Identity verification method and device, storage medium and electronic equipment

Abstract

The invention discloses an identity verification method and device, a storage medium and electronic equipment. The method comprises the following steps: determining terminal equipment information, biological information, environment information and certificate information based on a service access request sent by a target object; based on the terminal device information, determining whether the terminal device satisfies a device access condition, and when the terminal device satisfies the device access condition, sending a detection instruction to the target object to indicate to detect the target object and generate a system response message, the system response message being used for indicating whether the target object is allowed to access or not. The detection instruction comprises at least two of detection based on biological information, detection based on environment information and detection based on certificate information. According to the invention, the technical problem of low accuracy caused by a single user identity verification mode is solved.

Description

Technical Field

[0001] The present application relates to the field of computers, and in particular to an identity authentication method and device, a storage medium, and an electronic device. Background Art

[0002] Traditional user identity verification methods are usually limited to a single dimension, such as identity verification only through face recognition or document scanning, which significantly reduces accuracy and security and is easily counterfeited by high-tech means. In other words, due to the limitations of a single verification method, it is impossible to effectively distinguish between real users and imposters. In summary, the relevant technology has a technical problem of low accuracy due to the single user identity verification method.

[0003] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0004] The embodiments of the present application provide an identity authentication method and device, a storage medium, and an electronic device to at least solve the technical problem of low accuracy due to a single user identity authentication method.

[0005] According to one aspect of an embodiment of the present application, an identity authentication method is provided, comprising: determining terminal device information, biometric information, environmental information and certificate information based on a service access request sent by a target object, wherein the terminal device information is used to indicate information corresponding to the terminal device used by the target object, the biometric information is used to indicate object characteristics of the target object, the environmental information is used to indicate the collection environment of the biometric information, and the certificate information is used to indicate the identity characteristics of the target object; determining whether the terminal device satisfies a device access condition based on the terminal device information, and if the terminal device satisfies the device access condition, sending a detection instruction to the target object to instruct detection of the target object, and generating a system response message, wherein the system response message is used to indicate whether the target object is allowed to access, and the detection instruction includes at least two of the following: detection based on the biometric information, detection based on the environmental information, and detection based on the certificate information.

[0006] According to another aspect of an embodiment of the present application, an identity authentication device is also provided, including: a determination module, used to determine terminal device information, biometric information, environmental information and certificate information based on a service access request sent by a target object, wherein the terminal device information is used to indicate information corresponding to the terminal device used by the target object, the biometric information is used to indicate object characteristics of the target object, the environmental information is used to indicate the collection environment of the biometric information, and the certificate information is used to indicate the identity characteristics of the target object; a generation module, used to determine whether the terminal device meets a device access condition based on the terminal device information, and when the terminal device meets the device access condition, send a detection instruction to the target object to instruct to detect the target object and generate a system response message, wherein the system response message is used to indicate whether the target object is allowed to access, and the detection instruction includes at least two of the following: detection based on the biometric information, detection based on the environmental information, and detection based on the certificate information.

[0007] Optionally, the device is used to determine whether the terminal device satisfies the device access condition based on the terminal device information in the following manner; if the terminal device satisfies the device access condition, a detection instruction is sent to the target object to instruct to detect the target object and generate a system response message: if the terminal device satisfies the device access condition, a detection instruction is sent to the target object to determine the type of the target object; if the object type of the target object is the target type, an image detection operation is performed on the authentication image using a sample image library to determine an image detection result, wherein the authentication image is used to extract the biometric information and the environmental information, and the image detection result includes the similarity between each sample image in the sample image library and the authentication image, and a visual label of the target object, wherein the visual label is used to indicate the object features of the target object in the authentication image; a document detection operation is performed on the document information to obtain a document detection result, wherein the document detection result is used to indicate whether the document information corresponds to the target object; a system response message is generated based on the image detection result and the document detection result.

[0008] Optionally, the device is used to generate a system response message based on the image detection result and the document detection result in the following manner: determine an image detection feature value according to the target business type corresponding to the business data and the image detection result, and determine a document detection feature value according to the target business type and the document detection result; query a target image weight value and a target document weight value corresponding to the target business type in a business weight mapping list; use the image weight value and the document weight value to perform weighted summation on the image detection feature value and the document detection feature value to obtain a target detection parameter; when the value of the target detection parameter is greater than or equal to a preset scoring threshold, generate a first system response message, wherein the first system response message indicates that the target object is allowed to access, and the system response message includes the first system response message; when the value of the target detection parameter is less than the scoring threshold, generate a second system response message, wherein the second system response message indicates that the target object is prohibited from access, and the system response message includes the second system response message.

[0009] Optionally, the device is used to perform an image detection operation on the authentication image using a sample image library to determine an image detection result when the object type of the target object is a target type in the following manner: perform a similarity comparison operation on the authentication image using the sample image library to obtain a first detection result, wherein the first detection result is used to indicate the similarity between each sample image in the sample image library and the authentication image; determine the identity of the target object when the first detection result indicates that the sample image library includes a target sample image whose similarity with the authentication image meets an image authentication condition; and generate the image detection result based on the identity of the target object.

[0010] Optionally, the device is used to perform an image detection operation on the authentication image and determine the image detection result by using a sample image library when the object type of the target object is the target type in the following manner: perform a source verification operation on the authentication image to determine the source of the authentication image; when the source of the authentication image indicates that the authentication image is obtained by acquiring the target object through an image acquisition component associated with the terminal device, perform a feature extraction operation on the authentication image to determine the biometric information and the environmental information; determine the visual label based on the biometric information and the environmental information; and generate the image detection result based on the visual label.

[0011] Optionally, the device is used to determine the visual label according to the biological information and the environmental information in the following manner: query a sample biological information library according to the biological information to determine whether target sample biological information corresponding to the biological information exists in the sample biological information library, and query a sample environmental information library according to the environmental information to determine whether target sample environmental information corresponding to the environmental information exists in the sample environmental information library; if the target sample biological information and / or the target sample environmental information exist, generate a first visual label, wherein the first visual label indicates that the target object is prohibited from accessing, and the visual label includes the first visual label; if the target sample biological information and / or the target sample environmental information do not exist, generate a second visual label, wherein the second visual label indicates that the target object is allowed to access, and the visual label includes the second visual label.

[0012] Optionally, the device is used to perform an ID detection operation on the ID information to obtain an ID detection result in the following manner: query a sample ID library based on the image detection result to determine whether there is target sample ID information corresponding to the identity of the target object in the sample ID library; if the target sample ID information exists and the ID information satisfies a preset ID status, generate a first ID detection result, wherein the first ID detection result indicates that the target object is allowed to access, and the ID detection result includes the first ID detection result; if the target sample ID information does not exist and / or the ID information does not satisfy the preset ID status, generate a second ID detection result, wherein the second ID detection result indicates that the target object is prohibited from access, and the ID detection result includes the second ID detection result.

[0013] According to another aspect of the embodiments of the present application, a computer-readable storage medium is provided, in which a computer program is stored, wherein the computer program is configured to execute the above-mentioned identity authentication method when running.

[0014] According to another aspect of the embodiment of the present application, a computer program product or a computer program is provided, the computer program product or the computer program includes computer instructions, the computer instructions are stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device performs the above identity authentication method.

[0015] According to another aspect of an embodiment of the present application, there is further provided an electronic device, including a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to execute the above-mentioned identity authentication method through the computer program.

[0016] In the embodiment of the present application, a business access request sent by the target object is used to comprehensively determine the terminal device information, biometric information, environmental information and certificate information. Through multi-dimensional information cross-verification, the accuracy and security of identity authentication are improved, and malicious behavior is effectively resisted. This achieves a significant improvement in identity confirmation technology and ensures efficient access to business systems. By comprehensively considering the security status of the target object's device, the uniqueness of personal biometrics, the actual conditions of the collection environment, and the legitimacy of the certificate information, the technical problems of low user identity authentication accuracy and easy impersonation under the traditional single verification method are effectively solved. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0018] Figure 1 is a schematic diagram of an application environment of an optional identity authentication method according to an embodiment of the present application;

[0019] Figure 2 is a flowchart of an optional identity authentication method according to an embodiment of the present application;

[0020] Figure 3 is a schematic diagram of an optional identity authentication method according to an embodiment of the present application;

[0021] Figure 4 is a schematic structural diagram of an optional identity authentication device according to an embodiment of the present application;

[0022] Figure 5 is a schematic diagram of the structure of an optional identity authentication product according to an embodiment of the present application;

[0023] Figure 6 It is a schematic diagram of the structure of an optional electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0024] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0025] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0026] The present application is described below in conjunction with embodiments:

[0027] According to one aspect of an embodiment of the present application, an identity authentication method is provided. Optionally, in this embodiment, the identity authentication method can be applied to: Figure 1 In the hardware environment composed of the server 101 and the terminal device 103 shown in FIG. Figure 1As shown, the server 101 is connected to the terminal device 103 via a network, and can be used to provide services for the terminal device or the application installed on the terminal device. The application 107 can be a video application, an instant messaging application, a browser application, an educational application, a game application, etc. A database 105 may be set up on the server or independently of the server to provide data storage services for the server 101, for example, a game data storage server. The above-mentioned network may include, but is not limited to, a wired network and a wireless network, wherein the wired network includes, a local area network, a metropolitan area network and a wide area network; the wireless network includes, Bluetooth, WIFI and other networks that implement wireless communication; the terminal device 103 may be a terminal configured with an application, and may include, but is not limited to, at least one of the following: a mobile phone (such as an Android phone, an iOS phone, etc.), a laptop computer, a tablet computer, a PDA, a MID (Mobile Internet Devices), a PAD, a desktop computer, a smart TV, an intelligent voice interaction device, a smart home appliance, a vehicle-mounted terminal, an aircraft, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a mixed reality (MR) terminal and other computer devices; the above-mentioned server may be a single server, a server cluster consisting of multiple servers, or a cloud server.

[0028] Combination Figure 1 As shown, the above-mentioned identity authentication method can be executed by an electronic device, which can be a terminal device or a server. The above-mentioned identity authentication method can be implemented by the terminal device or the server separately, or by the terminal device and the server together.

[0029] The above is only an example and is not specifically limited in this embodiment.

[0030] Optionally, as an optional implementation, as Figure 2 As shown, the above authentication methods include:

[0031] S202, based on the service access request sent by the target object, determining the terminal device information, biometric information, environmental information and certificate information, wherein the terminal device information is used to indicate the information corresponding to the terminal device used by the target object, the biometric information is used to indicate the object characteristics of the target object, the environmental information is used to indicate the collection environment of the biometric information, and the certificate information is used to indicate the identity characteristics of the target object;

[0032] Optionally, in an embodiment of the present application, terminal device information refers to device-related data used by the target object when accessing business, including but not limited to device model, operating system version, IP address, MAC address, etc., which is used to evaluate the security and legality of the device; biometric information refers to the individual biometric data of the target object, including but not limited to facial images, iris scans, fingerprint templates, voiceprint features, etc.; environmental information refers to the surrounding environment conditions when biometric information is collected, including but not limited to light conditions, noise levels, geographic location information, etc.; certificate information refers to identity proof materials provided by the target object, including but not limited to images or data of identity cards, passports, and driver's licenses, which are used to verify the legal identity information of the target object.

[0033] It should be noted that, in specific implementations, terminal device information can be obtained in a variety of ways, such as automatically reporting through the device's built-in detection software, or extracting from the device management service after the target object authorizes; the collection of biometric information may be achieved through a front camera, microphone, or dedicated biometric hardware; environmental information can be collected through device sensors or third-party service interfaces; and the verification of certificate information may involve data verification with a third-party system. This application does not limit this, and various specific implementations are within the scope of protection of the present invention.

[0034] Exemplarily, first, the system receives a business access request from the target object; then, automatically or with the cooperation of the target object, it collects and analyzes terminal device information, biometric information, environmental information, and certificate information; then, based on the above multi-dimensional information, the system comprehensively determines the identity of the target object to ensure the security and compliance of business access.

[0035] S204, determining whether the terminal device satisfies the device access condition based on the terminal device information, and if the terminal device satisfies the device access condition, sending a detection instruction to the target object to instruct detection of the target object, and generating a system response message, wherein the system response message is used to indicate whether the target object is allowed to access, and the detection instruction includes at least two of the following: detection based on biometric information, detection based on environmental information, and detection based on certificate information.

[0036] Optionally, in an embodiment of the present application, the above-mentioned device access conditions refer to terminal device security standards preset by the system, including but not limited to whether the device is infected by a virus, whether it is located in a high-incidence fraud area, whether the device hardware is normal, whether it is connected to a trusted network, etc.; the above-mentioned system response message refers to a decision notification generated by the system on whether to allow the target object to access based on the terminal device information and subsequent detection results, including but not limited to access permission granting, access permission denial, and the need for further manual review, etc.; the above-mentioned detection instructions refer to instructions that the system requires the target object to execute for collecting biometric information, environmental information or certificate information, including but not limited to requirements for facial recognition, collecting ambient sound, uploading ID card photos, etc.

[0037] It should be noted that, in specific implementation, the setting of device access conditions can be flexibly adjusted to meet the security requirements of different business scenarios. For example, stricter security inspection standards may be set in high-risk businesses. At the same time, the form and content of the system response message should also be customized according to the actual application scenario to ensure the accuracy and timeliness of information transmission. This application does not limit this.

[0038] Exemplarily, first, the system analyzes the terminal device information of the target object based on the received business access request to determine whether the device meets the preset access conditions; after confirming the security of the device, the system sends a detection instruction to the target object, requiring it to provide at least two types of information (such as biometric information and ID information); after the target object completes the information provision as instructed, the system comprehensively analyzes all the information, generates a system response message, and decides whether to allow access.

[0039] In an exemplary embodiment, taking the application scenario of consumer finance loan application as an example, when the system receives a loan application request from a user, it first confirms through terminal device information detection that the user's device does not have the proxy service turned on, is not rooted, and is located in a secure network environment; after the device meets the access conditions, the system sends a detection instruction to the user, requiring the user to perform face recognition and upload a photo of the ID card; the user captures the face in front of the camera and submits pictures of the front and back of the ID card at the same time; the system uses biometric information for face recognition and document information for ID card authenticity verification, combined with a security assessment of environmental information, to comprehensively determine the user's identity. If all test results are shown to be true and without abnormalities, the system generates a system response message allowing access, and the user can continue to apply for a loan; otherwise, if any abnormality is detected, the system generates a response message denying access, prompting the user to verify the accuracy of the device and information, or initiate a manual review process to ensure the security and compliance of business operations.

[0040] In an exemplary embodiment, Figure 3is a schematic diagram of an optional identity authentication method according to an embodiment of the present application. The process diagram of the embodiment of the present application can be as follows Figure 3 shown.

[0041] Through the embodiments of the present application, a business access request based on the target object is adopted to comprehensively determine the terminal device information, biometric information, environmental information and certificate information. Through multi-dimensional information cross-verification, the accuracy and security of identity authentication are improved and malicious behavior is effectively resisted, thereby achieving a significant improvement in identity confirmation technology and ensuring efficient access to business systems. By comprehensively considering the security status of the target object's device, the uniqueness of personal biometrics, the actual conditions of the collection environment and the legitimacy of certificate information, the technical problems of low user identity authentication accuracy and easy impersonation under the traditional single verification method are effectively solved.

[0042] As an optional scheme, the above-mentioned determining whether the above-mentioned terminal device meets the device access condition based on the above-mentioned terminal device information, and sending a detection instruction to the above-mentioned target object to instruct the detection of the above-mentioned target object when the above-mentioned terminal device meets the above-mentioned device access condition, and generating a system response message, including: sending a detection instruction to the above-mentioned target object to determine the type of the above-mentioned target object when the above-mentioned terminal device meets the above-mentioned device access condition; when the object type of the above-mentioned target object is the target type, performing an image detection operation on the authentication image using a sample image library to determine an image detection result, wherein the above-mentioned authentication image is used to extract the above-mentioned biological information and the above-mentioned environmental information, and the above-mentioned image detection result includes the similarity between each sample image in the above-mentioned sample image library and the above-mentioned authentication image, and the visual label of the above-mentioned target object, wherein the above-mentioned visual label is used to indicate the object feature of the above-mentioned target object in the above-mentioned authentication image; performing a certificate detection operation on the above-mentioned certificate information to obtain a certificate detection result, wherein the above-mentioned certificate detection result is used to indicate whether the above-mentioned certificate information corresponds to the above-mentioned target object; generating a system response message based on the above-mentioned image detection result and the above-mentioned certificate detection result.

[0043] Optionally, in an embodiment of the present application, the above-mentioned target object type refers to the classification of the target object by the system after preliminary verification, including but not limited to new users, existing users, high-risk users, etc.; the above-mentioned sample image library refers to a collection of images that stores biometric information and environmental information of legitimate users, which is used to compare the authentication images provided by the target object, including but not limited to images of users who have successfully authenticated their identities in the past, officially issued environmental reference images, etc.

[0044] It should be noted that, in the specific implementation process, the determination of the target object type can be achieved in a variety of ways, such as based on device information, historical behavior data or preset rules, and the construction of the sample image library should include a wide range of representative image samples to cover biometric and environmental features in different scenarios. The document detection operation may involve multiple steps such as image clarity verification, document authenticity identification, and information consistency comparison with the target object. This application does not limit this.

[0045] In an exemplary embodiment, taking the application scenario of online account opening as an example, when the system receives an account opening request sent by a new user through his mobile phone, it first confirms that the device is not rooted, VPN is not used, and the network environment is secure based on the terminal device information; the system sends a detection instruction to the new user, instructing him to take a face photo and upload a photo of his ID card; the new user completes face recognition in front of the camera and submits the front and back images of the ID card at the same time; the system determines the authenticity of the face and environmental information through comparison of the sample image library, and generates an image detection result containing a similarity score and visual labels; at the same time, the system performs a document detection operation on the ID card photo to verify the accuracy and consistency of the information and obtain the document detection result; finally, the system generates a system response message based on a comprehensive evaluation of the image detection results and the document detection results. If all detection results are confirmed to be correct, the system response message will indicate that the new user is allowed to complete the online account opening process.

[0046] Through the embodiments of the present application, a multi-dimensional information cross-verification method is adopted to improve the accuracy and security of identity confirmation, achieving the technical effect of effectively preventing fraud by black and gray production organizations.

[0047] As an optional solution, the above-mentioned system response message is generated based on the above-mentioned image detection result and the above-mentioned certificate detection result, including: determining an image detection feature value according to the target business type corresponding to the above-mentioned business data and the above-mentioned image detection result, and determining a certificate detection feature value according to the above-mentioned target business type and the above-mentioned certificate detection result; querying the target image weight value and the target certificate weight value corresponding to the above-mentioned target business type in the business weight mapping list, and using the image weight value and the certificate weight value to perform weighted summation on the above-mentioned image detection feature value and the above-mentioned certificate detection feature value to obtain a target detection parameter; when the value of the above-mentioned target detection parameter is greater than or equal to a preset scoring threshold, generating a first system response message, wherein the above-mentioned first system response message indicates that the above-mentioned target object is allowed to access, and the above-mentioned system response message includes the above-mentioned first system response message; when the value of the above-mentioned target detection parameter is less than the above-mentioned scoring threshold, generating a second system response message, wherein the above-mentioned second system response message indicates that the above-mentioned target object is prohibited from access, and the above-mentioned system response message includes the above-mentioned second system response message.

[0048] Optionally, in an embodiment of the present application, the target business type corresponding to the above-mentioned business data refers to the type of business identified by the system based on the user's request, including but not limited to loan application, account registration, high-risk transaction confirmation, etc.; the above-mentioned image detection results and document detection results refer to the conclusions drawn by the system after analyzing the authentication image and document information uploaded by the target object, including but not limited to the similarity of biometric information comparison, security assessment of environmental information, verification results of document authenticity and information consistency, etc.; the above-mentioned business weight mapping list refers to a list of the degree of importance of image detection and document detection results set by the system according to different business types, including but not limited to the setting of weighting coefficients for different business scenarios.

[0049] It should be noted that, in the specific implementation process, the determination of the target business type may be based on the metadata of the business data, user behavior patterns, or preset business classification rules. The specific method of obtaining the image detection results and the document detection results depends on the implementation of image processing and document recognition technology, which may include methods such as deep learning, pattern recognition, or expert systems; the construction of the above-mentioned business weight mapping list should take into account the business risk level and the possibility of fraud. For example, higher image and document weight values ​​may be set for high-risk businesses to strengthen the strictness of identity verification. This application does not limit this.

[0050] In an exemplary embodiment, taking the application scenario of a loan application as an example, after the system receives a loan application initiated by a user, it first analyzes the business data and determines that the target business type is loan approval; then, the system calculates an image detection feature value based on the image detection result, and the feature value reflects the comparison similarity between the user's face and the stored sample and the environmental safety score; at the same time, the system calculates an ID detection feature value based on the ID detection result, and the feature value is based on the authenticity of the ID card information and the consistency of the user's identity; the system finds the target image weight value and the target ID weight value corresponding to the loan approval business in the business weight mapping list, and performs weighted summation on the image detection feature value and the ID detection feature value to obtain the target detection parameter in the loan application scenario; if the target detection parameter reaches or exceeds the preset scoring threshold, the system generates a first system response message, indicating that the user is allowed to proceed with the loan approval process; conversely, if the target detection parameter does not reach the scoring threshold, the system generates a second system response message, indicating that the user access is denied to prevent potential fraud risks.

[0051] Through the embodiments of the present application, an identity authentication strategy that is dynamically adjusted according to the business type is adopted to achieve refined management and risk control of user identities, and to achieve the purpose of flexibly adjusting verification standards according to different business scenarios and improving the accuracy of identity confirmation.

[0052] As an optional scheme, in the case that the object type of the above-mentioned target object is the target type, the sample image library is used to perform an image detection operation on the above-mentioned authentication image to determine the image detection result, including: using the sample image library to perform a similarity comparison operation on the above-mentioned authentication image to obtain a first detection result, wherein the above-mentioned first detection result is used to indicate the similarity between each sample image in the above-mentioned sample image library and the above-mentioned authentication image; in the case that the above-mentioned first detection result indicates that the above-mentioned sample image library includes a target sample image whose similarity with the above-mentioned authentication image meets the image authentication condition, determining the identity of the above-mentioned target object; and generating the above-mentioned image detection result based on the identity of the above-mentioned target object.

[0053] Optionally, in an embodiment of the present application, the above-mentioned image authentication condition refers to a similarity threshold or scoring standard that is regarded as a valid identity authentication in a similarity comparison operation, including but not limited to a similarity reaching a certain percentage, a comparison result that satisfies specific scoring rules, etc.; the above-mentioned target sample image refers to a sample image whose similarity with the authentication image satisfies the image authentication condition, which is used to further confirm the identity of the target object.

[0054] It should be noted that, in specific implementation, the determination of the above-mentioned target type can be based on the user's historical behavior, device information or system preset rules, and the setting of image authentication conditions can take into account the natural variation range of biometric features, for example, taking into account the impact of factors such as light, angle and expression on the similarity score, which is not limited in this application.

[0055] In an exemplary embodiment, taking the new user registration scenario as an example, after the system receives the registration request from the new user, it determines that the user belongs to the target type based on the terminal device information, that is, strict identity authentication is required; the system retrieves historical user image data from the sample image library, and performs a similarity comparison with the authentication image uploaded by the new user to obtain a first detection result; if there is a target sample image in the first detection result whose similarity with the authentication image meets the image authentication conditions, the system will determine the identity of the new user and generate an image detection result based on this identity information; conversely, if the similarity comparison does not meet the preset image authentication conditions, the system will generate further verification instructions, which may require the user to provide other forms of identity proof.

[0056] Through the embodiments of the present application, a comprehensive sample image library is used to perform similarity comparison and target type matching, thereby achieving high-precision confirmation of the identity of the target object, thereby achieving the purpose of effectively preventing identity fraud and improving business security while ensuring user experience.

[0057] As an optional scheme, in the case that the object type of the above-mentioned target object is the target type, the sample image library is used to perform an image detection operation on the above-mentioned authentication image to determine the image detection result, including: performing a source verification operation on the above-mentioned authentication image to determine the source of the above-mentioned authentication image; in the case that the source of the above-mentioned authentication image indicates that the above-mentioned authentication image is obtained by acquiring the above-mentioned target object through an image acquisition component associated with the above-mentioned terminal device, performing a feature extraction operation on the above-mentioned authentication image to determine the above-mentioned biological information and the above-mentioned environmental information; determining the above-mentioned visual label according to the above-mentioned biological information and the above-mentioned environmental information; and generating the above-mentioned image detection result based on the above-mentioned visual label.

[0058] Optionally, in an embodiment of the present application, the above-mentioned source verification operation refers to the verification of the authenticity and acquisition path of the authentication image, including but not limited to checking image metadata, identifying whether the image is edited or synthesized, confirming whether the image is directly taken by the camera of the terminal device, etc.; the above-mentioned feature extraction operation refers to the process of extracting biometric information and environmental information from the authentication image, including but not limited to facial feature point positioning, iris texture analysis, background ambient light detection, noise level assessment, etc.

[0059] Optionally, in an embodiment of the present application, the above-mentioned biometric information refers to the biometric data of the target object, the above-mentioned environmental information refers to the surrounding environment conditions when the image is collected, and the visual label is a descriptive mark for the authentication image based on a comprehensive analysis of the biometric information and environmental information.

[0060] It should be noted that the above-mentioned source verification operation can adopt a variety of technical means, such as image watermark recognition, metadata analysis, image quality assessment, etc., and this application does not limit this.

[0061] In an exemplary embodiment, taking the application scenario of opening an online bank account as an example, when the system recognizes that the user belongs to the target type, that is, a new user who is trying to open an account for the first time, the system first verifies the source of the selfie authentication image uploaded by the user to check whether the image is directly taken by the camera of the user's device; if the authentication image passes the source verification, the system will perform a feature extraction operation to extract facial features and environmental features from the image, such as light conditions, background noise, etc.; then, the system generates visual tags based on the extracted biometric information and environmental information, such as "taken under natural light", "no traces of synthesis", "highly matched with the official face database", etc.; finally, the system generates image detection results based on these visual tags. If the results show that the image is authentic and the biometric and environmental features are as expected, the user's identity authentication will be deemed successful, and the system generates a system response message allowing access.

[0062] Through the embodiments of the present application, a comprehensive assessment of the identity and environmental status of the target object is achieved by verifying the source of the authentication image and extracting biological environmental features to generate visual labels, thereby achieving the technical effect of enhancing the user experience while ensuring the security of identity authentication and effectively preventing identity forgery attacks and environmental fraud.

[0063] It should also be noted that the image source verification and feature extraction operations, as well as the generation of visual labels, can be continuously optimized with the advancement of image processing technology. For example, by adopting more advanced deep learning models, the accuracy of image feature extraction can be improved, further enhancing the reliability of identity authentication. At the same time, the system should regularly update the sample image library to adapt to changing environmental factors and technical challenges. This application does not limit this.

[0064] As an optional scheme, the above-mentioned determination of the above-mentioned visual label based on the above-mentioned biological information and the above-mentioned environmental information includes: querying a sample biological information library based on the above-mentioned biological information to determine whether the target sample biological information corresponding to the above-mentioned biological information exists in the above-mentioned sample biological information library, and querying a sample environmental information library based on the above-mentioned environmental information to determine whether the target sample environmental information corresponding to the above-mentioned environmental information exists in the above-mentioned sample environmental information library; in the case where the above-mentioned target sample biological information and / or the above-mentioned target sample environmental information exist, generating a first visual label, wherein the above-mentioned first visual label indicates that the above-mentioned target object is prohibited from accessing, and the above-mentioned visual label includes the above-mentioned first visual label; in the case where the above-mentioned target sample biological information and / or the above-mentioned target sample environmental information do not exist, generating a second visual label, wherein the above-mentioned second visual label indicates that the above-mentioned target object is allowed to access, and the above-mentioned visual label includes the above-mentioned second visual label.

[0065] Optionally, in an embodiment of the present application, the above-mentioned sample biometric information database refers to a database storing verified real user biometric data, including but not limited to face templates, iris images, fingerprint patterns, etc.

[0066] Optionally, in an embodiment of the present application, the above-mentioned sample environment information library refers to a database containing typical background information of the user in a safe environment, including but not limited to common network signal characteristics, ambient light patterns, voiceprint samples, etc.

[0067] Optionally, in an embodiment of the present application, the first visual tag and the second visual tag refer to tags generated based on the comparison results of biological information and environmental information, which are used to indicate whether the target object is allowed to perform access operations.

[0068] In an exemplary embodiment, taking the identity authentication scenario of online financial services as an example, the system first extracts biometric information and environmental information from the authentication image of the target object; then, the system queries the sample biometric information library and the sample environmental information library respectively to determine whether the target sample biometric information and target sample environmental information corresponding to the extracted biometric information and environmental information can be matched; if there is matching target sample biometric information or target sample environmental information, indicating that the target object may be involved in fraud or is in an unsafe environment, the system generates a first visual label, indicating that the target object is prohibited from access; conversely, if the query result shows that neither the target sample biometric information nor the target sample environmental information exists, the system generates a second visual label, indicating that there is no abnormality in the identity and environmental status of the target object, and it is allowed to perform subsequent business operations.

[0069] Through the embodiments of the present application, by comparing biological information and environmental information with a sample library to generate visual labels, dual verification of the target object's identity and environmental status is achieved, achieving the technical effect of accurately identifying legitimate users and potential risky behaviors, enhancing the security and credibility of online financial services, and effectively preventing black market attacks and fraud.

[0070] As an optional scheme, the above-mentioned certificate detection operation is performed on the above-mentioned certificate information to obtain the certificate detection result, including: querying the sample certificate library according to the above-mentioned image detection result to determine whether there is target sample certificate information corresponding to the identity of the above-mentioned target object in the above-mentioned sample certificate library; when the above-mentioned target sample certificate information exists and the above-mentioned certificate information satisfies the preset certificate status, generating a first certificate detection result, wherein the above-mentioned first certificate detection result indicates that the above-mentioned target object is allowed to access, and the above-mentioned certificate detection result includes the above-mentioned first certificate detection result; when the above-mentioned target sample certificate information does not exist and / or the above-mentioned certificate information does not satisfy the above-mentioned preset certificate status, generating a second certificate detection result, wherein the above-mentioned second certificate detection result indicates that the above-mentioned target object is prohibited from access, and the above-mentioned certificate detection result includes the above-mentioned second certificate detection result.

[0071] Optionally, in an embodiment of the present application, the above-mentioned sample certificate library refers to a collection of verified certificate information maintained by the system, including but not limited to front and back images of identity cards, passports, driver's licenses, etc. and their corresponding user identity information.

[0072] Optionally, in an embodiment of the present application, the above-mentioned preset certificate status refers to a series of inspection conditions set to ensure the validity of the certificate, including but not limited to the certificate validity period, certificate clarity, consistency between certificate information and user data, etc.

[0073] Optionally, in an embodiment of the present application, the above-mentioned first certificate detection result and second certificate detection result refer to the determination results of allowing or prohibiting the target object from accessing, generated by the system based on the comparison of certificate information with the sample certificate library and the satisfaction of the preset certificate status.

[0074] In an exemplary embodiment, taking the user identity authentication scenario of online financial services as an example, after receiving the certificate information of the target object, the system first queries the sample certificate library to confirm whether there is a record that matches the identity information of the target object based on the biometric information and environmental information in the image detection results; at the same time, the system checks whether the certificate information meets the preset certificate status, such as whether the certificate is within the validity period, whether the image is clear, and whether the certificate number, name and other information are consistent with the user registration information; if there is a matching record in the sample certificate library and the certificate information meets the preset certificate status, the system generates a first certificate detection result that allows access; conversely, if no matching record is found in the sample certificate library, or the certificate information does not meet the preset certificate status, the system generates a second certificate detection result that prohibits access.

[0075] Through the embodiments of the present application, comprehensive certificate information comparison and preset certificate status check are adopted to achieve comprehensive verification of certificate information, achieving the technical effect of effectively preventing certificate forgery and identity fraud.

[0076] As an optional scheme, when the terminal device meets the device access conditions, a detection instruction is sent to the target object to instruct the target object to perform an object detection operation to determine the object type of the target object, including: the detection instruction includes at least one of a head detection instruction, an eye detection instruction, a mouth detection instruction and a face detection instruction; the object detection operation includes at least one of a head rotation operation, a blinking operation, a mouth opening operation and a still operation, wherein the head detection instruction corresponds to the head rotation operation, the eye detection instruction corresponds to the blinking operation, the mouth detection instruction corresponds to the mouth opening operation, and the face detection instruction corresponds to the still operation.

[0077] In an exemplary embodiment, taking the scenario of opening an online bank account as an example, the system sends a detection instruction to the target object when it preliminarily determines that the terminal device meets the device access conditions, that is, the device is safe, has not been tampered with, and the network connection is normal.

[0078] Assuming that the system needs to verify whether the target object is alive, the detection instructions may include eye detection instructions, requiring the target object to blink. In this link, the system captures the real-time video stream or photo of the target object through the camera, and observes whether it can complete the blinking action according to the instructions, so as to determine whether the target object is a real person rather than a photo or video.

[0079] If the target object successfully passes this test, the system will generate a corresponding object detection result, indicating that its object type is living; conversely, if the target object fails to complete the blinking operation or the movement is abnormal, the system will generate another type of object detection result, indicating that its object type may be non-living, and thus take further verification measures or deny service.

[0080] Through the embodiments of the present application, by sending specific detection instructions to the target object and requiring it to perform corresponding operations, dynamic detection of the identity status of the target object is achieved, achieving the technical effect of quickly confirming that the user is alive, real and has operational capabilities during the user interaction process, and effectively improving the security of online services and user experience.

[0081] It should be noted that the above-mentioned detection instructions and target object detection operations can be diversified, such as combined with head rotation, mouth opening movement or continuous static observation, so as to enhance the accuracy of liveness detection and prevent fraud attempts, and this application does not limit this.

[0082] As an optional solution, the method further includes: generating an access denial message when the object type of the target object is not the target type, wherein the access denial message indicates that the target object cannot operate the business data; and sending the access denial message to the target object.

[0083] In an exemplary embodiment, taking an online loan application scenario as an example, after the system performs a series of object detection operations on the target object, such as liveness detection, document information comparison, and environmental safety assessment, if the comprehensive judgment concludes that the object type of the target object does not meet the preset target type, that is, the system believes that the user may not be a legitimate applicant who needs to undergo high-security verification, or there is potential risk behavior, the system will generate an access denial message.

[0084] Furthermore, the access denied message details the reason why the target object cannot operate the business data, for example, the certificate information does not match the record in the sample certificate library, or the environmental information indicates that the user may be in an unsafe environment.

[0085] The system can then send an access denial message to the target object through a secure communication channel, possibly in the form of email, text message, or in-application message, informing the user that his or her access request has been denied, and providing relevant appeal channels or guiding the user on how to resolve problems encountered in identity authentication.

[0086] Through the embodiments of the present application, by generating and sending access denial messages, timely feedback and risk control are achieved when the identity type of the target object does not match, thereby achieving the technical effect of effectively preventing non-target users from operating sensitive business data, protecting system security and user privacy, and improving service transparency and user satisfaction.

[0087] In an exemplary embodiment, the present application solves the problem of identity confirmation during the customer authentication process. The customer's identity is identified by comprehensively judging the client device security information, biometric information such as face, certificate information, surrounding environment information, etc., including but not limited to the following: Figure 3 As shown:

[0088] S1, channel side;

[0089] S2, device security: By detecting the device-related information used by the channel end, determine whether there is a risk, such as whether VPN is used, whether root permissions are used, whether the framework is opened, and whether the MAC address is on the malicious list

[0090] S3, liveness detection: To determine whether a person is a real person, the person is required to turn his head, blink, open his mouth, or change the screen color, etc., without judging the person's identity.

[0091] S4, face recognition: Based on the face photo in the key frame, it is compared with the local photo library to perform similarity scoring, or a third-party system is queried through the relevant interface to determine the identity of the face.

[0092] S5, face photo authentication: determine whether the photo is photoshopped or forged.

[0093] S6, visual label determination: screening is performed by analyzing the background information in the photo and the malicious face list library, as well as labeling the actual clothing worn in the task.

[0094] S7, ID card photo authentication: After completing face recognition, ID card recognition is required to determine whether there are traces of PS, compare with the previous face information, query relevant databases, etc.

[0095] Through the embodiments of the present application, a more accurate customer identity information verification scheme is implemented by combining biometric information, certificate information and environmental information to comprehensively determine the authenticity of the customer's identity, and malicious forgery can also be effectively identified.

[0096] It is understandable that in the specific implementation of this application, related data such as user information is involved. When the above embodiments of this application are applied to specific products or technologies, user permission or consent is required, and the collection, use and processing of relevant data need to comply with relevant laws, regulations and standards of relevant countries and regions.

[0097] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present application.

[0098] According to another aspect of the embodiment of the present application, an identity authentication device for implementing the above identity authentication method is also provided. Figure 4 As shown, the device comprises:

[0099] The determination module 402 is used to determine the terminal device information, biometric information, environmental information and certificate information based on the service access request sent by the target object, wherein the terminal device information is used to indicate the information corresponding to the terminal device used by the target object, the biometric information is used to indicate the object characteristics of the target object, the environmental information is used to indicate the collection environment of the biometric information, and the certificate information is used to indicate the identity characteristics of the target object;

[0100] The generation module 404 is used to determine whether the terminal device satisfies the device access condition based on the terminal device information. When the terminal device satisfies the device access condition, a detection instruction is sent to the target object to instruct to detect the target object, and a system response message is generated, wherein the system response message is used to indicate whether the target object is allowed to access, and the detection instruction includes at least two of the following: detection based on biometric information, detection based on environmental information, and detection based on certificate information.

[0101] As an optional solution, the above-mentioned device is used to determine whether the terminal device meets the device access conditions based on the terminal device information in the following manner; when the terminal device meets the device access conditions, a detection instruction is sent to the target object to instruct to detect the target object and generate a system response message: when the terminal device meets the device access conditions, a detection instruction is sent to the target object to determine the type of the target object; when the object type of the target object is the target type, an image detection operation is performed on the authentication image using a sample image library to determine the image detection result, wherein the authentication image is used to extract biological information and environmental information, and the image detection result includes the similarity between each sample image in the sample image library and the authentication image, and the visual label of the target object, wherein the visual label is used to indicate the object features of the target object in the authentication image; a document detection operation is performed on the document information to obtain a document detection result, wherein the document detection result is used to indicate whether the document information corresponds to the target object; a system response message is generated based on the image detection result and the document detection result.

[0102] As an optional solution, the above-mentioned device is used to generate a system response message based on the image detection results and the document detection results in the following manner: determine the image detection feature value according to the target business type corresponding to the business data and the image detection result, and determine the document detection feature value according to the target business type and the document detection result; query the target image weight value and the target document weight value corresponding to the target business type in the business weight mapping list; use the image weight value and the document weight value to perform weighted summation on the image detection feature value and the document detection feature value to obtain the target detection parameter; when the value of the target detection parameter is greater than or equal to a preset scoring threshold, generate a first system response message, wherein the first system response message indicates that the target object is allowed to access, and the system response message includes the first system response message; when the value of the target detection parameter is less than the scoring threshold, generate a second system response message, wherein the second system response message indicates that the target object is prohibited from access, and the system response message includes the second system response message.

[0103] As an optional scheme, the above-mentioned device is used to perform an image detection operation on the authentication image using a sample image library to determine the image detection result when the object type of the target object is the target type in the following manner: perform a similarity comparison operation on the authentication image using the sample image library to obtain a first detection result, wherein the first detection result is used to indicate the similarity between each sample image in the sample image library and the authentication image; determine the identity of the target object when the first detection result indicates that the sample image library includes a target sample image whose similarity with the authentication image meets the image authentication condition; and generate the image detection result based on the identity of the target object.

[0104] As an optional solution, the above-mentioned device is used to perform an image detection operation on the authentication image using a sample image library to determine the image detection result in the following manner when the object type of the target object is the target type: perform a source verification operation on the authentication image to determine the source of the authentication image; when the source of the authentication image indicates that the authentication image is obtained by acquiring the target object through an image acquisition component associated with a terminal device, perform a feature extraction operation on the authentication image to determine the biometric information and environmental information; determine the visual label based on the biometric information and the environmental information; and generate the image detection result based on the visual label.

[0105] As an optional solution, the above-mentioned device is used to determine the visual label according to the biological information and the environmental information in the following manner: query the sample biological information library according to the biological information to determine whether the target sample biological information corresponding to the biological information exists in the sample biological information library, and query the sample environmental information library according to the environmental information to determine whether the target sample environmental information corresponding to the environmental information exists in the sample environmental information library; when the target sample biological information and / or the target sample environmental information exist, generate a first visual label, wherein the first visual label indicates that the target object is prohibited from accessing, and the visual label includes the first visual label; when the target sample biological information and / or the target sample environmental information do not exist, generate a second visual label, wherein the second visual label indicates that the target object is allowed to access, and the visual label includes the second visual label.

[0106] As an optional solution, the above-mentioned device is used to perform an ID detection operation on the ID information in the following manner to obtain a ID detection result: query a sample ID library based on the image detection result to determine whether there is target sample ID information corresponding to the identity of the target object in the sample ID library; if the target sample ID information exists and the ID information satisfies a preset ID status, generate a first ID detection result, wherein the first ID detection result indicates that the target object is allowed to access, and the ID detection result includes the first ID detection result; if the target sample ID information does not exist and / or the ID information does not satisfy the preset ID status, generate a second ID detection result, wherein the second ID detection result indicates that the target object is prohibited from access, and the ID detection result includes the second ID detection result.

[0107] In the embodiments of the present application, the term "module" or "unit" refers to a computer program or a part of a computer program with a predetermined function, and works together with other related parts to achieve a predetermined goal, and can be implemented in whole or in part by using software, hardware (such as processing circuits or memories) or a combination thereof. Similarly, a processor (or multiple processors or memories) can be used to implement one or more modules or units. In addition, each module or unit can be part of an overall module or unit that includes the function of the module or unit.

[0108] Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

[0109] According to one aspect of the present application, a computer program product is provided. The computer program product includes a computer program.

[0110] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0111] Figure 5 The structure block diagram of a computer system for implementing an electronic device according to an embodiment of the present application is schematically shown.

[0112] It should be noted that Figure 5 The computer system 500 of the electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0113] like Figure 5 As shown, the computer system 500 includes a central processing unit 501 (CPU), which can perform various appropriate actions and processes according to the program stored in the read-only memory 502 (ROM) or the program loaded from the storage part 508 to the random access memory 503 (RAM). Various programs and data required for system operation are also stored in the random access memory 503. The central processing unit 501, the read-only memory 502 and the random access memory 503 are connected to each other through a bus 504. The input / output interface 505 (Input / Output interface, i.e., I / O interface) is also connected to the bus 504.

[0114] The following components are connected to the input / output interface 505: an input section 506 including a keyboard, a mouse, etc.; an output section 507 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker; a storage section 508 including a hard disk, etc.; and a communication section 509 including a network interface card such as a local area network card, a modem, etc. The communication section 509 performs communication processing via a network such as the Internet. A drive 510 is also connected to the input / output interface 505 as needed. A removable medium 511, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 510 as needed so that a computer program read therefrom is installed into the storage section 508 as needed.

[0115] In particular, according to an embodiment of the present application, the process described in each method flow chart can be implemented as a computer software program. For example, an embodiment of the present application includes a computer program product, which includes a computer program carried on a computer readable medium, and the computer program contains a program code for executing the method shown in the flow chart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 509, and / or installed from the removable medium 511. When the computer program is executed by the central processor 501, various functions defined in the system of the present application are executed.

[0116] In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 509, and / or installed from the removable medium 511. When the computer program is executed by the central processor 501, various functions provided by the embodiment of the present application are performed.

[0117] According to another aspect of the embodiment of the present application, an electronic device for implementing the above identity authentication method is also provided. The electronic device may be Figure 1 The terminal device or server shown in the figure. This embodiment is described by taking the electronic device as a terminal device as an example. Figure 6 As shown, the electronic device includes a memory 602 and a processor 604. The memory 602 stores a computer program, and the processor 604 is configured to execute the steps in any of the above method embodiments through the computer program.

[0118] Optionally, in this embodiment, the electronic device may be located in at least one network device among a plurality of network devices of a computer network.

[0119] Optionally, in this embodiment, the above-mentioned processor can be configured to execute the methods in each embodiment of the present application through a computer program.

[0120] Alternatively, a person skilled in the art may understand that: Figure 6 The structure shown is for illustration only. Figure 6 The structure of the electronic device is not limited. Figure 6 More or fewer components (such as network interfaces, etc.) as shown in, or with Figure 6 Different configurations are shown.

[0121] Among them, the memory 602 can be used to store software programs and modules, such as the program instructions / modules corresponding to the identity authentication method and device in the embodiment of the present application. The processor 604 executes various functional applications and data processing by running the software programs and modules stored in the memory 602, that is, to implement the above-mentioned identity authentication method. The memory 602 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 602 may further include a memory remotely located relative to the processor 604, and these remote memories may be connected to the terminal via a network. Examples of the above-mentioned networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof. Among them, the memory 602 can be specifically, but not limited to, used to store terminal device information, biometric information, environmental information, and certificate information, etc. As an example, such as Figure 6 As shown, the memory 602 may include but is not limited to the determination module 402 and the generation module 404 in the identity authentication device. In addition, it may also include but is not limited to other module units in the identity authentication device, which will not be described in detail in this example.

[0122] Optionally, the transmission device 606 is used to receive or send data via a network. Specific examples of the network may include a wired network and a wireless network. In one example, the transmission device 606 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices and routers via a network cable so as to communicate with the Internet or a local area network. In one example, the transmission device 606 is a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0123] In addition, the electronic device further includes: a display 608 for displaying the terminal device information, biometric information, environmental information and certificate information; and a connection bus 610 for connecting various module components in the electronic device.

[0124] In other embodiments, the terminal device or server may be a node in a distributed system, wherein the distributed system may be a blockchain system, and the blockchain system may be a distributed system formed by connecting the multiple nodes through network communication. The nodes may form a peer-to-peer network, and any form of computing device, such as a server, terminal or other electronic device, may become a node in the blockchain system by joining the peer-to-peer network.

[0125] According to one aspect of the present application, a computer-readable storage medium is provided, and a processor of an electronic device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the electronic device executes the identity authentication method provided in various optional implementations of the above-mentioned identity authentication aspects.

[0126] Optionally, in this embodiment, the above-mentioned computer-readable storage medium can be configured to store data for executing the methods in various embodiments of the present application.

[0127] Optionally, in this embodiment, a person of ordinary skill in the art may understand that all or part of the steps in the various methods of the above embodiments may be completed by instructing hardware related to the terminal device through a program, and the program may be stored in a computer-readable storage medium, and the storage medium may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a disk or an optical disk, etc.

[0128] The serial numbers of the above-mentioned embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0129] If the integrated units in the above embodiments are implemented in the form of software functional units and sold or used as independent products, they can be stored in the above computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for one or more electronic devices to execute all or part of the steps of the methods described in each embodiment of the present application.

[0130] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0131] In the several embodiments provided in the present application, it should be understood that the disclosed application can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0132] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0133] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0134] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. An identity authentication method, characterized in that: include: Determine, based on the service access request sent by the target object, terminal device information, biometric information, environmental information and certificate information, wherein the terminal device information is used to indicate information corresponding to the terminal device used by the target object, the biometric information is used to indicate object characteristics of the target object, the environmental information is used to indicate the collection environment of the biometric information, and the certificate information is used to indicate the identity characteristics of the target object; Based on the terminal device information, determine whether the terminal device satisfies the device access condition. If the terminal device satisfies the device access condition, send a detection instruction to the target object to instruct to detect the target object, and generate a system response message, wherein the system response message is used to indicate whether the target object is allowed to access, and the detection instruction includes at least two of the following: detection based on the biometric information, detection based on the environmental information, and detection based on the certificate information.

2. The method according to claim 1, characterized in that The determining, based on the terminal device information, whether the terminal device satisfies a device access condition, and sending a detection instruction to the target object to instruct to detect the target object when the terminal device satisfies the device access condition, and generating a system response message includes: In a case where the terminal device meets the device access condition, sending the detection instruction to the target object to determine the type of the target object; In the case where the object type of the target object is a target type, performing an image detection operation on the authentication image using a sample image library to determine an image detection result, wherein the authentication image is used to extract the biological information and the environmental information, and the image detection result includes a similarity between each sample image in the sample image library and the authentication image, and a visual label of the target object, wherein the visual label is used to indicate an object feature of the target object in the authentication image; Performing a certificate detection operation on the certificate information to obtain a certificate detection result, wherein the certificate detection result is used to indicate whether the certificate information corresponds to the target object; and generating a system response message based on the image detection result and the certificate detection result.

3. The method according to claim 2, characterized in that The generating a system response message based on the image detection result and the document detection result includes: Determine an image detection feature value according to a target service type corresponding to the service data and the image detection result, and determine a document detection feature value according to the target service type and the document detection result; Querying the target image weight value and the target document weight value corresponding to the target business type in the business weight mapping list, and performing weighted summation of the image detection feature value and the document detection feature value using the image weight value and the document weight value to obtain the target detection parameter; In the case where the value of the target detection parameter is greater than or equal to a preset scoring threshold, generating a first system response message, wherein the first system response message indicates that the target object is allowed to access, and the system response message includes the first system response message; When the value of the target detection parameter is less than the scoring threshold, a second system response message is generated, wherein the second system response message indicates that access to the target object is prohibited, and the system response message includes the second system response message.

4. The method according to claim 2, characterized in that: When the object type of the target object is a target type, performing an image detection operation on the authentication image using a sample image library to determine an image detection result includes: Performing a similarity comparison operation on the authentication image using a sample image library to obtain a first detection result, wherein the first detection result is used to indicate the similarity between each sample image in the sample image library and the authentication image; In a case where the first detection result indicates that the sample image library includes a target sample image whose similarity to the authentication image satisfies an image authentication condition, determining the identity of the target object; The image detection result is generated based on the identity of the target object.

5. The method according to claim 2, characterized in that: When the object type of the target object is a target type, performing an image detection operation on the authentication image using a sample image library to determine an image detection result includes: Performing a source verification operation on the authentication image to determine the source of the authentication image; In a case where the source of the authentication image indicates that the authentication image is obtained by capturing the target object through an image capturing component associated with the terminal device, performing a feature extraction operation on the authentication image to determine the biometric information and the environmental information; determining the visual tag according to the biological information and the environmental information; The image detection result is generated based on the visual label.

6. The method according to claim 5, characterized in that The determining the visual tag according to the biological information and the environmental information includes: querying a sample biological information database according to the biological information to determine whether target sample biological information corresponding to the biological information exists in the sample biological information database, and querying a sample environmental information database according to the environmental information to determine whether target sample environmental information corresponding to the environmental information exists in the sample environmental information database; In the case where the target sample biological information and / or the target sample environmental information exist, generating a first visual tag, wherein the first visual tag indicates that the target object is prohibited from accessing, and the visual tags include the first visual tag; In the case that the target sample biological information and / or the target sample environmental information do not exist, a second visual tag is generated, wherein the second visual tag indicates that the target object is allowed to access, and the visual tags include the second visual tag.

7. The method according to claim 2, characterized in that The performing of a certificate detection operation on the certificate information to obtain a certificate detection result includes: querying a sample certificate database according to the image detection result to determine whether there is target sample certificate information corresponding to the identity of the target object in the sample certificate database; If the target sample certificate information exists and the certificate information satisfies a preset certificate status, generating a first certificate detection result, wherein the first certificate detection result indicates that the target object is allowed to access, and the certificate detection results include the first certificate detection result; When the target sample certificate information does not exist and / or the certificate information does not meet the preset certificate status, a second certificate detection result is generated, wherein the second certificate detection result indicates that the target object is prohibited from accessing, and the certificate detection result includes the second certificate detection result.

8. An identity verification device, characterized in that: include: a determination module, configured to determine terminal device information, biometric information, environmental information, and certificate information based on a service access request sent by a target object, wherein the terminal device information is used to indicate information corresponding to a terminal device used by the target object, the biometric information is used to indicate object characteristics of the target object, the environmental information is used to indicate a collection environment for the biometric information, and the certificate information is used to indicate identity characteristics of the target object; A generation module is used to determine whether the terminal device satisfies a device access condition based on the terminal device information; if the terminal device satisfies the device access condition, a detection instruction is sent to the target object to instruct detection of the target object, and a system response message is generated, wherein the system response message is used to indicate whether the target object is allowed to access, and the detection instruction includes at least two of the following: detection based on the biometric information, detection based on the environmental information, and detection based on the certificate information.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored computer program, wherein the computer program can be executed by an electronic device to perform the method described in any one of claims 1 to 7.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method described in any one of claims 1 to 7 are implemented.

11. An electronic device comprising a memory and a processor, characterized in that: A computer program is stored in the memory, and the processor is configured to execute the method according to any one of claims 1 to 7 through the computer program.

Images