A method for authorization and related device

Abstract

The embodiment of the present application provides an authorization method and related devices for supporting users to safely store their biometric information and enhance users' sense of security. It includes: a first terminal receives and stores a biometric information set sent by a biometric collection device, and the biometric information set includes biometric information obtained by encrypting different biometrics collected by the biometric collection device; when the first terminal authorizes the second terminal to use the biometric information, the first terminal sends target biometric information to the second terminal so that the second terminal stores the target biometric information, the target biometric information is included in the biometric information set, and the target biometric information is encrypted; the first terminal receives the indication information of successful authorization returned by the second terminal. This application can be applied to the fields of computer vision and image processing.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to an authorization method and related devices. Background Art

[0002] With the development of technology, more and more applications have realized the function of using biometric information as user authentication passwords or transaction passwords. For example, fingerprint information, which is commonly used at present, can usually be used as a payment password, login password or authentication password.

[0003] The biometric information can also be expanded to include palm print feature information and facial feature information. The current common practice in the industry is that users use dedicated palm-print or face-scanning payment devices offline to activate palm-print or face recognition applications. After the user activates the palm-print or face recognition application, the cloud will store the user's relevant palm print feature information and facial feature information. When the user needs to use palm-print or face-scanning related applications in other scenarios in the future, he only needs to authorize on the mobile phone.

[0004] However, some users are sensitive to private data such as palm print feature information and facial feature information, and do not want to store palm print feature information and facial feature information in the cloud. Therefore, it is necessary to provide an authorization method that supports user secure storage and can flexibly adjust authorization for various scenarios. Summary of the invention

[0005] The embodiments of the present application provide an authorization method and related devices for supporting users to securely store their biometric information and enhance their sense of security.

[0006] In view of this, on one hand, the present application provides an authorization method, including: a first terminal receives and stores a biometric information set sent by a biometric information collection device, and the biometric information set includes biometric information obtained by the biometric collection device by encrypting different biometrics collected; when the first terminal authorizes a second terminal to use the biometric information, the first terminal sends target biometric information to the second terminal, so that the second terminal stores the target biometric information, the target biometric information is included in the biometric information set, and the target biometric information is encrypted; the first terminal receives an indication of successful authorization returned by the second terminal.

[0007] On the other hand, the present application provides a first terminal, comprising: a receiving module, configured to receive a biometric information set sent by a biometric information collection device, wherein the biometric information set includes biometric information obtained by encrypting different biometrics collected by the biometric information collection device;

[0008] A storage module, used to store the biometric information set;

[0009] a sending module, configured to send target biometric information to the second terminal when the first terminal authorizes the second terminal to use the biometric information, so that the second terminal stores the target biometric information, the target biometric information is included in the biometric information set, and the target biometric information is encrypted;

[0010] The receiving module is further used to receive indication information of successful authorization returned by the second terminal.

[0011] In one possible design, in another implementation of another aspect of the embodiment of the present application, the sending module is specifically configured to send the target biometric information to the second terminal via radio frequency identification technology RFID.

[0012] In one possible design, in another implementation of another aspect of the embodiment of the present application, the first terminal also includes a query module for querying the device information of the second terminal; the sending module is specifically used to send the target biometric information and the device information to a cloud server, so that the cloud server sends the target biometric information to the second terminal according to the device information, wherein the cloud server does not store the target biometric information.

[0013] In one possible design, in another implementation of another aspect of the embodiment of the present application, the first terminal also includes a processing module, which is used to establish a single-point connection with the biometric collection device within a preset time period, and the single-point connection is used to indicate that the biometric collection device is only connected to the first terminal within the preset time period; receive the biometric information set sent by the biometric collection device; the storage module is specifically used to store the biometric information set in a database implemented based on the lightweight database SQLite.

[0014] In one possible design, in another implementation of another aspect of the embodiment of the present application, the processing module is specifically configured to establish a single-point Bluetooth connection with the biometric feature collection device within the preset time period; or

[0015] The processing module is specifically used to establish a single point connection with the biometric feature collection device via a universal serial interface USB within the preset time period; or,

[0016] The processing module is specifically used to establish a single point connection with the biometric feature collection device via a wireless local area network within the preset time period.

[0017] In one possible design, in another implementation of another aspect of the embodiment of the present application, the first terminal further includes a display module for displaying object information of each biometric feature in the biometric feature information set in response to an authorization instruction;

[0018] The first terminal further includes a processing module, which is used to determine the target biometric characteristic information from the biometric characteristic information in response to a selection operation on the object information.

[0019] In one possible design, in another implementation of another aspect of the embodiment of the present application, the biometric information is obtained by the biometric collection device encrypting the collected user biometrics based on a symmetric key signed by the Advanced Encryption Standard AES.

[0020] In one possible design, in another implementation of another aspect of the embodiment of the present application, the sending module is also used to send the user account information required by the second terminal to the second terminal, and the user account information is encrypted.

[0021] In one possible design, in another implementation of another aspect of the embodiment of the present application, the user account information is the account information of an application installed on the first terminal, and the application may be a payment program, a social program, or a transaction program.

[0022] In one possible design, in another implementation of another aspect of the embodiment of the present application, the target biometric information is stored in a database implemented by the second terminal based on a lightweight database SQLite.

[0023] In one possible design, in another implementation of another aspect of an embodiment of the present application, the biometric information includes user facial feature information, user iris feature information, user right palm print feature information, user right palm vein feature information, user left palm print feature information, and user left palm vein feature information.

[0024] In one possible design, in another implementation of another aspect of the embodiment of the present application, the first terminal also includes a processing module for closing the authorization to the second terminal so that the second terminal deletes the target biometric information.

[0025] Another aspect of the present application provides a computer device, including: a memory, a processor, and a bus system;

[0026] Wherein, the memory is used to store programs;

[0027] The processor is used to execute the program in the memory, and the processor is used to execute the above-mentioned methods according to the instructions in the program code;

[0028] The bus system is used to connect the memory and the processor so that the memory and the processor can communicate with each other.

[0029] Another aspect of the present application provides a computer-readable storage medium, in which instructions are stored. When the computer-readable storage medium is run on a computer, the computer is enabled to execute the above-mentioned methods.

[0030] Another aspect of the present application provides a computer program product or a computer program, the computer program product or the computer program includes computer instructions, the computer instructions are stored in a computer-readable storage medium. The processor of the computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the methods provided by the above aspects.

[0031] It can be seen from the above technical solution that the embodiment of the present application has the following advantages: after obtaining the encrypted biometric information of the user, the first terminal stores and manages the encrypted biometric information. Then, when the first terminal needs to authorize the second terminal to use the biometric information of the user, the first terminal sends the biometric information to the second terminal, and the second terminal itself saves the biometric information, and the cloud server no longer manages the biometric information in a unified manner. This allows users to customize and manage biometric information, thereby enhancing their sense of security. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 This is an exemplary implementation environment diagram of the authorization method in the embodiment of the present application;

[0033] Figure 2 This is a flowchart of the authorization method in the embodiment of the present application;

[0034] Figure 3 A schematic diagram of collecting facial feature information in an embodiment of the present application;

[0035] Figure 4 A schematic diagram of collecting palm feature information in an embodiment of the present application;

[0036] Figure 5 A schematic diagram of collecting iris feature information in an embodiment of the present application;

[0037] Figure 6 A schematic diagram of an embodiment of the authorization method in the embodiments of the present application;

[0038] Figure 7This is a schematic diagram of an exemplary interface of the biometric management interface on the first terminal in an embodiment of the present application;

[0039] Figure 8 This is another exemplary interface diagram of the biometric management interface on the first terminal in the embodiment of the present application;

[0040] Fig. 9 This is an exemplary interface diagram of a second terminal management interface on the first terminal in an embodiment of the present application;

[0041] Fig.10 This is another exemplary interface diagram of the second terminal management interface on the first terminal in the embodiment of the present application;

[0042] Fig.11 This is another exemplary interface diagram of the second terminal management interface on the first terminal in the embodiment of the present application;

[0043] Fig.12 A schematic diagram of a process of biometric identification in an embodiment of the present application;

[0044] Fig.13 This is a schematic diagram of an embodiment of the authorization device in the embodiment of the present application;

[0045] Fig.14 This is another schematic diagram of an authorization device in an embodiment of the present application;

[0046] Fig.15 This is another schematic diagram of an authorization device in an embodiment of the present application;

[0047] Fig.16 This is another schematic diagram of an authorization device in an embodiment of the present application;

[0048] Fig.17 This is another schematic diagram of an authorization device in an embodiment of the present application;

[0049] Fig.18 This is a schematic diagram of another embodiment of the authorization device in the embodiment of the present application. DETAILED DESCRIPTION

[0050] The embodiments of the present application provide an authorization method and related devices for supporting users to securely store their biometric information and enhance their sense of security.

[0051] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein, for example. In addition, the terms "including" and "corresponding to" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0052] To facilitate understanding, some terms in the embodiments of the present application are explained below.

[0053] Radio Frequency Identification (RFID): It is a type of automatic identification technology that uses radio frequency to perform non-contact two-way data communication and uses radio frequency to read and write recording media (electronic tags or radio frequency cards) to achieve the purpose of identifying targets and exchanging data. It is considered to be one of the information technologies with the greatest development potential in the 21st century. Radio frequency identification technology uses radio waves to quickly exchange information and store information without contact, combines wireless communication with data access technology, and then connects to the database system to achieve non-contact two-way communication, thereby achieving the purpose of identification and data exchange, connecting an extremely complex system in series. In the identification system, the reading, writing and communication of electronic tags are achieved through electromagnetic waves. According to the communication distance, it can be divided into near field and far field. For this reason, the data exchange method between the read / write device and the electronic tag is also correspondingly divided into load modulation and backscatter modulation.

[0054] Biometrics: Human features used to identify users. Currently, biometrics used for biometrics include hand shape, fingerprints, face shape, iris, retina, pulse, auricle, etc.

[0055] Palm vein recognition: Use near-infrared light to illuminate the palm, and the sensor senses the light reflected from the palm. The key is that the hemoglobin in the red blood cells flowing into the palm vein absorbs near-infrared light with a wavelength of around 760 nanometers, resulting in less reflection in the palm vein part, which will produce a palm vein pattern in the image. In other words, palm vein recognition uses the strength of the reflected near-infrared light to identify the location of the vein, and then compares the read palm vein pattern with the pre-stored palm vein pattern to achieve user recognition.

[0056] Face recognition: A biometric technology that identifies people based on their facial features. A series of related technologies that use a camera or camcorder to collect images or video streams containing faces, automatically detect and follow faces in images, and then perform face recognition on the detected faces. It is also commonly called portrait recognition or facial recognition.

[0057] Product serial number (SN): is an identity document (ID) that can uniquely identify a device.

[0058] SQLite: is a lightweight database and a relational database management system that complies with ACID. Among them, ACID refers to the four characteristics that the database management system (DBMS) must have in order to ensure that the transaction is correct and reliable during the process of writing or updating data: atomicity (atomicity, or indivisibility), consistency (consistency), isolation (isolation, also known as independence), and durability. At the same time, in its overall construction, SQLite is connected to the program and becomes an integral part of the program. Therefore, its main communication protocol is a direct application programming interface (Application Programming Interface, API) call within the programming language. This has a positive effect on total consumption, latency, and overall simplicity. The entire database (definitions, tables, indexes, and the data itself) is stored in a single file on the host host. Its simple design is accomplished by locking the entire data file when starting a transaction.

[0059] With the development of technology, more and more applications have realized the function of using biometric information as user authentication passwords or transaction passwords. For example, the commonly used fingerprint information can usually be used as a payment password, login password or authentication password. These biometric information can also be expanded to palm print feature information and facial feature information. The current common practice in the industry is: users use dedicated palm or face payment devices offline to activate palm print or face recognition applications; after users activate palm print or face recognition applications, the cloud will store the user's related palm print feature information and facial feature information; when users need to use palm or face related applications in other scenarios in the future, they only need to authorize on the mobile phone. However, some users are sensitive to privacy data such as palm print feature information and facial feature information, and do not want to store palm print feature information and facial feature information in the cloud. Therefore, it is necessary to provide an authorization method that supports user security storage and can flexibly adjust authorization for various scenarios.

[0060] In order to solve this technical problem, an embodiment of the present application provides an authorization method, including: a first terminal receives and stores a biometric information set sent by a biometric information collection device, and the biometric information set includes biometric information obtained by the biometric collection device by encrypting different biometrics collected; when the first terminal authorizes the second terminal to use the biometric information, the first terminal sends target biometric information to the second terminal so that the second terminal stores the target biometric information, the target biometric information is included in the biometric information set, and the target biometric information is encrypted; the first terminal receives indication information of successful authorization returned by the second terminal.

[0061] Specifically, the method of the present application can be applied to Figure 1The implementation environment shown in the figure includes a first terminal, a second terminal and a biometric feature collection device. The first terminal and the second terminal are deployed with a client for storing biometric feature information, wherein the client can be run on the first terminal and the second terminal in the form of a browser, or can be run on the first terminal and the second terminal in the form of an independent application (application, APP), etc. The specific presentation form of the client is not limited here. The first terminal and the second terminal can be a smart phone, a tablet computer, a laptop, a PDA, a personal computer, a smart TV, a smart watch, a vehicle-mounted device, a wearable device, etc., but are not limited thereto. The biometric feature collection device can be a camera or an image collection device, such as a three-dimensional camera, as long as it can realize the collection of facial features, fingerprint features, iris features, palm print features or palm vein features, and is not specifically limited here. In this embodiment, the first terminal and the biometric feature collection device can be directly or indirectly connected by wired or wireless communication, and the first terminal and the second terminal can be directly or indirectly connected by wired or wireless communication, and this application does not limit it here. There is no restriction on the number of the first terminal, the second terminal and the biometric feature collection device.

[0062] The implementation architecture and process of the method provided in this application can be found in Figure 2 As shown, the user's biometrics may include facial features, left and right palms; then the user's biometrics are collected by a biometrics collection device to obtain facial feature information, left palm print feature information, right palm print feature information, left palm vein feature information, and right palm vein feature information. Then the biometrics collection device transmits the biometrics to the first terminal; it can be understood that the Figure 2In the process shown, the first terminal and the biometric acquisition device can transmit the biometric information through the Bluetooth module. After obtaining the biometric information of the user, the first terminal can manage the biometric information based on a small program or a dedicated program. Among them, the first terminal can manage the biometric information based on the background service, and the specific management includes authorization query and closing authorization for the biometric information. During the use of the biometric information, the first terminal passes the biometric to the second terminal through the authorization query of the background service called by the small program; the second terminal will save the biometric information sent by the first terminal. When the user interacts through the second terminal, the second terminal obtains the biometric information of the user and compares it with the biometric information saved by the second terminal, so as to realize user identification. It can be understood that the second terminal can obtain the biometric information of the user during use through the camera of the second terminal, or other terminals can collect the biometric information of the user and then pass it to the second terminal. The specific method is not limited here. When the user determines that the second terminal will no longer be used, the user can close the authorization of the second terminal through the first terminal. At this time, the biometric information stored on the second terminal will be deleted.

[0063] In this embodiment, when the user is ready to activate the application of facial features and palm features, the palm features and facial features can be registered in the offline device dedicated to collecting facial features and the device for collecting palm features. At this time, the device for collecting facial features and the device for collecting palm features can also be called the above-mentioned biometric feature collection device. It can be understood that the device for collecting facial features and the device for collecting palm features can be the same device or separate and independent devices.

[0064] The biometric feature collection device may collect different biometric feature information in the following process:

[0065] 1. Collecting facial feature information

[0066] The biometric acquisition device runs an application for biometric acquisition. After the application is started, the camera of the biometric acquisition device will be called to collect the current face streaming data of the user. After the biometric acquisition device obtains the streaming media, the biometric acquisition device screens the streaming media. Face screening is mainly screened by the color system (RGB). The screening rule is to select the best face picture through comprehensive evaluation of coefficient indicators such as face size, face angle, image contrast, image brightness and clarity, and then extract features from the picture. The methods of face feature extraction can be summarized into two categories: one is a knowledge-based representation method; the other is a representation method based on algebraic features or statistics. The knowledge-based representation method mainly obtains feature data that is helpful for face classification based on the shape description of facial organs and the distance characteristics between them. Its feature components usually include the Euclidean distance, curvature and angle between feature points. The face is composed of parts such as eyes, nose, mouth, chin, etc. The geometric description of these parts and the structural relationship between them can be used as an important feature for identifying the face. These features are called geometric features. Knowledge-based face representation mainly includes methods based on geometric features and template matching methods. In an exemplary application scenario, Figure 3 As shown, the user clicks on the icon control of the corresponding application on the biometric collection device, then calls the camera of the biometric collection device and displays a collection frame on the display; then the user adjusts the position of the face relative to the camera so that the image of the face formed by the camera can be placed in the collection frame, and after a preset time, the biometric collection device generates a facial image of the user.

[0067] 2. Collect palm feature information

[0068] The biometric collection device runs an application for biometric collection. After starting the application, the camera of the biometric collection device will be called to collect the streaming media data of the user's current left and right palms. After obtaining the streaming media, the terminal optimizes the streaming media. Palm screening is mainly prioritized through palm veins. The best palm image is selected through a comprehensive evaluation of palm size, angle, image contrast, image brightness and clarity, and then features are extracted from the image. Advanced filtering, image binarization, and refinement methods are mainly used to extract features from digital images. In an exemplary application scenario, Figure 4 As shown, the user clicks on the icon control of the corresponding application on the biometric collection device, then calls the camera of the biometric collection device, and displays a collection frame on the display; then the user adjusts the position of the palm relative to the camera so that the image of the palm formed by the camera can be placed in the collection frame. After a preset time, the biometric collection device generates an image of the user's palm.

[0069] 3. Collect iris feature information

[0070] The biometric collection device runs an application for biometric collection. After the application is started, the camera of the biometric collection device will be called to collect the user's current iris streaming media data. It can be understood that the iris feature information includes visual features such as spots, stripes, and filaments in the black eye of the user's eyes. After the biometric collection device obtains the streaming media, the biometric collection device optimizes the streaming media. Iris screening mainly selects the best iris picture through a comprehensive evaluation of coefficient indicators such as angle, image contrast, image brightness and clarity, and then extracts features from the picture, mainly using advanced filtering, image binarization, and refinement methods to extract features from digital images. Figure 5 As shown, the user clicks on the icon control of the corresponding application on the biometric collection device, then calls the camera of the biometric collection device and displays a collection frame on the display; then the user adjusts the position of the eye relative to the camera so that the image of the eye formed by the camera can be placed in the collection frame, and after a preset time, the biometric collection device generates an iris image of the user.

[0071] It is understandable that in the specific implementation of the present application, related data such as biometric information and user account information are involved. When the above embodiments of the present application are applied to specific products or technologies, user permission or consent is required, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0072] Combined with the above introduction, the authorization method in this application will be introduced below. Please refer to Figure 6 , an embodiment of the authorization method in the embodiment of the present application includes:

[0073] 601. A first terminal receives and stores a biometric information set sent by a biometric information collection device, and the biometric information set includes biometric information obtained by encrypting different biometrics collected by the biometric information collection device.

[0074] When the user decides to activate the biometric authorization application, the user obtains his own biometrics through the biometric collection device. The specific implementation process can refer to the above-mentioned biometric collection process description, which will not be repeated here. After the biometric collection device obtains the user's biometrics, it encrypts the obtained biometrics to obtain the biometric information, and at the same time classifies multiple biometric information into a set to obtain the biometric information set. It can be understood that the biometric information set can also include biometric information after uniform encryption of different biometrics. In an exemplary solution, the biometric collection device collects the user's facial features, left palm vein features, and right palm vein features. The biometric collection device encrypts the facial features to obtain feature information 1, encrypts the left palm vein features to obtain feature information 2, and encrypts the right palm vein features to obtain feature information 3. At this time, the biometric information set obtained by the biometric collection device will include "feature information 1, feature information 2, and feature information 3". At the same time, the biometric feature collection device can also uniformly encrypt the facial features, left palm vein features, and right palm vein features to obtain feature information 4. At this time, the biometric feature information set obtained by the biometric feature collection device will include "feature information 1, feature information 2, feature information 3, and feature information 4". In this embodiment, when the biometric feature collection device encrypts each biometric feature, the encryption method can be a symmetric key based on the Advanced Encryption Standard AES signature, a one-way hash algorithm, or an asymmetric algorithm, etc., which is not limited here.

[0075] The biometric feature collection device obtains the first terminal corresponding to the user and establishes a single point connection, then encrypts the biometric feature information set and sends it to the first terminal, so that the first terminal stores the biometric feature information set.

[0076] In this embodiment, the single point connection between the biometric collection device and the first terminal is established to ensure that within a certain period of time, only the biometric collection device and the first terminal are connected, thereby preventing other terminals from making errors when transmitting the biometric information set to the biometric collection device, ensuring that the biometric information set can be safely transmitted to the first terminal, thereby enhancing the user's sense of security. Specifically, the single point connection between the biometric collection device and the first terminal can adopt the following solutions:

[0077] In a possible implementation, the first terminal establishes a single-point Bluetooth connection with the biometric feature collection device within the preset time period.

[0078] In another possible implementation, the first terminal establishes a single-point connection with the biometric feature collection device via a universal serial port USB within the preset time period.

[0079] In another possible implementation, the first terminal establishes a single-point connection with the biometric feature collection device via a wireless local area network within the preset time period.

[0080] In this embodiment, the first terminal can store the biometric information set in the form of a database, and map each biometric information to its object information one by one during storage. In order to facilitate the first terminal to use the application to manage each biometric information in the biometric information set, in this embodiment, the first terminal stores the biometric information set in a database implemented based on the lightweight database SQLite. In order to manage more intuitively, the first terminal displays the biometric information through the application. In an exemplary solution, Figure 7 The biometric management interface shown displays the object information of each biometric information pair of the user in the form of icons.

[0081] It is understandable that, when storing the biometric information set, the first terminal may decrypt the biometric information set before storing it, or may directly store the biometric information set, and the specific method is not limited here.

[0082] 602. When the first terminal authorizes the second terminal to use the biometric information set, the first terminal sends target biometric information to the second terminal so that the second terminal stores the target biometric information, the target biometric information is included in the biometric information set, and the target biometric information is encrypted.

[0083] In this embodiment, when the user determines that user identification needs to be achieved through a second terminal, the user authorizes the second terminal to use the user's biometric information through the first terminal. At this time, the first terminal will send the target biometric information to the second terminal, wherein the target biometric information is part or all of the biometric information set, and then the second terminal stores the target biometric information. It can be understood that in this embodiment, the second terminal can be an identification device in the access control system, or an identification device for face payment in a supermarket or convenience store, or an identification device in a security protection system. The second terminal can also be a database based on SQLITE to store the target biometric information, so that the second terminal can easily process the target biometric information.

[0084] It should be understood that before the first terminal sends the target biometric information to the second terminal, the first terminal can use the application for managing and authorizing biometric information to determine the target biometric information from the biometric information set. That is, the first terminal displays the object information of each biometric in the biometric information set in response to the authorization instruction; the first terminal determines the target biometric information from the biometric information in response to the selection operation of the object information. In an exemplary solution, the first terminal displays the following in response to the authorization instruction: Figure 7 The biometric management interface shown in the figure is as follows: Figure 8 As shown, the first terminal responds to the corresponding object information (such as Figure 7 The target biometric information authorized to the second terminal is determined by clicking the icon in the figure. Figure 8 As shown, the user selects "facial features" as the target biometric information. It is understandable that the user can select the target biometric information according to the recognition function of the second terminal. For example, in an access control system, the recognition device of the access control system can only recognize faces, then the biometric information authorized by the user to the second terminal should at least include facial features. If in another access control system, the recognition device of the access control system can perform facial recognition and palm vein recognition at the same time, then the biometric information authorized by the user to the second terminal should at least include facial features or palm vein features. That is, the specific authorization situation can determine the target biometric information according to the usage function of the second terminal and the user's selection.

[0085] In this embodiment, according to different application environments, the first terminal may send the target biometric information to the second terminal in an offline point-to-point authorization or an online one-to-one authorization, which is described in detail below:

[0086] During offline point-to-point authorization, the first terminal and the second terminal can send the target biometric information to the second terminal via RFID, so that quick authorization can be performed when there is a large flow of people at the offline second terminal.

[0087] During online one-to-one authorization, the first terminal queries the device information of the second terminal to be authorized, and then the first terminal sends the target biometric information and the device information of the second terminal to the cloud server, and then the cloud server sends the target biometric information to the second terminal according to the device information of the second terminal. In order to enhance the user's sense of security, the cloud server does not store the target biometric information.

[0088] In this embodiment, when the first terminal sends the target biometric information to the second terminal, it is also necessary to encrypt the target biometric information. It is understandable that the encryption method of the target biometric information can be the same as the encryption method of each biometric in the biometric information set, which will not be repeated here.

[0089] In actual applications, when the first terminal and the second terminal are in a transaction or social scenario, the first terminal can also send the account information of its corresponding application to the second terminal, so that the corresponding application on the first terminal can be called through the second terminal. Among them, the application can be a transaction program or a social program, and the transaction program can be a payment program. In an exemplary scheme, if the second terminal is an identification device of a cash register system, it supports code scanning payment of payment program 1, face brushing payment of payment program 1, code scanning payment of payment program 2, and face brushing payment of payment program 2. In the process of use, if the first terminal authorizes the second terminal to use the face brushing payment of payment program 1, the first terminal needs to send the relevant user account information registered by the user in the payment program 1 to the second terminal, such as the user's account, the source of money used by the user for payment, etc. When the user corresponding to the first terminal makes a payment, after the facial feature recognition, the facial recognition result will also be used to confirm the identity of the user, thereby completing the payment process.

[0090] 603. The first terminal receives authorization success indication information returned by the second terminal.

[0091] After the second terminal successfully stores the target biometric information, it feeds back indication information to the first terminal. At this time, the first terminal can save the device information of the second terminal according to the indication information.

[0092] In an exemplary solution, the device information of the second terminal can be displayed on an application deployed on the first terminal for managing and authorizing the biometric information set. Fig. 9 As shown, the first terminal can display the device information of each second terminal that has been successfully authorized (such as Fig. 9 As shown, the device information may also be identified by a device name).

[0093] After the user determines to close the authorization of the second terminal, the user can close the authorization of the second terminal through the application on the first terminal. At this time, the second terminal will delete the target biometric information sent by the first terminal, thereby improving the user's sense of security. Fig. 9 The interface diagram shown is as follows: Fig.10 As shown in , the user can close the authorization of the second terminal by deleting the device information of the second terminal. Fig.11 As shown, the user closes the authorization of the second terminal by modifying the authorization status of the second terminal.

[0094] Optionally, in the embodiment of the present application, in order to improve the security of the biometric information, the following technical solutions may also be provided:

[0095] After acquiring different biometric features of the user, the biometric feature acquisition device performs encryption processing to obtain multiple biometric feature information. Then the biometric feature acquisition device divides the biometric feature information into two parts, one of which is sent to the first terminal through a single point connection with the first terminal, and the other is directly uploaded to the server; when the user decides to authorize the second terminal, the first terminal sends a part of the biometric feature information to the second terminal, and the cloud server also sends a part of the biometric feature information to the second terminal; after the second terminal combines the information sent by the first terminal and the information sent by the server to obtain the complete biometric feature information, it feeds back the indication information of successful authorization to the first terminal and the cloud server. In an exemplary solution, after acquiring the facial features of the user, the biometric feature acquisition device encrypts the facial features to obtain biometric information 1; then the biometric information 1 is divided into biometric information 1A and biometric information 1B, wherein the biometric information 1A is sent to the user's mobile phone for storage, and the biometric information 1B is sent to the server for storage; when the user authorizes the access control system with the biometric information through the mobile phone, the mobile phone sends the biometric information 1A to the access control system, and sends an authorization instruction to the server, so that the server sends the biometric information 1B to the access control system; finally, the access control system combines the biometric information 1A and the biometric information 1B to obtain the biometric information 1, thereby determining that the authorization is successful, and sending an indication message indicating the authorization success to the user's mobile phone and the server. It can be understood that in this embodiment, the server sends the biometric information to the second terminal after receiving the authorization instruction from the first terminal, or after the second terminal sends a request to the cloud server after acquiring part of the biometric information, and the specific implementation method is not limited here. In this embodiment, the server can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content delivery networks (CDN), and big data and artificial intelligence platforms. The first terminal and the server and the second terminal and the server can be directly or indirectly connected via wired or wireless communication, which is not limited in this application. The number of servers is also not limited.

[0096] In this embodiment, after obtaining the encrypted biometric information of the user, the first terminal stores and manages the encrypted biometric information. Then, when the first terminal needs to authorize the second terminal to use the biometric information of the user, the first terminal sends the biometric information to the second terminal, and the second terminal itself saves the biometric information, and the cloud server no longer manages the biometric information in a unified manner. This allows users to customize the management of biometric information, thereby enhancing the user's sense of security. At the same time, the data transmission between the first terminal and the biometric collection device is encrypted, and the data transmission between the first terminal and the second terminal is also encrypted, which can prevent the leakage of biometric information, thereby enhancing the user's sense of security. The first terminal uses an application to manage the biometric information, so that it can be intuitive and convenient for users to operate.

[0097] The above describes the authorization operation between the first terminal and the second terminal. The following describes the second terminal using the target biometric information to identify the user. For details, please refer to Fig.12 As shown, a schematic diagram of a process of user identification in an embodiment of the present application includes:

[0098] 1201. The second terminal obtains first biometric information of a user.

[0099] The second terminal can use its own biometric collection device to adopt the first biometric information of the user. It can be understood that based on the recognition function of the second terminal, the biometric collection device can be a camera, or an optical palm print collector, etc. In this embodiment, the first biometric information obtained by the second terminal can be the collection process of the above-mentioned biometric collection device, and the details are not repeated here.

[0100] In this embodiment, the first biometric information will be processed in the same manner as the target biometric information. For example, if the target biometric information stored in the second terminal is encrypted feature information, the first biometric information will be the encrypted feature information after the second terminal collects the first biometric. If the target biometric information is only a special string obtained after feature extraction, the first biometric information will be the special string after the second terminal extracts the features of the collected biometric image.

[0101] 1202. The second terminal compares the first biometric characteristic information with the stored target biometric characteristic information to obtain a comparison result.

[0102] After the second terminal obtains the first biometric information, it compares the first biometric information with the biometrics in the database of the second terminal one by one to find the biometric information (i.e., the target biometric information) that is similar to the first biometric information. The similarity value between the target biometric information and the first biometric information is compared with a preset threshold. If it is greater than the preset threshold, the user identity corresponding to the first biometric information is returned, that is, it is confirmed that the first user has passed the identification. If the similarity value is less than the preset threshold, it is confirmed that the first user does not exist, that is, it cannot pass the identification.

[0103] After the user passes the identification, the second terminal can call the corresponding program to complete the corresponding operation, for example, calling the payment program to complete the payment, or calling the access control system to open the door.

[0104] The above describes the authorization method and the method of using the biometric information after authorization. The following is a detailed description of the authorization device in this application. Fig.13 , Fig.13 This is a schematic diagram of an embodiment of the authorization device in the embodiment of the present application. The authorization device 20 includes:

[0105] The receiving module 201 is used to receive a set of biometric information sent by a biometric collection device, and the set of biometric information includes biometric information obtained by encrypting different biometrics collected by the biometric collection device;

[0106] Storage module 202, used to store the biometric information set;

[0107] A sending module 203, configured to send target biometric information to the second terminal when the first terminal authorizes the second terminal to use the biometric information, so that the second terminal stores the target biometric information, the target biometric information is included in the biometric information set, and the target biometric information is encrypted;

[0108] The receiving module 201 is further configured to receive authorization success indication information returned by the second terminal.

[0109] In an embodiment of the present application, an authorization device is provided. With the above device, after obtaining the encrypted biometric information of the user, the first terminal stores and manages the encrypted biometric information. Then, when the first terminal needs to authorize the second terminal to use the biometric information of the user, the first terminal sends the biometric information to the second terminal, and the second terminal itself saves the biometric information, and the cloud server no longer manages the biometric information in a unified manner. In this way, users can customize and manage biometric information, thereby enhancing their sense of security.

[0110] Optionally, in the above Fig.13 On the basis of the corresponding embodiment, in another embodiment of the authorization device 20 provided in the embodiment of the present application,

[0111] The sending module 203 is specifically configured to send the target biometric information to the second terminal via radio frequency identification technology RFID.

[0112] In an embodiment of the present application, an authorization device is provided. Using the above device, the first terminal and the second terminal perform offline point-to-point authorization, and the first terminal and the second terminal send data by RFID, so that when multiple people or multiple devices perform authorization, the speed of establishing the authorization connection can be improved, which is convenient for users.

[0113] Optionally, in the above Fig.13 Based on the corresponding embodiment, in another embodiment of the authorization device 20 provided in the embodiment of the present application, as Fig.14 As shown, the authorization device 20 also includes a query module 204 for querying the device information of the second terminal; the sending module 203 is specifically used to send the target biometric information and the device information to the cloud server, so that the cloud server sends the target biometric information to the second terminal according to the device information, wherein the cloud server does not store the target biometric information.

[0114] In an embodiment of the present application, an authorization device is provided. Using the above device, the first terminal and the second terminal perform online one-to-one authorization. After obtaining the device information of the second terminal that needs to be authorized, the first terminal sends the biometric information and the device information of the second terminal to the cloud server, so that the cloud server can forward the biometric information for authorization. In this way, the user's second terminal can perform remote and rapid authorization management. At the same time, the cloud service does not store the biometric information, which improves the user's sense of security.

[0115] Optionally, in the above Fig.13 Based on the corresponding embodiment, in another embodiment of the authorization device 20 provided in the embodiment of the present application, as Fig.15 As shown, the authorization device further includes a processing module 205, which is used to establish a single point connection with the biometric feature collection device within the preset time period, and the single point connection is used to indicate that the biometric feature collection device is only connected to the first terminal within the preset time period;

[0116] The receiving module 201 is specifically configured to receive the biometric information set sent by the biometric collection device;

[0117] The storage module 202 is specifically used to store the biometric information set in a database implemented based on the lightweight database SQLite.

[0118] In the embodiment of the present application, an authorization device is provided. By using the above device, a single point connection is established between the first terminal and the biometric collection device, which can effectively ensure the security of data transmission between the biometric collection device and the first terminal. At the same time, the first terminal stores the biometric information in a database based on SQLite, which can effectively improve the management efficiency of the biometric information, reduce the integration requirements with the application, and improve the convenience of authorization.

[0119] Optionally, in the above Fig.13 On the basis of the corresponding embodiment, in another embodiment of the authorization device 20 provided in the embodiment of the present application,

[0120] The processing module 205 is specifically configured to establish a single-point Bluetooth connection with the biometric feature collection device within the preset time period; or

[0121] The processing module 205 is specifically used to establish a single point connection with the biometric feature collection device via a serial universal interface USB within the preset time period; or,

[0122] The processing module 205 is specifically configured to establish a single point connection with the biometric feature collection device via a wireless local area network within the preset time period.

[0123] In the embodiment of the present application, an authorization device is provided. Using the above device, the way to establish a single point connection between the first terminal and the biometric collection device includes but is not limited to Bluetooth, USB (i.e. wired), and wireless local area network (i.e. wifi). In this way, multiple ways are provided to achieve the connection between the first terminal and the biometric collection device, thereby achieving the feasibility of the solution.

[0124] Optionally, in the above Fig.13 Based on the corresponding embodiment, in another embodiment of the authorization device 20 provided in the embodiment of the present application, as Fig.16 As shown, the authorization device further includes a display module 206 for displaying object information of each biometric feature in the biometric feature information set in response to the authorization instruction;

[0125] The authorization device further includes a processing module 205 for determining the target biometric characteristic information from the biometric characteristic information in response to a selection operation on the object information.

[0126] In an embodiment of the present application, an authorization device is provided. With the above device, the first terminal can authorize the second terminal by selecting part of the biometric information in the entire biometric information, thereby realizing the user's customized management of the biometric information and improving the user's sense of security.

[0127] Optionally, in the above Fig.13 On the basis of the corresponding embodiment, in another embodiment of the authorization device 20 provided in the embodiment of the present application, the biometric information is obtained by encrypting the user biometrics collected by the biometric collection device based on a symmetric key signed by the Advanced Encryption Standard AES.

[0128] In an embodiment of the present application, an authorization device is provided. By using the above device, the user's biometrics are encrypted based on a symmetric key signed by the Advanced Encryption Standard (AES), which can improve the security of data transmission between the first terminal and the biometrics collection device.

[0129] Optionally, in the above Fig.13 On the basis of the corresponding embodiment, in another embodiment of the authorization device 20 provided in the embodiment of the present application,

[0130] The sending module 203 is further used to send the user account information required by the second terminal to the second terminal, and the user account information is encrypted.

[0131] In the embodiment of the present application, an authorization device is provided. With the above device, the account information of the application program to be applied by the user can also be authorized, so that authorization management can be performed for various application scenarios, and flexible authorization for each application scenario can be achieved.

[0132] Optionally, in the above Fig.13 On the basis of the corresponding embodiment, in another embodiment of the authorization device 20 provided in the embodiment of the present application,

[0133] The user account information is account information of an application installed on the first terminal, and the application may be a transaction program or a social program.

[0134] In the embodiment of the present application, an authorization device is provided. With the above device, the account information of the application program to be applied by the user can also be authorized, so that authorization management can be performed for various application scenarios, and flexible authorization for each application scenario can be achieved.

[0135] Optionally, in the above Fig.13 On the basis of the corresponding embodiment, in another embodiment of the authorization device 20 provided in the embodiment of the present application, the target biometric information is stored in a database implemented by the second terminal based on the lightweight database SQLite.

[0136] In an embodiment of the present application, an authorization device is provided. By using the above device, the second terminal stores the biometric information based on a database implemented by SQLite, which can effectively improve the management efficiency of the biometric information, reduce the integration requirements with the application, and improve the convenience of authorization.

[0137] Optionally, in the above Fig.13 On the basis of the corresponding embodiment, in another embodiment of the authorization device 20 provided in the embodiment of the present application, the biometric information includes user facial feature information, user iris feature information, user's right palm print feature information, user's right palm vein feature information, user's left palm print feature information and user's left palm vein feature information.

[0138] In the embodiment of the present application, an authorization device is provided. By adopting the above device and providing a variety of biometric information, the management efficiency of the biometric information can be effectively improved, and the applicable scenarios of the authorization scheme can be increased.

[0139] Optionally, in the above Fig.13 On the basis of the corresponding embodiment, in another embodiment of the authorization device 20 provided in the embodiment of the present application, the authorization device includes a processing module 205 for closing the authorization of the second terminal so that the second terminal deletes the target biometric information.

[0140] In an embodiment of the present application, an authorization device is provided. With the above device, after the second terminal is authorized to delete, the second terminal will also delete the stored biometric information, so that the user can delete the biometric information in the remote authorization device through the first terminal, thereby improving the user's sense of security.

[0141] The authorization device provided by this application can be used for the server, see Fig.17 , Fig.17: is a schematic diagram of a server structure provided in an embodiment of the present application. The server 300 may have relatively large differences due to different configurations or performances, and may include one or more central processing units (CPU) 322 (for example, one or more processors) and memory 332, and one or more storage media 330 (for example, one or more mass storage devices) storing application programs 342 or data 344. Among them, the memory 332 and the storage medium 330 can be short-term storage or permanent storage. The program stored in the storage medium 330 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations on the server. Furthermore, the central processing unit 322 can be configured to communicate with the storage medium 330 to execute a series of instruction operations in the storage medium 330 on the server 300.

[0142] The server 300 may also include one or more power supplies 326, one or more wired or wireless network interfaces 350, one or more input and output interfaces 358, and / or one or more operating systems 341, such as Windows Server 2000. TM , Mac OS X TM , Unix TM ,Linux TM , FreeBSD TM etc.

[0143] The steps performed by the first terminal in the above embodiment can be based on the Fig.17 The server structure shown.

[0144] The authorization device provided in this application can be used for terminal equipment. Fig.15 For the sake of convenience, only the parts related to the embodiments of the present application are shown. For specific technical details not disclosed, please refer to the method part of the embodiments of the present application. In the embodiments of the present application, the terminal device is a smart phone as an example for explanation:

[0145] Fig.15 The block diagram shows a partial structure of a smart phone related to the terminal device provided in the embodiment of the present application. Fig.15 The smart phone includes: a radio frequency (RF) circuit 410, a memory 420, an input unit 430, a display unit 440, a sensor 450, an audio circuit 460, a wireless fidelity (WiFi) module 470, a processor 480, and a power supply 490. Those skilled in the art will appreciate that Fig.15The structure of the smartphone shown in the figure does not constitute a limitation of the smartphone, and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0146] Combine the following Fig.18 A detailed introduction to the various components of a smartphone:

[0147] The RF circuit 410 can be used for receiving and sending signals during the process of sending and receiving information or making calls. In particular, after receiving the downlink information of the base station, it is sent to the processor 480 for processing; in addition, the designed uplink data is sent to the base station. Generally, the RF circuit 410 includes but is not limited to an antenna, at least one amplifier, a transceiver, a coupler, a low noise amplifier (LNA), a duplexer, etc. In addition, the RF circuit 410 can also communicate with the network and other devices through wireless communication. The above-mentioned wireless communication can use any communication standard or protocol, including but not limited to the global system of mobile communication (GSM), general packet radio service (GPRS), code division multiple access (CDMA), wideband code division multiple access (WCDMA), long term evolution (LTE), email, short messaging service (SMS), etc.

[0148] The memory 420 can be used to store software programs and modules. The processor 480 executes various functional applications and data processing of the smartphone by running the software programs and modules stored in the memory 420. The memory 420 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the data storage area may store data created according to the use of the smartphone (such as audio data, a phone book, etc.), etc. In addition, the memory 420 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.

[0149] The input unit 430 can be used to receive input digital or character information, and to generate key signal input related to the user settings and function control of the smart phone. Specifically, the input unit 430 may include a touch panel 431 and other input devices 432. The touch panel 431, also known as a touch screen, can collect the user's touch operation on or near it (such as the user's operation on the touch panel 431 or near the touch panel 431 using any suitable object or accessory such as a finger, stylus, etc.), and drive the corresponding connection device according to a pre-set program. Optionally, the touch panel 431 may include two parts: a touch detection device and a touch controller. Among them, the touch detection device detects the user's touch orientation, detects the signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts it into contact coordinates, and then sends it to the processor 480, and can receive and execute commands sent by the processor 480. In addition, the touch panel 431 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic waves. In addition to the touch panel 431, the input unit 430 may also include other input devices 432. Specifically, other input devices 432 may include but are not limited to one or more of a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, a joystick, etc.

[0150] The display unit 440 can be used to display information input by the user or information provided to the user and various menus of the smartphone. The display unit 440 may include a display panel 441. Optionally, the display panel 441 may be configured in the form of a liquid crystal display (LCD), an organic light-emitting diode (OLED), or the like. Further, the touch panel 431 may cover the display panel 441. When the touch panel 431 detects a touch operation on or near it, it is transmitted to the processor 480 to determine the type of touch event. Subsequently, the processor 480 provides a corresponding visual output on the display panel 441 according to the type of touch event. Although in Fig.18 In the embodiment, the touch panel 431 and the display panel 441 are used as two independent components to implement the input and output functions of the smartphone, but in some embodiments, the touch panel 431 and the display panel 441 can be integrated to implement the input and output functions of the smartphone.

[0151] The smartphone may also include at least one sensor 450, such as a light sensor, a motion sensor, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel 441 according to the brightness of the ambient light, and the proximity sensor may turn off the display panel 441 and / or the backlight when the smartphone is moved to the ear. As a type of motion sensor, the accelerometer sensor can detect the magnitude of acceleration in all directions (generally three axes), and can detect the magnitude and direction of gravity when stationary. It can be used for applications that identify the posture of the smartphone (such as horizontal and vertical screen switching, related games, magnetometer posture calibration), vibration recognition related functions (such as pedometer, tapping), etc.; as for other sensors that can be configured in smartphones, such as gyroscopes, barometers, hygrometers, thermometers, infrared sensors, etc., they will not be repeated here.

[0152] The audio circuit 460, the speaker 461, and the microphone 462 can provide an audio interface between the user and the smartphone. The audio circuit 460 can transmit the received audio data to the speaker 461 after converting the received audio data into an electrical signal, which is converted into a sound signal for output; on the other hand, the microphone 462 converts the collected sound signal into an electrical signal, which is received by the audio circuit 460 and converted into audio data, and then the audio data is output to the processor 480 for processing, and then sent to another smartphone through the RF circuit 410, or the audio data is output to the memory 420 for further processing.

[0153] WiFi is a short-range wireless transmission technology. Smartphones can help users send and receive emails, browse web pages, and access streaming media through WiFi module 470, which provides users with wireless broadband Internet access. Fig.18 A WiFi module 470 is shown, but it is understandable that it is not an essential component of the smartphone and can be omitted as needed without changing the essence of the invention.

[0154] Processor 480 is the control center of the smartphone, which uses various interfaces and lines to connect various parts of the entire smartphone, and executes various functions of the smartphone and processes data by running or executing software programs and / or modules stored in memory 420, and calling data stored in memory 420, thereby monitoring the smartphone as a whole. Optionally, processor 480 may include one or more processing units; optionally, processor 480 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user interface, and application programs, and the modem processor mainly processes wireless communications. It is understandable that the above-mentioned modem processor may not be integrated into processor 480.

[0155] The smart phone also includes a power source 490 (such as a battery) for supplying power to various components. Optionally, the power source can be logically connected to the processor 480 through a power management system, thereby managing functions such as charging, discharging, and power consumption management through the power management system.

[0156] Although not shown, the smartphone may also include a camera, a Bluetooth module, etc., which will not be described in detail here.

[0157] The steps performed by the first terminal in the above embodiment can be based on the Fig.18 The terminal device structure shown.

[0158] A computer-readable storage medium is also provided in an embodiment of the present application. The computer-readable storage medium stores a computer program, which, when executed on a computer, enables the computer to execute the methods described in the aforementioned embodiments.

[0159] The present application also provides a computer program product including a program, which, when executed on a computer, enables the computer to execute the methods described in the aforementioned embodiments.

[0160] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0161] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0162] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0163] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0164] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program code.

[0165] As described above, the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. An authorization method, characterized in that: include: The first terminal receives and stores a set of biometric information sent by the biometric collection device, wherein the set of biometric information includes biometric information obtained by encrypting different biometrics collected by the biometric collection device; The first terminal displays object information of each biometric feature in the biometric feature information set in response to the authorization instruction; The first terminal determines, in response to a click operation on the object information, target biometric information authorized to the second terminal from the biometric information; When the first terminal authorizes the second terminal to use the biometric information set, the first terminal sends target biometric information to the second terminal so that the second terminal stores the target biometric information, the target biometric information is included in the biometric information set, and the target biometric information is encrypted; The first terminal receives indication information of successful authorization returned by the second terminal, wherein after receiving the indication information, the device information of the second terminal is saved according to the indication information, the device information of each second terminal that has been successfully authorized is displayed on the device management interface, and the authorization of the second terminal is closed by modifying the authorization status of the second terminal.

2. The method according to claim 1, characterized in that The first terminal sending the target biometric information to the second terminal includes: The first terminal sends the target biometric information to the second terminal through radio frequency identification technology RFID.

3. The method according to claim 1, characterized in that The first terminal sending the target biometric information to the second terminal includes: The first terminal queries the device information of the second terminal; The first terminal sends the target biometric information and the device information to a cloud server, so that the cloud server sends the target biometric information to the second terminal according to the device information, wherein the cloud server does not store the target biometric information.

4. The method according to any one of claims 1 to 3, characterized in that The first terminal receives and stores the biometric information sent by the biometric collection device, including: The first terminal establishes a single point connection with the biometric feature collection device within a preset time period, wherein the single point connection is used to indicate that the biometric feature collection device is only connected to the first terminal within the preset time period; The first terminal receives the biometric information set sent by the biometric collection device; The first terminal stores the biometric information set in a database implemented based on the lightweight database SQLite.

5. The method according to claim 4, characterized in that The first terminal establishing a single point connection with the biometric feature collection device within a preset time period includes: The first terminal establishes a single-point Bluetooth connection with the biometric feature collection device within the preset time period; or, The first terminal establishes a single point connection with the biometric feature collection device via a universal serial interface USB within the preset time period; or, The first terminal establishes a single-point connection with the biometric feature collection device via a wireless local area network within the preset time period.

6. The method according to any one of claims 1 to 3 or 5, characterized in that The biometric information is obtained by encrypting the collected user biometrics by the biometric collection device based on a symmetric key signed by the Advanced Encryption Standard (AES).

7. The method according to any one of claims 1 to 3 or 5, characterized in that The method further comprises: The first terminal sends the user account information required by the second terminal to the second terminal, and the user account information is encrypted.

8. The method according to claim 7, characterized in that The user account information is account information of an application installed on the first terminal, and the application may be a transaction program or a social program.

9. The method according to any one of claims 1 to 3 or 5 or 8, wherein the target biometric feature information is stored in a database implemented by the second terminal based on a lightweight database SQLite.

10. The method according to any one of claims 1 to 3 or 5 or 8, characterized in that The biometric information includes user facial feature information, user iris feature information, user right palm print feature information, user right palm vein feature information, user left palm print feature information and user left palm vein feature information.

11. The method according to any one of claims 1 to 3 or 5 or 8, characterized in that After the first terminal receives the indication information of successful authorization returned by the second terminal, the method further includes: The first terminal closes the authorization to the second terminal, so that the second terminal deletes the target biometric feature information.

12. An authorization device, characterized in that: include: A receiving module, used to receive a set of biometric information sent by a biometric collection device, wherein the set of biometric information includes biometric information obtained by encrypting different biometrics collected by the biometric collection device; A storage module, used to store the biometric information set; A display module, used to display the object information of each biometric feature in the biometric feature information set in response to the authorization instruction; A processing module, configured to respond to a click operation on the object information and determine target biometric information authorized to the second terminal from the biometric information; a sending module, configured to send target biometric information to the second terminal when the first terminal authorizes the second terminal to use the biometric information, so that the second terminal stores the target biometric information, the target biometric information is included in the biometric information set, and the target biometric information is encrypted; The receiving module is also used to receive indication information of successful authorization returned by the second terminal, wherein after receiving the indication information, the device information of the second terminal is saved according to the indication information, the device information of each second terminal that has been successfully authorized is displayed on the device management interface, and the authorization of the second terminal is closed by modifying the authorization status of the second terminal.

13. A computer device, characterized in that: include: Memory, processor, and bus system; Wherein, the memory is used to store programs; The processor is used to execute the program in the memory, and the processor is used to execute the method according to any one of claims 1 to 11 according to the instructions in the program code; The bus system is used to connect the memory and the processor so that the memory and the processor can communicate with each other.

14. A computer-readable storage medium comprising instructions, which, when executed on a computer, causes the computer to perform the method according to any one of claims 1 to 11.

15. A computer program product, characterized in that The computer program product comprises a program, and when the program is run on a computer, the computer is caused to execute the method according to any one of claims 1 to 11.

Images