment of the present invention. DETAILED DESCRIPTION
[0031] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0032] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art of the present invention. The terms used herein in the specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. The term "and / or" used herein includes any and all combinations of one or more related listed items.
[0033] Figure 1 The schematic diagram shows the process of a secure login method through face recognition according to an embodiment of the present invention.
[0034] like Figure 1 As shown, a method for secure login through face recognition includes the following steps: S1. Face registration process: S101. Binding the user account, password and face features of the smart card;
[0035] The above steps can be performed as follows: first, the user account of the smart card is obtained, the user enters the corresponding password, and then the camera obtains the facial feature information and binds the facial feature information with the user's account and password.
[0036] It can also be done in the following way: first, the camera obtains the facial feature information, then the computer system obtains the user account of the smart card, the user enters the corresponding password, and then the facial feature information is bound to the user's account and password.
[0037] The sequence of the above-mentioned specific binding process can be limited according to actual conditions. The present invention does not limit the specific steps, as long as the process of binding the user account, password and facial features is completed.
[0038] Of course, the above face binding process is as follows: the driver is initialized, and after the camera obtains the facial feature information and the user account and password, the driver binds the facial feature information and the user account and password. (For example: after obtaining the user name and entering the password, the face recognition prompt is prompted, and then the binding is performed)
[0039] S2. Face recognition secure login process:
[0040] S201. The camera recognizes the facial information of the current operating user and compares it with the built-in algorithm of the camera. After the comparison is successful, the user account bound to the facial information of the current operating user in step S101 is obtained.
[0041] If the comparison fails, the login will be terminated and recorded; (Here, the comparison failure means that the camera recognizes the facial information of the current operating user and has not been bound to the corresponding account and password)
[0042] Step S202, after the comparison is successful, the obtained user account is matched with the user account of the smart card currently connected to the computer. If the match is successful, the password is entered on behalf of the user. If the match fails, the login is terminated and recorded.
[0043] In the above step S201, the pre-step also includes the user turning on the computer. After turning on the computer, firstly, it is detected whether the smart card and the camera have been installed. If the smart card and / or the camera are not installed, a prompt message is given, and the prompt message may be: Your smart card and / or the camera are not installed, please check! At this time, the login will be terminated. When it is detected that the smart card and the camera have been installed, step S201 will be started.
[0044] In addition, in the matching process of step S202 above, if the matching fails, a prompt may be given, and the prompt message may be: Your face recognition failed, please try again! At this time, the login will be terminated. If the matching is successful, after the user enters the password on behalf of the user, the user will automatically log in to the desktop of the computer system.
[0045] Of course, during use, if the smart card and / or camera are pulled out or disconnected from the computer interface, the computer will be locked in real time until the smart card and camera are reconnected to the computer, the above step S201 is performed again, and the computer system desktop is automatically logged in again.
[0046] In this embodiment, the camera is a binocular camera, through which a stereoscopic image can be acquired, and liveness detection can be performed on the current operating user.
[0047] In this embodiment, during step S2, a log will be generated, which will record the face image of the current operating user and the corresponding time. When the user's computer is in the lock screen state (or enters the login interface state after booting up), during the re-login process, the camera will recognize the facial information of the current operating user in real time, take a photo of the facial information, and record it. While recording, there will be a corresponding time. In this way, it is convenient for users to know that other users are in front of the computer and want to log in to the computer. Information security can be guaranteed to a certain extent, and the corresponding responsible person can be found when problems arise later.
[0048] In this embodiment, the smart card is U-Key, which is a common hardware device with a USB interface. U-Key has a built-in single-chip microcomputer or smart card chip and a certain storage space, which can store the user's private key and digital certificate. U-Key is a common hardware device, and the Windows system will identify the U-key. Since the U-key manufacturer and the Windows system have signed a long-term agreement, the Windows system will read the user name corresponding to the U-key.
[0049] like Figure 1As shown, in this embodiment, the present invention also includes the following step S203: when the user has successfully logged into the computer, during the use process, the camera recognizes the facial information of the current operating user at intervals and compares it. When the facial information of the current operating user is recognized three times in a row, it is compared and matched with the user account of the smart card (i.e., step S201 and step S202 are performed). After all the comparisons or matches fail, the associated content permissions are closed or the login interface or the screen is locked. At this time, the feedback is that the current user is not the owner of the machine. When the screen is locked, it will be recorded through the log. In this way, when a user lends a computer to other users, after a period of time, the associated content permissions will be automatically closed or the login interface will be returned. It allows users to develop good usage habits and process associated file information on their own computers to prevent information leakage caused by using other people's computers and situations that cannot be clarified.
[0050] Of course, if facial information is not recognized for three consecutive times, the associated content permissions will be closed or the screen will be locked, and the feedback will be that there is no one at the current seat.
[0051] In addition, if the facial information of the current operating user is successfully matched at least once out of three consecutive times, there is no subsequent operation. The computer can be used normally.
[0052] The above process of recognizing facial information three times in a row may also be two times in a row or four times in a row, which can be set according to the needs of the user.
[0053] Specifically, in this embodiment, the interval time for the camera to recognize the facial information of the current operating user is three minutes. In this way, when a user lends the computer to other users, after nine minutes, the application software permissions will be automatically closed or the login interface will be returned. Of course, in other embodiments, the interval time for the camera to recognize the facial information of the current operating user can also be four minutes, and the interval time can be adjusted according to actual conditions, and three consecutive times can also be set to four consecutive times, or other times. In addition, in other embodiments, this function can also be adjusted according to different user situations, such as: this function can be turned off.
[0054] In this embodiment, the computer system is a Windows system, and the Windows system can directly obtain the user name information of the U-Key. Of course, in other embodiments, the computer system can also be other systems. It can be adjusted according to actual conditions.
[0055] In the present invention, facial information can be registered first. After registering facial information, the user can directly use facial information instead of manually entering the U-Key password and unlock associated permissions. The associated permissions can be determined based on the content associated with the U-Key, such as: application system authentication, business system authentication, enterprise intranet authentication, enterprise OA authentication, industry private network authentication, email encryption, digital signature, digital certificate, data signature, file, hard disk encryption data, etc.
[0056] Using face instead of manually entering U-Key password is simple and quick compared to manually entering U-Key password.
[0057] Compared to manually entering the U-Key password, since login can be done through face recognition, the user can set the U-Key password to be more complex. Other users or personnel cannot know the U-Key password or cannot remember the U-Key password after knowing it. Other users or personnel basically cannot log in to the computer with the U-Key password. This can reduce or avoid to a certain extent the problem of other users or personnel knowing the U-Key password due to a simple password, logging into the computer's associated permissions, and further causing losses.
[0058] Compared with manually entering the U-Key password, the method of the present application will generate a log. The log can record the picture and the corresponding time after the camera recognizes the facial information of the current operating user and takes a picture of the facial information. When other users or personnel want to log in to the computer with associated permissions, the camera will take a picture of the facial information and record it to facilitate users to judge the situation of their own computers.
[0059] Compared to manually entering the U-Key password, this application can also determine whether it is the person who is using it continuously through continuous face recognition and detection during use. If it is not the person who is using it continuously, the computer will lock the associated permissions again, preventing the user from continuing to use it, thus preventing the leakage of associated information. To a certain extent, it can cultivate employees to use their own computers to complete related business instead of using other people's computers, thus preventing problems with the company's related business caused by computer usage problems.
[0060] In addition, since the facial information of the person logging in will be recorded in the log of this application, when the user of the computer believes that his password has been obtained by someone and has caused a series of security problems, the log can clearly indicate whether it is the computer user. The division of responsibilities is clear, and there will be no situation where it is impossible to clearly indicate whether it is the computer user or another person logging in when logging in with a password.
[0061] The present invention is not limited to the above-mentioned optional implementation modes. Anyone can derive other various forms of products under the inspiration of the present invention. However, no matter what changes are made in the shape or structure, all technical solutions that fall within the scope defined by the claims of the present invention fall within the protection scope of the present invention.
Claims
1. A secure login method through face recognition, characterized in that: The following steps are involved: S1. Face registration process: S101. Bind the user account, password and facial features of the smart card; S2. Face recognition secure login process: S201. The camera recognizes the facial information of the current operating user and compares it with the built-in algorithm of the camera. After the comparison is successful, the user account bound to the facial information of the current operating user in step S101 is obtained. If the comparison fails, the login is terminated and recorded; Step S202, after the comparison is successful, the obtained user account is matched with the user account of the smart card currently connected to the computer. If the match is successful, the password is entered on behalf of the user. If the match fails, the login is terminated and recorded.
2. The method for secure login through face recognition according to claim 1, characterized in that: It also includes a pre-step, which is: the user turns on the computer, and after turning on the computer, first checks whether the smart card and the camera have been installed. If the smart card and / or the camera are not installed, a prompt will be given, and the login will be terminated. When it is detected that the smart card and the camera have been installed, step S201 will be started.
3. The method for secure login through face recognition according to claim 2, characterized in that: The camera is a binocular camera, and the user account, password and facial features of the smart card are stored in the camera.
4. The method for secure login through face recognition according to claim 3, characterized in that: During step S201, a log is generated, which records the face image of the current operating user and the corresponding time.
5. The method for secure login through face recognition according to claim 4, characterized in that: The smart card is a U-Key.
6. The method for secure login via face recognition according to claim 5, characterized in that: The following step S203 is included: when the user has successfully logged into the computer, during use, the camera identifies the facial information of the current operating user and compares it at regular intervals. When the facial information of the current operating user is identified three times in a row, it is compared and matched respectively. If the comparison or matching fails, the associated content permission is closed or the login interface is returned or the screen is locked. At this time, the feedback is that the current user is not the owner of the machine. When the screen is locked, it will be recorded in the log.
7. The method for secure login through face recognition according to claim 6, characterized in that: The interval time for the camera to recognize the facial information of the current operating user is three minutes.
8. The method for secure login via face recognition according to claim 7, characterized in that: The computer system is Windows system.