Identity recognition method, device and server based on dynamic grid management
Through dynamic grid management technology, combined with living biological characteristics information, identity recognition, solving the cumbersome and risk problems in the existing technology identification process, and realizing the simplified identity identification process and improvement of security.
Patent Information
- Application Number
- CN201980086698.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Priority Date
- 2018-12-26
- Filing Date
- 2019-12-12
- Publication Date
- 2025-01-28
- Estimated Expiration
- 2039-12-12
AI Technical Summary
Existing identity identification technology requires users to provide passwords, QR codes or ID documents, which leads to cumbersome and risky identification process.
Adopt the identification method based on dynamic rasterization management, track the user's current position, determine the raster area where the user is located, receive the identification request of the business terminal, and according to the live biological feature information of the target object and the grid area of the grid area The biological characteristics of the inside users match and complete the identity recognition.
The identity recognition process has been simplified, the user experience has been improved, the risk of password and QR code is used to use and the loss of identity documents, and the security of identity recognition is improved.
Smart Images

Figure CN113272847B_ABST
Abstract
Description
[0001] CROSS-REFERENCE TO RELATED APPLICATIONS
[0002] This application claims the priority of Chinese patent application No. 201811608294.0, filed with the Chinese Patent Office on December 26, 2018, and entitled “Identity Identification Method, Device and Server Based on Dynamic Grid Management”, the entire contents of which are incorporated by reference in this application. Technical Field
[0003] The present application relates to the field of identity recognition technology, and in particular to an identity recognition method, device and server based on dynamic grid management. Background Art
[0004] With the continuous development of network technology and automation equipment technology, identity recognition technology has also developed, and has been applied to many businesses such as mobile payment and identity authentication. At present, the existing identity recognition technology requires users to provide information such as passwords, QR codes or identity documents so that the business terminal can identify the user's identity based on the above information. However, when performing identity recognition in this way, the recognition process is relatively cumbersome and there are certain risks. Summary of the invention
[0005] In view of this, the purpose of this application is to provide an identity recognition method, device and server based on dynamic grid management, which can further simplify the identity recognition process, improve the user experience when performing identity recognition, and reduce the risks of identity recognition.
[0006] In a first aspect, an embodiment of the present application provides an identity recognition method based on dynamic grid management, including: tracking the current location of each user to determine the current grid area where each user is located; receiving an identification request sent by a service terminal; wherein the identification request includes first location information and live biometric information of a target object; determining a first grid area where the service terminal is located based on the first location information; obtaining biometric information of each user whose current grid area is the first grid area; and completing identity recognition based on the live biometric information of the target object and the biometric information of each user in the first grid area.
[0007] In combination with the first aspect, an embodiment of the present application provides a first possible implementation method of the first aspect, wherein the step of completing identity recognition based on the live biometric information of the target object and the biometric information of each user in the first grid area includes: determining whether the live biometric information of the target object is directly derived from a real living body; if so, performing biometric matching on the target object and each user in the first grid area based on the live biometric information of the target object and the biometric information of each user in the first grid area; determining whether the biometric matching is successful; if not, obtaining each second grid area adjacent to the first grid area, and obtaining the biometric information of each user in each second grid area; completing identity recognition based on the live biometric information of the target object and the biometric information of the users in each second grid area.
[0008] In combination with the first possible implementation of the first aspect, the embodiment of the present application provides a second possible implementation of the first aspect, wherein the step of completing identity identification based on the live biometric information of the target object and the biometric information of each user in each second grid area includes: performing biometric matching on the target object and each user in each second grid area based on the live biometric information of the target object and the biometric information of each user in each second grid area; determining whether the biometric match is successful; when the biometric match is successful, determining whether the successfully matched user is unique; when the successfully matched user is unique, determining the successfully matched user as the target object to complete identity identification.
[0009] In combination with the second possible implementation of the first aspect, an embodiment of the present application provides a third possible implementation of the first aspect, wherein the above method also includes: when the successfully matched user is not unique, sending an identity confirmation request to the associated terminal of each successfully matched user; when receiving at least one identity information sent by the associated terminal of each successfully matched user in response to the identity confirmation request, judging the identity information sent by the associated terminal of each user to obtain a judgment result; and completing identity identification according to the judgment result.
[0010] In combination with the first aspect, an embodiment of the present application provides a fourth possible implementation method of the first aspect, wherein the above method also includes: after completing identity identification, sending the identity identification result and the business request to the payment system, so that the payment system searches for the payment account corresponding to the identity identification result, and completes the payment operation based on the payment account and the business request, and returns the payment operation result; receiving the payment operation result returned by the payment system, generating an invoice business request according to the payment operation and sending it to the invoice system, so that the invoice system generates a payment invoice, and sends the payment invoice to the email address specified by the target object in the form of an email, and / or sends it to the business terminal.
[0011] In combination with the first aspect, an embodiment of the present application provides a fifth possible implementation of the first aspect, wherein the above method also includes: after completing identity identification, sending the identity identification result and the business request to the identity authentication system, so that the identity authentication system converts the identity identification result into personal identity information, and completes the identity authentication based on the personal identity information and the business request.
[0012] In combination with the third possible implementation of the first aspect, an embodiment of the present application provides a sixth possible implementation of the first aspect, wherein the above method also includes: generating an identity identification log and sending the identity identification log to an associated terminal of the target object to prompt that the identity identification of the target object is completed.
[0013] In combination with the first aspect, an embodiment of the present application provides a seventh possible implementation of the first aspect, wherein the above method also includes: when the biometric information is a facial biometric, the facial biometric information includes the live facial biometric information of the target object or the live facial biometric information combined with the facial expression information of the target object.
[0014] In the second aspect, the embodiment of the present application also provides an identity recognition device based on dynamic grid management, including: a tracking module, configured to track the current position of each user to determine the current grid area where each user is located; a receiving module, configured to receive an identification request sent by a business terminal; wherein the identification request includes first position information and live biometric information of the target object; a grid determination module, configured to determine the first grid area where the business terminal is located based on the first position information; an information acquisition module, configured to obtain the biometric information of each user whose current grid area is the first grid area; an identity confirmation module, configured to complete identity recognition based on the live biometric information of the target object and the biometric information of each user in the first grid area.
[0015] In a third aspect, an embodiment of the present application further provides a server, comprising a processor and a memory; a computer program is stored in the memory, and when the computer program is run by the processor, a method as in any one of the first aspect to the seventh possible implementation of the first aspect is executed.
[0016] In a fourth aspect, an embodiment of the present application further provides a computer storage medium configured to store computer software instructions used for any method of the first aspect to the seventh possible implementation of the first aspect.
[0017] The embodiments of the present application bring the following beneficial effects:
[0018] The identity recognition method, device and server based on dynamic grid management provided in the embodiment of the present application track the current location of the user in real time to determine the current grid area where each user is located, obtain the first location information by receiving the recognition request sent by the service terminal, and determine the first grid area described by the service terminal according to the first location information, and then obtain the biometric information of all users whose current grid area is the first grid area, and then complete the identity recognition according to the live biometric information of the target object and the biometric information of each of the above users. The embodiment of the present application identifies the identity of the user through the live biometric information of the user, without the need for the user to provide information such as passwords, QR codes or identity documents, which can effectively simplify the process of identity recognition and improve the user's experience when performing identity recognition; in addition, because the user does not need to provide the above information, the risk of passwords and QR codes being misused and identity documents being lost can be reduced, further improving the security of identity recognition. At the same time, the use of live biometric information can further improve the security of identity recognition.
[0019] Other features and advantages of the present application will be described in the following description, and partly become apparent from the description, or understood by practicing the present application. The purpose and other advantages of the present application are realized and obtained by the structures specifically pointed out in the description, claims and drawings.
[0020] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS
[0021] In order to more clearly illustrate the specific implementation methods of the present application or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.
[0022] Figure 1 A flowchart of an identity recognition method based on dynamic grid management provided in an embodiment of the present application;
[0023] Figure 2 A flowchart of another identity recognition method based on dynamic grid management provided in an embodiment of the present application;
[0024] Figure 3 A flowchart of another identity recognition method based on dynamic rasterization management provided in an embodiment of the present application;
[0025] Figure 4A flowchart of another identity recognition method based on dynamic rasterization management provided in an embodiment of the present application;
[0026] Figure 5 A schematic diagram of the structure of a system provided in an embodiment of the present application;
[0027] Figure 6 A schematic diagram of the structure of an identity recognition device based on dynamic grid management provided in an embodiment of the present application;
[0028] Figure 7 A schematic diagram of the structure of a server provided in an embodiment of the present application. DETAILED DESCRIPTION
[0029] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution of the present application will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.
[0030] At present, identity recognition technology has been applied to many businesses such as mobile payment and identity authentication. The existing identity recognition technology requires users to provide information such as passwords, QR codes or identity documents, so that the business terminal can identify the user's identity based on the above information, and then complete mobile payment and identity authentication. However, for mobile payment, its payment account is usually bound to the mobile phone account, so that others can steal the mobile phone account and impersonate the payment account, causing property losses to the user; for identity authentication, the user needs to provide an identity document to complete the identity authentication. When the identity document is not carried, it will affect the user experience. Based on this, the embodiment of the present application provides an identity recognition method, device and server based on dynamic rasterization management, which can further simplify the process of identity recognition, improve the user experience when performing identity recognition, and reduce the risks of identity recognition; when the biometric information is a face biometric, the use of facial expression information can greatly prevent the risk of identity impersonation without the person's will, and can effectively prevent the identity confusion of people with similar appearances such as twins.
[0031] To facilitate understanding of this embodiment, firstly, an identity recognition method based on dynamic grid management disclosed in the embodiment of the present application is described in detail, see Figure 1 A flow chart of an identity recognition method based on dynamic rasterization management is shown, the method comprising the following steps:
[0032] Step S102: Track the current position of each user to determine the current grid area where each user is located.
[0033] Specifically, a region is first divided into multiple grid regions, and a corresponding grid server is set in each grid region, and then each grid region is divided into multiple sub-regions, and each sub-region can even be divided into multiple grand-regions. Preferably, for a sparsely populated area, multiple grids can be set in one grid server to improve the utilization rate of the grid server. In order to facilitate real-time determination of the current grid region where the user is located, the current location of the user is tracked. Specifically, the location information sent by the user's associated terminal is obtained in real time, wherein the location of the user's associated terminal can be located based on one or more positioning technologies such as BDS (BeiDou Navigation Satellite System), GPS (Global Positioning System), LBS (Location Based Service), AGPS (Assisted Global Positioning System), GSM (Global System for Mobile communications), IP (Internet Protocol) address positioning, WIFI (Wireless Fidelity, mobile hotspot) and gyroscope positioning, so as to obtain the user's location information, and determine the current grid area where the user is located according to the user's location information; in addition to mobile phones, the user's associated terminal device can also be personal mobile devices such as laptops, tablets, smart watches, smart bracelets, smart glasses, smart earplugs and smart button-type devices.
[0034] Considering that when the population in the area where the target object is located is dense, it is necessary to locate the user more accurately; when the population in the area where the target object is located is sparse, accurate positioning is not required. Specifically, when the user density in the first grid area is large, a high-precision location request is generated so that the associated terminal of the target user returns high-precision location information based on the high-precision location request, and the high-precision location information is sent to the grid server corresponding to the above-mentioned first grid area, so that the grid server determines the sub-grid area or grand-grid area where the target object is located based on the high-precision location information; when the user density in the first grid area is small, a low-precision location request can be generated so that the associated terminal of the target user returns low-precision location information based on the low-precision location request. In addition, through this method, the associated terminal of the target object does not need to turn on the high-precision positioning service with high power consumption for a long time, but only needs to turn it on when receiving the high-precision location request, which can minimize the power consumption of the positioning service.
[0035] Step S104: receiving an identification request sent by the service terminal.
[0036] Among them, the business terminals can be mobile payment terminals and identity authentication terminals. Specifically, mobile payment terminals can include cash registers, POS (point of sale), smart scanners, handheld devices, tablet computers, smart TVs, mobile phones, claw machines, game consoles, smart robots, self-service payment machines, self-service recharge machines and smart payment devices, etc.; identity authentication terminals can include self-service terminals (e-government self-service terminals, e-banking self-service terminals, e-tax self-service terminals, hotel check-in self-service terminals, ATM (Automatic Teller Machine, automatic teller machine), queuing machines, number-taking machines, self-service single-ticket machines, self-service invoice machines and self-service ticket machines, etc.), shared devices, smart robots, smart cars, drones, identity authentication machines, member and VIP identification equipment, smart access control, smart video intercom equipment and smart gates, etc.
[0037] When the service terminal handles the corresponding service, an identification request will be generated, which includes the first location information and the target object's living biometric information. The first location information is the location information of the service terminal, and the location of the service terminal can be located by one or more positioning technologies such as manual setting, BDS, GPS, LBS, AGPS, IP address and WIFI to obtain the first location information of the service terminal. Furthermore, the above methods can be used in combination to obtain more accurate first location information of the service terminal.
[0038] In addition, the biometric information may be one or more of face information, iris information, sclera information, eye pattern information, palm vein information, palm pattern information, finger vein information and voice pattern information. The biometric information of the user is collected by installing the corresponding biometric collection technology on the service terminal. Preferably, the face recognition technology can be selected to obtain the identity feature information of the user, because as the accuracy of face recognition technology continues to improve, the current face recognition technology has developed to the level of an error rate of one in ten million, so the accuracy of identity recognition can be improved by face recognition technology. The use of live face recognition technology can prevent others from impersonating users by means of mobile phone images, videos, photos, masks and 3D (3D) printed heads, thereby increasing user safety. Furthermore, considering that two people who look exactly the same may appear in the case of brothers, sisters, twins or no blood relationship, that is, the face is not unique, so the face recognition technology can also be combined with the facial gesture recognition technology, and the user can customize the expression required for identity recognition based on his or her own preferences. Therefore, although the appearance is similar, the expression is not exactly the same, which can further prevent the identity confusion of users with similar appearances such as twins.
[0039] Step S106: determine a first grid area where the service terminal is located based on the first location information.
[0040] In one implementation, when a service request sent by a service terminal is received, a first grid area where the service terminal is located is determined according to the first location information through a dynamic grid management technology.
[0041] Step S108, obtaining biometric information of each user whose current grid area is the first grid area.
[0042] It is understandable that because the service terminal is located in the first grid area, the target user's location and the service terminal's location should not exceed a certain distance, otherwise it will be impossible to complete a series of operations such as collecting live biometric information; at the same time, in order to prevent remote impersonation, when the target user's location is far away from the service terminal's location, identity recognition will not be completed. Therefore, preferably, the biometric information of the user in the first grid area is obtained.
[0043] Step S110, completing identity recognition according to the living biological characteristic information of the target object and the biological characteristic information of each user in the first grid area.
[0044] First, it should be determined whether the target object's live biometric information is directly derived from a real living body. When the target object's live biometric information is not directly derived from a real living body, identity authentication cannot be completed. If the liveness recognition is set on the business terminal, no business request will be sent; if the liveness recognition is set on the server side, a message "no user found" will be sent to the business terminal at this time; when the target object's live biometric information is directly derived from a real living body, the target object's live biometric information will be compared with the biometric information of each user. When the comparison similarity threshold is higher than the preset threshold, the user is determined to be the target object, and the identity information corresponding to the user can be searched in the system.
[0045] When the biometric information is facial information, the user corresponding to the target object can be found in the system by comparing the facial information of the target object with the above-mentioned users, and the identity information of the target object can be determined. Furthermore, when face recognition technology and facial gesture recognition technology are combined, the biometric information of the target object should include facial information and expression information. Only when both the facial information and expression information are successfully matched can the identity information of the target object be determined, which can prevent the risk of identity fraud without the person's consent and further prevent the confusion of identities of users with similar appearances such as twins.
[0046] The identity recognition method based on dynamic grid management provided in the embodiment of the present application tracks the current location of the user in real time to determine the current grid area where each user is located, obtains the first location information by receiving the recognition request sent by the service terminal, and determines the first grid area described by the service terminal according to the first location information, and then obtains the biometric information of all users whose current grid area is the first grid area, and then completes the identity recognition according to the live biometric information of the target object and the biometric information of each of the above users. The embodiment of the present application identifies the identity of the user through the live biometric information of the user, without the need for the user to provide information such as passwords, QR codes or identity documents, which can effectively simplify the process of identity recognition and improve the user experience when performing identity recognition; in addition, because the user does not need to provide the above information, the risk of passwords and QR codes being misused and identity documents being lost can be reduced, further improving the security of identity recognition. At the same time, the use of live biometric information can further improve the security of identity recognition.
[0047] To facilitate understanding of the above embodiments, the present application also provides another identity recognition method based on dynamic grid management, see Figure 2 Another flow chart of an identity recognition method based on dynamic grid management is shown, the method comprising the following steps:
[0048] Step S202: Track the current position of each user to determine the current grid area where each user is located.
[0049] Step S204: receiving an identification request sent by the service terminal.
[0050] Step S206: determine a first grid area where the service terminal is located based on the first location information.
[0051] Step S208, obtaining biometric information of each user whose current grid area is the first grid area.
[0052] Step S210, determine whether the target object's living body biometric information is directly derived from a real living body. If yes, execute step S212; if no, end.
[0053] In order to prevent others from impersonating others through photos and videos, the target object's identity information is first checked to see whether it is directly derived from a real living person. If not, the identity recognition is terminated directly and the recognition failure information is returned to the business terminal.
[0054] Step S212, performing biometric matching on the target object and each user in the first grid area according to the living biometric information of the target object and the biometric information of each user in the first grid area.
[0055] In one embodiment, the similarity value between the target object's live biometric information and the biometric information of each user in the first grid area can be calculated, and a similarity threshold can be preset. If and only if the similarity value is greater than the preset similarity threshold, the biometric matching is successful.
[0056] Step S214, determine whether the biometric matching is successful. If yes, identity recognition is completed; if not, proceed to step S216.
[0057] When the match is successful, it indicates that there is a corresponding relationship between the target object and the user, and the information of the successfully matched user can be confirmed as the information of the target object, thereby completing the identity recognition. Further, it is determined whether the successfully matched user is unique. If not unique, the identity of the target object needs to be further identified.
[0058] Step S216, acquiring each second grid area adjacent to the first grid area, and acquiring biometric information of each user in each second grid area.
[0059] It can be understood that when the biometric information of each user in the first grid area does not match, the target object may be divided into a grid area adjacent to the first grid area due to errors in the user location information. Therefore, the second grid areas adjacent to the first grid area are obtained, and the biometric information of each user in each of the second grid areas is obtained for further biometric matching.
[0060] Step S218, completing identity recognition based on the target object's living biological characteristic information and the biological characteristic information of the users in each second grid area.
[0061] The embodiment of the present application further provides steps for completing identity recognition based on the living biological characteristic information of the target object and the biological characteristic information of the user in each second grid area. For details, refer to the following steps:
[0062] (1) According to the living biological characteristic information of the target object and the biological characteristic information of each user in each second grid area, the target object and each user in each second grid area are matched with each other.
[0063] (2) Determine whether the biometric feature match is successful. If the match fails, the identity recognition is terminated and a message indicating that the identity recognition failed is returned to the service terminal.
[0064] (3) When the biometrics are matched successfully, determine whether the matched user is unique. It is understandable that multiple users may be matched with similar biometric information to the target object, so it is further determined whether multiple users are matched.
[0065] (4) When the matched user is unique, the matched user is determined as the target object and identity recognition is completed. If only one matched user has similar biometric information to the target object, the application can be confirmed as the target object and identity recognition is completed.
[0066] (5) When the successfully matched user is not unique, an identity confirmation request is sent to the associated terminal of each successfully matched user. When multiple matched users have similar biometric information to the target object, further identity recognition is required. Specifically, an identity confirmation request can be sent to the associated terminal of each successfully matched user, so that each user returns identity confirmation information based on the identity confirmation request.
[0067] (6) When receiving at least one identity information sent by the associated terminal of each successfully matched user in response to the identity confirmation request, the identity information sent by the associated terminal of each user is judged to obtain a judgment result. The judgment result may be that the information is wrong or correct. It is understandable that for young children, elderly people or people who are not suitable to carry mobile phones due to physical reasons, they can be located by another person's mobile phone, and then have him scan his face for verification, based on which the associated terminal can send at least one first identity information.
[0068] (7) Complete identity recognition based on the judgment result. When the judgment result is that the information is wrong, it means that the identity confirmation information returned by the associated terminal does not match the identity information of the target object; when the judgment result is that the information is correct, the user of the associated terminal can be confirmed as the target object. Then, identity recognition is completed.
[0069] If the user corresponding to the target object cannot be matched at this time, the identity recognition cannot be completed, and the identity recognition failure is returned to the business terminal.
[0070] The identity recognition method based on dynamic grid management provided in the embodiment of the present application tracks the current location of the user in real time to determine the current grid area where each user is located, and in the identity recognition process, firstly performs biometric matching based on the first grid area where the service terminal is located, and if the matching is unsuccessful, then performs biometric matching in the adjacent area to complete the identity recognition. In addition, when matching, it is first determined whether the biometric information sent by the service terminal is directly derived from a real living body, so as to further prevent others from impersonating the identity through photos and videos. The embodiment of the present application identifies the identity of the user through the user's living biometric information, without the user providing information such as passwords, QR codes or identity documents, which can effectively simplify the process of identity recognition and improve the user's experience when performing identity recognition; in addition, because the user does not need to provide the above information, the risks of passwords and QR codes being misused and identity documents being lost can be reduced, further improving the security of identity recognition.
[0071] Furthermore, an identification log is generated and sent to the associated terminal of the target object to prompt the target object that the identification is complete. In order to inform the target object that the identification is complete, an identification log can be generated and sent to the associated terminal of the target object. At the same time, sending the identification log to the associated terminal of the target object also facilitates the target object to query the identification result later.
[0072] To facilitate understanding of the above embodiments, the present application also provides another identity recognition method based on dynamic grid management. Taking mobile payment based on identity recognition as an example, see Figure 3 A flowchart of another identity recognition method based on dynamic rasterization management is shown, the method comprising the following steps:
[0073] When identity identification is completed, the identity identification result and the business request are sent to the payment system, so that the payment system can find the payment account corresponding to the identity identification result, complete the payment operation based on the payment account and the business request, and return the payment operation result; then receive the payment operation result returned by the payment system, generate an invoice business request according to the payment operation, and send it to the invoice system, so that the invoice system generates a payment invoice, and sends the payment invoice to the email address specified by the target object or to the business terminal for on-site invoice printing.
[0074] Specifically, the user's associated terminal sends the user's location information to the system in real time, so that the system updates the grid area where the user is located based on the user's location information. When the user consumes, the merchant's business terminal first performs liveness detection on the user, then collects the user's live face image, and generates a business request data packet based on the user's bill information, merchant device ID, merchant location information and live face, and sends the business request data packet to the system. After receiving the business request data packet, the system obtains the corresponding valid user according to the merchant device ID in the business request data packet, and matches the live face in the business request data packet with the face in the system. When the match is unsuccessful, it returns "user account not found" to the merchant's business terminal and ends the payment; when the match is successful, it determines whether the matching result is unique. If it is unique, the valid user who successfully matches is located as the current payment user; if it is not unique, information is sent to all successfully matched users, and each user determines whether to confirm the payment bill, thereby locating the current payment user, and then performs the payment operation according to the current payment user, and records the log, and then sends "payment successful" to the merchant's business terminal, and sends "payment bill" to the user's associated terminal. If the user needs to issue an invoice, an invoice business request will be generated after the payment is completed and sent to the invoice system, so that the invoice system can generate a payment invoice and send the payment invoice to the user's designated email address or to the business terminal for on-site invoice printing.
[0075] Furthermore, a corresponding payment log is generated and sent to the associated terminal of the target object to prompt the target object that the payment is completed. In order to inform the target object that the payment is completed, a payment log can be generated and sent to the associated terminal of the target object. At the same time, sending the payment log to the associated terminal of the target object also facilitates the target object to query the payment result later.
[0076] The embodiment of the present application uses face recognition technology to identify the identity of the user and then complete the payment operation. This process only requires the user to cooperate in collecting face information, without entering a payment password or providing a QR code to the merchant, further simplifying the user's payment process. In addition, because the user account is not bound to the user's mobile phone number, the risk of stealing the user account through the mobile phone number is reduced, and the security of the user account is improved.
[0077] Preferably, when the biometric information is a face biometric, the face biometric information includes the live face biometric information of the target object or the live face biometric information combined with the facial expression information of the target object, that is, the facial expression information of the target object can be included in the face biometric information. When performing liveness detection on the user, a combination of live face recognition technology and facial gesture recognition technology is adopted. In the specific implementation, the user is required to cooperate in making corresponding expressions. Among them, the live face recognition technology includes live face recognition technology and facial recognition technology. When performing identity recognition based on the live face biometric information including the facial expression information of the target object, firstly determine whether the target object is a real person through the live face recognition technology, then match the user corresponding to the target object through the facial recognition technology, and then match the facial expression information through the facial gesture recognition technology, and complete the identity recognition according to the matching result.
[0078] Furthermore, by combining live face recognition technology with facial gesture recognition technology, it is possible to prevent others from impersonating users by means of mobile phone images, videos, photos, masks, and 3D (3Dimensions) printed heads; it can further reduce the risk of having funds stolen by others when the user is unprepared, and at the same time can effectively distinguish between two or more users with similar appearances; it can greatly prevent the risk of identity impersonation against the user's will; and it can effectively prevent identity confusion among people with similar appearances, such as twins.
[0079] Furthermore, users can also set alarm expressions. When users are forced to transfer assets, they can use alarm expressions when collecting facial information. The system can then implement alarm operations based on the alarm expressions, thereby improving the user's personal and property safety.
[0080] See also Figure 4 The flowchart of another identity recognition method based on dynamic rasterization management is shown, which takes identity authentication based on identity recognition as an example, and the method includes the following steps:
[0081] When identity recognition is completed, the identity recognition result and the business request are sent to the identity authentication system, so that the identity authentication system converts the identity recognition result into personal identity information and completes the identity authentication based on the personal identity information and the business request.
[0082] Specifically, the user's associated terminal sends the user's location information to the system in real time, so that the system updates the grid area where the user is located based on the user's location information. When the user needs to perform identity authentication, the service terminal configured for authentication first performs liveness detection on the user, then collects the live face image of the user, and generates a service request data packet according to the device ID (Identity, identity identification number), device type, location information and live face information, and sends the service request data packet to the system. After receiving the service request data packet, the system searches for valid users in the surrounding area according to the location information in the service request data packet, and matches the live face in the service request data packet with the face in the system. When the match is unsuccessful, "user account cannot be found" is returned to the merchant's service terminal, and the authentication is terminated; when the match is successful, it is determined whether the matching result is unique. If it is unique, the identity information corresponding to the biometric information is obtained; if it is not unique, the next step of identity confirmation is performed, and identity confirmation information is sent to all users who have successfully matched. After receiving the identity information returned by the user's associated terminal, it is matched with the identity information of the above-mentioned users. If the match is unsuccessful, "identity information does not match" is sent to the service terminal, and the identity authentication is terminated; when the match is successful, the identity information sent by the user's associated terminal is sent to the service terminal, so that the service terminal completes the identity authentication based on the identity information.
[0083] The embodiment of the present application uses face recognition technology to authenticate the identity of the user, without the need for the user to provide a physical identity document, etc., thereby further simplifying the identity authentication process. At the same time, since there is no need to carry an identity document, it is convenient for users to travel while reducing the risk of losing their identity documents.
[0084] Further, see Figure 5 A structural schematic diagram of a system shown in FIG. 1 , the system includes a main server, and a dynamic grid service cloud, a face recognition service cloud, a payment server, an identity authentication server and an invoice server respectively connected to the main server; wherein the main server is configured to realize communication between the payment server, the identity authentication server, the invoice server, each service cloud and the business terminal and the user-associated terminal, the dynamic grid service cloud is configured to determine the grid area where the user and the business terminal are located, the face recognition cloud is configured to match the face information corresponding to the user, the payment server can be connected to other payment platforms and configured to complete payment, the identity authentication server can be connected to relevant departments and configured to complete identity authentication, and the invoice server can be connected to relevant departments and configured to complete invoice issuance.
[0085] In summary, the embodiments of the present application can achieve at least one of the following features:
[0086] (1) Simple and convenient operation. When a unique valid user is matched in the system, the user does not need to take out his mobile phone, and the identity can be identified by scanning the biometrics, which reduces the operation steps and is simpler, more convenient and faster.
[0087] (2) Guaranteeing accuracy. The embodiment of the present application relies on the existing high-precision biometric recognition technology and greatly reduces the number of biometric features that need to be retrieved through real-time dynamic grid area management, greatly ensuring the accuracy of the comparison and preventing economic disputes caused by misjudgment.
[0088] (3) Improve speed and reduce costs. Due to the real-time dynamic rasterized area management, the number of biometric features that need to be retrieved is greatly reduced, the matching speed is greatly improved, and it can be achieved in milliseconds; and the investment in equipment is reduced, which greatly reduces the investment cost and maintenance difficulty.
[0089] (4) Cross-regional payment at any time. Using location information and dynamic grid management technology, when a user moves from one area to another, dynamic grid management will automatically move the user from one grid area to another. The user can then pay immediately in the other area without any manual settings, thus realizing mobile payment anytime, anywhere.
[0090] (5) Prevent remote identity theft. Since the maximum accuracy of AGPS is 2 kilometers, while the accuracy of GPS can be 10 meters, the effective range can be controlled within a radius of 3 kilometers by using AGPS, while the effective range can be controlled within a radius of 15 meters by using GPS. This can effectively prevent criminals outside the effective range from impersonating user information and avoid a large number of illegal activities involving the impersonation of information.
[0091] (6) Assist the police to quickly solve cases. Due to the use of dynamic grid management technology, once acts such as forced asset transfer and fugitive pursuit occur, the user's location information can be used to find the user in the shortest possible time, thus quickly solving the case.
[0092] (7) Realize a mobile phone-free living circle within the grid. In the grid area where the user's mobile phone is located and its adjacent grid areas, the user can complete payment and identity authentication without carrying a mobile phone.
[0093] (8) Convenient for users to travel. Through dynamic grid management and the cooperation of live biometrics technology for identity authentication, identity authentication can be achieved without carrying a physical ID card, and transportation ticket purchase, airport gate entry, hotel check-in and entry and exit passes can be achieved without a physical ID card, greatly facilitating users' travel.
[0094] (9) Prevent identity fraud. Using live biometric technology can prevent identity fraud. Taking the human face as an example, using live face recognition technology can prevent others from impersonating users by using mobile phone images, videos, photos, masks, and 3D (3D) printed heads.
[0095] (10) Preventing theft of funds. When the biometric used is face recognition, it can be used in conjunction with facial gesture recognition technology. Unless the user consciously makes the facial expression associated with the payment operation and it is captured, the user's mobile payment action cannot be performed. This can effectively prevent the user's identity from being used and funds from being stolen when the user is in a normal state, sleeping, drunk, comatose, or dead state.
[0096] (11) Effectively prevent identity confusion between twins. With facial gesture recognition technology, since each person can customize their own payment expression according to their personal preferences, even though they look similar, their payment expressions are different. Therefore, it is possible to further effectively prevent identity confusion between twins and other people who look similar.
[0097] (12) Ensure the security of account funds. When a mobile phone is lost or the mobile phone number is obtained by someone else, due to the use of live biometrics technology and even facial gesture recognition technology, payment operations will not be possible unless the person personally operates, thereby better ensuring the security of account funds.
[0098] (13) Alarm expression. Using facial gesture recognition technology, an alarm expression can be set at the same time as a valid payment expression. When making a payment, if an alarm expression is displayed, the payment operation will be processed accordingly and the nearest alarm will be processed to prevent criminals from forcing the transfer of assets and to prevent personal safety from being endangered.
[0099] For the identity recognition method based on dynamic rasterization management provided in the above embodiment, the present application embodiment also provides an identity recognition device based on dynamic rasterization management, see Figure 6 The structure diagram of an identity recognition device based on dynamic rasterization management is shown, and the device includes the following parts:
[0100] The tracking module 602 is configured to track the current position of each user to determine the current grid area where each user is located.
[0101] The receiving module 604 is configured to receive an identification request sent by the service terminal; wherein the identification request includes the first location information and the living biometric feature information of the target object.
[0102] The grid determination module 606 is configured to determine a first grid area where the service terminal is located based on the first location information.
[0103] The information acquisition module 608 is configured to acquire the biometric information of each user whose current grid area is the first grid area;
[0104] The identity confirmation module 610 is configured to complete identity recognition based on the living biological characteristic information of the target object and the biological characteristic information of each user in the first grid area.
[0105] The embodiment of the present application provides an identity recognition device based on dynamic grid management, in which the tracking module tracks the current location of the user in real time to determine the current grid area where each user is located, the receiving module obtains the first location information by receiving the identification request sent by the service terminal, and the grid determination module determines the first grid area described by the service terminal according to the first location information, and then the information acquisition module obtains the biometric information of all users whose current grid area is the first grid area, and then the identity confirmation module completes the identity recognition according to the biometric information of the target object and the biometric information of each user mentioned above. The embodiment of the present application recognizes the identity of the user through the user's live biometric information, without the user providing information such as passwords, QR codes or identity documents, which can effectively simplify the process of identity recognition and improve the user's experience when performing identity recognition; in addition, because the user does not need to provide the above information, the risk of passwords and QR codes being misused and identity documents being lost can be reduced, further improving the security of identity recognition. At the same time, the use of live biometric information can further improve the security of identity recognition.
[0106] The implementation principle and technical effects of the device provided in the embodiments of the present application are the same as those of the aforementioned method embodiments. For the sake of brief description, for matters not mentioned in the device embodiment, reference may be made to the corresponding contents in the aforementioned method embodiments.
[0107] The device is a server, specifically, the server includes a processor and a storage device; the storage device stores a computer program, and when the computer program is run by the processor, it executes the method described in any one of the above-mentioned embodiments.
[0108] Figure 7 A structural diagram of a server provided in an embodiment of the present application, the server 100 includes: a processor 70, a memory 71, a bus 72 and a communication interface 73, wherein the processor 70, the communication interface 73 and the memory 71 are connected via the bus 72; the processor 70 is configured to execute an executable module stored in the memory 71, such as a computer program.
[0109] The memory 71 may include a high-speed random access memory (RAM), and may also include a non-volatile memory, such as at least one disk memory. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 73 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.
[0110] The bus 72 may be an ISA bus, a PCI bus, or an EISA bus. The bus may be divided into an address bus, a data bus, and a control bus. For ease of representation, Figure 7 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.
[0111] Among them, the memory 71 is configured to store a program, and the processor 70 executes the program after receiving an execution instruction. The method executed by the device for flow process definition disclosed in any of the embodiments of the present application can be applied to the processor 70 or implemented by the processor 70.
[0112] The processor 70 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the processor 70. The above processor 70 can be a general-purpose processor, including a central processing unit (CPU) and a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices and discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be directly embodied as a hardware decoding processor for execution, or a combination of hardware and software modules in the decoding processor for execution. The software module may be located in a storage medium mature in the art such as a random access memory, a flash memory and / or a read-only memory, a programmable read-only memory or an electrically erasable programmable memory and a register. The storage medium is located in the memory 71, and the processor 70 reads the information in the memory 71 and completes the steps of the above method in combination with its hardware.
[0113] The computer program product of the identity recognition method, device and server based on dynamic rasterization management provided in the embodiments of the present application includes a computer-readable storage medium storing non-volatile program code executable by a processor, and a computer program is stored on the computer-readable storage medium. The computer program is executed by the processor to execute the method described in the previous method embodiments. The specific implementation can be found in the method embodiments, which will not be repeated here.
[0114] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the system described above can refer to the corresponding process in the aforementioned embodiment, and will not be repeated here.
[0115] The computer program product of the readable storage medium provided in the embodiments of the present application includes a computer-readable storage medium storing program code. The instructions included in the program code can be configured to execute the methods described in the previous method embodiments. The specific implementation can be found in the method embodiments, which will not be repeated here.
[0116] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.
[0117] Finally, it should be noted that the above-described embodiments are only specific implementation methods of the present application, which are used to illustrate the technical solutions of the present application, rather than to limit them. The protection scope of the present application is not limited thereto. Although the present application is described in detail with reference to the above-described embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-described embodiments within the technical scope disclosed in the present application, or can easily think of changes, or make equivalent replacements for some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.
Claims
1. An identity recognition method based on dynamic grid management, characterized in that: include: Tracking the current location of each user, acquiring the location information sent by the user's associated terminal in real time to determine the current grid area where each user is located; Receiving an identification request sent by a service terminal; wherein the identification request includes the first location information and the living biometric information of the target object; Determine a first grid area where the service terminal is located based on the first location information; Acquire biometric information of each user whose current grid area is the first grid area; completing identity recognition according to the living biological characteristic information of the target object and the biological characteristic information of each user in the first grid area; Before tracking the current location of each user and obtaining the location information sent by the user's associated terminal in real time to determine the current grid area where each user is located, multiple grid areas are divided, a corresponding grid server is set in each grid area, each grid area is divided into multiple sub-areas, and each sub-area is divided into multiple grandchild areas; The step of completing identity recognition according to the living biological characteristic information of the target object and the biological characteristic information of each user in the first grid area includes: Determining whether the target object's living body biometric information is directly derived from a real living body; If yes, performing biometric matching on the target object and each user in the first grid area according to the living biometric information of the target object and the biometric information of each user in the first grid area; Determining whether the biometric matching is successful; If not, obtaining each second grid area adjacent to the first grid area, and obtaining biometric information of each user in each second grid area; According to the living biological characteristic information of the target object and the biological characteristic information of each user in each second grid area, performing biological characteristic matching on the target object and each user in each second grid area; Determining whether the biometric matching is successful; When the biometric feature is matched successfully, determining whether the matched user is unique; When the successfully matched user is unique, the successfully matched user is determined as the target object to complete identity recognition; When the successfully matched user is not unique, sending an identity confirmation request to the associated terminal of each successfully matched user; When receiving at least one identity information sent by the associated terminal of each successfully matched user in response to the identity confirmation request, judging the identity information sent by the associated terminal of each user to obtain a judgment result; Complete identity recognition according to the judgment result; Among them, when the user density of the first grid area is greater than a certain threshold, a high-precision location request is generated, so that the user's associated terminal returns high-precision location information based on the high-precision location request, and sends the high-precision location information to the grid server corresponding to the first grid area, so that the grid server determines the sub-grid area or grand-grid area where the target object is located according to the high-precision location information; when the user density of the first grid area is less than a certain threshold, a low-precision location request is generated, so that the user's associated terminal returns low-precision location information based on the low-precision location request.
2. The method according to claim 1, characterized in that The method further comprises: After the identity identification is completed, the identity identification result and the service request are sent to the payment system, so that the payment system searches for the payment account corresponding to the identity identification result, completes the payment operation based on the payment account and the service request, and returns the payment operation result; Receive the payment operation result returned by the payment system, generate an invoice business request according to the payment operation and send it to the invoice system, so that the invoice system generates a payment invoice, and send the payment invoice to the email address specified by the target object in the form of an email, and / or send it to the business terminal.
3. The method according to claim 1, characterized in that The method further comprises: After identity recognition is completed, the identity recognition result and the service request are sent to the identity authentication system, so that the identity authentication system converts the identity recognition result into personal identity information and completes the identity authentication according to the personal identity information and the service request.
4. The method according to claim 3, characterized in that The method further comprises: An identity recognition log is generated and sent to an associated terminal of the target object to prompt that the identity recognition of the target object is completed.
5. The method according to claim 1, characterized in that The method further comprises: When the biometric information is facial biometric information, the facial biometric information includes the live facial biometric information of the target object or the live facial biometric information combined with facial expression information of the target object.
6. An identity recognition device based on dynamic grid management, characterized in that: include: A tracking module configured to track the current location of each user and obtain the location information sent by the user's associated terminal in real time to determine the current grid area where each user is located; A receiving module configured to receive an identification request sent by a service terminal; wherein the identification request includes the first location information and the living biometric feature information of the target object; A grid determination module, configured to determine a first grid area where the service terminal is located based on the first location information; An information acquisition module is configured to acquire biometric information of each user whose current grid area is the first grid area; An identity confirmation module, configured to complete identity recognition based on the living biological characteristic information of the target object and the biological characteristic information of each user in the first grid area; Before tracking the current location of each user and obtaining the location information sent by the user's associated terminal in real time to determine the current grid area where each user is located, multiple grid areas are divided, a corresponding grid server is set in each grid area, each grid area is divided into multiple sub-areas, and each sub-area is divided into multiple grandchild areas; The step of completing identity recognition according to the living biological characteristic information of the target object and the biological characteristic information of each user in the first grid area includes: Determining whether the target object's living body biometric information is directly derived from a real living body; If yes, performing biometric matching on the target object and each user in the first grid area according to the living biometric information of the target object and the biometric information of each user in the first grid area; Determining whether the biometric matching is successful; If not, obtaining each second grid area adjacent to the first grid area, and obtaining biometric information of each user in each second grid area; According to the living biological characteristic information of the target object and the biological characteristic information of each user in each second grid area, performing biological characteristic matching on the target object and each user in each second grid area; Determining whether the biometric matching is successful; When the biometric feature is matched successfully, determining whether the matched user is unique; When the successfully matched user is unique, the successfully matched user is determined as the target object to complete identity recognition; When the successfully matched user is not unique, sending an identity confirmation request to the associated terminal of each successfully matched user; When receiving at least one identity information sent by the associated terminal of each successfully matched user in response to the identity confirmation request, judging the identity information sent by the associated terminal of each user to obtain a judgment result; Complete identity recognition according to the judgment result; Among them, when the user density of the first grid area is greater than a certain threshold, a high-precision location request is generated, so that the user's associated terminal returns high-precision location information based on the high-precision location request, and sends the high-precision location information to the grid server corresponding to the first grid area, so that the grid server determines the sub-grid area or grand-grid area where the target object is located according to the high-precision location information; when the user density of the first grid area is less than a certain threshold, a low-precision location request is generated, so that the user's associated terminal returns low-precision location information based on the low-precision location request.
7. A server, characterized in that: including a processor and a memory; The memory stores a computer program, which, when executed by the processor, performs the method according to any one of claims 1 to 5.
8. A computer storage medium, characterized in that Configured to store computer software instructions used for the method according to any one of claims 1 to 5.
Citation Information
Patent Citations
Payment authentication method, device and system
CN104463589A
Biometric authentication system, biometric authentication processing device, biometric authentication method, biometric information acquisition terminal, and information terminal
CN107077549A