Business processing method and device, computer equipment and storage medium

Abstract

The invention relates to a business processing method and device, computer equipment, a storage medium and a computer program product. The method comprises the following steps: responding to a business processing request which is sent by a terminal and carries latest pre-stored biological information corresponding to an operation object, storing the pre-stored biological information in an IC card, and sending a biological information acquisition message used for indicating the terminal to acquire the biological information of the operation object to the terminal, and then receiving biological information of the operation object fed back by the terminal. And further, identifying the service type of the service processing request, comparing the pre-stored biological information with the collected biological information according to the service type to obtain a biological information comparison result, and feeding back a service handling indication message used for indicating whether the terminal executes the service operation or not to the terminal according to the biological comparison result. By adopting the method, the security risk in the business processing process can be reduced.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a business processing method, apparatus, computer equipment, storage medium and computer program product. Background Art

[0002] With the development of information security technology, some authentication methods have become more and more popular and mature in financial transactions and identity authentication, such as password authentication and SMS authentication, providing users with more effective identity authentication and access control methods.

[0003] Taking financial transactions as an example, users usually need to create a password when registering or setting up an account, and leave contact information such as a mobile phone number or email address. When the user performs a transaction, he is required to enter the password, and the system verifies whether the password provided by the user matches the password stored in the database; in SMS verification, the system sends a text message containing a verification code to the registered mobile phone number or email address, and the user is required to enter the verification code to verify his identity.

[0004] However, when using methods such as password verification or SMS verification, there is a risk of leakage of passwords and verification codes, making it difficult to ensure that the operation object and the account opener are the same person. Therefore, there are still security risks in the business processing process. Summary of the invention

[0005] Based on this, it is necessary to provide a business processing method, apparatus, computer equipment, computer-readable storage medium and computer program product that can reduce security risks in the business processing process in response to the above technical problems.

[0006] In a first aspect, the present application provides a service processing method. The method comprises:

[0007] In response to a service processing request sent by a terminal, a biometric information collection message is sent to the terminal, wherein the service processing request carries the latest pre-stored biometric information corresponding to the operation object, the pre-stored biometric information is stored in an IC (Integrated Circuit Card) card, and the biometric information collection message is used to instruct the terminal to collect the biometric information of the operation object;

[0008] receiving biological information of the operation object fed back by the terminal;

[0009] Identifying a service type of the service processing request, and comparing the pre-stored biometric information with the collected biometric information according to the service type to obtain a biometric information comparison result;

[0010] According to the biometric information comparison result, a service processing instruction message is fed back to the terminal, and the service processing instruction message is used to instruct the terminal whether to perform a service operation.

[0011] In one embodiment, comparing the pre-stored biometric information with the collected biometric information according to the service type to obtain a biometric information comparison result includes:

[0012] Determine the security certification level according to the business type;

[0013] According to the security authentication level, the pre-stored biometric information is compared with the collected biometric information to obtain a biometric information comparison result.

[0014] In one of the embodiments, the security authentication level includes a first security authentication level and a second security authentication level having a security level higher than the first security authentication level, and the biometric information and the pre-stored biometric information include at least one of fingerprint information, facial information, iris information, and voiceprint information;

[0015] The comparing the pre-stored biometric information with the collected biometric information according to the security authentication level includes:

[0016] When the security authentication level is the first security authentication level, randomly comparing any one of the fingerprint information, the facial information, the iris information, and the voiceprint information;

[0017] When the security authentication level is the second security authentication level, at least one of the fingerprint information, the facial information, the iris information and the voiceprint information is compared.

[0018] In one of the embodiments, the biometric information and the pre-stored biometric information include at least one of fingerprint information, facial information, iris information, and voiceprint information;

[0019] The comparing the pre-stored biometric information with the collected biometric information to obtain a biometric information comparison result includes at least one of the following:

[0020] Item 1: extracting a first fingerprint feature of the biometric information and a second fingerprint feature of the pre-stored biometric information, calculating a similarity between the first fingerprint feature and the second fingerprint feature, comparing the similarity with a preset similarity threshold, and obtaining a biometric information comparison result;

[0021] Item 2: extracting a first facial feature of the biometric information and a second facial feature of the pre-stored biometric information, calculating a similarity between the first facial feature and the second facial feature, and comparing the similarity with a preset similarity threshold to obtain a biometric information comparison result;

[0022] Item 3: extracting a first iris feature of the biometric information and a second iris feature of the pre-stored biometric information, calculating a similarity between the first iris feature and the second iris feature, and comparing the similarity with a preset similarity threshold to obtain a biometric information comparison result;

[0023] Item 4: extracting a first voiceprint feature of the biometric information and a second voiceprint feature of the pre-stored biometric information, calculating the similarity between the first voiceprint feature and the second voiceprint feature, comparing the similarity with a preset similarity threshold, and obtaining a biometric information comparison result.

[0024] In one embodiment, the collecting of biological information of the operation object includes:

[0025] Select a random facial expression from the database and display it;

[0026] Pushing expression collection information, wherein the expression collection information is used to prompt the operation object to make an expression that is the same as the random facial expression;

[0027] The facial expression fed back by the operation object is received, wherein the biological information includes the facial expression.

[0028] In one embodiment, feeding back a service handling instruction message to the terminal according to the biometric information comparison result includes:

[0029] If the biometric information comparison result indicates that the operation object has passed the identity authentication, the corresponding business operation is performed, and the acquired pre-stored biometric information and the collected biometric information are cleared;

[0030] If the biometric information comparison result indicates that the operation object has not passed the identity authentication, a risk warning message is pushed, and the acquired pre-stored biometric information and the collected biometric information are saved. The second business processing indication message is used to instruct the terminal to refuse to perform the business operation, and the risk warning message is used to prompt the operation object to perform identity authentication again.

[0031] In a second aspect, the present application also provides a service processing device. The device includes:

[0032] An information reading module, used to respond to a service processing request sent by a terminal and send a biometric information collection message to the terminal, wherein the service processing request carries the latest pre-stored biometric information corresponding to the operation object, the pre-stored biometric information is stored in an IC card, and the biometric information collection message is used to instruct the terminal to collect the biometric information of the operation object;

[0033] An information collection module, used for receiving the biological information of the operation object fed back by the terminal;

[0034] An information comparison module, used to identify the service type of the service processing request, and compare the pre-stored biometric information with the collected biometric information according to the service type to obtain a biometric information comparison result;

[0035] The operation execution module is used to feed back a business processing instruction message to the terminal according to the biometric information comparison result, and the business processing instruction message is used to instruct the terminal whether to execute the business operation.

[0036] In a third aspect, the present application further provides a computer device, wherein the computer device comprises a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the steps of the above method are implemented.

[0037] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the steps of the above method are implemented.

[0038] In a fifth aspect, the present application further provides a computer program product, wherein the computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the above method are implemented.

[0039] The above-mentioned business processing method, device, business processing equipment, storage medium and computer program product respond to the business processing request sent by the terminal and carries the latest pre-stored biometric information corresponding to the operation object, the pre-stored biometric information is stored in the IC card, and sends a biometric information collection message to the terminal for instructing the terminal to collect the biometric information of the operation object, and then receives the biometric information of the operation object fed back by the terminal, and further identifies the business type of the business processing request, and compares the pre-stored biometric information with the collected biometric information according to the business type, obtains the biometric information comparison result, and then feeds back a business processing instruction message to the terminal for instructing the terminal whether to execute the business operation according to the biometric comparison result. In the above-mentioned scheme, by identifying the business type corresponding to the business processing request, the risk of the business processing request is judged, and then the collected biometric information and pre-stored biometric information of the operation object are compared, and the biometric information comparison result is obtained in combination with the business type to verify the identity authenticity of the operation object, and determine whether to execute the business operation requested by the operation object, so as to reduce the possibility of unauthorized personnel performing sensitive business operations, improve the security of the system, and reduce the security risks in the business processing process. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 An application environment diagram of a business processing method in an embodiment;

[0041] Figure 2 A flowchart of a business processing method in an embodiment;

[0042] Figure 3 A schematic diagram of a process for determining a security authentication level in one embodiment;

[0043] Figure 4 is a schematic diagram of a process for obtaining a biological information comparison result in one embodiment;

[0044] Figure 5 A schematic diagram of a process for collecting biological information of an operation object in one embodiment;

[0045] Figure 6 A schematic diagram of a process for executing corresponding business operations in an embodiment;

[0046] Figure 7 is a structural block diagram of a service processing device in an embodiment;

[0047] Figure 8 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0048] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0049] The service processing method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown. Among them, the terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. The terminal 102 reads the user's card and sends a business processing request to the server 104. The server 104 receives the request and obtains the latest pre-stored biometric information corresponding to the operation object, and sends a biometric information collection message to the terminal 102 to collect the biometric information of the operation object. Further, the server 104 receives the biometric information of the operation object fed back by the terminal 102, identifies the business type of the business processing request, compares the collected biometric information with the pre-stored biometric information according to the business type, and obtains the biometric information comparison result. Then, the server 104 feeds back a business handling instruction message to the terminal 102 according to the biometric information comparison result, and the instruction message is used to indicate whether the terminal 102 performs the business operation. Among them, the terminal 102 can be but not limited to a card reader, a mobile payment terminal, an electronic wallet device, etc. The server 104 can be implemented with an independent server or a server cluster composed of multiple servers.

[0050] In one embodiment, Figure 2 As shown, a business processing method is provided, which is applied to Figure 1 Taking the server 104 in the example as an example, the following steps are included:

[0051] S200, responding to the service processing request sent by the terminal, sending a biometric information collection message to the terminal, the service processing request carries the latest pre-stored biometric information corresponding to the operation object, the pre-stored biometric information is stored in the IC card, and the biometric information collection message is used to instruct the terminal to collect the biometric information of the operation object.

[0052] Among them, the business processing request includes a series of activities or behaviors involving identity authentication, which can be deposit business, withdrawal business, loan business, payment and settlement, foreign exchange business, etc. According to different business processing requests, the service terminal can provide different services for the operation object. Pre-stored biometric information refers to individual biometric information that has been obtained or collected before the operation object issues a business processing request, such as fingerprint, face, voice, iris and other biometric information, which can be stored in IC cards, such as bank cards, credit cards, etc., for use in the identity authentication link when handling business operations. The biometric information collection message can be sent by the server. After receiving the message, the terminal performs the biometric information collection operation, for example, allowing the camera to capture the facial image of the operation object, or pushing fingerprint collection prompt information to the operation object to prompt the user to press the fingerprint collector with a finger.

[0053] Taking the terminal 102 as a withdrawal device and the operation object using a bank card as an example, when the user registers at the bank, in addition to basic personal information, the user can also provide biometric information of the user, such as fingerprints, face, etc. The bank can use a dedicated biometric information collection device or system to collect the user's biometric information, which can be stored in the integrated circuit chip of the bank card for future identity verification. For example, the user can press the fingerprint sensor, and the collected fingerprint information can be encoded and stored in the chip of the user's bank card. In addition, the above process can not only be completed when opening a bank account, but the user can also actively update the pre-stored information regularly or when an unexpected situation causes the biometric information to change, so as to reduce the risk of the user being misjudged in the identity authentication link. For example, as the age increases, the facial information may change, and the user needs to re-collect it every once in a while, and the interval time varies from person to person; or because the user's finger is injured, the fingerprint information may change, so the user may need to update the fingerprint information in time after the injury. There is usually a card slot or card reader on the cash withdrawal device. When handling business operations, the operating object can insert the bank card into the card slot. For some cash withdrawal devices that support near-field communication technology, the operating object can also put the bank card close to the card reader for the cash withdrawal device to read the bank card. Then, the cash withdrawal device starts to read the information on the bank card, including the bank card number, bank card type (debit card, credit card, etc.), preset password, and pre-stored biometric information. The operating object can select the business operation to be handled through the cash withdrawal device. The cash withdrawal device can generate a business processing request with the pre-stored biometric information in the bank card and the corresponding business operation, and the business processing request can be received and responded to by the server. After receiving the business processing request, the server can extract the pre-stored biometric information and send a biometric information collection message to the cash withdrawal device to instruct the cash withdrawal device to collect the biometric information of the operating object.

[0054] S400, receiving biological information of the operation object fed back by the terminal.

[0055] Collecting the biometric information of the operation object usually requires the use of a dedicated biometric information collection device, which can perform different operations according to the required biometric type, such as: using a fingerprint sensor and prompting the operation object to press the sensor to obtain a fingerprint image; using a camera or 3D scanner to capture the operation object's facial image or 3D facial model; using an iris scanner to obtain a detailed image of the operation object's iris; using a recording device to record a sound sample and then extract the operation object's voiceprint features. The biometric information collection process usually requires a high degree of accuracy and repeatability, such as multiple collections, dynamic collection, etc., to ensure that accurate biometric information is obtained. In the process of collecting biometric information, multiple types of biometric information can be collected simultaneously or collected sequentially, which is not limited here. In addition, the biometric information collection device can be integrated into the business operation device or connected to the business operation device as an external device.

[0056] After the terminal has collected the biometric information of the operation object, the collected biometric information can be fed back to the server, which receives and responds to it.

[0057] S600, identifying the service type of the service processing request, and comparing the pre-stored biometric information with the collected biometric information according to the service type to obtain a biometric information comparison result.

[0058] Among them, the business types include withdrawal, balance inquiry, transfer, etc., which are usually selected by the operation object on the terminal. Exemplarily, taking the terminal as an ATM device as an example, the operation object selects the business type to be executed on the ATM device, such as withdrawal, balance inquiry, transfer, etc., and the ATM device generates a business processing request and sends it to the computer device in response to the operation of the operation object. The computer device identifies the business type of the business processing request and sends a biometric information collection message to the ATM device to prompt the operation object to provide specific biometric information, such as fingerprint, face, iris, voice, etc. After receiving the prompt, the operation object can input biometric information by pressing a fingerprint sensor, a facial recognition camera, an iris scanner, a recording device, etc. The server receives the collected biometric information of the operation object fed back by the terminal, and compares the collected biometric information with the pre-stored biometric information. The comparison method can be to first match the collected biometric information with the pre-stored biometric information to obtain the similarity between the collected biometric information and the pre-stored biometric information, and then determine the biometric information comparison result based on the size relationship between the similarity and the system preset similarity. This biometric information comparison process can increase the security of business processing, so that only legitimate cardholders can perform sensitive business operations.

[0059] S800, feeding back a service processing instruction message to the terminal according to the biometric information comparison result, where the service processing instruction message is used to instruct the terminal whether to execute the service operation.

[0060] Exemplarily, after the server has executed the biometric information comparison process and obtained the corresponding comparison result, it can generate a corresponding business handling instruction message according to the result and send it to the terminal to prompt the terminal to perform the corresponding business operation. For example, when the biometric information comparison is successful, the server will confirm the identity of the operation object, indicating that the operation object is a legal cardholder. After the identity of the operation object is confirmed, the business handling instruction message will prompt the terminal to authorize the execution of the business operation requested by the user, such as withdrawal, transfer, balance inquiry, payment or other business operations. In addition, the server can also generate a business processing report, which contains detailed information of the executed business operation, such as transaction amount, date and time, etc. The operation object can choose to print the report or view it on the terminal to track the user's business operation record later. When the biometric information comparison fails, the business handling instruction message will prompt the terminal to refuse to execute the business operation requested by the operation object. At this time, the terminal can also provide an option to contact bank support or customer service so that the user can contact the bank staff to get help or other ways to solve the problem, such as allowing the operation object to request to execute the business operation again, reducing the identity authentication failure caused by the environment or the accidental nature of the collection process. If multiple biometric information comparisons fail, the terminal can display an error message to inform the user of the identity authentication failure; it can also temporarily lock the user's bank card to prevent unauthorized access; it can also trigger additional security measures, such as sending a risk warning message to the user of the bank card through the contact information reserved when the card was opened, and if necessary, notifying the bank's anti-fraud team or relevant department to conduct an investigation.

[0061] The above-mentioned business processing method responds to the business processing request sent by the terminal and carries the latest pre-stored biometric information corresponding to the operation object, the pre-stored biometric information is stored in a physical card that can be recognized by the terminal, and sends a biometric information collection message to the terminal for instructing the terminal to collect the biometric information of the operation object, and then receives the biometric information of the operation object fed back by the terminal. Further, the business type of the business processing request is identified, and according to the business type, the pre-stored biometric information and the collected biometric information are compared to obtain the biometric information comparison result, and then according to the biometric comparison result, a business processing instruction message for instructing the terminal whether to execute the business operation is fed back to the terminal. In the above-mentioned scheme, by identifying the business type corresponding to the business processing request, the risk of the business processing request is judged, and then the collected biometric information and the pre-stored biometric information of the operation object are compared, and the biometric information comparison result is obtained in combination with the business type to verify the identity authenticity of the operation object and determine whether to execute the business operation requested by the operation object. In this way, the possibility of unauthorized personnel performing sensitive business operations can be reduced, the security of the system is improved, and the security risks in the business processing process are reduced.

[0062] In one embodiment, Figure 3 As shown, S600 includes:

[0063] S620: Identify the business type of the business processing request, and determine the security authentication level according to the business type.

[0064] Among them, the security authentication level is usually divided according to different standards and requirements to evaluate and measure the security of the business. For example, in banking business, the security authentication level of the deposit business can be set to the first security authentication level, and the security authentication level of the withdrawal business can be set to the second security authentication level, wherein the second security authentication level can be higher than the security authentication level of the first security authentication level. When the operation object issues a business processing request, the computer device can analyze the corresponding business type according to the business processing request, and find the corresponding security authentication level in the system according to the business type.

[0065] S640: Compare the pre-stored biometric information with the collected biometric information according to the security authentication level to obtain a biometric information comparison result.

[0066] Among them, according to the different security authentication levels corresponding to the business type, the corresponding biometric information comparison process and results may be different. The biometric information comparison corresponding to the high security authentication level usually requires the use of more stringent algorithms, more complex biometric information comparison technology and stronger anti-fraud measures. For example, when the business type corresponds to a high security authentication level, it may be required to collect multiple biometric information, such as requiring the operation object to enter fingerprint information and facial information, and compare the pre-stored biometric information with the collected biometric information, and when the fingerprint comparison result and the facial comparison result both indicate that the identity authentication has passed, the biometric information comparison result indicates that the identity authentication has passed; it may also be possible to set a higher similarity threshold in the biometric information comparison process, compare the pre-stored biometric information with the collected biometric information, and only when the collected biometric information is highly matched with the pre-stored biometric information, the biometric information comparison result indicates that the identity authentication has passed.

[0067] In this embodiment, the business type of the business operation issued by the operation object is identified, and the corresponding security authentication level is determined according to the business type, and then according to the security authentication level, the biometric information comparison process is started to compare the pre-stored biometric information and the collected biometric information to obtain the biometric information comparison result. It can be understood that biometric information comparison is a method for identity authentication and access control, which can be adjusted and implemented according to different scenario security requirements and security authentication levels. Different security authentication levels are set for different businesses to meet the security requirements of different businesses, which not only improves the security of high-risk businesses, but also reduces the workload and resources spent on identity authentication when processing low-risk businesses.

[0068] In one embodiment, the security authentication level includes a first security authentication level and a second security authentication level having a security level higher than the first security authentication level, and the biometric information and the pre-stored biometric information include at least one of fingerprint information, facial information, iris information, and voiceprint information;

[0069] like Figure 4 As shown, S640 includes:

[0070] S642: When the security authentication level is the first security authentication level, randomly compare any one of the fingerprint information, facial information, iris information and voiceprint information.

[0071] In the case of the first security authentication level, the business type is usually a low-risk business, and its biometric information comparison process can be relatively simple. For example, when the server determines the business type corresponding to the business operation handled by the operation object, and determines that the security authentication level corresponding to the business type is the first security authentication level, the server can randomly select a type of biometric information from the database, such as fingerprint information. At this time, it only needs to compare the collected fingerprint information with the pre-stored fingerprint information to obtain the fingerprint information comparison result, and obtain the final biometric information comparison result based on the fingerprint information comparison result.

[0072] S644: When the security authentication level is the second security authentication level, compare at least one of the fingerprint information, the facial information, the iris information, and the voiceprint information.

[0073] In the case of the second security authentication level, the business type is usually a high-risk business, and its biometric information comparison process can be relatively complex. Exemplarily, when the server determines the business type corresponding to the business operation handled by the operation object, and determines that the security authentication level corresponding to the business type is the second security authentication level, the server can randomly select at least one biometric information from the database, such as fingerprint information and iris information. At this time, it is necessary to compare the collected fingerprint information with the pre-stored fingerprint information, and compare the collected iris information with the pre-stored iris information to obtain the fingerprint information comparison result and the iris information comparison result, and obtain the biometric information comparison result based on the fingerprint information comparison result and the iris information comparison result. For example, only when the fingerprint information comparison result and the iris information comparison result both show that the identity authentication is passed, the obtained biometric information comparison result will show that the identity authentication is passed.

[0074] In this embodiment, if the security authentication level corresponding to the business to be handled by the operation object is the first authentication level, only one type of biometric information needs to be randomly compared to obtain the biometric information comparison result, which can reduce the resources and workload spent on the identity verification link in the process of handling low-risk businesses; if the security authentication level corresponding to the business to be handled by the operation object is the second authentication level, it is necessary to compare at least one type of biometric information to obtain the biometric information comparison result, which is conducive to reducing the security risks in the process of handling high-risk businesses.

[0075] In one embodiment, the biometric information and the pre-stored biometric information include at least one of fingerprint information, facial information, iris information, and voiceprint information; and the pre-stored biometric information and the collected biometric information are compared to obtain a biometric information comparison result, including at least one of the following:

[0076] The first item: extracting a first fingerprint feature of the biometric information, and extracting a second fingerprint feature of the pre-stored biometric information, calculating the similarity between the first fingerprint feature and the second fingerprint feature, comparing the similarity with a preset similarity threshold, and obtaining a biometric information comparison result.

[0077] The second item: extracting a first facial feature of the biometric information and extracting a second facial feature of the pre-stored biometric information, calculating the similarity between the first facial feature and the second facial feature, comparing the similarity with a preset similarity threshold, and obtaining a biometric information comparison result.

[0078] Item 3: extracting a first iris feature of biological information, and extracting a second iris feature of pre-stored biological information, calculating the similarity between the first iris feature and the second iris feature, comparing the similarity with a preset similarity threshold, and obtaining a biological information comparison result.

[0079] Item 4: extracting a first voiceprint feature of biometric information and a second voiceprint feature of pre-stored biometric information, calculating the similarity between the first voiceprint feature and the second voiceprint feature, comparing the similarity with a preset similarity threshold, and obtaining a biometric information comparison result.

[0080] Among them, the first fingerprint feature, the first facial feature, the first iris feature, and the first voiceprint feature are biometric features extracted from the collected fingerprint information, the collected facial information, the collected iris information, and the collected voiceprint information, and can be feature vectors, feature models, or a set of feature values, etc., used to describe the characteristics of the collected biometric information; the second fingerprint feature, the second facial feature, the second iris feature, and the second voiceprint feature are biometric features extracted from the pre-stored fingerprint information, the pre-stored facial information, the pre-stored iris information, and the pre-stored voiceprint information, and can be feature vectors, feature models, or a set of feature values, etc., used to describe the characteristics of the pre-stored biometric information. The similarity threshold can be pre-set, and the similarity threshold represents the recognized similarity level, which is usually determined according to the needs and security requirements of the system.

[0081] For any biometric information among fingerprint information, facial information, iris information and voiceprint information, the biometric information comparison process is similar. Taking fingerprint information as an example, from the collected fingerprint information, a biometric information extraction algorithm is used, which is used to extract biometric features from the biometric information, which is not limited here, to extract the first fingerprint feature, and the second fingerprint feature is extracted from the pre-stored fingerprint information, wherein the second fingerprint feature may also have been stored in the IC card and can be directly read when used. A biometric information comparison algorithm is used, which is used to compare the similarity between two sets of biometric information features. Commonly used similarity measurement methods include cosine similarity, Euclidean distance or correlation coefficient, etc., which are not limited here, and the similarity between the first fingerprint feature and the second fingerprint feature is calculated. The calculated similarity is compared with the preset similarity threshold to obtain the biometric information comparison result. For example, if the similarity is greater than or equal to the preset similarity threshold, the verification is considered successful.

[0082] In this embodiment, by extracting biological features from biological information, and comparing the biological features in the collected biological information with the biological features in the pre-stored biological information, the similarity between the two is obtained, and then the similarity is compared with a preset similarity threshold, and the biological information comparison result is obtained based on the similarity comparison result. By extracting biological features and setting a similarity threshold, the accuracy of the comparison process can be improved, thereby making the biological information comparison result more reliable.

[0083] In one embodiment, Figure 5 As shown, S400 includes:

[0084] S420: Select a random facial expression from the database and display it.

[0085] Exemplarily, a group of facial expression images may be stored in the database of the computer device, and each image should correspond to a different facial expression, such as happiness, anger, surprise, etc. When the cash withdrawal device receives a business operation request from an operation object, it may query the facial expression images in the database and randomly select one to push to the operation object, for example, it may be displayed on the display screen of the computer device.

[0086] S440: Pushing expression collection information, where the expression collection information is used to prompt the operation object to make an expression that is the same as the random facial expression.

[0087] The operation subject can receive an expression collection message from the display screen of the computer device, and the expression collection message prompts them to imitate a facial expression, and the facial expression is randomly generated. The operation subject tries to imitate the required facial expression according to the prompt of the expression collection message.

[0088] S460: Receive facial expressions fed back by the operation object, where the biological information includes facial expressions.

[0089] The camera of the computer device or other devices with facial image capture function can capture the facial expression of the operating user's feedback and use the facial expression as one of the collected biometric information.

[0090] In this embodiment, by randomly selecting facial expressions and pushing expression collection information to the operating object, the operating object is prompted to make an expression that is the same as the random facial expression, and the computer device receives the facial expression fed back by the operating object and uses it as one of the collected biometric information. The above method of collecting biometric information can effectively reduce the impact of photos on the process of collecting facial information because it collects the user's dynamic facial information; in addition, considering that the facial expressions made by the operating object are randomly selected, it can also effectively reduce the impact of videos on the process of collecting facial information.

[0091] In one embodiment, Figure 6 As shown, S800 includes:

[0092] S820: If the biometric information comparison result indicates that the operation object has passed the identity authentication, a first service processing instruction message is sent to the terminal, and the acquired pre-stored biometric information and the collected biometric information are cleared. The first service processing instruction message is used to instruct the terminal to perform the service operation.

[0093] When the biometric information comparison result indicates that the operation object has passed the identity authentication, the server sends a first business processing instruction message to the terminal to instruct the terminal to perform the corresponding business operation. After receiving the instruction message, the terminal can perform the business operation requested by the operation user, such as withdrawal, deposit, etc. After performing the corresponding business operation, the server can clear the pre-stored biometric information read from the IC card and the collected biometric information, and when the above information is needed next time, the pre-stored biometric information can be read from the IC card again, and the user information of the operation object can be re-collected.

[0094] S840: If the biometric information comparison result indicates that the operation object has not passed the identity authentication, a second business processing instruction message is sent to the terminal, and a risk warning message is pushed, and the acquired pre-stored biometric information and the collected biometric information are saved. The second business processing instruction message is used to instruct the terminal to refuse to perform the business operation, and the risk warning message is used to prompt the operation object to perform identity authentication again.

[0095] If the biometric information comparison result indicates that the operation object has not passed the identity authentication, the server sends a second business handling instruction message to the terminal to instruct the terminal to reject the business operation, and pushes a risk warning message to the operation object, which can be presented on the display screen to prompt the operation object to authenticate the identity again. The server can also save the acquired pre-stored biometric information and the collected biometric information, so that if the operation object and the IC card holder are not the same person, the biometric information of the operation object can be quickly obtained, which is conducive to subsequent tracking.

[0096] In this embodiment, the server will send different business handling instruction messages to the terminal according to the result of the biometric information comparison. When the result of the biometric information comparison indicates that the operation object has passed the identity authentication, the terminal performs the business operation requested by the operation user, and the server clears the pre-stored biometric information and the collected biometric information read from the IC card instead of saving the above biometric information in the database, which can reduce the occupation of database resources and reduce the risk of the user's biometric information being intercepted and stolen during the information transmission process. When the result of the biometric information comparison indicates that the operation object has not passed the identity authentication, the terminal refuses to perform the business operation requested by the operation user, and generates a risk warning message to prompt the operation object to perform identity authentication again, and saves the acquired pre-stored biometric information and the collected biometric information, so that when the operation object and the IC card holder are not the same person, the operation object's biometric information can be quickly obtained, which is conducive to subsequent tracking.

[0097] In order to make a clearer description of the service processing method provided by the present application, the following is a specific embodiment and the attached Figure 6 To illustrate, this specific embodiment includes the following steps:

[0098] S200: Responding to the business operation of the operation object, obtaining the latest pre-stored biometric information of the operation object, and storing the pre-stored biometric information in the IC card.

[0099] S420: Randomly select a random facial expression from the database and display it.

[0100] S440: Pushing expression collection information, where the expression collection information is used to prompt the operation object to make an expression that is the same as the random facial expression.

[0101] S460: Receive facial expressions fed back by the operation object, where the biological information includes facial expressions.

[0102] S620: Identify the business type of the business processing request, and determine the security authentication level according to the business type.

[0103] S642: When the security authentication level is the first security authentication level, randomly compare any one of the fingerprint information, facial information, iris information and voiceprint information to obtain a biometric information comparison result.

[0104] S644: When the security authentication level is the second security authentication level, at least one of the fingerprint information, the facial information, the iris information, and the voiceprint information is compared to obtain a biometric information comparison result.

[0105] Among them, S642 and S644 involve comparing the pre-stored biometric information with the collected biometric information. For any biometric information among fingerprint information, facial information, iris information and voiceprint information, the biometric information comparison process is similar. Taking fingerprint information as an example, the first fingerprint feature of the biometric information is extracted, and the second fingerprint feature of the pre-stored biometric information is extracted, wherein the first fingerprint feature is a biometric feature extracted from the collected fingerprint information, and the second fingerprint feature is a biometric feature extracted from the pre-stored fingerprint information. Then, the similarity between the first fingerprint feature and the second fingerprint feature is calculated, and the similarity is compared with the preset similarity threshold to obtain the biometric information comparison result.

[0106] S820: If the biometric information comparison result indicates that the operation object has passed the identity authentication, if the biometric information comparison result indicates that the operation object has passed the identity authentication, send a first business processing instruction message to the terminal, and clear the acquired pre-stored biometric information and the collected biometric information. The first business processing instruction message is used to instruct the terminal to perform business operations.

[0107] S840: If the biometric information comparison result indicates that the operation object has not passed the identity authentication, a second business processing instruction message is sent to the terminal, and a risk warning message is pushed, and the acquired pre-stored biometric information and the collected biometric information are saved. The second business processing instruction message is used to instruct the terminal to refuse to perform the business operation, and the risk warning message is used to prompt the operation object to perform identity authentication again.

[0108] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0109] Based on the same inventive concept, the embodiment of the present application also provides a business processing device for implementing the business processing method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in the one or more business processing device embodiments provided below can refer to the limitations on the business processing method above, and will not be repeated here.

[0110] In one embodiment, Figure 7 As shown, a business processing device 700 is provided, including: an information reading module 702, an information collection module 704, an information comparison module 706 and an operation execution module 704, wherein:

[0111] The information reading module 702 is used to respond to the business processing request sent by the terminal and send a biometric information collection message to the terminal. The business processing request carries the latest pre-stored biometric information corresponding to the operation object. The pre-stored biometric information is stored in the IC card. The biometric information collection message is used to instruct the terminal to collect the biometric information of the operation object.

[0112] The information collection module 704 is used to receive the biological information of the operation object fed back by the terminal.

[0113] The information comparison module 706 is used to identify the service type of the service processing request, and compare the pre-stored biometric information with the collected biometric information according to the service type to obtain a biometric information comparison result.

[0114] The operation execution module 708 is used to feed back a service processing instruction message to the terminal according to the biometric information comparison result. The service processing instruction message is used to instruct the terminal whether to execute the service operation.

[0115] In some embodiments, the information collection module 704 is specifically used to select random facial expressions from a database and display them; push expression collection information, which is used to prompt the operating object to make an expression that is the same as the random facial expression; receive facial expressions fed back by the operating object, and the biological information includes facial expressions.

[0116] In some embodiments, the information comparison module 706 is specifically used to determine the security authentication level according to the business type; and compare the pre-stored biometric information with the collected biometric information according to the security authentication level to obtain the biometric information comparison result. The security authentication level includes a first security authentication level and a second security authentication level with a security level higher than the first security authentication level, and the biometric information and the pre-stored biometric information include at least one of fingerprint information, facial information, iris information, and voiceprint information. When the security authentication level is the first security authentication level, any one of the fingerprint information, facial information, iris information, and voiceprint information is randomly compared; when the security authentication level is the second security authentication level, at least one of the fingerprint information, facial information, iris information, and voiceprint information is compared.

[0117] In some embodiments, the biometric information and pre-stored biometric information include at least one of fingerprint information, facial information, iris information, and voiceprint information; the information comparison module 706 is specifically used for at least one of the following:

[0118] Item 1: extracting a first fingerprint feature of the biometric information and a second fingerprint feature of the pre-stored biometric information, calculating the similarity between the first fingerprint feature and the second fingerprint feature, comparing the similarity with a preset similarity threshold, and obtaining a biometric information comparison result;

[0119] Item 2: extracting a first facial feature of the biometric information, and extracting a second facial feature of the pre-stored biometric information, calculating the similarity between the first facial feature and the second facial feature, comparing the similarity with a preset similarity threshold, and obtaining a biometric information comparison result;

[0120] Item 3: extracting a first iris feature of biometric information and a second iris feature of pre-stored biometric information, calculating the similarity between the first iris feature and the second iris feature, comparing the similarity with a preset similarity threshold, and obtaining a biometric information comparison result;

[0121] Item 4: extracting a first voiceprint feature of biometric information and a second voiceprint feature of pre-stored biometric information, calculating the similarity between the first voiceprint feature and the second voiceprint feature, comparing the similarity with a preset similarity threshold, and obtaining a biometric information comparison result.

[0122] In some specific embodiments, the operation execution module 708 is specifically used to, if the biometric information comparison result indicates that the operation object has passed the identity authentication, send a first business processing instruction message to the terminal, and clear the acquired pre-stored biometric information and the collected biometric information, the first business processing instruction message is used to instruct the terminal to execute the business operation; if the biometric information comparison result indicates that the operation object has not passed the identity authentication, send a second business processing instruction message to the terminal, push a risk warning message, and save the acquired pre-stored biometric information and the collected biometric information, the second business processing instruction message is used to instruct the terminal to refuse to execute the business operation, and the risk warning message is used to prompt the operation object to perform identity authentication again.

[0123] Each module in the above-mentioned business processing device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module above.

[0124] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Figure 8 As shown. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store bioinformatics data. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a business processing method is implemented.

[0125] Those skilled in the art will understand that Figure 8 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0126] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.

[0127] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0128] The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0129] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be construed as limiting the scope of the present application. It should be noted that, for a person of ordinary skill in the art, several modifications and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A business processing method, characterized in that: The method comprises: In response to a service processing request sent by a terminal, a biometric information collection message is sent to the terminal, wherein the service processing request carries the latest pre-stored biometric information corresponding to the operation object, the pre-stored biometric information is stored in an IC card, and the biometric information collection message is used to instruct the terminal to collect the biometric information of the operation object; receiving biological information of the operation object fed back by the terminal; Identifying a service type of the service processing request, and comparing the pre-stored biometric information with the collected biometric information according to the service type to obtain a biometric information comparison result; According to the biometric information comparison result, a service processing instruction message is fed back to the terminal, and the service processing instruction message is used to instruct the terminal whether to perform a service operation.

2. The method according to claim 1, characterized in that: According to the service type, the pre-stored biometric information and the collected biometric information are compared to obtain a biometric information comparison result, including: Determine the security certification level according to the business type; According to the security authentication level, the pre-stored biometric information is compared with the collected biometric information to obtain a biometric information comparison result.

3. The method according to claim 2, characterized in that The security authentication level includes a first security authentication level and a second security authentication level having a security level higher than the first security authentication level, and the biometric information and the pre-stored biometric information include at least one of fingerprint information, facial information, iris information and voiceprint information; The comparing the pre-stored biometric information with the collected biometric information according to the security authentication level includes: When the security authentication level is the first security authentication level, randomly comparing any one of the fingerprint information, the facial information, the iris information, and the voiceprint information; When the security authentication level is the second security authentication level, at least one of the fingerprint information, the facial information, the iris information and the voiceprint information is compared.

4. The method according to claim 1, characterized in that The biometric information and the pre-stored biometric information include at least one of fingerprint information, facial information, iris information and voiceprint information; The comparing the pre-stored biometric information with the collected biometric information to obtain a biometric information comparison result includes at least one of the following: Item 1: extracting a first fingerprint feature of the biometric information, and extracting a second fingerprint feature of the pre-stored biometric information, calculating the similarity between the first fingerprint feature and the second fingerprint feature, and comparing the similarity with a preset similarity threshold to obtain a biometric information comparison result; Item 2: extracting a first facial feature of the biometric information and a second facial feature of the pre-stored biometric information, calculating a similarity between the first facial feature and the second facial feature, and comparing the similarity with a preset similarity threshold to obtain a biometric information comparison result; Item 3: extracting a first iris feature of the biometric information and a second iris feature of the pre-stored biometric information, calculating a similarity between the first iris feature and the second iris feature, and comparing the similarity with a preset similarity threshold to obtain a biometric information comparison result; Item 4: extracting a first voiceprint feature of the biometric information and a second voiceprint feature of the pre-stored biometric information, calculating the similarity between the first voiceprint feature and the second voiceprint feature, comparing the similarity with a preset similarity threshold, and obtaining a biometric information comparison result.

5. The method according to any one of claims 1 to 4, characterized in that: The biological information of the acquisition operation object includes: Select a random facial expression from the database and display it; Pushing expression collection information, wherein the expression collection information is used to prompt the operation object to make an expression that is the same as the random facial expression; The facial expression fed back by the operation object is received, wherein the biological information includes the facial expression.

6. The method according to any one of claims 1 to 4, characterized in that: Feedback of a service handling instruction message to the terminal according to the biometric information comparison result includes: If the biometric information comparison result indicates that the operation object has passed the identity authentication, a first service processing instruction message is sent to the terminal, and the acquired pre-stored biometric information and the collected biometric information are cleared, wherein the first service processing instruction message is used to instruct the terminal to perform a service operation; If the biometric information comparison result indicates that the operation object has not passed the identity authentication, a second business processing instruction message is sent to the terminal, and a risk warning message is pushed, and the acquired pre-stored biometric information and the collected biometric information are saved. The second business processing instruction message is used to instruct the terminal to refuse to perform business operations, and the risk warning message is used to prompt the operation object to perform identity authentication again.

7. A service processing device, characterized in that: The device comprises: An information reading module, configured to respond to a service processing request sent by a terminal and send a biometric information collection message to the terminal, wherein the service processing request carries the latest pre-stored biometric information corresponding to the operation object, the pre-stored biometric information is stored in a physical card that can be recognized by the terminal, and the biometric information collection message is used to instruct the terminal to collect the biometric information of the operation object; An information collection module, used for receiving the biological information of the operation object fed back by the terminal; An information comparison module, used to identify the service type of the service processing request, and compare the pre-stored biometric information with the collected biometric information according to the service type to obtain a biometric information comparison result; The operation execution module is used to feed back a business processing instruction message to the terminal according to the biometric information comparison result, and the business processing instruction message is used to instruct the terminal whether to execute the business operation.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images