A face recognition authentication processing method and device

By using camera private key signature and terminal manufacturer root public key verification methods in facial recognition authentication, the problem of insufficient security of facial recognition authentication in the prior art is solved, and higher authentication security and authenticity are achieved.

CN116112174BActive Publication Date: 2024-12-24CHINA CITIC BANK CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202211579794.2
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-12-09
Publication Date
2024-12-24
Estimated Expiration
2042-12-09

AI Technical Summary

Technical Problem

The existing facial recognition authentication methods have security risks. Illegal personnel can obtain user identity information through illegal means and generate synthetic videos for facial recognition authentication, resulting in insufficient authentication security.

Method used

Digitally sign the terminal location information through the camera private key, add the signature result and public key to the video, and use the terminal manufacturer's root public key to verify the legality of the signature result, and compare the location information with the reserved location to ensure the video data Authenticity and legality.

Benefits of technology

Improve the security of facial recognition authentication, prevent fake video attacks, and ensure the reliability and security of the authentication process.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116112174B_ABST
    Figure CN116112174B_ABST
Patent Text Reader

Abstract

The present invention provides a face recognition authentication processing method and device, which relates to the field of data security technology and can be used in the financial field or other technical fields. The method includes: if a face recognition signal is detected, the original face recognition video and the current terminal location information are obtained; the current terminal location information is digitally signed using the camera private key to obtain the location information signature result; the face recognition video is sent to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video; and the face recognition authentication message fed back by the server for the face recognition video is received. The device executes the above method. The face recognition authentication processing method and device provided by the embodiment of the present invention can improve the security of face recognition authentication.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of data security technology, and in particular to a face recognition authentication processing method and device. Background Art

[0002] User identification through face recognition has been widely used. Existing face recognition methods include: performing liveness detection on the face, and transmitting the face photo to the server after the liveness detection passes. The server compares the face photo with the photo reserved by the user. If the comparison results are consistent, the user's identity is considered to be legitimate.

[0003] Existing methods have security risks. For example, illegal persons can obtain users' identity information, including photos, through illegal means; through video editing software, use user photos to generate user face videos, and the videos include common movements, such as nodding, shaking head, etc.

[0004] Use a mobile phone to log in to the bank APP with the user's identity. When performing facial recognition authentication, use a synthesized video to replace the video captured by the mobile phone camera, and then pass the facial recognition authentication.

[0005] Therefore, how to improve the security of face recognition authentication has become a technical problem that needs to be solved urgently. Summary of the invention

[0006] In view of the problems in the prior art, the embodiments of the present invention provide a face recognition authentication processing method and device, which can at least partially solve the problems in the prior art.

[0007] On the one hand, the present invention provides a face recognition authentication processing method, comprising:

[0008] If a face recognition signal is detected, the original face recognition video and the current terminal location information are obtained;

[0009] The current terminal location information is digitally signed using the camera private key to obtain a location information signature result;

[0010] Sending the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video;

[0011] The camera public key signature result is obtained by digitally signing the camera public key using the terminal manufacturer's root private key in advance;

[0012] Receive a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message.

[0013] On the one hand, the present invention provides a face recognition authentication processing method, comprising:

[0014] A face recognition video sent by a receiving terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key, and a camera public key signature result;

[0015] The location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key;

[0016] Parsing the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result;

[0017] Using the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result, if it is determined that the first legitimacy verification passes, then using the camera public key to verify the legitimacy of the camera public key signature result;

[0018] If it is determined that the second legitimacy verification passes, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than the preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

[0019] The face recognition authentication processing method further includes:

[0020] If it is determined that the first legitimacy verification fails, it is directly determined that the face recognition authentication fails, and a face recognition authentication failure message is sent to the terminal.

[0021] The face recognition authentication processing method further includes:

[0022] If it is determined that the second legitimacy verification fails, the face recognition authentication is directly determined to have failed, and a face recognition authentication failure message is sent to the terminal.

[0023] The face recognition authentication processing method further includes:

[0024] If it is determined that the distance value between the current terminal location information and the reserved terminal location information is greater than or equal to a preset distance threshold, it is directly determined that the face recognition authentication has failed, and a face recognition authentication failure message is sent to the terminal.

[0025] On the one hand, the present invention provides a face recognition authentication processing device, comprising:

[0026] An acquisition unit, used to acquire original face recognition video and current terminal location information if a face recognition signal is detected;

[0027] A digital signature unit, used to digitally sign the current terminal location information using a camera private key to obtain a location information signature result;

[0028] A sending unit, configured to send a face recognition video to a server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video;

[0029] The camera public key signature result is obtained by digitally signing the camera public key using the terminal manufacturer's root private key in advance;

[0030] A receiving unit is used to receive a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message.

[0031] On the one hand, the present invention provides a face recognition authentication processing device, comprising:

[0032] A receiving module, used to receive a face recognition video sent by a terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key, and a camera public key signature result;

[0033] The location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key;

[0034] A parsing module, used to parse the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result;

[0035] A verification module, used to verify the legitimacy of the camera public key and the location information signature result using the terminal manufacturer's root public key, and if it is determined that the first legitimacy verification passes, verify the legitimacy of the camera public key signature result using the camera public key;

[0036] A determination module is used to compare the current terminal location information with the reserved terminal location information if it is determined that the second legitimacy verification has passed; if it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than a preset distance threshold, the face recognition video is compared with the reserved face data; if the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

[0037] Wherein, the face recognition authentication processing device is also used for:

[0038] If it is determined that the first legitimacy verification fails, it is directly determined that the face recognition authentication fails, and a face recognition authentication failure message is sent to the terminal.

[0039] Wherein, the face recognition authentication processing device is also used for:

[0040] If it is determined that the second legitimacy verification fails, the face recognition authentication is directly determined to have failed, and a face recognition authentication failure message is sent to the terminal.

[0041] Wherein, the face recognition authentication processing device is also used for:

[0042] If it is determined that the distance value between the current terminal location information and the reserved terminal location information is greater than or equal to a preset distance threshold, it is directly determined that the face recognition authentication has failed, and a face recognition authentication failure message is sent to the terminal.

[0043] In another aspect, an embodiment of the present invention provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the following method when executing the computer program:

[0044] If a face recognition signal is detected, the original face recognition video and the current terminal location information are obtained;

[0045] The current terminal location information is digitally signed using the camera private key to obtain a location information signature result;

[0046] Sending the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video;

[0047] The camera public key signature result is obtained by digitally signing the camera public key using the terminal manufacturer's root private key in advance;

[0048] Receiving a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message;

[0049] Alternatively, a face recognition video sent by a receiving terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key, and a camera public key signature result;

[0050] The location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key;

[0051] Parsing the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result;

[0052] Using the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result, if it is determined that the first legitimacy verification passes, then using the camera public key to verify the legitimacy of the camera public key signature result;

[0053] If it is determined that the second legitimacy verification passes, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than the preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

[0054] An embodiment of the present invention provides a computer-readable storage medium, including:

[0055] The computer readable storage medium stores a computer program, and when the computer program is executed by a processor, the following method is implemented:

[0056] If a face recognition signal is detected, the original face recognition video and the current terminal location information are obtained;

[0057] The current terminal location information is digitally signed using the camera private key to obtain a location information signature result;

[0058] Sending the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video;

[0059] The camera public key signature result is obtained by digitally signing the camera public key using the terminal manufacturer's root private key in advance;

[0060] Receiving a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message;

[0061] Alternatively, a face recognition video sent by a receiving terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key, and a camera public key signature result;

[0062] The location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key;

[0063] Parsing the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result;

[0064] Using the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result, if it is determined that the first legitimacy verification passes, then using the camera public key to verify the legitimacy of the camera public key signature result;

[0065] If it is determined that the second legitimacy verification passes, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than the preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

[0066] The embodiment of the present invention further provides a computer program product, the computer program product comprising a computer program, and when the computer program is executed by a processor, the following method is implemented:

[0067] If a face recognition signal is detected, the original face recognition video and the current terminal location information are obtained;

[0068] The current terminal location information is digitally signed using the camera private key to obtain a location information signature result;

[0069] Sending the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video;

[0070] The camera public key signature result is obtained by digitally signing the camera public key using the terminal manufacturer's root private key in advance;

[0071] Receiving a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message;

[0072] Alternatively, a face recognition video sent by a receiving terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key, and a camera public key signature result;

[0073] The location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key;

[0074] Parsing the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result;

[0075] Using the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result, if it is determined that the first legitimacy verification passes, then using the camera public key to verify the legitimacy of the camera public key signature result;

[0076] If it is determined that the second legitimacy verification passes, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than the preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

[0077] The face recognition authentication processing method and device provided by the embodiment of the present invention, if a face recognition signal is detected, then the original face recognition video and the current terminal location information are obtained; the current terminal location information is digitally signed using the camera private key to obtain the location information signature result; the face recognition video is sent to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video; wherein the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key; the face recognition authentication message fed back by the server for the face recognition video is received; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message, which can improve the security of face recognition authentication.

[0078] The face recognition authentication processing method and device provided by the embodiment of the present invention receive a face recognition video sent by a terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key and a camera public key signature result; wherein the location information signature result is obtained by the terminal using a camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using a terminal manufacturer's root private key; the face recognition video is parsed to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; The terminal manufacturer's root public key is used to verify the legitimacy of the camera public key and the location information signature result. If it is determined that the first legitimacy verification is passed, the camera public key is used to verify the legitimacy of the camera public key signature result; if it is determined that the second legitimacy verification is passed, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than a preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison is passed, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal, which can improve the security of face recognition authentication. BRIEF DESCRIPTION OF THE DRAWINGS

[0079] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0080] Figure 1 It is a flowchart of a face recognition authentication processing method provided by an embodiment of the present invention.

[0081] Figure 2 It is a flowchart of a face recognition authentication processing method provided by another embodiment of the present invention.

[0082] Figure 3 It is a schematic diagram illustrating the face recognition authentication processing method provided by an embodiment of the present invention.

[0083] Figure 4 It is a structural diagram of a face recognition and authentication processing device provided by an embodiment of the present invention.

[0084] Figure 5 It is a structural diagram of a face recognition and authentication processing device provided by another embodiment of the present invention.

[0085] Figure 6 A schematic diagram of the physical structure of a computer device provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0086] In order to make the purpose, technical scheme and advantages of the embodiments of the present invention more clear, the embodiments of the present invention are further described in detail below in conjunction with the accompanying drawings. Here, the illustrative embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention. It should be noted that, in the absence of conflict, the embodiments in this application and the features in the embodiments can be combined with each other arbitrarily.

[0087] Figure 1 FIG. 1 is a flow chart of a face recognition authentication processing method provided by an embodiment of the present invention. Figure 1 As shown, the face recognition authentication processing method provided by the embodiment of the present invention includes:

[0088] Step S1: If a face recognition signal is detected, the original face recognition video and the current terminal location information are obtained.

[0089] Step S2: Use the camera private key to digitally sign the current terminal location information to obtain a location information signature result.

[0090] Step S3: sending the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video;

[0091] The camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key.

[0092] Step S4: receiving a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message.

[0093] In the above step S1, if the device detects a face recognition signal, the original face recognition video and the current terminal location information are obtained. The device can be a computer device that executes the method, such as a terminal, which can specifically include a mobile phone. The acquisition, storage, use, and processing of data in the technical solution of this application are in compliance with the relevant provisions of national laws and regulations. Every time a user uses a mobile phone for face recognition, the camera uses a built-in geographic location positioning module to obtain the current terminal location information, which can specifically be geographic coordinates (GC).

[0094] In the above step S2, the device uses the camera private key to digitally sign the current terminal location information to obtain the location information signature result. Use CPrK (camera private key) to digitally sign GC to obtain a GC signature result (GCSignature Result, GCSR).

[0095] In the above step S3, the device sends the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video; GC, GCSR, CPuK (camera public key) and SR (camera public key signature result) are attached to the face recognition video. The face recognition video is uploaded to the face recognition system, i.e., the server, through the mobile phone APP.

[0096] The camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key.

[0097] The embodiment of the present invention requires the terminal manufacturer, such as the mobile phone manufacturer, to have a pair of asymmetric keys to be used as root keys. The mobile phone manufacturer's root public key (Manufacturer Public Key) is abbreviated as MpuK. The mobile phone manufacturer's root private key (Manufacturer Private Key) is abbreviated as MPrK.

[0098] Mobile phone cameras have built-in geo-location modules, such as GPS modules.

[0099] When a mobile phone leaves the factory, a pair of asymmetric keys is generated inside the mobile phone camera. The mobile phone camera public key (Camera Public Key) is abbreviated as CpuK. The mobile phone camera private key (Camera Private Key) is abbreviated as CPrK. The mobile phone manufacturer uses MPrK to digitally sign CpuK (the signature result is recorded as SR, Signature Result) and writes SR into the mobile phone camera.

[0100] The mobile phone manufacturer's root public key is sent to the face recognition system for digital signature verification.

[0101] When users activate the face recognition function, they need to reserve face data and common geographic coordinate information (such as longitude and latitude data).

[0102] In the above step S4, the device receives a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message.

[0103] The face recognition authentication processing method provided by the embodiment of the present invention, if a face recognition signal is detected, then the original face recognition video and the current terminal location information are obtained; the current terminal location information is digitally signed using the camera private key to obtain the location information signature result; the face recognition video is sent to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video; wherein the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key; the face recognition authentication message fed back by the server for the face recognition video is received; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message, which can improve the security of face recognition authentication.

[0104] Figure 2 FIG. 1 is a flow chart of a face recognition authentication processing method provided by an embodiment of the present invention. Figure 2 As shown, the face recognition authentication processing method provided by the embodiment of the present invention includes:

[0105] Step R1: receiving a face recognition video sent by a terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key, and a camera public key signature result;

[0106] Among them, the location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key.

[0107] Step R2: parse the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result.

[0108] Step R3: Use the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result. If it is determined that the first legitimacy verification passes, use the camera public key to verify the legitimacy of the camera public key signature result.

[0109] Step R4: If it is determined that the second legitimacy verification is passed, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than a preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison is passed, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

[0110] In the above step R1, the device receives the face recognition video sent by the terminal; the face recognition video carries the location information signature result, the current terminal location information, the camera public key and the camera public key signature result;

[0111] The location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by pre-digitally signing the camera public key using the terminal manufacturer's root private key. The device can be a computer device that executes the method, such as a server, which can be specifically a bank face recognition system. The acquisition, storage, use, and processing of data in the technical solution of this application are in compliance with the relevant provisions of national laws and regulations.

[0112] like Figure 3 As shown, the terminal manufacturer's root private key digitally signs the camera public key. A key pair DK (DeviceKey) is built into the mobile phone camera. The key pair DK is written by the mobile phone manufacturer when the mobile phone leaves the factory.

[0113] In the above step R2, the device parses the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result. Referring to the above description, the face recognition system parses GC, GCSR, CPuK and SR from the video data.

[0114] In the above step R3, the device uses the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result. If it is determined that the first legitimacy verification passes, the camera public key is used to verify the legitimacy of the camera public key signature result. Figure 3 As shown, the bank face recognition system uses the camera public key to verify the legitimacy of the camera public key signature result. Use MPuK to verify the legitimacy of CpuK and SR. If CpuK is legal, continue to use CpuK to verify the legitimacy of GCSR.

[0115] In the above step R4, if the device determines that the second legitimacy verification is passed, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than the preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison is passed, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal. The preset distance threshold can be set independently according to actual conditions.

[0116] After GCSR verification is passed, the face recognition system compares the GC to see if the distance between the GC and the user's reserved common geographic coordinate location information (i.e., the reserved terminal location information) is less than the preset distance threshold. If it is less than the preset distance threshold, the face video is compared with the face data in the system. If the comparison is successful, the face authentication is successful. If any of the above verification steps fails, the face authentication fails.

[0117] The method execution steps of the embodiment of the present invention are described as follows:

[0118] 1. When users activate the face recognition function of the mobile APP, face information and common geographic coordinate information are reserved and stored in the bank's backend system;

[0119] 2. The user launches the mobile app and initiates an operation that requires face recognition;

[0120] 3. The mobile phone APP calls the mobile phone camera collection function to initiate the operation of obtaining the face video;

[0121] 4. The camera device adds GC, GCSR, CpuK and SR to the collected video data and returns the video data to the mobile phone APP;

[0122] 5. After the mobile phone APP receives the video data, it uploads it to the bank’s facial recognition system.

[0123] 6. The face recognition system verifies the legitimacy of GC, GCSR, CpuK and SR. If they pass, the face video data will be compared with the data reserved by the user in the system, and the comparison results will be fed back to the mobile phone APP;

[0124] 7. The mobile APP prompts the user the authentication result. If passed, the user can perform subsequent operations, such as transferring money. If not passed, the user cannot perform subsequent operations.

[0125] The embodiment of the present invention ensures the legitimacy of video data through a digital signature algorithm. Since attackers do not have the key data of the mobile phone manufacturer and the camera, they cannot modify the geographical location information at will, and thus cannot forge legal video data, and thus cannot launch attacks, thereby improving the security of face recognition.

[0126] The face recognition authentication processing method provided by the embodiment of the present invention receives a face recognition video sent by a terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key and a camera public key signature result; wherein the location information signature result is obtained by the terminal using a camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using a terminal manufacturer's root private key; the face recognition video is parsed to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; and the face recognition video is decoded to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result. The terminal manufacturer's root public key verifies the legitimacy of the camera public key and the location information signature result. If it is determined that the first legitimacy verification is passed, the camera public key is used to verify the legitimacy of the camera public key signature result; if it is determined that the second legitimacy verification is passed, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than a preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal, which can improve the security of face recognition authentication.

[0127] Furthermore, the face recognition authentication processing method also includes:

[0128] If it is determined that the first legitimacy verification fails, the face recognition authentication is directly determined to have failed, and a face recognition authentication failure message is sent to the terminal. Please refer to the above description and no further details will be given.

[0129] Furthermore, the face recognition authentication processing method also includes:

[0130] If it is determined that the second legitimacy verification fails, the face recognition authentication is directly determined to have failed, and a face recognition authentication failure message is sent to the terminal. Please refer to the above description and no further details will be given.

[0131] Furthermore, the face recognition authentication processing method also includes:

[0132] If it is determined that the distance value between the current terminal location information and the reserved terminal location information is greater than or equal to the preset distance threshold, it is directly determined that the face recognition authentication fails, and a face recognition authentication failure message is sent to the terminal. Please refer to the above description and no further details will be given.

[0133] It should be noted that the face recognition and authentication processing method provided in the embodiment of the present invention can be used in the financial field, and can also be used in any technical field other than the financial field. The embodiment of the present invention does not limit the application field of the face recognition and authentication processing method.

[0134] Figure 4 FIG. 1 is a schematic diagram of the structure of a face recognition and authentication processing device provided by an embodiment of the present invention. Figure 4 As shown, the face recognition authentication processing device provided by the embodiment of the present invention includes an acquisition unit 401, a digital signature unit 402, a sending unit 403 and a receiving unit 404, wherein:

[0135] The acquisition unit 401 is used to acquire the original face recognition video and the current terminal location information if a face recognition signal is detected; the digital signature unit 402 is used to digitally sign the current terminal location information using the camera private key to obtain the location information signature result; the sending unit 403 is used to send the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video; wherein the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key; the receiving unit 404 is used to receive the face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message.

[0136] Specifically, the acquisition unit 401 in the device is used to obtain the original face recognition video and the current terminal location information if a face recognition signal is detected; the digital signature unit 402 is used to use the camera private key to digitally sign the current terminal location information to obtain the location information signature result; the sending unit 403 is used to send the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video; wherein the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key; the receiving unit 404 is used to receive the face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message.

[0137] The face recognition authentication processing device provided by the embodiment of the present invention obtains the original face recognition video and the current terminal location information if a face recognition signal is detected; uses the camera private key to digitally sign the current terminal location information to obtain the location information signature result; sends the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video; wherein the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key; receives the face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message, which can improve the security of face recognition authentication.

[0138] Figure 5 FIG. 1 is a schematic diagram of the structure of a face recognition and authentication processing device provided by an embodiment of the present invention. Figure 5 As shown, the face recognition authentication processing device provided by the embodiment of the present invention includes a receiving module 501, a parsing module 502, a verification module 503 and a determination module 504, wherein:

[0139] The receiving module 501 is used to receive the face recognition video sent by the terminal; the face recognition video carries the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; wherein the location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key; the parsing module 502 is used to parse the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; the verification module 503 is used to use the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result. If it is determined that the first legitimacy verification is passed, the legitimacy of the camera public key signature result is verified using the camera public key; the determination module 504 is used to compare the current terminal location information with the reserved terminal location information if it is determined that the second legitimacy verification is passed. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than the preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison is passed, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

[0140] Specifically, the receiving module 501 in the device is used to receive the face recognition video sent by the terminal; the face recognition video carries the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; wherein the location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key; the parsing module 502 is used to parse the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; The verification module 503 is used to use the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result. If it is determined that the first legitimacy verification is passed, the legitimacy of the camera public key signature result is verified using the camera public key; the determination module 504 is used to compare the current terminal location information with the reserved terminal location information if it is determined that the second legitimacy verification is passed. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than a preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison is passed, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

[0141] The face recognition authentication processing device provided by the embodiment of the present invention receives a face recognition video sent by a terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key and a camera public key signature result; wherein the location information signature result is obtained by the terminal using a camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using a terminal manufacturer's root private key; the face recognition video is parsed to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; and the camera public key signature result is obtained by using a terminal manufacturer's root private key to digitally sign the camera public key. The terminal manufacturer's root public key verifies the legitimacy of the camera public key and the location information signature result. If it is determined that the first legitimacy verification is passed, the camera public key is used to verify the legitimacy of the camera public key signature result; if it is determined that the second legitimacy verification is passed, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than a preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal, which can improve the security of face recognition authentication.

[0142] Furthermore, the face recognition authentication processing device is also used for:

[0143] If it is determined that the first legitimacy verification fails, it is directly determined that the face recognition authentication fails, and a face recognition authentication failure message is sent to the terminal.

[0144] Furthermore, the face recognition authentication processing device is also used for:

[0145] If it is determined that the second legitimacy verification fails, the face recognition authentication is directly determined to have failed, and a face recognition authentication failure message is sent to the terminal.

[0146] Furthermore, the face recognition authentication processing device is also used for:

[0147] If it is determined that the distance value between the current terminal location information and the reserved terminal location information is greater than or equal to a preset distance threshold, it is directly determined that the face recognition authentication has failed, and a face recognition authentication failure message is sent to the terminal.

[0148] The embodiment of the face recognition and authentication processing device provided in the embodiment of the present invention can be specifically used to execute the processing flow of the above-mentioned method embodiments. Its functions are not repeated here, and reference can be made to the detailed description of the above-mentioned method embodiments.

[0149] Figure 6 A schematic diagram of the physical structure of a computer device provided in an embodiment of the present invention is shown in FIG. Figure 6 As shown, the computer device includes: a memory 601, a processor 602, and a computer program stored in the memory 601 and executable on the processor 602. When the processor 602 executes the computer program, the following method is implemented:

[0150] If a face recognition signal is detected, the original face recognition video and the current terminal location information are obtained;

[0151] The current terminal location information is digitally signed using the camera private key to obtain a location information signature result;

[0152] Sending the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video;

[0153] The camera public key signature result is obtained by digitally signing the camera public key using the terminal manufacturer's root private key in advance;

[0154] Receiving a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message;

[0155] Alternatively, a face recognition video sent by a receiving terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key, and a camera public key signature result;

[0156] The location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key;

[0157] Parsing the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result;

[0158] Using the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result, if it is determined that the first legitimacy verification passes, then using the camera public key to verify the legitimacy of the camera public key signature result;

[0159] If it is determined that the second legitimacy verification passes, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than the preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

[0160] This embodiment discloses a computer program product, the computer program product including a computer program, and when the computer program is executed by a processor, the following method is implemented:

[0161] If a face recognition signal is detected, the original face recognition video and the current terminal location information are obtained;

[0162] The current terminal location information is digitally signed using the camera private key to obtain a location information signature result;

[0163] Sending the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video;

[0164] The camera public key signature result is obtained by digitally signing the camera public key using the terminal manufacturer's root private key in advance;

[0165] Receiving a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message;

[0166] Alternatively, a face recognition video sent by a receiving terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key, and a camera public key signature result;

[0167] The location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key;

[0168] Parsing the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result;

[0169] Using the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result, if it is determined that the first legitimacy verification passes, then using the camera public key to verify the legitimacy of the camera public key signature result;

[0170] If it is determined that the second legitimacy verification passes, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than the preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

[0171] This embodiment provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the following method is implemented:

[0172] If a face recognition signal is detected, the original face recognition video and the current terminal location information are obtained;

[0173] The current terminal location information is digitally signed using the camera private key to obtain a location information signature result;

[0174] Sending the face recognition video to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video;

[0175] The camera public key signature result is obtained by digitally signing the camera public key using the terminal manufacturer's root private key in advance;

[0176] Receiving a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message;

[0177] Alternatively, a face recognition video sent by a receiving terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key, and a camera public key signature result;

[0178] The location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key;

[0179] Parsing the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result;

[0180] Using the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result, if it is determined that the first legitimacy verification passes, then using the camera public key to verify the legitimacy of the camera public key signature result;

[0181] If it is determined that the second legitimacy verification passes, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than the preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

[0182] Compared with the technical solutions in the prior art, the embodiments of the present invention are as follows: if a face recognition signal is detected, the original face recognition video and the current terminal location information are obtained; the current terminal location information is digitally signed using the camera private key to obtain the location information signature result; the face recognition video is sent to the server; the face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video; wherein the camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer's root private key; and the face recognition authentication message fed back by the server for the face recognition video is received; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message, which can improve the security of face recognition authentication.

[0183] Compared with the technical solutions in the prior art, the embodiments of the present invention receive a face recognition video sent by a terminal; the face recognition video carries a location information signature result, current terminal location information, a camera public key and a camera public key signature result; wherein the location information signature result is obtained by the terminal digitally signing the current terminal location information using a camera private key; the camera public key signature result is obtained by digitally signing the camera public key in advance using a terminal manufacturer's root private key; the face recognition video is parsed to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; and the camera public key signature result is obtained by using a terminal manufacturer's root private key to digitally sign the camera public key. The terminal manufacturer's root public key verifies the legitimacy of the camera public key and the location information signature result. If it is determined that the first legitimacy verification is passed, the camera public key is used to verify the legitimacy of the camera public key signature result; if it is determined that the second legitimacy verification is passed, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than a preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal, which can improve the security of face recognition authentication.

[0184] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0185] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0186] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0187] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0188] In the description of this specification, the description with reference to the terms "one embodiment", "a specific embodiment", "some embodiments", "for example", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0189] The specific embodiments described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A face recognition authentication processing method, characterized in that: include: If a face recognition signal is detected, the original face recognition video and the current terminal location information are obtained; When users activate face recognition, they reserve face information and common geographic location information and store them in the server backend system; The current terminal location information is digitally signed using the camera private key to obtain a location information signature result; Send face recognition video to the server; The face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video; The camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer root private key; the terminal manufacturer root key includes the terminal manufacturer root private key and the terminal manufacturer root public key, which is a pair of asymmetric keys possessed by the mobile phone manufacturer; the camera key includes the camera public key and the camera private key, which is a pair of asymmetric keys generated internally by the mobile phone when it leaves the factory; Receive a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message.

2. A face recognition authentication processing method, characterized in that: include: Receive the face recognition video sent by the terminal; The face recognition video carries the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; When users activate face recognition, they reserve face information and common geographic location information and store them in the server backend system; The camera key includes the camera public key and the camera private key, which is a pair of asymmetric keys generated internally by the mobile phone when it leaves the factory; The location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by pre-digitally signing the camera public key using the terminal manufacturer root private key; the terminal manufacturer root key includes the terminal manufacturer root private key and the terminal manufacturer root public key, which is a pair of asymmetric keys possessed by the mobile phone manufacturer; Parsing the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; Using the terminal manufacturer's root public key to verify the legitimacy of the camera public key and the location information signature result, if it is determined that the first legitimacy verification passes, then using the camera public key to verify the legitimacy of the camera public key signature result; If it is determined that the second legitimacy verification passes, the current terminal location information is compared with the reserved terminal location information. If it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than the preset distance threshold, the face recognition video is compared with the reserved face data. If the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

3. The face recognition authentication processing method according to claim 2, characterized in that: The face recognition authentication processing method also includes: If it is determined that the first legitimacy verification fails, it is directly determined that the face recognition authentication fails, and a face recognition authentication failure message is sent to the terminal.

4. The face recognition authentication processing method according to claim 2, characterized in that: The face recognition authentication processing method also includes: If it is determined that the second legitimacy verification fails, the face recognition authentication is directly determined to have failed, and a face recognition authentication failure message is sent to the terminal.

5. The face recognition authentication processing method according to claim 2, characterized in that: The face recognition authentication processing method also includes: If it is determined that the distance value between the current terminal location information and the reserved terminal location information is greater than or equal to a preset distance threshold, it is directly determined that the face recognition authentication has failed, and a face recognition authentication failure message is sent to the terminal.

6. A face recognition authentication processing device, characterized in that: include: An acquisition unit, used to acquire original face recognition video and current terminal location information if a face recognition signal is detected; When users activate face recognition, they reserve face information and common geographic location information and store them in the server backend system; A digital signature unit, used to digitally sign the current terminal location information using a camera private key to obtain a location information signature result; A sending unit, used for sending the face recognition video to a server; The face recognition video adds the location information signature result, the current terminal location information, the camera public key and the camera public key signature result to the original face recognition video; The camera public key signature result is obtained by digitally signing the camera public key in advance using the terminal manufacturer root private key; the terminal manufacturer root key includes the terminal manufacturer root private key and the terminal manufacturer root public key, which is a pair of asymmetric keys possessed by the mobile phone manufacturer; the camera key includes the camera public key and the camera private key, which is a pair of asymmetric keys generated internally by the mobile phone when it leaves the factory; A receiving unit is used to receive a face recognition authentication message fed back by the server for the face recognition video; the face recognition authentication message includes a face recognition authentication success message or a face recognition authentication failure message.

7. A face recognition authentication processing device, characterized in that: include: A receiving module, used for receiving face recognition video sent by a terminal; The face recognition video carries the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; when the user activates face recognition, the face information and common geographical location information are reserved and stored in the server backend system; The camera key includes the camera public key and the camera private key, which is a pair of asymmetric keys generated internally by the mobile phone when it leaves the factory; The location information signature result is obtained by the terminal using the camera private key to digitally sign the current terminal location information; the camera public key signature result is obtained by pre-digitally signing the camera public key using the terminal manufacturer root private key; the terminal manufacturer root key includes the terminal manufacturer root private key and the terminal manufacturer root public key, which is a pair of asymmetric keys possessed by the mobile phone manufacturer; A parsing module, used to parse the face recognition video to obtain the location information signature result, the current terminal location information, the camera public key and the camera public key signature result; A verification module, used to verify the legitimacy of the camera public key and the location information signature result by using the terminal manufacturer's root public key, and if it is determined that the first legitimacy verification passes, verify the legitimacy of the camera public key signature result by using the camera public key; A determination module is used to compare the current terminal location information with the reserved terminal location information if it is determined that the second legitimacy verification has passed; if it is determined that the distance value between the current terminal location information and the reserved terminal location information is less than a preset distance threshold, the face recognition video is compared with the reserved face data; if the comparison passes, it is determined that the face recognition authentication is successful, and a face recognition authentication success message is sent to the terminal.

8. The face recognition and authentication processing device according to claim 7, characterized in that: The face recognition and authentication processing device is also used for: If it is determined that the first legitimacy verification fails, it is directly determined that the face recognition authentication fails, and a face recognition authentication failure message is sent to the terminal.

9. The face recognition and authentication processing device according to claim 7, characterized in that: The face recognition and authentication processing device is also used for: If it is determined that the second legitimacy verification fails, the face recognition authentication is directly determined to have failed, and a face recognition authentication failure message is sent to the terminal.

10. The face recognition and authentication processing device according to claim 7, characterized in that: The face recognition and authentication processing device is also used for: If it is determined that the distance value between the current terminal location information and the reserved terminal location information is greater than or equal to a preset distance threshold, it is directly determined that the face recognition authentication has failed, and a face recognition authentication failure message is sent to the terminal.

11. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to claim 1 or any one of the methods according to claims 2 to 5 is implemented.

12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to claim 1 or any one of the methods according to claims 2 to 5 is implemented.

13. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the method according to claim 1 or any one of the methods according to claims 2 to 5 is implemented.