Identity verification method and system

Abstract

The invention relates to an identity verification method and system, relates to the technical field of intelligent door locks, is applied to an intelligent door lock, and comprises the following steps: obtaining an encrypted authentication credential stored in a mobile phone SIM card of a current user; wherein the authentication credential is encrypted by the trusted identity authentication system by adopting a secret key corresponding to the intelligent door lock, and the encrypted authentication credential is issued to a mobile phone SIM card of the current user by an operator trusted application platform; acquiring identity information of a current user; calling an internally stored secret key, and decrypting the encrypted authentication credential; verifying whether the identity information of the current user is credible or not according to the decrypted authentication credential; if yes, agreeing to unlock; otherwise, refusing to unlock. According to the invention, multi-factor identity authentication of the mobile phone number, the SIM card and the user face is realized based on the SIM card, high-credibility identity authentication is realized, the security of identity authentication is improved, and the method is suitable for application scenarios with frequent personnel mobility.

Description

Technical Field

[0001] The present invention relates to the technical field of smart door locks, and in particular to an identity authentication method and system. Background Art

[0002] With the continuous development of digital technology, more and more intelligent modules are integrated into door locks, gates and other equipment. There are more and more applications of visitor identity authentication through smart cards, fingerprints, face recognition and other technologies. Some places with higher security use dynamic password authentication, and some home users have replaced smart door locks that support face recognition.

[0003] An important function of current smart door locks or gates is to support keyless identity authentication. Whether it is through offline authentication or online authentication, it is necessary to introduce identity authentication logic units in door locks or gates and related systems. Some offline home door locks generate pre-made face templates by collecting facial images of family members to support face matching in daily applications. Some online smart door locks or gates collect faces of fixed groups of people in advance through user mobile apps or dedicated collection terminals and jointly realize personnel identity authentication through the networking module of door locks or gates, such as some units or community access control; some door locks or gates with high personnel mobility use dynamic passwords to send to the authorized personnel's mobile phones, and the authorized personnel enter the dynamic password to realize identity authentication.

[0004] However, the above-mentioned identity authentication technology solutions are becoming increasingly difficult to promote against the backdrop of increasingly stringent requirements for data security protection and protection of personal sensitive information. Offline identity authentication technology using prefabricated facial images is not suitable for application scenarios with frequent personnel mobility; online facial recognition technology solutions not only need to comply with strict data security protection, but also need to strengthen prevention of network attacks; and online and offline dynamic password issuance technology solutions cannot guarantee that the authorized person will leak identity authentication credentials.

[0005] The above solution is not applicable in places with frequent personnel mobility, strict terminal door lock or gate control, and inconvenient access to wireless networks or remote systems. For example, how to ensure the authenticity and validity of personnel in government public rental housing and personnel management in homestays all require new door lock identity authentication technology solutions. Summary of the invention

[0006] The present invention is intended to provide an identity authentication method and system to solve the deficiencies in the prior art. The technical problem to be solved by the present invention is achieved through the following technical solutions.

[0007] A first aspect of an embodiment of the present invention provides an identity authentication method, which is applied to a smart door lock, and the method includes:

[0008] Obtain the encrypted authentication credentials stored in the current user's mobile phone SIM card;

[0009] The authentication credentials are encrypted by the trusted identity authentication system using a key corresponding to the smart door lock, and the encrypted authentication credentials are sent by the operator's trusted application platform to the SIM card of the current user's mobile phone;

[0010] Obtaining identity information of the current user;

[0011] Call the internally stored key to decrypt the encrypted authentication credentials;

[0012] Based on the decrypted authentication credentials, verify whether the identity information of the current user is credible; if so, agree to unlock; otherwise, refuse to unlock.

[0013] Furthermore, the encrypted authentication credentials stored in the SIM card of the current user's mobile phone are obtained, specifically:

[0014] Through the NFC function, the encrypted authentication credentials stored in the current user's mobile phone SIM card are obtained.

[0015] Furthermore, the authentication credentials include: mobile phone number, business serial number, door lock number, trusted face information and valid access time.

[0016] Further, the method verifies whether the identity information of the current user is credible according to the decrypted authentication credentials; if so, agrees to unlock; otherwise, refuses to unlock, specifically including:

[0017] Compare the current user's mobile phone number with the mobile phone number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0018] Compare the business serial number of the current user with the business serial number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0019] Compare the door lock number of the smart door lock with the door lock number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0020] Compare the actual face information of the current user with the trusted face information in the authentication credentials to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0021] Determine whether the current access time is within the valid access time range in the authentication credentials; if so, agree to unlock; otherwise, refuse to unlock.

[0022] Furthermore, the trusted identity authentication system stores a mapping relationship between personnel identities and mobile phone numbers.

[0023] A second aspect of an embodiment of the present invention provides an identity authentication system, which is applied to a smart door lock, and the system includes:

[0024] The first acquisition module is used to obtain the encrypted authentication credentials stored in the SIM card of the current user's mobile phone;

[0025] The authentication credentials are encrypted by the trusted identity authentication system using a key corresponding to the smart door lock, and the encrypted authentication credentials are sent by the operator's trusted application platform to the SIM card of the current user's mobile phone;

[0026] A second acquisition module is used to acquire the identity information of the current user;

[0027] A decryption module, used to call the internally stored key to decrypt the encrypted authentication credentials;

[0028] The verification module is used to verify whether the identity information of the current user is credible based on the decrypted authentication credentials; if so, agree to unlock; otherwise, refuse to unlock.

[0029] Furthermore, the first acquisition module is specifically used for:

[0030] Through the NFC function, the encrypted authentication credentials stored in the current user's mobile phone SIM card are obtained.

[0031] Furthermore, the authentication credentials include: mobile phone number, business serial number, door lock number, trusted face information and valid access time.

[0032] Furthermore, the verification module is specifically used for:

[0033] Compare the current user's mobile phone number with the mobile phone number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0034] Compare the business serial number of the current user with the business serial number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0035] Compare the door lock number of the smart door lock with the door lock number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0036] Compare the actual face information of the current user with the trusted face information in the authentication credentials to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0037] Determine whether the current access time is within the valid access time range in the authentication credentials; if so, agree to unlock; otherwise, refuse to unlock.

[0038] Furthermore, the trusted identity authentication system stores a mapping relationship between personnel identities and mobile phone numbers.

[0039] The embodiments of the present invention include the following advantages:

[0040] The identity authentication method and identity authentication system provided in the embodiments of the present invention implement multi-factor identity authentication based on the mobile phone number, SIM card, and user face based on the SIM card, thereby achieving highly reliable identity authentication and improving the security of identity authentication. The method and system are suitable for application scenarios with frequent personnel mobility and strict control of terminal door locks or gates, and are conducive to the promotion of multi-factor identity authentication technology. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 It is a flowchart of an identity authentication method provided by an embodiment of the present invention;

[0042] Figure 2 It is a schematic diagram of a framework of an identity authentication method provided by an embodiment of the present invention;

[0043] Figure 3 It is a structural diagram of an identity authentication system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0044] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0045] Embodiment 1:

[0046] Reference Manual Attached Figure 1 , showing a flow chart of an identity authentication method provided by an embodiment of the present invention.

[0047] Reference Manual Attached Figure 2 , showing a schematic diagram of the framework of an identity authentication method provided by an embodiment of the present invention.

[0048] An identity authentication method provided by an embodiment of the present invention is applied to a smart door lock, and the method includes:

[0049] S1: Obtain the encrypted authentication credentials stored in the SIM card of the current user's mobile phone.

[0050] Among them, the SIM card (Subscriber Identity Module) is an integrated circuit card used to store user identity information on mobile devices (such as mobile phones and tablets). It is an indispensable part of mobile communication devices, helping devices access the mobile operator's network and providing voice calls, text messages, data services and other functions.

[0051] Among them, the authentication credentials are encrypted by the trusted identity authentication system using the key corresponding to the smart door lock.

[0052] Optionally, the door lock number of the smart door lock is used as an input parameter to participate in the key generation process, and the door lock number is used as the initial parameter or salt value (salt) for key generation, and a unique key is generated through a symmetric encryption algorithm (such as AES). The key is bound to the door lock number, and only the corresponding smart door lock can be used. Furthermore, after the key is generated, the trusted identity authentication system can attach the smart door lock number to the key, and combine the smart door lock number and the key through a hash or encryption algorithm to form a binding relationship between the key and the smart door lock.

[0053] Optionally, one or more of the mobile phone number, the unique serial number of the SIM card, the hash value of the mobile phone number, the hash value of the unique serial number of the SIM card, and the door lock number are used as input parameters to participate in the key generation process. The initial parameters required for key generation generated by the above input parameters are used to generate a unique key through a symmetric encryption algorithm or an HMAC algorithm. The key is bound to the door lock number, mobile phone number or SIM card, and can only be used by the corresponding smart door lock and the corresponding mobile phone SIM card.

[0054] Furthermore, after the key is generated, the trusted identity authentication system can attach the smart door lock number, mobile phone number or SIM card unique serial number to the key, and then combine the smart door lock number, mobile phone number or SIM card unique serial number with the key through a hash or encryption algorithm to form a binding relationship between the key and the smart door lock, mobile phone number or SIM card.

[0055] Optionally, the authorized service serial number and door lock number are used as input parameters to participate in the key generation process. The service serial number and door lock number are used as the initial parameters required for key generation, and a unique key is generated through a symmetric encryption algorithm or HMAC algorithm. The key is bound to the door lock number and service serial number, and only the corresponding smart door lock and the corresponding service serial number can be used.

[0056] Furthermore, after the key is generated, the trusted identity authentication system can attach the smart door lock number and business serial number to the key, and then combine the smart door lock number, business serial number and key through a hash or encryption algorithm to form a binding relationship between the key and the smart door lock and business serial number.

[0057] Optionally, the source of the key generation parameters used is not limited to mobile phone number, business serial number, door lock number and parameters derived from them through one or more hash algorithms or encryption algorithms.

[0058] In the present invention, the trusted identity authentication system uses a key corresponding to the smart door lock to encrypt the authentication credentials, thereby ensuring the authenticity and integrity of each trusted identity credential, which cannot be modified externally.

[0059] Optionally, the trusted identity authentication system stores a mapping relationship between personnel identities and mobile phone numbers.

[0060] Optionally, the trusted identity authentication system has pre-collected a large amount of trusted facial information. In some regulatory scenarios, the system refers to the public security citizen identity information database or a security identity authentication system connected to the citizen identity information database, such as a public tenant management system.

[0061] Among them, the encrypted authentication credentials are sent from the operator's trusted application platform to the current user's mobile phone SIM card.

[0062] Optionally, the operator's trusted application platform is a SIM card management platform that manages SIM card applications, security domains, and command issuance. The operator's trusted application platform can open a specific security domain to the trusted identity authentication system to install trusted identity applications and support the writing of trusted identity credentials issued by commands.

[0063] It should be noted that before a user needs to access a smart door lock, the trusted identity authentication system selects a specific key corresponding to the smart door lock, encrypts the user's trusted face, business flow, effective access time and other authentication credentials, and sends the encrypted authentication credentials to the operator's trusted application platform to the specific user's mobile phone.

[0064] In the present invention, the authentication credentials are sent over the air and used offline with the help of the mobile phone SIM card, so that the authentication credentials are secure and unique and cannot be copied or forwarded. The authentication credentials are sent over the air by the trusted identity authentication system to the user's mobile phone SIM card via the operator's trusted application platform, thus achieving a strong association between the identity credentials and the mobile phone number. The data in the authentication credentials is encrypted, and the rationality judgment of the business logic can be enclosed in the authentication credentials, that is, the authentication credentials contain two parts of information: identity and authorization. Only normal door locks can decrypt and obtain the identity credentials and authorization validity period information. After completing the identity authentication and verifying that the business authorization is reasonable, the internal processing logic unit of the door lock can send the unlocking drive.

[0065] Optionally, the SIM card installed in the current user's mobile phone should support the installation of card applications, be able to access the instructions of the trusted authentication system and execute corresponding applications, and the received trusted encrypted identity information can be securely stored in the SIM.

[0066] In a possible implementation, the SIM card can also support the NFC function. S1 specifically includes: obtaining the encrypted authentication credentials stored in the SIM card of the current user's mobile phone through the NFC function.

[0067] Among them, NFC (Near Field Communication) is a short-range wireless communication technology that allows electronic devices to exchange data when the distance is close (usually within 10 centimeters).

[0068] In the present invention, the storage method of the authentication credentials is based on the SIM card, and the transmission method uses the NFC communication capability of the SIM card to achieve card swiping transmission without the need for a user password.

[0069] Optionally, the authentication credentials include: mobile phone number, business serial number, door lock number, trusted face information, trusted fingerprint information and valid access time, etc.

[0070] S2: Get the identity information of the current user.

[0071] Optionally, the identity information may specifically include: face information, fingerprint information, etc.

[0072] Furthermore, the facial information of the current user may be collected through the camera.

[0073] Furthermore, the fingerprint information of the current user may be collected through the fingerprint sensor.

[0074] S3: Calls the internally stored key to decrypt the encrypted authentication credentials.

[0075] Optionally, the smart door lock is provided with a security chip, which pre-stores a unique key corresponding to the smart door lock set by a trusted identity authentication system. The key is issued and pre-written by a key management system supported by the trusted identity authentication system. In daily use, the key is written using the security chip and cannot be read.

[0076] S4: Verify whether the current user's identity information is credible based on the decrypted authentication credentials. If so, unlocking is approved. Otherwise, unlocking is rejected.

[0077] In a possible implementation, S4 specifically includes:

[0078] Compare the current user's mobile phone number with the mobile phone number in the authentication credentials to see if they are the same. If yes, proceed to the next step. Otherwise, refuse to unlock.

[0079] Compare the current user's business serial number with the business serial number in the authentication credential to see if they are consistent. If yes, proceed to the next step. Otherwise, refuse to unlock.

[0080] Compare the door lock number of the smart door lock with the door lock number in the authentication credential to see if they are consistent. If yes, proceed to the next step. Otherwise, refuse to unlock.

[0081] Compare the actual face information of the current user with the trusted face information in the authentication credentials to see if they are consistent. If yes, proceed to the next step. Otherwise, refuse to unlock.

[0082] Determine whether the current access time is within the valid access time range in the authentication credentials. If so, unlocking is allowed. Otherwise, unlocking is refused.

[0083] In the present invention, the smart door lock uses a preset key to decrypt the authentication credentials, and then compares the collected image of the visitor with the authentication credentials to verify the consistency of the identity of the person on site and the person with the credentials, thereby achieving highly reliable identity authentication.

[0084] The embodiments of the present invention include the following advantages:

[0085] The identity authentication method and identity authentication system provided in the embodiments of the present invention implement multi-factor identity authentication based on the mobile phone number, SIM card, and user face based on the SIM card, realize highly reliable identity authentication, and improve the security of identity authentication. It is suitable for application scenarios with frequent personnel mobility and strict control of terminal door locks or gates, and is conducive to the promotion of multi-factor identity authentication technology.

[0086] Embodiment 2:

[0087] Reference Manual Attached Figure 3 , showing a schematic structural diagram of an identity authentication system provided by an embodiment of the present invention.

[0088] An identity authentication system 20 provided in an embodiment of the present invention is applied to a smart door lock, and the system includes:

[0089] The first acquisition module 201 is used to obtain the encrypted authentication credentials stored in the SIM card of the current user's mobile phone;

[0090] Among them, the authentication credentials are encrypted by the trusted identity authentication system using the key corresponding to the smart door lock, and the encrypted authentication credentials are sent by the operator's trusted application platform to the current user's mobile phone SIM card;

[0091] The second acquisition module 202 acquires the identity information of the current user;

[0092] The decryption module 203 is used to call the internally stored key to decrypt the encrypted authentication credentials;

[0093] The verification module 204 is used to verify whether the identity information of the current user is credible based on the decrypted authentication credentials; if so, unlocking is approved; otherwise, unlocking is rejected.

[0094] In a possible implementation manner, the first acquisition module 201 is specifically configured to:

[0095] Through the NFC function, the encrypted authentication credentials stored in the current user's mobile phone SIM card are obtained.

[0096] In a possible implementation, the authentication credentials include: mobile phone number, business serial number, door lock number, trusted face information, and valid access time.

[0097] In a possible implementation, the verification module 204 is specifically configured to:

[0098] Compare the current user's mobile phone number with the mobile phone number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0099] Compare the current user's business serial number with the business serial number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0100] Compare the door lock number of the smart door lock with the door lock number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0101] Compare the actual face information of the current user with the trusted face information in the authentication credentials to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock;

[0102] Determine whether the current access time is within the valid access time range in the authentication credentials; if so, agree to unlock; otherwise, refuse to unlock.

[0103] In a possible implementation, the trusted identity authentication system stores a mapping relationship between a person's identity and a mobile phone number.

[0104] The identity authentication system provided in the embodiment of the present invention can implement the identity authentication method in the above-mentioned embodiment 1 and achieve the same technical effect. To avoid repetition, the present invention will not go into details.

[0105] The embodiments of the present invention include the following advantages:

[0106] The identity authentication method and identity authentication system provided in the embodiments of the present invention implement multi-factor identity authentication based on the mobile phone number, SIM card, and user face based on the SIM card, realize highly reliable identity authentication, and improve the security of identity authentication. It is suitable for application scenarios with frequent personnel mobility and strict control of terminal door locks or gates, and is conducive to the promotion of multi-factor identity authentication technology.

[0107] It should be noted that the above detailed descriptions are exemplary and are intended to provide further explanation of the present application. Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by those of ordinary skill in the art to which the present application belongs.

[0108] It should be noted that the terms used herein are only for describing specific embodiments and are not intended to limit the exemplary embodiments according to the present application. As used herein, unless the context clearly indicates otherwise, the singular form is also intended to include the plural form. In addition, it should also be understood that when the terms "comprise" and / or "include" are used in this specification, it indicates the presence of features, steps, operations, devices, components and / or combinations thereof.

[0109] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the terms used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein.

[0110] In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units that are not explicitly listed or inherent to these processes, methods, products, or apparatuses.

[0111] For ease of description, spatially relative terms, such as "above", "above", "on the upper surface of", "above", etc., may be used herein to describe the spatial positional relationship between a device or feature and other devices or features as shown in the figure. It should be understood that spatially relative terms are intended to include different orientations of the device in use or operation in addition to the orientation described in the figure. For example, if the device in the accompanying drawings is inverted, the device described as "above other devices or structures" or "above other devices or structures" will be positioned as "below other devices or structures" or "below other devices or structures". Thus, the exemplary term "above" may include both "above" and "below". The device may also be positioned in other different ways, such as rotated 90 degrees or in other orientations, and the spatially relative descriptions used herein are interpreted accordingly.

[0112] In the above detailed description, reference is made to the accompanying drawings, which form a part of this document. In the accompanying drawings, similar symbols typically identify similar components unless the context indicates otherwise. The illustrated embodiments described in the detailed description, drawings, and claims are not meant to be limiting. Other embodiments may be used, and other changes may be made, without departing from the spirit or scope of the subject matter presented herein.

[0113] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. An identity authentication method, characterized in that: Applied to a smart door lock, the method comprises: Obtain the encrypted authentication credentials stored in the current user's mobile phone SIM card; The authentication credentials are encrypted by the trusted identity authentication system using a key corresponding to the smart door lock, and the encrypted authentication credentials are sent by the operator's trusted application platform to the SIM card of the current user's mobile phone; Obtaining identity information of the current user; Call the internally stored key to decrypt the encrypted authentication credentials; Based on the decrypted authentication credentials, verify whether the identity information of the current user is credible; if so, agree to unlock; otherwise, refuse to unlock.

2. The identity authentication method according to claim 1, characterized in that: The method of obtaining the encrypted authentication credentials stored in the SIM card of the current user's mobile phone is as follows: Through the NFC function, the encrypted authentication credentials stored in the current user's mobile phone SIM card are obtained.

3. The identity authentication method according to claim 1, characterized in that: The authentication credentials include: mobile phone number, business serial number, door lock number, trusted facial information and valid access time.

4. The identity authentication method according to claim 3, characterized in that: According to the decrypted authentication credentials, verify whether the identity information of the current user is credible; if so, agree to unlock; Otherwise, we will refuse to unlock the door, including: Compare the current user's mobile phone number with the mobile phone number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock; Compare the business serial number of the current user with the business serial number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock; Compare the door lock number of the smart door lock with the door lock number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock; Compare the actual face information of the current user with the trusted face information in the authentication credentials to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock; Determine whether the current access time is within the valid access time range in the authentication credentials; if so, agree to unlock; otherwise, refuse to unlock.

5. The identity authentication method according to claim 1, characterized in that: The trusted identity authentication system stores a mapping relationship between personnel identities and mobile phone numbers.

6. An identity authentication system, characterized in that: Applied to smart door locks, the system includes: The first acquisition module is used to obtain the encrypted authentication credentials stored in the SIM card of the current user's mobile phone; The authentication credentials are encrypted by the trusted identity authentication system using a key corresponding to the smart door lock, and the encrypted authentication credentials are sent by the operator's trusted application platform to the SIM card of the current user's mobile phone; A second acquisition module is used to acquire the identity information of the current user; A decryption module, used to call the internally stored key to decrypt the encrypted authentication credentials; The verification module is used to verify whether the identity information of the current user is credible based on the decrypted authentication credentials; if so, agree to unlock; otherwise, refuse to unlock.

7. The identity verification system according to claim 6, characterized in that: The first acquisition module is specifically used for: Through the NFC function, the encrypted authentication credentials stored in the current user's mobile phone SIM card are obtained.

8. The identity authentication system according to claim 6, characterized in that: The authentication credentials include: mobile phone number, business serial number, door lock number, trusted facial information and valid access time.

9. The identity verification system according to claim 8, characterized in that: The verification module is specifically used for: Compare the current user's mobile phone number with the mobile phone number in the authentication credential to see if they are consistent; if so, proceed to the next step; otherwise, refuse to unlock; Compare the business serial number of the current user with the business serial number in the authentication credential to see if they are consistent; if so, proceed to the next step; Otherwise, refuse to unlock; Compare the door lock number of the smart door lock with the door lock number in the authentication credential to see if they are consistent; if so, proceed to the next step; Otherwise, refuse to unlock; Compare the actual face information of the current user with the trusted face information in the authentication credential to see if they are consistent; if so, proceed to the next step; Otherwise, refuse to unlock; Determine whether the current access time is within the valid access time range in the authentication credentials; if so, agree to unlock; otherwise, refuse to unlock.

10. The identity verification system according to claim 6, characterized in that: The trusted identity authentication system stores a mapping relationship between personnel identities and mobile phone numbers.

Images