Digital identity management method and system based on energy, equipment and medium

Abstract

The invention relates to the technical field of digital identity management, and discloses an energy-based digital identity management method and system, and the method comprises the steps: S1, carrying out the digital identity registration of a user; s2, creating a face recognition model, and combining the face recognition model with the real identity of the user to perform dual identity authentication on the user; s3, generating a unique identity identifier of the user and an RSA key pair; and S4, inserting the user information into the database, and managing the user information. The invention further discloses electronic equipment and a computer readable storage medium. The system comprises an information registration unit, an identity authentication unit and an identity management unit. The invention is used for improving the security of identity verification and ensuring the accuracy and reliability of the user identity.

Description

Technical Field

[0001] The present invention relates to the technical field of digital identity management, and in particular to an energy-based digital identity management method and system, device, and medium for improving the security of identity authentication and ensuring the accuracy and reliability of user identity. Background Art

[0002] In the digital age, the security of data and information has become a focus. Among cybersecurity risks, identity authentication issues are particularly prominent, and data and information theft is common. First, data leaks and hacker attacks may lead to the theft of personal identity, financial and medical information, causing privacy violations and economic losses to victims. Secondly, the financial industry is particularly at risk because financial institutions store a large amount of sensitive data. Once the data is stolen, it will not only affect customers, but may also cause market turmoil. Finally, the leakage of corporate secrets may give competitors an advantage and damage the company's reputation and market position.

[0003] Forged identities are a major challenge in the field of network security. Attackers gain unauthorized access or perform malicious activities by impersonating others or legitimate users. This behavior can lead to a series of serious problems, including unauthorized data access, false transactions, and information leakage. Attackers may use a variety of technical means to forge identities, such as stealing credentials, using malware, and social engineering attacks. To combat the threat of forged identities, strong authentication technologies, such as two-factor authentication and biometric authentication, must be adopted to ensure that only legitimate users can access critical resources and sensitive information. In addition, monitoring and analyzing user behavior, as well as continuously enhancing the security awareness of network users, are also key measures to mitigate the threat of forged identities.

[0004] The present invention provides an energy-based digital identity management method and system, device, and medium, which establishes a face recognition model and combines it with the user's real identity to perform dual identity authentication on the user. This dual authentication method not only improves the security of identity authentication, but also ensures the accuracy and reliability of the user's identity. In this way, unauthorized access can be effectively prevented to ensure that only legitimate users can obtain corresponding services or permissions. In addition, the present invention also has certain flexibility and scalability, and can be adjusted and optimized according to different application scenarios and security requirements, so as to meet diverse identity management needs. Summary of the invention

[0005] The present invention provides an energy-based digital identity management method and system, device, and medium, which establish a face recognition model and combine it with the user's real identity to perform dual identity authentication on the user. This dual authentication method not only improves the security of identity authentication, but also ensures the accuracy and reliability of the user's identity.

[0006] The present invention is implemented by the following technical solution: an energy-based digital identity management method, comprising the following steps: Step S1, the user registers a digital identity; Step S2, creating a face recognition model, combining the face recognition model with the user's real identity to perform dual identity authentication on the user; Step S3, generating a unique user identity identifier and RSA key pair; Step S4: insert the user information into the database and manage the user information In order to better implement the present invention, further, step S1 includes: the digital identity registration information includes user name, password, gender, date of birth and contact information.

[0007] In order to better implement the present invention, further, the face recognition model in step S2 includes a feature extraction module, a target detection module and a result output module.

[0008] In order to better implement the present invention, further, the feature extraction module includes a first convolution layer and a first activation function layer connected sequentially from front to back; The target detection module includes a second convolution layer, a second activation function layer, a third convolution layer, an average pooling layer and a feature addition layer, and the second convolution layer and the feature addition layer are jump-connected; The result output module includes a fully connected layer and a classification network layer.

[0009] In order to better implement the present invention, further, the first convolution layer and the first activation function layer are used to extract features of the face image data; Using the combination of the second convolutional layer, the second activation function layer, and the third convolutional layer to sample facial feature point information, using the average pooling layer to process different input facial features, and adjusting intermediate output parameters; The second convolution layer uses a 3×3 convolution kernel, a sliding step size of 1 and a padding of 1, in conjunction with the second activation function; the average pooling layer has a step size of 2 and no padding to perform feature dimensionality reduction; the third convolution layer uses a 1×1 convolution kernel, a step size of 1 and no padding to perform feature fusion.

[0010] In order to better implement the present invention, further, step S3 includes: combining the relevant name, timestamp and random number of energy management into a character string, performing a hash operation on the character string through a hash function, and generating a unique identity identifier.

[0011] In order to better implement the present invention, further, step S4 includes: The user information includes the user's identity identifier, digital identity registration information, face information, and the RSA public key in the RSA key pair; The user uses the RSA private key in the RSA key pair to request data and digitally sign it to generate a signature result. The server uses the RSA public key to verify the signature result; the user's request data is recorded and the usage record is encrypted, stored and backed up.

[0012] The present invention also provides an energy-based digital identity management system, comprising an information registration unit, an identity authentication unit and an identity management unit, wherein: Information registration unit, used for users to register their digital identities; An identity authentication unit, used to create a face recognition model, combine the face recognition model with the user's real identity to perform dual identity authentication on the user; used to generate a unique identity identifier and RSA key pair for the user; The identity management unit is used to insert user information into the database and manage the user information.

[0013] The present invention also provides an electronic device, which includes a processor and a memory; the processor includes the energy-based digital identity management system described in the second aspect above.

[0014] The present invention also provides a computer-readable storage medium, which includes instructions; when the instructions are executed on the electronic device described in the third aspect, the electronic device executes the method described in the first aspect.

[0015] Compared with the prior art, the present invention has the following advantages and beneficial effects: The present invention provides an energy-based digital identity management method and system, device, and medium, which establishes a face recognition model and combines it with the user's real identity to perform dual identity authentication on the user. This dual authentication method not only improves the security of identity authentication, but also ensures the accuracy and reliability of the user's identity. In this way, unauthorized access can be effectively prevented to ensure that only legitimate users can obtain corresponding services or permissions. In addition, the present invention also has certain flexibility and scalability, and can be adjusted and optimized according to different application scenarios and security requirements, so as to meet diverse identity management needs. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The present invention is further described in conjunction with the following drawings and embodiments, and all the concepts and innovations of the present invention should be regarded as the disclosed contents and the protection scope of the present invention.

[0017] Figure 1 A method flow chart of an energy-based digital identity management method, system, device, and medium provided in an embodiment of the present application; Figure 2 A schematic diagram of the structure of a face recognition model in an energy-based digital identity management method and system, device, and medium provided in an embodiment of the present application. DETAILED DESCRIPTION

[0018] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. It should be understood that the described embodiments are only part of the embodiments of the present invention, not all of the embodiments, and therefore should not be regarded as limiting the scope of protection. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technical personnel in this field without making creative work are within the scope of protection of the present invention.

[0019] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "disposed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be an indirect connection through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0020] Embodiment 1: The present embodiment provides an energy-based digital identity management method, system, device, and medium, such as Figure 1 As shown in the figure, in the digital identity management method of energy, the user's digital identity registration is first performed. The user provides basic information for registration on the digital identity management system of energy, including user name, password, and contact information. After registration is completed, the user performs real identity authentication to ensure that the provided identity is real and valid. This authentication process includes steps such as uploading a photo of the ID card and performing face recognition. Then, artificial intelligence technology is used to generate a double identity authentication based on the extracted facial feature points, and then combined with the user's real identity. After successful verification, a unique digital identity identifier is generated for the user for use.

[0021] Embodiment 2: This embodiment is further optimized on the basis of embodiment 1. The process of creating an identity identifier first involves obtaining the current timestamp and a random number. Next, the relevant name, timestamp and random number of energy management are combined into a string. The string is hashed by a hash function to generate a unique identifier (user identity ID). If the generated identifier already exists in the identifier storage table, it indicates that the identifier is not unique. At this time, the function will increment the timestamp value, regenerate the data and perform the hash operation again until a unique identifier is obtained. Finally, this unique identifier is stored in the identifier storage table and returned as the output result of the function.

[0022] The other parts of this embodiment are the same as those of Embodiment 1, and thus will not be described in detail.

[0023] Embodiment 3: This embodiment is further optimized on the basis of the above-mentioned embodiment 1 or 2. After receiving the HTTP request, the backend service pre-processes the digital identity data provided by the client. The pre-processing includes steps such as data format verification and field validity check to ensure the legitimacy of the data. The pre-processed digital identity data is packaged into a data packet that conforms to the storage format.

[0024] The other parts of this embodiment are the same as any of the above embodiments 1-2, so they are not repeated here.

[0025] Embodiment 4: This embodiment is further optimized on the basis of any one of the above embodiments 1-3. In general digital identity authentication, the user needs to provide identity information for registration to generate a user ID and an RSA key pair. The user ID is used as a user identity identifier to uniquely identify the user.

[0026] For users who manage digital identities based on energy in the present invention, additional identity verification is required, such as face recognition, fingerprint authentication, etc., to provide stronger security and ensure the credibility of the user's identity. The present invention uses face recognition as a dual identity authentication, which is faster, more convenient, more accurate, more hygienic and safer than fingerprint recognition.

[0027] Insert user registration information into the database, including the user's identity identifier, digital identity registration information, face information, RSA public key, etc., to ensure the secure storage of user information. The user uses the private key to request data for digital signature and generate a signature result, which can ensure the integrity and non-tamperability of the data. The server uses the public key to verify the signature result to ensure the validity and authenticity of the signature. If the verification passes, the credibility of the data source is recognized. Use the record management function to record the user's usage records in detail, including time, operation type, operation content and other information. Encrypt the usage records to ensure data security, and store and back up the usage records.

[0028] The other parts of this embodiment are the same as any one of the above embodiments 1-3, so they are not repeated here.

[0029] Embodiment 5: This embodiment is further optimized based on any one of the above embodiments 1-4. Figure 2 As shown in the figure, in face recognition, a face recognition model is established, and the network model includes a feature extraction module, a target detection module and a result output module; the Focal loss function and the CIOU loss function are used to guide the learning of the network model; the face recognition model is trained, the trained face recognition model is obtained, the face images are collected in real time, the face images are input into the trained face recognition model, and the face feature results are output.

[0030] The feature extraction module includes a first convolution layer and a first activation function layer connected sequentially from front to back, and the target detection module includes a second convolution layer, a second activation function layer, a third convolution layer, an average pooling layer and a feature addition layer, and the second convolution layer and the feature addition layer are jump-connected; The resulting output module includes a fully connected layer and a classification network layer.

[0031] Use the first convolution layer and the first activation function layer to extract features of face image data; Use the combination of the second convolutional layer, the second activation function layer, and the third convolutional layer to sample facial feature point information, use the average pooling layer to process the different input facial features, adjust the intermediate output parameters, and adjust the interdependence of the parameters The second convolution layer uses a 3×3 convolution kernel, a sliding step of 1, and a padding of 1. It is used with the second activation function to enhance the nonlinear characteristics, and a 2×2 average pooling layer with a step of 2 and no padding is used to achieve feature dimensionality reduction. The third convolution layer uses a 1×1 convolution kernel, a step of 1, and no padding to fuse features.

[0032] The other parts of this embodiment are the same as any one of the above embodiments 1-4, so they are not repeated here.

[0033] Embodiment 6: The present invention also provides an energy-based digital identity management system matching the method, comprising an information registration unit, an identity authentication unit and an identity management unit.

[0034] The present invention also provides an electronic device, which includes a processor and a memory; the processor includes the energy-based digital identity management system described above.

[0035] Embodiment 7: The present invention also provides a computer-readable storage medium, which includes instructions; when the instructions are executed on the electronic device described in the above embodiment, the electronic device executes the method described in the above embodiment. Optionally, the computer-readable storage medium may be a memory.

[0036] The processor involved in the embodiments of the present application may be a chip. For example, it may be a field programmable gate array (FPGA), an application specific integrated circuit (ASIC), a system on chip (SoC), a central processor unit (CPU), a network processor (NP), a digital signal processor (DSP), a microcontroller unit (MCU), a programmable logic device (PLD) or other integrated chips.

[0037] The memory involved in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate synchronous DRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), and direct RAM bus RAM (DRRAM). It should be noted that the memory of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0038] It should be understood that in the various embodiments of the present application, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0039] Those of ordinary skill in the art will appreciate that the modules and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0040] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and modules described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0041] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the modules is only a logical function division. There may be other division methods in actual implementation, such as multiple modules or components can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or modules, which can be electrical, mechanical or other forms.

[0042] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical modules, that is, they may be located in one device or distributed on multiple devices. Some or all of the modules may be selected according to actual needs to achieve the purpose of the present embodiment.

[0043] In addition, each functional module in each embodiment of the present application may be integrated into one device, or each module may exist physically separately, or two or more modules may be integrated into one device.

[0044] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using a software program, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (Digital Subscriber Line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that a computer can access or may include one or more servers, data centers and other data storage devices that can be integrated with the medium. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a DVD), or a semiconductor medium (eg, a solid state disk (SSD)).

[0045] The above description is only a preferred embodiment of the present invention and does not limit the present invention in any form. Any simple modification or equivalent change made to the above embodiment based on the technical essence of the present invention shall fall within the protection scope of the present invention.

Claims

1. An energy-based digital identity management method, characterized in that: The following steps are involved: Step S1, registering a digital identity according to the digital identity registration information; Step S2, creating a face recognition model, combining the face recognition model with the user's real identity to perform dual identity authentication on the user; Step S3, generating a unique user identity identifier and RSA key pair; Step S4, inserting the user information into the database and managing the user information.

2. The energy-based digital identity management method according to claim 1, characterized in that: The step S1 includes: The digital identity registration information includes user name, password, gender, date of birth and contact information.

3. The energy-based digital identity management method according to claim 1, characterized in that: The face recognition model in step S2 includes a feature extraction module, a target detection module and a result output module.

4. The energy-based digital identity management method according to claim 3, characterized in that: include: The feature extraction module includes a first convolution layer and a first activation function layer connected sequentially from front to back; The target detection module includes a second convolution layer, a second activation function layer, a third convolution layer, an average pooling layer and a feature addition layer, and the second convolution layer and the feature addition layer are jump-connected; The result output module includes a fully connected layer and a classification network layer.

5. The energy-based digital identity management method according to claim 4, characterized in that: include: Extract features of face image data using the first convolutional layer and the first activation function layer; Using the combination of the second convolutional layer, the second activation function layer, and the third convolutional layer to sample facial feature point information, using the average pooling layer to process different input facial features, and adjusting intermediate output parameters; The second convolution layer uses a 3×3 convolution kernel, a sliding step size of 1 and a padding of 1, and cooperates with the second activation function; the average pooling layer has a step size of 2 and no padding to perform feature dimensionality reduction; The third convolutional layer uses a 1×1 convolution kernel with a step size of 1 and no padding to fuse features.

6. The energy-based digital identity management method according to claim 1, characterized in that: The step S3 comprises: combining the relevant name of energy management, the timestamp and the random number into a character string, performing a hash operation on the character string through a hash function, and generating a unique identity identifier.

7. The energy-based digital identity management method according to claim 1, characterized in that: The step S4 includes: the user information includes the user's identity identifier, digital identity registration information, facial information and the RSA public key in the RSA key pair; the user uses the RSA private key in the RSA key pair to request data and digitally sign it to generate a signature result, and the server uses the RSA public key to verify the signature result; the user's request data is recorded and the usage record is encrypted, stored and backed up.

8. An energy-based digital identity management system, characterized in that: It includes information registration unit, identity authentication unit and identity management unit, among which: Information registration unit, used for users to register their digital identities; An identity authentication unit, used to create a face recognition model, combine the face recognition model with the user's real identity to perform dual identity authentication on the user; used to generate a unique identity identifier and RSA key pair for the user; The identity management unit is used to insert user information into the database and manage the user information.

9. An electronic device, characterized in that: It comprises a processor and a memory; the processor comprises the energy-based digital identity management system as claimed in claim 8.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes instructions; when the instructions are executed on the electronic device as claimed in claim 9, the electronic device is caused to execute the method as claimed in any one of claims 1 to 7.

Images