Operation process real person authentication method and device

Abstract

The present invention provides a method and device for real-person authentication of an operation process, the method comprising: receiving an authentication request sent by a target terminal; determining an environmental detection result of the target terminal according to state information; the environmental detection result is used to indicate whether the target terminal is in a target area; when the environmental detection result indicates that the target terminal is in the target area, performing face recognition on the current user of the target terminal to obtain a face recognition result; the face recognition result is used to indicate whether the current user is the target user; when the face recognition result indicates that the current user is the target user, determining that the current user is successfully authenticated. Among them, the current user can complete the real-person authentication of the operation process through the target terminal held, which greatly improves the efficiency of authentication; in addition, when the environmental detection result and the face authentication result are satisfied at the same time, determining that the current user is successfully authenticated, which greatly improves the correctness of authentication.

Description

Technical Field

[0001] The present invention relates to the technical field of user authentication, and in particular to a method and device for real-person authentication of an operation process. Background Art

[0002] In the real estate industry, real estate agents (hereinafter referred to as agents) often need to go out for work during their daily work. For example, they need to go out to collect properties or take clients to see properties. Based on the fact that agents often go out for work, it is necessary to authenticate and manage the period when the agents are out in the daily attendance.

[0003] In the prior art, brokers usually provide work photos while away from home and report location data via WeChat. Staff members organize the work photos while away from home and check the destinations and location data one by one, thereby achieving work authentication management for brokers while away from home.

[0004] However, staff members need to organize and check photos of their work outside and the locations reported on WeChat one by one, which leads to inefficient work certification. Summary of the invention

[0005] The present invention provides a method and device for real-person authentication of an operation process, which are used to solve the defect of low efficiency of operation authentication in the prior art and improve the efficiency of employee operation authentication.

[0006] The present invention provides a method for real-person authentication of an operation process, comprising:

[0007] Receiving an authentication request sent by a target terminal; the authentication request includes identification information of a target user and status information of the target terminal; the status information includes at least one of the following: first location information, an identification of a wireless local area network to which the target terminal is connected, and a list of first wireless local area networks searched by the target terminal;

[0008] Determine, according to the state information, an environmental detection result of the target terminal; the environmental detection result is used to indicate whether the target terminal is in a target area;

[0009] When the environmental detection result indicates that the target terminal is in the target area, performing face recognition on a current user of the target terminal to obtain a face recognition result; the face recognition result is used to indicate whether the current user is the target user;

[0010] When the face recognition result indicates that the current user is the target user, it is determined that the current user is successfully authenticated.

[0011] According to a method for real-person authentication of an operation process provided by the present invention, determining the environmental detection result of the target terminal according to the state information includes:

[0012] Acquire characteristic information of a target store associated with the target user; the characteristic information includes at least one of the following: second location information, a wireless local area network identifier provided by a wireless local area network device of the target store, and a list of second wireless local area networks searched by an employee terminal of the target store at the target store;

[0013] The state information is matched with the feature information to obtain the environment detection result.

[0014] According to a method for real-person authentication of an operation process provided by the present invention, matching the state information with the feature information to obtain the environment detection result includes:

[0015] The state information is matched with the feature information, and when the following conditions are met, the environment detection result is determined to be that the target terminal is in the target area, or when any of the following conditions are not met, the environment detection result is determined to be that the target terminal is not in the target area:

[0016] A first distance between the target terminal and the target store does not exceed a first threshold;

[0017] The identifier of the wireless local area network to which the target terminal is connected is the same as the identifier of the wireless local area network provided by the wireless local area network device of the target store;

[0018] The number of wireless LAN identifiers in the first wireless LAN list searched by the target terminal and in the second wireless LAN list searched by the employee terminal of the target store exceeds a second threshold.

[0019] According to a method for real-person authentication of an operation process provided by the present invention, before receiving an authentication request sent by a target terminal, the method further includes:

[0020] receiving the location information of the employee terminal, the identifier of the wireless local area network to which the employee terminal is connected, and the list of wireless local area networks searched by the employee terminal, sent by the employee terminal of the target store;

[0021] The characteristic information is determined based on the location information of the employee terminal, the identifier of the wireless local area network to which the employee terminal is connected, and the list of wireless local area networks searched by the employee terminal.

[0022] According to a method for real-person authentication of an operation process provided by the present invention, determining the environmental detection result of the target terminal according to the state information includes:

[0023] Obtaining the number of first successful authentications of the current user of the target terminal within the first target time period;

[0024] When the first number is less than a third threshold, determining an environment detection result of the target terminal according to the state information;

[0025] When the first number of times is equal to a third threshold, it is determined that the current user authentication fails.

[0026] According to a method for real-person authentication of an operation flow provided by the present invention, when the face recognition result indicates that the current user is the target user, after determining that the current user authentication is successful, the method further includes:

[0027] Obtaining the second number of successful authentications of the target user within the second target time period;

[0028] When the second number exceeds a fourth threshold, the level of the target user's identification information is increased by at least one level; when the second number does not exceed the fourth threshold, the level of the target user's identification information is reduced by at least one level.

[0029] According to a method for real-person authentication of an operation flow provided by the present invention, when the face recognition result indicates that the current user is the target user, after determining that the current user authentication is successful, the method further includes:

[0030] When the level of the target user's identification information does not exceed the target level and the target duration is reached, face recognition is performed on the user holding the target terminal; if the recognition fails, the user holding the target terminal is instructed to perform face recognition again.

[0031] The present invention also provides a work process real person authentication device, comprising:

[0032] A first receiving module is used to receive an authentication request sent by a target terminal; the authentication request includes identification information of a target user and status information of the target terminal; the status information includes at least one of the following: first location information, an identification of a wireless local area network to which the target terminal is connected, and a list of first wireless local area networks searched by the target terminal;

[0033] A first determination module, configured to determine an environment detection result of the target terminal according to the state information; the environment detection result is used to indicate whether the target terminal is in a target area;

[0034] A first processing module, configured to perform face recognition on a current user of the target terminal to obtain a face recognition result when the environment detection result indicates that the target terminal is in the target area; the face recognition result is used to indicate whether the current user is the target user;

[0035] The second determination module is used to determine that the current user authentication is successful when the face recognition result indicates that the current user is the target user.

[0036] According to a work flow real-person authentication device provided by the present invention, the first determination module is specifically used for:

[0037] Acquire characteristic information of a target store associated with the target user; the characteristic information includes at least one of the following: second location information, a wireless local area network identifier provided by a wireless local area network device of the target store, and a list of second wireless local area networks searched by an employee terminal of the target store at the target store;

[0038] The state information is matched with the feature information to obtain the environment detection result.

[0039] According to a work flow real-person authentication device provided by the present invention, the first determination module is specifically used for:

[0040] The state information is matched with the feature information, and when the following conditions are met, the environment detection result is determined to be that the target terminal is in the target area, or when any of the following conditions are not met, the environment detection result is determined to be that the target terminal is not in the target area:

[0041] A first distance between the target terminal and the target store does not exceed a first threshold;

[0042] The identifier of the wireless local area network to which the target terminal is connected is the same as the identifier of the wireless local area network provided by the wireless local area network device of the target store;

[0043] The number of wireless LAN identifiers in the first wireless LAN list searched by the target terminal and in the second wireless LAN list searched by the employee terminal of the target store exceeds a second threshold.

[0044] According to a work process real-person authentication device provided by the present invention, the device also includes:

[0045] A second receiving module is used to receive the location information of the employee terminal, the identifier of the wireless local area network connected to the employee terminal, and the list of wireless local area networks searched by the employee terminal, which are sent by the employee terminal of the target store at the target store;

[0046] The third determination module is used to determine the characteristic information based on the location information of the employee terminal, the identifier of the wireless local area network to which the employee terminal is connected, and the list of wireless local area networks searched by the employee terminal.

[0047] According to a work flow real-person authentication device provided by the present invention, the first determination module is specifically used for:

[0048] Obtaining the number of first successful authentications of the current user of the target terminal within the first target time period;

[0049] When the first number is less than a third threshold, determining an environment detection result of the target terminal according to the state information;

[0050] When the first number of times is equal to a third threshold, it is determined that the current user authentication fails.

[0051] According to a work process real-person authentication device provided by the present invention, the device also includes:

[0052] An acquisition module, used for acquiring a second number of successful authentications of the target user within a second target time period;

[0053] The second processing module is used to increase the level of the identification information of the target user by at least one level when the second number exceeds a fourth threshold; and to reduce the level of the identification information of the target user by at least one level when the second number does not exceed the fourth threshold.

[0054] According to a work process real-person authentication device provided by the present invention, the device also includes:

[0055] The third processing module is used to perform face recognition on the user holding the target terminal when the level of the identification information of the target user does not exceed the target level and the target duration is reached; if the recognition fails, instruct the user holding the target terminal to re-perform face recognition.

[0056] The present invention also provides an authentication server, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the real-person authentication method for the operation flow as described above are implemented.

[0057] The present invention also provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of the operation process real-person authentication method as described in any one of the above are implemented.

[0058] The present invention also provides a computer program product, including a computer program, which, when executed by a processor, implements the steps of any of the above-mentioned operation process real-person authentication methods.

[0059] The present invention provides a method and device for real-person authentication of an operation process, and the method includes: determining the environmental detection result of the target terminal according to the identification information of the target user and the status information of the target terminal, that is, determining whether the target terminal is in the target area; when the environmental detection result of the target terminal indicates that the target terminal is in the target area, performing face recognition on the current user of the target terminal to obtain a face recognition result, that is, determining whether the current user of the target terminal is the target user. Among them, on the one hand, the current user can complete the real-person authentication of the operation process through the target terminal held, which greatly improves the efficiency of the real-person authentication of the operation process; on the other hand, when the environmental detection result indicates that the target terminal is in the target area and the current user is the target user, the current user authentication is determined to be successful, which greatly improves the correctness of the real-person authentication of the operation process. BRIEF DESCRIPTION OF THE DRAWINGS

[0060] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0061] Figure 1 This is one of the flowcharts of the operation process real person authentication method provided by the present invention;

[0062] Figure 2 It is a schematic diagram of the flow of face recognition processing provided by the present invention;

[0063] Figure 3 This is the second flow chart of the operation process real person authentication method provided by the present invention;

[0064] Figure 4 This is the third flow chart of the operation process real person authentication method provided by the present invention;

[0065] Figure 5 This is one of the structural schematic diagrams of the operation process real person authentication device provided by the present invention;

[0066] Figure 6 This is the second structural diagram of the operation process real person authentication device provided by the present invention;

[0067] Figure 7 This is the third structural diagram of the operation process real person authentication device provided by the present invention;

[0068] Figure 8 It is a schematic diagram of the entity structure of the authentication server provided by the present invention. DETAILED DESCRIPTION

[0069] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0070] Combine the following Figure 1-Figure 4 The present invention describes the process flow real person authentication method.

[0071] Figure 1 This is one of the flowcharts of the operation process real person authentication method provided by the present invention, such as Figure 1 As shown, the method includes:

[0072] Step 110, receiving an authentication request sent by a target terminal. The authentication request includes identification information of a target user and status information of the target terminal. The status information includes at least one of the following: first location information, an identification of a wireless local area network to which the target terminal is connected, and a list of first wireless local area networks searched by the target terminal.

[0073] The execution subject of the present invention may be an authentication server, or an authentication processing device disposed in the authentication server, wherein the authentication processing device may be implemented by a combination of software and / or hardware.

[0074] Optionally, the target terminal can be a device such as a mobile phone, computer or tablet computer held by the employee. The employee interacts directly with the application on the target terminal held by him. It should be noted that in the application, employees correspond to accounts one by one, that is, employees correspond to unique accounts, and the account belongs to unique users. Employees need to enter the correct account information to successfully log in to the application on the target terminal held by them, and then interact directly with the application. During the interaction between the employee and the application, the employee issues an authentication request. In response to the user's authentication request, the application sends an authentication request to the authentication server through the target terminal. Among them, the application includes but is not limited to applets, browsers, web pages, etc. built into the target terminal.

[0075] Optionally, the target user is the user corresponding to the account that sends an authentication request to the authentication server through the application. For example, an employee successfully logs into the authentication application (Application, APP) by logging into the first account, and then sends an authentication request. The user corresponding to the first account is the target user. The identification information of the target user can be the account information required to log into the authentication APP. For example, it can be an account name. Among them, the first location is the location of the target terminal, and the first location information can be, for example, the longitude and latitude corresponding to the first location.

[0076] The identifier of the wireless local area network connected to the target terminal can be the basic service set identifier (BSSID) corresponding to the WiFi connected to the target terminal. The first wireless local area network list searched by the target terminal is the service set identifier (SSID) corresponding to all WiFi that the target terminal can search or scan at the first position.

[0077] The various information described in the present invention, such as the identification information of the target user, the status information of the target terminal, etc., are all obtained after the user's authorization. Before the present invention is implemented, the user's consent must be obtained to collect the corresponding information to achieve user authentication.

[0078] Step 120: Determine the environment detection result of the target terminal according to the state information. The environment detection result is used to indicate whether the target terminal is in the target area.

[0079] Optionally, the target area may be the area where the store to which the target user belongs is located. That is, if the target user is an employee of the first store, the area where the first store is located is the target area.

[0080] Optionally, the target area may be the area where the first store is located. Specifically, the information of the target area may include target longitude and latitude information corresponding to the location of the first store, BSSID of the WiFi set by the first store, and the like.

[0081] Optionally, the distance between the first location of the target terminal and the location of the first store is determined based on the latitude and longitude information of the first location of the target terminal and the target longitude and latitude information corresponding to the location of the first store. If the distance between the first location of the target terminal and the location of the first store is less than or equal to the distance threshold, the environmental detection result of the target terminal is determined to be: the target terminal is in the target area. If the distance between the first location of the target terminal and the location of the first store is greater than the distance threshold, the environmental detection result of the target terminal is determined to be: the target terminal is not in the target area.

[0082] Step 130: When the environment detection result indicates that the target terminal is in the target area, face recognition is performed on the current user of the target terminal to obtain a face recognition result. The face recognition result is used to indicate whether the current user is the target user.

[0083] Based on the above step 120, when the environment detection result of the target terminal indicates that the target terminal is in the target area, face recognition processing is then performed on the current user of the target terminal.

[0084] Optionally, the authentication server performs face recognition on the current user of the target terminal to obtain a face recognition result. The face recognition result is used to indicate whether the current user is the target user.

[0085] The various information described in the present invention, such as the current user's face information, is obtained after the user's authorization. Before the present invention is implemented, the user's consent must be obtained to collect the corresponding information to achieve user authentication.

[0086] Next, combine Figure 2 , this optional implementation is explained through a specific example, Figure 2 FIG. 1 is a flow chart of face recognition processing provided by the present invention. Figure 2 As shown, the face recognition process provided by the present invention includes the following steps S210-S270, wherein:

[0087] S210. The authentication server sends a face recognition processing instruction to the target terminal.

[0088] S220. After receiving the face recognition processing instruction, the target terminal sends a request to the authentication server to obtain face authentication configuration parameters.

[0089] Among them, face authentication configuration parameters may include: illumination confidence, blur confidence, face occlusion ratio, living action sequence (blinking, opening mouth, looking up and down, shaking head left and right, etc.), face deflection angle (up and down, left and right, front and back), etc.

[0090] S230: The target terminal receives face authentication configuration parameters.

[0091] S240: The target terminal performs live face collection to obtain at least one live face picture of the current user of the target terminal.

[0092] S250: The target terminal sends the at least one living face photo to the authentication server.

[0093] S260: The authentication server searches for a photo of the target user locally according to the identification information of the target user.

[0094] S270: Perform face comparison processing on the target user photo and the at least one living face picture to obtain a face recognition result.

[0095] The face recognition result is used to indicate whether the current user is the target user. Specifically, if the target user photo and the at least one live face picture are both consistent, the face recognition result is determined to be that the current user is the target user. If the target user photo and the at least one live face picture are inconsistent, the face recognition result is determined to be that the current user is not the target user.

[0096] S280. The authentication server sends the face recognition result to the target terminal.

[0097] Step 140: When the face recognition result indicates that the current user is the target user, determine that the current user authentication is successful.

[0098] Based on the above step 130, when the face recognition result indicates that the current user is the target user, it can be determined that the authentication of the current user is successful. In other words, the authentication result corresponding to the authentication request sent by the target terminal to the authentication server is successful authentication.

[0099] The operation process real-person authentication method provided by the present invention determines the environmental detection result of the target terminal according to the identification information of the target user and the status information of the target terminal, that is, determines whether the target terminal is in the target area; when the environmental detection result of the target terminal indicates that the target terminal is in the target area, the current user of the target terminal is subjected to face recognition to obtain a face recognition result, that is, determines whether the current user of the target terminal is the target user. Among them, on the one hand, the current user can complete the operation process real-person authentication through the target terminal held, which greatly improves the efficiency of the operation process real-person authentication; on the other hand, when the environmental detection result indicates that the target terminal is in the target area and the current user is the target user, the current user authentication is determined to be successful, which greatly improves the correctness of the operation process real-person authentication.

[0100] Optionally, Figure 3 This is the second flow chart of the operation process real person authentication method provided by the present invention, such as Figure 3 As shown, the method includes:

[0101] Step 310: receiving the location information of the employee terminal, the identifier of the wireless local area network to which the employee terminal is connected, and the list of wireless local area networks searched by the employee terminal, which are sent by the employee terminal of the target store.

[0102] Optionally, the employee is a staff member of the target store, and the employee terminal is a terminal held by the employee.

[0103] Optionally, the location information of the employee terminal may be the latitude and longitude of the employee terminal's location; the identifier of the wireless local area network to which the employee terminal is connected may be the BSSID of the WiFi to which the employee terminal is connected; the wireless local area network list searched by the employee terminal may include at least one WiFi SSID that the employee terminal can search when it is in the target store.

[0104] Optionally, before performing step 310, the employee's identity may be authenticated first. Identity authentication may include the following conditions: completion of real-name authentication, the store where the employee is located is connected to the Internet, and the identity authentication function is enabled in the city where the employee is located. If the employee meets all the above conditions, the employee may proceed to step S310. It should be noted that the role of identity authentication is mainly to confirm whether the employee's information meets the conditions for real-name authentication of subsequent operation processes.

[0105] Optionally, all employee information is updated during a preset period. For example, the preset period may be from 0:00 to 3:00 every day. It should be noted that all employee information is stored in a database. All employee information is obtained during each preset period and stored in a data warehouse tool.

[0106] For example, the data warehousing tool may be a Hive table. The specific process of the update operation is: in a preset period, all employee information in the preset period is compared with the information of all employees in the previous preset period, and the difference data is obtained and stored in the Hive table. For example, the difference data includes at least the following three types: newly added data, out-of-pool data, and updated data.

[0107] The three types of difference data are further explained with the information of employee 1: New data: employee 1's information does not exist in all employee information of the previous preset period, but employee 1's information exists in all employee information of this preset period; Out-of-pool data: employee 1's information exists in all employee information of the previous preset period, but employee 1's information does not exist in all employee information of this preset period; Updated data: employee 1's information exists in all employee information of the previous preset period and all employee information of this preset period, but employee 1's information in this preset period has changed compared with the previous preset period. Next, synchronize the difference data to the database through the Hive table. The database updates all employee information based on the difference data.

[0108] Step 320: determining characteristic information based on the location information of the employee terminal, the identifier of the wireless local area network to which the employee terminal is connected, and the list of wireless local area networks searched by the employee terminal.

[0109] Optionally, the characteristic information refers to characteristic information of the target store, wherein the characteristic information may include at least one of the following: the second location information, the wireless local area network identifier provided by the wireless local area network device of the target store, and the second wireless local area network list searched by the employee terminal of the target store in the target store.

[0110] Next, the second position information in the feature information is determined respectively according to the situations where the number of employees in the target store is different.

[0111] Optionally, when the number of employees in the target store is one, the second location information in the feature information is determined based on the location information of the employee terminal. Specifically, based on the location information of the employee terminal and the target area information, it is determined whether the employee terminal is located in the target area to determine the second location information in the feature information. The target area may be the area where the target store is located, and the target area information may be the longitude and latitude range corresponding to the target area. In other words, the second location information is determined by determining whether the longitude and latitude of the location of the employee terminal is within the longitude and latitude range corresponding to the target area. If the longitude and latitude of the location of the employee terminal is within the longitude and latitude range corresponding to the target area, the location information of the employee terminal is determined as the second location information of the target store.

[0112] Optionally, when there are two employees in the target store, the second location information in the feature information is determined based on the location information of the employee terminal. It should be noted that the two employees are employee 1 and employee 2, and the terminals held by employee 1 and employee 2 are employee terminal 1 and employee terminal 2, respectively. Specifically, when the distance between the location information of employee terminal 1 and the location information of employee terminal 2 is less than or equal to a preset distance threshold, the longitude in the location information of employee terminal 1 and the average value of the longitude in the location information of employee terminal 1 are determined as the longitude in the second location information of the target store, and the latitude in the location information of employee terminal 1 and the average value of the latitude in the location information of employee terminal 1 are determined as the latitude in the second location information of the target store, and the second location information is determined.

[0113] Optionally, when the number of employees in the target store is greater than or equal to three, the second location information in the feature information is determined based on the location information of the employee terminal. Specifically, if the distance between the location information of the first employee terminal and the location information of other employee terminals is less than or equal to a preset distance threshold, the location information of the first employee terminal is determined as the second location information of the target store.

[0114] Next, according to the different numbers of employees in the target store, the wireless LAN identifier provided by the wireless LAN device of the target store in the characteristic information and the second wireless LAN list searched by the employee terminal of the target store in the target store are determined respectively.

[0115] Optionally, when the number of employees in the target store is one, if the longitude and latitude of the location of the employee terminal is within the longitude and latitude range corresponding to the target area, the identifier of the wireless LAN to which the employee terminal is connected is determined as the identifier of the wireless LAN provided by the wireless LAN device of the target store, and the wireless LAN list searched by the employee terminal is determined as the second wireless LAN list searched by the employee terminal of the target store in the target store.

[0116] Optionally, when the number of employees in the target store is greater than or equal to two, the employee terminals are classified according to the identifiers of the wireless LANs to which all employee terminals are connected, that is, employee terminals with the same wireless LAN identifier are classified into one category. Optionally, a wireless LAN field is included in the employee terminal, and the value of the wireless LAN field can be 0 or 1. If the value of the wireless LAN field in the employee terminal is 0, it means that the wireless LAN connected to the employee terminal is not the wireless LAN of the target store; if the value of the wireless LAN field in the employee terminal is 1, it means that the wireless LAN connected to the employee terminal is the wireless LAN of the target store, so the identifier of the wireless LAN connected to the employee terminal is determined to be the identifier of the wireless LAN provided by the wireless LAN device of the target store. Next, the wireless LAN list searched by at least one target terminal with all wireless LAN fields having a value of 1 is merged to obtain a merged wireless LAN list, and the wireless LAN list is determined as the second wireless LAN list.

[0117] Optionally, after the above characteristic information is initially determined, the characteristic information may be further reviewed. After the review is passed, the characteristic information of the target store will be recorded / stored in the database of the authentication server.

[0118] Step 330: Receive an authentication request sent by the target terminal. The authentication request includes the identification information of the target user and the state information of the target terminal. The state information includes at least one of the following: first location information, the identification of the wireless local area network to which the target terminal is connected, and a list of first wireless local area networks searched by the target terminal.

[0119] Step 340, obtaining characteristic information of the target store associated with the target user.

[0120] Optionally, the characteristic information includes at least one of the following: the second location information, an identifier of the wireless local area network provided by the wireless local area network device of the target store, and a list of second wireless local area networks searched by the employee terminal of the target store in the target store.

[0121] Based on steps 310 - 320 , the characteristic information of the target store is stored in the authentication server. Next, the authentication server locally obtains the characteristic information of the target store associated with the target user.

[0122] Optionally, based on the identification information of the target user, the target store associated with the target user is determined and characteristic information of the target store is obtained locally.

[0123] Step 350, matching the state information with the feature information to obtain an environment detection result.

[0124] Optionally, the state information is matched with the feature information, and when the following conditions are met, the environmental detection result is determined to be that the target terminal is in the target area, or when any of the following conditions are not met, the environmental detection result is determined to be that the target terminal is not in the target area:

[0125] A first distance between the target terminal and the target store does not exceed a first threshold.

[0126] The identifier of the wireless LAN to which the target terminal is connected is the same as the identifier of the wireless LAN provided by the wireless LAN device of the target store.

[0127] The number of wireless LAN identifiers that are identical in the first wireless LAN list searched by the target terminal and in the second wireless LAN list searched by the employee terminal of the target store in the target store exceeds a second threshold.

[0128] Step 360: When the environment detection result indicates that the target terminal is in the target area, face recognition is performed on the current user of the target terminal to obtain a face recognition result. The face recognition result is used to indicate whether the current user is the target user.

[0129] Step 370: When the face recognition result indicates that the current user is the target user, determine that the current user authentication is successful.

[0130] Optionally, the description and explanation of steps 330, 360, and 370 may refer to the above description and explanation of steps 110, 130, and 140, respectively, and the same technical effects can be achieved. To avoid repetition, they will not be described again here.

[0131] The operation process real-person authentication method provided by the present invention determines the characteristic information of the target store and stores the characteristic information of the target store locally according to the location information of the employee terminal of the target store, the identifier of the wireless local area network to which the employee terminal is connected, and the list of wireless local area networks searched by the employee terminal. This can realize real-time updating of the characteristic information of the target store. In addition, three conditions are considered at the same time in the process of environmental detection of the target terminal. When all three conditions are met, it is determined that the environmental detection result is that the target terminal is in the target area. This greatly improves the accuracy of judging whether the target terminal is located in the target area.

[0132] Optionally, Figure 4This is the third flow chart of the operation process real person authentication method provided by the present invention, such as Figure 4 As shown, the method includes:

[0133] Step 410: Receive an authentication request sent by a target terminal. The authentication request includes identification information of a target user and status information of the target terminal. The status information includes at least one of the following: first location information, an identification of a wireless local area network to which the target terminal is connected, and a list of first wireless local area networks searched by the target terminal.

[0134] Step 420: Obtain the first number of successful authentications of the current user of the target terminal within the first target time period.

[0135] Optionally, the first target time period is a certain time period. For example, the first target time period may be the time period from 0:00 to 24:00 of the day.

[0136] Optionally, during the first target time period, the authentication server accumulates the number of first successful authentications of the current user of the target terminal, wherein the initial number of first successful authentications corresponding to each first target time period is zero.

[0137] Optionally, the authentication server locally obtains the number of first successful authentications of the current user of the target terminal within the first target time period.

[0138] Step 430: When the first number is less than a third threshold, determine the environment detection result of the target terminal according to the state information.

[0139] Optionally, the third threshold is used to indicate the maximum number of times that the current user of the target terminal can be successfully authenticated within the first target time period. For example, the third threshold may be 2 times, which is not limited and can be set according to actual needs.

[0140] Optionally, for the description and explanation of the specific implementation method of determining the environmental detection result of the target terminal based on the status information, you can refer to the above description and explanation of steps 340-350, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0141] It should be noted that, when the first number of times is equal to the third threshold, it is determined that the current user authentication has failed.

[0142] Step 440: When the environment detection result indicates that the target terminal is in the target area, face recognition is performed on the current user of the target terminal to obtain a face recognition result. The face recognition result is used to indicate whether the current user is the target user.

[0143] Step 450: When the face recognition result indicates that the current user is the target user, determine that the current user authentication is successful.

[0144] Step 460: Obtain a second number of successful authentications of the target user within the second target time period.

[0145] Optionally, the second target time period is a certain time period. It should be noted that the second target time period should include the first target time period. For example, the second target time period is the time period from 0:00 on Monday to 24:00 on Friday during the working days of this week.

[0146] Optionally, during the second target time period, the authentication server will accumulate the second number of successful face recognitions of the current user of the target terminal, wherein the initial second number corresponding to each second target time period is zero.

[0147] Optionally, the authentication server locally obtains a second number of successful authentications of the current user of the target terminal within the second target time period.

[0148] Step 470: if the second number of times exceeds the fourth threshold, increase the level of the target user's identification information by at least one level. If the second number of times does not exceed the fourth threshold, decrease the level of the target user's identification information by at least one level.

[0149] Optionally, the fourth threshold is the maximum number of times that the target user can be successfully recognized within the second target time period. For example, the fourth threshold may be 4 times, which is not limited and can be set according to actual needs.

[0150] Optionally, the user's identification information is multi-level graded. For example, the levels are A, B1, B2, C1, and C2 from high to low. There is no restriction on the level setting, and it can be set according to actual needs. Among them, the initial level of each employee's identification information can be A, which is not restricted and can be set according to actual needs.

[0151] Optionally, when the second number of times exceeds the fourth threshold, the level of the target user's identification information is increased by at least one level. When the second number of times does not exceed the fourth threshold, the level of the target user's identification information is reduced by at least one level. It should be noted that when the level of the target user's identification information is level A, the level of the target user's identification information is no longer increased, that is, level A is the highest level. When the level of the target user's identification information is level C2, the level of the target user's identification information is no longer reduced, that is, level C2 is the lowest level.

[0152] Step 480: When the level of the target user's identification information does not exceed the target level and the target duration is reached, face recognition is performed on the user holding the target terminal. If the recognition fails, the user holding the target terminal is instructed to perform face recognition again.

[0153] Optionally, the target duration is a fixed duration, for example, the target duration is 3 hours.

[0154] Optionally, the target level refers to the minimum level corresponding to the target user being required to perform multiple authentications when the target duration is reached. For example, the target level may be level B2. That is, when the level of the target user's identification information does not exceed level B2 and when the target duration is reached, the user holding the target terminal needs to perform face recognition.

[0155] Optionally, when the level of the target user's identification information does not exceed the target level and the target duration is reached, face recognition is performed on the user holding the target terminal. If the recognition fails, the user holding the target terminal is instructed to perform face recognition again.

[0156] Optionally, the description and explanation of steps 410, 440, and 450 may refer to the above description and explanation of steps 110, 130, and 140, respectively, and the same technical effects can be achieved. To avoid repetition, they will not be described again here.

[0157] The operation process real-person authentication method provided by the present invention performs multi-layer hierarchical management on the identification information of the user. At the same time, by setting the fourth threshold, when the second number of successful authentications of the target user within the second target time period exceeds the fourth threshold, the level of the identification information of the target user is increased by at least one level. When the second number does not exceed the fourth threshold, the level of the identification information of the target user is reduced by at least one level. This can realize the automatic management of the level of the user's identification information. At the same time, by setting the third threshold, the number of successful authentications of the current user of the target terminal within the first target time period is limited to not more than the third threshold, which effectively avoids the problem of rapidly improving the level of identification information due to multiple successful face recognitions of the user within the first target time period. In addition, when the level of the identification information of the target user does not exceed the target level and the target duration is reached, the face recognition is performed on the user holding the target terminal. This can achieve the strengthening of the authentication management of the target user whose level does not exceed the target level.

[0158] The following is a description of the operation process real-person authentication device provided by the present invention. The operation process real-person authentication device described below and the operation process real-person authentication method described above can be referenced to each other.

[0159] Combine the following Figure 5-Figure 7 The operation process of the real person authentication device of the present invention is described.

[0160] The present invention provides a real-person authentication device for an operation process. Figure 5 This is one of the structural diagrams of the operation process real person authentication device provided by the present invention, such as Figure 5As shown, the device 500 includes: a first receiving module 501, a first determining module 502, a first processing module 503 and a second determining module 504.

[0161] The first receiving module 501 is used to receive an authentication request sent by a target terminal. The authentication request includes identification information of a target user and status information of the target terminal. The status information includes at least one of the following: first location information, an identification of a wireless local area network to which the target terminal is connected, and a list of first wireless local area networks searched by the target terminal.

[0162] The first determination module 502 is used to determine the environment detection result of the target terminal according to the state information. The environment detection result is used to indicate whether the target terminal is in the target area.

[0163] The first processing module 503 is used to perform face recognition on the current user of the target terminal to obtain a face recognition result when the environment detection result indicates that the target terminal is in the target area. The face recognition result is used to indicate whether the current user is the target user.

[0164] The second determination module 504 is used to determine that the current user authentication is successful when the face recognition result indicates that the current user is the target user.

[0165] The operation process real-person authentication device provided by the present invention determines the environmental detection result of the target terminal according to the identification information of the target user and the status information of the target terminal, that is, determines whether the target terminal is in the target area; when the environmental detection result of the target terminal indicates that the target terminal is in the target area, the current user of the target terminal is subjected to face recognition to obtain the face recognition result, that is, determines whether the current user of the target terminal is the target user. Among them, on the one hand, the current user can complete the operation process real-person authentication through the target terminal held, which greatly improves the efficiency of the operation process real-person authentication; on the other hand, when the environmental detection result indicates that the target terminal is in the target area and the current user is the target user, the current user authentication is determined to be successful, which greatly improves the correctness of the operation process real-person authentication.

[0166] Optionally, Figure 6 This is the second structural diagram of the operation process real person authentication device provided by the present invention, such as Figure 6 As shown, the device 600 includes: a first receiving module 501, a first determining module 502, a first processing module 503, a second determining module 504, a second receiving module 601 and a third determining module 602.

[0167] The second receiving module 601 is used to receive the location information of the employee terminal, the identifier of the wireless local area network connected to the employee terminal and the list of wireless local area networks searched by the employee terminal, which are sent by the employee terminal of the target store at the target store.

[0168] The third determining module 602 is used to determine characteristic information based on the location information of the employee terminal, the identifier of the wireless local area network to which the employee terminal is connected, and the list of wireless local area networks searched by the employee terminal.

[0169] Optionally, the first determining module 502 is specifically configured to:

[0170] Acquire characteristic information of a target store associated with the target user. The characteristic information includes at least one of the following: second location information, a wireless local area network identifier provided by a wireless local area network device of the target store, and a second wireless local area network list searched by an employee terminal of the target store in the target store.

[0171] Match the state information with the feature information to obtain the environmental detection result.

[0172] Optionally, the first determining module 502 is specifically configured to:

[0173] The state information is matched with the feature information, and when the following conditions are met, the environmental detection result is determined to be that the target terminal is in the target area, or when any of the following conditions are not met, the environmental detection result is determined to be that the target terminal is not in the target area:

[0174] A first distance between the target terminal and the target store does not exceed a first threshold.

[0175] The identifier of the wireless LAN to which the target terminal is connected is the same as the identifier of the wireless LAN provided by the wireless LAN device of the target store.

[0176] The number of wireless LAN identifiers that are identical in the first wireless LAN list searched by the target terminal and in the second wireless LAN list searched by the employee terminal of the target store in the target store exceeds a second threshold.

[0177] Optionally, Figure 7 This is the third structural diagram of the operation process real person authentication device provided by the present invention, such as Figure 7 As shown, the device 700 includes: a first receiving module 501, a first determining module 502, a first processing module 503, a second determining module 504, an acquisition module 701, a second processing module 702 and a third processing module 703.

[0178] Optionally, the first determining module 502 is specifically configured to:

[0179] Obtain the number of first successful authentications of the current user of the target terminal within the first target time period.

[0180] When the first number is less than a third threshold, determining an environment detection result of the target terminal according to the state information;

[0181] When the first number of times is equal to a third threshold, it is determined that the current user authentication fails.

[0182] The acquisition module 701 is used to acquire a second number of successful authentications of the target user within a second target time period.

[0183] The second processing module 702 is configured to increase the level of the target user's identification information by at least one level when the second number of times exceeds a fourth threshold, and to decrease the level of the target user's identification information by at least one level when the second number of times does not exceed the fourth threshold.

[0184] The third processing module 703 is used to perform face recognition on the user holding the target terminal when the level of the identification information of the target user does not exceed the target level and the target duration is reached. If the recognition fails, instruct the user holding the target terminal to perform face recognition again.

[0185] Optionally, the present invention provides an authentication server, including a processor, a memory, and a program or instruction stored in the memory and executable on the processor. When the program or instruction is executed by the processor, each process of the above-mentioned operation flow real-person authentication method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0186] Figure 8 It is a schematic diagram of the entity structure of the authentication server provided by the present invention, such as Figure 8As shown, the authentication server 800 may include: a processor 810 , a communications interface 820 , a memory 830 and a communication bus 840 , wherein the processor 810 , the communications interface 820 , and the memory 830 communicate with each other via the communication bus 840 . The processor 810 can call the logic instructions in the memory 830 to execute the job process real-person authentication method, which includes: receiving an authentication request sent by a target terminal; the authentication request includes identification information of the target user and status information of the target terminal; the status information includes at least one of the following: first location information, an identification of the wireless local area network to which the target terminal is connected, and a list of first wireless local area networks searched by the target terminal; determining an environmental detection result of the target terminal based on the status information; the environmental detection result is used to indicate whether the target terminal is in a target area; when the environmental detection result indicates that the target terminal is in the target area, performing face recognition on the current user of the target terminal to obtain a face recognition result; the face recognition result is used to indicate whether the current user is the target user; when the face recognition result indicates that the current user is the target user; when the face recognition result indicates that the current user is the target user, determining that the current user is successfully authenticated.

[0187] In addition, the logic instructions in the above-mentioned memory 830 can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer (which can be a personal computer, a server, or a network, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0188] On the other hand, the present invention also provides a computer program product, which includes a computer program, which can be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer can execute the job flow real-person authentication method provided by the above methods, and the method includes: receiving an authentication request sent by a target terminal; the authentication request includes identification information of the target user and status information of the target terminal; the status information includes at least one of the following: first location information, an identification of the wireless local area network to which the target terminal is connected, and a list of first wireless local area networks searched by the target terminal; based on the status information, determining an environmental detection result of the target terminal; the environmental detection result is used to indicate whether the target terminal is in the target area; when the environmental detection result indicates that the target terminal is in the target area, performing face recognition on the current user of the target terminal to obtain a face recognition result; the face recognition result is used to indicate whether the current user is the target user; when the face recognition result indicates that the current user is the target user; when the face recognition result indicates that the current user is the target user, determining that the current user authentication is successful.

[0189] On the other hand, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements a real-person authentication method for executing the job flow provided by the above-mentioned methods, the method comprising: receiving an authentication request sent by a target terminal; the authentication request comprises identification information of a target user and status information of the target terminal; the status information comprises at least one of the following: first location information, an identification of a wireless local area network to which the target terminal is connected, and a list of first wireless local area networks searched by the target terminal; determining an environmental detection result of the target terminal based on the status information; the environmental detection result is used to indicate whether the target terminal is in a target area; when the environmental detection result indicates that the target terminal is in the target area, performing face recognition on a current user of the target terminal to obtain a face recognition result; the face recognition result is used to indicate whether the current user is the target user; when the face recognition result indicates whether the current user is the target user; when the face recognition result indicates that the current user is the target user, determining that the current user has been authenticated successfully.

[0190] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0191] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer (which can be a personal computer, a server, or a network, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0192] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for real-person authentication of an operation process, characterized in that: Applicable to authentication servers, including: receiving location information of the employee terminal, an identifier of the wireless local area network to which the employee terminal is connected, and a list of wireless local area networks searched by the employee terminal, sent by the employee terminal of the target store at the target store; Based on the location information of the employee terminal, the identifier of the wireless local area network connected to the employee terminal, and the list of wireless local area networks searched by the employee terminal, determining the characteristic information of the target store, the characteristic information including at least one of the following: the second location information, the identifier of the wireless local area network provided by the wireless local area network device of the target store, and the list of second wireless local area networks searched by the employee terminal of the target store at the target store; receiving an authentication request sent by a target terminal, the authentication request including identification information of a target user and status information of the target terminal, the status information including at least one of the following: first location information, an identification of a wireless local area network to which the target terminal is connected, and a list of first wireless local area networks searched by the target terminal; Determining the environment detection result of the target terminal according to the state information includes: acquiring feature information of the target store associated with the target user, matching the state information of the target terminal with the feature information of the target store, and obtaining an environment detection result; wherein, the target store associated with the target user is determined according to the identification information of the target user; When the environment detection result indicates that the target terminal is in the target area, performing face recognition on a current user of the target terminal to obtain a face recognition result, wherein the face recognition result is used to indicate whether the current user is the target user; and When the face recognition result indicates that the current user is the target user, it is determined that the current user is successfully authenticated.

2. The operation process real person authentication method according to claim 1, characterized in that: Before receiving the location information of the employee terminal, the identifier of the wireless local area network connected to the employee terminal and the list of wireless local area networks searched by the employee terminal, the operation process real-person authentication method includes: The identity of the employee holding the employee terminal is authenticated, and the identity authentication includes the following conditions: the real-name authentication is completed, the target store where the employee holding the employee terminal is located is connected to the Internet, and the identity authentication function is activated in the city where the employee holding the employee terminal is located.

3. The operation process real person authentication method according to claim 2 is characterized in that: In the case where the identity authentication of the employee holding the employee terminal is successful, the step of receiving the location information of the employee terminal, the identifier of the wireless LAN connected to the employee terminal and the list of wireless LANs searched by the employee terminal, sent by the employee terminal of the target store.

4. The method for real-person authentication of an operation process according to claim 1, characterized in that: The matching the state information of the target terminal with the characteristic information of the target store to obtain an environment detection result includes: The state information is matched with the feature information, and when the following conditions are met, the environment detection result is determined to be that the target terminal is in the target area, or when any of the following conditions are not met, the environment detection result is determined to be that the target terminal is not in the target area: A first distance between the target terminal and the target store does not exceed a first threshold; The identifier of the wireless local area network to which the target terminal is connected is the same as the identifier of the wireless local area network provided by the wireless local area network device of the target store; The number of wireless LAN identifiers in the first wireless LAN list searched by the target terminal and in the second wireless LAN list searched by the employee terminal of the target store exceeds a second threshold.

5. The operation process real person authentication method according to claim 1 or 2, characterized in that: The determining the environment detection result of the target terminal according to the state information includes: Obtaining the number of first successful authentications of the current user of the target terminal within the first target time period; When the first number is less than a third threshold, determining an environment detection result of the target terminal according to the state information; When the first number of times is equal to a third threshold, it is determined that the current user authentication fails.

6. The method for real-person authentication of an operation process according to claim 1, characterized in that: In the case where the face recognition result indicates that the current user is the target user, after determining that the current user authentication is successful, the method further includes: Obtaining the second number of successful authentications of the target user within the second target time period; When the second number exceeds a fourth threshold, the level of the target user's identification information is increased by at least one level; when the second number does not exceed the fourth threshold, the level of the target user's identification information is reduced by at least one level.

7. The method for real-person authentication of an operation process according to claim 1, characterized in that: In the case where the face recognition result indicates that the current user is the target user, after determining that the current user authentication is successful, the method further includes: When the level of the identification information of the target user does not exceed the target level and the target duration is reached, face recognition is performed on the current user of the target terminal; if the recognition fails, the current user is instructed to perform face recognition again.

8. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the operation process real-person authentication method as described in any one of claims 1 to 7 are implemented.

9. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the operation process real-person authentication method as described in any one of claims 1 to 7 are implemented.

Images