NFC-based identity recognition method and device

Abstract

The present invention discloses an identity recognition method and device based on NFC, and relates to the field of computer technology. A specific implementation of the method includes: in response to receiving a call request sent by a business front end, obtaining policy parameters from a face service end; sending a verification request to an NFC service end according to the policy parameters, receiving a request identifier returned by the NFC service end when the verification request is verified; obtaining an identity identifier to be identified; obtaining identity information corresponding to the identity identifier to be identified from the face service end according to the request identifier and the identity identifier to be identified, and sending the identity information to the NFC service end so that the NFC service end identifies the identity information; receiving the identification result returned by the NFC service end, and sending the identification result to the business front end. This implementation method uses NFC technology to identify identity information, can effectively identify the validity of the certificate and can obtain the user's real-name information, improve the efficiency and accuracy of information verification, and reduce security risks.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to an NFC-based identity recognition method and device. Background Art

[0002] When conducting financial business, it is necessary to verify user information, such as the user's ID information. The existing method of verifying user information generally only supports the verification of name and ID number, and cannot identify the validity of all ID information. It also cannot achieve more accurate anti-counterfeiting identification for forged IDs, which poses a security risk and affects the normal development of business. Summary of the invention

[0003] In view of this, the embodiments of the present invention provide an NFC-based identity recognition method and device, which utilizes NFC technology to identify identity information, can effectively identify the validity of the certificate and obtain the user's real-name information, thereby improving the efficiency and accuracy of information verification and reducing security risks.

[0004] To achieve the above object, according to one aspect of an embodiment of the present invention, there is provided an identity recognition method based on NFC, comprising:

[0005] In response to receiving a call request sent by the business front end, obtaining strategy parameters from the face service end;

[0006] Sending a verification request to the NFC server according to the policy parameters, and receiving a request identifier returned by the NFC server when the verification request is passed;

[0007] Obtain the identity to be identified;

[0008] Acquire identity information corresponding to the identity identifier to be identified from the face service end according to the request identifier and the identity identifier to be identified, and send the identity information to the NFC service end so that the NFC service end identifies the identity information;

[0009] Receive the identification result returned by the NFC server, and send the identification result to the business front end.

[0010] Optionally, before obtaining the policy parameters from the face server, include:

[0011] Receive a token acquisition request sent by a business service end, wherein the acquisition request includes a business identifier, a business authorization identifier, and identity authentication information;

[0012] Verifying the service identifier, service authorization identifier and identity verification information;

[0013] When the verification result indicates that the verification is passed, the token corresponding to the acquisition request is sent to the business service end, so that the business service end sends the token to the business front end; the call request is generated by the business front end according to the token.

[0014] Optionally, obtain policy parameters from the face server, including:

[0015] Sending a configuration parameter acquisition request to the face server;

[0016] Receive the policy parameter corresponding to the configuration parameter acquisition request returned by the face service end.

[0017] Optionally, obtaining identity information corresponding to the identity identifier to be identified from the face server according to the request identifier and the identity identifier to be identified includes: sending an identity information acquisition request to the face server according to the request identifier and the identity identifier to be identified, so that the face server sends an acquisition request to the NFC server based on the identity information acquisition request, obtains the identity information from a response result returned by the NFC server in response to the acquisition request, and receives the identity information returned by the face server. .

[0018] Optionally, the recognition result includes a certificate image; after receiving the recognition result returned by the NFC server, the method further includes:

[0019] The ID picture is sent to the face service end so that the face service end binds the ID picture to the token corresponding to the call request.

[0020] Another aspect of an embodiment of the present invention provides an NFC-based identity recognition method, including:

[0021] Get the calling parameters and token required to call the face SDK;

[0022] Generate a call request according to the call parameter and the token, and send the call request to the face SDK to identify the identity information through the face SDK;

[0023] Receive the recognition result returned by the face SDK in response to the calling request.

[0024] According to another aspect of an embodiment of the present invention, there is provided an NFC-based identity recognition device, comprising:

[0025] A first acquisition module, in response to receiving a call request sent by the business front end, acquires the policy parameters from the face service end;

[0026] A receiving module, sending a verification request to the NFC server according to the policy parameters, and receiving a request identifier returned by the NFC server when the verification request is passed;

[0027] The second acquisition module acquires the identity to be identified;

[0028] A first sending module, which obtains identity information corresponding to the identity identifier to be identified from the face server according to the request identifier and the identity identifier to be identified, and sends the identity information to the NFC server, so that the NFC server identifies the identity information;

[0029] The second sending module receives the identification result returned by the NFC server and sends the identification result to the business front end.

[0030] According to another aspect of an embodiment of the present invention, there is provided an NFC-based identity recognition system, comprising: a service front end, a face SDK, a face server, and an NFC server.

[0031] The business front end obtains the calling parameters and token required for calling the face SDK, generates a calling request according to the calling parameters and the token, and sends the calling request to the face SDK;

[0032] After receiving the call request sent by the business front end, the face SDK obtains the policy parameters from the face server, and sends a verification request to the NFC server according to the policy parameters. Then, the face SDK receives the request identifier returned by the NFC server when the verification request is passed.

[0033] The face SDK obtains the identity to be identified;

[0034] The face SDK obtains the identity information corresponding to the identity identifier to be identified from the face server according to the request identifier and the identity identifier to be identified, and sends the identity information to the NFC server;

[0035] The NFC server recognizes the identity information and returns the recognition result to the face SDK;

[0036] After receiving the recognition result, the face SDK sends the recognition result to the business front end.

[0037] According to another aspect of an embodiment of the present invention, there is provided an electronic device, including:

[0038] one or more processors;

[0039] a storage device for storing one or more programs,

[0040] When the one or more programs are executed by the one or more processors, the one or more processors implement the NFC-based identity recognition method provided by the present invention.

[0041] According to another aspect of an embodiment of the present invention, a computer-readable medium is provided, on which a computer program is stored. When the program is executed by a processor, the NFC-based identity recognition method provided by the present invention is implemented.

[0042] An embodiment of the above invention has the following advantages or beneficial effects: by receiving a call request sent by the business front end, obtaining policy parameters from the face server, sending a verification request to the NFC server according to the policy parameters, and then receiving the request identifier returned by the NFC server after verification, and obtaining identity information from the face server according to the request identifier and the obtained identity identifier to be identified, and then obtaining the identification result from the NFC server according to the identity information, and sending the identification result to the business front end to realize identity identification. This method can quickly realize the identification of documents based on NFC technology to obtain document information and verify the authenticity of the document. This method can improve the efficiency and accuracy of information verification and reduce security risks.

[0043] The further effects of the above-mentioned non-conventional optional manner will be described below in conjunction with specific implementation examples. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] The accompanying drawings are used to better understand the present invention and do not constitute an improper limitation of the present invention.

[0045] Figure 1 is a schematic diagram of the main process of an NFC-based identity recognition method according to an embodiment of the present invention;

[0046] Figure 2 is a schematic diagram of the main process of another NFC-based identity recognition method according to an embodiment of the present invention;

[0047] Figure 3 is a flow chart of another NFC-based identity recognition method according to an embodiment of the present invention;

[0048] Figure 4 is a schematic diagram of main modules of an NFC-based identity recognition device according to an embodiment of the present invention;

[0049] Figure 5 is a flow chart of an identity recognition method of an NFC-based identity recognition system according to an embodiment of the present invention;

[0050] Figure 6is an exemplary system architecture diagram to which embodiments of the present invention may be applied;

[0051] Figure 7 It is a schematic diagram of the structure of a computer system of a terminal device or a server suitable for implementing an embodiment of the present invention. DETAILED DESCRIPTION

[0052] The following is a description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, including various details of the embodiments of the present invention to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications may be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and conciseness, the description of well-known functions and structures is omitted in the following description.

[0053] Figure 1 is a schematic diagram of the main process of an NFC-based identity recognition method according to an embodiment of the present invention, such as Figure 1 As shown, the method is applied to the client and includes the following steps:

[0054] Step S101: in response to receiving a call request sent by the service front end, obtaining strategy parameters from the face service end;

[0055] Step S102: Send a verification request to the NFC server according to the policy parameters, and receive a request identifier returned by the NFC server when the verification request is successful;

[0056] Step S103: Obtain the identity to be identified;

[0057] Step S104: acquiring identity information corresponding to the identity identifier to be identified from the face service end according to the request identifier and the identity identifier to be identified, and sending the identity information to the NFC service end so that the NFC service end identifies the identity information;

[0058] Step S105: Receive the identification result returned by the NFC server, and send the identification result to the business front end.

[0059] In the embodiment of the present invention, the NFC-based identity recognition method can be used to collect user identity documents in the logistics field to obtain all authentic and valid document information and reduce security risks, wherein the user identity document can be an identity card, passport, home return permit, etc. It should be noted that in the technical solution of the embodiment of the present invention, the acquisition, storage and application of personal information involved are in compliance with the provisions of relevant laws and regulations and do not violate public order and good customs.

[0060] In the embodiment of the present invention, the service front end may be a client application, a small program, etc. The face SDK (Software Development Kit) is used to execute the NFC-based identity recognition method. The face SDK may be an integrated SDK, including an NFC SDK for NFC recognition. After receiving the call request sent by the service front end, the policy parameters are obtained from the face service end, such as Figure 2 As shown, before obtaining the strategy parameters from the face server, it includes:

[0061] Step S201: receiving a token acquisition request sent by a business server, the acquisition request including a business identifier, a business authorization identifier and identity verification information;

[0062] Step S202: verifying the service identifier, service authorization identifier and identity verification information;

[0063] Step S203: When the verification result indicates that the verification is passed, the token corresponding to the acquisition request is sent to the business server, so that the business server sends the token to the business front end; the call request is generated by the business front end based on the token.

[0064] In an embodiment of the present invention, after receiving a token acquisition request sent by a business service end, the business identifier, business authorization identifier and identity information in the acquisition request are verified, and a token is returned to the business service end after the verification is passed. Among them, the business identifier can be a business name, the business authorization identifier can be a permission identification code, and the identity verification information can be a business service end identifier; to determine whether the business identifier, business authorization code, and identity verification information have the calling authority, the business identifier, business authorization code, and identity verification information can be matched with a stored whitelist with calling authority. If the match is successful, the verification is passed, that is, the business service end has the authority to obtain the token, and the token corresponding to the acquisition request can be sent to the business service end.

[0065] Before sending the token to the business server, the method further includes: modifying the policy parameters corresponding to the token to send the token to the corresponding business server, wherein the policy parameters corresponding to the token may include the validity period of the token, etc.

[0066] After receiving the token, the service server sends the token to the service front end, so that the service front end initiates the NFC identification function. After receiving the token, the service front end generates and sends a call request based on the token and call parameters. The call parameters may include identity information, such as the service end identifier.

[0067] In an embodiment of the present invention, after receiving a call request sent by a business front end, obtaining policy parameters from a face server includes: sending a configuration parameter acquisition request to the face server; receiving policy parameters corresponding to the configuration parameter acquisition request returned by the face server. Among them, the configuration parameters may include one or more of identity configuration parameters, network configuration parameters, port configuration parameters, and environment coding configuration parameters. The face server returns corresponding policy parameters according to the configuration parameter acquisition request, and the policy parameters may include an application identifier, an IP address, a port identifier, and an environment code. After receiving the policy parameters returned by the face server, a verification request is sent to the NFC server based on the policy parameters. After receiving the verification request, the NFC server verifies the policy parameters and returns a request identifier after the verification is passed. The request identifier can be used to obtain identity information.

[0068] In an embodiment of the present invention, after receiving the call request sent by the business front end, it also includes: obtaining the identity identifier to be identified, wherein the identity identifier to be identified can be the identifier of an ID card, and the identifier of the ID card can be obtained by reading the ID card such as an ID card.

[0069] After obtaining the identity identifier to be identified and receiving the request identifier returned by the NFC server, obtaining encrypted identity information from the face server based on the request identifier and the identity identifier to be identified can include: sending an identity information acquisition request to the face server based on the request identifier and the identity identifier to be identified, so that the face server sends an acquisition request to the NFC server based on the identity information acquisition request, obtains the identity information from the response result returned by the NFC server in response to the acquisition request, and receives the encrypted identity information returned by the face server.

[0070] By sending a request to obtain identity information to the face server, the face server sends a request to obtain information to the NFC server. The NFC server returns a response result based on the request, and the response result is encrypted data. The encrypted data is then sent to the face server. The encrypted data is obtained after the NFC server encrypts the identity information. For example, the NFC server can use a public key to encrypt the identity information to obtain encrypted data, and return the encrypted data to the face server. The face server can then decrypt the encrypted data according to the private key corresponding to the public key to obtain the identity information. The security of data transmission can be guaranteed by asymmetric encryption. Similarly, the face server can encrypt the identity information obtained after decryption, obtain the encrypted identity information and send it. The encrypted identity information can be implemented in a symmetric encryption manner, that is, the face SDK and the face server both store the same key, and the key of the face SDK can be obtained from the face server.

[0071] After receiving the encrypted identity information sent by the face server, the encrypted identity information is decrypted using the key to obtain the identity information, which is plain text information. Then, based on the identity information, the NFC server is requested to identify the identity information to obtain the identification result of the NFC server on the identity information.

[0072] In an embodiment of the present invention, after the server identifies the identity information, it receives the identification result of the identity information returned by the server, wherein the identification result may include a document image, such as photos of the front and back of the identity card, and may also include document information, such as the name, identity card number, address, face image, validity period and other information of the identity card; after receiving the identification result returned by the NFC server, it includes: sending the document image to the face server, so that the face server binds the document image with the token corresponding to the call request, and receives the verification result returned by the face server, and then sends the returned verification result to the business front end, so that the business front end sends the verification result to the business server; the verification result returned by the face server may include the document image.

[0073] In the embodiment of the present invention, the face service end stores the ID card image and the token in a binding manner, so that the business service end can obtain the result according to the token.

[0074] In the embodiment of the present invention, the recognition result may also include a result code, which indicates the result of the NFC server's recognition of the document. Different result codes represent different recognition results. For example, if the result code is -10001, it means that the card is read too frequently. After receiving the result code sent by the server, a prompt message corresponding to the result code may be sent to the service front end, such as the prompt message "Do not stick the card frequently".

[0075] In an embodiment of the present invention, a facial image can also be collected and compared with the facial image obtained in the recognition result to obtain the similarity between the collected facial image and the recognized facial image, and a verification result can be obtained based on the comparison of the similarity with a preset threshold to determine whether the current user is the person identified by the certificate.

[0076] The NFC-based identity recognition method provided by the embodiment of the present invention receives a call request sent by the business front end, obtains policy parameters from the face server, sends a verification request to the server according to the policy parameters, and receives a request identifier returned by the NFC server after verification. Thus, the face server can be requested to obtain identity information according to the request identifier and the obtained identity identifier to be identified, and then the obtained identity information is sent to the NFC server to obtain the identification result corresponding to the identity information from the NFC server, and the identification result is sent to the business front end to realize the identification of the identity information. Based on NFC technology, this method can quickly realize the identification of certificates, obtain certificate information and verify the authenticity of the certificates. This method can improve the efficiency and accuracy of information verification and reduce security risks.

[0077] like Figure 3 As shown, another aspect of the embodiment of the present invention provides another NFC-based identity recognition method, which is applied to a client, and the method includes the following steps:

[0078] Step S301: Obtain the calling parameters and token required to call the face SDK;

[0079] Step S302: Generate a call request according to the call parameters and the token, and send the call request to the face SDK to identify the identity information through the face SDK;

[0080] Step S303: receiving the recognition result returned by the face SDK in response to the calling request.

[0081] In the embodiment of the present invention, the token is obtained from the business service end, and the token of the business service end is obtained from the face SDK after the business service end sends a token acquisition request to the face SDK. The call parameters are the basic parameters required to call the face SDK, such as application identifier, IP address, port identifier, encoding and other parameters. By sending the call request to the face SDK, the face SDK executes the process of identifying the identity information. After the identification is completed, the face SDK returns the identification result of the identity information, and receives the result returned by the face SDK to complete the identification of the identity information.

[0082] like Figure 4 As shown, in another aspect of the embodiment of the present invention, an NFC-based identity recognition device 400 is provided, comprising:

[0083] The first acquisition module 401 acquires the policy parameters from the face service end in response to receiving the call request sent by the service front end;

[0084] The receiving module 402 sends a verification request to the NFC server according to the policy parameters, and receives a request identifier returned by the NFC server when the verification request is passed;

[0085] The second acquisition module 403 acquires the identity to be identified;

[0086] The first sending module 404 obtains identity information corresponding to the identity identifier to be identified from the face server according to the request identifier and the identity identifier to be identified, and sends the identity information to the NFC server so that the NFC server identifies the identity information;

[0087] The second sending module 405 receives the identification result returned by the NFC server and sends the identification result to the service front end.

[0088] In an embodiment of the present invention, the first acquisition module 401 is also used to: before obtaining policy parameters from the face server, receive a token acquisition request sent by the business server, the acquisition request including a business identifier, a business authorization identifier and identity authentication information; verify the business identifier, the business authorization identifier and the identity authentication information; when the verification result indicates that the verification is passed, send the token corresponding to the acquisition request to the business server, so that the business server sends the token to the business front end; the call request is generated by the business front end based on the token.

[0089] In the embodiment of the present invention, the first acquisition module 401 is further used to: send a configuration parameter acquisition request to the face server; and receive a policy parameter corresponding to the configuration parameter acquisition request returned by the face server.

[0090] In an embodiment of the present invention, the first sending module 404 is further used to: send a request for obtaining identity information to the face server based on the request identifier and the identity identifier to be identified, so that the face server sends an acquisition request to the NFC server based on the identity information acquisition request, obtains the identity information from the response result returned by the NFC server in response to the acquisition request, and receives the identity information returned by the face server.

[0091] In an embodiment of the present invention, the recognition result includes an ID picture, and the second sending module 405 is also used to: after receiving the recognition result returned by the NFC server, send the ID picture to the face server, so that the face server binds the ID picture with the token corresponding to the call request.

[0092] According to another aspect of the embodiments of the present invention, another NFC-based identity recognition device is provided, comprising:

[0093] The third acquisition module obtains the calling parameters and tokens required to call the face SDK;

[0094] The third sending module generates a call request according to the call parameters and the token, and sends the call request to the face SDK to identify the identity information through the face SDK;

[0095] The second receiving module receives the recognition result returned by the face SDK in response to the calling request.

[0096] In another aspect of the embodiments of the present invention, an NFC-based identity recognition system is provided, the system comprising: a business front end, a face SDK, a face server, and an NFC server.

[0097] The business front end obtains the call parameters and token required to call the face SDK, generates a call request based on the call parameters and token, and sends the call request to the face SDK;

[0098] After the face SDK receives the call request sent by the business front end, it obtains the policy parameters from the face server. The face SDK sends a verification request to the NFC server based on the policy parameters. Then, the face SDK receives the request identifier returned by the NFC server when the verification request is successful.

[0099] The face SDK obtains the identity to be recognized;

[0100] The face SDK obtains the identity information corresponding to the identity to be identified from the face server according to the request identifier and the identity to be identified, and sends the identity information to the NFC server, so that the NFC server can identify the identity information and return the identification result to the face SDK;

[0101] After receiving the recognition result, the face SDK sends the recognition result to the business front end.

[0102] In an embodiment of the present invention, the NFC-based identity recognition system also includes a business service end, which sends a token acquisition request to the face SDK. The acquisition request includes a business identifier, a business authorization identifier and identity information. The face SDK verifies the business identifier, the business authorization identifier and the identity information. When the verification result indicates that the verification is passed, the token corresponding to the acquisition request is sent to the business service end, so that the business service end sends the token to the business front end.

[0103] In an embodiment of the present invention, the face SDK obtains policy parameters from the face server, including: the face SDK sends a configuration parameter acquisition request to the face server, and the face server returns the policy parameter value corresponding to the configuration parameter acquisition request to the face SDK.

[0104] In an embodiment of the present invention, the face SDK obtains a key from the face server based on a request identifier, including: the face SDK sends a request for obtaining identity information to the face server based on the request identifier and the identity identifier to be identified, the face server sends an acquisition request to the NFC server based on the identity information acquisition request, the face server obtains the identity information from a response result returned by the NFC server in response to the acquisition request, the face server sends the identity information to the face SDK; the face SDK receives the identity information returned by the face server.

[0105] In an embodiment of the present invention, the recognition result includes an ID card image; after the face SDK receives the recognition result returned by the NFC server, it includes: sending the ID card image to the face server, and the face server binds the ID card image to the token corresponding to the call request.

[0106] like Figure 5 The figure is a flow chart of an identity recognition method of an NFC-based identity recognition system according to an embodiment of the present invention, the method comprising:

[0107] Step S501: the service server sends a token acquisition request to the face SDK, where the acquisition request includes a service identifier, a service authorization identifier, and identity authentication information;

[0108] Step S502: After receiving the acquisition request, the face SDK verifies the service identifier, service authorization identifier and identity authentication information. After the verification passes, it modifies the policy parameters of the token corresponding to the acquisition request, and then sends the token to the service server;

[0109] Step S503: After receiving the token, the business server sends the token to the business front end;

[0110] Step S504: the business front end generates a call request according to the call parameters and token required to call the face SDK, and sends the call request to the face SDK;

[0111] Step S505: After receiving the call request, the face SDK sends a configuration parameter acquisition request to the face server;

[0112] Step S506: the face server returns corresponding policy parameters to the face SDK based on the configuration parameter acquisition request;

[0113] Step S507: the face SDK sends a verification request to the face server based on the received policy parameters, where the verification request includes an application identifier, a port identifier, an environment code, and a number of retries;

[0114] Step S508: The NFC server verifies the application ID, port ID, environment code, and number of retries, and returns a request ID to the face SDK if the verification is successful;

[0115] Step S509: the face SDK sends a request to obtain identity information to the face server based on the received request identifier and the obtained identity identifier to be identified;

[0116] Step S510: the face service end sends an acquisition request to the NFC service end based on the identity information acquisition request;

[0117] Step S511: the NFC server obtains the encrypted data after receiving the acquisition request sent by the face server, and sends the encrypted data to the face server;

[0118] Step S512: the face server decrypts the encrypted data to obtain the identity information, and encrypts the identity information and sends it to the face SDK;

[0119] Step S513: the face SDK decrypts the encrypted identity information to obtain the identity information, and sends the identity information to the NFC server;

[0120] Step S514: The NFC server recognizes and displays the identity information, and returns a result code and pictures of the front and back of the certificate to the face SDK;

[0121] Step S515: The face SDK uploads the front and back images of the ID card to the face server;

[0122] Step S516: The face server completes the binding and storage of the front and back images of the certificate and the token, and returns the verification result to the face SDK;

[0123] Step S517: the face SDK returns the verification result to the business front end;

[0124] Step S518: The business front end returns the verification result to the business service end;

[0125] Step S519: The business server can query the verification result from the face server according to the token.

[0126] An embodiment of the present invention further provides an electronic device, comprising: one or more processors; a storage device for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the NFC-based identity recognition method of the embodiment of the present invention.

[0127] The embodiment of the present invention further provides a computer-readable medium on which a computer program is stored. When the program is executed by a processor, the NFC-based identity recognition method of the embodiment of the present invention is implemented.

[0128] Figure 6 An exemplary system architecture 600 is shown to which an NFC-based identity method or an NFC-based identity recognition device according to an embodiment of the present invention can be applied.

[0129] like Figure 6 As shown, system architecture 600 may include terminal devices 601, 602, 603, network 604 and server 605. Network 604 is used to provide a medium for communication links between terminal devices 601, 602, 603 and server 605. Network 604 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc.

[0130] Users can use terminal devices 601, 602, and 603 to interact with server 605 through network 604 to receive or send messages, etc. Various communication client applications can be installed on terminal devices 601, 602, and 603, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only examples).

[0131] The terminal devices 601 , 602 , and 603 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, and desktop computers, etc.

[0132] The server 605 may be a server that provides various services, such as a backend management server (only an example) that provides support for shopping websites browsed by users using the terminal devices 601, 602, and 603. The backend management server may analyze and process the received data such as product information query requests, and feed back the processing results (such as target push information, product information - only an example) to the terminal device.

[0133] It should be noted that the NFC-based identity recognition method provided in the embodiment of the present invention is generally executed by the terminal devices 601 , 602 , and 603 , and accordingly, the NFC-based identity recognition device is generally provided in the terminal devices 601 , 602 , and 603 .

[0134] It should be understood that Figure 6 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to the implementation requirements.

[0135] Reference below Figure 7 , which shows a schematic diagram of the structure of a computer system 700 of a terminal device suitable for implementing an embodiment of the present invention. Figure 7 The terminal device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0136] like Figure 7As shown, the computer system 700 includes a central processing unit (CPU) 701, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 702 or a program loaded from a storage part 708 into a random access memory (RAM) 703. In the RAM 703, various programs and data required for the operation of the system 700 are also stored. The CPU 701, the ROM 702, and the RAM 703 are connected to each other via a bus 704. An input / output (I / O) interface 705 is also connected to the bus 704.

[0137] The following components are connected to the I / O interface 705: an input section 706 including a keyboard, a mouse, etc.; an output section 707 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 708 including a hard disk, etc.; and a communication section 709 including a network interface card such as a LAN card, a modem, etc. The communication section 709 performs communication processing via a network such as the Internet. A drive 710 is also connected to the I / O interface 705 as needed. A removable medium 711, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 710 as needed, so that a computer program read therefrom is installed into the storage section 708 as needed.

[0138] In particular, according to the embodiments disclosed in the present invention, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present invention include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 709, and / or installed from the removable medium 711. When the computer program is executed by the central processing unit (CPU) 701, the above-mentioned functions defined in the system of the present invention are executed.

[0139] It should be noted that the computer-readable medium shown in the present invention may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present invention, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0140] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0141] The modules involved in the embodiments of the present invention may be implemented by software or hardware. The modules described may also be set in a processor. For example, they may be described as: a processor includes an acquisition module, a receiving module, an encryption module, and a sending module. The names of these modules do not, in some cases, constitute a limitation on the modules themselves. For example, the acquisition module may also be described as "a module for acquiring policy parameters from a face service end in response to receiving a call request sent by a business front end."

[0142] As another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiment; or it may exist independently without being assembled into the device. The above computer-readable medium carries one or more programs, and when the above one or more programs are executed by a device, the device includes: in response to receiving a call request sent by a business front end, obtaining policy parameters from a face service end; sending a verification request to an NFC service end according to the policy parameters, receiving a request identifier returned by the NFC service end when the verification request is passed; obtaining an identity identifier to be identified; obtaining identity information from the face service end according to the request identifier and the identity identifier to be identified, and sending the identity information to the NFC service end so that the NFC service end identifies the identity information; receiving the identification result returned by the NFC service end, and sending the identification result to the business front end.

[0143] According to the technical solution of the embodiment of the present invention, by receiving the call request sent by the business front end, obtaining the policy parameters from the face server, sending a verification request to the server according to the policy parameters, and receiving the request identifier returned by the NFC server after verification, the face server can be requested to obtain identity information according to the request identifier and the obtained identity identifier to be identified, and then the obtained identity information can be sent to the NFC server to obtain the identification result corresponding to the identity information from the NFC server, and the identification result is sent to the business front end to realize the identification of the identity information. Based on NFC technology, this method can quickly realize the identification of certificates, obtain certificate information and verify the authenticity of the certificate. This method can improve the efficiency and accuracy of information verification and reduce security risks.

[0144] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. An identity recognition method based on NFC, characterized in that: include: In response to receiving a call request sent by the business front end, obtaining strategy parameters from the face service end; Sending a verification request to the NFC server according to the policy parameters, and receiving a request identifier returned by the NFC server when the verification request is passed; Obtain the identity to be identified; Acquire identity information corresponding to the identity identifier to be identified from the face service end according to the request identifier and the identity identifier to be identified, and send the identity information to the NFC service end so that the NFC service end identifies the identity information; Receive the identification result returned by the NFC server, and send the identification result to the business front end; Among them, before obtaining policy parameters from the face service end, it includes: receiving a token acquisition request sent by the business service end, the acquisition request includes a business identifier, a business authorization identifier and identity authentication information; verifying the business identifier, business authorization identifier and identity authentication information; when the verification result indicates that the verification is passed, sending the token corresponding to the acquisition request to the business service end, so that the business service end sends the token to the business front end; the call request is generated by the business front end according to the token.

2. The method according to claim 1, characterized in that Get strategy parameters from the face server, including: Sending a configuration parameter acquisition request to the face server; Receive the policy parameter corresponding to the configuration parameter acquisition request returned by the face service end.

3. The method according to claim 1, characterized in that Obtaining identity information corresponding to the identity identifier to be identified from the face server according to the request identifier and the identity identifier to be identified, including: sending a request for obtaining identity information to the face server according to the request identifier and the identity identifier to be identified, so that the face server sends an acquisition request to the NFC server based on the request for obtaining identity information, obtains the identity information from a response result returned by the NFC server in response to the acquisition request, and receives the identity information returned by the face server.

4. The method according to claim 2, characterized in that: The recognition result includes a certificate image; after receiving the recognition result returned by the NFC server, it includes: The ID picture is sent to the face service end so that the face service end binds the ID picture to the token corresponding to the call request.

5. An identity recognition method based on NFC, characterized in that: include: Get the calling parameters and token required to call the face SDK; Generate a call request according to the call parameter and the token, and send the call request to the face SDK to identify the identity information through the face SDK; Receiving the recognition result returned by the face SDK in response to the calling request; Among them, obtaining the token required for calling the face SDK includes: enabling the business service end to send a token acquisition request to the face SDK, the acquisition request including a business identifier, a business authorization identifier and identity authentication information; enabling the face SDK to verify the business identifier, the business authorization identifier and the identity authentication information; when the verification result indicates that the verification is passed, enabling the face SDK to send the token corresponding to the acquisition request to the business service end, and receiving the token sent by the business service end.

6. An identity recognition device based on NFC, characterized in that: include: A first acquisition module, in response to receiving a call request sent by the business front end, acquires the policy parameters from the face service end; A receiving module, sending a verification request to the NFC server according to the policy parameters, and receiving a request identifier returned by the NFC server when the verification request is passed; The second acquisition module acquires the identity to be identified; A first sending module, which obtains identity information corresponding to the identity identifier to be identified from the face server according to the request identifier and the identity identifier to be identified, and sends the identity information to the NFC server, so that the NFC server identifies the identity information; A second sending module receives the identification result returned by the NFC server and sends the identification result to the business front end; Among them, the first acquisition module is also used to: before obtaining policy parameters from the face service end, receive a token acquisition request sent by the business service end, the acquisition request including a business identifier, a business authorization identifier and identity authentication information; verify the business identifier, business authorization identifier and identity authentication information; when the verification result indicates that the verification is passed, send the token corresponding to the acquisition request to the business service end, so that the business service end sends the token to the business front end; the call request is generated by the business front end according to the token.

7. An identity recognition system based on NFC, characterized in that: include: Business front-end, face SDK, face server and NFC server, The business front end obtains the calling parameters and token required for calling the face SDK, generates a calling request according to the calling parameters and the token, and sends the calling request to the face SDK; After receiving the call request sent by the business front end, the face SDK obtains the policy parameters from the face server, and sends a verification request to the NFC server according to the policy parameters. Then, the face SDK receives the request identifier returned by the NFC server when the verification request is passed. The face SDK obtains the identity to be identified; The face SDK obtains the identity information corresponding to the identity identifier to be identified from the face server according to the request identifier and the identity identifier to be identified, and sends the identity information to the NFC server; The NFC server recognizes the identity information and returns the recognition result to the face SDK; After receiving the recognition result, the face SDK sends the recognition result to the business front end; Among them, before the face SDK obtains policy parameters from the face server, it receives a token acquisition request sent by the business service end, and the acquisition request includes a business identifier, a business authorization identifier and identity authentication information; the business identifier, business authorization identifier and identity authentication information are verified; when the verification result indicates that the verification is passed, the token corresponding to the acquisition request is sent to the business server, so that the business server sends the token to the business front end.

8. An electronic device, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 5.

9. A computer readable medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 5 is implemented.

Images