Card-free transaction method, system and device based on multi-factor identity authentication and medium
Through the card-free transaction method based on multi-factor identity authentication, using facial information, fingerprint information, voice characteristics and ID card information for comparison, the problem of insufficient flexibility and immediacy of traditional bank card transaction methods and the difficulty in ensuring the security of card-free transactions is solved, and higher transaction security and convenience are achieved.
Patent Information
- Application Number
- CN202411504721.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-26
- Publication Date
- 2025-03-04
AI Technical Summary
The traditional bank card transaction methods have problems such as insufficient transaction flexibility and immediacy, and the existing cardless transaction methods are difficult to guarantee the security.
The cardless transaction method based on multi-factor identity authentication is adopted. By obtaining the user's face information, fingerprint information, voice characteristics and ID card information, and comparing it with the user authentication information stored in the database, and high-precision comparison is carried out in combination with machine learning algorithms or deep learning models to ensure the authenticity of the user's identity.
It realizes that when the user does not carry a bank card entity, the security and convenience of transactions are ensured through multi-factor identity authentication, and the flexibility and immediacy of transactions are improved.
Smart Images
Figure CN119558852A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of financial technology and information security technology, and in particular to a cardless transaction method, system, device and medium based on multi-factor identity authentication. Background Art
[0002] With the rapid development of mobile payment and e-commerce, users have an increasing demand for transaction convenience. However, traditional bank card transactions require users to carry physical cards, which limits the flexibility and immediacy of transactions to a certain extent. At the same time, the security of existing cardless transaction methods, such as relying only on passwords or SMS verification codes, is difficult to fully guarantee. Summary of the invention
[0003] The object of the present invention is to provide a card-not-present transaction method, system, device and medium based on multi-factor identity authentication, thereby solving all or one of the above-mentioned problems existing in the prior art.
[0004] In order to solve the above technical problems, the specific technical solutions of the present invention are as follows: In one aspect, the present invention provides a card-not-present transaction method based on multi-factor identity authentication, comprising the following steps: Obtain facial information, fingerprint information, voice characteristics, and ID card information submitted by users; According to the ID card information submitted by the user, query the corresponding user authentication information in the database; Compare the facial information, fingerprint information, and voice features submitted by the user with the user authentication information stored in the database; Allow users to access the account operation page if all submitted information is consistent with the user authentication information stored in the database; After the user enters the account operation page, the transaction operation initiated by the user is executed.
[0005] In one embodiment, obtaining facial information, fingerprint information, voice characteristics and ID card information submitted by the user includes: obtaining facial information, fingerprint information, voice characteristics and ID card information submitted by the user through a camera, fingerprint recognition module, microphone and ID card reader on a smart terminal device.
[0006] In one embodiment, the database is an encrypted secure database.
[0007] In one of the embodiments, comparing the facial information, fingerprint information, and voice features submitted by the user with the user authentication information stored in the database includes: using a machine learning algorithm or a deep learning model to compare the facial information, fingerprint information, and voice features submitted by the user with the user authentication information stored in the database.
[0008] In one of the implementations, it also includes: during the information comparison process, if any information comparison is inconsistent, the user is denied access to the account operation page, and the user is prompted to resubmit the information or perform other identity authentication methods.
[0009] In one embodiment, the method further includes requiring the user to enter a transaction password or perform secondary identity authentication before the user enters the account operation page to perform a transaction operation.
[0010] On the other hand, the present invention also provides a card-not-present transaction system based on multi-factor identity authentication, comprising: The information collection module is used to obtain the facial information, fingerprint information, voice characteristics and ID card information submitted by the user; The database query module is used to query the corresponding user authentication information in the database according to the ID card information submitted by the user; An information comparison module is used to compare the information submitted by the user with the user authentication information stored in the database; The permission control module is used to allow users to enter the account operation page when the information is consistent; The transaction execution module is used to execute the transaction operations initiated by the user after the user enters the account operation page.
[0011] In one embodiment, it further includes: a security monitoring module; The security monitoring module is used to monitor abnormal behaviors during the transaction process in real time, and take corresponding measures to protect the security of user funds when potential security risks are detected.
[0012] On the other hand, the present invention further provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the steps of the card-not-present transaction method based on multi-factor identity authentication are implemented.
[0013] On the other hand, the present invention further provides a computer device, comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus; wherein: The memory is used to store computer programs; The processor is used to execute the steps of the card-not-present transaction method based on multi-factor identity authentication by running the program stored in the memory.
[0014] The beneficial effects of the technical solution of the present invention are: The cardless transaction method based on multi-factor identity authentication described in the present invention can realize multi-factor identity verification by obtaining the user's facial information, fingerprint information, voice characteristics and ID card information, and combining it with the authentication information in the database when the user does not carry a physical bank card. On the basis of ensuring the authenticity of the user's identity, the user is allowed to enter the account operation page to perform transaction operations, thereby improving the convenience and security of transactions. BRIEF DESCRIPTION OF THE DRAWINGS
[0015] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0016] Figure 1 It is a flowchart of the card-not-present transaction method based on multi-factor identity authentication described in Example 1 of the present invention; Figure 2 It is a schematic diagram of the architecture of a card-not-present transaction system based on multi-factor identity authentication according to Embodiment 2 of the present invention; Figure 3 is a schematic diagram of the structure of the computer device described in Example 4 of the present invention; The symbols in the accompanying drawings are explained as follows: 1501, processor; 1502, communication interface; 1503, memory; 1504, communication bus. DETAILED DESCRIPTION
[0017] The preferred embodiments of the present invention are described in detail below in conjunction with the accompanying drawings so that the advantages and features of the present invention can be more easily understood by those skilled in the art, thereby making a clearer and more definite definition of the protection scope of the present invention.
[0018] In the description of the present invention, it should be noted that the embodiments described in the present invention are only part of the embodiments of the present invention, rather than all of the embodiments; based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present invention.
[0019] The terms "first", "second", etc. in the specification and claims of this article and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of this article described here can be implemented in an order other than those illustrated or described here. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, device, product or equipment that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or equipment. Example 1
[0020] This embodiment provides a card-not-present transaction method based on multi-factor identity authentication, such as Figure 1 As shown, the following steps are included: In a cardless transaction scenario based on a smart terminal device, the user's facial information, fingerprint information, voice features and ID card information are first obtained through the camera, fingerprint recognition module, microphone and ID card reader on the smart terminal device.
[0021] Furthermore, based on the ID card information submitted by the user, the corresponding user authentication information is queried in the encrypted security database.
[0022] Furthermore, using machine learning algorithms or deep learning models, the facial information, fingerprint information, and voice features submitted by the user are compared with the user authentication information stored in the database for high precision. If all the information is consistent, the user is allowed to enter the account operation page through the permission control module.
[0023] Furthermore, before entering the account operation page, the system may further require the user to enter a transaction password or perform secondary identity authentication, such as through a text message verification code or biometric secondary identification.
[0024] Furthermore, the user initiates a transaction operation on the account operation page, and the transaction execution module completes the transaction process according to the user's instructions.
[0025] Furthermore, during the entire transaction process, the security monitoring module continuously monitors transaction behavior. Once abnormal behavior or potential security risks are detected, corresponding measures will be taken immediately, such as suspending transactions, notifying users, or initiating risk management procedures to ensure the safety of user funds.
[0026] Through the above technical scheme, the present invention not only realizes the convenience of cardless transactions, but also effectively improves the security of transactions through security measures such as multi-factor identity authentication and real-time monitoring, providing users with a safer and more convenient transaction experience.
[0027] It should be noted that the examples herein are only for explaining the present invention and are not intended to limit the protection scope of the present invention. Example 2
[0028] This embodiment is based on the same inventive concept as the card-not-present transaction method based on multi-factor identity authentication described in Embodiment 1, and provides a card-not-present transaction system based on multi-factor identity authentication, such as Figure 2 As shown, including: The information collection module is used to obtain the facial information, fingerprint information, voice characteristics and ID card information submitted by the user; The database query module is used to query the corresponding user authentication information in the database according to the ID card information submitted by the user; An information comparison module is used to compare the information submitted by the user with the user authentication information stored in the database; The permission control module is used to allow users to enter the account operation page when the information is consistent; The transaction execution module is used to execute the transaction operations initiated by the user after the user enters the account operation page.
[0029] In one embodiment, it further includes: a security monitoring module; The security monitoring module is used to monitor abnormal behaviors during the transaction process in real time, and take corresponding measures to protect the security of user funds when potential security risks are detected. Example 3
[0030] This embodiment provides a computer-readable storage medium, including: The storage medium is used to store computer software instructions used to implement the cardless transaction method based on multi-factor identity authentication described in the above-mentioned Example 1, which includes a program for executing the above-mentioned program set for the cardless transaction method based on multi-factor identity authentication; specifically, the executable program can be built into the cardless transaction system based on multi-factor identity authentication described in Example 2, so that the cardless transaction system based on multi-factor identity authentication can implement the cardless transaction method based on multi-factor identity authentication described in Example 1 by executing the built-in executable program.
[0031] In addition, the computer-readable storage medium of this embodiment may adopt any combination of one or more computer-readable storage media, wherein the computer-readable storage medium includes electrical, optical, electromagnetic, infrared or semiconductor systems, devices or components, or any combination thereof. Example 4
[0032] This embodiment provides an electronic device, such as Figure 3As shown, the electronic device may include: a processor 1501 , a communication interface 1502 , a memory 1503 and a communication bus 1504 , wherein the processor 1501 , the communication interface 1502 , and the memory 1503 communicate with each other via the communication bus 1504 .
[0033] Memory 1503, used for storing computer programs; The processor 1501 is used to implement the steps of the card-not-present transaction method based on multi-factor identity authentication described in the above-mentioned embodiment 1 when executing the computer program stored in the memory 1503.
[0034] As an embodiment of the present invention, the communication bus mentioned in the above terminal can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 3 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.
[0035] As an implementation mode of the present invention, the communication interface is used for communication between the above-mentioned terminal and other devices.
[0036] As an embodiment of the present invention, the memory may include a random access memory (RAM) or a non-volatile memory, such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.
[0037] As an embodiment of the present invention, the above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.
[0038] It should be understood that in the various embodiments of this document, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this document.
[0039] It should also be understood that in the embodiments of this article, the term "and / or" is only a description of the association relationship of the associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.
[0040] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this article.
[0041] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.
[0042] In the several embodiments provided herein, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of the units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, or can be electrical, mechanical or other forms of connection.
[0043] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of this article.
[0044] In addition, each functional unit in each embodiment of this invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit may be implemented in the form of hardware or in the form of software functional unit.
[0045] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this article is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of this article. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.
[0046] The above descriptions are merely embodiments of the present invention and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.
Claims
1. A card-not-present transaction method based on multi-factor identity authentication, characterized in that: The following steps are involved: Obtain facial information, fingerprint information, voice characteristics, and ID card information submitted by users; According to the ID card information submitted by the user, query the corresponding user authentication information in the database; Compare the facial information, fingerprint information, and voice features submitted by the user with the user authentication information stored in the database; Allow users to access the account operation page if all submitted information is consistent with the user authentication information stored in the database; After the user enters the account operation page, the transaction operation initiated by the user is executed.
2. The card-not-present transaction method based on multi-factor identity authentication according to claim 1, characterized in that: The obtaining of facial information, fingerprint information, voice features and ID card information submitted by the user includes: obtaining the facial information, fingerprint information, voice features and ID card information submitted by the user through a camera, fingerprint recognition module, microphone and ID card reader on the smart terminal device.
3. The card-not-present transaction method based on multi-factor identity authentication according to claim 1, characterized in that: The database is an encrypted and secure database.
4. The card-not-present transaction method based on multi-factor identity authentication according to claim 1, characterized in that: The facial information, fingerprint information, and voice features submitted by the user are compared with the user authentication information stored in the database, including: using a machine learning algorithm or a deep learning model to compare the facial information, fingerprint information, and voice features submitted by the user with the user authentication information stored in the database.
5. The card-not-present transaction method based on multi-factor identity authentication according to claim 1, characterized in that: It also includes: during the information comparison process, if any information is inconsistent, the user will be denied access to the account operation page and will be prompted to resubmit the information or perform other identity authentication methods.
6. The card-not-present transaction method based on multi-factor identity authentication according to claim 1, characterized in that: Also includes: Before users enter the account operation page to perform trading operations, they are required to enter the trading password or perform secondary identity verification.
7. A card-not-present transaction system based on multi-factor identity authentication, characterized in that: include: The information collection module is used to obtain the facial information, fingerprint information, voice characteristics and ID card information submitted by the user; The database query module is used to query the corresponding user authentication information in the database according to the ID card information submitted by the user; An information comparison module is used to compare the information submitted by the user with the user authentication information stored in the database; The permission control module is used to allow users to enter the account operation page when the information is consistent; The transaction execution module is used to execute the transaction operations initiated by the user after the user enters the account operation page.
8. The card-not-present transaction system based on multi-factor identity authentication according to claim 7, characterized in that: Also includes: security monitoring module; The security monitoring module is used to monitor abnormal behaviors during the transaction process in real time, and take corresponding measures to protect the security of user funds when potential security risks are detected.
9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the card-not-present transaction method based on multi-factor identity authentication described in any one of claims 1 to 6 are implemented.
10. A computer device, characterized in that: It includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other through the communication bus; wherein: The memory is used to store computer programs; The processor is used to execute the steps of the card-not-present transaction method based on multi-factor identity authentication as described in any one of claims 1 to 6 by running the program stored in the memory.