Identity recognition method, device, equipment, medium and product

Abstract

The invention discloses an identity recognition method, device and equipment, a medium and a product. The identity recognition method comprises the following steps: performing bidirectional authentication on the intelligent closestool and an associated client by adopting a bidirectional authentication mechanism to obtain a bidirectional authentication result; and identifying user identity information of the device operation user based on the physiological feature information of the device operation user and pre-acquired behavior feature information in response to the fact that the bidirectional authentication result is authentication passing. The technical problem that in the prior art, potential safety hazards exist due to the fact that a one-way authentication mechanism is adopted is solved, and the communication safety of the intelligent closestool is improved; meanwhile, the technical problem that differentiated personalized services cannot be carried out in the prior art is solved, personalized services are provided for equipment operation users, and the use experience of the equipment operation users is improved.

Description

Technical Field

[0001] The present invention relates to the field of smart home technology, and in particular to an identity recognition method, device, equipment, medium and product. Background Art

[0002] With the rapid development of emerging technologies such as the Internet of Things and artificial intelligence, smart home products are becoming increasingly abundant, bringing many conveniences to people's lives. As an important part of smart homes, smart toilets are favored by more and more consumers for their comfort, hygiene and convenience. Smart toilets not only have the basic functions of traditional toilets, but also integrate a series of intelligent functions such as water temperature adjustment, seat heating, drying and deodorization, which greatly improves the toilet experience.

[0003] However, existing smart toilets still have many deficiencies in personalized services and communication security. Traditional smart toilets cannot identify the identities of different family members, and thus cannot provide differentiated personalized services.

[0004] In addition, most smart toilets use Bluetooth technology for communication and control. Since Bluetooth signals are an open broadcast form, their channels can be easily monitored and captured by nearby devices. If smart toilets only use a one-way identity authentication mechanism, there is a greater risk of information leakage and illegal control. Summary of the invention

[0005] The present invention provides an identity recognition method, device, equipment, medium and product to solve the problems in the prior art that different user identities cannot be recognized, resulting in the inability to provide differentiated personalized services, and the use of a one-way authentication mechanism leads to security risks in communications.

[0006] According to one aspect of the present invention, there is provided an identity recognition method, which is applied to a smart toilet, comprising:

[0007] A two-way authentication mechanism is used to perform two-way authentication on the smart toilet and the associated client to obtain a two-way authentication result;

[0008] In response to the two-way authentication result being authentication passed, the user identity information of the device operating user is identified based on the physiological characteristic information of the device operating user and the pre-acquired behavioral characteristic information.

[0009] According to another aspect of the present invention, there is provided an identity recognition method, which is applied to a client and includes:

[0010] Using a two-way authentication mechanism to perform two-way authentication on the client and the associated smart toilet to obtain a two-way authentication result;

[0011] In response to the two-way authentication result being authentication passed, the smart toilet receives user identity information of the device operating user identified by the smart toilet based on the physiological feature information of the device operating user and the pre-acquired behavioral feature information.

[0012] According to one aspect of the present invention, there is provided an identity recognition device, which is applied to a smart toilet and includes:

[0013] An authentication module, used to perform a two-way authentication on the smart toilet and an associated client using a two-way authentication mechanism to obtain a two-way authentication result;

[0014] An identity recognition module is used to identify the user identity information of the device operating user based on the physiological feature information of the device operating user and the pre-acquired behavioral feature information in response to the two-way authentication result being authentication passed.

[0015] According to another aspect of the present invention, there is provided an identity recognition device, which is applied to a client and includes:

[0016] An authentication module, used to perform a two-way authentication on the client and the associated smart toilet using a two-way authentication mechanism to obtain a two-way authentication result;

[0017] The receiving module is used to receive the user identity information of the device operating user identified by the smart toilet based on the physiological characteristic information of the device operating user and the pre-acquired behavioral characteristic information in response to the two-way authentication result being authentication passed.

[0018] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0019] at least one processor; and

[0020] a memory communicatively connected to the at least one processor; wherein,

[0021] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the identity recognition method described in any embodiment of the present invention.

[0022] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the identity recognition method described in any embodiment of the present invention when executed.

[0023] According to another aspect of the present invention, a computer program product is provided. The computer program product includes a computer program. When the computer program is executed by a processor, the identity recognition method described in any embodiment of the present invention is implemented.

[0024] The technical solution of the embodiment of the present invention adopts a two-way authentication mechanism to perform two-way authentication on the client and the associated smart toilet to mutually verify the legitimacy of the client and the smart toilet, thereby solving the technical problem of security risks caused by the one-way authentication mechanism in the prior art, effectively preventing man-in-the-middle attacks and counterfeit control, and improving the security of Bluetooth communication of the smart toilet; and, through the smart toilet, the physiological characteristic information of the device operating user is collected, and the user identity information corresponding to the device operating user is identified based on the physiological characteristic information and behavioral characteristic information, so as to solve the technical problem of the inability to identify different user identities and thus provide differentiated personalized services in the prior art, so that the identities of different users can be accurately identified, and personalized services can be provided for different device operating users, thereby improving the user experience of the device operating user.

[0025] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0027] Figure 1 is a flow chart of an identity recognition method provided by an embodiment of the present invention;

[0028] Figure 2 is a flow chart of another identity recognition method provided by an embodiment of the present invention;

[0029] Figure 3 is a flow chart of another identity recognition method provided by an embodiment of the present invention;

[0030] Figure 4 It is a flow chart of a method for identifying and controlling a user of a device operating a smart toilet provided by an embodiment of the present invention;

[0031] Figure 5 This is a schematic diagram of interaction for implementing a two-way authentication provided by an embodiment of the present invention;

[0032] Figure 6 is a structural schematic diagram of an identity recognition device provided by an embodiment of the present invention;

[0033] Figure 7is a schematic diagram of the structure of another identity recognition device provided by an embodiment of the present invention;

[0034] Figure 8 It is a structural block diagram of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0035] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0036] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0037] In one embodiment, Figure 1 This is a flow chart of an identity recognition method provided by an embodiment of the present invention. This embodiment is applicable to the situation where different users of a smart toilet are automatically identified. The method can be executed by an identity recognition device, which can be implemented in the form of hardware and / or software. The identity recognition device can be configured in a smart toilet. Figure 1 As shown, the method includes:

[0038] S110, using a two-way authentication mechanism to perform two-way authentication on the smart toilet and the associated client to obtain a two-way authentication result.

[0039] In one example, the two-way authentication mechanism can be understood as a process of mutual verification of the legitimacy of the client and the smart toilet. In actual operation, a wireless communication connection can be established between the client and the smart toilet, and the wireless communication connection methods may include: WiFi and Bluetooth. The same data encryption algorithm and wireless communication protocol can be pre-built into the main control module and the client of the smart toilet to ensure the security of the communication process between the smart toilet and the client. For example, the client can be an application (referred to as APP) installed on the smart device, or a third-party applet in an application in the smart device. Smart devices can be terminal devices such as smart phones, tablets, and iPads.

[0040] In one example, the communication instructions between the client and the smart toilet can be designed with a frame structure, that is, including: synchronization header, command word, data content and check code and other fields; wherein the synchronization header is used for frame boundary identification, that is, used to identify the beginning of a frame of data; the command word indicates the instruction type, for example, the instruction type may include but is not limited to one of the following: flushing function instruction, warm air drying instruction and seat heating instruction, etc.; the data content refers to the specific configuration parameters involved in each instruction, for example, when the instruction type is a seat heating instruction, the data content may include: seat heating temperature; the check code is used to verify data integrity. The instruction frame structure is clear and easy to parse and expand.

[0041] In one example, the two-way authentication result is used to characterize the result of verifying the legitimacy of the client and the smart toilet; the two-way authentication results include: authentication passed and authentication failed; authentication failed includes: smart toilet authentication failed and / or client authentication failed; authentication passed includes: smart toilet authentication passed and client authentication passed.

[0042] In order to prevent phishing attacks and man-in-the-middle attacks, a two-way authentication mechanism can be used to perform two-way authentication on the client and the associated smart toilet. The smart toilet and the client can verify each other's legitimate identity by exchanging randomly generated original data and encrypted data, that is, the smart toilet verifies the legitimate identity of the client, and the client verifies the legitimate identity of the smart toilet. In the actual verification process, if the communication connection between the client and the smart toilet is interrupted, the communication connection between the client and the smart toilet needs to be re-established, and after the communication connection is re-established, the client and the smart toilet need to perform a two-way authentication process again to ensure the security of the communication process between the client and the smart toilet.

[0043] S120: In response to the two-way authentication result being authentication passed, identifying the user identity information of the device operating user based on the physiological characteristic information of the device operating user and the pre-acquired behavioral characteristic information.

[0044] In one example, for the case where the result of the two-way authentication is authentication passed, it indicates that both the smart toilet and the client have been authenticated. The device operating user refers to the user who uses the smart toilet; the physiological characteristic information is used to characterize the relevant information of the body morphology and structure of a device operating user. For example, the physiological characteristic information may include but is not limited to one of the following: weight, body shape and posture, and body temperature. In one example, a gravity sensor or a pressure sensor may be installed on the base of the smart toilet to detect the weight of the device operating user; in one example, an infrared sensor or a temperature sensor may be installed on the smart toilet to detect the body temperature of the device operating user; in one example, multiple pressure sensors may be installed under the seat of the smart toilet to form a pressure sensor array to identify the pressure applied by the device operating user to different parts of the toilet seat to determine the body shape and posture of the device operating user.

[0045] In one example, the behavior characteristic information refers to the usage habits of the device operator, for example, the behavior characteristic information may include but is not limited to: toilet sitting time, cleaning habits and standing up movements, etc. Among them, toilet sitting time can be used to reflect the physiological condition (such as whether there is constipation or diarrhea, etc.) and living habits (such as whether reading or playing with mobile phones while sitting on the toilet, etc.) of a device operator; cleaning habits may include but are not limited to: whether the device operator uses the cleaning function every time he sits on the toilet, cleaning mode (such as buttocks washing, women's washing or massage washing, etc.), cleaning time or cleaning water flow intensity and other parameters; standing up movements are used to characterize parameters such as the amplitude and speed of the device operator's movements when getting up from the smart toilet.

[0046] In one example, a smart toilet can establish a user identity recognition model. When a device operator uses the smart toilet, the user identity information of the device operator is automatically identified through the user identity recognition model based on the device operator's physiological characteristics and behavioral characteristics, so as to provide a basis for subsequent personalized services. For example, assuming that a user operating the device weighs about 20 kg, has a body temperature of 36.5℃-37.5℃, sits on the toilet for a few minutes, gets up quickly, and uses the cleaning function less frequently, it can be determined that the user operating the device is a child; for another example, assuming that a user operating the device weighs about 50-70 kg, has a body temperature of 36.5℃-37.2℃, sits on the toilet for about 5-10 minutes, gets up relatively stably, and has a more diverse frequency and mode of cleaning, it can be determined that the user operating the device is an adult; for another example, assuming that a user operating the device weighs 50-60 kg, has a body temperature of 36℃-36.5℃, sits on the toilet for more than 10 minutes, gets up slowly and laboriously, and the cleaning mode is generally gentle and used more frequently, it can be determined that the user operating the device is an elderly person.

[0047] The technical solution of this embodiment adopts a two-way authentication mechanism to perform two-way authentication on the client and the associated smart toilet to mutually verify the legitimacy of the client and the smart toilet, thereby solving the technical problem of potential security risks caused by the one-way authentication mechanism in the prior art, effectively preventing man-in-the-middle attacks and counterfeit control, and improving the security of Bluetooth communication of the smart toilet; and, by collecting the physiological characteristic information of the device operating user through the smart toilet, and identifying the user identity information corresponding to the device operating user based on the physiological characteristic information and behavioral characteristic information, the technical problem of the inability to identify different user identities and thus provide differentiated personalized services in the prior art is solved, thereby accurately identifying the identities of different users, providing personalized services for different device operating users, and thereby improving the user experience of the device operating user.

[0048] In one embodiment, Figure 2 FIG. 1 is a flow chart of another identity recognition method provided by an embodiment of the present invention. This embodiment further illustrates the process of two-way authentication, the process of identifying user identity information, and the process of configuring device control parameters based on the above embodiment. Figure 2 As shown, the method includes:

[0049] S210, receiving a first authentication result obtained by the client authenticating the smart toilet based on the consistency between the first ciphertext data generated by the client and the second ciphertext data generated by the smart toilet.

[0050] In one embodiment, a two-way authentication mechanism is used to determine a first authentication result of the smart toilet and a second authentication result of the client, including: receiving first original data randomly generated by the client and corresponding first ciphertext data; generating second ciphertext data associated with the first original data; sending the generated second ciphertext data and second original data to the client; wherein the second original data is the original data randomly generated by the smart toilet so that the client authenticates the smart toilet based on the consistency comparison result between the first ciphertext data and the second ciphertext data to obtain the first authentication result.

[0051] In one example, the first original data refers to the original data randomly generated by the client; the first ciphertext data refers to the data obtained by the client encrypting the first original data using a data encryption algorithm. Exemplarily, the data encryption algorithm can be an MD5 algorithm or an RSA (Rivest Shamir Adleman) algorithm.

[0052] In one example, a client randomly generates a first original data, and encrypts the first original data through a data encryption algorithm to obtain first ciphertext data; then the client encapsulates the first original data and the first ciphertext data into a complete instruction, and sends it to a smart toilet that has successfully established a communication connection; after the smart toilet receives the instruction carrying the first original data and the first ciphertext data, it extracts the first original data from the instruction; then the smart toilet uses the data encryption algorithm to encrypt the extracted first original data to obtain second ciphertext data.

[0053] In one example, the data encryption algorithm used by the smart toilet to encrypt the first original data and the data encryption algorithm used by the client to encrypt the first original data can be the same encryption algorithm.

[0054] In one example, the smart toilet randomly generates an original data as the second original data, and encapsulates the second ciphertext data and the second original data into an instruction to reply to the client. After receiving the reply from the smart toilet, the client compares the consistency between the first ciphertext data and the second ciphertext data. If the first ciphertext data and the second ciphertext data are consistent, it indicates that the smart toilet is a legitimate device, that is, the first authentication result is that the smart toilet is authenticated.

[0055] S220, authenticating the client based on the consistency between the third ciphertext data generated by the client and the fourth ciphertext data generated by the smart toilet, and obtaining a second authentication result. In one example, authenticating the client based on the consistency between the third ciphertext data generated by the client and the fourth ciphertext data generated by the smart toilet, and obtaining a second authentication result, includes: receiving the third ciphertext data sent by the client; wherein the third ciphertext data is obtained by encrypting the second original data by the client; authenticating the client based on the consistency comparison result between the third ciphertext data and the fourth ciphertext data obtained by encrypting the second original data by the smart toilet, and obtaining a second authentication result.

[0056] After receiving the instruction carrying the second ciphertext data and the second original data, the client parses the instruction to identify and extract the second original data in the instruction; then the client encrypts the second original data using a data encryption algorithm to obtain corresponding third ciphertext data. In one example, the data encryption algorithm used by the client to encrypt the second original data can be the same as the data encryption algorithm used by the smart toilet to encrypt the second original data. For example, the data encryption algorithms are both MD5 algorithms.

[0057] In one example, the fourth ciphertext data refers to the data obtained by encrypting the second original data using a data encryption algorithm. The client sends the encrypted third ciphertext data to the smart toilet. After receiving the third ciphertext data, the smart toilet compares the consistency between the fourth ciphertext data and the third ciphertext data. If the two are consistent, it indicates that the client is a legitimate device, that is, the second authentication result is that the client authentication is passed.

[0058] S230: Use the first authentication result and the second authentication result as a two-way authentication result.

[0059] In one example, after obtaining the first authentication result and the second authentication result, it is equivalent to completing the two-way identity authentication process of the client and the smart toilet. The smart toilet sends an authentication completion instruction to the client so that the client knows in time that the smart toilet has completed the verification process of the client's legal identity, and for the smart toilet, the client has been authenticated. By using random data and encryption algorithms, the reliability and confidentiality of the authentication process are enhanced. This all-round security protection provides technical protection for the privacy and property security of device operating users.

[0060] S240: In response to the two-way authentication result being authentication passed, the physiological characteristic information of the user operating the device is collected in real time through the sensor in the smart toilet.

[0061] In one example, a gravity sensor, a pressure sensor, an infrared sensor, and a temperature sensor can be configured in a smart toilet. For example, a gravity sensor or a pressure sensor can be used to detect the weight of the device operating user; and an infrared sensor or a temperature sensor can be used to detect the body temperature of the device operating user. When the device operating user uses the smart toilet, the physiological characteristic information of the device operating user can be collected in real time, that is, the physiological characteristic information of the device operating user is detected in real time, ensuring the real-time collection of the physiological characteristic information; of course, under normal circumstances, the body temperature and weight of the device operating user do not change in real time. When the device operating user uses the smart toilet, the physiological characteristic information of the device operating user can be collected regularly to reduce the number of data collection times of the smart toilet, thereby extending the service life of the smart toilet.

[0062] S250: Use the physiological characteristic information and the pre-acquired behavioral characteristic information to identify and obtain associated user identity information.

[0063] In one example, a user identity recognition model can be established in a smart toilet. After the smart toilet collects the physiological characteristic information of the device operating user, the identity information of the device operating user can be preliminarily recognized based on the physiological characteristic information, that is, the initial identity information is obtained; then the recognized initial identity information is sent to the client, and the client extracts the behavioral characteristic information associated with the initial identity information from its own database based on the initial identity information, and sends the behavioral characteristic information to the smart toilet, so that the smart toilet can re-recognize the identity information of the device operating user based on the behavioral characteristic information on the basis of the initial identity information, and obtain the final corresponding user identity information. In one example, the initial identity information can be represented by a user identifier. For example, when the smart toilet recognizes that the device operating user may be user 2 or user 3 based on the physiological characteristic information of the device operating user, the user identifier is sent as 2 or 3 to the client, so that the client sends the behavioral characteristic information of user 2 and user 3 to the smart toilet, so that the smart toilet can further determine the identity information of the device operating user based on the behavioral characteristic information, and determine that the device operating user is user 2, thereby ensuring the accuracy of identifying the identity information of the device operating user.

[0064] In one embodiment, the identity recognition method applied to a smart toilet further includes: receiving device control parameters generated by a client based on user identity information; and performing control according to the device control parameters.

[0065] In one example, device control parameters refer to adjustable values ​​or setting options that control the functions and performance of the smart toilet, and determine the operation mode and user experience of the smart toilet. For example, device control parameters may include but are not limited to: seat heating temperature, nozzle water pressure, drying time and other parameters. It can be understood that the client generates device control parameters that match the device operating user based on the user identity information, so that the smart toilet controls the operation mode according to the device control parameters, thereby meeting the use needs of the device operating user and improving the user experience of the device operating user.

[0066] In one embodiment, receiving device control parameters generated by a client based on user identity information includes: calling associated user preference information based on the user identity information by the client; and receiving the client automatically generating corresponding device control parameters according to the user preference information.

[0067] In one example, user preference information is used to characterize the habits of each device-operating user in using the smart toilet. Generally speaking, the physiological characteristic information and behavioral characteristic information of the device-operating user can be comprehensively considered to obtain the user preference information of the device-operating user. In general, the behavioral characteristic information and physiological characteristic information of each device-operating user are also variable. For example, when a device-operating user A is not feverish, a cleaning mode with a gentler water flow is adopted; when a device-operating user has a fever, the body temperature is relatively high, and a corresponding cold and hot water alternating cleaning mode can be adopted to play a cooling role, that is, this situation is the user preference information of user A personally. In the actual operation process, a matching cleaning mode can be selected based on the body temperature of the device-operating user, so that the smart toilet automatically generates corresponding device control parameters, which greatly improves the user experience.

[0068] In one embodiment, receiving device control parameters generated by a client based on user identity information includes: receiving a parameter configuration operation associated with the user identity information through the client; receiving the corresponding device control parameters automatically generated by the client according to the parameter configuration operation. In one example, the parameter configuration operation refers to the operation of the device operating user to customize the device control parameters on the display interface of the client. The device operating user can intuitively customize each parameter in the device control parameters through the display interface of the client to truly achieve a tailored toilet experience. After the smart toilet receives the personalized device control parameters, it accurately executes the corresponding control logic, adjusts the various hardware devices in the smart toilet, and provides the most comfortable and intimate personalized service for the device operating user.

[0069] In one embodiment, the identity recognition method applied to the smart toilet also includes: reporting user health parameters associated with the device operating user to the client, so that the client encrypts the user health parameters, binds the encrypted user health parameters to the user identity information associated with the device operating user, and stores them in the target database of the client. In one example, the user health parameters are used to characterize the relevant parameters of the device operating user's own body function; the user health parameters may include but are not limited to the following: physiological characteristic information and behavioral characteristic information. For example, weight, body temperature, and whether there are hemorrhoids. In the actual operation process, an optical sensor or an image recognition system can be configured in the smart toilet to detect the feces of the device operating user to determine whether there are hemorrhoids, and / or, the defecation time and defecation frequency of the device operating user are detected to determine whether the master has hemorrhoids. In the process of the device operating user using the smart toilet, a large amount of privacy data will be generated, such as defecation time, defecation frequency, and cleaning habits. In order to protect the personal privacy of the device operating user, the user health parameters of different device operating users can be encrypted respectively, and then the encrypted user health parameters are stored in the local database. The process of encrypting user health parameters can use high-strength symmetric encryption algorithms such as AES, and encrypt with keys derived from user physiological characteristics. In this way, even if the database is illegally accessed, it is difficult for attackers to decrypt the original data related to user health parameters, effectively protecting user privacy.

[0070] In one embodiment, when the user identity information fails to be identified or the communication connection between the client and the smart toilet is interrupted, the smart toilet automatically switches to emergency mode and uses the device control parameters corresponding to the emergency mode for control. In one example, the emergency mode can be understood as the standard mode, that is, the default usage mode. In the case where the user identity information of the device operator cannot be identified, that is, the identity identification of the device operator fails or the communication connection between the smart toilet and the client is interrupted, the smart toilet can automatically switch to emergency mode and use the device control parameters corresponding to the emergency mode for control to ensure that the basic toilet service of the device operator is not affected. In addition, for the user health parameters collected by the toilet, a high-strength encryption algorithm is used for storage, and data access rights are strictly restricted to ensure that private data will not be illegally stolen and abused, achieving a perfect combination of privacy protection and fault-tolerant design, and comprehensively enhancing the security and reliability of the smart toilet, so that the device operator can enjoy the personalized service of the smart toilet with peace of mind.

[0071] In one embodiment, Figure 3This is a flow chart of another identity recognition method provided by an embodiment of the present invention. This embodiment is applicable to the situation of automatically identifying different users of a smart toilet. The method can be executed by an identity recognition device, which can be implemented in the form of hardware and / or software. The identity recognition device can be configured in the client. For example, the client can be an application (abbreviated as APP) installed on a smart device, or a third-party applet in an application in a smart device. The smart device can be a terminal device such as a smart phone, a tablet computer, and an iPad. Figure 3 As shown, the method includes:

[0072] S310: Use a two-way authentication mechanism to perform two-way authentication on the client and the associated smart toilet to obtain a two-way authentication result.

[0073] S320: In response to the two-way authentication result being authentication passed, the receiving smart toilet identifies the user identity information of the device operating user based on the physiological characteristic information of the device operating user and the pre-acquired behavioral characteristic information.

[0074] In one embodiment, a two-way authentication mechanism is used to perform two-way authentication on a client and an associated smart toilet to obtain a two-way authentication result, including: authenticating the smart toilet based on the consistency between first ciphertext data generated by the client and second ciphertext data generated by the smart toilet to obtain a first authentication result; receiving the smart toilet to authenticate the client based on the consistency between third ciphertext data generated by the client and fourth ciphertext data generated by the smart toilet to obtain a second authentication result; and using the first authentication result and the second authentication result as the two-way authentication result.

[0075] In one embodiment, the identity recognition method applied to the client further includes: generating corresponding device control parameters based on user identity information; and sending the device control parameters to the smart toilet so that the smart toilet is controlled according to the device control parameters.

[0076] It should be noted that for the explanation of parameters such as the two-way authentication process, physiological characteristic information, behavioral characteristic information, etc., please refer to the description of the corresponding parameters in the above-mentioned identity recognition method applied to the smart toilet, which will not be repeated here.

[0077] In one embodiment, the identity identification method applied to the client further includes: in response to the information access instruction, obtaining the accessible health parameters with data access rights for shared viewing; and displaying the accessible health parameters on the display interface of the client. In one example, the information access instruction refers to a trigger instruction for accessing the user health parameters stored on the client; the data access rights are used to characterize the restrictions on accessing and / or viewing the user health parameters associated with each device operating user; the accessible health parameters refer to at least part of the user health parameters that can be accessed and viewed, that is, the accessible health parameters are a subset of the user health parameters. In order to further strengthen the protection of privacy data such as user health parameters, an access rights control mechanism is adopted for user health parameters, that is, privacy data such as user health parameters can only be accessed after identity authentication, and each device operating user can only access his own user health parameters, and cannot unauthorizedly access the privacy information of other device operating users. At the same time, the device operating user can conveniently manage his own privacy settings through the display interface of the client, selectively open or close the collection and sharing rights of certain data, minimize the risk of privacy data, and thus maximize the security of his own privacy data.

[0078] In one embodiment, Figure 4 This is a flow chart of a method for identifying and controlling a user of a smart toilet provided by an embodiment of the present invention. This embodiment is based on the above embodiment and uses MD5 verification to illustrate the process of identifying and controlling the user identity. Among them, the client is a mobile phone APP, and the data encryption algorithm is the MD5 algorithm. It should be noted that the MD5 algorithm and communication protocol need to be preset in the smart toilet and mobile phone APP. Figure 4 As shown, this embodiment includes the following steps:

[0079] S410, the mobile phone APP generates first original data A, and encrypts A to generate first ciphertext data A1.

[0080] S420. The mobile phone APP sends a command carrying the first original data A to the smart toilet.

[0081] S430. The smart toilet extracts the first original data A from the instruction, and encrypts A to generate the second ciphertext data A2.

[0082] S440. The smart toilet generates second original data B, and encrypts B to generate fourth ciphertext data B1.

[0083] S450, the smart toilet sends a command carrying A2 and B to the mobile phone APP.

[0084] S460. The mobile phone APP compares A1 and A2. If they are consistent, the first authentication result is obtained as authentication passed.

[0085] S470, the mobile phone APP extracts B, and encrypts B to generate the third ciphertext data B2.

[0086] S480, the mobile phone APP sends B2 to the smart toilet.

[0087] S490, the smart toilet compares B1 and B2, and if they are consistent, the second authentication result is obtained as authentication passed.

[0088] S4100, the smart toilet sends an authentication completion instruction to the mobile phone APP.

[0089] The use of a two-way MD5 verification mechanism fundamentally improves the security of smart toilet Bluetooth communication. Compared with the traditional one-way authentication method, two-way authentication requires both parties to verify the legitimacy of each other's identities, effectively preventing security threats such as man-in-the-middle attacks and counterfeit control. At the same time, by introducing random data and data encryption algorithms, the reliability and confidentiality of the authentication process are further enhanced. This all-round security protection provides a solid technical guarantee for the privacy and property security of users.

[0090] S4110, the smart toilet collects the physiological characteristics information of the operating device user and establishes an identity recognition model.

[0091] S4120. After establishing secure communication, the mobile phone APP sends personalized device control parameters to the smart toilet.

[0092] S4130, the smart toilet is controlled by personalized equipment control parameters and provides personalized services.

[0093] By accurately identifying the identity of the device operator and providing personalized services, the toilet experience of the device operator is greatly improved. The smart toilet can automatically adjust the seat heating temperature, nozzle water pressure, drying time and other parameters according to the physiological characteristics (such as weight, body temperature, etc.) and behavioral characteristics (such as toilet sitting time, cleaning habits, etc.) of different device operators, providing customized comfort services for each family member. This intelligent and personalized service model greatly improves the satisfaction and comfort of device operators, making toileting a pleasure.

[0094] S4140. The mobile phone APP receives and encrypts and stores the user's health parameters and sets data access permissions.

[0095] In actual operation, access to the privacy data of the device operator, such as user health parameters, requires identity authentication to ensure that each device operator can only access his or her own data. This multiple protection measure minimizes the security risk of user privacy data.

[0096] In one embodiment, Figure 5 FIG. 1 is a schematic diagram of an implementation interaction of a two-way authentication provided by an embodiment of the present invention. Figure 5 As shown, the implementation process of two-way authentication in this embodiment includes:

[0097] S510. The mobile phone APP randomly generates first original data A, and encrypts it through the MD5 algorithm to generate first ciphertext data A1.

[0098] S520: Encapsulate the first original data A into a complete instruction and send it to the smart toilet.

[0099] S530. The smart toilet extracts the first original data A from the instruction, and encrypts it using the same MD5 algorithm to obtain the second ciphertext data A2.

[0100] S540. The smart toilet generates its own second original data B, and encrypts it through the MD5 algorithm to generate fourth ciphertext data B1.

[0101] S550, encapsulate A2 and B1 into a command and reply to the mobile phone APP.

[0102] S560. After receiving the reply, the mobile APP compares A1 and A2 to see if they are consistent. If they are consistent, it means that the smart toilet is a legal device and has passed the authentication.

[0103] S570, the mobile phone APP extracts the second original data B, and performs secondary encryption through the MD5 algorithm to obtain the third ciphertext data B2.

[0104] S580, reply B2 to the smart toilet.

[0105] S590. After receiving the reply, the smart toilet compares B1 and B2 to see if they are consistent. If they are consistent, it means that the mobile phone APP is a legitimate device and has passed the authentication.

[0106] At this point, the two-way identity authentication is completed, and the smart toilet sends an authentication completion instruction to the mobile phone APP.

[0107] S5100: If the communication connection is interrupted, re-execute the two-way authentication process.

[0108] During actual use, if the communication connection between the mobile phone APP and the smart toilet is interrupted, after the connection is re-established, both parties need to perform the above-mentioned double authentication process again to ensure the security of communication.

[0109] In one embodiment, Figure 6 Schematic diagram of the structure of an identity recognition device provided by an embodiment of the present invention. This embodiment is applied to a smart toilet. Figure 6 As shown, the device includes: an authentication module 610 and an identity recognition module 620.

[0110] The authentication module 610 is used to perform a two-way authentication on the smart toilet and the associated client using a two-way authentication mechanism to obtain a two-way authentication result;

[0111] The identity recognition module 620 is used to identify the user identity information of the device operating user based on the physiological feature information of the device operating user and the pre-acquired behavior feature information in response to the two-way authentication result being authentication passed.

[0112] In one embodiment, the identity recognition device applied to the smart toilet further includes:

[0113] A receiving module, used for receiving device control parameters generated by the client based on user identity information;

[0114] The control module is used to control according to the device control parameters.

[0115] In one embodiment, the authentication module includes:

[0116] A receiving unit, configured to receive a first authentication result obtained by the client authenticating the smart toilet based on consistency between first ciphertext data generated by the client and second ciphertext data generated by the smart toilet;

[0117] an authentication unit, configured to authenticate the client based on the consistency between the third ciphertext data generated by the client and the fourth ciphertext data generated by the smart toilet, and obtain a second authentication result;

[0118] The determination unit is used to use the first authentication result and the second authentication result as a two-way authentication result.

[0119] In one embodiment, the user identity information of the device operating user is identified based on the physiological characteristic information of the device operating user and the pre-acquired behavioral characteristic information, which is specifically used for:

[0120] The sensors in the smart toilet collect the physiological characteristics of the user in real time;

[0121] The physiological characteristic information and the pre-acquired behavioral characteristic information are used to identify the associated user identity information.

[0122] In one embodiment, receiving a device control parameter generated by a client based on user identity information is specifically used for:

[0123] Calling the associated user preference information based on the user identity information through the client;

[0124] The receiving client automatically generates corresponding device control parameters according to the user preference information.

[0125] In one embodiment, the receiving client generates corresponding device control parameters based on the user identity information, specifically for:

[0126] Receiving, through the client, a parameter configuration operation associated with the user identity information;

[0127] The receiving client automatically generates corresponding device control parameters according to the parameter configuration operation.

[0128] In one embodiment, the identity recognition device applied to the smart toilet further includes:

[0129] The reporting module is used to receive user health parameters associated with the device operating user reported by the smart toilet, so that the client can encrypt the user health parameters, bind the encrypted user health parameters with the user identity information associated with the device operating user, and store them in the target database of the client.

[0130] In one embodiment, when the user identity information fails to be identified or the communication connection between the client and the smart toilet is interrupted, the smart toilet automatically switches to the emergency mode and is controlled using the device control parameters corresponding to the emergency mode.

[0131] The identity recognition device applied to a smart toilet provided by an embodiment of the present invention can execute the identity recognition method applied to a smart toilet provided by any embodiment of the present invention, and has functional modules and beneficial effects corresponding to the execution method.

[0132] In one embodiment, Figure 7 is a schematic diagram of the structure of another identity recognition device provided by an embodiment of the present invention. This embodiment is applied to a client. Figure 7 As shown, the device includes: an authentication module 710 and a receiving module 720.

[0133] The authentication module 710 is used to perform a two-way authentication on the client and the associated smart toilet using a two-way authentication mechanism to obtain a two-way authentication result;

[0134] The receiving module 720 is used to receive the user identity information identified by the smart toilet based on the physiological characteristic information of the device operating user and the pre-acquired behavioral characteristic information in response to the two-way authentication result being authentication passed.

[0135] In one embodiment, the authentication module includes:

[0136] An authentication unit, configured to authenticate the smart toilet based on the consistency between the first ciphertext data generated by the client and the second ciphertext data generated by the smart toilet to obtain a first authentication result;

[0137] A receiving unit, configured to receive the third ciphertext data generated by the client and the fourth ciphertext data generated by the smart toilet, and authenticate the client based on the consistency between the third ciphertext data generated by the client and the fourth ciphertext data generated by the smart toilet to obtain a second authentication result;

[0138] A determination unit is used to use the first authentication result and the second authentication result as a two-way authentication result.

[0139] In one embodiment, the identity recognition device applied to the client further includes:

[0140] A generating module, used for generating corresponding device control parameters based on the user identity information;

[0141] A sending module is used to send the device control parameters to the smart toilet so that the smart toilet is controlled according to the device control parameters.

[0142] In one embodiment, the identity recognition device applied to the client further includes:

[0143] An acquisition module, configured to acquire, in response to an information access instruction, an accessible health parameter whose data access right is shared viewing;

[0144] The display module is used to display accessible health parameters on the client's display interface.

[0145] The identity recognition device applied to the client provided by the embodiment of the present invention can execute the identity recognition method applied to the client provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0146] In one embodiment, Figure 8 is a structural block diagram of an electronic device provided by an embodiment of the present invention, such as Figure 8 As shown, a schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein. In one example, the electronic device 10 is integrated with an application that can identify the identity of the user who operates the device of the smart toilet, as well as the device control parameters of the smart toilet.

[0147] like Figure 8As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0148] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0149] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 performs the various methods and processes described above, such as an identity recognition method.

[0150] In some embodiments, the identification method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the identification method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to perform the identification method in any other appropriate manner (e.g., by means of firmware).

[0151] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0152] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0153] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0154] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0155] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0156] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0157] An embodiment of the present invention further provides a computer program product, including a computer program, which, when executed by a processor, can implement an identity recognition method as provided in any embodiment of the present application.

[0158] In the process of implementation, the computer program product can be written in one or more programming languages ​​or a combination thereof to perform the computer program code of the present application, and the programming language includes an object-oriented programming language, such as Java, Smalltalk, C++, and also includes a conventional procedural programming language, such as "C" language or similar programming language. The program code can be executed entirely on the user's computer, partially on the user's computer, as an independent software package, partially on the user's computer and partially on the remote computer, or completely on the remote computer or server. In the case of a remote computer, the remote computer can be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computer (for example, using an Internet service provider to connect through the Internet).

[0159] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0160] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. An identity recognition method, characterized in that: Applied to smart toilets, including: A two-way authentication mechanism is used to perform two-way authentication on the smart toilet and the associated client to obtain a two-way authentication result; In response to the two-way authentication result being authentication passed, the user identity information of the device operating user is identified based on the physiological characteristic information of the device operating user and the pre-acquired behavioral characteristic information.

2. The method according to claim 1, characterized in that The method further comprises: Receiving device control parameters generated by the client based on the user identity information; Control is performed according to the device control parameters.

3. The method according to claim 1, characterized in that The two-way authentication mechanism is used to perform two-way authentication on the smart toilet and the associated client to obtain a two-way authentication result, including: Receiving a first authentication result obtained by the client authenticating the smart toilet based on consistency between first ciphertext data generated by the client and second ciphertext data generated by the smart toilet; Authenticating the client based on the consistency between the third ciphertext data generated by the client and the fourth ciphertext data generated by the smart toilet to obtain a second authentication result; The first authentication result and the second authentication result are used as a two-way authentication result.

4. The method according to claim 1, characterized in that: The identifying the user identity information of the device operating user based on the physiological characteristic information of the device operating user and the pre-acquired behavioral characteristic information includes: The sensor in the smart toilet collects physiological characteristic information of the user operating the device in real time; The physiological characteristic information and the pre-acquired behavioral characteristic information are used to identify and obtain the associated user identity information.

5. The method according to claim 2, characterized in that: The receiving a device control parameter generated by the client based on the user identity information includes: calling, by the client, associated user preference information based on the user identity information; The client automatically generates corresponding device control parameters according to the user preference information.

6. The method according to claim 2, characterized in that The receiving a device control parameter generated by the client based on the user identity information includes: Receiving, through the client, a parameter configuration operation associated with the user identity information; The client automatically generates corresponding device control parameters according to the parameter configuration operation.

7. The method according to any one of claims 1 to 6, characterized in that: The method further comprises: Report the user health parameters associated with the device operating user to the client, so that the client encrypts the user health parameters, binds the encrypted user health parameters with the user identity information associated with the device operating user, and stores them in the target database of the client.

8. The method according to any one of claims 1 to 6, characterized in that: In the event that the user identity information fails to be identified or the communication connection between the client and the smart toilet is interrupted, the smart toilet automatically switches to an emergency mode and is controlled using the device control parameters corresponding to the emergency mode.

9. An identity recognition method, characterized in that: Applied to the client, including: Using a two-way authentication mechanism to perform two-way authentication on the client and the associated smart toilet to obtain a two-way authentication result; In response to the two-way authentication result being authentication passed, the smart toilet receives user identity information of the device operating user identified by the smart toilet based on the physiological feature information of the device operating user and the pre-acquired behavioral feature information.

10. The method according to claim 9, characterized in that The two-way authentication mechanism is used to perform two-way authentication on the client and the associated smart toilet to obtain a two-way authentication result, including: A first authentication result obtained by authenticating the smart toilet based on consistency between first ciphertext data generated by the client and second ciphertext data generated by the smart toilet; Receiving the smart toilet to authenticate the client based on the consistency between the third ciphertext data generated by the client and the fourth ciphertext data generated by the smart toilet, to obtain a second authentication result; The first authentication result and the second authentication result are used as a two-way authentication result.

11. The method according to claim 9, characterized in that The method further comprises: Generate corresponding device control parameters based on the user identity information; The device control parameters are sent to the smart toilet so that the smart toilet is controlled according to the device control parameters.

12. The method according to any one of claims 9 to 11, characterized in that: The method further comprises: In response to the information access instruction, obtaining accessible health parameters whose data access rights are shared viewing; The accessible health parameters are displayed on a display interface of the client.

13. An identity recognition device, characterized in that: Applied to smart toilets, including: An authentication module, used to perform a two-way authentication on the smart toilet and an associated client using a two-way authentication mechanism to obtain a two-way authentication result; The identity recognition module is used to identify the user identity information of the device operating user based on the physiological feature information of the device operating user and the pre-acquired behavior feature information in response to the two-way authentication result being authentication passed.

14. An identity recognition device, characterized in that: Applied to the client, including: An authentication module, used to perform a two-way authentication on the client and the associated smart toilet using a two-way authentication mechanism to obtain a two-way authentication result; The receiving module is used to receive the user identity information of the device operating user identified by the smart toilet based on the physiological characteristic information of the device operating user and the pre-acquired behavioral characteristic information in response to the two-way authentication result being authentication passed.

15. An electronic device, characterized in that: The electronic device comprises: at least one processor; and, a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the identity recognition method described in any one of claims 1-8 or 9-12.

16. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the identity recognition method described in any one of claims 1-8 or 9-12 when executed.

17. A computer program product, characterized in that The computer program product comprises a computer program, which, when executed by a processor, implements the identity recognition method according to any one of claims 1-8 or 9-12.

Images