Business processing method and device, equipment, storage medium and program product

Abstract

The invention provides a business processing method and device, equipment, a storage medium and a program product, and relates to the technical field of computers. The method comprises the steps of obtaining a seed key in response to a service processing instruction input by a user; according to the service processing instruction, multiple segments of encrypted audio and video streams are sequentially sent to an authentication server, the encrypted audio and video streams are obtained by encrypting audio and video streams collected by the terminal equipment through a seed key, and the authentication server is used for performing identity authentication on a user; according to the service processing instruction, a service processing request is sent to a service server, the service processing request is used for requesting the service server to process a first part of service, and the first part of service is the service which can be executed before the authentication server determines the identity authentication result. According to the scheme, after the authentication server receives the first segment of audio and video stream, identity authentication is carried out on the user, so that the service processing efficiency is improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a business processing method, device, equipment, storage medium and program product. Background Art

[0002] Before processing various services, electronic devices need to authenticate the user's identity to ensure the security of service processing. For example, the service may be a payment service, a transfer service, etc.

[0003] In the related art, before requesting to process a certain service, a complete video of the user's face is usually obtained first, and the complete video is subjected to face verification processing to obtain the user's identity authentication result. When the identity authentication result is determined to be the identity authentication passed, the service processing begins. However, in the above process, it usually takes a long time to capture a complete video of the face, and it also takes a long time to authenticate the user, that is, after requesting to process a certain service, it takes a long time to start the service processing, resulting in low efficiency of service processing. Summary of the invention

[0004] The present application provides a business processing method, device, equipment, storage medium and program product to solve the problem of low efficiency of identity authentication and business processing in the prior art.

[0005] In a first aspect, the present application provides a business processing method, including:

[0006] Responding to a service processing instruction input by a user, obtaining a seed key;

[0007] According to the service processing instruction, multiple encrypted audio and video streams are sent to the authentication server in sequence, wherein the encrypted audio and video streams are obtained by encrypting the audio and video streams collected by the terminal device using the seed key, and the authentication server is used to authenticate the user;

[0008] According to the business processing instruction, a business processing request is sent to the business server, wherein the business processing request is used to request the business server to process a first part of the business, where the first part of the business is a business that can be executed before the authentication server determines the identity authentication result;

[0009] In a possible implementation, obtaining a seed key includes:

[0010] Sending a key acquisition request to the authentication server, wherein the key acquisition request includes a user identifier of the user;

[0011] Receiving a key response message sent by the authentication server;

[0012] If a key exists in the key response message, determining the key in the key response message as the seed key;

[0013] If the key does not exist in the key response message, the seed key is obtained through negotiation with the authentication server.

[0014] In a possible implementation, obtaining the seed key through negotiation with the authentication server includes:

[0015] Generate an initial key, and encrypt the initial key with a public key to obtain first information;

[0016] Generate a first random number, and encrypt the random number using the initial key to obtain second information;

[0017] The seed key is obtained through negotiation with the authentication server according to the first information and the second information.

[0018] In a possible implementation, obtaining the seed key through negotiation with the authentication server according to the first information and the second information includes:

[0019] Sending the first information and the second information to the authentication server;

[0020] receiving third information sent by the authentication server, where the third information is obtained by the authentication server encrypting a second random number using the initial key, and the authentication server is used to decrypt the first information using a private key to obtain the initial key;

[0021] Decrypting the third information using the initial key to obtain the second random number;

[0022] An XOR operation is performed on the first random number and the second random number to obtain the seed key.

[0023] In a possible implementation, multiple encrypted audio and video streams are sent to the authentication server in sequence, including:

[0024] After the terminal device acquires the i-th audio and video stream, the i-th audio and video stream is encrypted by the seed key to obtain the encrypted i-th audio and video stream;

[0025] Sending the encrypted i-th audio and video stream to the authentication server;

[0026] Here, i is 1, 2, ... in sequence until the terminal device finishes collecting the audio and video streams of the user.

[0027] In a possible implementation, after determining that the authentication server has determined to obtain the identity authentication result, notifying the service server to execute the second part of the service according to the identity authentication result to obtain the service processing result includes:

[0028] Receiving an authentication response message sent by the authentication server, wherein the authentication response message is used to instruct the authentication server to determine that the identity authentication result is obtained;

[0029] According to the authentication response message, a notification message is sent to the service server, wherein the notification message is used to indicate that the authentication server has obtained the identity authentication result and the identity authentication result is stored in a preset database, so that the service server obtains the identity authentication result from the preset database, and executes the second part of the service according to the identity authentication result to obtain the service processing result;

[0030] Receive the service processing result sent by the service server.

[0031] In a second aspect, an embodiment of the present application provides a service processing method, including:

[0032] receiving in sequence multiple encrypted audio and video streams sent by a terminal device, wherein the encrypted audio and video streams are obtained by encrypting the audio and video streams collected by the terminal device using a seed key;

[0033] Obtaining the seed key, and decrypting the received encrypted audio and video streams in sequence according to the seed key, and performing identity authentication on the user, until an identity authentication result is obtained;

[0034] Storing the identity authentication result in a preset database;

[0035] An authentication response message is sent to the terminal device, wherein the authentication response message is used to instruct the authentication server to determine that the identity authentication result is obtained, so that the terminal device notifies the business server to obtain the identity authentication result in the preset database, and executes the second part of the business according to the identity authentication result to obtain the business processing result. The business server is also used to execute the first part of the business before obtaining the business processing result.

[0036] In a possible implementation, obtaining the seed key includes:

[0037] If a key acquisition request sent by the terminal device is received and the authentication server stores a key corresponding to the user, determining the key corresponding to the user as the seed key;

[0038] If the key acquisition request is not received, or the authentication server does not store the key corresponding to the user, the seed key is obtained through negotiation with the terminal device.

[0039] In a possible implementation manner, obtaining the seed key through negotiation with the terminal device includes:

[0040] Receiving first information and second information sent by the terminal device, where the first information is obtained by encrypting an initial key using a public key, and the second information is obtained by encrypting a first random number using the initial key;

[0041] Decrypting the first information using a private key to obtain the initial key;

[0042] Decrypting the second information using the initial key to obtain the first random number;

[0043] generating a second random number;

[0044] An XOR operation is performed on the first random number and the second random number to obtain the seed key.

[0045] In a possible implementation, the method further includes:

[0046] Encrypting the second random number using the initial key to obtain third information;

[0047] Send the third information to the terminal device.

[0048] In a possible implementation, decrypting the received encrypted audio and video streams and performing identity authentication on the user in sequence according to the seed key until an identity authentication result is obtained includes:

[0049] Receiving the encrypted i-th audio and video stream sent by the terminal device;

[0050] Decrypting the encrypted i-th audio and video stream using the seed key to obtain the i-th audio and video stream;

[0051] Perform identity authentication on the user based on the previous i audio and video streams;

[0052] Among them, the i is 1, 2, ... in sequence until the identity authentication result is obtained, or the terminal device stops sending the audio and video stream.

[0053] In one possible implementation, the method includes:

[0054] Receiving a service processing request sent by a terminal device;

[0055] Execute a first part of services according to the service processing request, where the first part of services is services that can be executed before the authentication server determines the identity authentication result corresponding to the service processing request;

[0056] Receiving notification information sent by the terminal device, the notification information is used to indicate that the authentication server has obtained the identity authentication result;

[0057] According to the notification information, obtaining the identity authentication result in a preset database;

[0058] The second part of the business is executed according to the identity authentication result to obtain the business processing result.

[0059] In a third aspect, the present application provides a service processing device, including: an acquisition module, a sending module and a notification module, wherein:

[0060] The acquisition module is used to acquire a seed key in response to a service processing instruction input by a user.

[0061] The sending module is used to send multiple encrypted audio and video streams to the authentication server in sequence according to the business processing instructions. The encrypted audio and video streams are obtained by encrypting the audio and video streams collected by the terminal device using the seed key. The authentication server is used to authenticate the user.

[0062] The sending module is also used to send a business processing request to the business server according to the business processing instruction, and the business processing request is used to request the business server to process a first part of the business, and the first part of the business is the business that can be executed before the authentication server determines the identity authentication result.

[0063] The notification module is used to, after determining that the authentication server has obtained the identity authentication result, notify the service server to execute the second part of the service according to the identity authentication result to obtain the service processing result.

[0064] In a possible implementation manner, the acquisition module is specifically used to:

[0065] Sending a key acquisition request to the authentication server, wherein the key acquisition request includes a user identifier of the user;

[0066] Receiving a key response message sent by the authentication server;

[0067] If a key exists in the key response message, determining the key in the key response message as the seed key;

[0068] If the key does not exist in the key response message, the seed key is obtained through negotiation with the authentication server.

[0069] In a possible implementation manner, the acquisition module is specifically used to:

[0070] Generate an initial key, and encrypt the initial key with a public key to obtain first information;

[0071] Generate a first random number, and encrypt the random number using the initial key to obtain second information;

[0072] The seed key is obtained through negotiation with the authentication server according to the first information and the second information.

[0073] In a possible implementation manner, the acquisition module is specifically used to:

[0074] Sending the first information and the second information to the authentication server;

[0075] receiving third information sent by the authentication server, where the third information is obtained by the authentication server encrypting a second random number using the initial key, and the authentication server is used to decrypt the first information using a private key to obtain the initial key;

[0076] Decrypting the third information using the initial key to obtain the second random number;

[0077] An XOR operation is performed on the first random number and the second random number to obtain the seed key.

[0078] In a possible implementation manner, the sending module is specifically configured to:

[0079] After the terminal device acquires the i-th audio and video stream, the i-th audio and video stream is encrypted by the seed key to obtain the encrypted i-th audio and video stream;

[0080] Sending the encrypted i-th audio and video stream to the authentication server;

[0081] Here, i is 1, 2, ... in sequence until the terminal device finishes collecting the audio and video streams of the user.

[0082] In a possible implementation, the notification module is specifically used to:

[0083] Receiving an authentication response message sent by the authentication server, wherein the authentication response message is used to instruct the authentication server to determine that the identity authentication result is obtained;

[0084] According to the authentication response message, a notification message is sent to the service server, wherein the notification message is used to indicate that the authentication server has obtained the identity authentication result and the identity authentication result is stored in a preset database, so that the service server obtains the identity authentication result from the preset database, and executes the second part of the service according to the identity authentication result to obtain the service processing result;

[0085] Receive the service processing result sent by the service server.

[0086] In a fourth aspect, the present application provides a service processing device, including: a receiving module, an acquiring module, a storing module and a sending module, wherein:

[0087] The receiving module is used to sequentially receive multiple encrypted audio and video streams sent by the terminal device, where the encrypted audio and video streams are obtained by encrypting the audio and video streams collected by the terminal device using a seed key;

[0088] The acquisition module is used to obtain the seed key, and sequentially decrypt the received encrypted audio and video streams according to the seed key, and perform identity authentication on the user until an identity authentication result is obtained;

[0089] The storage module is used to store the identity authentication result in a preset database;

[0090] The sending module is used to send an authentication response message to the terminal device, and the authentication response message is used to instruct the authentication server to determine that the identity authentication result is obtained, so that the terminal device notifies the business server to obtain the identity authentication result in the preset database, and executes the second part of the business according to the identity authentication result to obtain the business processing result. The business server is also used to execute the first part of the business before obtaining the business processing result.

[0091] In a possible implementation manner, the acquisition module is specifically used to:

[0092] If a key acquisition request sent by the terminal device is received and the authentication server stores a key corresponding to the user, determining the key corresponding to the user as the seed key;

[0093] If the key acquisition request is not received, or the authentication server does not store the key corresponding to the user, the seed key is obtained through negotiation with the terminal device.

[0094] In a possible implementation manner, the acquisition module is specifically used to:

[0095] Receiving first information and second information sent by the terminal device, where the first information is obtained by encrypting an initial key using a public key, and the second information is obtained by encrypting a first random number using the initial key;

[0096] Decrypting the first information using a private key to obtain the initial key;

[0097] Decrypting the second information using the initial key to obtain the first random number;

[0098] generating a second random number;

[0099] An XOR operation is performed on the first random number and the second random number to obtain the seed key.

[0100] In a possible implementation, the device further includes an encryption module, wherein:

[0101] The encryption module is used to encrypt the second random number using the initial key to obtain third information;

[0102] The sending module is further used to send the third information to the terminal device.

[0103] In a possible implementation manner, the acquisition module is specifically used to:

[0104] Receiving the encrypted i-th audio and video stream sent by the terminal device;

[0105] Decrypting the encrypted i-th audio and video stream using the seed key to obtain the i-th audio and video stream;

[0106] Perform identity authentication on the user based on the previous i audio and video streams;

[0107] Among them, the i is 1, 2, ... in sequence until the identity authentication result is obtained, or the terminal device stops sending the audio and video stream.

[0108] In the fifth aspect, an embodiment of the present application provides a terminal device, comprising: at least one processor and a memory; the memory stores computer execution instructions; the at least one processor executes the computer execution instructions stored in the memory, so that the at least one processor executes the business processing method described in the first aspect and various possible designs of the first aspect.

[0109] In the sixth aspect, an embodiment of the present application provides an authentication server, comprising: at least one processor and a memory; the memory stores computer execution instructions; the at least one processor executes the computer execution instructions stored in the memory, so that the at least one processor executes the business processing method described in the second aspect and various possible designs of the second aspect.

[0110] In the seventh aspect, an embodiment of the present application provides a computer-readable storage medium, in which computer execution instructions are stored. When the processor executes the computer execution instructions, the business processing method described in the first aspect and various possible designs of the first aspect is implemented.

[0111] In an eighth aspect, an embodiment of the present application provides a computer-readable storage medium, in which computer execution instructions are stored. When a processor executes the computer execution instructions, the business processing method described in the second aspect and various possible designs of the second aspect is implemented.

[0112] In a ninth aspect, an embodiment of the present application provides a computer program product, including a computer program. When the computer program is executed by a processor, it implements the business processing method described in the first aspect and various possible designs of the first aspect.

[0113] In a tenth aspect, an embodiment of the present application provides a computer program product, including a computer program. When the computer program is executed by a processor, it implements the business processing method described in the second aspect and various possible designs of the second aspect.

[0114] The business processing method, device, equipment, storage medium and program product provided by the present application can send multiple audio and video streams to the authentication server in sequence after the terminal device obtains the business processing instruction. After the authentication server receives the first audio and video stream, it starts to authenticate the user. The authentication server does not need to perform identity authentication after receiving the complete video, which improves the efficiency of identity authentication. In addition, before the authentication server obtains the identity authentication result, the business server can first perform a part of the business (this part of the business does not need to rely on the identity authentication result). After the authentication server obtains the identity authentication result, the business server performs another part of the business, that is, business processing and identity authentication can be performed in parallel, further improving the efficiency of business processing. BRIEF DESCRIPTION OF THE DRAWINGS

[0115] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0116] Figure 1A schematic diagram of the system architecture provided for an embodiment of the present application;

[0117] Figure 2 A flowchart of a business processing method provided in an embodiment of the present application;

[0118] Figure 3 A schematic diagram of a process for negotiating a seed key provided in an embodiment of the present application;

[0119] Figure 4 A flowchart of another business processing method provided for an embodiment of the present application;

[0120] Figure 5 A schematic diagram of the structure of a service processing device provided in an embodiment of the present application;

[0121] Figure 6 A schematic diagram of the structure of another service processing device provided in an embodiment of the present application;

[0122] Figure 7 A schematic diagram of the structure of another service processing device provided in an embodiment of the present application;

[0123] Figure 8 A schematic diagram of the structure of a terminal device provided in an embodiment of the present application;

[0124] Fig. 9 A schematic diagram of the structure of the authentication server provided in the embodiment of the present application.

[0125] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0126] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0127] In the technical solution of this application, the collection, storage, use, processing, transmission, provision and disclosure of information such as financial data or user data involved shall comply with the provisions of relevant laws and regulations and shall not violate public order and good morals.

[0128] It should be noted that in the embodiments of the present application, certain software, components, models and other existing solutions in the industry may be mentioned, and they should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of the present application, but it does not mean that the applicant has or will necessarily use the solution.

[0129] For ease of understanding, the following Figure 1 , the system architecture applicable to the embodiments of the present application is described.

[0130] Figure 1 This is a schematic diagram of the system architecture provided by the embodiment of this application. Figure 1 , including a terminal device 101, an authentication server 102 and a business server 103.

[0131] The user may input a service processing instruction in the terminal device 101 , and the terminal device 101 may request the authentication server 103 to perform identity authentication on the user and request the service server 102 to perform service processing according to the service processing instruction.

[0132] The terminal device 101 can be an electronic device, for example, the terminal device can be a mobile phone, a tablet computer, a laptop computer, etc. A target application can be set in the terminal device 101, and the user can input business processing instructions through the target application. For example, the target application can be a shopping application, an instant payment application, etc.

[0133] In the related art, before requesting to process a certain service, a complete video of the user's face is usually obtained first, and the complete video is subjected to face verification processing to obtain the user's identity authentication result. When the identity authentication result is determined to be the identity authentication passed, the service processing begins. However, in the above process, it usually takes a long time to capture a complete video of the face, and it also takes a long time to authenticate the user, that is, after requesting to process a certain service, it takes a long time to start the service processing, resulting in low efficiency of service processing.

[0134] In view of the above technical problems, in the embodiment of the present application, after the terminal device obtains the service processing instruction, it can send multiple audio and video streams to the authentication server in sequence. After the authentication server receives the first audio and video stream, it starts to authenticate the user. The authentication server does not need to perform identity authentication after receiving the complete video, which improves the efficiency of identity authentication. In addition, before the authentication server obtains the identity authentication result, the service server can first perform a part of the service (this part of the service does not need to rely on the identity authentication result), and after the authentication server obtains the identity authentication result, the service server performs another part of the service, that is, service processing and identity authentication can be performed in parallel, further improving the efficiency of service processing.

[0135] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0136] Figure 2 This is a flowchart of a business processing method provided by an embodiment of the present application. Figure 2 As shown, the method may include the following steps:

[0137] S201. In response to a service processing instruction input by a user, a terminal device and an authentication server respectively obtain a seed key.

[0138] The business processing instruction is used to request the execution of a target business, for example, the target business may be a transfer business, a payment business, etc.

[0139] For example, the terminal device may display a payment page including a payment control. After the user clicks the payment control, the terminal device may obtain a business processing instruction, which is used to request a payment service.

[0140] The seed key can be obtained in the following manner: sending a key acquisition request to an authentication server, the key acquisition request including a user identifier of a user; receiving a key response message sent by the authentication server; if a key exists in the key response message, determining the key in the key response message as the seed key; if a key does not exist in the key response message, negotiating with the authentication server to obtain the seed key.

[0141] If there is a key in the key response message, it means that the authentication server and the terminal device have already negotiated a key. In this case, the negotiated key can be determined as the seed key. If there is no key in the authentication response message, it means that there is no negotiated key between the authentication server and the terminal device. In this case, the terminal device needs to negotiate with the authentication server to obtain the seed key.

[0142] It should be noted that when the terminal device obtains the seed key, the authentication server also obtains the same seed key.

[0143] After S201 , S202 and S205 are executed in parallel.

[0144] S202. The terminal device sends multiple encrypted audio and video streams to the authentication server in sequence according to the service processing instruction.

[0145] The encrypted audio and video stream is obtained by encrypting the audio and video stream collected by the terminal device using a seed key.

[0146] The terminal device is provided with a camera and / or a microphone, and after the terminal device obtains the service processing instruction, the terminal device can start to collect audio and video streams. For example, the audio and video stream can be a video stream collected by the camera, or an audio stream collected by the microphone, or a media stream including a video stream and an audio stream collected by the camera and the microphone.

[0147] Every time the terminal device collects an audio or video stream, it encrypts the audio or video stream using the seed key and sends the encrypted audio or video data to the authentication server until the terminal device finishes collecting the user's audio or video stream.

[0148] Multiple encrypted audio and video streams can be sent to the authentication server in sequence in the following manner: after the terminal device captures the i-th audio and video stream, the i-th audio and video stream is encrypted using a seed key to obtain the i-th encrypted audio and video stream; the i-th encrypted audio and video stream is sent to the authentication server; wherein i is 1, 2, ... in sequence until the terminal device finishes capturing the user's audio and video stream.

[0149] For example, assuming that the duration of an audio and video stream is 1ms, after the terminal device acquires the first audio and video stream of the 1st ms, it encrypts the first audio and video stream using the seed key and sends the first encrypted audio and video stream to the authentication server. After the terminal device acquires the second audio and video stream of the 1st to 2ms, it encrypts the second audio and video stream using the seed key and sends the second encrypted audio and video stream to the authentication server. This process continues until the terminal device finishes acquiring the audio and video stream.

[0150] For any audio or video stream, the audio or video stream can be encrypted in the following way: convert the audio or video stream into byte form to obtain video stream data in byte form, and use the seed key to perform an XOR operation with the audio or video stream data to obtain the encrypted audio or video stream.

[0151] The terminal device can end the collection of audio and video streams in the following situations:

[0152] Case 1: After receiving the identity authentication result sent by the authentication server, the terminal device ends collecting the audio and video streams.

[0153] Case 2: After the total duration of the collected audio and video streams has reached a preset threshold, the terminal device ends collecting the audio and video streams.

[0154] S203: The authentication server decrypts the received encrypted audio and video streams in sequence according to the seed key, and performs identity authentication on the user until an identity authentication result is obtained.

[0155] Every time the authentication server receives an encrypted audio or video stream, it decrypts the encrypted audio or video stream using the seed key, and performs identity authentication on the user based on all the received audio or video streams until an authentication result is obtained or the terminal device stops sending the audio or video stream.

[0156] The identity authentication result can be obtained in the following manner: after receiving the i-th encrypted audio and video stream sent by the terminal device, the encrypted i-th audio and video stream is decrypted by using the seed key to obtain the i-th audio and video stream; the user is authenticated based on the previous i audio and video streams; wherein i is 1, 2, ... in sequence until the identity authentication result is obtained, or the terminal device stops sending the audio and video stream.

[0157] For example, suppose that after receiving the first encrypted audio and video stream sent by the terminal device, the authentication server decrypts the first encrypted audio and video stream using the seed key, and performs identity authentication on the user based on the decrypted first audio and video stream. After receiving the second encrypted audio and video stream sent by the terminal device, the second encrypted audio and video stream is decrypted using the seed key, and the user is authenticated based on the decrypted first and second audio and video streams. This process is repeated until the authentication result is obtained, or the terminal device stops sending the audio and video stream.

[0158] After decrypting and obtaining at least one arbitrary audio and video stream, identity authentication processing can be performed in the following manner: extracting biometric information from at least one audio and video stream, obtaining user feature information stored in a pre-stored database, performing feature comparison between the extracted biometric information and the pre-stored user feature information, and determining whether the comparison result reaches a preset threshold. If the comparison result is greater than or equal to the preset threshold, the identity authentication result is a successful authentication; if the comparison result is less than the preset threshold, the identity authentication result is a failed authentication.

[0159] Optionally, after obtaining the identity authentication result, the authentication server may also send the identity authentication result to the terminal device.

[0160] S204: The authentication server stores the identity authentication result in a preset database.

[0161] The authentication server can store the identity authentication result and the user identification in a preset database in correspondence.

[0162] The user identifier can be the user's ID number, card number, or a unique identifier assigned to the user.

[0163] S205. The terminal device sends a service processing request to the service server according to the service processing instruction.

[0164] The service processing request is used to request the service server to execute the target service. For example, the target service may be a transfer service, a payment service, etc.

[0165] It should be noted that after the terminal device obtains the service processing instruction, the terminal device can send a service processing request to the service server. That is, S202 and S205 can be executed in parallel.

[0166] S206: The service server processes the first part of the service according to the service processing request.

[0167] The first part of the services is the services that can be executed before the authentication server determines the identity authentication result.

[0168] When the business processing request is different, the first part of the business is also different.

[0169] For example, when the business processing request is used to request the business server to perform a transfer service, the first part of the service may include: verifying whether the transfer-out account is valid, verifying whether the transfer-out account has sufficient balance, and recording transaction details.

[0170] For example, when the service processing request is used to request the service server to change user information, the first part of the service may include: querying the user's current information, and verifying whether the changed information meets the preset format requirements, etc.

[0171] S207: The authentication server sends an authentication response message to the terminal device.

[0172] The authentication response message is used to instruct the authentication server to determine the identity authentication result.

[0173] S208. The terminal device notifies the service server to execute the second part of the service according to the identity authentication result based on the authentication response message to obtain the service processing result.

[0174] The second part of the business is the business performed after the authentication server determines the identity authentication result.

[0175] When the business processing request is different, the second part of the business is also different.

[0176] For example, when the service processing request is used to request the service server to perform a transfer service, the second part of the service may include: transferring the amount in the transfer-out account to the transfer-in account, and sending a transfer prompt message.

[0177] For example, when the service processing request is used to request the service server to change user information, the second part of the service may include: modifying the current information to the changed information.

[0178] The terminal device may send a notification message to the service server to notify the service server to execute the second part of the service according to the identity authentication result. The notification information is used to indicate that the authentication server has obtained the identity authentication result and the identity authentication result is stored in the preset database, so that the service server obtains the identity authentication result in the preset database and executes the second part of the service according to the identity authentication result to obtain the service processing result.

[0179] Optionally, after the service server determines that the service processing result is obtained, the service server may also send the service processing result to the terminal device.

[0180] In the embodiment of the present application, after the terminal device obtains the service processing instruction, it can send multiple audio and video streams to the authentication server in sequence. After the authentication server receives the first audio and video stream, it starts to authenticate the user. The authentication server does not need to perform identity authentication after receiving the complete video, which improves the efficiency of identity authentication. In addition, before the authentication server obtains the identity authentication result, the service server can first perform a part of the service (this part of the service does not need to rely on the identity authentication result). After the authentication server obtains the identity authentication result, the service server performs another part of the service, that is, service processing and identity authentication can be performed in parallel, further improving the efficiency of service processing.

[0181] Based on any of the above embodiments, Figure 3 , the process of negotiating the seed key between the terminal device and the authentication server is described in detail.

[0182] Figure 3 This is a flowchart of the method for negotiating a seed key provided in an embodiment of the present application. Figure 3 , the method may include:

[0183] S301. The terminal device generates an initial key, and obtains first information by encrypting the initial key with a public key.

[0184] For example, assuming that the initial key generated by the terminal device is key, the initial key key is encrypted using the public key, and the first information M1 can be obtained.

[0185] S302. The terminal device generates a first random number, and encrypts the first random number using an initial key to obtain second information.

[0186] For example, assuming that the first random number generated by the terminal device is R1, after R1 is encrypted by the initial key key, the second information M2 can be obtained.

[0187] The terminal device may determine a preset length and generate a first random number according to the preset length. The length of the first random number is the preset length.

[0188] S303: The terminal device sends the first information and the second information to the authentication server.

[0189] S304: The authentication server decrypts the first information using the private key to obtain an initial key.

[0190] The private key and the public key in S301 form a key pair.

[0191] S305: The authentication server decrypts the second information using the initial key to obtain a first random number.

[0192] For example, assuming that the first random number is R1, the terminal device encrypts R1 to obtain the second information, and the authentication server uses the initial key to decrypt the second information to obtain the first random number R1.

[0193] S306: The authentication server generates a second random number.

[0194] The terminal device may determine a preset length and generate a second random number according to the preset length. The length of the second random number is the preset length.

[0195] The length of the second random number is the same as the length of the first random number.

[0196] S307: The authentication server performs an XOR operation on the first random number and the second random number to obtain a seed key.

[0197] The length of the seed key is the same as the length of the first random number and the length of the second random number.

[0198] For example, assuming that the first random number is R1, the second random number is R2, and the lengths of R1 and R2 are both 128 bits, performing the above XOR operation on R1 and R2 according to corresponding bits can obtain a seed key with a length of 128 bits.

[0199] S308. The authentication server encrypts the second random number using the initial key to obtain third information.

[0200] For example, assuming that the third information is M3 and the second random number is R2, M3 can be obtained after R2 is encrypted with the initial key key generated by the terminal device.

[0201] S309: The authentication server sends third information to the terminal device.

[0202] S310. The terminal device decrypts the third information using the initial key to obtain a second random number.

[0203] S311. The terminal device performs an XOR operation on the first random number and the second random number to obtain a seed key.

[0204] The execution process of S311 may refer to S307 and will not be described in detail here.

[0205] exist Figure 3 In the illustrated embodiment, the terminal device and the authentication server obtain the same seed key through negotiation. During the negotiation, the information exchanged between the terminal device and the authentication server is encrypted information, thereby preventing the seed key from being leaked and the exchanged information from being tampered with during the negotiation, thereby ensuring the security of the seed key obtained through negotiation.

[0206] Based on any of the above embodiments, Figure 4 , further detailed explanation of the business processing methods.

[0207] Figure 4 A flowchart of another business processing method provided in an embodiment of the present application. Figure 4 , the method may include:

[0208] S401. The terminal device responds to a service processing instruction input by a user.

[0209] The business processing instruction is used to request the execution of a target business, for example, the target business may be a transfer business, a payment business, etc.

[0210] After S401 , S402 and S410 may be executed in parallel.

[0211] The execution process of S401 can refer to the execution process of S201, which will not be described in detail here.

[0212] S402: The terminal device sends a key acquisition request to the authentication server.

[0213] The key acquisition request includes a user identifier of the user.

[0214] The key acquisition request is used to request to obtain a key.

[0215] S403: The authentication server sends a key response message to the terminal device.

[0216] S404: The terminal device receives the key response message sent by the authentication server and determines whether the key exists in the key response message.

[0217] If yes, execute S405.

[0218] If not, execute S406.

[0219] S405: Determine the key in the key response message as the seed key.

[0220] If the key response message contains a key, it means that the terminal device and the authentication server already have a negotiated key. In this case, the key in the key response message can be determined as the seed key.

[0221] S406: The terminal device negotiates with the authentication server to obtain a seed key.

[0222] If the key does not exist in the key response message, the terminal device and the authentication server can negotiate the seed key. The process can be seen in Figure 3 The embodiments shown will not be described in detail here.

[0223] S407: The terminal device sends multiple encrypted audio and video streams to the authentication server in sequence according to the service processing instruction.

[0224] S408: The authentication server decrypts the received encrypted audio and video streams in sequence according to the seed key, and performs identity authentication on the user until an identity authentication result is obtained.

[0225] The execution process of S407-S408 can refer to the execution process of S202-S203, which will not be repeated here.

[0226] S409: The authentication server stores the identity authentication result in a preset database.

[0227] The preset database includes the identity authentication result and the corresponding user identification.

[0228] The user identifier can be the user's ID number, card number, or a unique identifier assigned to the user.

[0229] S410. The terminal device sends a service processing request to the service server according to the service processing instruction.

[0230] The service processing request is used to request the service server to execute the target service. For example, the target service may be a transfer service, a payment service, etc.

[0231] It should be noted that after the terminal device obtains the service processing instruction, the terminal device can send a service processing request to the service server. That is, S402 and S410 can be executed in parallel.

[0232] S411. The service server executes the first part of the service according to the service processing request.

[0233] S412: The authentication server sends an authentication response message to the terminal device.

[0234] The authentication response message is used to instruct the authentication server to determine the identity authentication result.

[0235] The execution process of S411-S412 can refer to the execution process of S206-S207, which will not be repeated here.

[0236] S413: The terminal device sends notification information to the service server according to the authentication response message.

[0237] The notification message is used to notify the business server to obtain the corresponding identity authentication result in the authentication server according to the user identifier.

[0238] S414. The business server obtains the identity authentication result from the preset database according to the notification information.

[0239] S415. The business server executes the second part of the business according to the identity authentication result and obtains the business processing result.

[0240] In the embodiment of the present application, after the terminal device obtains the service processing instruction, it can send multiple audio and video streams to the authentication server in sequence. After the authentication server receives the first audio and video stream, it starts to authenticate the user. The authentication server does not need to perform identity authentication after receiving the complete video, which improves the efficiency of identity authentication. In addition, before the authentication server obtains the identity authentication result, the service server can first perform a part of the service (this part of the service does not need to rely on the identity authentication result). After the authentication server obtains the identity authentication result, the service server performs another part of the service, that is, service processing and identity authentication can be performed in parallel, further improving the efficiency of service processing.

[0241] Figure 5 For a schematic diagram of a business processing device provided in an embodiment of the present application, see Figure 5 The service processing device 10 includes an acquisition module 11, a sending module 12 and a notification module 13, wherein:

[0242] The acquisition module 11 is used to acquire a seed key in response to a service processing instruction input by a user.

[0243] The sending module 12 is used to send multiple encrypted audio and video streams to the authentication server in sequence according to the business processing instructions. The encrypted audio and video streams are obtained by encrypting the audio and video streams collected by the terminal device using the seed key. The authentication server is used to authenticate the user.

[0244] The sending module 12 is also used to send a business processing request to the business server according to the business processing instruction, wherein the business processing request is used to request the business server to process a first part of the business, and the first part of the business is the business that can be executed before the authentication server determines the identity authentication result.

[0245] The notification module 13 is used to, after determining that the authentication server has obtained the identity authentication result, notify the service server to execute the second part of the service according to the identity authentication result to obtain the service processing result.

[0246] The business processing device provided in the embodiment of the present application can execute the method shown in the above method embodiment, and its implementation principle and beneficial effects are similar, which will not be repeated here.

[0247] In a possible implementation manner, the acquisition module 11 is specifically used for:

[0248] Sending a key acquisition request to the authentication server, wherein the key acquisition request includes a user identifier of the user;

[0249] Receiving a key response message sent by the authentication server;

[0250] If a key exists in the key response message, determining the key in the key response message as the seed key;

[0251] If the key does not exist in the key response message, the seed key is obtained through negotiation with the authentication server.

[0252] In a possible implementation manner, the acquisition module 11 is specifically used for:

[0253] Generate an initial key, and encrypt the initial key with a public key to obtain first information;

[0254] Generate a first random number, and encrypt the random number using the initial key to obtain second information;

[0255] The seed key is obtained through negotiation with the authentication server according to the first information and the second information.

[0256] In a possible implementation manner, the acquisition module 11 is specifically used for:

[0257] Sending the first information and the second information to the authentication server;

[0258] receiving third information sent by the authentication server, where the third information is obtained by the authentication server encrypting a second random number using the initial key, and the authentication server is used to decrypt the first information using a private key to obtain the initial key;

[0259] Decrypting the third information using the initial key to obtain the second random number;

[0260] An XOR operation is performed on the first random number and the second random number to obtain the seed key.

[0261] In a possible implementation manner, the sending module 12 is specifically configured to:

[0262] After the terminal device acquires the i-th audio and video stream, the i-th audio and video stream is encrypted by the seed key to obtain the encrypted i-th audio and video stream;

[0263] Sending the encrypted i-th audio and video stream to the authentication server;

[0264] Here, i is 1, 2, ... in sequence until the terminal device finishes collecting the audio and video streams of the user.

[0265] In a possible implementation manner, the notification module 13 is specifically configured to:

[0266] Receiving an authentication response message sent by the authentication server, wherein the authentication response message is used to instruct the authentication server to determine that the identity authentication result is obtained;

[0267] According to the authentication response message, a notification message is sent to the service server, wherein the notification message is used to indicate that the authentication server has obtained the identity authentication result and the identity authentication result is stored in a preset database, so that the service server obtains the identity authentication result from the preset database, and executes the second part of the service according to the identity authentication result to obtain the service processing result;

[0268] Receive the service processing result sent by the service server.

[0269] The service processing device provided in this embodiment can be used to execute the service processing method shown in the above method embodiment. Its implementation principle and technical effect are similar and will not be described in detail here.

[0270] Figure 6 For a structural diagram of another service processing device provided in an embodiment of the present application, see Figure 6 The service processing device 20 includes a receiving module 21, an acquiring module 22, a storage module 23 and a sending module 24, wherein:

[0271] The receiving module 21 is used to sequentially receive multiple encrypted audio and video streams sent by the terminal device, where the encrypted audio and video streams are obtained by encrypting the audio and video streams collected by the terminal device using a seed key;

[0272] The acquisition module 22 is used to obtain the seed key, and decrypt the received encrypted audio and video streams in sequence according to the seed key, and perform identity authentication on the user until an identity authentication result is obtained;

[0273] The storage module 23 is used to store the identity authentication result in a preset database;

[0274] The sending module 24 is used to send an authentication response message to the terminal device, and the authentication response message is used to instruct the authentication server to determine that the identity authentication result is obtained, so that the terminal device notifies the business server to obtain the identity authentication result in the preset database, and executes the second part of the business according to the identity authentication result to obtain the business processing result. The business server is also used to execute the first part of the business before obtaining the business processing result.

[0275] The business processing device provided in the embodiment of the present application can execute the method shown in the above method embodiment, and its implementation principle and beneficial effects are similar, which will not be repeated here.

[0276] In a possible implementation manner, the acquisition module 22 is specifically configured to:

[0277] If a key acquisition request sent by the terminal device is received and the authentication server stores a key corresponding to the user, determining the key corresponding to the user as the seed key;

[0278] If the key acquisition request is not received, or the authentication server does not store the key corresponding to the user, the seed key is obtained through negotiation with the terminal device.

[0279] In a possible implementation manner, the acquisition module 22 is specifically configured to:

[0280] Receiving first information and second information sent by the terminal device, where the first information is obtained by encrypting an initial key using a public key, and the second information is obtained by encrypting a first random number using the initial key;

[0281] Decrypting the first information using a private key to obtain the initial key;

[0282] Decrypting the second information using the initial key to obtain the first random number;

[0283] generating a second random number;

[0284] An XOR operation is performed on the first random number and the second random number to obtain the seed key.

[0285] Figure 7 A schematic diagram of the structure of another service processing device provided in an embodiment of the present application. Figure 6 Based on the examples shown, see Figure 7 The service processing device 20 further includes an encryption module 25, wherein:

[0286] The encryption module is used to encrypt the second random number using the initial key to obtain third information;

[0287] The sending module is further used to send the third information to the terminal device.

[0288] In a possible implementation manner, the acquisition module 22 is specifically configured to:

[0289] Receiving the encrypted i-th audio and video stream sent by the terminal device;

[0290] Decrypting the encrypted i-th audio and video stream using the seed key to obtain the i-th audio and video stream;

[0291] Perform identity authentication on the user based on the previous i audio and video streams;

[0292] Among them, the i is 1, 2, ... in sequence until the identity authentication result is obtained, or the terminal device stops sending the audio and video stream.

[0293] The service processing device provided in this embodiment can be used to execute the service processing method shown in the above method embodiment. Its implementation principle and technical effect are similar and will not be described in detail here.

[0294] Figure 8 This is a schematic diagram of the structure of the terminal device provided in the embodiment of the present application. Figure 8 As shown, the terminal device 30 may include: a transceiver 31 , a processor 32 and a memory 33 .

[0295] The processor 32 executes the computer execution instructions stored in the memory, so that the processor 32 executes the scheme in the above embodiment. The processor 32 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, discrete gates or transistor logic devices, and discrete hardware components.

[0296] The memory 33 is connected to the processor 32 via a system bus and completes communication between them. The memory 33 is used to store computer program instructions.

[0297] The transceiver 31 may be used to obtain tasks to be executed and configuration information of the tasks to be executed.

[0298] Fig. 9 This is a schematic diagram of the structure of the authentication server provided in the embodiment of the present application. Fig. 9 As shown, the authentication server 40 may include: a transceiver 41 , a processor 42 and a memory 43 .

[0299] The processor 42 executes the computer execution instructions stored in the memory, so that the processor 42 executes the scheme in the above embodiment. The processor 42 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, discrete gates or transistor logic devices, and discrete hardware components.

[0300] The memory 43 is connected to the processor 42 via a system bus and completes communication between them. The memory 43 is used to store computer program instructions.

[0301] The transceiver 41 may be used to obtain tasks to be executed and configuration information of the tasks to be executed.

[0302] The system bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application is not limited to only one bus or one type of bus. The system bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus. The transceiver is used to realize the communication between the database access device and other computers (such as clients, read-write libraries, and read-only libraries).

[0303] The memory may include random access memory (RAM) and may also include non-volatile memory (VNM).

[0304] An embodiment of the present application also provides a chip for running instructions, which is used to execute the technical solution of the business processing method in the above embodiment.

[0305] An embodiment of the present application further provides a computer-readable storage medium, in which computer instructions are stored. When the computer instructions are executed on a computer, the computer executes the technical solution of the business processing method of the above embodiment.

[0306] An embodiment of the present application also provides a computer program product, which includes a computer program stored in a computer-readable storage medium. At least one processor can read the computer program from the computer-readable storage medium. When at least one processor executes the computer program, it can implement the technical solution of the business processing method in the above embodiment.

[0307] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of modules is only a logical function division, and there may be other division methods in actual implementation, such as multiple modules can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or modules, which can be electrical, mechanical or other forms.

[0308] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to implement the solution of this embodiment.

[0309] In addition, each functional module in each embodiment of the present application can be integrated into one processing unit, or each module can exist physically separately, or two or more modules can be integrated into one unit. The above-mentioned module-composed unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

[0310] The above-mentioned integrated module implemented in the form of a software function module can be stored in a computer-readable storage medium. The above-mentioned software function module is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to perform some steps of the methods of various embodiments of the present application.

[0311] The above storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The storage medium can be any available medium that can be accessed by a general or special purpose computer.

[0312] An exemplary storage medium is coupled to a processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an application specific integrated circuit (ASIC). Of course, the processor and the storage medium can also exist as discrete components in an electronic control unit or a main control device.

[0313] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0314] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present application.

Claims

1. A business processing method, characterized in that: Applied to a terminal device, the method comprises: Responding to a service processing instruction input by a user, obtaining a seed key; According to the service processing instruction, multiple encrypted audio and video streams are sent to the authentication server in sequence, wherein the encrypted audio and video streams are obtained by encrypting the audio and video streams collected by the terminal device using the seed key, and the authentication server is used to authenticate the user; According to the business processing instruction, a business processing request is sent to the business server, wherein the business processing request is used to request the business server to process a first part of the business, where the first part of the business is a business that can be executed before the authentication server determines the identity authentication result; After determining that the authentication server has obtained the identity authentication result, the service server is notified to execute the second part of the service according to the identity authentication result to obtain the service processing result.

2. The method according to claim 1, characterized in that: Get the seed key, including: Sending a key acquisition request to the authentication server, wherein the key acquisition request includes a user identifier of the user; Receiving a key response message sent by the authentication server; If a key exists in the key response message, determining the key in the key response message as the seed key; If the key does not exist in the key response message, the seed key is obtained through negotiation with the authentication server.

3. The method according to claim 2, characterized in that Negotiating with the authentication server to obtain the seed key includes: Generate an initial key, and encrypt the initial key with a public key to obtain first information; Generate a first random number, and encrypt the random number using the initial key to obtain second information; The seed key is obtained through negotiation with the authentication server according to the first information and the second information.

4. The method according to claim 3, characterized in that Obtaining the seed key through negotiation with the authentication server according to the first information and the second information includes: Sending the first information and the second information to the authentication server; receiving third information sent by the authentication server, where the third information is obtained by the authentication server encrypting a second random number using the initial key, and the authentication server is used to decrypt the first information using a private key to obtain the initial key; Decrypting the third information using the initial key to obtain the second random number; An XOR operation is performed on the first random number and the second random number to obtain the seed key.

5. The method according to any one of claims 1 to 4, characterized in that: Send multiple encrypted audio and video streams to the authentication server in sequence, including: After the terminal device acquires the i-th audio and video stream, the i-th audio and video stream is encrypted by the seed key to obtain the encrypted i-th audio and video stream; Sending the encrypted i-th audio and video stream to the authentication server; Here, i is 1, 2, ... in sequence until the terminal device finishes collecting the audio and video streams of the user.

6. The method according to any one of claims 1 to 5, characterized in that: After determining that the authentication server has determined to obtain the identity authentication result, notifying the service server to execute the second part of the service according to the identity authentication result to obtain the service processing result, including: Receiving an authentication response message sent by the authentication server, wherein the authentication response message is used to instruct the authentication server to determine that the identity authentication result is obtained; According to the authentication response message, a notification message is sent to the service server, wherein the notification message is used to indicate that the authentication server has obtained the identity authentication result and the identity authentication result is stored in a preset database, so that the service server obtains the identity authentication result from the preset database, and executes the second part of the service according to the identity authentication result to obtain the service processing result; Receive the service processing result sent by the service server.

7. A business processing method, characterized in that: Applied to an authentication server, the method comprises: receiving in sequence multiple segments of encrypted audio and video streams sent by a terminal device, wherein the encrypted audio and video streams are obtained by encrypting the audio and video streams collected by the terminal device using a seed key; Obtain the seed key, and decrypt the received encrypted audio and video streams in sequence according to the seed key, and perform identity authentication on the user until an identity authentication result is obtained; Storing the identity authentication result in a preset database; An authentication response message is sent to the terminal device, wherein the authentication response message is used to instruct the authentication server to determine that the identity authentication result is obtained, so that the terminal device notifies the business server to obtain the identity authentication result in the preset database, and executes the second part of the business according to the identity authentication result to obtain the business processing result. The business server is also used to execute the first part of the business before obtaining the business processing result.

8. The method according to claim 7, characterized in that Obtaining the seed key includes: If a key acquisition request sent by the terminal device is received and the authentication server stores a key corresponding to the user, determining the key corresponding to the user as the seed key; If the key acquisition request is not received, or the authentication server does not store the key corresponding to the user, the seed key is obtained through negotiation with the terminal device.

9. The method according to claim 8, characterized in that Obtaining the seed key through negotiation with the terminal device includes: Receiving first information and second information sent by the terminal device, where the first information is obtained by encrypting an initial key using a public key, and the second information is obtained by encrypting a first random number using the initial key; Decrypting the first information using a private key to obtain the initial key; Decrypting the second information using the initial key to obtain the first random number; generating a second random number; An XOR operation is performed on the first random number and the second random number to obtain the seed key.

10. The method according to claim 9, characterized in that The method further comprises: Encrypting the second random number using the initial key to obtain third information; Send the third information to the terminal device.

11. The method according to any one of claims 7 to 10, characterized in that: Decrypting the received encrypted audio and video streams in sequence according to the seed key, and performing identity authentication on the user until an identity authentication result is obtained, including: Receiving the encrypted i-th audio and video stream sent by the terminal device; Decrypting the encrypted i-th audio and video stream using the seed key to obtain the i-th audio and video stream; Perform identity authentication on the user based on the previous i audio and video streams; Among them, the i is 1, 2, ... in sequence until the identity authentication result is obtained, or the terminal device stops sending the audio and video stream.

12. A service processing device, characterized in that: It includes acquisition module, sending module and notification module, among which: The acquisition module is used to acquire a seed key in response to a service processing instruction input by a user; The sending module is used to send multiple encrypted audio and video streams to the authentication server in sequence according to the business processing instruction, wherein the encrypted audio and video streams are obtained by encrypting the audio and video streams collected by the terminal device using the seed key, and the authentication server is used to authenticate the user; The sending module is further used to send a business processing request to the business server according to the business processing instruction, wherein the business processing request is used to request the business server to process a first part of the business, where the first part of the business is a business that can be executed before the authentication server determines the identity authentication result; The notification module is used to, after determining that the authentication server has obtained the identity authentication result, notify the service server to execute the second part of the service according to the identity authentication result to obtain the service processing result.

13. A service processing device, characterized in that: It includes a receiving module, an acquiring module, a storage module and a sending module, wherein: The receiving module is used to sequentially receive multiple encrypted audio and video streams sent by the terminal device, where the encrypted audio and video streams are obtained by encrypting the audio and video streams collected by the terminal device using a seed key; The acquisition module is used to obtain the seed key, and sequentially decrypt the received encrypted audio and video streams according to the seed key, and perform identity authentication on the user until an identity authentication result is obtained; The storage module is used to store the identity authentication result in a preset database; The sending module is used to send an authentication response message to the terminal device, and the authentication response message is used to instruct the authentication server to determine that the identity authentication result is obtained, so that the terminal device notifies the business server to obtain the identity authentication result in the preset database, and executes the second part of the business according to the identity authentication result to obtain the business processing result. The business server is also used to execute the first part of the business before obtaining the business processing result.

14. A terminal device, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to any one of claims 1 to 6.

15. An authentication server, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to any one of claims 7 to 12.

16. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the method according to any one of claims 1 to 6 or any one of claims 7 to 12.

17. A computer program product, characterized in that The invention comprises a computer program, which, when executed by a processor, implements any one of claims 1 to 6 or any one of claims 7 to 12.

Images