Bank intelligent touch safety guarantee method, system and equipment and storage medium

Abstract

The invention relates to a bank intelligent touch safety guarantee method, system and device and a storage medium, and belongs to the technical field of bank safety, and the method comprises the steps: receiving a business handling instruction triggered by an operator, obtaining householder information in the business handling instruction, and calling reference information corresponding to the householder information; initiating digital verification and biological verification to the operator, and obtaining a digital verification result and a biological verification result input by the operator; based on reference information corresponding to the householder information, verifying the digital verification result and the biological verification result to determine whether the operator is a householder; if yes, verification succeeds, and services contained in the service handling instruction are executed; and if not, verification fails, processing of the business contained in the business handling instruction is paused, and warning information is sent to the householder terminal. The method and the device have the effect of improving the handling security of the banking business.

Description

Technical Field

[0001] The present application relates to the field of banking security technology, and in particular to a banking intelligent touch security assurance method, system, device and storage medium. Background Art

[0002] When people conduct various businesses through banks, such as deposit and withdrawal business, financial management business, related financial consulting business, corporate financial business, etc., a large amount of bank data information will be generated.

[0003] Since bank data information is related to the user's assets, it is necessary to manage bank data information securely. For example, when a user logs into the bank system through an ATM or other smart terminal, or when transferring assets (such as transferring or withdrawing money), or when obtaining important bank data of the user (such as checking a bank account), the bank system generally verifies the identity of the current operator by verifying the password pre-set by the household owner. However, the security of this verification method is relatively low, and it is easy for criminals to steal the household owner's password and impersonate the household owner to perform the aforementioned operations, thereby causing financial losses to the household owner himself, so it needs to be improved. Summary of the invention

[0004] In order to improve the security of banking services, the present application provides a bank intelligent touch security assurance method, system, device and storage medium.

[0005] In the first aspect, the present application provides a bank intelligent touch security protection method, which adopts the following technical solutions: Receiving a business handling instruction triggered by an operator, obtaining householder information in the business handling instruction, and retrieving reference information corresponding to the householder information; Initiate digital verification and biometric verification to the operator, and obtain the digital verification result and biometric verification result entered by the operator; wherein the digital verification at least includes password verification, and the biometric verification at least includes touch fingerprint verification; Based on the reference information corresponding to the householder information, verifying the digital verification result and the biometric verification result to determine whether the operator is the householder; If yes, that is, the verification is successful, the service included in the service handling instruction is executed; if no, that is, the verification fails, the processing of the service included in the service handling instruction is suspended, and a warning message is sent to the homeowner terminal.

[0006] By adopting the above technical solution, after receiving the business processing instruction triggered by the operator and before processing the corresponding business, the present application proposes an operation to verify the identity of the operator, and the verification method includes digital verification and biometric verification, and the biometric verification specifically includes touch fingerprint verification; because the touch fingerprint is unique and not easily stolen, the identity of the operator is jointly confirmed by combining biometric verification and digital verification, thereby reducing the situation where the identity of the householder is easily impersonated and causes financial losses to the householder himself, and improving the security protection performance of the banking system when handling business.

[0007] Optionally, initiating digital verification and biometric verification to the operator and obtaining a digital verification result and a biometric verification result entered by the operator includes: Initiate digital verification to the operator so that the operator can enter the password by touch, and obtain the digital verification result generated by the operator during the entry process in real time; and during the operator's entry process, set any entry position as a verification position, and when the operator enters to the verification position, initiate biometric verification to obtain the biometric verification result of the operator at the verification position.

[0008] By adopting the above technical scheme, the digital verification method can be considered as the operator entering the password in a touch manner, and in the process of entering the password, the present application proposes to set a verification position at any entry position, and the entry position here can be considered as the position that the operator must touch when entering the correct password, such as the touch position of any numerical value contained in the password, and the operator is biometrically verified at the verification position, such as obtaining the touch fingerprint at the verification position (i.e., the biometric verification result), thereby realizing dual verification of the operator's identity under two verification methods, and the above method also enables the two verification methods to be performed simultaneously, thereby improving the verification efficiency, and if the touch fingerprint is not obtained at the verification position, it can be considered that the password entered by the operator is incorrect and the digital verification has failed, so this method can also use biometric verification to reversely verify whether the digital verification result is correct.

[0009] Optionally, the reference information at least includes a composite fingerprint corresponding to the household head, the composite fingerprint is obtained by superimposing at least one layer of single-layer fingerprints, and the fingerprints corresponding to the single-layer fingerprints in different layers belong to different persons; If not, that is, the verification fails, the processing of the service included in the service handling instruction is suspended, and a warning message is sent to the homeowner terminal, followed by: receiving a self-verification review request from an operator after verification failure, and reviewing the relationship between the operator and the householder based on the self-verification request; If the verification is passed, the fingerprint of the operator is obtained, and the stored fingerprint of the corresponding household owner is superimposed with the currently obtained fingerprint of the operator to form a composite fingerprint for storage; The verifying the digital verification result and the biometric verification result based on the reference information corresponding to the householder information to determine whether the operator is the householder includes: Based on the reference password included in the reference information corresponding to the householder information, the reference password is compared with the digital verification result; based on the composite fingerprint included in the reference information corresponding to the householder information, single-layer fingerprints are extracted one by one from the composite fingerprint and compared with the touch fingerprint included in the biometric verification result; so as to determine whether the relationship between the operator and the householder is normal; If the digital verification result is consistent with the corresponding reference password, and there is any single-layer fingerprint that is consistent with the touch fingerprint included in the biometric verification result, it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful; Otherwise, the verification fails, and if the touch fingerprint is consistent with the composite fingerprint of the corresponding account owner, a leakage warning is triggered to inform the bank system maintenance personnel that the corresponding stored composite fingerprint has been stolen.

[0010] By adopting the above technical scheme, the present application specifically defines that the fingerprint stored in the householder's benchmark information is a composite fingerprint formed by multi-layer superposition processing, and each layer of the multi-layer fingerprints in the composite fingerprint corresponds to a fingerprint owner, and the fingerprint owners corresponding to different layers of fingerprints are different. During the formal comparison, the system of the present application will extract a single-layer fingerprint to compare with the touch fingerprint included in the biometric verification result, so as to achieve security protection for the fingerprint stored by the householder, prevent criminals from illegally breaking into the bank system and stealing the householder's benchmark information, and by determining whether the touch fingerprint included in the biometric verification result is a composite fingerprint, this is used as a basis for determining whether the householder's corresponding fingerprint has been stolen, helping system maintenance personnel to discover that the bank system has been attacked, and promptly discover that the corresponding householder's benchmark information has been stolen.

[0011] Optionally, the method further includes: Regularly calculate the number of matching results when comparing each single-layer fingerprint contained in the composite fingerprint corresponding to each reference information with the biometric verification result, and determine the matching order, which is the order of the number of matching results corresponding to all single-layer fingerprints contained in the corresponding composite fingerprint from large to small; For all the single-layer fingerprints contained in each composite fingerprint, they are sequentially superimposed from the inside to the outside according to the regularly determined comparison order to form a composite fingerprint, so as to update the superposition order of the composite fingerprint; The extracting single-layer fingerprints one by one from the composite fingerprint and comparing them with the touch fingerprint included in the biometric verification result includes: According to the corresponding comparison order, single-layer fingerprints are extracted one by one from the composite fingerprint and compared with the touch fingerprint included in the biometric verification result. When any single-layer fingerprint is consistent with the touch fingerprint included in the biometric verification result, the comparison is stopped.

[0012] By adopting the above technical solution, the superposition order of the composite fingerprint is regularly adjusted, thereby achieving regular updating of the composite fingerprint and improving the safety factor of the composite fingerprint. In addition, single-layer fingerprints are extracted from the composite fingerprint in the same order as the comparison order for comparison, so as to improve the efficiency of successful verification.

[0013] Optionally, each single-layer fingerprint is obtained by superimposing at least one finger fingerprint of the person to whom the corresponding fingerprint belongs, and different finger fingerprints correspond to different operation scenarios; The extracting single-layer fingerprints one by one from the composite fingerprint and comparing them with the touch fingerprint included in the biometric verification result includes: Single-layer fingerprints are extracted one by one from the composite fingerprint, and each time a single-layer fingerprint is extracted, based on the operation scenario of the operator when the business processing instruction is currently triggered, the finger fingerprint corresponding to the operation scenario is preferentially extracted from the single-layer fingerprint, and the finger fingerprint is compared with the touch fingerprint included in the biometric verification result. If the comparison is inconsistent, the remaining finger fingerprints in the single-layer fingerprint are extracted one by one, and compared with the touch fingerprint included in the biometric verification result.

[0014] By adopting the above technical solution, the touch fingers used to trigger business processing instructions in different operation scenarios may be different. For example, when using a smart phone to access the bank system APP, the thumb is likely to be used, while when handling business at an offline bank, the index finger or other fingers are likely to be used to touch and access the bank system (such as accessing an ATM machine). Therefore, during the actual comparison, the comparison order of the finger fingerprints can be determined according to the operation scenario, and the stored finger fingerprints corresponding to the operation scenario are given priority for comparison to improve the probability and efficiency of consistent comparison.

[0015] Optionally, the composite fingerprint is obtained by superimposing at least one single-layer fingerprint, and each single-layer fingerprint is pre-deformed before the superimposition process, so that the single-layer fingerprint after the deformation process has a specified consistency with the single-layer fingerprint before the deformation; If the digital verification result is consistent with the corresponding reference password, and there is any single-layer fingerprint that is consistent with the touch fingerprint included in the biometric verification result, it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful; Otherwise, the verification fails. If the touch fingerprint is consistent with the composite fingerprint of the corresponding account owner, a leak warning is triggered to inform the bank system maintenance personnel that the corresponding stored composite fingerprint has been stolen, including: If the digital verification result is consistent with the corresponding reference password, and there is any single-layer fingerprint that is consistent with the touch fingerprint included in the biometric verification result to a specified degree, it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful; Otherwise, the verification fails, and if the touch fingerprint is consistent with the composite fingerprint of the corresponding account owner, the first leakage warning is triggered so that the bank system maintenance personnel can be informed that the corresponding stored composite fingerprint has been stolen; Otherwise, the verification fails, and if the touch fingerprint is completely consistent with any single-layer fingerprint, a second leakage warning is triggered to inform the bank system maintenance personnel that the corresponding stored single-layer fingerprint has been stolen.

[0016] By adopting the above technical solution, it is stipulated that each single-layer fingerprint stored has been deformed in advance. On the one hand, this is to protect the original real fingerprint of the householder from being leaked and stolen. On the other hand, the corresponding comparison consistency degree (i.e., the specified degree) when the verification is successful is stipulated, which is used as the basis for whether the stored single-layer fingerprint is stolen. If the consistency degree between the touch fingerprint and the stored single-layer fingerprint is not the specified degree, but is completely consistent, then it is considered that the single-layer fingerprint is stolen, which makes it easier for bank system maintenance personnel to promptly discover and learn that the bank system has been attacked and the corresponding single-layer fingerprint has been stolen, thereby indirectly realizing the implementation, maintenance and monitoring of the security defense function of the bank system.

[0017] Optionally, if no, that is, the verification fails, suspending the processing of the service included in the service handling instruction and sending a warning message to the homeowner terminal includes: If not, that is, the verification fails, the processing of the business included in the business handling instruction is suspended, and the activity level of the corresponding householder is determined. If the activity level is lower than the preset activity level, a warning message is sent to the associated person terminal corresponding to the householder. If the activity level is not lower than the preset activity level, a warning message is sent to the householder terminal.

[0018] By adopting the above technical solution, for some less active householders, even if warning information is sent to them, it is not easy for the householder to know it in time. Therefore, the warning information can be sent to the corresponding associated person. The associated person here can be regarded as an agent, that is, a person who obtains the warning information on behalf of the householder, so as to help the householder obtain the warning information in time through the associated person.

[0019] In a second aspect, the present application provides a bank intelligent touch security system, including: A business handling trigger module is used to receive a business handling instruction triggered by an operator, obtain the householder information in the business handling instruction, and retrieve the reference information corresponding to the householder information; A dual identity verification module, used to initiate digital verification and biometric verification to the operator, and obtain the digital verification result and biometric verification result entered by the operator; wherein the digital verification at least includes password verification, and the biometric verification at least includes touch fingerprint verification; A verification result verification module, used to verify the digital verification result and the biometric verification result based on the reference information corresponding to the householder information, so as to determine whether the operator is the householder; The verification result execution module is used to execute the business included in the business handling instruction if yes, that is, the verification is successful; if no, that is, the verification fails, suspend the processing of the business included in the business handling instruction and send a warning message to the household owner terminal.

[0020] In a third aspect, the present application provides a bank intelligent touch security device, including a memory and a processor, wherein the memory stores a computer program that can be loaded by the processor and execute any one of the methods described in the first aspect.

[0021] In a fourth aspect, the present application provides a computer-readable storage medium storing a computer program that can be loaded by a processor and execute any one of the methods described in the first aspect.

[0022] In summary, the present application includes at least one of the following beneficial technical effects: 1. This application proposes an operation to verify the identity of the operator, and the verification methods include digital verification and biometric verification. Biometric verification specifically includes touch fingerprint verification. Since the touch fingerprint is unique and not easily stolen, the identity of the operator is jointly confirmed by combining biometric verification with digital verification, thereby reducing the situation where the identity of the household owner is easily misused and causes financial losses to the household owner, and improving the security protection performance of the banking system when handling business; 2. Furthermore, the present application specifically defines that the fingerprint stored in the householder's baseline information is a composite fingerprint formed by multi-layer superposition processing, and each layer of the multi-layer fingerprints in the composite fingerprint corresponds to a fingerprint owner, and the fingerprint owners corresponding to different layers of fingerprints are different. During the formal comparison, the present application system will extract a single-layer fingerprint to compare with the touch fingerprint included in the biometric verification result, thereby achieving security protection for the fingerprint stored by the householder, preventing criminals from illegally breaking into the bank system and stealing the householder's baseline information, and by determining whether the touch fingerprint included in the biometric verification result is a composite fingerprint, using this as a basis for determining whether the householder's corresponding fingerprint has been stolen, helping system maintenance personnel discover that the bank system has been attacked, and promptly discovering that the corresponding householder's baseline information has been stolen. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0024] Figure 1 It is a flow chart of the bank intelligent touch security assurance method disclosed in the embodiment of the present application.

[0025] Figure 2 It is a structural block diagram of the bank intelligent touch security system disclosed in the embodiment of the present application.

[0026] Explanation of the accompanying drawings: 1. Business processing trigger module; 2. Double identity authentication module; 3. Verification result verification module; 4. Verification result execution module. DETAILED DESCRIPTION

[0027] The following is combined with Figure 1-2 This application is described in further detail.

[0028] The embodiment of the present application discloses a bank smart touch security protection method. The bank smart touch security protection method is used to verify the identity of the operator who triggered the business processing instruction after receiving the business processing instruction and before processing the corresponding business, and adopts a dual verification method of digital verification and biometric verification to reduce the situation where the householder's information is stolen and the householder's identity is used fraudulently, thereby causing the householder's assets to suffer losses, and improve the security protection performance of the bank system when handling business. The execution subject of the bank smart touch security protection method disclosed in the embodiment of the present application is the bank smart touch security protection system (hereinafter referred to as the security protection system), which will be combined with the attached Figure 1 The specific process steps of the bank's intelligent touch security assurance method are explained in detail.

[0029] S101, receiving a business processing instruction triggered by an operator, obtaining householder information in the business processing instruction, and retrieving reference information corresponding to the householder information.

[0030] In practice, an operator refers to a person who needs to access the bank's security system to handle banking business (such as deposits and withdrawals, bank account numbers or balance inquiries); the operator can access it through a smart mobile terminal (such as a mobile phone) in the form of an APP, or access it through an offline bank ATM, and log in by touching the login button preset on the security system access page and entering identity information, such as ID card information or a reserved mobile phone number and login password.

[0031] The operator can touch the business processing buttons (such as account information query buttons, deposit and withdrawal buttons, etc.) preset on the display page of the security system. Every time the operator triggers a business processing button, the security system will obtain the corresponding householder information. The householder information is the identity information entered by the operator when logging into the security system; in addition, the security system is also preset with an information database, which pre-stores the householder information and the benchmark information corresponding to each householder information; and the householder information in the information database is the customer who has registered an account and applied for a bank card in the bank. The householder information is the identity information of the aforementioned customer, and the benchmark information refers to the information set by the householder for verifying the authenticity of his identity. The benchmark information specifically includes a benchmark password and a composite fingerprint. The benchmark password is a password in text form (such as a password obtained by combining numbers and letters).

[0032] A composite fingerprint is a fingerprint in the form of an image that can represent the identity relationship with the household head. Specifically, a composite fingerprint includes several single-layer fingerprints, each of which corresponds to a fingerprint owner, and different single-layer fingerprints correspond to different fingerprint owners. In the same composite fingerprint, the fingerprint owner of one of the single-layer fingerprints is the household head, and the other fingerprint owners have all passed the household head's identity authentication.

[0033] Each single-layer fingerprint is formed by superimposing at least one fingerprint of the corresponding fingerprint owner, that is, each single-layer fingerprint can include fingerprints of different fingers of the corresponding fingerprint owner, and different fingerprints correspond to different operation scenarios, which at least include online APP operation and offline ATM operation. The security system can obtain the operation scenario when the operator currently triggers the business processing instruction according to the operator's login method. Superimposition processing is achieved by superimposing fingerprints of different fingers in one image. All single-layer fingerprints are superimposed in one image to finally form a composite fingerprint.

[0034] S102, initiating digital verification and biometric verification to the operator, and obtaining the digital verification result and biometric verification result entered by the operator; wherein the digital verification at least includes password verification, and the biometric verification at least includes touch fingerprint verification; S102 specifically includes the following sub-steps: Initiate digital verification to the operator so that the operator can enter the password by touch, and obtain the digital verification result generated by the operator during the entry process in real time; and during the operator's entry process, set any entry position as the verification position, and when the operator enters to the verification position, initiate biometric verification to obtain the operator's biometric verification result at the verification position.

[0035] In practice, whenever a business processing instruction is triggered, the security system will display a keyboard on the display page for the operator to enter the password by directly touching it with a finger, and obtain the numerical value or letter corresponding to the position touched by the operator on the keyboard in real time to achieve digital verification, and the numerical value or letter obtained above is the digital verification result. In addition, the security system will also use the position of each numerical value or letter in the base password corresponding to the household owner information in the above keyboard as a touch position, and select any touch position as the verification position. When the operator touches the keyboard and enters the password, the security system will obtain the fingerprint at the verification position when the operator touches the verification position to achieve biometric verification, and the fingerprint obtained at the verification position is the biometric verification result.

[0036] Among them, if the security system fails to obtain the fingerprint at the verification position from the beginning to the end of password input, it can be considered that the password entered by the operator does not match the reference password and the digital verification is unsuccessful; in addition, the method of obtaining the fingerprint at the verification position proposed in the embodiment of the present application can specifically be an existing fingerprint recognition technology, such as capacitive fingerprint recognition technology, optical fingerprint recognition technology, etc.

[0037] S103, based on the reference information corresponding to the householder information, verify the digital verification result and the biometric verification result to determine whether the operator is the householder.

[0038] Wherein, S103 includes the following sub-steps: S1031, based on the reference password included in the reference information corresponding to the householder information, the reference password is compared with the digital verification result; based on the composite fingerprint included in the reference information corresponding to the householder information, single-layer fingerprints are extracted one by one from the composite fingerprint and compared with the touch fingerprint included in the biometric verification result; so as to determine whether the relationship between the operator and the householder is normal; S1032, if the digital verification result is consistent with the corresponding reference password, and there is any single-layer fingerprint that is consistent with the touch fingerprint included in the biometric verification result, it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful; S1033, otherwise the verification fails, and if the touch fingerprint is consistent with the composite fingerprint of the corresponding household owner, a leakage warning is triggered to inform the bank system maintenance personnel that the corresponding stored composite fingerprint has been stolen.

[0039] Optionally, the step of “extracting single-layer fingerprints from the composite fingerprint one by one and comparing them with the touch fingerprint included in the biometric verification result” in S1031 includes the following steps: According to the corresponding comparison order, single-layer fingerprints are extracted one by one from the composite fingerprints and compared with the touch fingerprints included in the biometric verification results. When any single-layer fingerprint is consistent with the touch fingerprint included in the biometric verification results, the comparison is stopped; Whenever a single-layer fingerprint is extracted, the finger fingerprint corresponding to the operation scenario is extracted from the single-layer fingerprint first according to the operation scenario of the operator when the current business processing instruction is triggered, and the finger fingerprint is compared with the touch fingerprint included in the biometric verification result. If the comparison is inconsistent, the remaining finger fingerprints in the single-layer fingerprint are extracted one by one and compared with the touch fingerprint included in the biometric verification result.

[0040] In implementation, the security system compares the digital verification result with the reference password, and extracts single-layer fingerprints from the composite fingerprint one by one to compare with the touch fingerprint included in the biometric verification result, and once a single-layer fingerprint that matches the touch fingerprint appears, the operation of extracting single-layer fingerprints and comparing fingerprints is stopped. In this process, every time a single-layer fingerprint is extracted, the operation scenario of the operator that currently triggers the business processing instruction is determined, and the finger fingerprint corresponding to the determined operation scenario is preferentially extracted from the currently extracted single-layer fingerprints, and the finger fingerprint is compared with the touch fingerprint. If the comparison is consistent, the operation of extracting single-layer fingerprints and comparing fingerprints is stopped. If the comparison is inconsistent, the remaining finger fingerprints in the single-layer fingerprint are extracted one by one and compared with the touch fingerprint one by one.

[0041] In addition, the security system will also regularly calculate the number of matching results when each single-layer fingerprint contained in the composite fingerprint corresponding to each reference information is compared with the biometric verification result, and determine the comparison order, which is the order of the number of matching results corresponding to all single-layer fingerprints contained in the corresponding composite fingerprint from large to small; at the same time, for all single-layer fingerprints contained in each composite fingerprint, the security system will overlap the single-layer fingerprints from inside to outside in order to form a composite fingerprint in accordance with the determined comparison order, so as to update the overlapping order of all single-layer fingerprints in the composite fingerprint. When it is necessary to compare with the touch fingerprint, the security system will extract the single-layer fingerprint from the composite fingerprint according to the current comparison order.

[0042] Correspondingly, if the digital verification result is consistent with the corresponding reference password, and there is any single-layer fingerprint that is consistent with the touch fingerprint included in the biometric verification result, then it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful; on the contrary, if the comparison between the reference password and the digital verification result is inconsistent, or there is no single-layer fingerprint that is consistent with the touch fingerprint, then it means that the verification has failed; and in the case of verification failure, if the touch fingerprint is consistent with the composite fingerprint corresponding to the corresponding householder information, then it is considered that the composite fingerprint has been stolen. At this time, the security system will trigger a leakage warning and send a leakage warning to the bank system maintenance personnel terminal. The leakage warning at least includes the corresponding householder information and the composite fingerprint.

[0043] Optionally, after each single-layer fingerprint is superimposed, the security system will also perform deformation processing on it, such as distorting any of the lines in the single-layer fingerprint so that the consistency between the deformed single-layer fingerprint and the single-layer fingerprint before the deformation is a specified degree, that is, the similarity is a specified similarity (such as 70% similarity). After the deformation processing of the single-layer fingerprint is completed, all single-layer fingerprints are superimposed to form a composite fingerprint.

[0044] Accordingly, S1032 and S1033 specifically include the following sub-steps: If the digital verification result is consistent with the corresponding reference password, and there is any single-layer fingerprint that is consistent with the touch fingerprint included in the biometric verification result to a specified degree, then it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful; Otherwise, the verification fails, and if the touch fingerprint is consistent with the composite fingerprint of the corresponding account owner, the first leakage warning is triggered so that the bank system maintenance personnel can be informed that the corresponding stored composite fingerprint has been stolen; Otherwise, the verification fails, and if the touch fingerprint is completely consistent with any single-layer fingerprint, a second leakage warning is triggered to inform the bank system maintenance personnel that the corresponding stored single-layer fingerprint has been stolen.

[0045] In implementation, combined with the foregoing, it can be seen that the single-layer fingerprint contained in the composite fingerprint stored in the present application is a fingerprint that has been distorted and deformed, not a real fingerprint, and its similarity with the real fingerprint is a specified degree. Therefore, when the extracted single-layer fingerprint is compared with the touch fingerprint, if the comparison consistency is a specified degree, it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful, otherwise the verification fails. In the case of verification failure, if the comparison between the touch fingerprint and the single-layer fingerprint is completely consistent, it is considered that the single-layer fingerprint has been stolen. At this time, the security system will trigger a second leakage warning and send the second leakage warning to the terminal of the bank system maintenance personnel, so that the bank system maintenance personnel will be informed that the corresponding stored single-layer fingerprint has been stolen.

[0046] S104, if yes, that is, the verification is successful, the service included in the service processing instruction is executed; if no, that is, the verification fails, the processing of the service included in the service processing instruction is suspended, and a warning message is sent to the homeowner terminal.

[0047] Among them, "if not, that is, verification fails, suspending the processing of the service included in the service handling instruction and sending a warning message to the terminal of the household owner" in S104 includes: If not, that is, the verification fails, the processing of the business included in the business handling instruction is suspended, and the activity level of the corresponding householder is determined. If the activity level is lower than the preset activity level, a warning message is sent to the associated person terminal corresponding to the householder. If the activity level is not lower than the preset activity level, a warning message is sent to the householder terminal.

[0048] In implementation, if the verification is successful, the security system will execute the business corresponding to the business processing instruction. If the verification fails, the security system will not execute the corresponding business and send a warning message to the householder's terminal. The warning message is used to remind the householder that his account security is not good and he can choose to make emergency processing, such as freezing the account or changing the password. Before sending the warning message to the householder's terminal, the security system will first determine whether the householder's activity is lower than the preset activity. If so, it will send a warning message to the terminal of the associated person associated with the householder. Exemplarily, the method used by the present application to determine the activity can be: the security system determines the number of times the householder's account logs in and accesses the security system within a specified period, and determines the householder's current activity through the correspondence between the preset number of times and the activity. The aforementioned associated person can be considered as the contact person set by the householder when registering the account.

[0049] And after "if no, that is, verification fails, suspend processing of the services included in the service handling instruction and send a warning message to the terminal of the household owner" in S104, it includes: receiving a self-verification review request from an operator after verification failure, and reviewing the relationship between the operator and the householder based on the self-verification request; If the verification is passed, the fingerprint of the operator is obtained, and the stored fingerprint of the corresponding household owner is superimposed with the fingerprint of the currently obtained operator to form a composite fingerprint for storage.

[0050] In implementation, for operators who fail verification, the operator can initiate a self-verification composite request. There are at least two ways of self-verification request. The first way of self-verification is: the operator can re-enter the password and fingerprint to achieve self-verification. The second way of self-verification is: by sending a verification request to the householder's terminal, the householder verifies his identity. The security assurance system can determine whether the review is passed by verifying the password and fingerprint entered in the first self-verification method, or by receiving the verification result sent by the householder's terminal. If the review is passed, a reminder can be sent to the operator to ask whether the operator's fingerprint needs to be entered. If necessary, the operator's fingerprint is obtained, and the operator's fingerprint is generated into a single-layer fingerprint. After re-superimposing it with all other single-layer fingerprints in the householder's composite fingerprint, a new composite fingerprint is formed to achieve the update of the composite fingerprint.

[0051] The present application also discloses a bank intelligent touch security system. Figure 2 ,include: The service handling trigger module 1 is used to receive the service handling instruction triggered by the operator, obtain the householder information in the service handling instruction, and retrieve the reference information corresponding to the householder information; A dual identity verification module 2, used to initiate digital verification and biometric verification to the operator, and obtain the digital verification result and biometric verification result entered by the operator; wherein the digital verification at least includes password verification, and the biometric verification at least includes touch fingerprint verification; A verification result verification module 3, used to verify the digital verification result and the biometric verification result based on the reference information corresponding to the householder information, so as to determine whether the operator is the householder; The verification result execution module 4 is used for executing the service included in the service handling instruction if yes, that is, the verification is successful; if no, that is, the verification fails, suspending the processing of the service included in the service handling instruction and sending a warning message to the homeowner terminal.

[0052] Optionally, the dual identity authentication module 2 is also used to initiate digital verification to the operator, so that the operator can enter the password by touch, and obtain the digital verification result generated by the operator during the entry process in real time; and during the operator's entry process, any entry position is set as a verification position, and when the operator enters to the verification position, biometric verification is initiated to obtain the biometric verification result of the operator at the verification position.

[0053] Optionally, the verification result execution module 4 is also used to receive a self-verification request issued by the operator after the verification fails, and based on the self-verification request, verify the relationship between the operator and the householder; if the review is passed, the fingerprint of the operator is obtained, and the stored fingerprint of the corresponding householder is superimposed with the currently obtained fingerprint of the operator to form a composite fingerprint for storage.

[0054] The verification result verification module 3 is also used to compare the reference password with the digital verification result based on the reference password included in the reference information corresponding to the householder information; based on the composite fingerprint included in the reference information corresponding to the householder information, extract single-layer fingerprints from the composite fingerprint one by one and compare them with the touch fingerprint included in the biometric verification result; to determine whether the relationship between the operator and the householder is normal; and if the digital verification result is consistent with the corresponding reference password, and there is any single-layer fingerprint that is consistent with the touch fingerprint included in the biometric verification result, it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful; and if the verification fails otherwise, and if the touch fingerprint is consistent with the composite fingerprint of the corresponding householder, a leakage warning is triggered to inform the bank system maintenance personnel that the corresponding stored composite fingerprint has been stolen.

[0055] Optionally, it also includes a composite fingerprint update module, which is used to regularly calculate the number of matching results when each single-layer fingerprint contained in the composite fingerprint corresponding to each reference information is compared with the biometric verification result, and determine the comparison order, wherein the comparison order is the order of the number of matching results corresponding to all single-layer fingerprints contained in the corresponding composite fingerprint from large to small; and is also used to sequentially superimpose all single-layer fingerprints contained in each composite fingerprint from inside to outside according to the regularly determined comparison order to form a composite fingerprint, so as to update the superposition order of the composite fingerprint.

[0056] The verification result verification module 3 is also used to extract single-layer fingerprints from the composite fingerprint one by one in accordance with the corresponding comparison order and compare them with the touch fingerprint included in the biometric verification result, and when any single-layer fingerprint is consistent with the touch fingerprint included in the biometric verification result, the comparison is stopped.

[0057] Optionally, the verification result verification module 3 is also used to extract single-layer fingerprints one by one from the composite fingerprint, and each time a single-layer fingerprint is extracted, based on the operation scenario of the operator when the business processing instruction is currently triggered, the finger fingerprint corresponding to the operation scenario is preferentially extracted from the single-layer fingerprint, and the finger fingerprint is compared with the touch fingerprint included in the biometric verification result. If the comparison is inconsistent, the remaining finger fingerprints in the single-layer fingerprint are extracted one by one, and compared with the touch fingerprint included in the biometric verification result.

[0058] Optionally, the verification result verification module 3 is also used to, if the digital verification result is consistent with the corresponding reference password, and there is any single-layer fingerprint that has a specified degree of consistency after comparison with the touch fingerprint included in the biological verification result, then it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful; otherwise, the verification fails, and if the touch fingerprint is consistent with the corresponding householder's composite fingerprint, then a first leakage warning is triggered to allow the bank system maintenance personnel to be informed that the corresponding stored composite fingerprint has been stolen; otherwise, the verification fails, and if the touch fingerprint is completely consistent with any single-layer fingerprint, then a second leakage warning is triggered to allow the bank system maintenance personnel to be informed that the corresponding stored single-layer fingerprint has been stolen.

[0059] Optionally, the verification result execution module 4 is also used to suspend processing of the business included in the business handling instruction if no, that is, the verification fails, and determine the activity level of the corresponding household head. If the activity level is lower than the preset activity level, a warning message is sent to the terminal of the associated person corresponding to the household head. If the activity level is not lower than the preset activity level, a warning message is sent to the household head terminal.

[0060] An embodiment of the present application also discloses a bank smart touch security device, which includes a memory and a processor. The memory stores a computer program that can be loaded by the processor and execute the bank smart touch security method as described above.

[0061] An embodiment of the present application also discloses a computer-readable storage medium, which stores a computer program that can be loaded by a processor and execute the above-mentioned bank smart touch security protection method. The computer-readable storage medium includes, for example: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0062] It should be noted that, in this document, relational terms such as first and second, etc. are merely used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations.

[0063] The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit the protection scope of the application. Obviously, the described embodiments are only some embodiments of the present application, rather than all embodiments. Based on these embodiments, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.

Claims

1. A bank intelligent touch security method, characterized in that: include: Receiving a business handling instruction triggered by an operator, obtaining householder information in the business handling instruction, and retrieving reference information corresponding to the householder information; Initiate digital verification and biometric verification to the operator, and obtain the digital verification result and biometric verification result entered by the operator; wherein the digital verification at least includes password verification, and the biometric verification at least includes touch fingerprint verification; Based on the reference information corresponding to the householder information, verifying the digital verification result and the biometric verification result to determine whether the operator is the householder; If yes, that is, the verification is successful, the service included in the service handling instruction is executed; if no, that is, the verification fails, the processing of the service included in the service handling instruction is suspended, and a warning message is sent to the homeowner terminal.

2. The bank intelligent touch security protection method according to claim 1, characterized in that: The initiating digital verification and biometric verification to the operator and obtaining the digital verification result and biometric verification result entered by the operator includes: Initiate digital verification to the operator so that the operator can enter the password by touch, and obtain the digital verification result generated by the operator during the entry process in real time; and during the operator's entry process, set any entry position as a verification position, and when the operator enters to the verification position, initiate biometric verification to obtain the biometric verification result of the operator at the verification position.

3. The bank intelligent touch security protection method according to claim 2 is characterized in that: The reference information at least includes a composite fingerprint of the household head, wherein the composite fingerprint is obtained by superimposing at least one layer of single-layer fingerprints, and the fingerprints corresponding to the single-layer fingerprints in different layers belong to different persons; If not, that is, the verification fails, the processing of the service included in the service handling instruction is suspended, and a warning message is sent to the homeowner terminal, followed by: receiving a self-verification review request from an operator after verification failure, and reviewing the relationship between the operator and the householder based on the self-verification request; If the verification is passed, the fingerprint of the operator is obtained, and the stored fingerprint of the corresponding household owner is superimposed with the currently obtained fingerprint of the operator to form a composite fingerprint for storage; The verifying the digital verification result and the biometric verification result based on the reference information corresponding to the householder information to determine whether the operator is the householder includes: Based on the reference password included in the reference information corresponding to the householder information, the reference password is compared with the digital verification result; based on the composite fingerprint included in the reference information corresponding to the householder information, single-layer fingerprints are extracted one by one from the composite fingerprint and compared with the touch fingerprint included in the biometric verification result; so as to determine whether the relationship between the operator and the householder is normal; If the digital verification result is consistent with the corresponding reference password, and there is any single-layer fingerprint that is consistent with the touch fingerprint included in the biometric verification result, it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful; Otherwise, the verification fails, and if the touch fingerprint is consistent with the composite fingerprint of the corresponding account owner, a leakage warning is triggered to inform the bank system maintenance personnel that the corresponding stored composite fingerprint has been stolen.

4. The bank intelligent touch security protection method according to claim 3 is characterized in that: The method further comprises: Regularly calculate the number of matching results when comparing each single-layer fingerprint contained in the composite fingerprint corresponding to each reference information with the biometric verification result, and determine the matching order, which is the order of the number of matching results corresponding to all single-layer fingerprints contained in the corresponding composite fingerprint from large to small; For all the single-layer fingerprints contained in each composite fingerprint, they are sequentially superimposed from the inside to the outside according to the regularly determined comparison order to form a composite fingerprint, so as to update the superposition order of the composite fingerprint; The extracting the single-layer fingerprints one by one from the composite fingerprint and comparing them with the touch fingerprint included in the biometric verification result includes: According to the corresponding comparison order, single-layer fingerprints are extracted one by one from the composite fingerprint and compared with the touch fingerprint included in the biometric verification result. When any single-layer fingerprint is consistent with the touch fingerprint included in the biometric verification result, the comparison is stopped.

5. The bank intelligent touch security protection method according to claim 3 is characterized in that: Each single-layer fingerprint is obtained by superimposing at least one fingerprint of the corresponding person, and different fingerprints correspond to different operation scenarios; The extracting the single-layer fingerprints one by one from the composite fingerprint and comparing them with the touch fingerprint included in the biometric verification result includes: Single-layer fingerprints are extracted one by one from the composite fingerprint, and each time a single-layer fingerprint is extracted, based on the operation scenario of the operator when the business processing instruction is currently triggered, the finger fingerprint corresponding to the operation scenario is preferentially extracted from the single-layer fingerprint, and the finger fingerprint is compared with the touch fingerprint included in the biometric verification result. If the comparison is inconsistent, the remaining finger fingerprints in the single-layer fingerprint are extracted one by one, and compared with the touch fingerprint included in the biometric verification result.

6. The bank intelligent touch security protection method according to claim 3 is characterized in that: The composite fingerprint is obtained by superimposing at least one single-layer fingerprint, and each single-layer fingerprint is deformed before the superimposition, so that the single-layer fingerprint after the deformation is consistent with the single-layer fingerprint before the deformation to a specified degree; If the digital verification result is consistent with the corresponding reference password, and there is any single-layer fingerprint that is consistent with the touch fingerprint included in the biometric verification result, it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful; Otherwise, the verification fails. If the touch fingerprint is consistent with the composite fingerprint of the corresponding account owner, a leak warning is triggered to inform the bank system maintenance personnel that the corresponding stored composite fingerprint has been stolen, including: If the digital verification result is consistent with the corresponding reference password, and there is any single-layer fingerprint that is consistent with the touch fingerprint included in the biometric verification result to a specified degree, it is considered that the relationship between the operator and the householder is normal, that is, the verification is successful; Otherwise, the verification fails, and if the touch fingerprint is consistent with the composite fingerprint of the corresponding account owner, the first leakage warning is triggered so that the bank system maintenance personnel can be informed that the corresponding stored composite fingerprint has been stolen; Otherwise, the verification fails, and if the touch fingerprint is completely consistent with any single-layer fingerprint, a second leakage warning is triggered to inform the bank system maintenance personnel that the corresponding stored single-layer fingerprint has been stolen.

7. The bank intelligent touch security method according to claim 1, characterized in that: If not, that is, the verification fails, the processing of the service included in the service handling instruction is suspended, and a warning message is sent to the terminal of the household owner, including: If not, that is, the verification fails, the processing of the business included in the business handling instruction is suspended, and the activity level of the corresponding householder is determined. If the activity level is lower than the preset activity level, a warning message is sent to the associated person terminal corresponding to the householder. If the activity level is not lower than the preset activity level, a warning message is sent to the householder terminal.

8. A bank intelligent touch security system, characterized in that: include, A business handling trigger module (1) is used to receive a business handling instruction triggered by an operator, obtain householder information in the business handling instruction, and retrieve reference information corresponding to the householder information; A dual identity verification module (2) is used to initiate digital verification and biometric verification to the operator, and obtain the digital verification result and biometric verification result entered by the operator; wherein the digital verification at least includes password verification, and the biometric verification at least includes touch fingerprint verification; A verification result verification module (3) is used to verify the digital verification result and the biometric verification result based on the reference information corresponding to the householder information, so as to determine whether the operator is the householder; The verification result execution module (4) is used for executing the service included in the service processing instruction if the verification is successful; and suspending the processing of the service included in the service processing instruction and sending a warning message to the household owner terminal if the verification is successful.

9. A bank intelligent touch security device, characterized in that: The method comprises a memory and a processor, wherein the memory stores a computer program that can be loaded by the processor and execute any one of the methods according to claims 1 to 7.

10. A computer-readable storage medium, characterized in that: A computer program is stored which can be loaded by a processor and execute any one of the methods as claimed in claims 1 to 7.

Images