Business processing method, apparatus, device, storage medium, and program product

Abstract

The application provides a service processing method and device, equipment, storage medium and program product, and relates to the technical field of computers. The method comprises the following steps: in response to a service processing instruction input by a user, a seed key is obtained; according to the service processing instruction, a plurality of encrypted audio and video streams are sent to an authentication server in sequence, the encrypted audio and video streams being obtained by encrypting audio and video streams collected by a terminal device by using the seed key, and the authentication server being used for identity authentication of the user; according to the service processing instruction, a service processing request is sent to a service server, the service processing request being used for requesting the service server to process a first part of service, and the first part of service being a service that can be executed before an identity authentication result of the authentication server is determined. In the scheme, after the authentication server receives the first part of audio and video streams, identity authentication of the user is started, and the efficiency of service processing is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer, and particularly relates to a business processing method and device, equipment, storage medium and program product. BACKGROUND

[0002] Before processing a plurality of businesses, an electronic device needs to perform identity authentication on a user to ensure the security of business processing. For example, the business can be a payment business, a transfer business, etc.

[0003] In the related art, before processing a certain business, a complete video of capturing a face of the user is usually obtained first, and face verification processing is performed on the complete video to obtain an identity authentication result of the user. When it is determined that the identity authentication result is identity authentication passed, the business processing is started. However, in the above process, the complete video of capturing the face usually needs a long time, and the identity authentication on the user also needs a long time, that is, after requesting to process a certain business, a long time is needed to start the business processing, which leads to low efficiency of business processing. SUMMARY

[0004] The present application provides a business processing method, device, equipment, storage medium and program product to solve the problem of low efficiency of identity authentication and business processing in the prior art.

[0005] In a first aspect, the present application provides a business processing method, comprising:

[0006] In response to a business processing instruction input by a user, a seed key is obtained;

[0007] According to the business processing instruction, a plurality of encrypted audio and video streams are sequentially sent to an authentication server, the encrypted audio and video streams are obtained by encrypting an audio and video stream collected by the terminal device by using the seed key, and the authentication server is configured to perform identity authentication on the user;

[0008] According to the business processing instruction, a business processing request is sent to a business server, the business processing request is configured to request the business server to process a first part of business, and the first part of business is a business that can be executed before the authentication server determines an identity authentication result;

[0009] In a possible implementation, the seed key is obtained, comprising:

[0010] A key acquisition request is sent to the authentication server, and the key acquisition request comprises a user identifier of the user;

[0011] A key response message sent by the authentication server is received;

[0012] if the key exists in the key response message, determining the key in the key response message as the seed key;

[0013] if the key does not exist in the key response message, negotiating the seed key with the authentication server.

[0014] In a possible implementation, the negotiating the seed key with the authentication server comprises:

[0015] generating an initial key, and encrypting the initial key by a public key to obtain first information;

[0016] generating a first random number, and encrypting the random number by the initial key to obtain second information;

[0017] negotiating the seed key with the authentication server according to the first information and the second information.

[0018] In a possible implementation, the negotiating the seed key with the authentication server according to the first information and the second information comprises:

[0019] sending the first information and the second information to the authentication server;

[0020] receiving third information sent by the authentication server, the third information being obtained by the authentication server by encrypting a second random number by the initial key, and the authentication server being used to decrypt the first information by a private key to obtain the initial key;

[0021] decrypting the third information by the initial key to obtain the second random number;

[0022] performing exclusive or operation on the first random number and the second random number to obtain the seed key.

[0023] In a possible implementation, the encrypted audio and video streams are sent to the authentication server in sequence, comprising:

[0024] after the terminal device collects an i-th audio and video stream, encrypting the i-th audio and video stream by the seed key to obtain an encrypted i-th audio and video stream;

[0025] sending the encrypted i-th audio and video stream to the authentication server;

[0026] wherein, the i is sequentially taken as 1, 2, …, until the terminal device ends collecting the audio and video stream of the user.

[0027] In a possible implementation, after determining that the authentication server determines the identity authentication result, the service server is notified to perform a second part of service according to the identity authentication result to obtain a service processing result, including:

[0028] receiving an authentication response message sent by the authentication server, the authentication response message being used to indicate that the authentication server determines the identity authentication result;

[0029] sending notification information to the service server according to the authentication response message, the notification information being used to indicate that the authentication server has obtained the identity authentication result and the identity authentication result is stored in a preset database, so that the service server acquires the identity authentication result in the preset database and performs the second part of service according to the identity authentication result to obtain the service processing result;

[0030] receiving the service processing result sent by the service server.

[0031] In a second aspect, an embodiment of the present application provides a service processing method, including:

[0032] receiving encrypted audio and video streams sent by a terminal device in sequence, the encrypted audio and video streams being obtained by encrypting audio and video streams collected by the terminal device by using a seed key;

[0033] obtaining the seed key, and performing decryption processing on the received encrypted audio and video streams in sequence according to the seed key and performing identity authentication processing on a user until an identity authentication result is obtained;

[0034] storing the identity authentication result in a preset database;

[0035] sending an authentication response message to the terminal device, the authentication response message being used to indicate that the authentication server determines the identity authentication result, so that the terminal device notifies a service server to acquire the identity authentication result in the preset database and performs a second part of service according to the identity authentication result to obtain a service processing result, and the service server is further used to perform a first part of service before the service processing result is obtained.

[0036] In a possible implementation, the seed key is obtained, including:

[0037] if a key obtaining request sent by the terminal device is received and the authentication server stores a key corresponding to the user, the key corresponding to the user is determined as the seed key;

[0038] If the key obtaining request is not received or the key corresponding to the user is not stored in the authentication server, the seed key is negotiated with the terminal device.

[0039] In a possible implementation, the seed key is negotiated with the terminal device, including:

[0040] receiving first information and second information sent by the terminal device, the first information being obtained by encrypting an initial key by using a public key, and the second information being obtained by encrypting a first random number by using the initial key;

[0041] decrypting the first information by using a private key to obtain the initial key;

[0042] decrypting the second information by using the initial key to obtain the first random number;

[0043] generating a second random number;

[0044] performing exclusive OR operation on the first random number and the second random number to obtain the seed key.

[0045] In a possible implementation, the method further includes:

[0046] encrypting the second random number by using the initial key to obtain third information;

[0047] sending the third information to the terminal device.

[0048] In a possible implementation, the encrypted audio and video stream received is decrypted by using the seed key in sequence and the user is authenticated until an authentication result is obtained, including:

[0049] receiving an encrypted i-th audio and video stream sent by the terminal device;

[0050] decrypting the encrypted i-th audio and video stream by using the seed key to obtain an i-th audio and video stream;

[0051] authenticating the user according to the first i audio and video streams;

[0052] wherein the i is sequentially taken as 1, 2, and so on, until the authentication result is obtained or the terminal device ends sending the audio and video stream.

[0053] In a possible implementation, the method includes:

[0054] receiving a service processing request sent by a terminal device;

[0055] perform a first part of the service according to the service processing request, the first part of the service being service executable before the authentication server determines an identity authentication result corresponding to the service processing request;

[0056] receive notification information sent by the terminal device, the notification information being used to indicate that the authentication server has obtained the identity authentication result;

[0057] obtain the identity authentication result in a preset database according to the notification information;

[0058] perform a second part of the service according to the identity authentication result to obtain the service processing result.

[0059] In a third aspect, the present application provides a service processing apparatus, comprising an obtaining module, a sending module and a notification module, wherein,

[0060] The obtaining module is configured to obtain a seed key in response to a service processing instruction input by a user.

[0061] The sending module is configured to send, according to the service processing instruction, a plurality of encrypted audio and video streams to an authentication server in sequence, the encrypted audio and video streams being obtained by encrypting audio and video streams collected by a terminal device by using the seed key, and the authentication server being configured to perform identity authentication on the user.

[0062] The sending module is further configured to send, according to the service processing instruction, a service processing request to a service server, the service processing request being used to request the service server to process a first part of the service, the first part of the service being service executable before the authentication server determines an identity authentication result.

[0063] The notification module is configured to notify the service server to perform a second part of the service according to the identity authentication result to obtain a service processing result after it is determined that the authentication server has determined the identity authentication result.

[0064] In a possible implementation, the obtaining module is specifically configured to:

[0065] send a key obtaining request to the authentication server, the key obtaining request comprising a user identifier of the user;

[0066] receive a key response message sent by the authentication server;

[0067] if a key exists in the key response message, determine the key in the key response message as the seed key;

[0068] If the key does not exist in the key response message, the seed key is negotiated with the authentication server.

[0069] In a possible implementation, the obtaining module is specifically configured to:

[0070] generate an initial key, encrypt the initial key by a public key to obtain first information;

[0071] generate a first random number, encrypt the random number by the initial key to obtain second information;

[0072] negotiate the seed key with the authentication server according to the first information and the second information.

[0073] In a possible implementation, the obtaining module is specifically configured to:

[0074] send the first information and the second information to the authentication server;

[0075] receive third information sent by the authentication server, the third information being obtained by the authentication server by encrypting a second random number by the initial key, and the authentication server being configured to obtain the initial key by decrypting the first information by a private key;

[0076] decrypt the third information by the initial key to obtain the second random number;

[0077] perform exclusive or operation on the first random number and the second random number to obtain the seed key.

[0078] In a possible implementation, the sending module is specifically configured to:

[0079] after the terminal device collects an i-th audio and video stream, encrypt the i-th audio and video stream by the seed key to obtain an encrypted i-th audio and video stream;

[0080] send the encrypted i-th audio and video stream to the authentication server;

[0081] wherein, the i is sequentially taken as 1, 2, …, until the terminal device ends collecting the audio and video stream of the user.

[0082] In a possible implementation, the notification module is specifically configured to:

[0083] receive an authentication response message sent by the authentication server, the authentication response message being used to indicate that the authentication result is determined by the authentication server;

[0084] According to the authentication response message, a notification message is sent to the service server, the notification message being used to indicate that the authentication server has obtained the identity authentication result and the identity authentication result is stored in a preset database, so that the service server acquires the identity authentication result from the preset database and performs the second part of service according to the identity authentication result to obtain the service processing result;

[0085] The service processing result sent by the service server is received.

[0086] In a fourth aspect, the present application provides a service processing apparatus, comprising a receiving module, an acquiring module, a storage module and a sending module, wherein,

[0087] The receiving module is configured to sequentially receive a plurality of encrypted audio and video streams sent by a terminal device, the encrypted audio and video streams being obtained by encrypting audio and video streams collected by the terminal device by using a seed key;

[0088] The acquiring module is configured to acquire the seed key and sequentially decrypt the received encrypted audio and video streams and perform identity authentication processing on a user according to the seed key until an identity authentication result is obtained;

[0089] The storage module is configured to store the identity authentication result in a preset database;

[0090] The sending module is configured to send an authentication response message to the terminal device, the authentication response message being used to indicate that the authentication server has obtained the identity authentication result, so that the terminal device notifies a service server to acquire the identity authentication result from the preset database and perform a second part of service according to the identity authentication result to obtain a service processing result, and the service server is further configured to perform a first part of service before the service processing result is obtained.

[0091] In a possible implementation, the acquiring module is specifically configured to:

[0092] If the key acquisition request sent by the terminal device is received and the key corresponding to the user is stored in the authentication server, the key corresponding to the user is determined as the seed key;

[0093] If the key acquisition request is not received or the key corresponding to the user is not stored in the authentication server, the seed key is negotiated with the terminal device.

[0094] In a possible implementation, the acquiring module is specifically configured to:

[0095] receive first information and second information sent by the terminal device, the first information being obtained by encrypting an initial key by a public key, and the second information being obtained by encrypting a first random number by the initial key;

[0096] decrypt the first information by a private key to obtain the initial key;

[0097] decrypt the second information by the initial key to obtain the first random number;

[0098] generate a second random number;

[0099] perform exclusive or operation on the first random number and the second random number to obtain the seed key.

[0100] In a possible implementation, the apparatus further includes an encryption module, wherein,

[0101] the encryption module is configured to encrypt the second random number by the initial key to obtain third information;

[0102] the sending module is further configured to send the third information to the terminal device.

[0103] In a possible implementation, the obtaining module is specifically configured to:

[0104] receive encrypted i-th audio and video stream sent by the terminal device;

[0105] decrypt the encrypted i-th audio and video stream by the seed key to obtain i-th audio and video stream;

[0106] perform identity authentication processing on the user according to the first i audio and video streams;

[0107] wherein, the i is sequentially taken as 1, 2, …, until the identity authentication result is obtained, or the terminal device ends sending audio and video stream.

[0108] In a fifth aspect, an embodiment of the present application provides a terminal device, including: at least one processor and a memory; the memory stores computer execution instructions; the at least one processor executes the computer execution instructions stored in the memory, so that the at least one processor executes the business processing method in the first aspect and various possible designs of the first aspect.

[0109] In a sixth aspect, an embodiment of the present application provides an authentication server, comprising: at least one processor and a memory; the memory stores computer-executable instructions; and the at least one processor executes the computer-executable instructions stored in the memory, so that the at least one processor executes the business processing method according to the second aspect and various possible designs of the second aspect.

[0110] In a seventh aspect, an embodiment of the present application provides a computer-readable storage medium, which stores computer-executable instructions, and when a processor executes the computer-executable instructions, the business processing method according to the first aspect and various possible designs of the first aspect is implemented.

[0111] In an eighth aspect, an embodiment of the present application provides a computer-readable storage medium, which stores computer-executable instructions, and when a processor executes the computer-executable instructions, the business processing method according to the second aspect and various possible designs of the second aspect is implemented.

[0112] In a ninth aspect, an embodiment of the present application provides a computer program product, which comprises a computer program, and when the computer program is executed by a processor, the business processing method according to the first aspect and various possible designs of the first aspect is implemented.

[0113] In a tenth aspect, an embodiment of the present application provides a computer program product, which comprises a computer program, and when the computer program is executed by a processor, the business processing method according to the second aspect and various possible designs of the second aspect is implemented.

[0114] The business processing method, device, equipment, storage medium and program product provided by the present application can be used to improve the efficiency of identity authentication. In addition, the business server can perform a part of the business (which does not depend on the identity authentication result) before the authentication server obtains the identity authentication result, and then perform another part of the business after the authentication server obtains the identity authentication result, that is, the business processing and identity authentication can be performed in parallel, further improving the efficiency of business processing. BRIEF DESCRIPTION OF DRAWINGS

[0115] The accompanying drawings, which are incorporated herein and constitute part of the specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0116] Figure 1A system architecture schematic diagram provided by an embodiment of the present application is shown in the following figure.

[0117] Figure 2 A flowchart of a service processing method provided by an embodiment of the present application is shown in the following figure.

[0118] Figure 3 A flowchart of a seed key negotiation method provided by an embodiment of the present application is shown in the following figure.

[0119] Figure 4 A flowchart of another service processing method provided by an embodiment of the present application is shown in the following figure.

[0120] Figure 5 A structural schematic diagram of a service processing device provided by an embodiment of the present application is shown in the following figure.

[0121] Figure 6 A structural schematic diagram of another service processing device provided by an embodiment of the present application is shown in the following figure.

[0122] Figure 7 A structural schematic diagram of another service processing device provided by an embodiment of the present application is shown in the following figure.

[0123] Figure 8 A structural schematic diagram of a terminal device provided by an embodiment of the present application is shown in the following figure.

[0124] Figure 9 A structural schematic diagram of an authentication server provided by an embodiment of the present application is shown in the following figure.

[0125] The above figures have shown the specific embodiments of the present application, which will be described in more detail hereinafter. These figures and the written description are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application for those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0126] The exemplary embodiments will be described in detail herein with reference to the attached drawings. Unless otherwise specified, the same numbers in different drawings indicate the same or similar elements. The embodiments described in the following exemplary embodiments are not meant to represent all implementations consistent with the present application. Rather, they are merely examples of apparatus and methods consistent with some aspects of the present application as detailed in the appended claims.

[0127] In the technical solutions of the present application, the collection, storage, use, processing, transmission, provision and disclosure of information such as financial data or user data comply with relevant laws and regulations and do not violate public order and good customs.

[0128] It should be noted that in the embodiments of the present application, some software, components, models and the like in the prior art may be mentioned, which should be considered as exemplary, and the purpose is only to illustrate the feasibility of the implementation of the technical solutions of the present application, but does not mean that the applicant has or will necessarily use the scheme.

[0129] For ease of understanding, the following will be combined with Figure 1 The system architecture to which the embodiments of the present application are applicable will be described.

[0130] Figure 1 The system architecture provided by the embodiments of the present application is shown in the following Figure 1 , which includes a terminal device 101, an authentication server 102 and a service server 103.

[0131] The user can input a service processing instruction in the terminal device 101, and the terminal device 101 can request the authentication server 103 to perform identity authentication on the user and request the service server 102 to perform service processing according to the service processing instruction.

[0132] The terminal device 101 can be an electronic device, for example, the terminal device can be a mobile phone, a tablet computer and a notebook computer, etc., and a target application program can be arranged in the terminal device 101, and the user can input a service processing instruction through the target application program, for example, the target application program can be a shopping application, an instant payment application, etc.

[0133] In the related art, before requesting to process a certain service, a complete video of capturing a face of the user is usually obtained, and face verification processing is performed on the complete video to obtain an identity authentication result of the user. When it is determined that the identity authentication result is identity authentication passed, the service processing is started. However, in the above process, the complete video of capturing the face usually needs a long time, and the identity authentication of the user also needs a long time, that is, after requesting to process a certain service, a long time is needed to start the service processing, resulting in low efficiency of the service processing.

[0134] In order to solve the above technical problems, in the embodiments of the present application, after the terminal device obtains a service processing instruction, a plurality of audio and video streams can be sent to the authentication server in sequence, and after the authentication server receives the first audio and video stream, the identity authentication of the user is started. The authentication server does not need to perform identity authentication after receiving a complete video, which improves the efficiency of identity authentication. Moreover, before the authentication server obtains the identity authentication result, the service server can first perform a part of the service (which does not need to depend on the identity authentication result), and after the authentication server obtains the identity authentication result, the service server performs another part of the service, that is, the service processing and the identity authentication can be performed in parallel, which further improves the efficiency of the service processing.

[0135] The technical solutions of the present application and how the technical solutions solve the above technical problems will be described in detail below with specific examples. The following specific examples can be combined with each other, and the same or similar concepts or processes can not be described again in some examples. The embodiments of the present application will be described below with reference to the accompanying drawings.

[0136] Figure 2 is a flowchart of a business processing method provided by an embodiment of the present application. Please refer to Figure 2 The method can include the following steps:

[0137] S201, in response to a user input business processing instruction, the terminal device and the authentication server acquire a seed key respectively.

[0138] The business processing instruction is used to request to execute a target business, for example, the target business can be a transfer business, a payment business, etc.

[0139] For example, the terminal device can display a payment page, and the payment page includes a payment control. After the user clicks the payment control, the terminal device can acquire a business processing instruction, which is used to request to perform a payment business.

[0140] The seed key can be acquired by the following way: sending a key acquisition request to the authentication server, the key acquisition request including a user identifier of the user; receiving a key response message sent by the authentication server; if the key exists in the key response message, determining the key in the key response message as the seed key; if the key does not exist in the key response message, negotiating with the authentication server to obtain the seed key.

[0141] If the key exists in the key response message, it means that the authentication server and the terminal device have negotiated the key. In this case, the negotiated key can be determined as the seed key. If the key does not exist in the authentication response message, it means that the authentication server and the terminal device do not have a negotiated key. In this case, the terminal device needs to negotiate with the authentication server to obtain the seed key.

[0142] It should be noted that the terminal device acquires the seed key at the same time, and the authentication server also acquires the same seed key.

[0143] After S201, S202 and S205 are executed in parallel.

[0144] S202, the terminal device sends a plurality of encrypted audio and video streams to the authentication server in sequence according to the business processing instruction.

[0145] The encrypted audio and video stream is obtained by encrypting the audio and video stream collected by the terminal device by using the seed key.

[0146] The terminal device is provided with a camera and / or a microphone. After the terminal device obtains the service processing instruction, the terminal device can start collecting the audio and video stream. For example, the audio and video stream can be a video stream collected by the camera, or an audio stream collected by the microphone, or a media stream including the video stream and the audio stream collected by the camera and the microphone.

[0147] The terminal device encrypts each piece of the audio and video stream collected by using the seed key, and sends the encrypted audio and video data to the authentication server until the terminal device ends collecting the audio and video stream of the user.

[0148] The terminal device can send the multiple pieces of the encrypted audio and video stream to the authentication server in sequence by the following method: after the terminal device collects the ith piece of the audio and video stream, the terminal device encrypts the ith piece of the audio and video stream by using the seed key to obtain the encrypted ith piece of the audio and video stream; and the terminal device sends the encrypted ith piece of the audio and video stream to the authentication server; wherein i is sequentially taken as 1, 2, …, until the terminal device ends collecting the audio and video stream of the user.

[0149] For example, assuming that the duration of a piece of the audio and video stream is 1 ms, after the terminal device collects the first piece of the audio and video stream of the first 1 ms, the terminal device encrypts the first piece of the audio and video stream by using the seed key, and sends the first piece of the encrypted audio and video stream to the authentication server. After the terminal device collects the second piece of the audio and video stream from the first 1 ms to the second 1 ms, the terminal device encrypts the second piece of the audio and video stream by using the seed key, and sends the second piece of the encrypted audio and video stream to the authentication server. In this way, until the terminal device ends collecting the audio and video stream.

[0150] For any piece of the audio and video stream, the terminal device can encrypt the audio and video stream by the following method: converting the audio and video stream into byte form to obtain the video stream data in byte form, and performing XOR operation between the seed key and the audio and video stream data to obtain the encrypted audio and video stream.

[0151] The terminal device can end collecting the audio and video stream in the following cases:

[0152] Case 1: after receiving the identity authentication result sent by the authentication server, the terminal device ends collecting the audio and video stream.

[0153] Case 2: after the total duration of the collected audio and video stream reaches the preset threshold, the terminal device ends collecting the audio and video stream.

[0154] S203, the authentication server decrypts the received encrypted audio and video stream in sequence according to the seed key, and performs identity authentication processing on the user until an identity authentication result is obtained.

[0155] The authentication server decrypts each received encrypted audio and video stream by using the seed key, and performs identity authentication processing on the user according to all received audio and video streams until an identity authentication result is obtained, or the terminal device ends sending the audio and video stream.

[0156] The identity authentication result can be obtained by decrypting the encrypted ith audio and video stream by using the seed key after receiving the encrypted ith audio and video stream sent by the terminal device, obtaining the ith audio and video stream, and performing identity authentication processing on the user according to the first i audio and video streams; wherein i is 1, 2, …, until an identity authentication result is obtained, or the terminal device ends sending the audio and video stream.

[0157] For example, it is assumed that the authentication server receives the encrypted first audio and video stream sent by the terminal device, decrypts the encrypted first audio and video stream by using the seed key, and performs identity authentication processing on the user according to the decrypted first audio and video stream. After receiving the encrypted second audio and video stream sent by the terminal device, the encrypted second audio and video stream is decrypted by using the seed key, and identity authentication processing is performed on the user according to the decrypted first audio and video stream and the second audio and video stream. In this way, until an identity authentication result is obtained, or the terminal device ends sending the audio and video stream.

[0158] After decrypting any at least one audio and video stream, identity authentication processing can be performed by extracting the biological feature information in the at least one audio and video stream, obtaining the user feature information stored in the pre-stored database, comparing the extracted biological feature information with the pre-stored user feature information, determining whether the comparison result reaches a preset threshold, and if the comparison result is greater than or equal to the preset threshold, the identity authentication result is authentication success, and if the comparison result is less than the preset threshold, the identity authentication result is authentication failure.

[0159] Optionally, after obtaining the identity authentication result, the authentication server can also send the identity authentication result to the terminal device.

[0160] S204, the authentication server stores the identity authentication result in the preset database.

[0161] The authentication server can store the identity authentication result corresponding to the user identifier in the preset database.

[0162] The user identifier can be the user's identity card number, card number, or a unique identifier assigned to the user.

[0163] S205, the terminal device sends a service processing request to the service server according to the service processing instruction.

[0164] The service processing request is used to request the service server to perform a target service, for example, the target service can be a transfer service, a payment service, etc.

[0165] It should be noted that after the terminal device obtains the service processing instruction, the terminal device can send the service processing request to the service server. That is, S202 and S205 can be executed in parallel.

[0166] S206, the service server processes a first part of service according to the service processing request.

[0167] The first part of service is a service that can be executed before the identity authentication result is determined by the authentication server.

[0168] When the service processing request is different, the first part of service is also different.

[0169] For example, when the service processing request is used to request the service server to perform a transfer service, the first part of service can include: verifying whether the transfer account is valid, verifying whether the transfer account has sufficient balance, and recording transaction details, etc.

[0170] For example, when the service processing request is used to request the service server to change user information, the first part of service can include: querying the current information of the user, and verifying whether the changed information meets the preset format requirement, etc.

[0171] S207, the authentication server sends an authentication response message to the terminal device.

[0172] The authentication response message is used to indicate that the authentication server determines the identity authentication result.

[0173] S208, the terminal device notifies the service server to perform a second part of service according to the identity authentication result to obtain a service processing result according to the authentication response message.

[0174] The second part of service is a service that is executed after the authentication server determines the identity authentication result.

[0175] When the service processing request is different, the second part of service is also different.

[0176] For example, when the service processing request is used to request the service server to perform a transfer service, the second part of service can include: transferring the amount in the transfer account to a transfer-in account, and sending a transfer prompt information.

[0177] For example, when the service processing request is used to request the service server to change the user information, the second part of the service can include: modifying the current information to the changed information.

[0178] The terminal device can send a notification message to the service server to notify the service server to perform the second part of the service according to the identity authentication result. The notification information is used to indicate that the authentication server has obtained the identity authentication result and the identity authentication result is stored in the preset database, so that the service server obtains the identity authentication result from the preset database and performs the second part of the service according to the identity authentication result to obtain the service processing result.

[0179] Optionally, after the service server determines the service processing result, the service server can also send the service processing result to the terminal device.

[0180] In the embodiments of the present application, after the terminal device obtains the service processing instruction, the terminal device can send multiple segments of audio and video streams to the authentication server in sequence. After the authentication server receives the first segment of audio and video stream, the authentication server starts to perform the identity authentication on the user. The authentication server does not need to perform the identity authentication after receiving the complete video, which improves the efficiency of the identity authentication. Moreover, before the authentication server obtains the identity authentication result, the service server can perform a part of the service (which does not need to depend on the identity authentication result), and after the authentication server obtains the identity authentication result, the service server performs another part of the service. That is, the service processing and the identity authentication can be performed in parallel, which further improves the efficiency of the service processing.

[0181] On the basis of any one of the above embodiments, the following will be described in combination with Figure 3 The process of negotiating the seed key between the terminal device and the authentication server will be described in detail.

[0182] Figure 3 The flowchart of the method for negotiating the seed key provided in the embodiments of the present application is shown. Please refer to Figure 3 The method can include:

[0183] S301, the terminal device generates an initial key, and encrypts the initial key by using a public key to obtain first information.

[0184] For example, assuming that the initial key generated by the terminal device is key, and the initial key key is encrypted by using the public key, the first information M1 can be obtained.

[0185] S302, the terminal device generates a first random number, and encrypts the first random number by using the initial key to obtain second information.

[0186] For example, assuming that the first random number generated by the terminal device is R1, and the R1 is encrypted by using the initial key key, the second information M2 can be obtained.

[0187] The terminal device can determine a preset length, and generate the first random number according to the preset length. The length of the first random number is the preset length.

[0188] S303, the terminal device sends the first information and the second information to the authentication server.

[0189] S304, the authentication server decrypts the first information by using a private key to obtain an initial key.

[0190] The private key and the public key in S301 form a key pair.

[0191] S305, the authentication server decrypts the second information by using the initial key to obtain the first random number.

[0192] For example, assuming that the first random number is R1, the terminal device encrypts R1 to obtain the second information, and the authentication server decrypts the second information by using the initial key to obtain the first random number R1.

[0193] S306, the authentication server generates a second random number.

[0194] The terminal device can determine a preset length, and generate the second random number according to the preset length. The length of the second random number is the preset length.

[0195] The length of the second random number is the same as the length of the first random number.

[0196] S307, the authentication server performs an exclusive or operation on the first random number and the second random number to obtain a seed key.

[0197] The length of the seed key is the same as the length of the first random number and the length of the second random number.

[0198] For example, assuming that the first random number is R1, the second random number is R2, and the lengths of R1 and R2 are both 128 bits, the exclusive or operation is performed on R1 and R2 according to corresponding bits to obtain a seed key with a length of 128 bits.

[0199] S308, the authentication server encrypts the second random number by using the initial key to obtain third information.

[0200] For example, assuming that the third information is M3 and the second random number is R2, the initial key key generated by the terminal device encrypts R2 to obtain M3.

[0201] S309, the authentication server sends the third information to the terminal device.

[0202] S310, the terminal device decrypts the third information by using the initial key to obtain the second random number.

[0203] S311, the terminal device performs an exclusive OR operation on the first random number and the second random number to obtain a seed key.

[0204] The execution process of S311 can refer to the execution process of S307, and will not be described here again.

[0205] In the embodiment shown in the figure, the terminal device and the authentication server obtain the same seed key through negotiation. In the negotiation process, the information exchanged by the terminal device and the authentication server is encrypted, so as to avoid disclosure of the seed key and tampering of the exchanged information, and ensure the security of the seed key obtained through negotiation. Figure 3 On the basis of any one of the above embodiments, the following will be described in combination with

[0206] The business processing method is further described in detail. Figure 4

[0207] Figure 4 Another flowchart of a business processing method provided by an embodiment of the present application is shown in the figure. Please refer to Figure 4 The method can include the following steps.

[0208] S401, the terminal device responds to a business processing instruction input by a user.

[0209] The business processing instruction is used to request execution of a target business, for example, the target business can be a transfer business, a payment business, etc.

[0210] After S401, S402 and S410 can be executed in parallel.

[0211] The execution process of S401 can refer to the execution process of S201, and will not be described here again.

[0212] S402, the terminal device sends a key acquisition request to the authentication server.

[0213] The key acquisition request includes a user identifier of the user.

[0214] The key acquisition request is used to request acquisition of a key.

[0215] S403, the authentication server sends a key response message to the terminal device.

[0216] S404, the terminal device receives the key response message sent by the authentication server, and judges whether the key response message includes a key.

[0217] If yes, S405 is executed.

[0218] If no, S406 is executed.​

[0219] S405, determine the key in the key response message as the seed key.

[0220] If the key exists in the key response message, it means that the terminal device and the authentication server have agreed on the key. In this case, the key in the key response message can be determined as the seed key.

[0221] S406, the terminal device and the authentication server negotiate the seed key.

[0222] If the key does not exist in the key response message, the terminal device and the authentication server can negotiate the seed key, and the process can refer to the embodiment shown in Figure 3 , which will not be described here.

[0223] S407, the terminal device sends the encrypted audio and video streams to the authentication server in sequence according to the business processing instruction.

[0224] S408, the authentication server decrypts the received encrypted audio and video streams according to the seed key and performs identity authentication processing on the user until the identity authentication result is obtained.

[0225] The execution process of S407-S408 can refer to the execution process of S202-S203, which will not be described here.

[0226] S409, the authentication server stores the identity authentication result in the preset database.

[0227] The preset database includes the identity authentication result and the corresponding user identifier.

[0228] The user identifier can be the user's ID number, card number, or a unique identifier not assigned to the user.

[0229] S410, the terminal device sends a business processing request to the business server according to the business processing instruction.

[0230] The business processing request is used to request the business server to execute the target business, for example, the target business can be a transfer business, a payment business, etc.

[0231] It should be noted that after the terminal device obtains the business processing instruction, the terminal device can send the business processing request to the business server. That is, S402 and S410 can be executed in parallel.

[0232] S411, the business server executes the first part of the business according to the business processing request.

[0233] S412, the authentication server sends an authentication response message to the terminal device.

[0234] The authentication response message is used to indicate that the authentication server determines the identity authentication result.

[0235] The execution process of S411-S412 can refer to the execution process of S206-S207, which will not be repeated here.

[0236] S413, the terminal device sends notification information to the service server according to the authentication response message.

[0237] The notification message is used to notify the service server to obtain the corresponding identity authentication result in the authentication server according to the user identifier.

[0238] S414, the service server obtains the identity authentication result in the preset database according to the notification information.

[0239] S415, the service server performs the second part of the service according to the identity authentication result to obtain a service processing result.

[0240] In the embodiment of the application, after the terminal device obtains the service processing instruction, it can send multiple segments of audio and video streams to the authentication server in sequence. After the authentication server receives the first segment of audio and video stream, it starts to perform identity authentication on the user. The authentication server does not need to perform identity authentication after receiving the complete video, which improves the efficiency of identity authentication. Moreover, before the authentication server obtains the identity authentication result, the service server can perform a part of the service (which does not need to depend on the identity authentication result). After the authentication server obtains the identity authentication result, the service server performs another part of the service. That is, the service processing and identity authentication can be performed in parallel, which further improves the efficiency of service processing.

[0241] Figure 5 For the structure of the service processing device provided in the embodiment of the application, please refer to Figure 5 The service processing device 10 includes an obtaining module 11, a sending module 12, and a notification module 13.

[0242] The obtaining module 11 is configured to obtain a seed key in response to a service processing instruction input by a user.

[0243] The sending module 12 is configured to send multiple segments of encrypted audio and video streams to an authentication server in sequence according to the service processing instruction, the encrypted audio and video streams being obtained by encrypting audio and video streams collected by a terminal device by using the seed key, and the authentication server being configured to perform identity authentication on the user.

[0244] The sending module 12 is further configured to send, according to the service processing instruction, a service processing request to a service server, where the service processing request is used to request the service server to process a first part of service, and the first part of service is service that can be executed before the authentication server determines the identity authentication result.

[0245] The notification module 13 is configured to notify the service server to execute a second part of service according to the identity authentication result to obtain a service processing result after it is determined that the authentication server determines the identity authentication result.

[0246] The service processing apparatus provided by the embodiments of the present application can execute the method shown in the method embodiments, and the implementation principles and the beneficial effects are similar, which will not be repeated here.

[0247] In a possible implementation, the obtaining module 11 is specifically configured to:

[0248] send a key obtaining request to the authentication server, where the key obtaining request comprises a user identifier of the user;

[0249] receive a key response message sent by the authentication server;

[0250] if the key response message comprises a key, determine the key in the key response message as the seed key;

[0251] if the key response message does not comprise the key, negotiate the seed key with the authentication server.

[0252] In a possible implementation, the obtaining module 11 is specifically configured to:

[0253] generate an initial key, and obtain first information by encrypting the initial key by using a public key;

[0254] generate a first random number, and obtain second information by encrypting the random number by using the initial key;

[0255] negotiate the seed key with the authentication server according to the first information and the second information.

[0256] In a possible implementation, the obtaining module 11 is specifically configured to:

[0257] send the first information and the second information to the authentication server;

[0258] receive third information sent by the authentication server, where the third information is obtained by encrypting a second random number by using the initial key by the authentication server, and the authentication server is configured to obtain the initial key by decrypting the first information by using a private key.

[0259] decrypt the third information by the initial key to obtain the second random number;

[0260] perform exclusive OR operation on the first random number and the second random number to obtain the seed key.

[0261] In a possible implementation, the sending module 12 is specifically configured to:

[0262] perform encryption processing on the ith audio and video stream by the seed key to obtain an encrypted ith audio and video stream after the terminal device collects the ith audio and video stream;

[0263] send the encrypted ith audio and video stream to the authentication server;

[0264] wherein the i is sequentially taken as 1, 2, …, until the terminal device ends collecting the audio and video stream of the user.

[0265] In a possible implementation, the notification module 13 is specifically configured to:

[0266] receive an authentication response message sent by the authentication server, the authentication response message being used to indicate that the authentication result is determined by the authentication server;

[0267] send notification information to the service server according to the authentication response message, the notification information being used to indicate that the authentication result is obtained by the authentication server and stored in a preset database, so that the service server acquires the authentication result from the preset database and executes the second part of the service according to the authentication result to obtain the service processing result;

[0268] receive the service processing result sent by the service server.

[0269] The service processing apparatus provided in this embodiment can be used to execute the service processing method shown in the method embodiments, and has similar implementation principles and technical effects, which will not be described here in detail.

[0270] Figure 6 Another structural diagram of a service processing apparatus provided in this embodiment is shown in FIG. 20. Figure 6 The service processing apparatus 20 includes a receiving module 21, an acquiring module 22, a storage module 23, and a sending module 24, wherein,

[0271] The receiving module 21 is configured to sequentially receive a plurality of encrypted audio and video streams sent by a terminal device, wherein the encrypted audio and video streams are obtained by encrypting audio and video streams collected by the terminal device by using a seed key.

[0272] The obtaining module 22 is configured to obtain the seed key, and sequentially decrypt the received encrypted audio and video streams by using the seed key and perform identity authentication processing on a user until an identity authentication result is obtained.

[0273] The storage module 23 is configured to store the identity authentication result in a preset database.

[0274] The sending module 24 is configured to send an authentication response message to the terminal device, wherein the authentication response message is used to indicate that the authentication server determines the identity authentication result, so that the terminal device notifies a service server to obtain the identity authentication result in the preset database, and performs a second part of a service according to the identity authentication result to obtain a service processing result, and the service server is further configured to perform a first part of the service before the service processing result is obtained.

[0275] The service processing apparatus provided by the embodiments of the present application can perform the method shown in the method embodiments, and has similar implementation principles and beneficial effects, which will not be described here in detail.

[0276] In a possible implementation, the obtaining module 22 is specifically configured to:

[0277] If the key obtaining request sent by the terminal device is received and the key corresponding to the user is stored in the authentication server, the key corresponding to the user is determined as the seed key.

[0278] If the key obtaining request is not received or the key corresponding to the user is not stored in the authentication server, the seed key is obtained by negotiation with the terminal device.

[0279] In a possible implementation, the obtaining module 22 is specifically configured to:

[0280] The first information and the second information sent by the terminal device are received, wherein the first information is obtained by encrypting an initial key by using a public key, and the second information is obtained by encrypting a first random number by using the initial key.

[0281] The first information is decrypted by using a private key to obtain the initial key.

[0282] The second information is decrypted by using the initial key to obtain the first random number.

[0283] generating a second random number;

[0284] performing an exclusive or operation on the first random number and the second random number to obtain the seed key.

[0285] Figure 7 Another structure schematic diagram of a service processing apparatus provided by an embodiment of the present application is provided. Based on the structure of the embodiment shown in Figure 6 the embodiment, the service processing apparatus 20 further includes an encryption module 25, wherein Figure 7 The encryption module is configured to perform encryption processing on the second random number by using the initial key to obtain third information.

[0286] The sending module is further configured to send the third information to the terminal device.

[0287] In a possible implementation, the obtaining module 22 is specifically configured to:

[0288] receive the encrypted i-th audio / video stream sent by the terminal device;

[0289] perform decryption processing on the encrypted i-th audio / video stream by using the seed key to obtain the i-th audio / video stream;

[0290] perform identity authentication processing on the user according to the first i audio / video streams;

[0291] wherein, the i is sequentially taken as 1, 2, …, until the identity authentication result is obtained, or the terminal device ends sending the audio / video stream.

[0292] The service processing apparatus provided by the embodiment can be used to execute the service processing method shown in the method embodiment, and has similar implementation principles and technical effects, which will not be described here in detail.

[0293]

[0294] A structure schematic diagram of a terminal device provided by an embodiment of the present application is provided. As shown in Figure 8 the terminal device 30 can include a transceiver 31, a processor 32 and a memory 33. Figure 8

[0295] ​The processor 32 executes computer-executed instructions stored in the memory, so that the processor 32 executes the solutions in the above embodiments. The processor 32 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; and can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component.

[0296] The memory 33 is connected with the processor 32 through a system bus and completes mutual communication, and the memory 33 is used for storing computer program instructions.

[0297] The transceiver 31 can be used to acquire a to-be-run task and configuration information of the to-be-run task.

[0298] Figure 9 A structure schematic diagram of an authentication server provided by the embodiments of the present application is shown in FIG. 4. As shown in the figure, the authentication server 40 can include a transceiver 41, a processor 42 and a memory 43. Figure 9

[0299] The processor 42 executes computer-executed instructions stored in the memory, so that the processor 42 executes the solutions in the above embodiments. The processor 42 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; and can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component.

[0300] The memory 43 is connected with the processor 42 through a system bus and completes mutual communication, and the memory 43 is used for storing computer program instructions.

[0301] The transceiver 41 can be used to acquire a to-be-run task and configuration information of the to-be-run task. ​

[0302] The system bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application does not limit to only one bus or one type of bus. The system bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus. The transceiver is used to realize the communication between the database access device and other computers (such as clients, read-write libraries and read-only libraries).

[0303] The memory can include a Random Access Memory (RAM), and can also include a Non-Volatile Memory (NVM).

[0304] The embodiments of the present application also provide a chip for running instructions, which is used to execute the technical solutions of the service processing method in the above embodiments.

[0305] The embodiments of the present application also provide a computer readable storage medium, which stores computer instructions, and when the computer instructions are run on a computer, the computer executes the technical solutions of the service processing method in the above embodiments.

[0306] The embodiments of the present application also provide a computer program product, which includes a computer program stored in a computer readable storage medium, at least one processor can read the computer program from the computer readable storage medium, and when the at least one processor executes the computer program, the technical solutions of the service processing method in the above embodiments can be realized.

[0307] In several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of the modules is only a logical function division, and actual implementation can have another division manner, for example, a plurality of modules can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the displayed or discussed each other can be indirect coupling or communication connection through some interfaces, devices or modules, and can be electrical, mechanical or other forms.

[0308] The modules explained as separated components can or can not be physically separated, and the components shown as modules can or can not be physical units, i.e., can be located in one place, or can be distributed to a plurality of network units. Part or all of the modules can be selected to implement the embodiments according to actual needs.

[0309] In addition, each functional module in each embodiment of the present application can be integrated in one processing unit, or each module can be physically present separately, or two or more modules can be integrated in one unit. The unit of the above modules can be realized in the form of hardware, or in the form of hardware plus software functional units.

[0310] The integrated modules realized in the form of software functional modules can be stored in a computer readable storage medium. The software functional modules stored in a storage medium include a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to execute part of the steps of the methods of each embodiment of the present application.

[0311] The storage medium can be realized by any type of volatile or non-volatile storage devices or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk or optical disk. The storage medium can be any available medium that can be accessed by a general or special purpose computer.

[0312] An exemplary storage medium is coupled to a processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a part of the processor. The processor and the storage medium can be located in an application specific integrated circuit (ASIC). Of course, the processor and the storage medium can also exist as discrete components in an electronic control unit or a host device.

[0313] Those of ordinary skill in the art can understand that all or part of the steps of the above-mentioned method embodiments can be completed by program instruction-related hardware. The aforementioned program can be stored in a computer readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk, and various storage media that can store program codes.

[0314] Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that: it can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacement for part or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present application.

Claims

1. A service processing method characterized by, The method is applied to a terminal device and comprises the following steps: In response to a service processing instruction input by a user, a seed key is obtained; According to the service processing instruction, a plurality of encrypted audio and video streams are sequentially sent to an authentication server, the encrypted audio and video streams being obtained by encrypting audio and video streams collected by the terminal device using the seed key, and the authentication server being configured to authenticate the identity of the user; According to the service processing instruction, a service processing request is sent to a service server, the service processing request being configured to request the service server to process a first part of a service, the first part of the service being a service that can be executed before an authentication result is determined by the authentication server; After the authentication result is determined by the authentication server, the service server is notified to execute a second part of the service according to the authentication result to obtain a service processing result; The step of sequentially sending the plurality of encrypted audio and video streams to the authentication server comprises the following steps: After the i th audio and video stream is collected by the terminal device, the i th audio and video stream is encrypted using the seed key to obtain an encrypted i th audio and video stream; The encrypted i th audio and video stream is sent to the authentication server; Wherein, i is sequentially taken as 1, 2, …, until the terminal device ends collecting the audio and video stream of the user; The authentication result is obtained by decrypting the second encrypted audio and video stream using the seed key and authenticating the identity of the user according to the decrypted first audio and video stream after the authentication server receives the first encrypted audio and video stream sent by the terminal device; the first encrypted audio and video stream is decrypted using the seed key after the authentication server receives the second encrypted audio and video stream sent by the terminal device, and the identity of the user is authenticated according to the decrypted first audio and video stream and the second audio and video stream; and so on, until the authentication result is obtained, or the terminal device ends sending the audio and video stream; Wherein, the authentication process comprises the following steps: after the authentication server decrypts any at least one audio and video stream, biological feature information in the at least one audio and video stream is extracted, user feature information stored in a pre-stored database is obtained, the extracted biological feature information is compared with the pre-stored user feature information, and it is determined whether the comparison result reaches a preset threshold value; if the comparison result is greater than or equal to the preset threshold value, the authentication result is authentication success; and if the comparison result is less than the preset threshold value, the authentication result is authentication failure.

2. The method of claim 1, wherein, The seed key is obtained by the following steps: A key obtaining request is sent to the authentication server, the key obtaining request comprising a user identifier of the user; A key response message sent by the authentication server is received; If there is a key in the key response message, the key in the key response message is determined as the seed key; If there is no key in the key response message, the seed key is obtained by negotiation with the authentication server.

3. The method of claim 2, wherein, The seed key is obtained by negotiation with the authentication server, comprising the following steps: An initial key is generated, and the initial key is encrypted using a public key to obtain first information; generating a first random number, encrypting the random number by the initial key to obtain second information; negotiating the seed key with the authentication server according to the first information and the second information.

4. The method of claim 3, wherein, According to the first information and the second information, the seed key is obtained by negotiating with the authentication server, comprising: sending the first information and the second information to the authentication server; receiving the third information sent by the authentication server, the third information being obtained by the authentication server by encrypting the second random number by the initial key, the authentication server being used to decrypt the first information by the private key to obtain the initial key; decrypting the third information by the initial key to obtain the second random number; XOR operation is performed on the first random number and the second random number to obtain the seed key.

5. The method according to any one of claims 1 to 4, characterized in that, After determining that the authentication server determines the identity authentication result, the business server is notified to execute a second part of business according to the identity authentication result to obtain a business processing result, comprising: receiving an authentication response message sent by the authentication server, the authentication response message being used to indicate that the authentication server determines the identity authentication result; According to the authentication response message, the notification information is sent to the business server, the notification information is used to indicate that the authentication server has obtained the identity authentication result, and the identity authentication result is stored in a preset database, so that the business server obtains the identity authentication result in the preset database, and executes the second part of business according to the identity authentication result to obtain the business processing result; receiving the business processing result sent by the business server.

6. A service processing method characterized by, Applied to an authentication server, the method comprises: receiving a plurality of encrypted audio and video streams sent by a terminal device in sequence, the encrypted audio and video streams being obtained by encrypting audio and video streams collected by the terminal device by a seed key; obtaining the seed key, and decrypting the received encrypted audio and video streams in sequence according to the seed key, and performing identity authentication processing on the user until an identity authentication result is obtained; storing the identity authentication result in a preset database; sending an authentication response message to the terminal device, the authentication response message being used to indicate that the authentication server determines the identity authentication result, so that the terminal device notifies a business server to obtain the identity authentication result in the preset database, and executes a second part of business according to the identity authentication result to obtain a business processing result, the business server also being used to execute a first part of business before obtaining the business processing result; The identity authentication result is that the authentication processor decrypts the encrypted second audio and video stream by using the seed key after receiving the encrypted first audio and video stream sent by the terminal device, and performs identity authentication on the user according to the decrypted first audio and video stream; after receiving the encrypted second audio and video stream sent by the terminal device, the authentication processor decrypts the encrypted first audio and video stream by using the seed key, and performs identity authentication on the user according to the decrypted first audio and video stream and the second audio and video stream; and so on, until the identity authentication result is obtained, or the terminal device ends sending the audio and video stream. The identity authentication process comprises the following steps: after the authentication server decrypts any at least one audio and video stream, biological feature information in the at least one audio and video stream is extracted, user feature information stored in a pre-stored database is obtained, the extracted biological feature information is compared with the pre-stored user feature information, and it is determined whether the comparison result reaches a preset threshold value. If the comparison result is greater than or equal to the preset threshold value, the identity authentication result is authentication success; if the comparison result is less than the preset threshold value, the identity authentication result is authentication failure.

7. The method of claim 6, wherein, The seed key is obtained by the following steps: If the authentication server stores the key corresponding to the user, the key corresponding to the user is determined as the seed key. If the authentication server does not store the key corresponding to the user, the seed key is negotiated with the terminal device.

8. The method of claim 7, wherein, The seed key is negotiated with the terminal device by the following steps: The terminal device sends first information and second information, the first information is obtained by encrypting an initial key by using a public key, and the second information is obtained by encrypting a first random number by using the initial key; The initial key is obtained by decrypting the first information by using a private key; The first random number is obtained by decrypting the second information by using the initial key; A second random number is generated; The seed key is obtained by performing exclusive or operation on the first random number and the second random number.

9. The method of claim 8, wherein, The method further comprises the following steps: The third information is obtained by encrypting the second random number by using the initial key; The third information is sent to the terminal device.

10. The method according to any one of claims 6-9, characterized in that, The seed key is used to sequentially decrypt the received encrypted audio and video streams and perform identity authentication on the user until the identity authentication result is obtained, comprising the following steps: The terminal device sends the i-th encrypted audio and video stream; The i-th encrypted audio and video stream is decrypted by using the seed key to obtain the i-th audio and video stream; Identity authentication is performed on the user according to the first i audio and video streams; Wherein, i is 1, 2, …, until the identity authentication result is obtained, or the terminal device ends sending the audio and video stream.

11. A service processing apparatus characterized by comprising: The method comprises the following steps: The acquisition module is used to acquire the seed key in response to a business processing instruction input by the user; The sending module is used to send the third information to the terminal device; and The notification module is used to notify the user of the identity authentication result. The sending module is configured to send, according to the service processing instruction, the encrypted audio and video streams to the authentication server in sequence, the encrypted audio and video streams being obtained by encrypting the audio and video streams collected by the terminal device by using the seed key, and the authentication server being configured to perform identity authentication on the user; The sending module is further configured to send, according to the service processing instruction, a service processing request to the service server, the service processing request being configured to request the service server to process the first part of services, the first part of services being services executable before the authentication server determines the identity authentication result; The notification module is configured to notify the service server to perform the second part of services according to the identity authentication result to obtain a service processing result after it is determined that the authentication server determines the identity authentication result; The sending module is further configured to send, according to the service processing instruction, a service processing request to the service server, the service processing request being configured to request the service server to process the first part of services, the first part of services being services executable before the authentication server determines the identity authentication result; After the terminal device collects the ith audio and video stream, the terminal device encrypts the ith audio and video stream by using the seed key to obtain an encrypted ith audio and video stream; The sending module is further configured to send, according to the service processing instruction, a service processing request to the service server, the service processing request being configured to request the service server to process the first part of services, the first part of services being services executable before the authentication server determines the identity authentication result; The identity authentication result is obtained by decrypting the second encrypted audio and video stream by using the seed key and performing identity authentication on the user according to the decrypted first audio and video stream after the authentication processor receives the first encrypted audio and video stream sent by the terminal device, decrypting the first encrypted audio and video stream by using the seed key after the authentication processor receives the second encrypted audio and video stream sent by the terminal device, and performing identity authentication on the user according to the decrypted first audio and video stream and the second audio and video stream, and so on until the identity authentication result is obtained or the terminal device ends sending the audio and video streams. The identity authentication process includes extracting biological feature information in at least one audio and video stream after the authentication server decrypts the at least one audio and video stream, obtaining user feature information stored in a pre-stored database, comparing the extracted biological feature information with the pre-stored user feature information, determining whether a comparison result reaches a preset threshold, and determining that the identity authentication result is authentication success if the comparison result is greater than or equal to the preset threshold or determining that the identity authentication result is authentication failure if the comparison result is less than the preset threshold. The receiving module, the obtaining module, the storage module, and the sending module are included, wherein:

12. A service processing apparatus characterized by comprising: The receiving module is configured to receive, in sequence, the encrypted audio and video streams sent by the terminal device, the encrypted audio and video streams being obtained by encrypting the audio and video streams collected by the terminal device by using the seed key; The obtaining module is configured to obtain the seed key and decrypt, in sequence, the received encrypted audio and video streams by using the seed key and perform identity authentication on the user until the identity authentication result is obtained; The storage module is configured to store the identity authentication result in a preset database. ​ The sending module is configured to send an authentication response message to the terminal device, the authentication response message being used to indicate that the authentication server determines the identity authentication result, so that the terminal device informs a service server to obtain the identity authentication result in the preset database and perform a second part of service according to the identity authentication result to obtain a service processing result, and the service server is further configured to perform a first part of service before obtaining the service processing result; The identity authentication result is that the authentication processor decrypts the encrypted second part of audio and video stream by using the seed key after receiving the encrypted first part of audio and video stream sent by the terminal device, and performs identity authentication processing on the user according to the decrypted first part of audio and video stream; decrypts the encrypted first part of audio and video stream by using the seed key after receiving the encrypted second part of audio and video stream sent by the terminal device, and performs identity authentication processing on the user according to the decrypted first part of audio and video stream and the second part of audio and video stream; and so on, until the identity authentication result is obtained or the terminal device ends sending the audio and video stream. The identity authentication processing is that after the authentication server decrypts to obtain any at least one part of audio and video stream, biological feature information in the at least one part of audio and video stream is extracted, user feature information stored in a pre-stored database is obtained, the extracted biological feature information is compared with the pre-stored user feature information, and it is judged whether the comparison result reaches a preset threshold value; if the comparison result is greater than or equal to the preset threshold value, the identity authentication result is authentication success; if the comparison result is less than the preset threshold value, the identity authentication result is authentication failure.

13. A terminal device, comprising: Comprising: a processor, and a memory connected with the processor in communication; the memory stores computer execution instructions; the processor executes the computer execution instructions stored in the memory to realize the method in any one of claims 1-5.

14. An authentication server, characterized by Comprising: a processor, and a memory connected with the processor in communication; the memory stores computer execution instructions; the processor executes the computer execution instructions stored in the memory to realize the method in any one of claims 6-11.

15. A computer-readable storage medium, characterized in that, The computer readable storage medium stores computer execution instructions, and the computer execution instructions are executed by the processor to realize the method in any one of claims 1-5 or any one of claims 6-11.

16. A computer program product, characterised in that, The computer program is executed by the processor to realize the method in any one of claims 1-5 or any one of claims 6-11.

Images