Identity authentication method and device, equipment and storage medium

Abstract

The embodiment of the invention provides an identity authentication method and device, equipment and a storage medium, which are applied to terminal equipment in a data channel DC scene of an IP multimedia subsystem IMS, and the method comprises the following steps: displaying an incoming call interface corresponding to a video call request; the incoming call interface comprises a user identifier of a calling user, an answering control and a rejection control, in response to a selection operation of a called user on the answering control, judging whether the calling user is a pre-stored user according to the user identifier, if so, acquiring a pre-stored biological feature corresponding to the calling user, performing feature extraction on the calling user in a video call, and if not, performing the feature extraction on the calling user in the video call; and obtaining the current biological characteristics, and determining an identity authentication result of the calling subscriber according to the pre-stored biological characteristics and the current biological characteristics. According to the method provided by the invention, the communication security is improved.

Description

Technical Field

[0001] The present application belongs to the technical field of data processing, and specifically relates to an identity authentication method, device, equipment and storage medium. Background Art

[0002] Currently, a data channel (DC) can be established in the IP Multimedia Subsystem (IMS) architecture to provide end-to-end data interaction services for users. The data channel can transmit audio or video, and can also transmit any type of data, such as text, files, pictures, etc.

[0003] When conducting end-to-end communication, there is a possibility that the user cannot determine the identity of the communication partner. Even in video calls, there is a possibility that artificial intelligence (AI) can forge the identity of the other party, resulting in low communication security. Summary of the invention

[0004] The embodiments of the present application relate to an identity authentication method, apparatus, device and storage medium, which are used to solve the defect of low communication security in the prior art.

[0005] In a first aspect, an embodiment of the present application provides an identity authentication method, which is applied to a terminal device in a data channel DC scenario of an IP multimedia subsystem IMS, and the method includes:

[0006] Displaying an incoming call interface corresponding to the video call request, the incoming call interface including a user ID of the calling user, an answer control, and a reject control;

[0007] In response to the called user selecting the answering control, judging whether the calling user is a pre-stored user according to the user identifier, and if so, obtaining a pre-stored biometric feature corresponding to the calling user;

[0008] Extracting features of the calling user during the video call to obtain current biometric features;

[0009] An identity authentication result of the calling user is determined according to the pre-stored biometric feature and the current biometric feature.

[0010] In a possible implementation, extracting features of the calling user during the video call to obtain current biometric features includes:

[0011] Acquiring video data and audio data of the calling user during a video call;

[0012] Extracting image features from the video data to obtain current facial features of the calling user;

[0013] Extracting audio features from the audio data to obtain current audio features of the calling user;

[0014] The current facial feature and the current audio feature are subjected to feature fusion processing to obtain a current biological feature.

[0015] In a possible implementation, performing feature fusion processing on the current facial feature and the current audio feature to obtain the current biometric feature includes:

[0016] Performing feature fusion on the current facial feature and the current audio feature to obtain a fused feature;

[0017] The fused features are fully connected to obtain current biological features.

[0018] In a possible implementation, determining the identity authentication result of the calling user according to the pre-stored biometric feature and the current biometric feature includes:

[0019] Determining a similarity between the pre-stored biometric feature and the current biometric feature;

[0020] Determining whether the similarity is greater than or equal to a threshold;

[0021] If yes, determining that the identity authentication result of the calling user is successful;

[0022] If not, it is determined that the identity authentication result of the calling user is authentication failure.

[0023] In a possible implementation manner, after determining that the identity authentication result of the calling user is successful, the method further includes:

[0024] Obtaining the public key corresponding to the calling user;

[0025] The pre-stored information update request is encrypted by the public key to obtain first request information, and the first request information is sent to the terminal corresponding to the calling user, wherein the pre-stored information update request is used to request to update the pre-stored biometric feature of the calling user;

[0026] receiving a first response message sent by the terminal, wherein the first response message includes the updated target biometric feature of the calling user;

[0027] According to the target biometric feature, the pre-stored biometric feature corresponding to the calling user in the preset storage space is updated.

[0028] In a possible implementation manner, after determining that the identity authentication result of the calling user is authentication failure, the method further includes:

[0029] Display warning information, where the warning information is used to indicate that the identity authentication of the calling user has failed.

[0030] In a possible implementation manner, when the calling user is not a pre-stored user, the method further includes:

[0031] Displaying an information acquisition control on an interface corresponding to the video call, the information acquisition control is used to determine to send a pre-stored information request to a terminal corresponding to the calling user, the pre-stored information request is used to request pre-stored information of the calling user;

[0032] In response to the called user selecting the information acquisition control, sending the pre-stored information request to the terminal corresponding to the calling user;

[0033] The pre-stored information sent by the terminal is received and stored, wherein the pre-stored information includes the pre-stored biometric feature corresponding to the calling user and the public key corresponding to the calling user.

[0034] In a second aspect, an embodiment of the present application provides an identity authentication device, which is applied to a terminal device in a data channel DC scenario of an IP multimedia subsystem IMS, and the device includes:

[0035] A display module, used to display an incoming call interface corresponding to the video call request, wherein the incoming call interface includes a user ID of the calling user, an answer control, and a reject control;

[0036] a judgment module, configured to respond to the called user's selection operation on the answering control, and to judge whether the calling user is a pre-stored user according to the user identifier, and if so, to obtain a pre-stored biometric feature corresponding to the calling user;

[0037] A determination module, used to extract features of the calling user during the video call to obtain current biometric features;

[0038] The authentication module is used to determine the identity authentication result of the calling user according to the pre-stored biometric feature and the current biometric feature.

[0039] In a possible implementation manner, the determination module is specifically configured to:

[0040] Acquiring video data and audio data of the calling user during a video call;

[0041] Extracting image features from the video data to obtain current facial features of the calling user;

[0042] Extracting audio features from the audio data to obtain current audio features of the calling user;

[0043] The current facial feature and the current audio feature are subjected to feature fusion processing to obtain a current biological feature.

[0044] In a possible implementation manner, the determination module is specifically configured to:

[0045] Performing feature fusion on the current facial feature and the current audio feature to obtain a fused feature;

[0046] The fused features are fully connected to obtain current biological features.

[0047] In a possible implementation, the authentication module is specifically used for:

[0048] Determining a similarity between the pre-stored biometric feature and the current biometric feature;

[0049] Determining whether the similarity is greater than or equal to a threshold;

[0050] If yes, determining that the identity authentication result of the calling user is successful;

[0051] If not, it is determined that the identity authentication result of the calling user is authentication failure.

[0052] In a possible implementation, the device further includes an updating module, and the updating module is used to:

[0053] Obtaining the public key corresponding to the calling user;

[0054] The pre-stored information update request is encrypted by the public key to obtain first request information, and the first request information is sent to the terminal corresponding to the calling user, wherein the pre-stored information update request is used to request to update the pre-stored biometric feature of the calling user;

[0055] receiving a first response message sent by the terminal, wherein the first response message includes the updated target biometric feature of the calling user;

[0056] According to the target biometric feature, the pre-stored biometric feature corresponding to the calling user in the preset storage space is updated.

[0057] In a possible implementation manner, the device further includes an alarm module, and the alarm module is used to:

[0058] Display warning information, where the warning information is used to indicate that the identity authentication of the calling user has failed.

[0059] In a possible implementation manner, when the calling user is not a pre-stored user, the device further includes an acquisition module, and the acquisition module is used to:

[0060] Displaying an information acquisition control on an interface corresponding to the video call, the information acquisition control is used to determine to send a pre-stored information request to a terminal corresponding to the calling user, the pre-stored information request is used to request pre-stored information of the calling user;

[0061] In response to the called user selecting the information acquisition control, sending the pre-stored information request to the terminal corresponding to the calling user;

[0062] The pre-stored information sent by the terminal is received and stored, wherein the pre-stored information includes the pre-stored biometric feature corresponding to the calling user and the public key corresponding to the calling user.

[0063] In a third aspect, the present application provides a chip having a computer program stored thereon, wherein when the computer program is executed by the chip, the identity authentication method as described in any one of the first aspects is implemented.

[0064] In a fourth aspect, the present application provides a chip module having a computer program stored thereon, and when the computer program is executed by the chip module, the identity authentication method as described in any one of the first aspects is implemented.

[0065] In a fifth aspect, an embodiment of the present application provides an electronic device, including: a memory, a processor, and a transceiver;

[0066] The memory stores computer-executable instructions;

[0067] The processor executes the computer-executable instructions stored in the memory to implement the identity authentication method as described in any one of the first aspects.

[0068] In a sixth aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the identity authentication method described in any one of the first aspects.

[0069] In a seventh aspect, an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the identity authentication method described in any one of the first aspects.

[0070] The embodiment of the present application provides an identity authentication method, device, equipment and storage medium, which are applied to a terminal device in a data channel DC scenario of an IP multimedia subsystem IMS. In the method, an incoming call interface corresponding to a video call request is displayed. The incoming call interface includes a user ID, an answering control and a rejecting control of the calling user. In response to the called user's selection operation of the answering control, it is determined whether the calling user is a pre-stored user based on the user ID. If so, the pre-stored biometrics corresponding to the calling user are obtained, and the calling user is extracted during the video call to obtain the current biometrics. The identity authentication result of the calling user is determined based on the pre-stored biometrics and the current biometrics. In this way, when the user information of the calling user is saved in the terminal corresponding to the called user, the pre-stored biometrics corresponding to the calling user are stored. The current biometrics of the calling user are extracted during the video call, and accurately matched with the pre-stored biometrics to accurately verify the identity information of the calling user, so as to improve the security of communication. BRIEF DESCRIPTION OF THE DRAWINGS

[0071] In order to more clearly illustrate the technical solutions in the present application, the following is a brief introduction to the drawings required for use in the description of the embodiments. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0072] Figure 1 A schematic diagram of an application scenario provided for an embodiment of the present application;

[0073] Figure 2 A flowchart of an identity authentication method provided in an embodiment of the present application;

[0074] Figure 3 A flowchart of another identity authentication method provided in an embodiment of the present application;

[0075] Figure 4 A flowchart of another identity authentication method provided in an embodiment of the present application;

[0076] Figure 5 A flowchart of another identity authentication method provided in an embodiment of the present application;

[0077] Figure 6 A schematic diagram of the structure of an identity authentication device provided in an embodiment of the present application;

[0078] Figure 7 A schematic diagram of the structure of another identity authentication device provided in an embodiment of the present application;

[0079] Figure 8 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application.

[0080] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0081] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0082] It should be noted that, although the terms "first", "second", etc. are used to describe various information in the embodiments of the present application, such information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. Optionally, without departing from the scope of the present application, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information.

[0083] It should be understood that the terms "comprises" and "includes" indicate the presence of the previously mentioned features, steps, operations, but do not exclude the presence, occurrence or addition of one or at least one other feature, step, operation. The terms "and / or" and the like used in this application may be interpreted as inclusive, or mean any one or any combination. Optionally, "A and / or B" means "any of the following: A; B; A and B". In addition, the character " / " in this article generally indicates that the objects associated before and after are in an "or" relationship.

[0084] In the related technology, a data channel (DC) can be established in the IP Multimedia Subsystem (IMS) architecture to provide end-to-end data interaction services for users. The data channel can transmit audio or video, and can also transmit any type of data, such as text, files, pictures, etc.

[0085] When conducting end-to-end communication, there is a possibility that the user cannot determine the identity of the communication partner. Even in video calls, there is a possibility that artificial intelligence (AI) can forge the identity of the other party, resulting in low communication security.

[0086] In order to solve the above technical problems, the embodiment of the present application provides an identity authentication method, which is applied to the terminal device in the data channel DC scenario of the IP multimedia subsystem IMS. When a video call is connected, it is determined whether the calling user is a pre-stored user according to the user ID of the calling user. If so, the pre-stored biometrics corresponding to the calling user are obtained, and the current biometrics of the calling user in the video call are extracted. According to the pre-stored biometrics and the current biometrics, the identity authentication result of the calling user is determined. In this way, when the user information of the calling user is saved in the terminal corresponding to the called user, the pre-stored biometrics corresponding to the calling user are stored. The current biometrics of the calling user are extracted in the video call, and accurately matched with the pre-stored biometrics, and the identity information of the calling user is accurately verified to improve the security of communication.

[0087] Next, combine Figure 1 , the application scenarios of the identity authentication method are illustrated with examples.

[0088] Figure 1 This is a schematic diagram of an application scenario provided by the embodiment of this application. Figure 1 , Figure 1 The system may include a first terminal 101 and a second terminal 102. The first terminal 101 may communicate with the second terminal 102 via a DC in the IMS.

[0089] The first terminal 101 can send a communication request to the second terminal 102 as a calling user, and the second terminal 102 can also send a communication request to the first terminal 101 as a calling user. The communication request can include a video call request.

[0090] The communication between the first terminal 101 and the second terminal 102 may transmit video, audio, text, files, pictures, etc., which are not limited here.

[0091] The technical solution shown in the present application is described in detail below through specific embodiments. It should be noted that the following embodiments can exist independently or in combination with each other, and the same or similar contents will not be described repeatedly in different embodiments.

[0092] Figure 2 A flowchart of an identity authentication method provided by an embodiment of the present application. The execution subject of the embodiment of the present application can be a terminal device in a data channel DC scenario applied to an IP multimedia subsystem IMS. Figure 2 , the method comprising:

[0093] S201. Display an incoming call interface corresponding to a video call request.

[0094] The incoming call interface includes the calling user's user ID, answer control, and reject control.

[0095] The user identifier can be used to indicate the user identity of the calling user.

[0096] The answer control can be used to perform an operation of accepting a video call request.

[0097] The reject control can be used to perform an operation of rejecting a video call request.

[0098] The video call request may be a request sent by a calling user to a called user, requesting the called user to conduct a video call.

[0099] When the calling user sends a video call request to the called user, the called user's corresponding terminal may display an incoming call interface corresponding to the video call request.

[0100] S202: In response to the called user selecting the answering control, judging whether the calling user is a pre-stored user according to the user identifier, and if so, obtaining the pre-stored biometric feature corresponding to the calling user.

[0101] The selection operation may be a click operation or a touch operation, which is not limited here.

[0102] The pre-stored user may be a user corresponding to user related information stored in the called user terminal, and the user related information includes a pre-stored user identification, a pre-stored biometric feature, and the like.

[0103] The pre-stored biometric features may include pre-stored voice features, pre-stored facial features, etc., which are not limited here.

[0104] In response to the called user's selection operation on the answering control, pre-stored user identifiers corresponding to multiple pre-stored users can be obtained in the storage space, and it can be determined whether a user identifier exists among the multiple pre-stored user identifiers. If so, it is determined that the calling user is a pre-stored user. If not, it is determined that the calling user is not a pre-stored user. When the calling user is a pre-stored user, the pre-stored biometric feature corresponding to the calling user is obtained.

[0105] S203: Extract features of the calling user during the video call to obtain current biometric features.

[0106] The video call may be a video call established after the called user accepts the video call request.

[0107] The current biometric features may include current voice features, current facial features, etc., which are not limited here.

[0108] In a video call, the video information and audio information of the calling user can be obtained at preset intervals, and features of the video information and audio information can be extracted to obtain current biometric features.

[0109] It should be noted that feature extraction can be performed on video information and audio information according to any feasible implementation method, and the embodiments of the present application are not limited to this.

[0110] S204: Determine the identity authentication result of the calling user according to the pre-stored biometric features and the current biometric features.

[0111] The authentication result can include authentication success or authentication failure.

[0112] The pre-stored biometrics and the current biometrics may be compared to obtain a comparison result, and the identity authentication result of the calling user may be determined based on the comparison result.

[0113] The method of comparing the pre-stored biometric feature with the current biometric feature may be implemented through a feature comparison model, or may be implemented by determining the similarity between the pre-stored biometric feature and the current biometric feature, which is not limited here.

[0114] Optionally, the identity authentication result of the calling user can be determined based on the pre-stored biometrics and the current biometrics in the following manner: determine the similarity between the pre-stored biometrics and the current biometrics; determine whether the similarity is greater than or equal to a threshold; if so, determine that the identity authentication result of the calling user is a successful authentication; if not, determine that the identity authentication result of the calling user is a failed authentication.

[0115] The similarity can be calculated by a preset algorithm, for example, the similarity is 80%.

[0116] The threshold value may be a preset value, for example, the threshold value may be 90%.

[0117] Optionally, after determining that the identity authentication result of the calling user is successful, authentication success information may be displayed, where the authentication success information is used to indicate that the identity authentication of the calling user is successful.

[0118] Optionally, after determining that the identity authentication result of the calling user is an authentication failure, an alarm message may be displayed, where the alarm message is used to indicate that the identity authentication of the calling user has failed.

[0119] The identity authentication method provided in this embodiment is through displaying the incoming call interface corresponding to the video call request. The incoming call interface includes the user identification of the calling user, the answering control and the rejection control. In response to the selection operation of the answering control by the called user, it is determined whether the calling user is a pre-stored user according to the user identification. If so, the pre-stored biometric features corresponding to the calling user are obtained, and the features of the calling user are extracted in the video call to obtain the current biometric features. According to the pre-stored biometric features and the current biometric features, the identity authentication result of the calling user is determined. In this way, when the user information of the calling user is saved in the terminal corresponding to the called user, the pre-stored biometric features corresponding to the calling user are stored. The current biometric features of the calling user are extracted in the video call, and accurately matched with the pre-stored biometric features to accurately verify the identity information of the calling user, so as to improve the security of communication.

[0120] Next, combine Figure 3 , the process (S203) of extracting features of the calling user in a video call and obtaining the current biometric features is explained.

[0121] Figure 3 A flowchart of another identity authentication method provided in an embodiment of the present application. Based on the above embodiment, see Figure 3 , the method comprising:

[0122] S301. Acquire video data and audio data of a calling user in a video call.

[0123] The video data may include facial information of the calling user.

[0124] The audio data may include audio information of the calling user.

[0125] The video data and audio data of the calling user can be obtained at preset intervals during a video call.

[0126] S302: Extract image features from the video data to obtain current facial features of the calling user.

[0127] The video data may be preprocessed to obtain a plurality of first images, and image features may be extracted from the plurality of first images using a first preset algorithm to obtain current facial features of the calling user.

[0128] Among them, the preprocessing may include image denoising processing, image enhancement processing, face detection processing, etc., which are not limited here.

[0129] The first preset algorithm may include a pseudo three-dimensional algorithm, a convolutional neural network algorithm, etc., which is not limited here.

[0130] S303: Extract audio features from the audio data to obtain current audio features of the calling user.

[0131] The audio data may be preprocessed to obtain a plurality of second images, and audio features may be extracted from the plurality of second images using a second preset algorithm to obtain current audio features of the calling user.

[0132] Among them, the preprocessing may include denoising processing, audio enhancement processing, etc., which are not limited here.

[0133] The second preset algorithm may include a long short-term memory network algorithm, a short-term energy algorithm, a perceptual linear prediction algorithm, etc., which are not limited here.

[0134] The second preset algorithm can efficiently and accurately extract high-dimensional vectors that can represent the individual's unique voiceprint characteristics from continuous audio data, and can perform real-time biometric matching and identity authentication. As more audio data is input, the feature extraction performance is continuously optimized to achieve better adaptability and robustness.

[0135] S304: Fusing the current facial features and the current audio features to obtain fused features.

[0136] The fused feature may be a feature that combines the feature vector dimension of the current facial feature and the feature vector dimension of the current audio graph feature.

[0137] Optionally, the current facial features and the current audio features may be concatenated to obtain fused features.

[0138] Optionally, the current facial feature and the current audio feature may be respectively mapped to a common feature space, and feature fusion is performed in the feature space to obtain a fused feature.

[0139] It should be noted that the feature fusion of the current facial features and the current audio features can be performed according to any feasible implementation method, and the embodiments of the present application are not limited to this.

[0140] S305: Perform full connection processing on the fused features to obtain the current biological features.

[0141] Fully connected processing can be used to map high-dimensional input features to low-dimensional or high-dimensional output space to achieve feature compression, expansion or recombination.

[0142] The fused features can be input into the fully connected layer, and the output of the fully connected layer can be calculated to obtain the current biological features.

[0143] The implementation content of each step in the embodiment of the present application can refer to the description of the corresponding steps or operations in the above method embodiment, and repeated content will not be repeated.

[0144] The identity authentication method provided in this embodiment obtains the video data and audio data of the calling user in a video call, extracts image features from the video data to obtain the current facial features of the calling user, extracts audio features from the audio data to obtain the current audio features of the calling user, fuses the current facial features and the current audio features to obtain fused features, and performs full connection processing on the fused features to obtain the current biometric features. In this way, the current biometric features of the calling user are extracted in the video call, accurately matched with the pre-stored biometric features, and the identity information of the calling user is accurately verified to improve the security of communication.

[0145] In a possible implementation, after determining that the identity authentication result of the calling user is successful, the method further includes updating the pre-stored biometric features corresponding to the calling user in the preset storage space. Figure 4 , the process of updating the pre-stored biometric features corresponding to the calling user in the preset storage space is explained.

[0146] Figure 4 A flowchart of another identity authentication method provided in the embodiment of the present application. Based on the above embodiment, please refer to Figure 4 , the method comprising:

[0147] S401: Obtain the public key corresponding to the calling user.

[0148] Public keys can be used to ensure the security of data transmitted between users.

[0149] The public key may be stored in the pre-stored information of the calling user in the terminal corresponding to the called user.

[0150] The pre-stored information may be obtained by the called user's corresponding terminal from the calling user's corresponding terminal during the first video call between the calling user and the called user.

[0151] The public key corresponding to the calling user can be obtained from the pre-stored information corresponding to the calling user.

[0152] S402: Encrypt the pre-stored information update request using a public key to obtain first request information, and send the first request information to a terminal corresponding to the calling user.

[0153] The pre-stored information update request is used to request to update the pre-stored biometrics of the calling user.

[0154] The pre-stored information update request can be encrypted by using a public key to obtain an encrypted pre-stored information update request, the encrypted pre-stored information update request can be encapsulated to obtain first request information, the first request information can be sent to a terminal corresponding to the calling user so that the terminal corresponding to the calling user receives the first request information, the first request information can be parsed to obtain an encrypted pre-stored information update request, the encrypted pre-stored information update request can be decrypted by using a private key corresponding to the calling user to obtain a decrypted pre-stored information update request, the latest pre-stored biometric feature can be determined based on the pre-stored information update request, the first response information can be generated based on the pre-stored biometric feature, and the first response information can be sent to the terminal corresponding to the called user.

[0155] S403: Receive first response information sent by the terminal.

[0156] The first response message includes the updated target biometric feature of the calling user.

[0157] The first response information sent by the terminal can be received, and the first response information can be parsed and processed to obtain the target biometric feature updated by the user.

[0158] S404: Update the pre-stored biometric feature corresponding to the calling user in the preset storage space according to the target biometric feature.

[0159] The pre-stored biometric feature corresponding to the calling user in the preset storage space may be deleted, and the target biometric feature corresponding to the calling user may be stored in the preset storage space, so as to update the pre-stored biometric feature corresponding to the calling user in the preset storage space.

[0160] The implementation content of each step in the embodiment of the present application can refer to the description of the corresponding steps or operations in the above method embodiment, and repeated content will not be repeated.

[0161] The identity authentication method provided in this embodiment obtains the public key corresponding to the calling user, encrypts the pre-stored information update request through the public key, obtains the first request information, and sends the first request information to the terminal corresponding to the calling user. The pre-stored information update request is used to request to update the pre-stored biometrics of the calling user, and receives the first response information sent by the terminal. The first response information includes the target biometrics updated by the calling user, and the pre-stored biometrics corresponding to the calling user in the preset storage space are updated according to the target biometrics. In this way, the latest pre-stored biometrics corresponding to the calling user are always stored in the terminal corresponding to the called user, and the identity information of the calling user can be accurately verified to improve the security of communication.

[0162] In a possible implementation manner, if the calling user is not a pre-stored user, the method further includes storing the pre-stored information of the calling user. Figure 5, the process of storing the pre-stored information of the calling user is explained.

[0163] Figure 5 A flowchart of another identity authentication method provided in an embodiment of the present application. Based on the above embodiment, see Figure 5 , the method comprising:

[0164] S501: Display an information acquisition control on an interface corresponding to a video call.

[0165] The information acquisition control is used to determine whether to send a pre-stored information request to the terminal corresponding to the calling user.

[0166] The pre-stored information request is used to request the pre-stored information of the calling user.

[0167] In response to the called user's selection operation on the answering control, a video call can be established, and an information acquisition control can be displayed on an interface corresponding to the video call.

[0168] S502: In response to the called user clicking the information acquisition control, a pre-stored information request is sent to a terminal corresponding to the calling user.

[0169] The selection operation may be a click operation or a touch operation, which is not limited here.

[0170] In response to the called user's click operation on the information acquisition control, a pre-stored information request corresponding to the calling user is generated, and the pre-stored information request is sent to the terminal corresponding to the calling user, so that the terminal corresponding to the calling user receives the pre-stored information request, and according to the calling user's click operation on the information sending control, the pre-stored information is sent to the terminal corresponding to the called user.

[0171] S503: Receive pre-stored information sent by the terminal, and store the pre-stored information.

[0172] The pre-stored information includes the pre-stored biometrics corresponding to the calling user and the public key corresponding to the calling user.

[0173] The response information sent by the receiving terminal is analyzed and processed to obtain the pre-stored information, and the pre-stored information is stored.

[0174] The implementation content of each step in the embodiment of the present application can refer to the description of the corresponding steps or operations in the above method embodiment, and repeated content will not be repeated.

[0175] The identity authentication method provided in this embodiment displays an information acquisition control on the interface corresponding to the video call, and the information acquisition control is used to determine to send a pre-stored information request to the terminal corresponding to the calling user, and the pre-stored information request is used to request the pre-stored information of the calling user. In response to the called user clicking the information acquisition control, the pre-stored information request is sent to the terminal corresponding to the calling user, and the pre-stored information sent by the receiving terminal is stored. In this way, when the user information of the calling user is saved in the terminal corresponding to the called user, the pre-stored biometrics corresponding to the calling user are stored, and the identity information of the calling user is accurately verified to improve the security of communication.

[0176] Figure 6 This is a schematic diagram of the structure of an identity authentication device provided in an embodiment of the present application. Figure 6 , applied to a terminal device in a data channel DC scenario of an IP multimedia subsystem IMS, the device 600 includes a display module 601, a judgment module 602, a determination module 603 and an authentication module 604, wherein,

[0177] Display module 601, used to display the incoming call interface corresponding to the video call request, the incoming call interface including the user ID of the calling user, answer control and reject control;

[0178] The judgment module 602 is used for judging whether the calling user is a pre-stored user according to the user identifier in response to the called user selecting the answering control, and if so, obtaining the pre-stored biometric feature corresponding to the calling user;

[0179] The determination module 603 is used to extract features of the calling user in the video call to obtain current biometric features;

[0180] The authentication module 604 is used to determine the identity authentication result of the calling user according to the pre-stored biometric feature and the current biometric feature.

[0181] In a possible implementation manner, the determination module 603 is specifically configured to:

[0182] Acquiring video data and audio data of the calling user during a video call;

[0183] Extracting image features from the video data to obtain current facial features of the calling user;

[0184] Extracting audio features from the audio data to obtain current audio features of the calling user;

[0185] The current facial feature and the current audio feature are subjected to feature fusion processing to obtain a current biological feature.

[0186] In a possible implementation manner, the determination module 603 is specifically configured to:

[0187] Performing feature fusion on the current facial feature and the current audio feature to obtain a fused feature;

[0188] The fused features are fully connected to obtain current biological features.

[0189] In a possible implementation, the authentication module 604 is specifically configured to:

[0190] Determining a similarity between the pre-stored biometric feature and the current biometric feature;

[0191] Determining whether the similarity is greater than or equal to a threshold;

[0192] If yes, determining that the identity authentication result of the calling user is successful;

[0193] If not, it is determined that the identity authentication result of the calling user is authentication failure.

[0194] Figure 7 A schematic diagram of the structure of another identity authentication device provided in an embodiment of the present application. Figure 6 Based on the examples shown, see Figure 7 The identity authentication device 600 further includes an updating module 605, and the updating module 605 is used to:

[0195] Obtaining the public key corresponding to the calling user;

[0196] The pre-stored information update request is encrypted by the public key to obtain first request information, and the first request information is sent to the terminal corresponding to the calling user, wherein the pre-stored information update request is used to request to update the pre-stored biometric feature of the calling user;

[0197] receiving a first response message sent by the terminal, wherein the first response message includes the updated target biometric feature of the calling user;

[0198] According to the target biometric feature, the pre-stored biometric feature corresponding to the calling user in the preset storage space is updated.

[0199] In a possible implementation manner, the device further includes an alarm module 606, and the alarm module 606 is configured to:

[0200] Display warning information, where the warning information is used to indicate that the identity authentication of the calling user has failed.

[0201] In a possible implementation manner, when the calling user is not a pre-stored user, the device further includes an acquisition module 607, and the acquisition module 607 is used to:

[0202] Displaying an information acquisition control on an interface corresponding to the video call, the information acquisition control is used to determine to send a pre-stored information request to a terminal corresponding to the calling user, the pre-stored information request is used to request pre-stored information of the calling user;

[0203] In response to the called user selecting the information acquisition control, sending the pre-stored information request to the terminal corresponding to the calling user;

[0204] The pre-stored information sent by the terminal is received and stored, wherein the pre-stored information includes the pre-stored biometric feature corresponding to the calling user and the public key corresponding to the calling user.

[0205] Figure 8 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. Figure 8 , the electronic device 800 may include: a memory 801 , a processor 802 , and a transceiver 803 .

[0206] The memory 801 is used to store program instructions;

[0207] The processor 802 is used to execute the program instructions stored in the memory, so as to enable the electronic device 800 to perform any of the above-mentioned identity authentication methods.

[0208] The transceiver 803 may include: a transmitter and / or a receiver. The transmitter may also be referred to as a transmitter, a transmitter, a transmission port, a transmission interface, or the like, and the receiver may also be referred to as a receiver, a reception port, a reception interface, or the like. Exemplarily, the memory 801, the processor 802, and the transceiver 803 are interconnected via a bus 804.

[0209] The present application also provides a chip having a computer program stored thereon. When the computer program is executed by the chip, the above-mentioned identity authentication method is implemented. The corresponding content and effects can be referred to in the method embodiment part, which will not be described in detail.

[0210] The present application also provides a chip module, on which a computer program is stored. When the computer program is executed by the chip module, the above-mentioned identity authentication method is implemented. The corresponding content and effects can be referred to the method embodiment part, which will not be repeated here.

[0211] The embodiment of the present application also provides a computer program product, which can be executed by a processor. When the computer program product is executed, the above-mentioned identity authentication method can be implemented.

[0212] The identity authentication device, electronic device, computer-readable storage medium and computer program product of the embodiments of the present application can execute the technical solutions shown in the above-mentioned identity authentication method embodiments. Their implementation principles and beneficial effects are similar and will not be repeated here.

[0213] All or part of the steps of the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a readable memory. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned memory (storage medium) includes: read-only memory (ROM), random access memory (RAM), flash memory, hard disk, solid state drive, magnetic tape, floppy disk, optical disc and any combination thereof.

[0214] The embodiments of the present application are described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer-executable instructions. These computer-executable instructions can be provided to a processing unit of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processing unit of the computer or other programmable data processing device generate instructions for implementing the process in the flowchart. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0215] These computer executable instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0216] These computer executable instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0217] Obviously, those skilled in the art can make various changes and modifications to the embodiments of the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the embodiments of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. An identity authentication method, characterized in that: Applied to a terminal device in a data channel DC scenario of an IP multimedia subsystem IMS, the method comprises: Displaying an incoming call interface corresponding to the video call request, the incoming call interface including a user ID of the calling user, an answer control, and a reject control; In response to the called user selecting the answering control, judging whether the calling user is a pre-stored user according to the user identifier, and if so, obtaining a pre-stored biometric feature corresponding to the calling user; Extracting features of the calling user during the video call to obtain current biometric features; An identity authentication result of the calling user is determined according to the pre-stored biometric feature and the current biometric feature.

2. The method according to claim 1, characterized in that: During the video call, feature extraction is performed on the calling user to obtain current biometric features, including: Acquiring video data and audio data of the calling user during a video call; Extracting image features from the video data to obtain current facial features of the calling user; Extracting audio features from the audio data to obtain current audio features of the calling user; The current facial feature and the current audio feature are subjected to feature fusion processing to obtain a current biological feature.

3. The method according to claim 2, characterized in that Performing feature fusion processing on the current facial feature and the current audio feature to obtain the current biometric feature includes: Performing feature fusion on the current facial feature and the current audio feature to obtain a fused feature; The fused features are fully connected to obtain current biological features.

4. The method according to any one of claims 1 to 3, characterized in that: Determining the identity authentication result of the calling user according to the pre-stored biometric feature and the current biometric feature includes: Determining a similarity between the pre-stored biometric feature and the current biometric feature; Determining whether the similarity is greater than or equal to a threshold; If yes, determining that the identity authentication result of the calling user is successful; If not, it is determined that the identity authentication result of the calling user is authentication failure.

5. The method according to claim 4, characterized in that After determining that the identity authentication result of the calling user is successful, the method further includes: Obtaining the public key corresponding to the calling user; The pre-stored information update request is encrypted by the public key to obtain first request information, and the first request information is sent to the terminal corresponding to the calling user, wherein the pre-stored information update request is used to request to update the pre-stored biometric feature of the calling user; receiving a first response message sent by the terminal, wherein the first response message includes the updated target biometric feature of the calling user; According to the target biometric feature, the pre-stored biometric feature corresponding to the calling user in the preset storage space is updated.

6. The method according to claim 4, characterized in that After determining that the identity authentication result of the calling user is authentication failure, the method further includes: Display warning information, where the warning information is used to indicate that the identity authentication of the calling user has failed.

7. The method according to any one of claims 1 to 6, characterized in that: When the calling user is not a pre-stored user, the method further includes: Displaying an information acquisition control on an interface corresponding to the video call, the information acquisition control is used to determine to send a pre-stored information request to a terminal corresponding to the calling user, the pre-stored information request is used to request pre-stored information of the calling user; In response to the called user selecting the information acquisition control, sending the pre-stored information request to the terminal corresponding to the calling user; The pre-stored information sent by the terminal is received and stored, wherein the pre-stored information includes the pre-stored biometric feature corresponding to the calling user and the public key corresponding to the calling user.

8. An identity authentication device, characterized in that: In a terminal device in a data channel DC scenario of an IP multimedia subsystem IMS, the device comprises: A display module, used to display an incoming call interface corresponding to the video call request, wherein the incoming call interface includes a user ID of the calling user, an answer control, and a reject control; a judgment module, configured to respond to the called user's selection operation on the answering control, and to judge whether the calling user is a pre-stored user according to the user identifier, and if so, to obtain a pre-stored biometric feature corresponding to the calling user; A determination module, used to extract features of the calling user during the video call to obtain current biometric features; The authentication module is used to determine the identity authentication result of the calling user according to the pre-stored biometric feature and the current biometric feature.

9. An electronic device, characterized in that: include: memory, processors, and transceivers; Wherein, the memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 7 when executed by a processor.

Images