Identity authentication method, device, storage medium and electronic device
By blocking the detection object area on the self-service terminal and collecting face images, the problem of not being able to identify simulated intelligent robots in the prior art is solved, and the security of identity authentication is improved.
Patent Information
- Application Number
- CN202111639318.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-12-29
- Publication Date
- 2024-12-27
- Estimated Expiration
- 2041-12-29
AI Technical Summary
The existing identity authentication methods cannot accurately identify non-organisms such as simulated intelligent robots, resulting in security risks in identity identification.
Before performing facial recognition and live detection on the self-service terminal, the area of the detection object is blocked, face images are collected and compared to ensure the accuracy of the recognition results.
It effectively avoids non-organisms from completing identity authentication through remote manipulation, improves the security of identity authentication, and ensures that the detected object is an organism.
Smart Images
Figure CN114299582B_ABST
Abstract
Description
Background Art
[0002] At present, in order to effectively identify non-living objects during user identity authentication, liveness detection is usually used to complete the identity authentication process. However, with the development of technologies such as simulated intelligent robots, operators can remotely control simulated intelligent robots through signal transmission to pass the liveness detection process. It can be seen that the current identity authentication method cannot accurately identify non-living objects such as simulated intelligent robots, resulting in unknown security risks in identity identification. For example, a model of a user can be printed out using 3D printing and intelligent robot technology, and the model can be remotely controlled to complete identity verification, self-service card opening, and other behaviors at the self-service terminal. Summary of the invention
[0003] The present disclosure provides an identity authentication method, device, storage medium and electronic device, which at least to a certain extent overcome the problem in the related art that a simulated intelligent robot cannot be prevented from passing liveness detection during the identity authentication process.
[0004] According to a first aspect of the present disclosure, there is provided an identity authentication method, which is applied to a self-service terminal, and the method comprises: obtaining a face recognition request of a detected object; shielding signals in an area where the detected object is located; collecting a face image of the detected object; performing face recognition and liveness detection on the detected object based on the face image of the detected object to obtain a face recognition result and a liveness detection result; and performing identity authentication on the detected object based on the face recognition result and the liveness detection result.
[0005] Optionally, the method further includes: before obtaining a face recognition request from the detected object, scanning an identity document provided by the detected object, extracting a face image presented in the identity document, and obtaining a reference image of the detected object.
[0006] Optionally, the method further includes: before shielding the signal of the area where the detected object is located, obtaining a reference image of the detected object from a server according to the face recognition request.
[0007] Optionally, face recognition is performed on the detected object based on the face image of the detected object, including: performing face comparison between the face image of the detected object and the reference image to determine whether the similarity between the face image and the reference image is greater than a threshold; if the similarity between the face image of the detected object and the reference image is greater than the threshold, determining that the detected object and the person in the reference image are the same person.
[0008] Optionally, a signal shielding device is provided on the self-service terminal, and an action area of the signal shielding device is a user operation area of the self-service terminal. Signal shielding of the area where the detected object is located includes: triggering the signal shielding device to turn on.
[0009] Optionally, the method further includes: after authenticating the detected object based on the face recognition result and the liveness detection result, releasing the signal shielding of the area where the detected object is located; and outputting the identity authentication result of the detected object.
[0010] Optionally, a signal shielding device is provided on the self-service terminal, and an action area of the signal shielding device is a user operation area of the self-service terminal. Release of signal shielding of the area where the detected object is located includes: triggering the signal shielding device to close.
[0011] According to a second aspect of the present disclosure, an identity authentication device is provided, which is applied to a self-service terminal, and the device includes: a first acquisition module, which is used to obtain a face recognition request of a detected object; a shielding module, which is used to shield signals in an area where the detected object is located; a collection module, which is used to collect a face image of the detected object; a recognition module, which is used to perform face recognition and liveness detection on the detected object according to the face image of the detected object, and obtain a face recognition result and a liveness detection result; an authentication module, which is used to perform identity authentication on the detected object according to the face recognition result and the liveness detection result.
[0012] According to a third aspect of the present disclosure, an electronic device is provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute the identity authentication method described in one or more embodiments of the present disclosure by executing the executable instructions.
[0013] According to a fourth aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the identity authentication method described in one or more embodiments of the present disclosure is implemented.
[0014] The identity authentication method, device, storage medium and electronic device of the disclosed embodiments perform signal shielding on the area where the detected object is located before performing face recognition on the detected object, then collect the face image of the detected object, and perform face recognition and liveness detection on the detected object, thereby effectively avoiding the situation where a non-biological detected object is remotely controlled to complete face recognition during the face recognition process of the detected object, and can ensure that the detected object is authenticated on the basis that the detected object is a biological object, thereby improving the security of identity authentication.
[0015] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS
[0016] The accompanying drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the specification are used to explain the principles of the present disclosure. Obviously, the accompanying drawings described below are only some embodiments of the present disclosure, and for ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without creative work.
[0017] Figure 1 is a flow chart of an identity authentication method according to one or more embodiments of the present disclosure;
[0018] Figure 2 is a flow chart of an identity authentication method according to one or more embodiments of the present disclosure;
[0019] Figure 3 is a flow chart of an identity authentication method according to one or more embodiments of the present disclosure;
[0020] Figure 4 is a flow chart of an identity authentication method according to one or more embodiments of the present disclosure;
[0021] Figure 5 is a flow chart of an identity authentication method according to one or more embodiments of the present disclosure;
[0022] Figure 6 is a structural diagram of an identity authentication device according to one or more embodiments of the present disclosure;
[0023] Figure 7 is a schematic structural diagram of an electronic device according to one or more embodiments of the present disclosure. DETAILED DESCRIPTION
[0024] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that the disclosure will be more comprehensive and complete and to fully convey the concepts of the example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.
[0025] In addition, the accompanying drawings are only schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the figures represent the same or similar parts, and thus their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.
[0026] Figure 1 is a flow chart of an identity authentication method according to one or more embodiments of the present disclosure, the method is applied to a self-service terminal and can be executed by the self-service terminal, such as Figure 1 As shown, the method includes:
[0027] Step S102: obtaining a face recognition request of the detected object;
[0028] Optionally, the self-service terminal may present an identity authentication user interface, on which a face recognition button may be presented, and in response to the detected subject clicking the face recognition button, a face recognition request is generated. Alternatively, other authentication links may be included before the face recognition link, and after the detected subject successfully passes the other authentication links, the interface may automatically jump to the face recognition link to generate a face recognition request.
[0029] Step S104: shielding the signal of the area where the detected object is located;
[0030] Optionally, based on the distance between the user and the self-service terminal when the user normally uses the self-service terminal, a preset area opposite to one side of the self-service terminal screen can be determined as the user operation area. After entering the face recognition link, the signal of the user operation area is shielded to block the signal transmission between the detected object in the user operation area and the outside world, thereby preventing the occurrence of remotely controlled intelligent simulation robots to replace humans to complete liveness detection.
[0031] Step S106: collecting a facial image of the detected object;
[0032] Optionally, a camera may be provided on the self-service terminal. After shielding the signal of the area where the detected object is located, the camera on the self-service terminal may be controlled to collect the facial image of the detected object.
[0033] Step S108: performing face recognition and liveness detection on the detected object according to the face image of the detected object to obtain a face recognition result and a liveness detection result;
[0034] Optionally, the self-service terminal may pre-acquire / or store a reference image for facial comparison of the detected object before shielding the signal in the area where the detected object is located. Therefore, in step S108, the facial image of the detected object can be compared with the reference image to confirm the similarity between the two to determine whether the detected object and the person in the reference image are the same person, thereby obtaining a facial recognition result.
[0035] When performing liveness detection on the detected object, the self-service terminal can send prompt information to prompt the detected object to perform interactive behaviors such as nodding, blinking, opening mouth, shaking head, etc., and determine whether the detected object is alive by detecting whether the detected object can complete these interactive behaviors to obtain the liveness detection result.
[0036] Step S110: performing identity authentication on the detected object according to the face recognition result and the liveness detection result.
[0037] Optionally, if the face recognition result of the detected object indicates that the detected object and the person in the reference image are the same person, and the detected object passes the liveness detection, it can be determined that the identity authentication of the detected object has passed.
[0038] The identity authentication method of the disclosed embodiment performs signal shielding on the area where the detected object is located before performing face recognition on the detected object, then collects the face image of the detected object, and performs face recognition and liveness detection on the detected object, thereby effectively avoiding the situation where a non-biological detected object is remotely controlled to complete liveness detection during the face recognition process of the detected object, and can ensure that the detected object is authenticated on the basis that it is a biological object, thereby improving the security of identity authentication.
[0039] In one or more embodiments of the present disclosure, the identity authentication method can be used to verify the identity of the person, that is, to verify whether the person being detected and the person in the identification document provided by the person are the same person. Based on this, before obtaining the face recognition request of the detected object, the face image in the identification document of the detected object can be obtained first. Figure 2 is a flow chart of an identity authentication method according to one or more embodiments of the present disclosure, such as Figure 2 As shown, this method Figure 1 The method shown may further include:
[0040] Step S202: before obtaining a face recognition request from the detected object, scanning the identity document provided by the detected object, extracting the face image presented in the identity document, and obtaining a reference image of the detected object.
[0041] Optionally, before the detected object undergoes face recognition, the detected object may provide its identity document, such as aligning the front of its identity document with the camera of the self-service terminal so that the camera can capture the image of the front of the identity document, and through image recognition technology, identify and extract the face image in the image as a reference image in the face recognition process. After obtaining the reference image of the detected object, the image can be stored in the self-service terminal so that the reference image can be used for comparison in the face recognition process.
[0042] Figure 3 is a flow chart of an identity authentication method according to one or more embodiments of the present disclosure, such as Figure 3 As shown, this method Figure 1 Based on the method shown, it can further include:
[0043] Step S302: before shielding the signal of the area where the detected object is located, obtaining a reference image of the detected object from a server according to the face recognition request.
[0044] Optionally, the face recognition request may include the identity of the detected object, so that the server can return a face image of the detected object as a reference image of the detected object according to the identity of the detected object.
[0045] Before signal shielding is performed on the area where the detected object is located, a reference image of the detected object is first obtained from the server, which can avoid the problem that after signal shielding, the network connection of the self-service terminal is affected and enters an offline state and cannot obtain a reference image, resulting in the self-service terminal being unable to perform face recognition and liveness detection on the detected object in an offline state. After obtaining the reference image of the detected object from the server, the obtained reference image can also be stored locally in the self-service terminal for use in subsequent face recognition processes.
[0046] For example, user A (an example of the detected object) conducts business through a self-service terminal. User A is a registered user, so user A has a legal user account. The server side stores the identity information of user A, such as the facial image of user A. On this basis, in order to avoid affecting the signal of the self-service terminal itself when the signal is blocked in the area where user A is located, after obtaining the facial recognition request of user A and before the signal is blocked in the area where user A is located, the facial image of user A can be obtained from the server side for use as a reference image in the facial recognition link.
[0047] In addition, if it is clear that signal shielding of the area where the detected object is located will not affect the signal of the self-service terminal itself, the face image of the detected object can be obtained from the server as a reference image during the face recognition stage.
[0048] In one or more embodiments of the present disclosure, performing face recognition on the detected object according to the face image of the detected object may include:
[0049] Performing face comparison between the face image of the detected object and the reference image to determine whether the similarity between the face image and the reference image is greater than a threshold;
[0050] Optionally, when comparing the face image of the detected object with the reference image, the similarity between the face image of the detected object and the reference image can be calculated with the help of the existing face recognition algorithm. The above threshold can be set in advance, and different thresholds can be set according to the risk level of the current business scenario (referring to the business scenario that triggers the current identity authentication process). For example, the higher the risk level of the current business scenario, the larger the threshold can be set accordingly. Conversely, the lower the risk level of the current business scenario, the smaller the threshold can be set accordingly.
[0051] If the similarity between the face image of the detected object and the reference image is greater than a threshold, it is determined that the detected object and the person in the reference image are the same person.
[0052] In one or more embodiments of the present disclosure, the self-service terminal may be provided with a signal shielding device, and the effective area of the signal shielding device is the user operation area of the self-service terminal. Based on this, signal shielding of the area where the detected object is located may include:
[0053] Optionally, the signal shielding device can be triggered to be turned on by controlling the switch of the signal shielding device, so that after the self-service terminal obtains the face recognition request, it controls the switch of the signal shielding device to trigger the signal shielding device to be turned on.
[0054] Optionally, the signal shielding device can be installed at a designated location of the self-service terminal so that the control range of the signal shielding device can cover the user operation area of the self-service terminal. Alternatively, in order to avoid affecting the transmission of the self-service terminal signal after the signal shielding device is turned on, the signal shielding device can also be set in the user operation area of the self-service terminal.
[0055] The identity authentication method of the disclosed embodiment can automatically trigger the signal shielding device to open when the self-service terminal enters the identity authentication stage, and can cut off the communication connection of the detected object from the perspective of the signal propagation path. Therefore, by performing liveness detection on the detected object, it is effectively prevented that simulated intelligent robots or the like perform identity authentication instead of real people, thereby improving the security of real-name business handling through the self-service terminal.
[0056] Figure 4 is a flow chart of an identity authentication method according to one or more embodiments of the present disclosure, such as Figure 4 As shown, this method Figure 1 Based on the method shown, it can further include:
[0057] Step S402: after the detected object is authenticated according to the face recognition result and the liveness detection result, the signal shielding of the area where the detected object is located is released;
[0058] Since the detected object is usually close to the self-service terminal when using the self-service terminal for identity authentication, considering that signal shielding in the area where the detected object is located may have an adverse effect on the network connection of the self-service terminal itself, causing the self-service terminal to be in offline mode, after the detected object is authenticated according to the face recognition result and the liveness detection result to obtain the identity authentication result, the signal shielding of the area where the detected object is located can be lifted to ensure that the self-service terminal can execute subsequent processes of identity authentication when the communication status is good, such as reporting of identity authentication results, handling of services or card activation, etc.
[0059] Step S404: output the identity authentication result of the detected object.
[0060] Optionally, the identity authentication result of the detected object can be output on the user interface of the self-service terminal for the detected object to view. Alternatively, if the detected object initiates a request for card activation or business processing before the identity authentication process is started, the identity authentication result can also be sent to the corresponding business processing server, so that the server can determine whether to continue to provide card activation or business processing services to the detected object based on the identity authentication result.
[0061] In one or more embodiments of the present disclosure, a signal shielding device is provided on the self-service terminal, and the effective area of the signal shielding device is the user operation area of the self-service terminal. Based on this, releasing the signal shielding of the area where the detected object is located may include:
[0062] Trigger the signal shielding device to turn off. Optionally, the signal shielding device can be triggered to turn off by controlling the switch of the signal shielding device, so that the self-service terminal can authenticate the detected object according to the face recognition result and the liveness detection result, and after obtaining the authentication result, the subsequent authentication process can be performed when the communication status of the self-service terminal is good. Optionally, the self-service terminal can send a signal to the signal shielding device to trigger the switch of the signal shielding device to turn off, so that the signal shielding device stops working.
[0063] Optionally, the identity authentication method of one or more embodiments of the present disclosure may further include: before obtaining a face recognition request from the detected object, obtaining a service request initiated by the detected object, wherein the service request may include an identity identifier of the detected object, sending the service request to a server, and receiving an identity authentication request for the detected object returned by the server.
[0064] The following uses the person-document verification as an example to illustrate the identity authentication method of the embodiment of the present disclosure. Figure 5 As shown in the figure, the identity verification process includes:
[0065] Step S502: Identify the user's ID card and obtain the user's face image;
[0066] Step S504: Turn on the signal shielding device;
[0067] Step S506: Performing liveness detection on the user;
[0068] Step S508: Performing face recognition on the user;
[0069] Step S510: Obtain the result of the person-witness verification and turn off the signal shielding device.
[0070] Among them, when the self-service terminal enters the identity verification stage, it can automatically trigger a pre-installed switch, which can turn on the signal shielding device. The effective area of the signal shielding device is the current user's operation area, thereby blocking the signal transmission between the current user and the outside world.
[0071] It should be noted that the execution order of the above steps S506 and S508 can be to execute step S506 first and then execute step S508, or to execute step S508 first and then execute step S506. The execution order of the two steps has no effect on the entire identity verification process.
[0072] The above steps S504 to S508 can be executed when the self-service terminal is in an offline state. Therefore, even if the self-service terminal is in an offline state after signal shielding, it will not affect the execution of the entire identity verification process.
[0073] Figure 6 is a schematic diagram of the structure of an identity authentication device according to one or more embodiments of the present disclosure, the device is applied to a self-service terminal, for example, the device can be set in the self-service terminal, such as Figure 6 As shown, the device 610 includes:
[0074] A first acquisition module 612 is used to obtain a face recognition request of a detected object;
[0075] The shielding module 614 is used to shield the signal of the area where the detected object is located;
[0076] The acquisition module 616 is used to acquire the face image of the detected object;
[0077] The recognition module 618 is used to perform face recognition and liveness detection on the detected object according to the face image of the detected object, and obtain a face recognition result and a liveness detection result;
[0078] The authentication module 620 is used to perform identity authentication on the detected object according to the face recognition result and the liveness detection result.
[0079] In one or more embodiments of the present disclosure, the identity authentication device may further include:
[0080] The scanning module is used to scan the identity document provided by the detected object before obtaining the face recognition request of the detected object, extract the face image presented in the identity document, and obtain the reference image of the detected object.
[0081] In one or more embodiments of the present disclosure, the identity authentication device may further include:
[0082] The second acquisition module is used to acquire a reference image of the detected object from a server according to the face recognition request before performing signal shielding on the area where the detected object is located.
[0083] In one or more embodiments of the present disclosure, the identification module may be specifically used for:
[0084] Performing face comparison between the face image of the detected object and the reference image to determine whether the similarity between the face image and the reference image is greater than a threshold;
[0085] If the similarity between the face image of the detected object and the reference image is greater than the threshold, it is determined that the detected object and the person in the reference image are the same person.
[0086] In one or more embodiments of the present disclosure, a signal shielding device is provided on the self-service terminal, and the action area of the signal shielding device is the user operation area of the self-service terminal. The shielding module can be specifically used for:
[0087] The signal shielding device is triggered to start.
[0088] In one or more embodiments of the present disclosure, the identity authentication device may further include:
[0089] A release module, used for releasing the signal shielding of the area where the detected object is located after the detected object is authenticated according to the face recognition result and the liveness detection result;
[0090] The output module is used to output the identity authentication result of the detected object.
[0091] In one or more embodiments of the present disclosure, a signal shielding device is provided on the self-service terminal, and the action area of the signal shielding device is the user operation area of the self-service terminal. The release module can be specifically used for:
[0092] The signal shielding device is triggered to close.
[0093] The identity authentication device of one or more embodiments of the present disclosure may further include at least one of the following modules:
[0094] ID card recognition module: identifies the authenticity of the user's ID card through the sensing area and extracts valid information, where the valid information may include a facial image.
[0095] Automatic trigger on / off module: used for signal shielding device switch control. When it is recognized that the user clicks the face recognition button, the signal shielding device is turned on; when the face recognition result is returned, the signal shielding device is turned off.
[0096] The signal shielding module (an example of the above-mentioned signal shielding device) is triggered to start when the self-service terminal enters the face recognition stage, and performs signal shielding on the operation area of the self-service terminal.
[0097] Liveness detection module: used to verify whether the current user can perform corresponding liveness interactive actions such as nodding and blinking according to the prompts of the self-service terminal.
[0098] Face recognition module: The self-service terminal compares the facial features of the image of the current user taken with the head portrait extracted from the ID card, and returns the result of whether they are the same person.
[0099] One or more embodiments of the present disclosure further provide an electronic device, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute any one of the identity authentication methods provided by the embodiments of the present disclosure by executing the executable instructions.
[0100] One or more embodiments of the present disclosure further provide a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, any one of the identity authentication methods provided by the embodiments of the present disclosure is implemented.
[0101] It will be appreciated by those skilled in the art that various aspects of the present invention may be implemented as a system, method or program product. Therefore, various aspects of the present invention may be specifically implemented in the following forms, namely: a complete hardware implementation, a complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software, which may be collectively referred to herein as a "circuit", "module" or "system".
[0102] Refer to the following Figure 7 An electronic device 700 according to this embodiment of the present invention will be described. Figure 7 The electronic device 700 shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.
[0103] like Figure 7 As shown, the electronic device 700 is in the form of a general computing device. The components of the electronic device 700 may include but are not limited to: at least one processing unit 710, at least one storage unit 720, and a bus 730 connecting different system components (including the storage unit 720 and the processing unit 710).
[0104] The storage unit stores program codes, which can be executed by the processing unit 710, so that the processing unit 710 performs the steps according to various exemplary embodiments of the present invention described in the above “Exemplary Method” section of this specification. For example, the processing unit 710 can perform the following steps: Figure 1 S102 shown in the figure, obtains a face recognition request of the detected object; S104, performs signal shielding on the area where the detected object is located; S106, collects a face image of the detected object; S108, performs face recognition and liveness detection on the detected object according to the face image of the detected object, and obtains a face recognition result and a liveness detection result; S120, performs identity authentication on the detected object according to the face recognition result and the liveness detection result.
[0105] The storage unit 720 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 7201 and / or a cache storage unit 7202 , and may further include a read-only storage unit (ROM) 7203 .
[0106] The storage unit 720 may also include a program / utility 7204 having a set (at least one) of program modules 7205, such program modules 7205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.
[0107] Bus 730 may represent one or more of several types of bus structures, including a memory unit bus or memory unit controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.
[0108] The electronic device 700 may also communicate with one or more external devices 800 (e.g., keyboards, pointing devices, Bluetooth devices, etc.), may also communicate with one or more devices that enable a user to interact with the electronic device 700, and / or communicate with any device that enables the electronic device 700 to communicate with one or more other computing devices (e.g., routers, modems, etc.). Such communication may be performed via an input / output (I / O) interface 750. Furthermore, the electronic device 700 may also communicate with one or more networks (e.g., local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) via a network adapter 760. As shown, the network adapter 760 communicates with other modules of the electronic device 700 via a bus 730. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device 700, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, etc.
[0109] In an exemplary embodiment of the present disclosure, a computer-readable storage medium is also provided, on which a program product capable of implementing the above method of the present specification is stored. In some possible implementations, various aspects of the present invention can also be implemented in the form of a program product, which includes a program code, and when the program product is run on a terminal device, the program code is used to enable the terminal device to execute the steps according to various exemplary embodiments of the present invention described in the above "Exemplary Method" section of the present specification.
[0110] A program product for implementing the above method according to an embodiment of the present invention is described, which can adopt a portable compact disk read-only memory (CD-ROM) and include program code, and can be run on a terminal device, such as a personal computer. However, the program product of the present invention is not limited thereto, and in this document, a readable storage medium can be any tangible medium containing or storing a program, which can be used by or in combination with an instruction execution system, an apparatus or a device.
[0111] The program product may use any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.
[0112] Computer readable signal media may include data signals propagated in baseband or as part of a carrier wave, in which readable program code is carried. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Readable signal media may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.
[0113] The program code embodied on the readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.
[0114] Program code for performing the operations of the present invention may be written in any combination of one or more programming languages, including object-oriented programming languages such as Java, C++, etc., and conventional procedural programming languages such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving a remote computing device, the remote computing device may be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., through the Internet using an Internet service provider).
[0115] It should be noted that, although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into multiple modules or units to be embodied.
[0116] In addition, although the steps of the method in the present disclosure are described in a specific order in the drawings, this does not require or imply that the steps must be performed in this specific order, or that all the steps shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps, etc.
[0117] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, including several instructions to enable a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) to execute the method according to the implementation of the present disclosure.
[0118] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. This application is intended to cover any modification, use or adaptation of the present disclosure, which follows the general principles of the present disclosure and includes common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present disclosure are indicated by the appended claims.
Claims
1. An identity authentication method, applied to a self-service terminal, characterized in that: The method comprises: Obtain a face recognition request for the detected object; Performing signal shielding on the area where the detected object is located to block signal transmission between the detected object and the outside world; Acquiring a facial image of the detected object; Performing face recognition and liveness detection on the detected object according to the face image of the detected object to obtain a face recognition result and a liveness detection result, wherein when performing liveness detection on the detected object, whether the detected object is alive is determined by detecting whether the detected object can complete the interactive behavior in response to prompting the detected object to perform an interactive behavior, thereby obtaining a liveness detection result; The identity of the detected object is authenticated according to the face recognition result and the liveness detection result.
2. The method according to claim 1, characterized in that The method further comprises: Before obtaining a face recognition request from a detected object, an identity document provided by the detected object is scanned, and a face image presented in the identity document is extracted to obtain a reference image of the detected object.
3. The method according to claim 1, characterized in that The method further comprises: Before shielding the signal of the area where the detected object is located, a reference image of the detected object is obtained from a server according to the face recognition request.
4. The method according to claim 2 or 3, characterized in that: Performing face recognition on the detected object according to the face image of the detected object includes: Performing face comparison between the face image of the detected object and the reference image to determine whether the similarity between the face image and the reference image is greater than a threshold; If the similarity between the face image of the detected object and the reference image is greater than the threshold, it is determined that the detected object and the person in the reference image are the same person.
5. The method according to claim 1, characterized in that The self-service terminal is provided with a signal shielding device, the action area of the signal shielding device is the user operation area of the self-service terminal, and the signal shielding device is performed on the area where the detected object is located, including: The signal shielding device is triggered to start.
6. The method according to claim 1, characterized in that The method further comprises: After the detected object is authenticated according to the face recognition result and the liveness detection result, the signal shielding of the area where the detected object is located is released; Output the identity authentication result of the detected object.
7. The method according to claim 6, characterized in that The self-service terminal is provided with a signal shielding device, the action area of the signal shielding device is the user operation area of the self-service terminal, and the signal shielding of the area where the detected object is located is released, including: The signal shielding device is triggered to close.
8. An identity authentication device, applied to a self-service terminal, characterized in that: The device comprises: A first acquisition module is used to obtain a face recognition request of a detected object; A shielding module, used to shield the area where the detected object is located, so as to block the signal transmission between the detected object and the outside world; An acquisition module, used for acquiring a face image of the detected object; an identification module, configured to perform face recognition and liveness detection on the detected object according to the face image of the detected object, and obtain a face recognition result and a liveness detection result, wherein when performing liveness detection on the detected object, whether the detected object is alive is determined by detecting whether the detected object can complete the interactive behavior in response to prompting the detected object to perform an interactive behavior, and obtaining the liveness detection result; The authentication module is used to perform identity authentication on the detected object according to the face recognition result and the liveness detection result.
9. An electronic device, characterized in that: include: processor; as well as A memory, configured to store executable instructions of the processor; The processor is configured to execute the identity authentication method described in any one of claims 1 to 7 by executing the executable instructions.
10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the identity authentication method described in any one of claims 1 to 7 is implemented.