Data processing method, electronic device, storage medium and computer program product
By encrypting the passenger's identity identifier information and biometric information and establishing a mapping relationship in the target storage system, the problems of low storage security and high leakage risk in the prior art are solved, and efficient and secure identity verification and information protection are achieved.
Patent Information
- Application Number
- CN202411853572.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-16
- Publication Date
- 2025-04-15
AI Technical Summary
In the prior art, the passenger's identity identifier information and biometric information are stored in low security and have high risk of leakage, resulting in serious privacy and security problems.
By encrypting the passenger's identity identifier information and biometric information, and establishing mapping relationships in the target storage system, we ensure that the information is not directly related during storage and transmission, reducing the risk of leakage.
The purpose of protecting passenger privacy and identifying data security has been achieved, and an efficient and fast identity verification process has been maintained, while effectively preventing the leakage of passengers' personal information.
Smart Images

Figure CN119830318A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of data processing, and in particular to a data processing method, electronic equipment, storage medium and computer program product. Background Art
[0002] In the digital age, facial recognition technology is widely used due to its convenience and efficiency, from unlocking personal devices to identity verification for public services, such as airport self-service check-in, security checks, and commercial payments. Especially in the civil aviation field, the introduction of facial recognition technology has greatly improved the quality of passenger services and airport operating efficiency, realized the vision of "paperless" travel, and provided passengers with a one-stop, contactless and convenient experience.
[0003] Although facial recognition technology has brought significant convenience, the security risks behind it cannot be ignored. In existing technologies, biometric information of facial features is often closely bound to personal identity information and stored in the same system. Although it improves recognition efficiency, it increases the risk of personal privacy leakage. Once the system is attacked or data is leaked, the attacker can obtain the passenger's facial feature information and identity information at the same time, leading to serious privacy and security issues.
[0004] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention
[0005] The embodiments of the present invention provide a data processing method, an electronic device, a storage medium and a computer program product to at least solve the technical problems in the related art that the storage security of the passenger's identity identifier information and biometric information is low and the risk of leakage is high.
[0006] According to one embodiment of the present invention, a data processing method is provided, comprising: in response to an information recognition instruction, obtaining current identity identifier information of a current user; searching whether there is target identity identifier information corresponding to the current identity identifier information in a target storage system; in response to the existence of target identity identifier information in the target storage system, determining the flight information of the current user based on target biometric information corresponding to the target identity identifier information.
[0007] Optionally, the data processing method also includes: obtaining first biometric information and first identity identifier information of the first user; encrypting the first identity identifier information to obtain second identity identifier information; and storing the first biometric information and the second identity identifier information in a target storage system.
[0008] Optionally, encrypting the first identity identifier information to obtain the second identity identifier information includes: obtaining an encryption salt value; and encrypting the first identity identifier information based on a preset encryption algorithm and the encryption salt value to obtain the second identity identifier information.
[0009] Optionally, storing the first biometric information and the second identity identifier information in the target storage system includes: establishing a mapping relationship between the first biometric information and the second identity identifier information; and storing the first biometric information and the second identity identifier information in the target storage system based on the mapping relationship.
[0010] Optionally, searching the target storage system for target identity identifier information corresponding to the current identity identifier information includes: encrypting the current identity identifier information using a preset encryption algorithm to obtain third identity identifier information; comparing the third identity identifier information with the second identity identifier information to obtain a comparison result; determining, based on the comparison result, that the third identity identifier information is consistent with any second identity identifier information, and determining that the target identity identifier information exists in the target storage system.
[0011] Optionally, determining the flight information of the current user based on the target biometric information corresponding to the target identity identifier information includes: acquiring the target biometric information corresponding to the target identity identifier information in the target storage system based on a mapping relationship; and determining the flight information of the current user using the target biometric information.
[0012] Optionally, the data processing method also includes: in response to an information update instruction, obtaining a current encryption algorithm; encrypting the first identity identifier information using the current encryption algorithm to obtain fourth identity identifier information; and replacing the second identity identifier information stored in the target storage system with the fourth identity identifier information to obtain an updated target storage system.
[0013] According to one embodiment of the present invention, there is also provided a data processing device, comprising: an acquisition module, for acquiring current identity identifier information of a current user in response to an information recognition instruction; a query module, for searching whether there is target identity identifier information corresponding to the current identity identifier information in a target storage system; and a determination module, for determining the flight information of the current user based on target biometric information corresponding to the target identity identifier information in response to the existence of the target identity identifier information in the target storage system.
[0014] Optionally, the acquisition module is also used to obtain the first biometric information and first identity identifier information of the first user; the data processing device also includes an encryption module, which is used to encrypt the first identity identifier information to obtain the second identity identifier information; the data processing device also includes a storage module, which is used to store the first biometric information and the second identity identifier information in a target storage system.
[0015] Optionally, the data processing device further includes a construction module for establishing a mapping relationship between the first biometric information and the second identity identifier information; the storage module is further used to store the first biometric information and the second identity identifier information in a target storage system based on the mapping relationship.
[0016] Optionally, the encryption module is also used to encrypt the current identity identifier information using a preset encryption algorithm to obtain third identity identifier information; the data processing device also includes a comparison module, which is used to compare the third identity identifier information with the second identity identifier information to obtain a comparison result; the determination module is also used to determine that the third identity identifier information is consistent with any second identity identifier information based on the comparison result, and determine that the target identity identifier information exists in the target storage system.
[0017] Optionally, the acquisition module is further used to acquire target biometric information corresponding to the target identity identifier information in the target storage system based on the mapping relationship; the determination module is further used to determine the flight information of the current user using the target biometric information.
[0018] Optionally, the acquisition module is also used to obtain the current encryption algorithm in response to the information update instruction; the encryption module is also used to encrypt the first identity identifier information using the current encryption algorithm to obtain fourth identity identifier information; the determination module is also used to replace the second identity identifier information stored in the target storage system with the fourth identity identifier information to obtain an updated target storage system.
[0019] According to one embodiment of the present invention, there is further provided an electronic device, comprising: a memory storing an executable program; and a processor for running the program, wherein the above-mentioned data processing method is executed when the program is running.
[0020] According to one embodiment of the present invention, a computer-readable storage medium is further provided, wherein the computer-readable storage medium includes a stored executable program, wherein when the executable program is running, the device where the storage medium is located is controlled to execute the above-mentioned data processing method.
[0021] According to one embodiment of the present invention, a computer program product is provided, including a computer program, wherein the computer program implements the above-mentioned data processing method when executed by a processor.
[0022] In an embodiment of the present invention, in response to an information identification instruction, the current identity identifier information of the current user is obtained, and whether there is a target identity identifier information corresponding to the current identity identifier information in the target storage system is searched. In response to the existence of the target identity identifier information in the target storage system, the flight information of the current user is determined based on the target biometric information corresponding to the target identity identifier information. By stripping the storage and encrypting the identity identifier information and biometric information of the passenger, the purpose of protecting the privacy of the passenger and the security of the identification data is achieved, thereby achieving the technical effect of maintaining an efficient and fast identity authentication process and effectively preventing the leakage of the passenger's personal information, thereby solving the technical problems of low storage security and high leakage risk of the passenger's identity identifier information and biometric information in related technologies. BRIEF DESCRIPTION OF THE DRAWINGS
[0023] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of this application. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:
[0024] Figure 1 is a hardware structure block diagram of a data processing method according to one embodiment of the present invention;
[0025] Figure 2 is a flow chart of a data processing method according to one embodiment of the present invention;
[0026] Figure 3 is a schematic diagram of a data processing method according to one embodiment of the present invention;
[0027] Figure 4 is a schematic diagram of another data processing method according to one embodiment of the present invention;
[0028] Figure 5 is a schematic diagram of another data processing method according to one embodiment of the present invention;
[0029] Figure 6 is a schematic diagram of another data processing method according to one embodiment of the present invention;
[0030] Figure 7 It is a structural block diagram of a data processing device according to one embodiment of the present invention. DETAILED DESCRIPTION
[0031] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.
[0032] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.
[0033] According to an embodiment of the present invention, a method embodiment of a data processing method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.
[0034] The image detection method embodiment provided in the embodiment of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 1 FIG. 1 is a hardware structure diagram of a data processing method according to one embodiment of the present invention. Figure 1 As shown, the computer terminal 10 (or electronic device 10) may include one or more (102a, 102b, ..., 102n are used to illustrate) processors (the processor may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 104 for storing data, and a transmission module 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the I / O interface), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 1More or fewer components as shown, or with Figure 1 Different configurations are shown.
[0035] It should be noted that the one or more processors and / or other data processing circuits described above may generally be referred to herein as "data processing circuits". The data processing circuits may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuit may be a single independent processing module, or may be incorporated in whole or in part into any of the other components in the computer terminal 10 (or electronic device). As described in the embodiments of the present application, the data processing circuit acts as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).
[0036] The memory 104 can be used to store software programs and modules of application software, such as program instructions / data storage devices corresponding to the data processing method in the embodiment of the present application. The processor executes various functional applications and data processing by running the software programs and modules stored in the memory 104, that is, realizing the above-mentioned data processing method. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely arranged relative to the processor, and these remote memories may be connected to the computer terminal 10 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.
[0037] The transmission module 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the computer terminal 10. In one example, the transmission module 106 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission module 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.
[0038] The display may be, for example, a touch screen type liquid crystal display (LCD), which may enable a user to interact with a user interface of the computer terminal 10 (or electronic device).
[0039] It should be noted that, in some optional embodiments, the above Figure 1The computer device (or electronic device) shown may include hardware elements (including circuits), software elements (including computer code stored on a computer-readable medium), or a combination of hardware elements and software elements. It should be noted that Figure 1 This is merely one example of a particular embodiment and is intended to illustrate the types of components that may be present in the above-described computer device (or electronic device).
[0040] Figure 2 is a flow chart of a data processing method according to one embodiment of the present invention. Figure 2 As shown, the method comprises the following steps:
[0041] Step S22, in response to the information identification instruction, obtaining the current identity identifier information of the current user;
[0042] In step S22, the current user is used to represent the passenger who currently uses the identity identifier information to obtain flight information.
[0043] The above current identity identifier information is used to represent the real identity document information of the current user, for example, the identity card number.
[0044] Step S24, searching whether there is target identity identifier information corresponding to the current identity identifier information in the target storage system;
[0045] In step S24, the target storage system is used to represent a system for storing facial feature information and encrypted identity identifier information of registered users.
[0046] The target identity identifier information is used to represent the identity document information stored in the target storage system and corresponding to the current identity identifier information.
[0047] Step S26, in response to the target identity identifier information existing in the target storage system, determining the flight information of the current user based on the target biometric information corresponding to the target identity identifier information.
[0048] In step S26, the target biometric information is used to characterize the facial feature information corresponding to the target identity identifier information.
[0049] Specifically, Figure 3 is a schematic diagram of a data processing method according to one embodiment of the present invention, such as Figure 3 According to one embodiment of the present invention, a data processing system is provided for executing the above data processing method. The data processing system includes the following subsystems: an external business system, a face recognition business system, an identity identifier information processing system, and a target storage system.
[0050] Specifically, the external business system is used to characterize the business terminal system that supports face recognition. For example, the self-service check-in terminal in the airport terminal supports the use of face to obtain passenger identity information instead of the traditional way of reading ID cards. At the self-service flight information inquiry terminal, passengers can obtain personal flight information, etc. by standing in front of the terminal and "swiping their faces". The face recognition business system is used to characterize the system that queries passenger personal information or passenger flight information through face information. It stores the passenger's real ID number. The identity identifier information processing system is used to provide generation components, update components and synchronization components. The target storage system is used to characterize the system that stores passenger photo information and virtual ID numbers, wherein the virtual ID number is not the passenger's real ID information, and the photo information contains the passenger's facial feature information. Therefore, in the target storage system, the passenger's real ID information cannot be obtained through the photo information, and thus the passenger's flight information cannot be obtained, reducing the risk of passenger information being leaked after the picture information is stolen.
[0051] Furthermore, when receiving the information recognition instruction, the external business system obtains the facial feature information of the current passenger. The face recognition business system recognizes the facial feature information and obtains the current identity information of the current passenger. The identity information processing system generates a corresponding virtual certificate number based on the current identity information. The target storage system is searched to see whether there is target identity information corresponding to the current virtual certificate number. If the target identity information exists in the target storage system, the flight information of the current passenger is determined based on the target biometric information corresponding to the target identity information.
[0052] Based on the above steps S22 to S26, the current identity identifier information of the current user is obtained in response to the information identification instruction, and the target identity identifier information corresponding to the current identity identifier information is searched in the target storage system. In response to the existence of the target identity identifier information in the target storage system, the flight information of the current user is determined based on the target biometric information corresponding to the target identity identifier information. The purpose of protecting the privacy of the passenger and the security of the identification data is achieved by stripping the storage and encrypting the passenger's identity identifier information and biometric information, thereby achieving the technical effect of maintaining an efficient and fast identity authentication process and effectively preventing the leakage of the passenger's personal information, thereby solving the technical problems of low storage security and high risk of leakage of the passenger's identity identifier information and biometric information in related technologies.
[0053] Optionally, the data processing method further includes:
[0054] Step S201, obtaining first biometric information and first identity identifier information of a first user;
[0055] In step S201, the first user is used to represent a user who registers using the face recognition service system.
[0056] The first biometric information is used to represent facial feature information of the first user.
[0057] The first identity identifier information is used to represent the real identity document information of the first user.
[0058] Step S202, encrypting the first identity identifier information to obtain second identity identifier information;
[0059] In step S202, the second identity identifier information is used to represent the encrypted first identity identifier information, that is, virtual certificate information, for example, a virtual ID number.
[0060] Step S203: store the first biometric information and the second identity identifier information in a target storage system.
[0061] Specifically, use Figure 3 The virtual certificate number generation component provided by the identity identifier information processing system encrypts the first identity identifier information to generate the second identity identifier information, and uses the target storage system to store the first biometric information and the second identity identifier information.
[0062] Based on the above steps S201 to S203, the first biometric information and the first identity identifier information of the first user are obtained; the first identity identifier information is encrypted to obtain the second identity identifier information; the first biometric information and the second identity identifier information are stored in the target storage system. By stripping the storage and encrypting the identity identifier information and biometric information of the passenger, the purpose of protecting the passenger's privacy and identifying data security is achieved, thereby maintaining an efficient and fast identity authentication process and effectively preventing the leakage of passenger personal information.
[0063] Optionally, in step S202, the first identity identifier information is encrypted to obtain the second identity identifier information including:
[0064] Step S2021, obtaining an encryption salt value;
[0065] In step S2021, the encryption salt value is a randomly generated string of characters used to increase the complexity and security of the encryption process, thereby reducing the possibility of cracking or rainbow table attacks on known inputs.
[0066] Step S2022: encrypt the first identity identifier information based on a preset encryption algorithm and an encryption salt value to obtain second identity identifier information.
[0067] In step S2022, the above-mentioned preset encryption algorithm is used to represent the encryption algorithm established in the identity identifier information processing system, for example, the national encryption algorithm.
[0068] Specifically, after obtaining the encrypted salt value, the identity identifier information processing system will combine the salt value with the passenger's first identity identifier information, encrypt it using a preset encryption algorithm, and generate an irreversible second identity identifier information.
[0069] Based on step S2021 to step S2022, an encryption salt value is obtained; based on a preset encryption algorithm and the encryption salt value, the first identity identifier information is encrypted to obtain the second identity identifier information. During storage and transmission, the second identity identifier information replaces the original first identity identifier information, thereby reducing the risk of information leakage.
[0070] Optionally, in step S203, storing the first biometric information and the second identity identifier information in the target storage system includes:
[0071] Step S2031, establishing a mapping relationship between the first biometric information and the second identity identifier information;
[0072] In step S2031, the above mapping relationship is used to represent the establishment of a one-to-one or many-to-one connection between the first biometric information and the second identity identifier information.
[0073] Step S2032: store the first biometric information and the second identity identifier information in a target storage system based on the mapping relationship.
[0074] Specifically, the first biometric information and the second identity identifier information of the passenger are obtained, and a connection is established between the first biometric information and the second identity identifier information of the same passenger, so that the corresponding facial image information can be obtained according to the second identity identifier information. The first biometric information and the second identity identifier information are stored in the target storage system based on the mapping relationship. Through this mapping relationship, even if the second identity identifier information is leaked, the attacker cannot directly check the first identity identifier information of the passenger from the target storage system, because the association between the first identity identifier information and the first biometric information is not directly stored.
[0075] Exemplarily, at least one facial image information and a virtual ID number of a passenger are obtained, and a connection is established between the facial image information and the virtual ID number of the same passenger, so that the corresponding facial image information can be obtained according to the virtual ID number. Based on the mapping relationship, the first biometric information and the second identity identifier information are stored in the target storage system. Through this mapping relationship, even if the virtual ID number is leaked, the attacker cannot directly check the passenger's real ID number from the target storage system because the association between the real ID number and the facial image information is not directly stored.
[0076] For example, Figure 4 is a schematic diagram of another data processing method according to one embodiment of the present invention, such as Figure 4 As shown, the passenger registers and authorizes the facial service through an external business system. For example, a self-service check-in terminal, an airline APP, etc. The external business system obtains the passenger's registration information, wherein the registration information includes: facial feature information and a real ID number. The external business system sends the facial feature information and the real ID number to the face recognition system for registration. The face recognition system saves the real ID number and sends the real ID number to the identity identifier information processing system. The face recognition system only saves the passenger's real ID number and does not save the passenger's facial feature information. The identity identifier information processing system uses a virtual ID number generation component to encrypt the real ID number, generate a virtual ID number, and store the virtual ID number and the facial feature information in the target storage system. In the target storage system, since the ID number is a virtual ID number, the passenger's facial feature information cannot be queried in the target storage system through the real ID number, and the passenger's real ID number cannot be determined from the corresponding virtual ID number found through the facial feature information. After storage is completed, the identity identifier information processing system returns the registration success to the face recognition system, and the face recognition system returns the registration success information to the external business system. After receiving the registration success information, the external business system displays it on the registration page of the external business system. After receiving the registration success information, the passenger completes the registration process.
[0077] Based on step S2031 to step S2032, a mapping relationship is established between the first biometric information and the second identity identifier information; based on the mapping relationship, the first biometric information and the second identity identifier information are stored in the target storage system. The establishment of the mapping relationship enables the target storage system to flexibly update the first biometric information and the second identity identifier information, and when the first biometric information and the second identity identifier information change, the target storage system only needs to update the corresponding mapping relationship without reconstructing the entire database, which can save storage resources and improve storage efficiency.
[0078] Optionally, in step S24, searching the target storage system for target identity identifier information corresponding to the current identity identifier information includes:
[0079] Step S241, encrypting the current identity identifier information using a preset encryption algorithm to obtain third identity identifier information;
[0080] Step S242, comparing the third identity identifier information with the second identity identifier information to obtain a comparison result;
[0081] Step S243: Determine, based on the comparison result, that the third identity identifier information is consistent with any second identity identifier information, and determine that the target identity identifier information exists in the target storage system.
[0082] Specifically, when a passenger authenticates his / her identity through face, the face recognition system will obtain the passenger's current identity identifier information, and the face recognition system will send the current identity identifier information to the identity identifier information processing system. The identity identifier information processing system uses a preset encryption algorithm to encrypt the current identity identifier information to obtain the third identity identifier information, that is, the virtual identity identifier information corresponding to the current identity identifier information. The identity identifier information processing system sends the third identity identifier information to the target storage system. The target storage system compares the third identity identifier information with the second identity identifier information stored in the target storage system to obtain a comparison result. If it is determined based on the comparison result that the third identity identifier information is consistent with any second identity identifier information, it means that the target identity identifier information exists in the target storage system.
[0083] Based on step S241 to step S243, the current identity identifier information is encrypted using a preset encryption algorithm to obtain third identity identifier information; the third identity identifier information is compared with the second identity identifier information to obtain a comparison result; based on the comparison result, it is determined that the third identity identifier information is consistent with any second identity identifier information, and it is determined that the target identity identifier information exists in the target storage system. The current identity identifier information is encrypted to obtain the third identity identifier information, that is, the virtual identity identifier information. The encryption technology can ensure that the current identity identifier information is not easily obtained or tampered with by unauthorized personnel during transmission and storage, thereby improving the security of the current identity identifier information. Even if the third identity identifier information is intercepted during transmission, it is difficult for an attacker to directly parse the original current identity identifier information because it is in an encrypted form, thereby effectively preventing the leakage of sensitive information.
[0084] Optionally, in step S26, determining the flight information of the current user based on the target biometric information corresponding to the target identity identifier information includes:
[0085] Step S261, acquiring target biometric information corresponding to the target identity identifier information in the target storage system based on the mapping relationship;
[0086] Step S262, using the target biometric information to determine the flight information of the current user.
[0087] Specifically, after determining that the target identity identifier information exists in the target storage system, the target biometric information corresponding to the target identity identifier information, that is, the facial feature information, is searched from the target storage system through a mapping relationship. The target storage system sends the target biometric information to the identity identifier information processing system, and the identity identifier information processing system sends the target biometric information to the face recognition system. The face recognition system integrates the passenger's flight information based on the target biometric information, and sends the integrated flight information to the external business system. When the external business system receives the integrated flight information, it provides the passenger with the integrated flight information and document information, and allows the passenger to handle business through face recognition without showing documents or boarding passes.
[0088] For example, Figure 5 is a schematic diagram of another data processing method according to one embodiment of the present invention, such as Figure 5 As shown, the external business system obtains the facial feature information of the current passenger and sends the facial feature information to the face recognition system. The face recognition business system identifies the real ID number of the current passenger based on the facial feature information, and sends the current real ID number to the identity identifier information processing system. The identity identifier information processing system generates the current virtual ID number from the current real ID number through an encryption algorithm, and sends the virtual ID number to the target storage system. In the target storage system, it is searched whether there is a target virtual ID number corresponding to the current virtual ID number. If the target virtual ID number exists in the target storage system, the target facial feature information corresponding to the target virtual ID number is searched from the target storage system through a mapping relationship, and the target facial feature information is sent to the identity identifier information processing system. The identity identifier information processing system sends the target facial feature information to the face recognition system. The face recognition system integrates the flight information of the passenger based on the target facial feature information, and sends the integrated flight information to the external business system. When the external business system receives the integrated flight information, it provides the integrated flight information to the passenger and allows the passenger to handle the business through facial recognition without showing the ID or boarding pass.
[0089] Furthermore, if the target virtual ID number does not exist in the target storage system, the recognition failure information is sent to the identity identifier information processing system. The identity identifier information processing system sends the recognition failure information to the face recognition system. The face recognition system sends the recognition failure information to the external business system. When the external business system receives the recognition failure information, it reminds the passenger of the recognition failure information.
[0090] Based on the above steps S261 to S262, the target biometric information corresponding to the target identity identifier information in the target storage system is obtained based on the mapping relationship; the flight information of the current user is determined using the target biometric information, and the target biometric information associated with the target identity identifier information can be quickly located through the mapping relationship without traversing the entire database, thereby improving the retrieval efficiency, and does not directly store and access the user's real identity document number, but indirectly obtains the target biometric information through the mapping relationship, thereby reducing the risk of information leakage.
[0091] Optionally, the data processing method further includes:
[0092] Step S271, in response to the information update instruction, obtaining the current encryption algorithm;
[0093] In step S271, the current encryption algorithm is used to represent the encryption algorithm used to update the first identity identifier information.
[0094] Step S272, encrypting the first identity identifier information using the current encryption algorithm to obtain fourth identity identifier information;
[0095] Step S273: Replace the second identity identifier information stored in the target storage system with the fourth identity identifier information to obtain an updated target storage system.
[0096] Specifically, when receiving the information update instruction, the identity identifier information processing system obtains the current encryption algorithm and requests the first identity identifier information that has been registered from the face recognition system. The identity identifier information processing system uses the virtual certificate number update component and the current encryption algorithm to encrypt the first identity identifier information to obtain the fourth identity identifier information, and sends the fourth identity identifier information to the target storage system. In the target storage system, the second identity identifier information is updated to the fourth identity identifier information to obtain the updated target storage system. Before the update is completed, when performing information identification, it is necessary to generate the second identity identifier information and the fourth identity identifier information based on the first identity identifier information, and at the same time, in the target storage system, the second identity identifier information and the fourth identity identifier information are compared with the current identity identifier information. After the update is completed, when performing information identification, it is only necessary to generate the fourth identity identifier information based on the first identity identifier information, and at the same time, in the target storage system, it is only necessary to compare the fourth identity identifier information with the current identity identifier information.
[0097] Furthermore, before the information update is completed, the target storage system first compares the third identity identifier information with the fourth identity identifier information to obtain a comparison result. If it is determined based on the comparison result that the third identity identifier information is consistent with any of the fourth identity identifier information, and it is determined that the target identity identifier information exists in the target storage system, the target biometric information corresponding to the target identity identifier information in the target storage system is obtained based on the mapping relationship, and the flight information of the current user is determined using the target biometric information. If it is determined based on the comparison result that the third identity identifier information is inconsistent with any of the fourth identity identifier information, the third identity identifier information is compared with the second identity identifier information to obtain a comparison result. If it is determined based on the comparison result that the third identity identifier information is consistent with any of the second identity identifier information, and it is determined that the target identity identifier information exists in the target storage system, the target biometric information corresponding to the target identity identifier information in the target storage system is obtained based on the mapping relationship, and the flight information of the current user is determined using the target biometric information.
[0098] Specifically, when the first biometric information of the first user changes, the changed first biometric information is updated to the target storage system using the synchronization component in the identity identifier information processing system.
[0099] For example, Figure 6 is a schematic diagram of another data processing method according to one embodiment of the present invention, such as Figure 6As shown, when receiving the information update instruction, the identity identifier information processing system obtains the current encryption algorithm and requests the real identity document number that has been registered from the face recognition system. The identity identifier information processing system uses the virtual identity document number update component and the current encryption algorithm to encrypt the real identity document number to obtain an updated virtual identity document number, and sends the updated virtual identity document number to the target storage system. In the target storage system, the previously stored virtual identity document number is replaced with the updated virtual identity document number to obtain an updated target storage system.
[0100] Based on the above steps S271 to S273, in response to the information update instruction, the current encryption algorithm is obtained; the first identity identifier information is encrypted using the current encryption algorithm to obtain the fourth identity identifier information; the second identity identifier information stored in the target storage system is replaced with the fourth identity identifier information to obtain the updated target storage system. By updating the encryption algorithm regularly or on demand, it is possible to ensure that the security of the data processing system is always at a high level, effectively resisting potential cracking and attacks, and during the update process, the data processing system can continue to operate normally, and at the same time, the conversion between the old and new algorithms is almost imperceptible to users and external business systems, thereby improving user satisfaction with the stability and reliability of the data processing system.
[0101] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods of various embodiments of the present invention.
[0102] In the embodiments of the present invention, an image detection device is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, the implementation of hardware, or a combination of software and hardware is also possible and conceived.
[0103] Figure 7 is a structural block diagram of a data processing device according to one embodiment of the present invention. Figure 7 As shown, the device comprises:
[0104] The acquisition module 701 is used to obtain the current identity identifier information of the current user in response to the information identification instruction;
[0105] A query module 702 is used to search whether there is target identity identifier information corresponding to the current identity identifier information in the target storage system;
[0106] The determination module 703 is configured to determine the flight information of the current user based on the target biometric information corresponding to the target identity identifier information in response to the target identity identifier information existing in the target storage system.
[0107] Optionally, the acquisition module 701 is also used to obtain the first biometric information and first identity identifier information of the first user; the data processing device also includes an encryption module 704, which is used to encrypt the first identity identifier information to obtain the second identity identifier information; the data processing device also includes a storage module 704, which is used to store the first biometric information and the second identity identifier information in a target storage system.
[0108] Optionally, the data processing device further includes a construction module 705 for establishing a mapping relationship between the first biometric information and the second identity identifier information; the storage module 704 is further used to store the first biometric information and the second identity identifier information in a target storage system based on the mapping relationship.
[0109] Optionally, the encryption module 704 is also used to encrypt the current identity identifier information using a preset encryption algorithm to obtain third identity identifier information; the data processing device also includes a comparison module 706, which is used to compare the third identity identifier information with the second identity identifier information to obtain a comparison result; the determination module 703 is also used to determine, based on the comparison result, that the third identity identifier information is consistent with any second identity identifier information, and determine that the target identity identifier information exists in the target storage system.
[0110] Optionally, the acquisition module 701 is further used to acquire target biometric information corresponding to the target identity identifier information in the target storage system based on the mapping relationship; the determination module 703 is further used to determine the flight information of the current user using the target biometric information.
[0111] Optionally, the acquisition module 701 is also used to obtain the current encryption algorithm in response to the information update instruction; the encryption module 704 is also used to encrypt the first identity identifier information using the current encryption algorithm to obtain fourth identity identifier information; the determination module 703 is also used to replace the second identity identifier information stored in the target storage system with the fourth identity identifier information to obtain an updated target storage system.
[0112] It should be noted that the above modules can be implemented by software or hardware. For the latter, it can be implemented in the following ways, but not limited to: the above modules are all located in the same processor; or the above modules are located in different processors in any combination.
[0113] According to one embodiment of the present invention, there is also provided an electronic device, comprising: a memory storing an executable program; and a processor for running the program, wherein the above-mentioned image detection method is executed when the program is running.
[0114] Optionally, in this embodiment, the processor may be configured to perform the following steps through a computer program:
[0115] Step S1, in response to the information identification instruction, obtaining the current identity identifier information of the current user;
[0116] Step S2, searching whether there is target identity identifier information corresponding to the current identity identifier information in the target storage system;
[0117] Step S3, in response to the target identity identifier information existing in the target storage system, determining the flight information of the current user based on the target biometric information corresponding to the target identity identifier information.
[0118] According to one embodiment of the present invention, a computer-readable storage medium is further provided, including: the computer-readable storage medium includes a stored executable program, wherein when the executable program runs, the device where the storage medium is located is controlled to execute the above-mentioned image detection method.
[0119] Optionally, in this embodiment, the storage medium may be configured to store a computer program for performing the following steps:
[0120] Step S1, in response to the information identification instruction, obtaining the current identity identifier information of the current user;
[0121] Step S2, searching whether there is target identity identifier information corresponding to the current identity identifier information in the target storage system;
[0122] Step S3, in response to the target identity identifier information existing in the target storage system, determining the flight information of the current user based on the target biometric information corresponding to the target identity identifier information.
[0123] Optionally, in this embodiment, the above-mentioned storage medium may include but is not limited to: a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk, and other media that can store computer programs.
[0124] According to one embodiment of the present invention, a computer program product is further provided, including: a computer program, and the computer program implements the above-mentioned image detection method when executed by a processor.
[0125] Optionally, in this embodiment, the computer program product may be configured to store computer program instructions for performing the following steps:
[0126] Step S1, in response to the information identification instruction, obtaining the current identity identifier information of the current user;
[0127] Step S2, searching whether there is target identity identifier information corresponding to the current identity identifier information in the target storage system;
[0128] Step S3, in response to the target identity identifier information existing in the target storage system, determining the flight information of the current user based on the target biometric information corresponding to the target identity identifier information.
[0129] Optionally, the specific examples in this embodiment may refer to the examples described in the above embodiments and optional implementation modes, and this embodiment will not be described in detail here.
[0130] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.
[0131] In the above embodiments of the present invention, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.
[0132] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.
[0133] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.
[0134] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.
[0135] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program codes.
[0136] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principle of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.
Claims
1. A data processing method, characterized in that: include: In response to the information identification instruction, obtaining current identity identifier information of the current user; Searching whether there is target identity identifier information corresponding to the current identity identifier information in the target storage system; In response to the target identity identifier information existing in the target storage system, the flight information of the current user is determined based on the target biometric information corresponding to the target identity identifier information.
2. The data processing method according to claim 1, characterized in that: The method further comprises: Acquire first biometric information and first identity identifier information of a first user; Encrypting the first identity identifier information to obtain second identity identifier information; The first biometric information and the second identity identifier information are stored in the target storage system.
3. The data processing method according to claim 2, characterized in that: The first identity identifier information is encrypted to obtain the second identity identifier information, including: Get the encryption salt value; The first identity identifier information is encrypted based on a preset encryption algorithm and the encryption salt value to obtain the second identity identifier information.
4. The data processing method according to claim 2, characterized in that: Storing the first biometric information and the second identity identifier information in a target storage system includes: Establishing a mapping relationship between the first biometric information and the second identity identifier information; The first biometric information and the second identity identifier information are stored in the target storage system based on the mapping relationship.
5. The data processing method according to claim 2, characterized in that: Searching whether there is target identity identifier information corresponding to the current identity identifier information in the target storage system includes: Encrypting the current identity identifier information using a preset encryption algorithm to obtain third identity identifier information; Comparing the third identity identifier information with the second identity identifier information to obtain a comparison result; Determine, based on the comparison result, that the third identity identifier information is consistent with any of the second identity identifier information, and determine that the target identity identifier information exists in the target storage system.
6. The data processing method according to claim 4, characterized in that: Determining the flight information of the current user based on the target biometric information corresponding to the target identity identifier information includes: Acquire the target biometric information corresponding to the target identity identifier information in the target storage system based on the mapping relationship; The target biometric information is used to determine the flight information of the current user.
7. The data processing method according to claim 2, characterized in that: The method further comprises: In response to the information update instruction, obtaining a current encryption algorithm; Encrypting the first identity identifier information using the current encryption algorithm to obtain fourth identity identifier information; The second identity identifier information stored in the target storage system is replaced by the fourth identity identifier information to obtain the updated target storage system.
8. An electronic device, characterized in that: include: A memory storing an executable program; A processor, used to run the program, wherein the program executes the data processing method according to any one of claims 1 to 7 when running.
9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored executable program, wherein when the executable program is run, the device where the storage medium is located is controlled to execute the data processing method according to any one of claims 1 to 7.
10. A computer program product, characterized in that The invention comprises a computer program, which implements the data processing method according to any one of claims 1 to 7 when being executed by a processor.