Near field information authentication method, device, electronic device and computer storage medium

Abstract

A method, device, electronic device and computer storage medium for near-field information authentication, including: obtaining the current location information of an object to be authenticated, and then determining the target grid area where the object to be authenticated is located (S102); receiving an information authentication request sent by a target business terminal in the target grid area (S104); determining the valid users of the target business terminal in the first relationship table of the target grid area according to the information of the target business terminal, and determining the biometric information of each valid user (S106); performing identity authentication according to the live biometric information of the object to be authenticated and the biometric information of each valid user (S108). When performing information authentication on the object to be authenticated, the method is implemented through the live biometric information of the object to be authenticated, and the user does not need to provide a physical ID card, which simplifies the information authentication process and improves the user experience when performing information authentication; only when the object to be authenticated is within the preset range of its authorized merchant, the current location information of the object to be authenticated will be sent to the server, ensuring the user's location privacy.

Description

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application claims priority to Chinese patent application number CN201811608291.7, entitled “Near Field Information Authentication Method, Device, Electronic Device and Computer Storage Medium”, filed with the Chinese Patent Office on December 26, 2018, the entire contents of which are incorporated by reference into this application. Technical Field

[0003] The present application relates to the technical field of information authentication, and in particular to a method, device, electronic device and computer storage medium for near-field information authentication. Background Art

[0004] With the continuous development of network technology and automation equipment technology, various electronic self-service terminals are constantly being developed and used in various departments across the country, including banks, electronic taxation, electronic police, electronic vehicle management offices, airports, high-speed rail stations and hotels, which not only saves operating expenses, but also improves work efficiency, that is, increases the convenience of people's affairs.

[0005] However, when handling business, you often need to show a physical ID card. In today's electronic age, you cannot handle various business without an ID card, which is bound to affect people's travel.

[0006] In summary, the existing method of information authentication through physical ID cards is not practical and convenient. Summary of the invention

[0007] In view of this, the purpose of the present application is to provide a method, device, electronic device and computer storage medium for near-field information authentication to alleviate the technical problems of poor practicality and poor convenience of existing information authentication methods.

[0008] In a first aspect, an embodiment of the present application provides a method for near-field information authentication, which is applied to a server, comprising: obtaining current location information of an object to be authenticated, and then determining a target grid area where the object to be authenticated is located, wherein, when the object to be authenticated is located within a preset range of its authorized merchant, the user terminal of the object to be authenticated periodically sends the current location information of the object to be authenticated to the server; receiving an information authentication request sent by a target business terminal within the target grid area, wherein the information authentication request carries information of the target business terminal and live biometric information of the object to be authenticated; the information of the target business terminal includes: the authorized sub-merchant to which the target business terminal belongs; the target business terminal number and the location information of the target business terminal, the target business terminal being a business terminal that performs information authentication on the object to be authenticated; determining valid users of the target business terminal in a first relationship table in the target grid area according to the information of the target business terminal, and determining the biometric information of each valid user; the first relationship table is a relationship table between the user accounts of each of the authorized merchants and their valid users in the target grid area, and the first relationship table is a dynamically changing relationship table; based on the live biometric information of the object to be authenticated and the biometric information of each of the valid users, complete the information authentication of the object to be authenticated and obtain an information authentication result.

[0009] Further, obtaining the current location information of the object to be authenticated includes: determining an authorized merchant of the object to be authenticated, wherein the authorized merchant is a merchant after the object to be authenticated performs an authorization operation on the merchant through its user terminal, and the authorized merchant includes at least one authorized sub-merchant; sending the location information of each authorized sub-merchant to the user terminal of the object to be authenticated, so that the user terminal of the object to be authenticated determines whether the location information of its location and the location information of each authorized sub-merchant are within the preset range; when the user terminal of the object to be authenticated determines that the location information of its location and the location information of each authorized sub-merchant are within the preset range, obtaining the current location information of the user terminal, and using the current location information of the user terminal as the current location information of the object to be authenticated.

[0010] Furthermore, after obtaining the current location information of the object to be authenticated and before receiving the information authentication request sent by the target service terminal in the target grid area, the method further includes: establishing a relationship between the authorized sub-merchant of the object to be authenticated and the user account of the object to be authenticated in the first relationship table.

[0011] Further, determining the valid user of the target business terminal in the first relationship table of the target grid area based on the information of the target business terminal includes: obtaining the first relationship table of the target grid area; determining the first target relationship table of the authorized sub-merchant to which the target business terminal belongs in the first relationship table of the target grid area; obtaining the user account contained in the first target relationship table, and taking the user account contained in the first target relationship table as the valid user account; and taking the user corresponding to the valid user account as the valid user of the target business terminal.

[0012] Furthermore, based on the living biometric information of the object to be authenticated and the biometric information of each of the valid users, completing the information authentication of the object to be authenticated includes: judging whether the living biometric information of the object to be authenticated is directly derived from a real living body; if so, matching the living biometric information of the object to be authenticated with the biometric information of each of the valid users one by one; judging based on the matching result whether there is target biometric information matching the living biometric information of the object to be authenticated in the biometric information of each of the valid users; if so, judging whether the target biometric information is unique; if unique, determining the valid user corresponding to the target biometric information as the object to be authenticated, completing the information authentication of the object to be authenticated.

[0013] Furthermore, the method also includes: if it is not unique, performing information authentication according to the location information of each valid user corresponding to the target biometric information.

[0014] Furthermore, information authentication based on the location information of each valid user corresponding to the target biometric information includes: comparing the location information of each valid user corresponding to the target biometric information with the location information of the target business terminal; judging whether the valid user closest to the location information of the target business terminal is unique based on the comparison result; if unique, determining the valid user closest to the location information of the target business terminal as the object to be authenticated, and completing the information authentication of the object to be authenticated.

[0015] Furthermore, the method also includes: if it is not unique, sending an information authentication request to the user terminal of each valid user whose location information is closest to the target service terminal; when confirmation information sent by each valid user whose location information is closest to the target service terminal based on the information authentication request is received, judging the confirmation information to obtain a judgment result; and completing the information authentication of the object to be authenticated according to the judgment result.

[0016] Furthermore, when the information authentication is payment information authentication, the information authentication result is a payment information authentication result, and the payment information authentication result includes the user account of the object to be authenticated; after completing the information authentication of the object to be authenticated, the method also includes: sending the payment information authentication result and the business request to the payment system, so that the payment system searches for the payment account corresponding to the user account in the payment information authentication result, and completes the payment operation based on the payment account and the business request; generating an invoice business request based on the information of completing the payment operation, and sending the invoice business request to the invoice system, so that the invoice system generates an electronic payment invoice based on the invoice business request, and sends the electronic payment invoice to the user-specified email address or to the target business terminal.

[0017] Furthermore, when the information authentication is identity information authentication, the information authentication result is an identity information authentication result, and the identity information authentication result includes a user account of the object to be authenticated; after completing the information authentication of the object to be authenticated, the method also includes: sending the identity information authentication result and the business request to the identity authentication system, so that the identity authentication system converts the user account in the identity information authentication result into personal identity information, and completes the identity information authentication based on the personal identity information and the business request.

[0018] Furthermore, before determining the authorized merchant of the object to be authenticated, the method also includes: obtaining a merchant authorization request sent by the object to be authenticated through its user terminal, wherein the merchant authorization request is a request generated after the object to be authenticated sets the near field function for the merchant on its user terminal, and the merchant authorization request carries the merchant's information; completing the authorization of the object to be authenticated to the merchant corresponding to the merchant authorization request based on the merchant authorization request; and obtaining the location information of all sub-merchants of the merchant.

[0019] Furthermore, the method further includes: receiving information sent by a user terminal of the object to be authenticated that the object has left the preset range; and deleting the record information about the user account of the object to be authenticated in the first relationship table according to the information that the object has left the preset range.

[0020] Furthermore, the method also includes: if the current location information of the user terminal of the object to be authenticated is not obtained within a preset time, and there is record information of the user account of the object to be authenticated in the first relationship table, deleting the record information about the user account of the object to be authenticated in the first relationship table.

[0021] Furthermore, the method also includes: obtaining information of the business terminal sent by the business terminal, wherein the information of the business terminal includes: the sub-merchant to which the business terminal belongs, the number of the business terminal and the location of the business terminal; and establishing a second relationship table between the sub-merchant and the number of the business terminal in the grid area corresponding to the sub-merchant to which the business terminal belongs based on the information of the business terminal, and the second relationship table is a dynamically changing relationship table.

[0022] Furthermore, the method also includes: when the biometric information of the object to be authenticated is facial biometric information, the facial biometric information is live facial biometric information of the object to be authenticated, and the live facial biometric information includes any one of the following forms: the live facial biometric information includes expression information of the object to be authenticated, and the live facial biometric information does not include expression information of the object to be authenticated.

[0023] In the second aspect, the embodiment of the present application also provides a near-field information authentication device, which is applied to a server, including: an acquisition module, configured to acquire the current location information of the object to be authenticated, and then determine the target grid area where the object to be authenticated is located, wherein, when the object to be authenticated is located within a preset range of its authorized merchant, the user terminal of the object to be authenticated periodically sends the current location information of the object to be authenticated to the server; a receiving module, configured to receive an information authentication request sent by a target business terminal within the target grid area, wherein the information authentication request carries the information of the target business terminal and the living biometric information of the object to be authenticated; the information of the target business terminal includes: the authorized sub-merchant to which the target business terminal belongs , the number of the target business terminal and the location information of the target business terminal, the target business terminal is a business terminal that performs information authentication on the object to be authenticated; a determination module, configured to determine the valid users of the target business terminal in the first relationship table of the target grid area according to the information of the target business terminal, and determine the biometric information of each of the valid users; the first relationship table is a relationship table between the user accounts of each of the authorized merchants and their valid users in the target grid area, and the first relationship table is a dynamically changing relationship table; an information authentication module, configured to complete the information authentication of the object to be authenticated according to the living biometric information of the object to be authenticated and the biometric information of each of the valid users, and obtain an information authentication result.

[0024] In a third aspect, an embodiment of the present application further provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of any one of the methods described in the first aspect when executing the computer program.

[0025] In a fourth aspect, an embodiment of the present application provides a computer-readable medium having a non-volatile program code executable by a processor, wherein the program code enables the processor to execute the steps of the method described in any one of the first aspects above.

[0026] In an embodiment of the present application, the current location information of the object to be authenticated is first obtained, and then the target grid area where the object to be authenticated is located is determined; then, an information authentication request sent by a target business terminal in the target grid area is received; then, based on the information of the target business terminal, the valid users of the target business terminal are determined in the first relationship table of the target grid area, and the biometric information of each valid user is determined; finally, based on the live biometric information of the object to be authenticated and the biometric information of each valid user, the information authentication of the object to be authenticated is completed, and an information authentication result is obtained. From the above description, it can be seen that in this embodiment, when information authentication is performed on the object to be authenticated, it is achieved through the living biometric information of the object to be authenticated, and the user does not need to provide a physical ID card, which facilitates the user's travel; simplifies the information authentication process, and improves the user's user experience when performing information authentication; in addition, only when the object to be authenticated is within the preset range of its authorized merchant, the current location information of the object to be authenticated will be sent to the server, ensuring the user's location privacy and security; reduces the number of biometric identifications, improves the recognition accuracy, reduces the recognition error rate, and reduces the investment in hardware equipment; at the same time, using living biological characteristic information for information authentication can improve the accuracy of information authentication, has good practicality, and alleviates the technical problems of poor practicality and poor convenience of existing information authentication methods.

[0027] Other features and advantages of the present application will be described in the following description, and partly become apparent from the description or understood by practicing the present application. The purpose and other advantages of the present application are realized and obtained by the structures specifically pointed out in the description, claims and drawings.

[0028] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the specific implementation methods of the present application or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0030] Figure 1A flowchart of a near-field information authentication method provided in an embodiment of the present application;

[0031] Figure 2 A flow chart of a method for determining valid users of a target service terminal in a first relationship table of a target grid area according to information of the target service terminal provided in an embodiment of the present application;

[0032] Figure 3 A flow chart of a method for performing information authentication based on the living biometric information of the object to be authenticated and the biometric information of each valid user provided in an embodiment of the present application;

[0033] Figure 4 A flow chart of a method for performing information authentication based on location information of each valid user corresponding to target biometric information provided in an embodiment of the present application;

[0034] Figure 5 A schematic diagram of a facial expression provided in an embodiment of the present application;

[0035] Figure 6 A schematic diagram of an expression feature point provided in an embodiment of the present application;

[0036] Figure 7 A schematic diagram of a near-field information authentication device provided in an embodiment of the present application;

[0037] Figure 8 A schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0038] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution of the present application will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.

[0039] At present, identity authentication technology has been applied to many businesses such as mobile payment and identity recognition. In the existing business handling, users are often required to provide physical documents (including: resident identity card, bank card and Hong Kong and Macao pass, etc.), and then read the physical documents on the corresponding card reader, and then perform identity verification to complete the identity authentication work, which has a poor user experience; and once the physical documents are forgotten or lost, identity authentication will not be possible, and then various businesses will not be able to be handled, which seriously affects the user's travel plan. Based on this, the embodiment of the present application provides a near-field identity authentication method, device, electronic device and computer storage medium, which can simplify the identity authentication process, improve the user's user experience when performing identity authentication, facilitate user travel, and ensure the user's location privacy security. In addition, it can also improve the accuracy of identity authentication.

[0040] To facilitate understanding of this embodiment, a near-field identity authentication method disclosed in an embodiment of the present application is first introduced in detail.

[0041] Embodiment 1:

[0042] According to the embodiments of the present application, an embodiment of a method for near-field information authentication is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0043] Figure 1 is a flow chart of a method for near field information authentication according to an embodiment of the present application. Figure 1 As shown, the method comprises the following steps:

[0044] Step S102, obtaining the current location information of the object to be authenticated, and then determining the target grid area where the object to be authenticated is located, wherein when the object to be authenticated is located within the preset range of its authorized merchant, the user terminal of the object to be authenticated periodically sends the current location information of the object to be authenticated to the server;

[0045] In the embodiment of the present application, the execution subject of the method may be a server, and specifically, may be a service cloud.

[0046] When the grid service cloud is actually implemented, a certain area can be divided into grid areas, and grid servers can be set for the divided grid areas. Specifically, when dividing the grid areas, the areas of the divided grid areas can be set according to the actual situation. If the population density in a certain area is very large, then when dividing the grid areas, the area of ​​each divided grid area can be reduced; and if the population density in a certain area is sparse, then when dividing the grid areas, the area of ​​each divided grid area can be increased. When setting up grid servers for the divided grid areas, each grid area can correspond to one grid server, or multiple grid areas can correspond to one grid server, so as to improve the utilization rate of the grid server. The embodiments of the present application do not limit the specific implementation method thereof.

[0047] In the embodiment of the present application, only when the object to be authenticated is within the preset range of its authorized merchant, the user terminal of the object to be authenticated will periodically (generally once every 2 minutes, and the embodiment of the present application does not impose a specific restriction on the duration of this period) send the current location information of the object to be authenticated to the grid service cloud. After the grid service cloud obtains the current location information of the object to be authenticated, it can determine the target grid area and the corresponding grid server where the object to be authenticated is located based on the current location information of the object to be authenticated (it can be seen from the above content that there are authorized merchants authorized by the object to be authenticated in the target grid area).

[0048] Specifically, the user terminal of the object to be authenticated periodically sends the current location information of the object to be authenticated to the server, and can locate the position of the user terminal of the object to be authenticated based on one or more positioning technologies such as BDS (BeiDou Navigation Satellite System), GPS (Global Positioning System), LBS (Location Based Service), AGPS (Assisted Global Positioning System), GSM (Global System for Mobile communications), IP (Internet Protocol) address positioning, WIFI (Wireless Fidelity, mobile hotspot) and gyroscope positioning, so as to obtain the current location information of the object to be authenticated.

[0049] It should be noted that the user terminal can be a mobile phone, or a laptop computer, a tablet computer, a smart watch, a smart bracelet, smart glasses, smart earplugs and a smart button-type device, etc. The embodiments of the present application do not impose specific restrictions on the above-mentioned user terminals, as long as they can achieve positioning and are easy to carry.

[0050] Step S104, receiving an information authentication request sent by a target business terminal in the target grid area, wherein the information authentication request carries information of the target business terminal and living biometric information of the object to be authenticated; the information of the target business terminal includes: the authorized sub-merchant to which the target business terminal belongs, the number of the target business terminal and the location information of the target business terminal, and the target business terminal is a business terminal that performs information authentication on the object to be authenticated;

[0051] In the embodiment of the present application, the target business terminal can be a payment terminal and / or an identity authentication terminal. Specifically, the payment terminal can include a cash register, a POS (point of sale, sales terminal), a self-service settlement machine, an intelligent scanning gun, a handheld device, a tablet computer, a smart TV, a mobile phone, a claw machine, a game machine, a self-service payment machine, a self-service recharge machine and an intelligent payment device, etc.; the identity authentication terminal can include a self-service terminal (e-government self-service terminal, e-banking self-service terminal, e-tax self-service terminal, hotel check-in self-service terminal, ATM (Automatic Teller Machine, automatic cash withdrawal) machine, queuing machine, number-taking machine, self-service single machine, self-service invoice machine, self-service ticket machine and self-service settlement machine, etc.), shared equipment, intelligent robots, drones, identity authentication machines, member and VIP identification equipment, intelligent access control, intelligent visual intercom equipment and intelligent gates, etc. The embodiment of the present application does not specifically limit the above-mentioned target business terminal, and can also be other business terminals.

[0052] When the target business terminal in the target grid area handles the corresponding business, an information authentication request will be generated. The information authentication request carries the information of the target business terminal and the living biometric information of the object to be authenticated. The information of the target business terminal includes: the authorized sub-merchant to which the target business terminal belongs, the number of the target business terminal (specifically, the ID of the target business terminal) and the location information of the target business terminal. The location information of the target business terminal can be obtained by any of the following methods: manual setting, BDS, GPS, LBS, AGPS, GSM, IP address, WIFI, gyroscope positioning and other one or more positioning technologies to locate the location of the target business terminal.

[0053] It should be noted that when any business terminal is installed in the merchant to which it belongs, it will be bound to the merchant to which it belongs. In order to facilitate a better understanding of the process, an example is given below: if the object to be authenticated has authorized the merchant Wal-Mart, then it is assumed that the object to be authenticated has authorized all branches of Wal-Mart (i.e., the sub-merchants in this application), and when a B POS machine is installed in Wal-Mart branch A, then the B POS machine has established a binding relationship with Wal-Mart branch A.

[0054] In addition, the biometric information can be one or more of the biometrics such as face, iris, sclera, eye pattern, palm vein, palm print, ear pattern, finger vein and voice print. The live biometric information of the object to be authenticated is collected by installing the corresponding biometric collection structure and the pre-stored live biometric judgment method on the target service terminal. Preferably, face recognition technology can be selected to obtain the biometric information of the object to be authenticated, because the current face recognition technology has reached an error rate of one in ten million, so the accuracy of identity recognition can be improved through face recognition technology. The use of live face recognition technology can prevent others from impersonating the object to be authenticated by using mobile phone images, videos, photos, masks and 3D (3 Dimensions) printed heads, thereby improving the security of information authentication. Furthermore, in order to prevent users from having their identities stolen and money lost when they are in a normal state, sleeping, coma, drunkenness, or even dead, facial recognition technology can be combined with facial gesture recognition technology. The person to be authenticated can customize the expression required for identity recognition based on his or her preferences to prevent money from being stolen. In addition, considering that two people who look exactly the same may be brothers, sisters, twins, or people who are not related by blood, that is, faces are not unique, even though they look similar, their expressions are different, which can further prevent identity confusion among users who look similar, such as twins.

[0055] Step S106, determining valid users of the target business terminal in the first relationship table of the target grid area based on the information of the target business terminal, and determining the biometric information of each valid user; the first relationship table is a relationship table between each authorized merchant in the target grid area and the user account of its valid user, and the first relationship table is a dynamically changing relationship table;

[0056] Specifically, the first relationship table is a relationship table between each authorized merchant in the target grid area and the user account of the user who performs the authorization operation on it. For example, the user who performs the authorization operation on the authorized merchant C is D, then the first relationship table contains the relationship between the user account of the authorized merchant C and the user D.

[0057] The first relationship table is a dynamically changing relationship table. The dynamic change process of the first relationship table will be described in detail below and will not be repeated here.

[0058] Because the target service terminal information includes the authorized sub-merchant to which the target service terminal belongs, the valid user corresponding to the authorized sub-merchant can be searched, specifically, the valid user corresponding to the authorized sub-merchant can be searched in the first relationship table, and the biometric information of each valid user can be determined. The valid user refers to the user authorized by the authorized sub-merchant.

[0059] Step S108, completing identity authentication of the object to be authenticated based on the living biological characteristic information of the object to be authenticated and the biological characteristic information of each valid user, and obtaining an information authentication result.

[0060] Specifically, the living biological characteristic information of the object to be authenticated is matched with the biological characteristic information of each valid user one by one, and the identity authentication of the object to be authenticated is completed according to the matching result. This process will be described in detail below and will not be repeated here.

[0061] In the embodiment of the present application, the current location information of the object to be authenticated is first obtained, and then the target grid area where the object to be authenticated is located is determined; then, an information authentication request sent by the target business terminal in the target grid area is received; then, the valid users of the target business terminal are determined in the first relationship table of the target grid area according to the information of the target business terminal, and the biometric information of each valid user is determined; finally, the information authentication of the object to be authenticated is completed according to the live biometric information of the object to be authenticated and the biometric information of each valid user, and the information authentication result is obtained. It can be seen from the above description that in the present embodiment, when the information authentication of the object to be authenticated is performed, it is realized through the live biometric information of the object to be authenticated, and the user does not need to provide a physical ID card, which simplifies the process of information authentication and improves the user experience when performing information authentication; in addition, only when the object to be authenticated is within the preset range of its authorized merchant, the current location information of the object to be authenticated will be sent to the server, ensuring the location privacy and security of the user; at the same time, the use of live biometric information for information authentication can improve the accuracy of information authentication, good practicality, and alleviate the technical problems of poor practicality and poor convenience of existing information authentication methods.

[0062] The above content briefly introduces the near-field information authentication method of the present application, and the specific contents involved are introduced in detail below.

[0063] The following is a detailed introduction to the near-field information authentication method of the present application using a specific embodiment:

[0064] When the object to be authenticated wants to use the near-field information authentication method of this application, it must first register. The specific process is as follows:

[0065] (1) receiving a registration instruction sent by a user terminal of the object to be authenticated, wherein the registration instruction carries the user account of the object to be authenticated;

[0066] Normally, the object to be authenticated needs to download the corresponding software, install and open the software, then enter the user account, password and mobile phone number of the object to be authenticated on the registration interface, click the register button, and send the registration instruction to the server.

[0067] (2) sending a prompt message to a user terminal of the object to be authenticated, so as to prompt the object to be authenticated to upload identity information, wherein the identity information includes biometric information of the object to be authenticated;

[0068] Specifically, the biometric information may be a static image, a live shot image, a live shot live face image, etc. In addition, in order to prevent criminals from impersonating other users' biometric information, it is also necessary to upload information such as the name or ID number of the object to be authenticated.

[0069] (3) receiving the identity information uploaded by the subject to be authenticated through its user terminal, and verifying whether the identity information is legal;

[0070] Specifically, the above identity information can be transmitted to the relevant authentication department to verify whether the basic information of the object to be authenticated (such as name and ID number, etc.) and the biometric information match. When it is determined that the basic information and the biometric information match, it can be determined that the identity information of the object to be authenticated is legal.

[0071] (4) If it is legal, the biometric information of the subject to be authenticated and the user account of the subject to be authenticated are saved to complete the registration.

[0072] Specifically, after completing the registration, the subject to be authenticated can further bind its user account with its payment account (which can be a bank card number, WeChat account, Alipay account, etc.) to facilitate subsequent payment.

[0073] When merchants want to use the near-field information authentication method of this application, they also need to register. The following is a brief description of the process: merchants need to download the corresponding administrator-side software, install and open the software, then enter the merchant name in the registration interface, bind the address information, click the register button, and send the registration instruction to the server; then, the server verifies the registration instruction, and if it passes, the merchant registration is completed; after the registration is completed, the required business terminals in the merchant are initialized, and the business terminals are bound to the merchant; then, the business terminal installs the program and displays a QR code (containing merchant information) so that the user terminal of the object to be authenticated can scan the QR code, thereby completing the authorization of the merchant by the object to be authenticated.

[0074] In addition, after the merchant registration is completed, a merchant object will be created in the grid area to which the merchant belongs, and the server will establish a relationship table between the numbers of all business terminals in the merchant and the merchant (i.e., the second relationship table in this application). When there is a new business terminal in the merchant, the information of the business terminal sent by the new business terminal is obtained (specifically, when the new business terminal is turned on, the information of the business terminal will be sent), wherein the information of the business terminal includes: the sub-merchant to which the business terminal belongs, the number of the business terminal and the location of the business terminal (the location information can be sent regularly by the business terminal, because the location of some business terminals is changing, such as the card swiping machine on the bus, so it needs to be sent regularly, so that the grid area to which the business terminal belongs can be determined in real time); based on the information of the business terminal, a second relationship table between the sub-merchant and the business terminal number is established in the grid area corresponding to the sub-merchant to which the business terminal belongs. It should be noted that if there is a business terminal corresponding to a number in the business terminal number recorded in the second relationship table that is in a shutdown state, then the number of the business terminal corresponding to the shutdown business terminal will also be deleted in the second relationship table, that is, the second relationship table is also dynamically changing.

[0075] When the object to be authenticated wants to authorize the merchant, there are two ways to do this:

[0076] The first method: the object to be authenticated scans the above-mentioned QR code through the software on its user terminal. After the scanning is completed, the near field function is selected, and the user terminal of the object to be authenticated will generate a merchant authorization request and send the merchant authorization request to the server. In this way, the server can complete the authorization of the object to be authenticated to the merchant corresponding to the merchant authorization request based on the merchant authorization request, and the server will send the location information of each sub-merchant of the merchant corresponding to the merchant authorization request to the user terminal of the object to be authenticated.

[0077] The second method: the object to be authenticated searches for the names of the listed merchants on the software of its user terminal (search name, search near a fixed point on a map, etc.), selects a merchant, and sets a near-field function for the merchant. The user terminal of the object to be authenticated will generate a merchant authorization request and send the merchant authorization request to the server. In this way, the server can complete the authorization of the merchant corresponding to the merchant authorization request by the object to be authenticated based on the merchant authorization request, and the server will send the location information of each sub-merchant of the merchant corresponding to the merchant authorization request to the user terminal of the object to be authenticated.

[0078] The authorization process when the server is the execution subject is: obtaining the merchant authorization request sent by the object to be authenticated through its user terminal, wherein the merchant authorization request is a request generated after the object to be authenticated sets the near field function for the merchant on its user terminal, and the merchant authorization request carries the merchant's information; completing the authorization of the merchant corresponding to the merchant authorization request by the object to be authenticated based on the merchant authorization request; and obtaining the location information of all sub-merchants of the merchant.

[0079] After completing the above-mentioned user authorization of the merchant, the server determines the authorized merchant of the object to be authenticated, wherein the authorized merchant is the merchant after the object to be authenticated performs the authorization operation on the merchant through its user terminal, and the authorized merchant includes at least one authorized sub-merchant; the location information of each authorized sub-merchant is sent to the user terminal of the object to be authenticated, so that the user terminal of the object to be authenticated determines whether the location information of its location and the location information of each authorized sub-merchant are within a preset range; when the user terminal of the object to be authenticated determines that the location information of its location and the location information of one or more authorized sub-merchants are within the preset range, the user terminal of the object to be authenticated sends its current location to the server, and then the server obtains the current location information of the user terminal, and uses the current location information of the user terminal as the current location information of the object to be authenticated; when the user terminal of the object to be authenticated determines that the location information of its location is not within the preset range of the location information of any authorized sub-merchant, the user terminal of the object to be authenticated does not send its current location to the server, which can greatly ensure the user's location privacy and be more secure.

[0080] In addition, it should be noted that when determining the authorized merchants of the object to be authenticated, the authorized merchants of the object to be authenticated can be searched in the service cloud, and then the location information of each authorized sub-merchant of all authorized merchants of the object to be authenticated is sent to the user terminal of the object to be authenticated; or, when the user terminal of the object to be authenticated sends its current location, the information of the authorized merchants within the preset range of its location is sent to the server at the same time, so that the server does not need to search for all authorized merchants of the object to be authenticated, and does not need to send the location information of each authorized sub-merchant of all authorized merchants to the user terminal of the object to be authenticated, but only needs to send the location information of each sub-merchant of the authorized merchant corresponding to the information of the authorized merchant sent by the user terminal to the user terminal of the object to be authenticated. Such an implementation method can reduce the operating resources of the server, reduce its computing power, and reduce its information transmission volume. The current embodiment of the present application does not specifically limit the above two implementation methods, and can be implemented in the former method or the latter method. Both implementation methods are within the protection scope of the present application.

[0081] In addition, one user terminal may correspond to one user account, and one user terminal may also correspond to multiple user accounts at the same time, which is not specifically limited in the embodiments of the present application.

[0082] After obtaining the current location information of the object to be authenticated, the server establishes a relationship between the authorized sub-merchant of the object to be authenticated and the user account of the object to be authenticated in the first relationship table, that is, the binding relationship between the authorized sub-merchant (the merchant authorized by the object to be authenticated) and the user account of the object to be authenticated is added to the first relationship table (this is an expansion of the first relationship table).

[0083] The reduction process of the first relational table is introduced below:

[0084] One method is: receiving information sent by a user terminal of the object to be authenticated that the object has left a preset range; and deleting the record information about the user account of the object to be authenticated in the first relationship table according to the information that the object has left the preset range.

[0085] Another way is: if the current location information of the user terminal of the object to be authenticated is not obtained within the preset time, and the record information of the user account of the object to be authenticated exists in the first relationship table, the record information of the user account of the object to be authenticated in the first relationship table is deleted.

[0086] Specifically, when an object to be authenticated is within the preset range of its authorized merchant, the user terminal of the object to be authenticated will periodically send its current location information to the server. If the current location information of the object to be authenticated is not obtained within the preset time, it is determined that the user terminal of the object to be authenticated is in a powered off state or the user has left the above-mentioned preset range. At this time, the record information about the user account of the object to be authenticated in the first relationship table will be deleted, which can further protect the privacy of the user's location and be more secure, while also saving the server's occupied resources.

[0087] In addition, when the object to be authenticated moves from one preset range including its authorized merchants to another preset range including its authorized merchants, the record information of the user account of the object to be authenticated in the grid area corresponding to the first preset range will be deleted, and the relationship between the user account of the object to be authenticated and its authorized merchants in the grid area corresponding to the second preset range will be established.

[0088] When the object to be authenticated needs to perform information authentication, the target business terminal will collect the live biometric information of the object to be authenticated, and then send it to the server. After the server receives the information authentication request carrying the information of the target business terminal and the live biometric information of the object to be authenticated, it determines the valid user of the target business terminal in the first relationship table of the target grid area according to the information of the target business terminal, and refers to Figure 2 , specifically including the following steps:

[0089] Step S201, obtaining a first relationship table of a target grid area;

[0090] Specifically, there may be multiple merchants in the target grid area, and then the first relationship table of the target grid area contains relationships between the multiple merchants and their own user accounts.

[0091] Step S202, determining a first target relationship table of the authorized sub-merchant to which the target business terminal belongs in the first relationship table of the target grid area;

[0092] Step S203, obtaining the user account included in the first target relationship table, and taking the user account included in the first target relationship table as a valid user account;

[0093] Step S204: The user corresponding to the valid user account is used as a valid user of the target service terminal.

[0094] After obtaining the valid users of the target service terminal, further determine the biometric information of each valid user (including the biometric information registered during registration), and then complete the identity authentication of the object to be authenticated based on the living biometric information of the object to be authenticated and the biometric information of each valid user. Figure 3 , specifically including the following steps:

[0095] Step S301, determining whether the living body biometric feature information of the object to be authenticated is directly derived from a real living body;

[0096] When performing information authentication, first determine whether the live biometric information of the object to be authenticated is directly derived from a real living body, and further prevent others from impersonating the identity through photos and videos, etc. The embodiment of the present application authenticates the information of the object to be authenticated through the live biometric information of the object to be authenticated, without the need for the object to be authenticated to provide information such as passwords, QR codes or identity documents, which can effectively simplify the process of information authentication and improve the experience of the object to be authenticated when performing information authentication; in addition, because the object to be authenticated does not need to provide the above information, it can reduce the risk of passwords and QR codes being used fraudulently and identity documents being lost, further improving the security of information authentication.

[0097] Further design, when the living biometric information is the living facial feature information, it can be combined with facial posture recognition technology to further prevent the identity of the user from being stolen or even the funds from being stolen when the user is unprepared.

[0098] Step S302: if yes, then the biometric information of the object to be authenticated is matched one by one with the biometric information of each valid user;

[0099] Specifically, the living biological characteristic information of the object to be authenticated is matched one by one with the biological characteristic information of each valid user to obtain a matching result.

[0100] Step S303: If not, the information authentication of the object to be authenticated cannot be completed.

[0101] Specifically, if the liveness recognition algorithm is set on the service terminal, the service terminal does not send a service request; if the liveness recognition algorithm is set in the server, the server sends a message that the user cannot be found to the service terminal.

[0102] Step S304, judging whether there is target biometric characteristic information matching the living biometric characteristic information of the object to be authenticated in the biometric characteristic information of each valid user according to the matching result;

[0103] In an embodiment of the present application, when the matching similarity threshold between the biometric information of any valid user and the live biometric information of the object to be authenticated is higher than a preset threshold, it is determined that the biometric information of the valid user matches the live biometric information of the object to be authenticated.

[0104] For example, the biometric information of the object H to be authenticated is matched with the biometric information of the valid user E, the biometric information of the valid user F and the biometric information of the valid user G respectively, and the similarity values ​​between the biometric information of the valid user E, the biometric information of the valid user F and the biometric information of the object H to be authenticated are calculated. The similarity value between the biometric information of the valid user E and the biometric information of the object H to be authenticated is 70%, the similarity value between the biometric information of the valid user F and the biometric information of the object H to be authenticated is 80%, and the similarity value between the biometric information of the valid user G and the biometric information of the object H to be authenticated is 95%.

[0105] Case 1: If the preset threshold is 90%, only the similarity value between the biometric information of the valid user G and the biometric information of the object to be authenticated H meets the requirement, then the biometric information of the valid user G is determined as the target biometric information;

[0106] Case 2: If the preset threshold is 98%, there is no target biometric information matching the biometric information of the object H to be authenticated in the biometric information of the valid user, and the information authentication fails, and the server sends a message that the authentication failed to the service terminal;

[0107] Case 3: If the preset threshold is 75%, the similarity value between the biometric information of the valid user F and the biometric information of the object to be authenticated H meets the requirement, and the similarity value between the biometric information of the valid user G and the biometric information of the object to be authenticated H meets the requirement, then the biometric information of the valid user F and the biometric information of the valid user G are determined as the target biometric information.

[0108] Step S305: If it exists, determine whether the target biometric information is unique.

[0109] Step S306: If it does not exist, it is determined that the information authentication fails.

[0110] Step S307: If it is unique, the valid user corresponding to the target biometric information is determined as the object to be authenticated, and the information authentication of the object to be authenticated is completed.

[0111] Step S308, if it is not unique, information authentication is performed based on the location information of each valid user corresponding to the target biometric information.

[0112] Specifically, when the biometric information of multiple valid users matches the biometric information of the living body of the object to be authenticated (i.e., there are multiple target biometric information), further information authentication is required (such as the third case in step S304 above). Specifically, information authentication is performed based on the location information of each valid user corresponding to the target biometric information, refer to Figure 4 , the specific process is as follows:

[0113] Step S401, comparing the location information of each valid user corresponding to the target biometric information with the location information of the target service terminal;

[0114] As in the third case in the above step S304, when the target biometric information is the biometric information of the valid user F and the biometric information of the valid user G, the location information of the valid user F is further compared with the location information of the target business terminal, and the location information of the valid user G is compared with the location information of the target business terminal to obtain a comparison result.

[0115] Step S402, judging whether the valid user closest to the location information of the target service terminal is unique based on the comparison result;

[0116] Specifically, as described in step S401, if a valid user F and a valid user G are selected to determine a valid user whose location information is closest to the target service terminal.

[0117] For example, in case 1, after comparison, the distance between valid user F and the target service terminal is 2 meters, while the distance between valid user G and the target service terminal is 50 meters. Then the valid user with the closest location information to the target service terminal is valid user F.

[0118] Case 2: If after comparison, the distance between valid user F and the target service terminal is 3 meters, and the distance between valid user G and the target service terminal is 3 meters (or the difference between 3 meters and the preset distance range), then there are two valid users whose location information is closest to the target service terminal, one is valid user F and the other is valid user G.

[0119] Step S403: If it is unique, then the valid user whose location information is closest to the target service terminal is determined as the object to be authenticated, and the information authentication of the object to be authenticated is completed.

[0120] If the valid user closest to the location information of the target service terminal determined in step S402 is unique, the valid user closest to the location information of the target service terminal is determined as the object to be authenticated, and the information authentication of the object to be authenticated is completed. As in case 1 of step S402, valid user F is the object to be authenticated.

[0121] Step S404, if it is not unique, sending an information authentication request to the user terminal of each valid user whose location information is closest to the target service terminal;

[0122] If the valid user closest to the location information of the target service terminal determined in step S402 is not unique, an information authentication request is sent to the user terminals of the valid users closest to the location information of the target service terminal. For example, in case 2 of step S402, an information authentication request is sent to the user terminal of valid user F and the user terminal of valid user G respectively;

[0123] The information authentication request may be a request for the user to press a confirmation button, a request for the user to input a confirmation code, and / or a request for collecting other biometric information of the user.

[0124] Step S405, when confirmation information sent by each valid user closest to the location information of the target service terminal based on the information authentication request is received, the confirmation information is judged to obtain a judgment result;

[0125] Specifically, the judgment result may be that the confirmation information is wrong or that the confirmation information is correct.

[0126] Step S406: completing information authentication of the object to be authenticated according to the judgment result.

[0127] Specifically, when the judgment result is that the confirmation information is correct, it is determined that the confirmation information returned by the user terminal matches the information of the object to be authenticated, and the user corresponding to the user terminal is confirmed as the object to be authenticated, thereby completing the information authentication of the object to be authenticated; if the judgment result is that the confirmation information is incorrect, it is determined that the confirmation information returned by the user terminal does not match the information of the object to be authenticated, and the user corresponding to the user terminal is not the object to be authenticated.

[0128] In addition, when the information authentication is payment information authentication, the information authentication result is a payment information authentication result, and the payment information authentication result includes a user account of the object to be authenticated; after completing the information authentication of the object to be authenticated, the method also includes: sending the payment information authentication result and the business request to the payment system, so that the payment system searches for the payment account corresponding to the user account in the payment information authentication result, and completes the payment operation based on the payment account and the business request; generating an invoice business request based on the information of the completed payment operation, and sending the invoice business request to the invoice system, so that the invoice system generates an electronic payment invoice based on the invoice business request, and sends the electronic payment invoice to the user-specified email address or to the target business terminal.

[0129] Specifically, this process is performed only when the service request requires payment, and when the service request does not require payment, the process is not performed. This implementation method integrates identity authentication (specifically obtaining the user account of the object to be authenticated) and mobile payment operations together, which can reduce the tedious operations of multiple authentications in various occasions where payment operations are required (for example, purchasing tickets at high-speed railway stations and checking in at hotels, etc.).

[0130] When the information authentication is identity information authentication, the information authentication result is an identity information authentication result, and the identity information authentication result includes the user account of the object to be authenticated; after completing the information authentication of the object to be authenticated, the method also includes: sending the identity information authentication result and the business request to the identity authentication system, so that the identity authentication system converts the user account in the identity information authentication result into personal identity information, and completes the identity information authentication based on the personal identity information and the business request.

[0131] Preferably, when the biometric information of the object to be authenticated is facial biometric information, the facial biometric information is the live face biometric information of the object to be authenticated, and the live face biometric information includes any of the following forms: the live face biometric information contains the expression information of the object to be authenticated, and the live face biometric information does not contain the expression information of the object to be authenticated.

[0132] It should be noted that in order to improve the operating efficiency and response speed of the grid service cloud, the above-mentioned step S108 and its specific process (steps S301 to S307 and steps S401 to S406) can be completed in the biometric authentication service cloud. Then, the process of biometric information authentication is separated from the grid service cloud, which can reduce the computing power of the grid service cloud and enable the system to execute smoothly.

[0133] In an embodiment of the present application, in order to improve the accuracy of information authentication, live human face biometric information is used for information authentication, and the live human face biometric information may or may not include the expression information of the object to be authenticated.

[0134] When the live face biometric information contains the expression information of the object to be authenticated, the live face biometric information containing the expression information of the object to be authenticated is obtained by combining the live face recognition technology and the facial gesture recognition technology. Among them, the live face recognition technology includes the liveness recognition technology and the face recognition technology. First, the liveness recognition technology is used to determine whether the face information of the object to be authenticated is the live face biometric information, and then the face recognition technology is used to match the user corresponding to the object to be authenticated, and then the facial gesture recognition technology is used to match the facial expression, and the information authentication of the object to be authenticated is completed based on the matching results.

[0135] like Figure 5 The system extracts the feature points of the expression of the object to be authenticated based on the expression of the object to be authenticated. Figure 6 Specifically, when authenticating a face posture, the similarity of the positions of the expression features is used to determine whether the face postures are the same or similar, so as to prevent people with the same appearance from impersonating each other.

[0136] The embodiments of the present application combine live face recognition technology with facial gesture recognition technology to prevent others from impersonating users by using mobile phone images, videos, photos, masks, and 3D (3 Dimensions) printed heads; can further reduce the risk of having funds stolen by others when the user is unprepared, and can also effectively distinguish between two or more users with similar appearances; can greatly prevent the risk of identity fraud against the user's will; and can effectively prevent identity confusion among people with similar appearances such as twins.

[0137] Furthermore, users can also set alarm expressions. When users are forced to transfer assets, they can use alarm expressions when collecting facial information. The system can then implement alarm operations based on the alarm expressions, thereby improving the user's personal and property safety.

[0138] The following is an example of a method for near-field information authentication in this application:

[0139] A zoo has four entrances in the southeast, northwest, and northeast. When the subject to be authenticated chooses to set the proximity function for this zoo, it means that the subject to be authenticated has authorized the zoo. The server will return the location information of the southeast, northwest, and northeast entrances of the zoo (which can be regarded as the four authorized sub-merchants of this application. Assuming that the zoo is relatively large, these four entrances are in different grid areas) to the user terminal of the subject to be authenticated.

[0140] When the object to be authenticated is far away from the four entrances of southeast, northwest, and northeast (outside the zoo, or in the center of the zoo, that is, not in the grid area of ​​these four entrances), the user terminal only reads the location information of the object to be authenticated, but does not send its location information to the server.

[0141] When the object to be authenticated approaches one of the four entrances (ie enters the grid area of ​​one of the entrances), the user terminal sends its current location information to the server.

[0142] After receiving the current location information sent by the user terminal, the server creates the object to be authenticated in the grid area corresponding to the entrance close to the object to be authenticated, and establishes a relationship table between the entrance (ie, the authorized sub-merchant in this application) and the user account of the object to be authenticated.

[0143] When the person to be authenticated arrives at the gate at the entrance, he or she can directly scan his or her face to enter the zoo.

[0144] In summary, the embodiments of the present application can achieve at least one of the following features:

[0145] (1) Good accuracy. The embodiment of the present application relies on the existing high-precision biometric recognition technology, and reduces the number of biometric features that need to be retrieved through near-field authorization (i.e., the method in which the object to be authenticated authorizes the merchant) and grid technology, thereby ensuring the accuracy of the comparison and preventing disputes caused by misjudgment;

[0146] (2) Fast speed and low cost. Due to the near-field authorization and grid technology, the number of biometric features that need to be retrieved is reduced, the comparison speed is improved, millisecond-level comparison can be achieved, and the investment in equipment is reduced, which reduces the investment cost and maintenance difficulty;

[0147] (3) Simple and convenient, with a good user experience. When a unique valid user is matched in the system, the person to be authenticated does not need to take out his or her mobile phone, and can be identified by scanning biometrics, which reduces the number of operation steps and is simpler, more convenient and faster;

[0148] (4) Prevent remote identity theft. Since the maximum accuracy of AGPS is 2 kilometers, while the accuracy of GPS can be 10 meters, the effective range can be controlled within a radius of 3 kilometers by using AGPS, while the effective range can be controlled within a radius of 15 meters by using GPS. This can effectively prevent criminals outside the effective range from impersonating user information and avoid a large number of illegal activities of impersonating information;

[0149] (5) Protect user location privacy. The location information of the object to be authenticated is sent to the server only when it enters the preset range of the authorized sub-merchant, thus protecting the user's location privacy;

[0150] (6) Assist the police to quickly solve the case. Once the transfer of assets or fugitive pursuit occurs, the user can be found in the shortest possible time through the merchant location information or user location information, thus solving the case quickly;

[0151] (7) Prevent identity fraud. Using live biometric technology can prevent identity fraud. Taking the human face as an example, using live face recognition technology can prevent others from impersonating users by using mobile phone images, videos, photos, masks, and 3D (3 Dimensions) printed heads;

[0152] (8) Preventing theft of funds. When the biometric used is face recognition, it can be used in conjunction with facial gesture recognition technology. Unless the subject to be authenticated consciously makes the facial expression bound to the authentication operation and is captured, the subject's mobile payment action cannot be performed. This can effectively prevent the subject to be authenticated from being impersonated and having funds stolen when the subject is in an unguarded state such as normal, sleeping, drunk, comatose or dead;

[0153] (9) Effectively prevent the confusion of the identities of twins. Using facial gesture recognition technology, since each person can customize his or her authentication expression according to his or her personal preferences, even if they look similar, their authentication expressions are different. Therefore, it can further effectively prevent the confusion of the identities of twins and other people who look similar.

[0154] (10) Ensure the security of account funds. When a mobile phone is lost or a mobile phone number is obtained by someone else, due to the use of live biometrics technology and even live facial gesture recognition technology, information authentication operations will not be possible unless the person himself operates, thereby better ensuring the security of account identity information;

[0155] (11) Two-in-one is simpler. Identity authentication and near-field payment are integrated together to reduce the tedious operation of multiple authentications.

[0156] Embodiment 2:

[0157] The embodiment of the present application also provides a device for near-field information authentication, which is mainly configured to execute the method for near-field information authentication provided in the above content of the embodiment of the present application. The device for near-field information authentication provided in the embodiment of the present application is specifically introduced below.

[0158] Figure 7 is a schematic diagram of a near-field information authentication device according to an embodiment of the present application, such as Figure 7 As shown, the near-field information authentication device mainly includes an acquisition module 10, a receiving module 20, a determination module 30 and an information authentication module 40, wherein:

[0159] an acquisition module, configured to acquire the current location information of the object to be authenticated, and then determine the target grid area where the object to be authenticated is located, wherein when the object to be authenticated is located within a preset range of its authorized merchant, the user terminal of the object to be authenticated periodically sends the current location information of the object to be authenticated to the server;

[0160] A receiving module is configured to receive an information authentication request sent by a target business terminal in a target grid area, wherein the information authentication request carries information of the target business terminal and living biometric information of the object to be authenticated; the information of the target business terminal includes: the authorized sub-merchant to which the target business terminal belongs, the number of the target business terminal and the location information of the target business terminal, and the target business terminal is a business terminal that performs information authentication on the object to be authenticated;

[0161] A determination module is configured to determine valid users of the target business terminal in a first relationship table of the target grid area according to information of the target business terminal, and to determine biometric information of each valid user; the first relationship table is a relationship table between each authorized merchant in the target grid area and the user account of its valid user, and the first relationship table is a dynamically changing relationship table;

[0162] The information authentication module is configured to complete the information authentication of the object to be authenticated according to the living biological characteristic information of the object to be authenticated and the biological characteristic information of each valid user, and obtain the information authentication result.

[0163] In the embodiment of the present application, firstly, the current location information of the object to be authenticated is obtained, and then the target grid area where the object to be authenticated is located is determined; then, an information authentication request sent by the target business terminal in the target grid area is received; then, the valid users of the target business terminal are determined in the first relationship table of the target grid area based on the information of the target business terminal, and the biometric information of each valid user is determined; finally, the information authentication of the object to be authenticated is completed based on the live biometric information of the object to be authenticated and the biometric information of each valid user, and the information authentication result is obtained. It can be seen from the above description that in the present embodiment, when the information authentication of the object to be authenticated is performed, it is realized through the live biometric information of the object to be authenticated, and the user does not need to provide a physical ID card, which simplifies the process of information authentication and improves the user experience of the user when performing information authentication; in addition, only when the object to be authenticated is within the preset range of its authorized merchant, the current location information of the object to be authenticated will be sent to the server, which ensures the location privacy and security of the user; at the same time, the use of live biometric information for information authentication can improve the accuracy of information authentication, good practicality, and alleviate the technical problems of poor practicality and poor convenience of existing information authentication methods.

[0164] Optionally, the device is further configured to: determine the authorized merchants of the object to be authenticated, wherein the authorized merchants are the merchants after the object to be authenticated performs an authorization operation on the merchant through its user terminal, and the authorized merchants include at least one authorized sub-merchant; send the location information of each authorized sub-merchant to the user terminal of the object to be authenticated, so that the user terminal of the object to be authenticated determines whether the location information of its location and the location information of each authorized sub-merchant are within a preset range; when the user terminal of the object to be authenticated determines that the location information of its location and the location information of each authorized sub-merchant are within a preset range, the current location information of the user terminal is obtained, and the current location information of the user terminal is used as the current location information of the object to be authenticated.

[0165] Optionally, the device is further configured to: establish a relationship between the authorized sub-merchant of the object to be authenticated and the user account of the object to be authenticated in the first relationship table.

[0166] Optionally, the determination module is further configured to: obtain a first relationship table of the target grid area; determine a first target relationship table of an authorized sub-merchant to which the target business terminal belongs in the first relationship table of the target grid area; obtain a user account contained in the first target relationship table, and use the user account contained in the first target relationship table as a valid user account; and use the user corresponding to the valid user account as a valid user of the target business terminal.

[0167] Optionally, the information authentication module is further configured to: determine whether the live biometric information of the object to be authenticated is directly derived from a real living body; if so, match the live biometric information of the object to be authenticated with the biometric information of each valid user one by one; determine, based on the matching result, whether there is target biometric information in the biometric information of each valid user that matches the live biometric information of the object to be authenticated; if so, determine whether the target biometric information is unique; if unique, determine the valid user corresponding to the target biometric information as the object to be authenticated, and complete the information authentication of the object to be authenticated.

[0168] Optionally, the information authentication module is further configured to: if it is not unique, perform information authentication based on the location information of each valid user corresponding to the target biometric information.

[0169] Optionally, the information authentication module is also configured to: compare the location information of each valid user corresponding to the target biometric information with the location information of the target business terminal; determine whether the valid user closest to the location information of the target business terminal is unique based on the comparison result; if unique, determine the valid user closest to the location information of the target business terminal as the object to be authenticated, and complete the information authentication of the object to be authenticated.

[0170] Optionally, the information authentication module is also configured to: if it is not unique, send an information authentication request to the user terminal of each valid user whose location information is closest to the target business terminal; when confirmation information sent by each valid user whose location information is closest to the target business terminal based on the information authentication request is received, judge the confirmation information to obtain a judgment result; and complete the information authentication of the object to be authenticated according to the judgment result.

[0171] Optionally, when the information authentication is payment information authentication, the information authentication result is a payment information authentication result, and the payment information authentication result includes the user account of the object to be authenticated; the device is also configured to: send the payment information authentication result and the business request to the payment system, so that the payment system searches for the payment account corresponding to the user account in the payment information authentication result, and completes the payment operation based on the payment account and the business request; generate an invoice business request based on the information of the completed payment operation, and send the invoice business request to the invoice system, so that the invoice system generates an electronic payment invoice according to the invoice business request, and sends the electronic payment invoice to the user-specified email address or to the target business terminal.

[0172] Optionally, when the information authentication is identity information authentication, the information authentication result is an identity information authentication result, and the identity information authentication result includes the user account of the object to be authenticated; the device is also configured to: send the identity information authentication result and the business request to the identity authentication system, so that the identity authentication system converts the user account in the identity information authentication result into personal identity information, and completes the identity information authentication based on the personal identity information and the business request.

[0173] Optionally, the device is further configured to: obtain a merchant authorization request sent by the object to be authenticated through its user terminal, wherein the merchant authorization request is a request generated after the object to be authenticated sets the near field function for the merchant on its user terminal, and the merchant authorization request carries the merchant's information; complete the authorization of the object to be authenticated to the merchant corresponding to the merchant authorization request based on the merchant authorization request; and obtain the location information of all sub-merchants of the merchant.

[0174] Optionally, the device is further configured to: receive information sent by a user terminal of the object to be authenticated that the object has left a preset range; and delete the record information about the user account of the object to be authenticated in the first relationship table according to the information that the object has left the preset range.

[0175] Optionally, the device is also configured to: if the current location information of the user terminal of the object to be authenticated is not obtained within a preset time, and there is record information of the user account of the object to be authenticated in the first relationship table, delete the record information about the user account of the object to be authenticated in the first relationship table.

[0176] Optionally, the device is further configured to: obtain information of the business terminal sent by the business terminal, wherein the information of the business terminal includes: the sub-merchant to which the business terminal belongs, the number of the business terminal and the location of the business terminal; and establish a second relationship table between the sub-merchant and the number of the business terminal in a grid area corresponding to the sub-merchant to which the business terminal belongs according to the information of the business terminal, and the second relationship table is a dynamically changing relationship table.

[0177] Optionally, the device is also configured as follows: when the biometric information of the object to be authenticated is facial biometric information, the facial biometric information is live facial biometric information of the object to be authenticated, and the live facial biometric information includes any one of the following forms: the live facial biometric information contains expression information of the object to be authenticated, and the live facial biometric information does not contain expression information of the object to be authenticated.

[0178] The implementation principle and technical effects of the device provided in the embodiments of the present application are the same as those of the aforementioned method embodiments. For the sake of brief description, for matters not mentioned in the device embodiment, reference may be made to the corresponding contents in the aforementioned method embodiments.

[0179] The present application embodiment provides an electronic device, referring to Figure 8 The electronic device includes: a processor 50, a memory 51, a bus 52 and a communication interface 53. The processor 50, the communication interface 53 and the memory 51 are connected via the bus 52. The processor 50 is configured to execute an executable module, such as a computer program, stored in the memory 51. When the processor executes the program, the steps of the method described in the method embodiment are implemented.

[0180] The memory 51 may include a high-speed random access memory (RAM), and may also include a non-volatile memory, such as at least one disk memory. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 53 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.

[0181] The bus 52 may be an ISA bus, a PCI bus, or an EISA bus. The bus may be divided into an address bus, a data bus, and a control bus. For ease of representation, Figure 8 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0182] Among them, the memory 51 is configured to store programs, and the processor 50 executes the program after receiving the execution instruction. The method executed by the device for flow process definition disclosed in any of the embodiments of the present application can be applied to the processor 50 or implemented by the processor 50.

[0183] The processor 50 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the processor 50. The above processor 50 can be a general-purpose processor, including a central processing unit (CPU) and a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, and discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be directly embodied as a hardware decoding processor to execute or a combination of hardware and software modules in the decoding processor to execute. The software module may be located in a storage medium mature in the art such as a random access memory, a flash memory and / or a read-only memory, a programmable read-only memory or an electrically erasable programmable memory and / or a register. The storage medium is located in the memory 51, and the processor 50 reads the information in the memory 51 and completes the steps of the above method in combination with its hardware.

[0184] In another embodiment, a computer-readable medium having a non-volatile program code executable by a processor is provided, wherein the program code enables the processor to execute the steps of the method described in the first embodiment.

[0185] In addition, in the description of the embodiments of the present application, unless otherwise clearly specified and limited, the terms "installed", "connected" and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in this application can be understood according to specific circumstances.

[0186] In the description of the present application, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner" and "outer" indicate positions or positional relationships based on the positions or positional relationships shown in the drawings, which are only for the convenience of describing the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operate in a specific orientation, and therefore cannot be understood as limiting the present application. In addition, the terms "first", "second" and "third" are used for descriptive purposes only and cannot be understood as indicating or implying relative importance.

[0187] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0188] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, and the indirect coupling or communication connection of devices or units can be electrical, mechanical or other forms.

[0189] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0190] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0191] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a non-volatile computer-readable storage medium that can be executed by a processor. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), magnetic disks or optical disks.

[0192] Finally, it should be noted that the above-described embodiments are only specific implementation methods of the present application, which are used to illustrate the technical solutions of the present application, rather than to limit them. The protection scope of the present application is not limited thereto. Although the present application is described in detail with reference to the above-described embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-described embodiments within the technical scope disclosed in the present application, or can easily think of changes or equivalently replace some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims

1. A method for near-field information authentication, characterized in that: Applicable to servers, including: Acquire the current location information of the object to be authenticated, and then determine the target grid area where the object to be authenticated is located, wherein when the object to be authenticated is located within a preset range of its authorized merchant, the user terminal of the object to be authenticated periodically sends the current location information of the object to be authenticated to the server; Receiving an information authentication request sent by a target business terminal in the target grid area, wherein the information authentication request carries information of the target business terminal and living biometric information of the object to be authenticated; the information of the target business terminal includes: the authorized sub-merchant to which the target business terminal belongs, the number of the target business terminal and the location information of the target business terminal, and the target business terminal is a business terminal that performs information authentication on the object to be authenticated; Determine valid users of the target business terminal in the first relationship table of the target grid area according to the information of the target business terminal, and determine the biometric information of each valid user; the first relationship table is a relationship table between each authorized merchant in the target grid area and the user account of its valid user, and the first relationship table is a dynamically changing relationship table; According to the living biological characteristic information of the object to be authenticated and the biological characteristic information of each valid user, completing the information authentication of the object to be authenticated and obtaining the information authentication result; Obtaining the current location information of the object to be authenticated includes: Determining an authorized merchant of the subject to be authenticated, wherein the authorized merchant is a merchant after the subject to be authenticated sets the near field function on its user terminal and performs an authorization operation on the merchant through its user terminal, and the authorized merchant includes at least one authorized sub-merchant; Sending the location information of each authorized sub-merchant to the user terminal of the object to be authenticated, so that the user terminal of the object to be authenticated determines whether the location information of its location and the location information of each authorized sub-merchant are within the preset range; When the user terminal of the object to be authenticated determines that the location information of its location and the location information of each authorized sub-merchant are within the preset range, the current location information of the user terminal is obtained, and the current location information of the user terminal is used as the current location information of the object to be authenticated; When the user terminal of the object to be authenticated determines that the location information of its location is not within the preset range of location information of any authorized sub-merchant, the user terminal of the object to be authenticated does not send its current location to the server.

2. The method according to claim 1, characterized in that After obtaining the current location information of the object to be authenticated and before receiving the information authentication request sent by the target service terminal in the target grid area, the method further includes: A relationship between the authorized sub-merchant of the object to be authenticated and the user account of the object to be authenticated is established in the first relationship table.

3. The method according to claim 1, characterized in that Determining the valid users of the target service terminal in the first relationship table of the target grid area according to the information of the target service terminal includes: Acquire a first relationship table of the target grid area; Determine, in the first relationship table of the target grid area, a first target relationship table of the authorized sub-merchant to which the target business terminal belongs; Acquire the user account included in the first target relationship table, and use the user account included in the first target relationship table as a valid user account; The user corresponding to the valid user account is used as the valid user of the target service terminal.

4. The method according to claim 1, characterized in that: According to the living biological characteristic information of the object to be authenticated and the biological characteristic information of each valid user, completing the information authentication of the object to be authenticated includes: Determining whether the living body biometric feature information of the object to be authenticated is directly derived from a real living body; If yes, matching the living biological characteristic information of the object to be authenticated with the biological characteristic information of each valid user one by one; Determining, based on the matching result, whether there is target biometric feature information matching the living biometric feature information of the object to be authenticated in the biometric feature information of each of the valid users; If so, determining whether the target biometric information is unique; If it is unique, the valid user corresponding to the target biometric information is determined as the object to be authenticated, and the information authentication of the object to be authenticated is completed.

5. The method according to claim 4, characterized in that The method further comprises: If it is not unique, information authentication is performed based on the location information of each valid user corresponding to the target biometric information.

6. The method according to claim 5, characterized in that Performing information authentication according to the location information of each valid user corresponding to the target biometric information includes: Comparing the location information of each valid user corresponding to the target biometric information with the location information of the target service terminal; Based on the comparison result, determine whether the valid user closest to the location information of the target service terminal is unique; If it is unique, the valid user whose location information is closest to the target service terminal is determined as the object to be authenticated, and the information authentication of the object to be authenticated is completed.

7. The method according to claim 6, characterized in that The method further comprises: If it is not unique, sending an information authentication request to the user terminal of each valid user whose location information is closest to the target service terminal; When receiving confirmation information sent by each valid user closest to the location information of the target service terminal based on the information authentication request, judging the confirmation information to obtain a judgment result; The information authentication of the object to be authenticated is completed according to the judgment result.

8. The method according to claim 1, characterized in that When the information authentication is payment information authentication, the information authentication result is a payment information authentication result, and the payment information authentication result includes the user account of the object to be authenticated; After completing the information authentication of the object to be authenticated, the method further includes: Sending the payment information authentication result and the service request to the payment system, so that the payment system searches for a payment account corresponding to the user account in the payment information authentication result, and completes the payment operation based on the payment account and the service request; An invoice business request is generated according to the information of completing the payment operation, and the invoice business request is sent to the invoice system, so that the invoice system generates an electronic payment invoice according to the invoice business request, and sends the electronic payment invoice to the user-specified email address or to the target business terminal.

9. The method according to claim 1, characterized in that: When the information authentication is identity information authentication, the information authentication result is an identity information authentication result, and the identity information authentication result includes the user account of the object to be authenticated; After completing the information authentication of the object to be authenticated, the method further includes: The identity information authentication result and the service request are sent to the identity authentication system, so that the identity authentication system converts the user account in the identity information authentication result into personal identity information, and completes the identity information authentication according to the personal identity information and the service request.

10. The method according to claim 1, characterized in that Before determining the authorized merchant of the object to be authenticated, the method further includes: Obtaining a merchant authorization request sent by the object to be authenticated through its user terminal, wherein the merchant authorization request is a request generated after the object to be authenticated sets a near field function for the merchant on its user terminal, and the merchant authorization request carries merchant information; Based on the merchant authorization request, the object to be authenticated completes the authorization of the merchant corresponding to the merchant authorization request; and obtains the location information of all sub-merchants of the merchant.

11. The method according to claim 1, characterized in that: The method further comprises: Receiving information sent by a user terminal of the object to be authenticated that the user terminal has left the preset range; The record information of the user account of the object to be authenticated in the first relationship table is deleted according to the information leaving the preset range.

12. The method according to claim 1, characterized in that The method further comprises: If the current location information of the user terminal of the object to be authenticated is not obtained within the preset time, and the record information of the user account of the object to be authenticated exists in the first relationship table, the record information of the user account of the object to be authenticated in the first relationship table is deleted.

13. The method according to claim 1, characterized in that The method further comprises: Acquire the information of the business terminal sent by the business terminal, wherein the information of the business terminal includes: the sub-merchant to which the business terminal belongs, the number of the business terminal and the location of the business terminal; A second relationship table between the sub-merchants and the serial numbers of the business terminals is established in the grid area corresponding to the sub-merchants to which the business terminals belong according to the information of the business terminals, and the second relationship table is a dynamically changing relationship table.

14. The method according to claim 1, characterized in that The method further comprises: When the biometric information of the object to be authenticated is facial biometric information, the facial biometric information is the live face biometric information of the object to be authenticated, and the live face biometric information includes any one of the following forms: the live face biometric information contains the expression information of the object to be authenticated, and the live face biometric information does not contain the expression information of the object to be authenticated.

15. A near-field information authentication device, characterized in that: Applicable to servers, including: an acquisition module, configured to acquire the current location information of the object to be authenticated, and then determine the target grid area where the object to be authenticated is located, wherein when the object to be authenticated is located within a preset range of its authorized merchant, the user terminal of the object to be authenticated periodically sends the current location information of the object to be authenticated to the server; A receiving module is configured to receive an information authentication request sent by a target business terminal in the target grid area, wherein the information authentication request carries information of the target business terminal and living biometric information of the object to be authenticated; the information of the target business terminal includes: the authorized sub-merchant to which the target business terminal belongs, the number of the target business terminal and the location information of the target business terminal, and the target business terminal is a business terminal that performs information authentication on the object to be authenticated; a determination module configured to determine valid users of the target business terminal in a first relationship table in the target grid area according to information of the target business terminal, and to determine biometric information of each valid user; the first relationship table is a relationship table between each authorized merchant in the target grid area and user accounts of its valid users, and the first relationship table is a dynamically changing relationship table; An information authentication module, configured to complete information authentication of the object to be authenticated according to the living biological characteristic information of the object to be authenticated and the biological characteristic information of each of the valid users, and obtain an information authentication result; Obtaining the current location information of the object to be authenticated includes: Determining an authorized merchant of the subject to be authenticated, wherein the authorized merchant is a merchant after the subject to be authenticated sets the near field function on its user terminal and performs an authorization operation on the merchant through its user terminal, and the authorized merchant includes at least one authorized sub-merchant; Sending the location information of each authorized sub-merchant to the user terminal of the object to be authenticated, so that the user terminal of the object to be authenticated determines whether the location information of its location and the location information of each authorized sub-merchant are within the preset range; When the user terminal of the object to be authenticated determines that the location information of its location and the location information of each authorized sub-merchant are within the preset range, the current location information of the user terminal is obtained, and the current location information of the user terminal is used as the current location information of the object to be authenticated; When the user terminal of the object to be authenticated determines that the location information of its location is not within the preset range of location information of any authorized sub-merchant, the user terminal of the object to be authenticated does not send its current location to the server.

16. An electronic device comprising a memory, a processor, and a computer program stored in the memory and capable of running on the processor, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 14 are implemented.

17. A computer readable medium having a non-volatile program code executable by a processor, characterized in that: The program code causes the processor to execute the steps of the method according to any one of claims 1 to 14 above.

Images