Authentication method, system, device, storage medium and product

Abstract

The present application discloses an identity authentication method, system, device, storage medium and product, which relate to the field of information security technology. The method comprises obtaining an encrypted string by encrypting based on pre-acquired preset information; generating a dynamic face-to-face QR code based on the encrypted string, so that a user terminal can identify the dynamic face-to-face QR code to read the preset information in the dynamic face-to-face QR code, and perform identity authentication based on the preset information. Through the above scheme, the business terminal encrypts the preset information in the QR code, and the scanning party, that is, the user terminal, performs dynamic comparison and verification by identifying the encrypted preset information. The scheme is innovative and universal in terms of anti-counterfeiting of code scanning, thereby improving the security and usability of the QR code identity authentication method.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to an identity authentication method, system, device, storage medium and product. Background Art

[0002] As an efficient information carrier, QR code technology plays an increasingly important role in modern life. It can store and transmit a variety of data such as URLs, texts, contact information, payment instructions, etc., greatly simplifying the data exchange process. Due to its convenience, QR code is widely used in daily life and business scenarios, especially in the fields of finance, retail and services.

[0003] In existing technical applications, QR codes are mainly used for the storage and transmission of static information. Once a QR code is generated, its content is often fixed and can be easily copied or tampered with. In addition, the information in the QR code is open to the scanner, and anyone can scan and obtain the information. More importantly, due to the lack of an effective dynamic verification mechanism, QR codes are easily forged and spread unexpectedly, which is particularly prominent in business scenarios that require identity and geographic location verification. For example, in banking services, customers and employees often need to sign in by scanning QR codes, but existing QR code technology cannot ensure the authenticity and compliance of the scanning behavior, which may lead to problems such as false sign-ins, affecting the recognition of customer rights and employee performance, and even bringing business risks.

[0004] Therefore, existing technologies have obvious shortcomings in protecting sensitive information, preventing QR code forgery and unintended dissemination, and ensuring the authenticity of scanning behavior. The existence of these problems not only limits the application of QR code technology in a wider range of scenarios, but also poses a challenge to the security and efficiency of related businesses.

[0005] The above contents are only used to assist in understanding the technical solution of the present application and do not constitute an admission that the above contents are prior art. Summary of the invention

[0006] The main purpose of this application is to provide an identity authentication method, system, device, storage medium and computer program product, aiming to improve the security and usability of the QR code identity authentication method.

[0007] To achieve the above purpose, the present application proposes an identity authentication method, which is applied to a service end and includes:

[0008] Encrypting based on pre-acquired preset information to obtain an encrypted string;

[0009] A dynamic face-to-face interview QR code is generated based on the encrypted string, so that the user terminal can identify the dynamic face-to-face interview QR code, read the preset information in the dynamic face-to-face interview QR code, and perform identity authentication based on the preset information.

[0010] To achieve the above purpose, the present application also proposes an identity authentication method, which is applied to a user terminal and includes:

[0011] The recognition service end encrypts the preset information obtained in advance to obtain an encrypted string, and generates a dynamic face-to-face interview QR code based on the encrypted string to read the preset information in the dynamic face-to-face interview QR code;

[0012] Based on the preset information, identity authentication is performed.

[0013] In one embodiment, the preset information includes a target page path, and the step of performing identity authentication based on the preset information includes:

[0014] Jump to the target page according to the target page path, so as to call the preset application interface to obtain the client identity encryption information corresponding to the user terminal;

[0015] generating a customer ID associated token based on the customer identity encrypted information;

[0016] Based on the client ID association token and the preset information, a dynamic verification service is called to perform identity authentication to obtain an identity authentication result.

[0017] In one embodiment, the step of generating a customer ID associated token based on the customer identity encrypted information includes:

[0018] Decrypting the encrypted customer identity information to obtain customer identity information;

[0019] Performing validity verification based on the customer identity information to obtain a validity verification result;

[0020] If the validity verification result is verification passed, a client ID associated token is generated based on the client ID corresponding to the user end.

[0021] In one embodiment, the preset information further includes business end preset encryption information, and the step of calling a dynamic verification service for identity authentication based on the customer ID association token and the preset information to obtain an identity authentication result includes:

[0022] Calling the application interface to obtain user terminal information corresponding to the user terminal;

[0023] Perform compliance verification based on the user-side information and the preset encryption information of the service end to obtain a compliance verification result;

[0024] Performing permission verification based on the client ID association token and the client ID corresponding to the user end to obtain a permission verification result;

[0025] If both the compliance check result and the permission check result are verified as passed, a successful identity authentication result is obtained.

[0026] In one embodiment, the user-side information includes encrypted information of the customer's geographic location, and the step of performing compliance verification according to the user-side information and the preset encrypted information of the service end to obtain a compliance verification result includes:

[0027] Decrypting the encrypted customer geographic location information to obtain the customer geographic location information, and decrypting the business end preset encrypted information to obtain the business end geographic location information and business end preset information;

[0028] Performing location verification according to the customer location information and the service end location information to obtain a location verification result;

[0029] Determine whether the preset information of the business end complies with the preset business rules, and obtain the business rule verification result;

[0030] If both the location verification result and the business rule verification result are verified as passed, a compliance verification passed result is obtained.

[0031] In addition, to achieve the above purpose, the present application also proposes an identity authentication system, the identity authentication system includes a service end, and the service end includes:

[0032] An encryption module, used for encrypting an encrypted string based on pre-acquired preset information;

[0033] A generating module, used for generating a dynamic face-to-face QR code based on the encrypted string, so that the user terminal can identify the dynamic face-to-face QR code, read the preset information in the dynamic face-to-face QR code, and perform identity authentication based on the preset information;

[0034] The system further includes a user terminal, which includes:

[0035] An identification module, used to identify the dynamic face-to-face QR code generated by the business end, so as to read the preset information in the dynamic face-to-face QR code;

[0036] The verification module is used to perform identity verification based on the preset information.

[0037] In addition, to achieve the above-mentioned purpose, the present application also proposes an identity authentication device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the identity authentication method described above.

[0038] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by the processor, the steps of the identity authentication method described above are implemented.

[0039] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the steps of the identity authentication method described above are implemented.

[0040] One or more technical solutions proposed in the present application obtain an encrypted string by encrypting based on pre-acquired preset information; generate a dynamic face-to-face interview QR code based on the encrypted string, so that the user end can identify the dynamic face-to-face interview QR code to read the preset information in the dynamic face-to-face interview QR code, and perform identity authentication based on the preset information. Through the above solution, the business end encrypts the preset information in the QR code, and the scanner, that is, the user end, performs dynamic comparison and verification by identifying the encrypted preset information. This solution is innovative and universal in terms of anti-counterfeiting when scanning codes, thereby improving the security and usability of the QR code identity authentication method. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0042] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0043] Figure 1 A flowchart of the first embodiment of the identity verification method for this application is provided;

[0044] Figure 2 A schematic diagram of a dynamic QR code identity authentication solution process provided in an embodiment of the present application;

[0045] Figure 3 A flowchart of the second embodiment of the identity verification method for this application is provided;

[0046] Figure 4A brief flowchart of the identity authentication method provided in Example 2 of the present application;

[0047] Figure 5 This is a schematic diagram of the module structure of the identity authentication system according to an embodiment of the present application;

[0048] Figure 6 This is a schematic diagram of the device structure of the hardware operating environment involved in the identity authentication method in the embodiment of the present application.

[0049] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0050] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0051] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0052] The main solution of the embodiment of the present application is to propose a QR code system based on dynamic verification of geographic location, which aims to solve the problem of anti-counterfeiting and security of QR codes in commercial scenarios. The solution first generates a QR code containing specific information in the banking system. This information not only includes static URL addresses, but also dynamic preset information, such as event ID, generator, generation time, and generator's geographic location. The system encrypts this preset information to ensure the confidentiality of key information, and splices the encrypted string as a URL parameter to generate a QR code with identity uniqueness, timeliness and confidentiality.

[0053] In the code scanning verification phase, after the customer scans the QR code through the mobile banking APP, the system will first obtain the customer's identity information through the API and ensure that the customer has been authenticated and authorized through the login verification mechanism of the mobile banking APP. Next, the back-end service decrypts and verifies the validity of the incoming customer identity information, and generates a token associated with the customer ID. Subsequently, the check-in page obtains the customer's geographic location information and sends it together with the token, customer ID, encrypted geographic location information, and generator preset information to the back-end for dynamic verification. The back-end service will compare and verify the token and customer ID to prevent information tampering and unauthorized access. At the same time, it will decrypt the customer's geographic location information and generator preset information, and compare the validity of the scanned information with the generator information according to the verification rules, such as whether the identity, check-in time and location meet the business rules.

[0054] Through this triple verification mechanism, the solution ensures the legitimacy of the identity of the scanner, the security of front-end and back-end communication, and the accuracy of the scanned code, thereby realizing the anti-counterfeiting function of the QR code. This solution solves the problem of QR codes being easily forged and spread unexpectedly in the existing technology by dynamically verifying the geographic location and identity information of the scanner, and improves the security and reliability of QR code applications in commercial scenarios.

[0055] Since QR codes in the prior art are mainly used for the storage and transmission of static information, once a QR code is generated, its content is often fixed and can be easily copied or tampered with. In addition, the information in the QR code is open to the scanner, and anyone can scan and obtain the information. More importantly, due to the lack of an effective dynamic verification mechanism, QR codes are easily forged and spread unexpectedly, which is particularly prominent in business scenarios that require identity and geographic location verification. For example, in banking services, customers and employees often need to sign in by scanning QR codes, but existing QR code technology cannot ensure the authenticity and compliance of the scanning behavior, which may lead to problems such as false sign-ins, affecting the recognition of customer rights and employee performance, and even bringing business risks.

[0056] The present application provides a solution, which obtains an encrypted string by encrypting based on pre-acquired preset information; generates a dynamic face-to-face interview QR code based on the encrypted string, so that the user end can identify the dynamic face-to-face interview QR code to read the preset information in the dynamic face-to-face interview QR code, and perform identity authentication based on the preset information. The above solution is used to achieve the anti-counterfeiting requirements of code scanning verification in business scenarios. The business end encrypts the preset information in the QR code, and the code scanning party, that is, the user end, performs dynamic comparison verification by identifying the encrypted preset information. The solution is innovative and universal in terms of code scanning anti-counterfeiting, thereby improving the security and usability of the QR code identity authentication method.

[0057] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, an identity authentication system, etc. The following takes the identity authentication system as an example to illustrate this embodiment and the following embodiments.

[0058] Based on this, the present application embodiment provides an identity authentication method, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the identity authentication method of the present application.

[0059] In this embodiment, the identity authentication method is applied to the service end, and the method includes steps S1000 to S2000:

[0060] Step S1000: Encrypting based on pre-acquired preset information to obtain an encrypted string;

[0061] Step S2000: Generate a dynamic face-to-face interview QR code based on the encrypted string, so that the user terminal can identify the dynamic face-to-face interview QR code, read the preset information in the dynamic face-to-face interview QR code, and perform identity authentication based on the preset information.

[0062] It should be noted that the identity authentication method in the embodiment of the present application is mainly aimed at the business end and the user end to ensure safe and effective code scanning and sign-in in business scenarios. The business end is responsible for generating a dynamic face-to-face QR code containing sensitive information, while the user end completes the identity authentication by identifying the QR code and reading the preset information therein. The preset information includes not only the target page path, but may also contain encrypted information preset by the business end, such as event ID, generator, generation time, and generator's geographic location. This information is encrypted during the QR code generation process to protect sensitive data from unauthorized access.

[0063] In addition, it should be noted that the identity authentication process is designed to ensure that only authorized users can sign in by scanning the code. After the user recognizes the QR code, it will jump to the target page according to the preset information, and call the preset application interface to obtain the corresponding customer identity encryption information of the user. This information is then used to generate a token associated with the customer ID, which plays a key role in the subsequent identity authentication process. The success of identity authentication depends on multiple factors, including the validity verification of customer identity information, the generation of customer ID-associated tokens, and the compliance verification of user-side information and preset encrypted information on the business side.

[0064] In addition, it should be noted that compliance verification includes decryption and comparison of user-side information and business-side preset encrypted information. User-side information may contain encrypted customer geographic location information, which needs to be compared with the business-side preset geographic location information to ensure that the code scanning behavior occurs within the expected geographic location range. At the same time, the business-side preset information needs to comply with the preset business rules to ensure that the code scanning behavior meets business requirements. Only when both the location check and the business rule check are passed can the compliance check be considered successful.

[0065] For example, see Figure 2 , Figure 2A flow chart of a dynamic QR code identity authentication scheme provided for an embodiment of the present application. In a feasible implementation, in a business scenario where an account manager interviews a customer and scans the code to sign in, the account manager generates a face-to-face interview QR code in the bank's business system, and the customer scans the code to sign in through the mobile banking APP. First, the business end obtains the account manager's identity information and authorized geographic location information, and then generates a dynamic face-to-face interview QR code containing this information. The user end scans the QR code through the mobile banking APP, reads the preset information therein, and jumps to the sign-in page based on this information. The system calls the API to obtain the user's identity information, verifies its validity, and generates a token associated with the user ID. Then, the system obtains the user's geographic location information and compares it with the geographic location information preset by the business end, and checks whether the preset information on the business end complies with the business rules. If all checks are passed, the system will return a successful identity authentication result, record the scan code sign-in status, and thus complete the entire identity authentication process. This process not only ensures the security of identity authentication, but also improves the efficiency and reliability of business processes.

[0066] The present embodiment provides an identity authentication method, which obtains an encrypted string by encrypting based on pre-acquired preset information; generates a dynamic face-to-face interview QR code based on the encrypted string, so that the user end can identify the dynamic face-to-face interview QR code to read the preset information in the dynamic face-to-face interview QR code, and performs identity authentication based on the preset information. The above scheme is used to implement the anti-counterfeiting requirements of code scanning verification in business scenarios. The business end encrypts the preset information in the QR code, and the code scanning party, that is, the user end, performs dynamic comparison verification by identifying the encrypted preset information. The scheme is innovative and universal in terms of code scanning anti-counterfeiting, thereby improving the security and usability of the QR code identity authentication method.

[0067] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above-mentioned embodiment 1 can be referred to the above introduction, and will not be repeated in the following. Figure 3 The identity authentication method is applied to a user terminal, and the method includes steps S3000 to S4000:

[0068] Step S3000: The recognition service end encrypts the preset information obtained in advance to obtain an encrypted string, and generates a dynamic face-to-face interview QR code based on the encrypted string to read the preset information in the dynamic face-to-face interview QR code;

[0069] Step S4000: Perform identity authentication based on the preset information.

[0070] It should be noted that the application of the identity authentication method on the user side mainly involves the recognition and reading of the dynamic face-to-face QR code generated by the business side, as well as the identity authentication process based on the preset information in the QR code. The dynamic face-to-face QR code is a special QR code that contains not only a static URL address, but also dynamic preset information, such as event ID, generator, generation time, and generator's geographic location. This information is encrypted when the QR code is generated to ensure that only authorized users can access and verify this sensitive information. By identifying these QR codes, the user side can read the encrypted information and perform identity authentication on this basis to ensure that only legitimate users can complete business operations such as sign-in.

[0071] In addition, it should be noted that the identity authentication process is intended to ensure the legitimacy of the user's identity and the compliance of the operation. After reading the preset information in the QR code, the user will jump to the target page based on this information, and call the preset application interface to obtain the encrypted customer identity information corresponding to the user. This information includes the encrypted geographic location information of the customer and the encrypted information preset by the business end. The user then decrypts this information to obtain the customer's identity information and geographic location information, as well as the geographic location information and preset information of the business end. Based on this information, the user performs compliance verification, including location verification and business rule verification, to ensure that the user's operation complies with business rules and geographic location requirements. At the same time, the user will also generate a customer ID association token based on the customer identity information, and perform permission verification to ensure that the user has the corresponding operation authority. Only when all verifications are passed can the user successfully complete identity authentication.

[0072] For example, in one feasible implementation, the system first generates a dynamic face-to-face QR code containing encrypted preset information on the business side. The user side scans the QR code through the mobile banking APP, reads the preset information therein, and jumps to the sign-in page based on this information. The system calls the API to obtain the user's identity information, verifies its validity, and generates a token associated with the user ID. Next, the system obtains the user's geographic location information, compares it with the geographic location information preset by the business side, and checks whether the preset information on the business side complies with the business rules. If all checks pass, the system will return a successful identity authentication result, record the scan code sign-in status, and thus complete the entire identity authentication process. This process not only ensures the security of identity authentication, but also improves the efficiency and reliability of business processes.

[0073] In a feasible implementation manner, the preset information includes a target page path, and step S4000 may include steps S4100 to S4300:

[0074] Step S4100: Jump to the target page according to the target page path to call a preset application interface to obtain the client identity encryption information corresponding to the user terminal;

[0075] Step S4200: Generate a customer ID associated token based on the customer identity encryption information;

[0076] Step S4300: Based on the customer ID association token and the preset information, a dynamic verification service is called to perform identity authentication and obtain an identity authentication result.

[0077] It should be noted that the application of the identity verification method on the user side involves the recognition and reading of the dynamic face-to-face QR code generated by the business side, as well as the identity verification process based on the preset information in the QR code. The target page path in the preset information is the key, which guides the user side to jump to a specific target page and triggers the call of the preset application interface to obtain the corresponding customer identity encryption information of the user side. The purpose of this process is to ensure that only authorized users can access and verify these sensitive information, thereby protecting the security of customer data.

[0078] In addition, it should be noted that obtaining the encrypted customer identity information is a key step in the identity authentication process. The system first decrypts the encrypted customer identity information to obtain the customer identity information, and performs validity verification based on this information. If the verification result is passed, the system will generate a customer ID associated token based on the customer ID corresponding to the user end. This token plays a key role in the subsequent identity authentication process. It not only proves the user's identity, but also ensures the user's access rights to specific resources.

[0079] In the final stage of identity verification, the system will call the dynamic verification service for identity verification based on the customer ID associated token and preset information, and obtain the identity verification result. The purpose of this step is to ensure that the user's operation complies with business rules and security requirements, thereby preventing unauthorized access and operation.

[0080] For example, in one feasible implementation, when a user uses a mobile banking APP to scan a dynamic face-to-face QR code generated by the business end, the system will read the preset information in the QR code, including the target page path. According to this path, the system jumps to the target page and calls the preset application interface to obtain the encrypted customer identity information corresponding to the user end. The system then decrypts this information, verifies the validity of the customer identity, and generates a token associated with the customer ID. Next, the system will obtain the user's geographic location information, and compare it with the geographic location information preset by the business end, and check whether the preset information on the business end complies with the business rules. If all checks pass, the system will return a successful identity authentication result and record the scan code check-in status, thereby completing the entire identity authentication process. This process not only ensures the security of identity authentication, but also improves the efficiency and reliability of business processes.

[0081] In a feasible implementation manner, step S4200 may include steps S4210 to S4230:

[0082] Step S4210: decrypting the encrypted customer identity information to obtain customer identity information;

[0083] Step S4220: Perform validity verification based on the customer identity information to obtain a validity verification result;

[0084] Step S4230: If the validity verification result is verified to be passed, a client ID associated token is generated based on the client ID corresponding to the user terminal.

[0085] It should be noted that the processing and verification of customer identity information is the key to ensuring the accuracy and security of identity verification. Customer identity encryption information refers to the encrypted customer identity data stored in the QR code. After the QR code is recognized and read by the user, these data need to be decrypted to obtain the original customer identity information. The decryption process is to convert the encrypted information back to a readable format so that the system can verify the customer's identity. This step is necessary because it allows the system to confirm whether the information contained in the QR code matches the identity of the actual customer who scanned the code.

[0086] In addition, it should be noted that validity verification is a check on the decrypted customer identity information to ensure that the information is up-to-date and valid, which includes verifying whether the customer's identity information is consistent with the records in the database and whether it meets the current business scenario requirements. If the validity verification passes, the system will generate a customer ID-associated token based on the corresponding customer ID on the user side. This token is an important security measure that not only proves the customer's identity, but also ensures the customer's access rights to specific resources, and can be used in subsequent transactions or verification processes to simplify the identity verification process.

[0087] For example, in a feasible implementation, when a customer uses a mobile banking APP to scan a face-to-face QR code generated by a customer manager, the system first reads the preset information in the QR code, including the target page path and the customer identity encryption information. The system jumps to the corresponding page according to the target page path, and calls the preset application interface to obtain the customer identity encryption information. Then, the system decrypts this information to obtain the customer's identity data and performs validity verification. If the verification result shows that the customer's identity is valid, the system will generate a token based on the customer's ID. This token is then used to call a dynamic verification service for deeper identity authentication, including compliance verification and permission verification. Compliance verification involves comparing the customer's geographic location information with the preset information on the business end, while permission verification is to confirm whether the customer has the right to perform a specific operation. Only when all verifications are passed will the system confirm that the identity authentication is successful and allow the customer to continue with subsequent business operations. This process not only improves the security of the QR code application, but also provides customers with a convenient and secure identity authentication method.

[0088] Based on the first embodiment of the present application, in the third embodiment of the present application, the same or similar contents as those in the above-mentioned second embodiment can refer to the above introduction, and will not be repeated in the following. Figure 4 , the preset information also includes the service end preset encryption information, the method step S4300 includes steps S4310 to S4320:

[0089] Step S4310: calling the application interface to obtain the user terminal information corresponding to the user terminal;

[0090] Step S4320: performing compliance verification according to the user-side information and the preset encryption information of the service end to obtain a compliance verification result;

[0091] Step S4330: Performing permission verification according to the client ID association token and the client ID corresponding to the user terminal to obtain a permission verification result;

[0092] Step S4340: If both the compliance check result and the permission check result are verified to be passed, a successful identity authentication result is obtained.

[0093] It should be noted that based on the customer ID association token and the preset information, calling the dynamic verification service for identity authentication and obtaining the identity authentication result involves a comprehensive identity authentication process, which ensures that the information on the user side matches the preset conditions on the business side, thereby enhancing the security of the QR code solution. In this process, the user-side information includes the customer's geographic location encrypted information, which is the customer's location data, which is encrypted to protect privacy and security. The business-side preset encrypted information is the preset conditions in the business scenario, such as the expected geographic location range, which is also encrypted to ensure security during transmission.

[0094] In addition, it should be noted that compliance verification is the process of verifying whether the user-side information meets the preset conditions of the business side. This includes decrypting the encrypted information of the user side and the business side, and then comparing the decrypted location information to verify whether the customer is in the expected geographical location. At the same time, it will also determine whether the preset information of the business side meets the preset business rules. This is a broader concept that may include time limits, identity verification requirements, etc. Only when both the location verification and the business rule verification are passed can the compliance verification be considered passed.

[0095] The permission check is to confirm whether the customer ID associated token matches the customer ID corresponding to the user to ensure the validity of the token and the consistency of the customer's identity. This step is crucial because it prevents unauthorized access and potential security threats.

[0096] For example, in one feasible implementation, the account manager generates a face-to-face QR code containing preset information in the banking system. After the customer scans this QR code using the mobile banking APP, the system reads the preset information and jumps to the corresponding target page. On this page, the system calls the application interface to obtain the customer's encrypted geographic location information and other user-side information. Subsequently, the system decrypts this information and compares it with the encrypted information preset by the business end to complete the compliance verification. At the same time, the system verifies whether the customer ID-associated token matches the customer ID on the user end and completes the permission verification. If both the compliance verification and the permission verification pass, the system confirms that the identity authentication is successful and allows the customer to perform subsequent business operations, such as signing in. This process not only ensures the authenticity of the customer's identity, but also ensures the security and compliance of business operations.

[0097] In a feasible implementation manner, the user terminal information includes encrypted information of the customer's geographical location, and step S4320 may include steps S4321 to S4324:

[0098] Step S4321: decrypting the encrypted customer geographic location information to obtain the customer geographic location information, and decrypting the service end preset encrypted information to obtain the service end geographic location information and service end preset information;

[0099] Step S4322: performing location verification according to the customer location information and the service end location information to obtain a location verification result;

[0100] Step S4323: determining whether the preset information of the service end conforms to the preset service rules, and obtaining the service rule verification result;

[0101] Step S4324: If both the location verification result and the business rule verification result are verified as passed, a compliance verification passed result is obtained.

[0102] It should be noted that the compliance verification process is an important step to ensure that the user-side information matches the preset conditions of the business side. The user-side information includes the encrypted customer location information, which is encrypted customer location information to protect user privacy. During the decryption process, the system compares the customer's location information with the preset location information of the business side to confirm whether the customer is in the expected location. The purpose of this process is to ensure the legality and compliance of the scanning behavior and prevent false check-ins and other potential security risks.

[0103] In addition, it should be noted that compliance verification also includes verification of business-side preset information. Business-side preset information refers to the conditions and requirements set when the QR code is generated. This information may include specific business rules, time limits, etc. By judging whether this preset information complies with business rules, the system can ensure that all operations are performed within a safe and compliant framework. Only when both the location check and the business rule check are passed can the compliance check be confirmed to be successful, thereby providing a basis for subsequent permission checks.

[0104] For example, in a feasible implementation, after the customer scans the face-to-face QR code generated by the account manager through the mobile banking APP, the system first reads the preset information in the QR code, including the customer's geographical location encryption information and the business end preset encryption information. The system decrypts this information to obtain the customer's geographical location information and the business end's geographical location information. Then, the system compares the customer's geographical location information with the geographical location information preset by the business end to confirm whether the customer is in the expected geographical location. At the same time, the system will also check whether the preset information of the business end complies with the preset business rules. If both checks pass, the system will return the result of compliance check passing. Subsequently, the system will perform permission check based on the customer ID association token and the corresponding customer ID of the user end to ensure that the customer has the right to perform the corresponding operation. If all checks pass, the system will confirm that the identity authentication is successful and allow the customer to continue with subsequent business operations, such as signing in. This process not only improves the security of QR code applications, but also provides customers with a convenient and secure identity authentication method.

[0105] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the identity authentication method of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0106] Please refer to Figure 5 The present application also provides an identity authentication system, the identity authentication system includes a service end 510, the service end includes:

[0107] The encryption module 511 is used to encrypt the encrypted string based on the preset information obtained in advance;

[0108] A generating module 512 is used to generate a dynamic face-to-face QR code based on the encrypted string, so that the user terminal can identify the dynamic face-to-face QR code, read the preset information in the dynamic face-to-face QR code, and perform identity authentication based on the preset information;

[0109] The system further includes a user terminal 520, which includes:

[0110] The identification module 521 is used to identify the dynamic face-to-face interview QR code generated by the business end to read the preset information in the dynamic face-to-face interview QR code;

[0111] The verification module 522 is used to perform identity verification based on the preset information.

[0112] The identity authentication system provided by the present application adopts the identity authentication method in the above embodiment and can solve the technical problem of identity authentication. Compared with the prior art, the beneficial effects of the identity authentication system provided by the present application are the same as the beneficial effects of the identity authentication method provided by the above embodiment, and other technical features of the identity authentication system are the same as the features disclosed in the above embodiment method, which will not be described in detail here.

[0113] The present application provides an identity authentication device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the identity authentication method in the above-mentioned embodiment one.

[0114] Reference below Figure 6, which shows a schematic diagram of the structure of an identity verification device suitable for implementing the embodiment of the present application. The identity verification device in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 6 The identity authentication device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0115] like Figure 6 As shown, the authentication device may include a processing system 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage system 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the authentication device are also stored. The processing system 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input system 1007 including, for example, a touch screen, a touchpad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output system 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage system 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication system 1009. The communication system 1009 can allow the authentication device to communicate wirelessly or wired with other devices to exchange data. Although the figure shows an authentication device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0116] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication system, or installed from a storage system 1003, or installed from a ROM 1002. When the computer program is executed by the processing system 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0117] The identity authentication device provided in the present application adopts the identity authentication method in the above-mentioned embodiment. Compared with the prior art, the beneficial effects of the identity authentication device provided in the present application are the same as the beneficial effects of the identity authentication method provided in the above-mentioned embodiment, and other technical features in the identity authentication device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0118] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0119] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0120] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, wherein the computer-readable program instructions are used to execute the identity authentication method in the above-mentioned embodiment.

[0121] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared or semiconductor systems, systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination of the above.

[0122] The computer-readable storage medium may be included in the identity verification device; or may exist independently without being assembled into the identity verification device.

[0123] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0124] The flowcharts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of boxes in the block diagram and / or flowchart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0125] The modules involved in the embodiments described in the present application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0126] The readable storage medium provided in the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned identity authentication method, and can solve the technical problem of identity authentication. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided in the present application are the same as the beneficial effects of the identity authentication method provided in the above-mentioned embodiment, and will not be repeated here.

[0127] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned identity authentication method when executed by a processor.

[0128] The computer program product provided by the present application can solve the technical problem of identity authentication. Compared with the prior art, the beneficial effects of the computer program product provided by the present application are the same as the beneficial effects of the identity authentication method provided by the above embodiment, which will not be repeated here.

[0129] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. An identity authentication method, characterized in that: The method is applied to a service end, and the method includes: Encrypting based on pre-acquired preset information to obtain an encrypted string; A dynamic face-to-face interview QR code is generated based on the encrypted string, so that the user terminal can identify the dynamic face-to-face interview QR code, read the preset information in the dynamic face-to-face interview QR code, and perform identity authentication based on the preset information.

2. An identity authentication method, characterized in that: The method is applied to a user terminal, and the method comprises: The recognition service end encrypts the preset information obtained in advance to obtain an encrypted string, and generates a dynamic face-to-face QR code based on the encrypted string to read the preset information in the dynamic face-to-face QR code; Based on the preset information, identity authentication is performed.

3. The method according to claim 2, characterized in that The preset information includes a target page path, and the step of performing identity authentication based on the preset information includes: Jump to the target page according to the target page path, so as to call the preset application interface to obtain the client identity encryption information corresponding to the user terminal; generating a customer ID associated token based on the customer identity encrypted information; Based on the client ID association token and the preset information, a dynamic verification service is called to perform identity authentication to obtain an identity authentication result.

4. The method according to claim 3, characterized in that The step of generating a customer ID associated token based on the customer identity encrypted information comprises: Decrypting the encrypted customer identity information to obtain customer identity information; Performing validity verification based on the customer identity information to obtain a validity verification result; If the validity verification result is verification passed, a client ID associated token is generated based on the client ID corresponding to the user end.

5. The method according to claim 3, characterized in that The preset information also includes business end preset encryption information, and the steps of calling a dynamic verification service for identity authentication based on the customer ID association token and the preset information to obtain an identity authentication result include: Calling the application interface to obtain user terminal information corresponding to the user terminal; Perform compliance verification based on the user-side information and the preset encryption information of the service end to obtain a compliance verification result; Performing permission verification based on the client ID association token and the client ID corresponding to the user end to obtain a permission verification result; If both the compliance check result and the permission check result are verified as passed, a successful identity authentication result is obtained.

6. The method according to claim 5, characterized in that The user-side information includes encrypted information of the customer's geographical location, and the step of performing compliance verification according to the user-side information and the preset encrypted information of the service end to obtain a compliance verification result includes: Decrypting the encrypted customer geographic location information to obtain the customer geographic location information, and decrypting the business end preset encrypted information to obtain the business end geographic location information and business end preset information; Performing location verification according to the customer location information and the service end location information to obtain a location verification result; Determine whether the preset information of the business end complies with the preset business rules, and obtain the business rule verification result; If both the location verification result and the business rule verification result are verified as passed, a compliance verification passed result is obtained.

7. An identity authentication system, characterized in that: The system includes a service end, and the service end includes: An encryption module, used for encrypting an encrypted string based on pre-acquired preset information; A generating module, used for generating a dynamic face-to-face QR code based on the encrypted string, so that the user terminal can identify the dynamic face-to-face QR code, read the preset information in the dynamic face-to-face QR code, and perform identity authentication based on the preset information; The system further includes a user terminal, which includes: An identification module, used to identify an encrypted string obtained by encrypting the preset information obtained in advance by the business end, and a dynamic face-to-face interview QR code generated based on the encrypted string, so as to read the preset information in the dynamic face-to-face interview QR code; The verification module is used to perform identity verification based on the preset information.

8. An identity verification device, characterized in that: The device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the identity authentication method according to any one of claims 1 to 6.

9. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the identity authentication method according to any one of claims 1 to 6 are implemented.

10. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the identity authentication method according to any one of claims 1 to 6 are implemented.

Images