Identity verification system and method based on biological feature recognition

Abstract

The invention discloses an identity verification system and method based on biological feature recognition, and belongs to the technical field of biological recognition and artificial intelligence. The system comprises a registration identity authentication SDK function module, a registration identity authentication background management module, a registration identity authentication interface service module, a registration approval system transformation module, a real name authentication information query module, an identity authentication information binding module, an identity authentication result information generation module and an application case query transformation module. The registration identity verification SDK function module is used for registration of a new user and login of a registered user; the registration identity verification background management module is used for managing user registration information and registration records; and the registration identity authentication interface service module is used for user identity authentication. According to the invention, whole-process flow management of business handling identity real-name authentication is established, one-event one-person one-authentication is realized, information of others is prevented from being illegally used, and authentication data is prevented from being forged.

Description

Technical Field

[0001] The present invention relates to the field of biometrics and artificial intelligence technology, and in particular to an identity verification system and method based on biometrics recognition. Background Art

[0002] Biometric Recognition is a technology that confirms an individual's identity by detecting and analyzing their unique physiological or behavioral characteristics. This technology uses individual characteristics, such as fingerprints, faces, irises, voiceprints, etc., to authenticate identity.

[0003] In today's digital age, with the popularity of the Internet and mobile devices, people increasingly rely on digital identities to conduct various activities, such as online shopping, social media, and e-banking. However, the resulting digital fraud and identity theft have also become a severe challenge. Therefore, the research and development of identity authentication technology has become increasingly important. Username and password are the most common authentication methods. Users need to enter their username and password to access their accounts. However, this method has problems such as password leakage and forgotten passwords, and is prone to hacker attacks. In addition to username and password, two-factor authentication also requires users to provide a second form of identity proof. Biometric recognition technology also faces some challenges, including data privacy and security issues, the integration and complementarity of different biometric recognition technologies, and recognition stability issues under different environments and conditions. Biometric recognition results cannot be accurately bound to the business, and there is a risk of being misused. Summary of the invention

[0004] The object of the present invention is to provide an identity authentication system and method based on biometric recognition to solve the problems raised in the above background technology.

[0005] In order to solve the above technical problems, the present invention provides the following technical solutions: an identity authentication system based on biometric identification, the system comprising a registration and authentication SDK function module, a registration and authentication background management module, a registration and authentication interface service module, a registration and approval system transformation module, a real-name authentication information query module, a binding identity authentication information module, an identity authentication result information generation module and an application case query transformation module;

[0006] The registration and identity authentication SDK function module is used for the registration of new users and the login of registered users; the registration and identity authentication background management module is used to manage user registration information and registration records; the registration and identity authentication interface service module is used to provide an interface with an external system for user identity authentication; the registration and approval system transformation module includes domestic capital registration, foreign capital registration, agricultural college registration and individual registration; the real-name authentication information query module is used to query the user's real-name authentication information; the binding identity authentication information module is used to bind the user's identity authentication information to an account in the system; the generating identity authentication result information module is used to generate an authentication result according to the identity information provided by the user; the application case query transformation module is used to transform the application case query of domestic capital registration, foreign capital registration, agricultural college registration and individual registration, and add a function of viewing the identity authentication result information in the application case details information to view the identity authentication result information bound to the application case;

[0007] The output end of the registration and identity authentication SDK function module is connected to the input end of the registration and identity authentication background management module; the output end of the registration and identity authentication background management module is connected to the input end of the registration and identity authentication interface service module; the output end of the registration and identity authentication interface service module is connected to the input end of the registration and approval system transformation module; the output end of the registration and approval system transformation module is connected to the input end of the real-name authentication information query module; the output end of the real-name authentication information query module is connected to the input end of the binding identity authentication information module; the output end of the binding identity authentication information module is connected to the input end of the generation identity authentication result information module; the output end of the generation identity authentication result information module is connected to the input end of the application query transformation module.

[0008] The registration and identity authentication SDK functional module includes an in-APP authentication mechanism, a registration and identity authentication SDK structure and a unified identity authentication service platform;

[0009] The in-APP authentication mechanism includes an APP registration unit, a two-factor face recognition authentication unit, and an APP login unit;

[0010] The specific steps of registering the identity authentication SDK structure are:

[0011] S2-1. After completing the registration authentication through the APP registration unit, search for registration authentication in the APP and perform the first authentication;

[0012] S2-2. Click to register for identity verification service and enter face recognition;

[0013] S2-3. If the verification is successful, enter the task creation page and fill in the company name, unified social credit code number, business type and role on the task creation page;

[0014] S2-4. Once completed, identity authentication will be performed. If the company information is incorrect, the user will be asked to fill it in again.

[0015] S2-5, ID card users, enter two-factor authentication, that is, mobile phone number authentication and bank card authentication plus face recognition authentication; non-ID card users, only face recognition authentication;

[0016] S2-6. If the verification is successful, the identity verification service is completed;

[0017] The unified identity authentication service platform is used to provide services for S2-2 and S2-5. When entering the face recognition, the collected face features and ID cards are compared and identified. In addition, it also includes entry and exit documents and real person verification;

[0018] The registration and authentication SDK is integrated with the APP, and provides secure, reliable, and standardized authentication services through the APP to support the real-name authentication requirements in the registration and filing business scenarios involving new changes in personnel information, such as enterprise establishment, registration change, and registration cancellation. The first time a natural person uses the APP, he needs to register an account, and two-factor real-name identity authentication is required for registration. After passing the authentication, log in to the APP and search for the "Registration and Authentication" service. When using the "Registration and Authentication" service, two authentications are required. The first authentication can be combined with the APP real-name registration account + face recognition to form a two-factor authentication; after the business is created, the second authentication is required to respond to the "one thing, one person, one authentication" requirement when the business is confirmed. This authentication: ID card users use two-factor authentication, that is, real-name mobile phone number authentication / bank card authentication + face recognition, to improve authentication security and avoid the risk of prosthetic attacks; non-ID card users call face recognition for authentication. After the authentication is successful, an authentication record is completed and archived to facilitate the registration and approval system call.

[0019] The registration and identity authentication background management module is used for user management, authentication record management and log management;

[0020] The user management is used to access the user system of the registration business system and implement the management functions of user accounts, including adding users, modifying users, deleting users, querying users and setting permissions;

[0021] The authentication record management is used to provide management functions for user authentication records, including adding new records, modifying record tags and querying records;

[0022] The log management is used to provide log management functions for background services, including recording all actions of administrators and operators; recording internal operating errors and anomalies of the entire system; making real-time statistics and analysis of authentication records; and providing query, analysis and backup.

[0023] The module for generating identity authentication result information is used to generate an identity authentication result information document according to the identity authentication result bound to the case; including online and offline cases; for offline cases, the documents can be viewed and printed in the receipt, material creation and decision stages; for online cases, the documents are generated in the electronic file of the review form;

[0024] The specific electronic signature of a natural person on the PC in the online registration identity verification scheme is:

[0025] After a natural person has checked the files to be signed and clicked on batch signature, a face recognition service is added for identity authentication. The QR code on the page is scanned by a mobile phone, and face recognition is completed on the mobile phone. After the authentication is passed, an event certificate is issued for electronic signature and the authentication result information of this identity authentication is recorded.

[0026] After setting up the electronic signature after the intention authentication on the PC side, the user needs to complete a face recognition authentication in combination with the user information of the login authentication after initiating the signature to prevent the situation where the signature is not made by the user himself, and provide an effective basis for the subsequent electronic signature accountability. The specific steps are as follows:

[0027] S6-1. Initiate batch signing interface transformation, return success / failure information, and update to return authentication QR code page;

[0028] S6-2: During the QR code scanning authentication process, if the page is closed due to improper operation, and the signature system does not receive the authentication result within three minutes, it is considered that the authentication has failed, the process ends, and the failure result is called back;

[0029] S6-3, user authentication fails, the signing process ends, and the failure result is called back;

[0030] S6-4: If the user receives a QR code on the PC but does not scan it for authentication, the authentication will be deemed to have failed after three minutes, the process ends, and the failure result will be called back;

[0031] S6-5. After the signing is successful, the information is uploaded through the callback interface, and the authentication serial number and signing serial number are added. The business system binds them, and the signing system is synchronously stored in the database;

[0032] S6-6, Add new scope of willingness authentication: Determine whether the user needs to add face recognition willingness authentication based on the type of certificate;

[0033] If the document type is an identity card, Mainland Travel Permit for Hong Kong and Macao Residents (Home Return Permit) and passport, facial recognition intention authentication can be carried out. Other document types follow the previous process.

[0034] The specific electronic signature of a natural person on the mobile terminal in the online registration identity verification scheme is:

[0035] S7-1. The first stage is the natural person user login authentication stage. The user logs in to the system for identity authentication. After completing the mobile phone number real-name authentication (name, ID number, mobile phone number) / bank card real-name authentication (name, ID number, bank reserved mobile phone number, bank card number), face recognition authentication is performed;

[0036] S7-2. After the natural person user selects the document to be signed and clicks to sign, the business system initiates the batch signing service;

[0037] S7-3, the signature system calls the enterprise cloud identity authentication platform, obtains the face recognition authentication service page, and returns it to the business system;

[0038] S7-4. The business system displays the face recognition authentication page, and the natural person performs face verification;

[0039] S7-5. After verification, the signature system background will conduct an electronic signature by a natural person. After the signature is completed, the signature result will be notified to the business system, and the business system will inform the user.

[0040] In step S7-2, the steps for selecting services to be signed in batches are as follows:

[0041] S8-1. Before batch selection, face recognition is performed. After verification, a new page will show the name and account number for the user to confirm. After the user's identity is confirmed, the batch signing service is selected.

[0042] S8-2. Obtain the user's business and processing time through the user's historical processing records, and generate a user business data matrix;

[0043] S8-3, real-time acquisition of the browsing frequency of the user in the month before the user handles the service, collection of real-time user feedback on the same service, and generation of a user service handling information list based on the service handling ratio data of other users in the month when the user handles the service;

[0044] S8-4, using the user business data matrix as the base data, and combining the user business handling information list with the curve fitting model to perform business handling curve fitting; analyzing the business handling of the same user in the same time period in previous years and the browsing business frequency of the user in the same time period, and performing user business handling prediction and ranking;

[0045] S8-5. Users sort the services, preview the service content and the user's evaluation feedback on the services, and select to sign the services in batches;

[0046] S8-6, back up the real-time data analysis matrix of the user's business handling and the user's business handling information list, and input the data into the historical data analysis model to make reference adjustments to the historical handling records of the current user;

[0047] The user service data matrix is:

[0048]

[0049] Among them, t is the whole cycle of the user's business handling; α is the cycle label of the whole cycle of the user's business handling divided by year, α≤12; β is the time point in each stage cycle, specifically a certain day of the business handling, β≤31; The time label is the time label at the β time point in the α period after the full cycle slice of the user's business processing; For the corresponding A collection of time-labeled business transactions;

[0050] The user service handling information list is:

[0051]

[0052] Among them, j1, j2 and ji represent the number of users who have handled business 1, business 2 and business i in the history respectively; T1, T2 and Ti represent the number of users who canceled business 1, business 2 and business i respectively; RT1, RT2 and RTi represent the feedback information of business 1, business 2 and business i respectively.

[0053] In steps S8-3 and S8-4, the user handles the predicted order of services, specifically:

[0054] Prediction formula:

[0055]

[0056] Among them, Q(i) represents the probability of a user handling service i; E(i) represents the ratio of users who handled service i in the last month; δ i (tf-idf) indicates the frequency of users browsing service i in the last month; E t (i) represents the number of historical records of the user handling business i in month t in different years; represents the frequency of users browsing service i when handling service i in month t of different years; E t′ (i) represents the number of historical records of the user handling business i in month t' of different years, where t' includes all months except month t; represents the frequency of users browsing service i when handling service i in month t' of different years; α and β are the influence weights of month t and month t' respectively;

[0057] The frequency of browsing service i is calculated as:

[0058] s1. Extract keywords from business i;

[0059] s2. Calculate the frequency tf(i) of each keyword in business i in the user's historical browsing records;

[0060] tf(i)=q / d

[0061] Among them, q is the number of times the keyword appears; d is the total number of words in the document

[0062] s3. Calculate the inverse document frequency idf(i) of each keyword in business i in the user's historical browsing records;

[0063] idf(i)=log[z / (p+1)]

[0064] Where z is the total number of documents; p is the number of documents containing the keyword;

[0065] s4. Calculate the keyword frequency of business i;

[0066] δ i (tf-idf)=tf(i)*idf(i)*100%

[0067] Among them, δ i (tf-idf) indicates the frequency with which users browsed service i in the last month.

[0068] An identity verification method based on biometric recognition, the method comprising the following steps:

[0069] S1. Perform registration and identity verification, including new authentication services, historical authentication queries, and authentication record tags;

[0070] S2. Registration and identity authentication background management, including user management, authentication record management, and log management;

[0071] S3. Provide registration and authentication interface services, including authentication record query and authentication record usage status writeback;

[0072] S4. Registration and approval system transformation: the registration and approval businesses involved in the offline process transformation include domestic capital registration, foreign capital registration, agricultural special registration and individual registration;

[0073] S5. In the receiving stage, provide identity authentication information query function, call the registration and identity authentication SDK background service through name and ID number to query the valid identity authentication record of the person who needs identity authentication for this business, so that the person in charge can view it;

[0074] S6. Binding identity authentication information;

[0075] S7. Generate an identity authentication result information document based on the identity authentication result bound to the application; including online application and offline application; the offline application is viewed and printed during the receipt, material creation and decision stages; the online application, the document is generated in the electronic file of the review form;

[0076] S8. Improve the query of domestic capital registration, foreign capital registration, agricultural special registration and individual registration applications. Add the function of viewing identity authentication result information in the application details to view the identity authentication result information bound to the application.

[0077] The binding result includes binding success and binding failure.

[0078] In step S6, the binding identity authentication information is that when the handler checks the identity authentication record, he / she checks an identity authentication record for each person who needs identity authentication to perform the proposed business binding; the handler can adjust the proposed business binding at any time during the receipt stage; when the receipt is submitted, the system calls the registration and identity authentication SDK background service to perform formal business binding, and informs the handler of the binding result; if the binding is successful, the authentication result information of the bound identity authentication must also be recorded.

[0079] This transformation includes identity authentication SDK (Android & iOS & Hongmeng), electronic signature system, security authentication gateway, signature verification system, timestamp system and trusted password service.

[0080] Authentication SDK provides secure, reliable, and standard authentication services to the outside world.

[0081] The security authentication gateway is a security gateway product based on the national secret SSL protocol. Through the national secret SSL protocol and suite, it provides users with a secure encrypted tunnel to ensure the integrity and confidentiality of data in the SSL link.

[0082] The signature verification system provides trusted digital signature (verification) and encryption and decryption services for various types of electronic data of users, ensuring the integrity, confidentiality, non-repudiation and post-traceability of users' key data.

[0083] The timestamp system issues authoritative electronic certificates to users to prove the integrity and non-repudiation of the electronic data file content since the trusted timestamp was applied. In this project, it is used in conjunction with the electronic signature system to provide time information stamping during the signing process, improve the credibility, transparency and traceability of the document, and facilitate business process management and problem troubleshooting.

[0084] Trusted cryptographic services provide key storage and management, support signature verification and timestamp to complete related signature and timestamp services.

[0085] Compared with the prior art, the beneficial effects achieved by the present invention are:

[0086] 1. The present invention establishes the whole process management of real-name authentication for business handling, realizes "one authentication for one person per matter", and prevents the impersonation of other people's information and the forgery of authentication data;

[0087] 2. The present invention breaks through the barriers between real-name identity authentication and business handling, quickly retrieves relevant evidence, and solves the problem of difficulty in investigation and evidence;

[0088] 3. The present invention integrates the real-name authentication technology into the business process, shortens the processing time, and simplifies the relevant materials;

[0089] 4. The present invention enables full online processing of business, reducing the applicant's round-trip costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0090] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings:

[0091] Figure 1 This is an overall process architecture diagram of offline handling of an identity authentication system based on biometric recognition of the present invention;

[0092] Figure 2 This is a diagram of the registration and identity authentication SDK process architecture of an identity authentication system based on biometric recognition of the present invention;

[0093] Figure 3 This is a flowchart of the electronic signature after the new intention authentication on the PC side of the present invention;

[0094] Figure 4 This is a flowchart of the electronic signature of a natural person on a mobile terminal of the present invention;

[0095] Figure 5 It is the flow chart of the electronic signature of the legal person on the mobile terminal of the present invention. DETAILED DESCRIPTION

[0096] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0097] See also Figure 1-Figure 5 The present invention provides a technical solution: an identity authentication system based on biometric identification, the system includes a registration and authentication SDK function module, a registration and authentication background management module, a registration and authentication interface service module, a registration and approval system transformation module, a real-name authentication information query module, a binding identity authentication information module, an identity authentication result information generation module and an application case query transformation module;

[0098] The registration and identity authentication SDK function module is used for the registration of new users and the login of registered users; the registration and identity authentication background management module is used to manage user registration information and registration records; the registration and identity authentication interface service module is used to provide an interface with the external system for user identity authentication; the registration and approval system transformation module includes domestic capital registration, foreign capital registration, agricultural college registration and individual registration; the real-name authentication information query module is used to query the user's real-name authentication information; the binding identity authentication information module is used to bind the user's identity authentication information with the account in the system; the generate identity authentication result information module is used to generate authentication results according to the identity information provided by the user; the application case query transformation module is used to transform the application case query of domestic capital registration, foreign capital registration, agricultural college registration and individual registration, and add the function of viewing the identity authentication result information in the application case details information to view the identity authentication result information bound to the application case.

[0099] In an embodiment of the present invention,

[0100] A natural person wants to set up a company and needs to carry out new certification business:

[0101] Fill in the company name: Fill in "ABC Technology Co., Ltd." (required);

[0102] Fill in the unified social credit code: xxxx567890ABCDE (optional);

[0103] Select business type: Enterprise establishment;

[0104] Select the role type: Legal person;

[0105] Natural persons can query their past certification records:

[0106] Query content: including enterprise name, business type, role type, certification results and other information;

[0107] Company name: ABC Technology Co., Ltd.

[0108] Business Type: Enterprise Establishment;

[0109] Role type: Legal person;

[0110] Authentication result: Success;

[0111] The system manages the authentication records by labeling:

[0112] Certification Records:

[0113] Company name: ABC Technology Co., Ltd.

[0114] Business Type: Enterprise Establishment;

[0115] Role type: Legal person;

[0116] Authentication result: Success;

[0117] Tag categories:

[0118] The certification record is valid (the business has not been processed);

[0119] The authentication record has been used (the business has been processed);

[0120] The certification record has expired (the business has not been processed);

[0121] Validity period: If it is not used after 3 natural days, the record will be invalid. Add a new user in the management backend:

[0122] Add a user:

[0123] Username: zhangmou;

[0124] password:********;

[0125] Permissions: Administrator;

[0126] Modify User:

[0127] Username: zhangmou;

[0128] New Password:********;

[0129] Delete user: "username: limou";

[0130] Query user: Find the user information with the username "wangmou".

[0131] Set permissions: User name: zhangmou, Permissions: Super Administrator.

[0132] Add authentication records in the management backend:

[0133] Added records:;

[0134] Company name: XYZ Technology Co., Ltd.

[0135] Business type: Enterprise change;

[0136] Role type: Shareholder;

[0137] To modify the record tag:

[0138] Modify label: from "Authentication record valid" to "Authentication record used"; query record:

[0139] Search conditions: All certification records whose company names contain "technology".

[0140] Record the operation log of the backend administrator:

[0141] Record administrator actions:

[0142] Operator: admin;

[0143] Operation content: Add a new user account;

[0144] Logging system errors:

[0145] Error type: Database connection failed;

[0146] Time: 2024-08-01 10:00:00;

[0147] Statistical analysis:

[0148] Certification record statistics: A total of 100 new certification records were added in July 2024.

[0149] Query, analyze and backup:

[0150] Query the operation log for July.

[0151] Back up system logs for the first half of 2024.

[0152] Call the authentication record query interface to obtain the authentication information of a natural person:

[0153] Query request:

[0154] Name of natural person: Zhang;

[0155] Certificate number: xxxx5678901234xxxx;

[0156] Returns:

[0157] Personnel information: Name: Zhang, ID number: xxxx5678901234xxxx; Certification business serial number: 20240801001;

[0158] Authentication result: Success;

[0159] Certification time: 2024-08-01 09:00:00;

[0160] Certification record label: the certification record is valid;

[0161] Authentication process portrait image information: URL;

[0162] Call the interface to write back the authentication record usage status:

[0163] Usage Record:

[0164] Business serial number: 20240801001;

[0165] Usage status: used;

[0166] Write back the result:

[0167] Update record tag: Authentication record used;

[0168] The modified system handles domestic capital registration business:

[0169] Renovation content:

[0170] Added identity authentication information query function;

[0171] Added the function of binding and generating identity authentication result information;

[0172] Query identity authentication information during the receipt process:

[0173] Query request:

[0174] Name: Li;

[0175] ID number: xxxx5432109876xxxx;

[0176] Query results:

[0177] Valid identity authentication record: 20240801002;

[0178] The person who handles the identity authentication record is as follows:

[0179] Select Binding:

[0180] Check the identity authentication record: 20240801002;

[0181] The specific steps for selecting the business to be signed in batches are as follows:

[0182] Before batch selection, face recognition is performed. After verification, a new page will show the name and account number for the user to confirm. After the user's identity is confirmed, the batch signing service is selected.

[0183] Obtain the user's business and processing time through the user's historical processing records, and generate a user business data matrix;

[0184] Obtain the browsing frequency of users in the month before they handle the business in real time, collect real-time user feedback on the same business, and generate a user business handling information list based on the business handling ratio data of other users in the month when the user handles the business;

[0185] By taking the user business data matrix as the base data, the business handling curve is fitted by combining the user business handling information list through the curve fitting model; the business handling of the same user in the same time period in previous years and the browsing frequency of the user in the same time period are analyzed to predict and rank the user's business handling;

[0186] Users can select batches of signed services based on the service sorting, preview service content and user feedback on the services;

[0187] Back up the real-time data analysis matrix of user business handling and the user business handling information list, and input the data into the historical data analysis model to make reference adjustments to the historical handling records of the current user;

[0188] The user service data matrix is:

[0189]

[0190] Among them, t is the whole cycle of the user's business handling; α is the cycle label of the whole cycle of the user's business handling divided by year, α≤12; β is the time point in each stage cycle, specifically a certain day of the business handling, β≤31; The time label is the time label at the β time point in the α period after the full cycle slice of the user's business processing; For the corresponding A collection of time-labeled business transactions;

[0191] The user service handling information list is:

[0192]

[0193] Among them, j1, j2 and ji represent the number of users who have handled business 1, business 2 and business i in the history respectively; T1, T2 and Ti represent the number of users who canceled business 1, business 2 and business i respectively; RT1, RT2 and RTi represent the feedback information of business 1, business 2 and business i respectively.

[0194] The predicted ranking of user-handled services is as follows:

[0195] Prediction formula:

[0196]

[0197] Among them, Q(i) represents the probability of a user handling service i; E(i) represents the ratio of users who handled service i in the last month; δ i (tf-idf) indicates the frequency of users browsing service i in the last month; E t (i) represents the number of historical records of the user handling business i in month t in different years; represents the frequency of users browsing service i when handling service i in month t of different years; E t′ (i) represents the number of historical records of the user handling business i in month t′ of different years, where t′ includes all months except month t; represents the frequency of users browsing service i when handling service i in month t′ of different years; α and β are the influence weights of month t and month t′ respectively;

[0198] The frequency of browsing service i is calculated as:

[0199] s1. Extract keywords from business i;

[0200] s2. Calculate the frequency tf(i) of each keyword in business i in the user's historical browsing records;

[0201] tf(i)=q / d

[0202] Among them, q is the number of times the keyword appears; d is the total number of words in the document

[0203] s3. Calculate the inverse document frequency idf(i) of each keyword in business i in the user's historical browsing records;

[0204] idf(i)=log[z / (p+1)]

[0205] Where z is the total number of documents; p is the number of documents containing the keyword;

[0206] s4. Calculate the keyword frequency of business i;

[0207] δ i (tf-idf)=tf(i)*idf(i)*100%

[0208] Among them, δ i (tf-idf) indicates the frequency with which users browsed service i in the last month.

[0209] Submit Binding:

[0210] Formal binding: Binding is successful and the result information is recorded.

[0211] Generate identity authentication result information document:

[0212] Offline processing:

[0213] View and print documents during the receipt, material creation, and decision-making stages.

[0214] Online processing:

[0215] Generate paperwork in the electronic file “Audit Form”.

[0216] Renovation application query function:

[0217] Added features:

[0218] Added the “View identity authentication result information” function in the application details.

[0219] View the results:

[0220] Check the identity authentication result information bound to the application: the authentication result is successful.

[0221] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0222] Finally, it should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. An identity authentication system based on biometric recognition, characterized in that: The system includes a registration and identity authentication SDK function module, a registration and identity authentication background management module, a registration and identity authentication interface service module, a registration and approval system transformation module, a real-name authentication information query module, a binding identity authentication information module, an identity authentication result information generation module and an application case query transformation module; The registration and identity authentication SDK function module is used for the registration of new users and the login of registered users; the registration and identity authentication background management module is used to manage user registration information and registration records; the registration and identity authentication interface service module is used to provide an interface with an external system for user identity authentication; the registration and approval system transformation module includes domestic capital registration, foreign capital registration, agricultural college registration and individual registration; the real-name authentication information query module is used to query the user's real-name authentication information; the binding identity authentication information module is used to bind the user's identity authentication information to an account in the system; the generating identity authentication result information module is used to generate an authentication result according to the identity information provided by the user; the application case query transformation module is used to transform the application case query of domestic capital registration, foreign capital registration, agricultural college registration and individual registration, and add a function of viewing the identity authentication result information in the application case details information to view the identity authentication result information bound to the application case; The output end of the registration and identity authentication SDK function module is connected to the input end of the registration and identity authentication background management module; the output end of the registration and identity authentication background management module is connected to the input end of the registration and identity authentication interface service module; the output end of the registration and identity authentication interface service module is connected to the input end of the registration and approval system transformation module; the output end of the registration and approval system transformation module is connected to the input end of the real-name authentication information query module; the output end of the real-name authentication information query module is connected to the input end of the binding identity authentication information module; the output end of the binding identity authentication information module is connected to the input end of the generation identity authentication result information module; the output end of the generation identity authentication result information module is connected to the input end of the application query transformation module.

2. The identity authentication system based on biometric recognition according to claim 1, characterized in that: The registration and identity authentication SDK functional module includes an in-APP authentication mechanism, a registration and identity authentication SDK structure and a unified identity authentication service platform; The in-APP authentication mechanism includes an APP registration unit, a two-factor face recognition authentication unit, and an APP login unit; The specific steps of registering the identity authentication SDK structure are: S2-1. After completing the registration authentication through the APP registration unit, search for registration authentication in the APP and perform the first authentication; S2-2. Click to register for identity verification service and enter face recognition; S2-3. If the verification is successful, enter the task creation page and fill in the company name, unified social credit code number, business type and role on the task creation page; S2-4. Once completed, identity authentication will be performed. If the company information is incorrect, the user will be asked to fill it in again. S2-5, ID card users, enter two-factor authentication, that is, mobile phone number authentication and bank card authentication plus face recognition authentication; non-ID card users, only face recognition authentication; S2-6. If the verification is successful, the identity verification service is completed; The unified identity authentication service platform is used to provide services for S2-2 and S2-5, and compares and identifies the collected facial features with the ID card when entering the face recognition.

3. The identity authentication system based on biometric recognition according to claim 1, characterized in that: The registration and identity authentication background management module is used for user management, authentication record management and log management; The user management is used to access the user system of the registration business system and implement the management functions of user accounts, including adding users, modifying users, deleting users, querying users and setting permissions; the authentication record management is used to provide the management functions of user authentication records, including adding records, modifying record tags and querying records; the log management is used to provide the log management function of the background service, including recording the operation steps of administrators and operators; Record internal operating errors and anomalies of the entire system; Make real-time statistics and analysis of certification records; provide query, analysis and backup.

4. The identity authentication system based on biometric recognition according to claim 1, characterized in that: The module for generating identity authentication result information is used to generate an identity authentication result information document according to the identity authentication result bound to the document; Including online and offline processing; For offline processing, documents can be viewed and printed during the receipt, material creation and decision stages; For online processing, the documents are generated in the electronic file of the review form.

5. The identity authentication system based on biometric recognition according to claim 4, characterized in that: The specific electronic signature of a natural person on the PC in the online registration identity verification scheme is: After a natural person has checked the files to be signed and clicked on batch signature, a face recognition service is added for identity authentication. The QR code on the page is scanned by a mobile phone, and face recognition is completed on the mobile phone. After the authentication is passed, an event certificate is issued for electronic signature and the authentication result information of this identity authentication is recorded.

6. The identity authentication system based on biometric recognition according to claim 4, characterized in that: The specific steps for setting up the electronic signature after the intention authentication on the PC are as follows: S6-1. Initiate batch signing interface transformation, return success / failure information, and update to return authentication QR code page; S6-2: During the QR code scanning authentication process, if the page is closed due to improper operation, and the signature system does not receive the authentication result within three minutes, it is considered that the authentication has failed, the process ends, and the failure result is called back; S6-3, user authentication fails, the signing process ends, and the failure result is called back; S6-4: If the user receives a QR code on the PC but does not scan it for authentication, the authentication will be deemed to have failed after three minutes, the process ends, and the failure result will be called back; S6-5. After the signing is successful, the information is uploaded through the callback interface, and the authentication serial number and signing serial number are added. The business system binds them, and the signing system is synchronously stored in the database; S6-6. Add a new scope of willingness authentication, and determine whether the user needs to add facial recognition willingness authentication based on the type of certificate.

7. The identity authentication system based on biometric recognition according to claim 4, characterized in that: The specific electronic signature of a natural person on the mobile terminal in the online registration identity verification scheme is: S7-1. The first stage is the natural person user login authentication stage. The user logs in to the system for identity authentication. After completing the mobile phone number real-name authentication / bank card real-name authentication, face recognition authentication is performed; S7-2. The natural person user selects the business to be signed in batches and clicks to sign. The business system initiates the batch signing service. S7-3, the signature system calls the enterprise cloud identity authentication platform, obtains the face recognition authentication service page, and returns it to the business system; S7-4. The business system displays the face recognition authentication page, and the natural person performs face verification; S7-5. After verification, the signature system background will conduct an electronic signature by a natural person. After the signature is completed, the signature result will be notified to the business system, and the business system will inform the user.

8. The identity authentication system based on biometric recognition according to claim 7, characterized in that: In step S7-2, the steps for selecting services to be signed in batches are as follows: S8-1. Before batch selection, face recognition is performed. After verification, the user provides the name and account number on a new page for confirmation. After the user's identity is confirmed, the batch signing service is selected. S8-2. Obtain the user's business and processing time through the user's historical processing records, and generate a user business data matrix; S8-3, real-time acquisition of the browsing frequency of the user in the month before the user handles the service, collection of real-time user feedback on the same service, and generation of a user service handling information list based on the service handling ratio data of other users in the month when the user handles the service; S8-4, using the user business data matrix as the base data, and combining the user business handling information list with the curve fitting model to perform business handling curve fitting; analyzing the business handling of the same user in the same time period in previous years and the browsing business frequency of the user in the same time period, and performing user business handling prediction and ranking; S8-5. Users sort the services, preview the service content and the user's evaluation feedback on the services, and select to sign the services in batches; S8-6, back up the real-time data analysis matrix of the user's business handling and the user's business handling information list, and input the data into the historical data analysis model to make reference adjustments to the historical handling records of the current user; The user service data matrix is: Among them, t is the whole cycle of the user's business handling; α is the cycle label of the whole cycle of the user's business handling divided by year, α≤ 12 ; β is the time point in each stage cycle, specifically a certain day of handling business, β≤31; The time label is the time label at the β time point in the α period after the full cycle slice of the user's business processing; For the corresponding A collection of time-labeled business transactions; The user service handling information list is: Among them, j 1 、j 2 and j i Respectively represent the number of users who have handled business 1, business 2, and business i in the past; T1 , T2 and Ti Respectively represent the number of users who canceled service 1, service 2, and service i; RT1 , RT2 and RTi Respectively represent the feedback information of business 1, business 2 and business i.

9. The identity authentication system based on biometric recognition according to claim 8, characterized in that: In steps S8-3 and S8-4, the user handles the service prediction sorting, specifically: Prediction formula: Among them, Q(i) represents the probability of a user handling service i; E(i) represents the ratio of users who handled service i in the last month; δ i (tf-idf) indicates the frequency of users browsing service i in the last month; E t (i) represents the number of historical records of the user handling business i in month t in different years; represents the frequency of users browsing service i when handling service i in month t of different years; E t′ (i) represents the number of historical records of the user handling business i in month t' of different years, where t' includes all months except month t; represents the frequency of users browsing service i when handling service i in month t' of different years; α and β are the influence weights of month t and month t' respectively; The frequency of browsing service i is calculated as: s 1. Extract keywords from business i; s2. Calculate the frequency tf(i) of each keyword in business i in the user's historical browsing records; tf(i)=q / d Among them, q is the number of times the keyword appears; d is the total number of words in the document; s3. Calculate the inverse document frequency idf(i) of each keyword in business i in the user's historical browsing records; idf(i)=log[z / (p+1)] Where z is the total number of documents; p is the number of documents containing the keyword; s4. Calculate the keyword frequency of business i; δ i (tf-idf)=tf(i)*idf(i)*100% Among them, δ i (tf-idf) indicates the frequency with which users browsed service i in the last month.

10. An identity authentication method based on biometric recognition, characterized in that: The method comprises the following steps: S1. Perform registration and identity verification, including new authentication services, historical authentication queries, and authentication record tags; S2. Registration and identity authentication background management, including user management, authentication record management, and log management; S3. Provide registration and authentication interface services, including authentication record query and authentication record usage status writeback; S4. Registration and approval system transformation: the registration and approval businesses involved in the offline process transformation include domestic capital registration, foreign capital registration, agricultural special registration and individual registration; S5. In the receiving stage, provide identity authentication information query function, call the registration and identity authentication SDK background service through name and ID number to query the valid identity authentication record of the person who needs identity authentication for this business, so that the person in charge can view it; S6. When checking the identity authentication records, the handler shall select an identity authentication record for each person who needs identity authentication to perform business binding; the handler can adjust the business binding at any time during the receipt stage; when the receipt is submitted, the system calls the registration and identity authentication SDK background service to perform formal business binding and informs the handler of the binding result; S7. Generate an identity authentication result information document based on the identity authentication result bound to the application; including online application and offline application; the offline application is viewed and printed during the receipt, material creation and decision stages; the online application, the document is generated in the electronic file of the review form; S8. Improve the query of domestic capital registration, foreign capital registration, agricultural special registration and individual registration applications. Add the function of viewing identity authentication result information in the application details to view the identity authentication result information bound to the application. The binding result includes binding success and binding failure.

Images