An intelligent self-service method and terminal with identity recognition function

Abstract

This application relates to the technical field of self-service, and particularly to an intelligent self-service method and terminal with identity recognition functions. It includes an update isolation module and a pluggable function module; the update isolation module is connected to the pluggable function module; the pluggable function module is used to connect to an external device, and after successful connection, send a connection success signal to the update isolation module; after receiving the connection success signal, the update isolation module is used to detect the connection permission of the external device and identify the identity information of the plugging and unplugging personnel. After determining that the update is allowed, it receives and downloads the task to be updated through a preset API interface. After confirming that the external device verification is passed and the identity information of the plugging and unplugging personnel is recognized, the update isolation module receiving and downloading the task to be updated through the preset API interface is the core of the update process, ensuring the transmission security of the task to be updated and the correctness of the task to be updated.

Description

Technical Field

[0001] This application relates to the technical field of self-service, and in particular, to an intelligent self-service method and terminal with an identity recognition function. Background Art

[0002] With the comprehensive promotion of informatization construction in various fields of social services, intelligent self-service terminals, as an important carrier connecting users and system platforms, have been widely used in multiple public service scenarios such as government services, financial transactions, medical registration, transportation, and education informatization.

[0003] However, as the functions of intelligent self-service terminals become increasingly complex and the operating environments become more diverse, in order to avoid online intrusion interfaces, some self-service terminals with high security requirements usually can only be updated offline. Therefore, how to avoid potential risks during the update process while ensuring update efficiency and the security of update content has become the key to technological development for intelligent self-service terminals. Summary of the Invention

[0004] This application provides an intelligent self-service method and terminal with an identity recognition function to solve the above problems.

[0005] In a first aspect, this application provides an intelligent self-service terminal with an identity recognition function, where the terminal includes an update isolation module and a pluggable function module;

[0006] The update isolation module is connected to the pluggable function module;

[0007] The pluggable function module is used to connect to an external device, and after successful connection, send a connection success signal to the update isolation module;

[0008] After receiving the connection success signal, the update isolation module is used to detect the connection permission of the external device and identify the identity information of the plugging / unplugging person. After determining that the update is allowed, it receives and downloads the update task to be updated through a preset API interface.

[0009] Through this solution, the connection between the update isolation module and the pluggable function module is updated to ensure that the interaction between the external device and the internal device of the terminal can be carried out through a controlled interface, thereby reducing the risk of directly accessing the core device. The pluggable function module is connected to an external device, such as a USB flash drive, enabling the intelligent self-service terminal to receive update tasks from the outside. The connection of the external device is the starting point of the update process, providing a physical basis for task transmission and identity information verification. The connection success signal sent by the pluggable function module is an important feedback mechanism, informing the update isolation module to prepare to receive the update task to be updated and perform identity information verification. The connection permission of the external device is detected to ensure that only authorized devices can perform updates, and the legitimacy of the external device is verified by checking the digital certificate and hardware signature of the external device. The update isolation module simultaneously identifies the identity information of the plugging / unplugging personnel as part of the multi-factor identity authentication process to ensure that only authorized plugging / unplugging personnel can perform update operations, thereby enhancing the security of the update process. After confirming that the external device verification is passed and the identity information of the plugging / unplugging personnel is recognized, the update isolation module receives and downloads the update task to be updated through a preset API interface, which is the core of the update process, ensuring the transmission security and correctness of the update task to be updated.

[0010] Optionally, the update isolation module includes a plurality of virtual isolation boxes, and each virtual isolation box has an independent sandbox environment for isolating and updating the update task to be updated after receiving the update task to be updated.

[0011] Through this solution, by creating a plurality of virtual isolation boxes, the update isolation module provides an independent execution space for each update task to be updated. Ensure that even if there are problems with the update task to be updated, it will not affect other parts of the intelligent self-service terminal, thereby protecting the stability of the intelligent self-service terminal and the security of user data. An independent sandbox environment is configured inside each virtual isolation box to limit the permissions and resource access of the update task to be updated. The independent sandbox environment prevents potential threats to the intelligent self-service terminal from the update task to be updated, such as the execution of malicious code or data leakage. The update task to be updated is received through a preset API interface to ensure the security and consistency of the transmission of the update task to be updated, preventing the update task to be updated from being tampered with or leaked during the transmission process. The update task to be updated is assigned to the corresponding virtual isolation box and independent sandbox environment for isolated update to prevent the impact of errors or malicious behaviors during the update process on the original functions of the terminal, ensuring the stable operation of the intelligent self-service terminal.

[0012] Optionally, when detecting the connection permission of the external device, the update isolation module is used for:

[0013] Reading the digital certificate and hardware signature of the external device;

[0014] Analyze the digital certificate and the hardware feature code to determine whether the external device is a trusted device.

[0015] Through this solution, the isolation module updates by reading the digital certificate on the external device to ensure the authenticity and reliability of the identity information of the external device. By reading the digital certificate, it helps the isolation module to verify whether the external device belongs to the known and trusted ones. The isolation module updates by reading the hardware feature code of the external device, such as the serial number, MAC address, etc. By reading the information of the hardware feature code, the isolation module further confirms the identity information of the external device and ensures that the external device has not been tampered with. The isolation module analyzes the read digital certificate and hardware feature code, which helps to verify the external device. By comparing the digital certificate and the hardware feature code with the pre-stored authorized device information, it is determined whether the external device is authorized to perform the update operation. Based on the analysis result, the isolation module determines whether the external device is a trusted device, which helps to ensure the security of the update process and prevent potential threats from untrusted devices to the intelligent self-service terminal.

[0016] Optionally, after the update of the to-be-updated task is completed, a to-be-detected process is obtained and the isolation detection stage is entered. The independent sandbox environment is used to monitor the running data of the to-be-detected process in real time, determine the running fluency, and when the running fluency is higher than the preset fluency threshold, release the to-be-detected process so that the to-be-detected process enters the same running environment as the remaining existing processes.

[0017] Through this solution, the to-be-updated task is updated in the independent sandbox environment to ensure that the update process will not affect the original functions of the intelligent self-service terminal, allowing new to-be-updated tasks to proceed without interference, thereby avoiding potential conflicts and errors. The isolation module extracts the updated to-be-detected process from the independent sandbox environment to ensure the integrity of the to-be-updated task. The to-be-detected process enters the isolation detection stage to prevent the to-be-detected process from affecting the stable operation of the intelligent self-service terminal. The start of the isolation detection stage marks the preparation for the to-be-updated task to transition from the independent sandbox environment to the actual running environment. The independent sandbox environment monitors the running data of the to-be-detected process in real time, including resource usage, error logs, performance metrics, etc., which helps to evaluate the running status and performance of the to-be-detected process and ensure that the updated to-be-detected process can meet the expected performance standards. The running fluency ensures that the updated to-be-detected process provides a good user experience. Comparing with the preset fluency threshold helps to ensure that the updated to-be-detected process reaches the expected performance level. If the running fluency of the to-be-detected process is higher than the preset fluency threshold, it is determined that the updated to-be-detected process starts to provide services to users without having a negative impact on the stability of the intelligent self-service terminal.

[0018] Optionally, the intelligent self-service terminal further includes a data retrieval module, which is connected to the update isolation module;

[0019] After the process to be detected enters the isolation detection stage, the update isolation module is used to analyze the operation logic of the process to be detected, determine the data required for operation and the operation cycle, and send a data retrieval signal to the data retrieval module according to the data required for operation and the operation cycle;

[0020] After receiving the data retrieval signal, the data retrieval module analyzes the data retrieval signal, determines the data sending frequency according to the operation cycle, and sends the data required for operation to the update isolation module according to the data sending frequency.

[0021] Through this solution, the update isolation module analyzes the operation logic of the process to be detected, which helps to ensure that the process to be detected can run normally after the update and will not malfunction due to data problems. Based on the operation logic analysis, the update isolation module determines which data is required by the process to be detected during operation, ensuring that the process to be detected has sufficient data support during operation to complete the expected functions. The update isolation module analyzes the operation cycle of the process to be detected, which helps to plan the frequency and timing of data retrieval, ensuring that data is extracted at the correct time. The data retrieval signal contains the request information for data retrieval and the retrieval schedule, ensuring the timeliness and accuracy of data retrieval. Analyzing the data retrieval signal ensures that the data retrieval module correctly identifies and executes the data retrieval task. Determining the data sending frequency involves arranging the data sending time points according to the operation cycle of the process to be detected, ensuring that data can be sent at the correct time points. According to the determined data sending frequency, the data retrieval module extracts the data required for operation from the database and sends the data to the update isolation module through a secure data transmission channel, ensuring the security of data transmission and preventing the data from being intercepted or tampered with during transmission.

[0022] Optionally, the update isolation module further includes a data transmission channel, which is provided with an encryption protocol and is connected to the data retrieval module, and is used to receive the data required for operation and, after encrypting the data according to the encryption protocol, transmit the encrypted data required for operation to the independent sandbox environment of the update isolation module.

[0023] Through this solution, an encryption protocol is configured to ensure the security of the data transmission channel. The encryption protocol provides end-to-end encryption during the data transmission required for operation, preventing the data required for operation from being intercepted or tampered with during transmission, thereby protecting the security and integrity of the data required for operation. The data retrieval module encrypts the data before sending the data required for operation, enhancing the security of the data required for operation and preventing unauthorized third parties from accessing or modifying the data during transmission. The encrypted data required for operation is packaged into data packets to ensure the orderly transmission and easy management of the data required for operation. Each data packet contains encrypted data and necessary metadata, such as the data packet sequence number, data length, etc., which helps the receiving party to correctly unpack and process the data. The data packets are sent through the data transmission channel configured with the encryption protocol to ensure the security of the data packets during transmission and ensure the reliable transmission of the data packets, guaranteeing the integrity of the data packets even in the case of unstable network. The update isolation module receives the data packets through the data transmission channel configured with the encryption protocol. The receiving process includes performing an integrity check and verification on the received data packets to ensure that the data packets have not been tampered with during transmission, protecting the integrity and security of the data packets. The decryption process ensures that the data packets can be correctly used and processed after reaching the terminal. The independent sandbox environment ensures the isolation of the data required for operation, preventing the leakage of the data required for operation or potential impacts on other parts of the terminal.

[0024] Optionally, when the update isolation module identifies the identity information of the plugging / unplugging personnel, it is used to receive the NFC verification information, analyze the NFC verification information, determine whether there is an internal update permission for the work card. If there is, it obtains the face recognition information and fingerprint authentication information; analyzes the face recognition information and the fingerprint authentication information to determine whether to allow the update;

[0025] If there is no such internal update permission, a device ejection signal is sent to the pluggable function module to disconnect the connection of the external device.

[0026] With this solution, the update isolation module receives NFC authentication information through NFC technology, which helps authenticate the identity of the plugging and unplugging personnel and ensures that they hold valid identity authentication tools. The update isolation module analyzes the received NFC authentication information to determine whether the work permit has an internal update permission, which helps verify whether the plugging and unplugging personnel are authorized to perform the update operation and prevent unauthorized update attempts. If the analysis result shows that the work permit has an internal update permission, the update isolation module will allow the update operation to continue, ensuring that only authorized plugging and unplugging personnel can initiate the update process. The face recognition information of the plugging and unplugging personnel is obtained through the integrated face recognition device, providing an additional layer of identity authentication and increasing security. At the same time, the fingerprint authentication information of the plugging and unplugging personnel is obtained through the fingerprint scanner to further confirm their identity. The update isolation module analyzes the face recognition information and fingerprint authentication information, which helps verify the identity of the plugging and unplugging personnel and ensure the legality of the update operation. The update isolation module sends a device ejection signal to the pluggable function module, which helps prevent unauthorized device connections. After receiving the device ejection signal, the pluggable function module disconnects from the external device, preventing unauthorized update operations, ensuring the security of the intelligent self-service terminal, and preventing the risks of unauthorized device access and data leakage.

[0027] Optionally, the terminal further includes a key verification module connected to the pluggable function module, which is used to sense the connection state of the pluggable function module in real time, obtain and verify the key string, and when it is determined that the key string verification is incorrect, if the connection state indicates the presence of the external device, trigger the physical port to perform power-off protection.

[0028] With this solution, the update isolation module monitors the connection state of the pluggable function module in real time, responds promptly to the insertion or removal of the external device, helps to keep track of the security state of the external device in real time, and prevents unauthorized external device connections. Obtaining the key string helps verify the legality of the external device. Verifying the received key string ensures the authenticity, validity, and legality of the key string. The verification process helps prevent updated operations by forged or tampered external devices. Checking the connection state ensures that the external device is in a connected state when taking security measures. The power-off protection measure helps prevent unauthorized access to the external device and potential security threats.

[0029] Optionally, the terminal further includes an update recognition module connected to the update isolation module;

[0030] After detecting the connection permission of the external device and determining the existence of the link permission, the update isolation module is used to send the update task to the update recognition module;

[0031] After receiving the task to be updated, the update identification module parses the task to be updated to determine the encrypted watermark and digital signature of the task to be updated;

[0032] Retrieve the verification information of the remaining existing processes; according to the verification information, verify the encrypted watermark and the digital signature;

[0033] If both the encrypted watermark and the digital signature match the verification information, and the encrypted watermark and the digital signature only correspond to one of the existing processes, send a verification passed signal to the update isolation module.

[0034] Through this solution, the update isolation module sends the task to be updated to the update identification module to ensure the transmission of the task to be updated. The parsing process of the task to be updated helps to extract the encrypted watermark and digital signature in the task to be updated. The encrypted watermark and digital signature help to verify the integrity and source of the task to be updated. The update identification module retrieves the verification information of the remaining existing processes from the database, which helps to verify the legality of the task to be updated and ensure the security of the update operation. The verification process of the encrypted watermark and digital signature according to the retrieved verification information helps to confirm the integrity and source of the task to be updated and prevent the spread of malware. Determining whether the encrypted watermark and digital signature match the verification information and only corresponding to one of the existing processes ensures that the source of the task to be updated is trustworthy. The verification passed signal indicates that the task to be updated has passed the authentication and integrity check and continues with the update operation.

[0035] In a second aspect, the present application provides an intelligent self-service method with identity recognition function, the method includes:

[0036] Detect the connection permission of the external device;

[0037] Identify the identity information of the plugging and unplugging personnel;

[0038] After determining that the update is allowed, receive and download the task to be updated through a preset API interface.

[0039] Optionally, the method includes: after receiving the task to be updated, perform isolated update on the task to be updated.

[0040] Optionally, the detection of the connection permission of the external device includes:

[0041] Read the digital certificate and hardware feature code of the external device;

[0042] Analyze the digital certificate and hardware feature code to determine whether the external device is a trusted device.

[0043] Optionally, the method includes: real-time monitoring of the operation data of the process to be detected, determining the operation smoothness, and when the operation smoothness is higher than a preset smoothness threshold, releasing the process to be detected so that the process to be detected and the remaining existing processes enter the same operating environment.

[0044] Optionally, the method includes: analyzing the operation logic of the process to be detected, determining the data required for operation and the operation cycle; and determining the data sending frequency according to the operation cycle.

[0045] Optionally, the method includes: receiving the data required for operation and encrypting the data according to an encryption protocol.

[0046] Optionally, the method includes: receiving NFC verification information, analyzing the NFC verification information, determining whether there is an internal update permission for the work permit, and if so, obtaining face recognition information and fingerprint authentication information; analyzing the face recognition information and the fingerprint authentication information to determine whether to allow the update;

[0047] If there is no such internal update permission, a device ejection signal is sent to the pluggable function module to disconnect the connection of the external device.

[0048] Optionally, the method includes: obtaining and verifying a secret key string, and when it is determined that the verification of the secret key string is incorrect, if the connection state is that the external device exists, triggering the physical port for power-off protection.

[0049] Optionally, the method includes: detecting the connection permission of the external device, and after determining that there is a link permission, parsing the task to be updated to determine the encrypted watermark and digital signature of the task to be updated;

[0050] Retrieving the verification information of the remaining existing processes; verifying the encrypted watermark and the digital signature according to the verification information;

[0051] If both the encrypted watermark and the digital signature match the verification information, and the encrypted watermark and the digital signature only correspond to one of the existing processes, a verification passed signal is sent. Description of the Drawings

[0052] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the drawings in the following description are some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0053] Figure 1A schematic diagram of an application scenario provided by an embodiment of the present application;

[0054] Figure 2 A schematic structural diagram of an intelligent self-service terminal with an identity recognition function provided by an embodiment of the present application;

[0055] Figure 3 A schematic structural diagram of another intelligent self-service terminal with an identity recognition function provided by an embodiment of the present application;

[0056] Figure 4 A flowchart of an intelligent self-service method with an identity recognition function provided by an embodiment of the present application. Detailed implementation manners

[0057] To make the objectives, technical solutions, and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are some, but not all, of the embodiments of the present application. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present application without creative efforts shall fall within the protection scope of the present application.

[0058] In addition, the term "and / or" in this article is only a relational expression describing associated objects, indicating that three relationships may exist. For example, A and / or B may represent three cases: A exists alone, both A and B exist simultaneously, and B exists alone. In addition, the character " / " in this article generally represents an "or" relationship between the associated objects before and after, unless otherwise specified.

[0059] The embodiments of the present application will be further described in detail below with reference to the accompanying drawings of the specification.

[0060] With the increasing complexity of the functions of intelligent self-service terminals and the gradually diverse operating environments, in order to avoid online intrusion interfaces, some self-service terminals with high security requirements can usually only be updated offline. Therefore, how to avoid potential risks during the update process while ensuring the update efficiency and the security of the updated content has become the key to the development of technology.

[0061] Based on this, the present application provides an intelligent self-service method and terminal with identity recognition function, updating the isolation module and the pluggable function module; the updating isolation module is connected to the pluggable function module; the pluggable function module is used to connect to an external device, and after successful connection, send a connection success signal to the updating isolation module; after receiving the connection success signal, the updating isolation module is used to detect the connection permission of the external device and identify the identity information of the plugging / unplugging person, and after determining that the update is allowed, receive and download the task to be updated through a preset API interface. Through this solution, the connection between the updating isolation module and the pluggable function module ensures that the interaction between the external device and the internal device of the terminal can be carried out through a controlled interface, thereby reducing the risk of directly accessing the core device. The pluggable function module connects to an external device, such as a USB flash drive, enabling the intelligent self-service terminal to receive tasks to be updated from the outside. The connection of the external device is the starting point of the update process, providing a physical basis for task transmission and identity information verification. The connection success signal sent by the pluggable function module 202 is an important feedback mechanism, informing the updating isolation module to prepare to receive the task to be updated and perform identity information verification. Detecting the connection permission of the external device ensures that only authorized devices can perform updates, by checking the digital certificate and hardware signature of the external device to verify the legitimacy of the external device. The updating isolation module simultaneously identifying the identity information of the plugging / unplugging person is part of the multi-identity information authentication process, ensuring that only authorized plugging / unplugging personnel can perform the update operation, thereby improving the security of the update process. After confirming that the external device verification passes and the identity information of the plugging / unplugging person is recognized, the updating isolation module receiving and downloading the task to be updated through the preset API interface is the core of the update process, ensuring the transmission security and correctness of the task to be updated.

[0062] Figure 1 FIG. is a schematic diagram of an application scenario provided by the present application. In the self-service scenario, the method provided by the present application is applied.

[0063] Specifically, the method provided in this application is applied to any intelligent self-service terminal with identity recognition function. The service terminal includes an update isolation module and a pluggable function module. The update isolation module is connected to the pluggable function module, and the pluggable function module is connected to an external device, such as a USB flash drive, so that the intelligent self-service can receive update tasks from the external device. The connection of the external device is the starting point of the update process, providing a physical basis for task transmission and identity information verification. The update isolation module receives the update task and performs identity information verification. It detects the connection permission of the external device to ensure that only authorized devices can perform updates, and verifies the legitimacy of the external device by checking the digital certificate and hardware signature of the external device. The update isolation module also identifies the identity information of the plugging / unplugging personnel as part of the multi-factor identity authentication process to ensure that only authorized plugging / unplugging personnel can perform update operations, thereby improving the security of the update process. After confirming that the external device verification is passed and the identity information of the plugging / unplugging personnel is recognized, the update isolation module receives and downloads the update task through a preset API interface, which is the core of the update process, ensuring the transmission security and correctness of the update task. The specific implementation method can refer to the following embodiments.

[0064] Figure 2 FIG. 4 is a schematic structural diagram of an intelligent self-service terminal with identity recognition function provided in an embodiment of this application. The intelligent self-service terminal 200 with identity recognition function in this embodiment includes: an update isolation module 201 and a pluggable function module 202;

[0065] The update isolation module 201 is connected to the pluggable function module 202;

[0066] The pluggable function module 202 is used to connect to an external device, and after a successful connection, it sends a connection success signal to the update isolation module 201;

[0067] After receiving the connection success signal, the update isolation module 201 is used to detect the connection permission of the external device and identify the identity information of the plugging / unplugging personnel. After determining that the update is allowed, it receives and downloads the update task through a preset API interface.

[0068] The external device can be an external device such as a USB flash drive, a mobile hard disk, an SD card, etc. connected to the intelligent self-service terminal.

[0069] The connection success signal can be a notification signal sent by the pluggable function module after detecting a successful connection of the external device.

[0070] The connection permission can be a process of the intelligent self-service terminal performing identity information verification and authorization on the external device.

[0071] The plugging and unplugging personnel can be those responsible for inserting and removing external devices into and from the intelligent self-service terminal during the update process.

[0072] The identity information can be data such as the employee number, ID card information, fingerprint, face recognition information, etc. used to verify the identity of the plugging and unplugging personnel.

[0073] The preset API interface can be a software interface pre-configured on the intelligent self-service terminal for communicating and exchanging data with external devices, which is pre-stored in the server and called when in use.

[0074] The task to be updated can be software, application programs, or other data files that need to be installed on the intelligent self-service terminal.

[0075] Specifically, the update isolation module 201 is connected to the pluggable function module 202 to form an update channel. The plugging and unplugging personnel insert the external device into the pluggable function module 202. Once the external device is successfully connected to the pluggable function module 202, the pluggable function module 202 sends a connection success signal to the update isolation module 201, indicating readiness to receive the task to be updated. After receiving the connection success signal, the update isolation module 201 starts a detection mechanism to verify the connection permission of the external device. At the same time, the update isolation module 201 identifies the identity information of the plugging and unplugging personnel. After confirming that the external device passes the verification and the identity information of the plugging and unplugging personnel is recognized, the update isolation module 201 will allow the update process to continue. Once the update is allowed, the update isolation module 201 will communicate with the external device through the preset API interface, receive and download the task to be updated.

[0076] Through this solution, the connection between the update isolation module 201 and the pluggable function module 202 is updated to ensure that the interaction between the external device and the internal device of the terminal can be carried out through a controlled interface, thereby reducing the risk of directly accessing the core device. The pluggable function module 202 is connected to an external device, such as a USB flash drive, enabling the intelligent self-service terminal to receive update tasks from the outside. The connection of the external device is the starting point of the update process, providing a physical basis for task transmission and identity information verification. The connection success signal sent by the pluggable function module 202 is an important feedback mechanism, informing the update isolation module 201 to prepare to receive the update task to be updated and perform identity information verification. The connection permission of the external device is detected to ensure that only authorized devices can perform updates, and the legitimacy of the external device is verified by checking the digital certificate and hardware signature of the external device. The update isolation module 201 simultaneously identifies the identity information of the plugging and unplugging personnel as part of the multi-identity information authentication process, ensuring that only authorized plugging and unplugging personnel can perform update operations, thereby improving the security of the update process. After confirming that the external device verification is passed and the identity information of the plugging and unplugging personnel is recognized, the update isolation module 201 receives and downloads the update task to be updated through a preset API interface, which is the core of the update process, ensuring the transmission security and correctness of the update task to be updated.

[0077] In some embodiments, the update isolation module 201 includes a number of virtual isolation boxes, and each virtual isolation box has an independent sandbox environment built-in, which is used to isolate and update the update task after receiving the update task to be updated.

[0078] The virtual isolation box can be an independent execution space for isolating and executing the update task to be updated.

[0079] The independent sandbox environment can be a secure execution environment inside the virtual isolation box, with strict permission control and resource access restrictions.

[0080] Specifically, the update isolation module 201 first creates a number of virtual isolation boxes. Inside each virtual isolation box, the update isolation module 201 configures an independent sandbox environment. The update isolation module 201 receives the update task to be updated through a preset API interface. The update task to be updated is assigned to the corresponding virtual isolation box and independent sandbox environment for isolated update.

[0081] Through this solution, by creating several virtual isolation boxes, the update isolation module 201 provides an independent execution space for each task to be updated. This ensures that even if there are problems with the tasks to be updated, it will not affect other parts of the intelligent self-service terminal, thereby protecting the stability of the intelligent self-service terminal and the security of user data. An independent sandbox environment is configured inside each virtual isolation box to limit the permissions and resource access of the tasks to be updated. The independent sandbox environment prevents potential threats of the tasks to be updated to the intelligent self-service terminal, such as the execution of malicious code or data leakage. The tasks to be updated are received through a preset API interface to ensure the security and consistency of the transmission of the tasks to be updated, and prevent the tasks to be updated from being tampered with or leaked during the transmission process. The tasks to be updated are assigned to the corresponding virtual isolation boxes and independent sandbox environments for isolated updates to prevent the impact of errors or malicious behaviors during the update process on the original functions of the terminal, and ensure the stable operation of the intelligent self-service terminal.

[0082] In some embodiments, the update isolation module 201 detects the connection permission of an external device, including: reading the digital certificate and hardware signature of the external device; analyzing the digital certificate and hardware signature to determine whether the external device is a trusted device.

[0083] A digital certificate can be an electronic document used to verify digital identity.

[0084] The hardware signature can be a unique identifier embedded in the hardware device.

[0085] A trusted device can be a device that has passed identity information verification and authorization and is allowed to connect and operate.

[0086] Specifically, the update isolation module 201 reads the digital certificate and hardware signature through the external device. Analyze whether the signature of the digital certificate is correct, whether the digital certificate is within the validity period, whether the hardware signature matches the signature in the pre-stored authorized device list, and whether the hardware signature is consistent with the secure boot characteristics of the external device. Based on the analysis results, the update isolation module 201 determines whether the external device is a trusted device.

[0087] Through this solution, the update isolation module 201 reads the digital certificate on the external device to ensure the authenticity and reliability of the identity information of the external device. By reading the digital certificate, it helps the update isolation module 201 verify whether the external device belongs to the known and trusted ones. The update isolation module 201 reads the hardware feature codes of the external device, such as the serial number, MAC address, etc. By reading the information of the hardware feature codes, the update isolation module 201 further confirms the identity information of the external device and ensures that the external device has not been tampered with. The update isolation module 201 analyzes the read digital certificate and hardware feature codes, which helps to verify the external device. By comparing the digital certificate and hardware feature codes with the pre-stored authorized device information, it is determined whether the external device is authorized to perform the update operation. Based on the analysis results, the update isolation module 201 determines whether the external device is a trusted device, which helps to ensure the security of the update process and prevent potential threats from untrusted devices to the intelligent self-service terminal.

[0088] In some embodiments, after the update of the task to be updated is completed, a process to be detected is obtained and the isolation detection phase is entered. The independent sandbox environment is used to monitor the running data of the process to be detected in real time, determine the running fluency, and when the running fluency is higher than the preset fluency threshold, release the process to be detected so that the process to be detected and the remaining existing processes enter the same running environment.

[0089] The process to be detected can be a process prepared for testing and verification in the update isolation module 201.

[0090] The isolation detection phase can be a phase of testing the process to be detected in an independent and controlled environment.

[0091] The running data can be all data such as resource usage, error logs, performance metrics, etc. generated during the execution of the process to be detected.

[0092] The running fluency can be an indicator to measure the performance of the process to be detected.

[0093] The preset fluency threshold can be a performance standard preset for evaluating whether the process to be detected reaches the expected performance level, which is pre-stored in the server and called when in use.

[0094] The remaining existing processes can be other application programs and software components running on the intelligent self-service terminal.

[0095] The running environment can be a platform on which all software components such as operating devices, hardware resources, and network connections on the intelligent self-service terminal run.

[0096] Specifically, the task to be updated is updated in an independent sandbox environment. The update isolation module 201 extracts the updated process to be detected from the independent sandbox environment, and makes the process to be detected enter the isolation detection stage. The independent sandbox environment monitors in real time the running data of the process to be detected, such as resource usage, error logs, performance metrics, etc. By analyzing the real-time monitored running data, the update isolation module 201 evaluates the running fluency of the process to be detected. A fluency threshold is preset according to the performance requirements of the intelligent self-service terminal and the user experience standard. The update isolation module 201 compares the running fluency of the process to be detected with the preset fluency threshold. If the running fluency of the process to be detected is higher than the preset fluency threshold, the update isolation module 201 will release the process to be detected, and make the process to be detected enter the same running environment as other existing processes of the intelligent self-service terminal.

[0097] Through this solution, the task to be updated is updated in an independent sandbox environment, ensuring that the update process will not affect the original functions of the intelligent self-service terminal, allowing new tasks to be updated without interference, thus avoiding potential conflicts and errors. The update isolation module 201 extracts the updated process to be detected from the independent sandbox environment, ensuring the integrity of the task to be updated. The process to be detected enters the isolation detection stage, preventing the process to be detected from affecting the stable operation of the intelligent self-service terminal. The start of the isolation detection stage marks the preparation for the task to be updated to transition from the independent sandbox environment to the actual running environment. The independent sandbox environment monitors in real time the running data of the process to be detected, including resource usage, error logs, performance metrics, etc., which helps to evaluate the running state and performance of the process to be detected, ensuring that the updated process to be detected can meet the expected performance standards. The running fluency ensures that the updated process to be detected provides a good user experience. Comparing the preset fluency threshold helps to ensure that the updated process to be detected reaches the expected performance level. If the running fluency of the process to be detected is higher than the preset fluency threshold, it is determined that the updated process to be detected starts to provide services to users without negatively affecting the stability of the intelligent self-service terminal.

[0098] In addition to the above modules, it also includes the following modules as Figure 3 shown:

[0099] In some embodiments, the intelligent self-service terminal 200 with identity recognition function further includes a data retrieval module 203, which is connected to the update isolation module 201; after the process to be detected enters the isolation detection stage, the update isolation module 201 is used to analyze the operation logic of the process to be detected, determine the data required for operation and the operation cycle, and send a data retrieval signal to the data retrieval module 203 according to the data required for operation and the operation cycle; after receiving the data retrieval signal, the data retrieval module 203 analyzes the data retrieval signal, determines the data sending frequency according to the operation cycle, and sends the data required for operation to the update isolation module 201 according to the data sending frequency.

[0100] The operation logic can be the operation process and rules during the execution of the process to be detected.

[0101] The data required for operation can be the data that the process to be detected needs to access and process during the execution process.

[0102] The operation cycle can be a fixed time interval or a trigger condition for the process to be detected to execute operations.

[0103] The data retrieval signal can be a request sent by the data required for operation and the operation cycle, indicating the data retrieved by the data retrieval module 203 from the data source database.

[0104] The data sending frequency can be the time interval for data to be sent from the database to the target location.

[0105] Specifically, the update isolation module 201 analyzes the operation logic of the process to be detected, and determines the data required for operation such as the configuration file, user data, and database records during the execution of the process to be detected. The update isolation module 201 analyzes the operation cycle of the process to be detected, that is, the time interval or trigger condition for the process to run. According to the determined data required for operation and the operation cycle, a data retrieval signal is sent to the data retrieval module 203. After receiving the data retrieval signal, the data retrieval signal is analyzed to extract detailed information such as the data type, data volume, and retrieval schedule of the data retrieval signal. According to the operation cycle, the requirements for the type, quantity, and update frequency of data during each operation cycle of the process to be detected are analyzed. Based on the operation cycle and data requirements, the data sending frequency is determined. According to the determined data sending frequency, the data retrieval module 203 extracts the data required for operation from the database and sends the data to the update isolation module 201 through a secure data transmission channel.

[0106] Through this solution, the update isolation module 201 analyzes the running logic of the process to be detected, which helps to ensure that the process to be detected can run properly after the update and will not malfunction due to data problems. Based on the analysis of the running logic, the update isolation module 201 determines which data is required by the process to be detected during the running process, ensuring that there is sufficient data support for the process to be detected to complete the expected functions. The update isolation module 201 analyzes the running cycle of the process to be detected, which helps to plan the frequency and timing of data retrieval, ensuring that data is extracted at the correct time. The data retrieval signal includes the request information for data retrieval and the retrieval schedule, ensuring the timeliness and accuracy of data retrieval. Parsing the data retrieval signal ensures that the data retrieval module 203 correctly identifies and executes the data retrieval task. Determining the data sending frequency involves arranging the data sending time points according to the running cycle of the process to be detected, ensuring that data can be sent at the correct time points. According to the determined data sending frequency, the data retrieval module 203 extracts the data required for running from the database and sends the data to the update isolation module 201 through a secure data transmission channel, ensuring the security of data transmission and preventing the data from being intercepted or tampered with during the transmission process.

[0107] In some embodiments, the update isolation module 201 further includes a data transmission channel. An encryption protocol is provided in the data transmission channel, which is connected to the data retrieval module 203 and is used to receive the data required for running and, after encrypting the data according to the encryption protocol, transmit the encrypted data required for running to the independent sandbox environment of the update isolation module 201.

[0108] The data transmission channel can be a physical or virtual channel for transmitting data.

[0109] The encryption protocol can be a set of rules and standards for ensuring data security during data transmission.

[0110] Specifically, the data transmission channel is configured with a TLS (Transport Layer Security Protocol) or SSL (Secure Sockets Layer Protocol) encryption protocol. Before sending the data required for running, the data retrieval module 203 encrypts the data required for running using the encryption protocol. The encrypted data required for running is packaged into data packets. The data retrieval module 203 sends the data packets to the update isolation module 201 through the data transmission channel configured with the encryption protocol. The update isolation module 201 receives the data packets through the data transmission channel configured with the encryption protocol. The update isolation module 201 decrypts the received data packets to restore the original data. The decrypted data is stored in the independent sandbox environment of the update isolation module 201.

[0111] Through this solution, an encryption protocol is configured to ensure the security of the data transmission channel. The encryption protocol provides end-to-end encryption during the data transmission required for operation, preventing the data required for operation from being intercepted or tampered with during transmission, thereby protecting the security and integrity of the data required for operation. The data retrieval module 203 encrypts the data required for operation before sending it, enhancing the security of the data required for operation and preventing unauthorized third parties from accessing or modifying the data during transmission. The encrypted data required for operation is packaged into data packets to ensure the orderly transmission and easy management of the data required for operation. Each data packet contains encrypted data and necessary metadata, such as the data packet sequence number, data length, etc., which helps the receiving party to correctly unpack and process the data. The data packets are sent through the data transmission channel configured with the encryption protocol to ensure the security of the data packets during transmission and ensure the reliable transmission of the data packets, even ensuring the integrity of the data packets in the case of unstable network. The update isolation module 201 receives the data packets through the data transmission channel configured with the encryption protocol. The receiving process includes performing integrity checks and verification on the received data packets to ensure that the data packets have not been tampered with during transmission, protecting the integrity and security of the data packets. The decryption process ensures that the data packets can be correctly used and processed after reaching the terminal. The independent sandbox environment ensures the isolation of the data required for operation, preventing the leakage of the data required for operation or potential impacts on other parts of the terminal.

[0112] In some embodiments, when the update isolation module 201 identifies the identity information of the plugging and unplugging personnel, it is used to receive NFC verification information, analyze the NFC verification information, determine whether there is an internal update permission for the work card. If there is, it obtains the face recognition information and fingerprint authentication information; analyzes the face recognition information and fingerprint authentication information to determine whether to allow the update; if there is no internal update permission, it sends a device ejection signal to the pluggable function module 202 to disconnect the connection of the external device.

[0113] The NFC verification information can be identity verification information transmitted through NFC (Near Field Communication) technology.

[0114] The internal update permission can be the permission authorized to the plugging and unplugging personnel for update.

[0115] The face recognition information can be facial feature data such as facial contours, eyes, nose, mouth, etc. collected by a face recognition device.

[0116] The fingerprint authentication information can be fingerprint feature data such as fingerprint ridges, valleys, endpoints, bifurcation points, etc. collected by fingerprint recognition technology.

[0117] The device ejection signal can be a signal sent to the external device, instructing the external device to disconnect the connection.

[0118] Specifically, the update isolation module 201 receives NFC authentication information through NFC (Near Field Communication) technology. The update isolation module 201 parses the received NFC authentication information. The update isolation module 201 verifies the validity of the NFC authentication information. After parsing and verifying the NFC authentication information, the update isolation module 201 checks whether there is an internal update permission in the work ID card. The face recognition information of the plugging / unplugging personnel is obtained through the integrated face recognition device. Facial features are extracted from the face recognition information and converted into a face template. The extracted face template is compared with the face templates of the authorized users stored. The fingerprint authentication information of the plugging / unplugging personnel is obtained through the fingerprint scanner. Fingerprint features are extracted from the collected fingerprint authentication information and converted into a fingerprint template. The extracted fingerprint template is compared with the fingerprint templates of the authorized users stored. The update isolation module 201 synthesizes the comparison results of the face recognition information and the fingerprint authentication information to determine whether to allow the update. If the face recognition information and the fingerprint authentication information fail to pass the verification, the update isolation module 201 will send a device ejection signal to the pluggable function module 202. After receiving the device ejection signal, the pluggable function module 202 disconnects the connection with the external device.

[0119] Through this solution, the update isolation module 201 receives NFC authentication information through NFC technology, which helps authenticate the identity of the plugging / unplugging personnel and ensures that the plugging / unplugging personnel hold valid identity verification tools. The update isolation module 201 analyzes the received NFC authentication information to determine whether there is an internal update permission in the work ID card, which helps verify whether the plugging / unplugging personnel have the right to perform the update operation and prevent unauthorized update attempts. If the analysis result shows that there is an internal update permission in the work ID card, the update isolation module 201 will allow the update operation to continue, ensuring that only authorized plugging / unplugging personnel can start the update process. The face recognition information of the plugging / unplugging personnel is obtained through the integrated face recognition device, providing an additional layer of identity verification and increasing security. At the same time, the fingerprint authentication information of the plugging / unplugging personnel is obtained through the fingerprint scanner to further confirm the identity of the plugging / unplugging personnel. The update isolation module 201 analyzes the face recognition information and the fingerprint authentication information, which helps verify the identity of the plugging / unplugging personnel and ensure the legality of the update operation. The update isolation module 201 sends a device ejection signal to the pluggable function module 202, which helps prevent unauthorized device connections. After receiving the device ejection signal, the pluggable function module 202 disconnects the connection with the external device, preventing unauthorized update operations, ensuring the security of the intelligent self-service terminal, and preventing the risks of unauthorized device access and data leakage.

[0120] In some embodiments, the intelligent self-service terminal 200 with identity recognition function further includes a key verification module 204, which is connected to the pluggable function module 202 and is used to sense the connection status of the pluggable function module 202 in real time, obtain and verify the key string. When it is determined that the key string verification is incorrect, if the connection status indicates the presence of an external device, the physical port is triggered to perform power-off protection.

[0121] The connection status can be the physical connection status between devices and can be expressed as "connected" or "disconnected".

[0122] The key string can be a string of characters or numbers used for identity authentication and encrypted communication.

[0123] The physical port can be a physical interface on the device for connecting external devices.

[0124] Specifically, the update isolation module 201 continuously monitors the connection status of the pluggable function module 202 through a hardware interface or a software interface. When an external device connection is detected, the update isolation module 201 obtains the key string from the external device. The received key string is compared and verified with the pre-stored key string. If the key string verification is incorrect, it is confirmed whether there is an external device connection currently. If so, the update isolation module 201 sends a power-off signal to the physical port to trigger the power-off protection mechanism.

[0125] Through this solution, the update isolation module 201 monitors the connection status of the pluggable function module 202 in real time, responds promptly to the insertion or removal of external devices, helps to grasp the security status of external devices in real time, and prevents unauthorized external devices from connecting. Obtaining the key string helps to verify the legitimacy of external devices. Verifying the received key string ensures the authenticity, validity, and legitimacy of the key string. The verification process helps to prevent updated operations by forged or tampered external devices. Checking the connection status ensures that the external device is in a connected state when taking security measures. The power-off protection measure helps to prevent unauthorized access to external devices and potential security threats.

[0126] In some embodiments, the intelligent self-service terminal 200 with identity recognition function further includes an update recognition module 205, which is connected to the update isolation module 201. After detecting the connection permission of the external device and determining that there is a connection permission, the update isolation module 201 is configured to send the task to be updated to the update recognition module 205. After receiving the task to be updated, the update recognition module 205 parses the task to be updated to determine the encrypted watermark and digital signature of the task to be updated, retrieves the verification information of the remaining existing processes, verifies the encrypted watermark and digital signature according to the verification information. If both the encrypted watermark and the digital signature match the verification information and the encrypted watermark and the digital signature only correspond to one of the existing processes, a verification passed signal is sent to the update isolation module 201.

[0127] The encrypted watermark can be a digital mark for identity verification.

[0128] The digital signature can be a technology for verifying the integrity of data.

[0129] The verification information can be information for verifying the identity and integrity of the task to be updated.

[0130] The existing processes can be application programs, services, or other software components that are already running on the intelligent self-service terminal.

[0131] The verification passed signal can be a signal sent to the update isolation module, indicating that the task to be updated has passed the identity verification and integrity check.

[0132] Specifically, the update isolation module 201 sends the task to be updated to the update recognition module 205. After receiving the task to be updated, the update recognition module 205 parses the task to be updated. After parsing the task to be updated, the update recognition module 205 determines the encrypted watermark and digital signature in the task to be updated, retrieves the verification information of the remaining existing processes from the database or others, compares the encrypted watermark in the task to be updated with the encrypted watermark in the verification information according to the retrieved verification information, decrypts the digital signature in the task to be updated using the public key in the verification information. After completing the verification of the encrypted watermark and digital signature, it is confirmed that both the encrypted watermark and the digital signature match the verification information. The update recognition module 205 further confirms that the encrypted watermark and the digital signature only correspond to one of the existing processes. If both the encrypted watermark and the digital signature match the verification information and only correspond to one existing process, the update recognition module 205 generates a verification passed signal and sends the generated verification passed signal to the update isolation module 201.

[0133] Through this solution, the update isolation module 201 sends the task to be updated to the update identification module 205 to ensure the transmission of the task to be updated. The parsing process of the task to be updated helps to extract the encrypted watermark and digital signature in the task to be updated. The encrypted watermark and digital signature help to verify the integrity and source of the task to be updated. The update identification module 205 retrieves the verification information of the remaining existing processes from the database, which helps to verify the legitimacy of the task to be updated and ensure the security of the update operation. According to the retrieved verification information, the verification process of the encrypted watermark and digital signature helps to confirm the integrity and source of the task to be updated and prevent the spread of malware. Determine whether the encrypted watermark and digital signature match the verification information and correspond to only one of the existing processes to ensure that the source of the task to be updated is trustworthy. The verification passed signal indicates that the task to be updated has passed the authentication and integrity check and continues with the update operation.

[0134] Figure 4 The flowchart of an intelligent self-service method with identity recognition function provided by an embodiment of the present application. The method of this embodiment can be applied to the server in the above scenario. As Figure 4 shown, the method includes:

[0135] S301. Detect the connection permission of the external device;

[0136] S302. Identify the identity information of the plugging and unplugging person;

[0137] S303. After determining that the update is allowed, receive and download the task to be updated through a preset API interface.

[0138] Optionally, the method includes: after receiving the task to be updated, performing isolated update on the task to be updated.

[0139] Optionally, the detecting the connection permission of the external device includes: when the update isolation module detects the connection permission of the external device, it is used for:

[0140] Reading the digital certificate and hardware feature code of the external device;

[0141] Analyzing the digital certificate and hardware feature code to determine whether the external device is a trusted device.

[0142] Optionally, the method includes: real-time monitoring the running data of the process to be detected, determining the running fluency, and when the running fluency is higher than a preset fluency threshold, releasing the process to be detected so that the process to be detected enters the same running environment as the remaining existing processes.

[0143] Optionally, the method includes: analyzing the running logic of the process to be detected, determining the data required for running and the running cycle, and sending a data retrieval signal to the data retrieval module according to the data required for running and the running cycle;

[0144] After receiving the data retrieval signal, the data retrieval module parses the data retrieval signal, determines the data sending frequency according to the running cycle, and sends the data required for running to the update isolation module according to the data sending frequency.

[0145] Optionally, the method includes: receiving the data required for running, encrypting the data according to the encryption protocol, and then transmitting the encrypted data required for running to the independent sandbox environment of the update isolation module.

[0146] Optionally, the method includes: receiving NFC verification information, analyzing the NFC verification information, determining whether there is an internal update permission for the work card, and if so, obtaining face recognition information and fingerprint authentication information; analyzing the face recognition information and the fingerprint authentication information to determine whether to allow the update;

[0147] If there is no such internal update permission, a device ejection signal is sent to the pluggable function module to disconnect the connection of the external device.

[0148] Optionally, the method includes: continuously sensing the connection state of the pluggable function module, obtaining and verifying the key string, and when it is determined that the key string verification is incorrect, if the connection state indicates the presence of the external device, triggering the physical port for power-off protection.

[0149] Optionally, the method includes: detecting the connection permission of the external device, and after determining the existence of the link permission, sending the update task to the update recognition module;

[0150] After receiving the update task, the update recognition module parses the update task to determine the encrypted watermark and digital signature of the update task;

[0151] Retrieving the verification information of the remaining existing processes; verifying the encrypted watermark and the digital signature according to the verification information;

[0152] If both the encrypted watermark and the digital signature match the verification information, and the encrypted watermark and the digital signature only correspond to one of the existing processes, a verification passed signal is sent to the update isolation module.

[0153] The method of this embodiment can be used to execute the method of any of the above embodiments, and its implementation principle and technical effects are similar, which will not be elaborated here.

Claims

1. An intelligent self-service terminal with an identity recognition function, characterized in that, It includes an update isolation module and a pluggable function module; The update isolation module is connected to the pluggable function module; The pluggable function module is used to connect to an external device, and after successful connection, send a connection success signal to the update isolation module; After receiving the connection success signal, the update isolation module is used to detect the connection permission of the external device and identify the identity information of the plugging / unplugging personnel. After determining that the update is allowed, it receives and downloads the task to be updated through a preset API interface; The update isolation module includes several virtual isolation boxes, and each virtual isolation box has an independent sandbox environment, which is used to isolate and update the task to be updated after receiving the task to be updated; After the update of the task to be updated is completed, a process to be detected is obtained and enters the isolation detection stage. The independent sandbox environment is used to monitor the running data of the process to be detected in real time, determine the running fluency, and when the running fluency is higher than the preset fluency threshold, release the process to be detected so that the process to be detected and the remaining existing processes enter the same running environment; The intelligent self-service terminal further includes a data retrieval module, which is connected to the update isolation module; After the process to be detected enters the isolation detection stage, the update isolation module is used to analyze the running logic of the process to be detected, determine the data required for running and the running cycle, and send a data retrieval signal to the data retrieval module according to the data required for running and the running cycle; After receiving the data retrieval signal, the data retrieval module parses the data retrieval signal, determines the data sending frequency according to the running cycle, and sends the data required for running to the update isolation module according to the data sending frequency.

2. The terminal according to claim 1, wherein When the update isolation module detects the connection permission of the external device, it is used for: Reading the digital certificate and hardware feature code of the external device; Analyzing the digital certificate and hardware feature code to determine whether the external device is a trusted device.

3. The terminal according to claim 1, wherein The update isolation module further includes a data transmission channel, which is provided with an encryption protocol and is connected to the data retrieval module. It is used to receive the data required for running, and after encrypting the data according to the encryption protocol, transmit the encrypted data required for running to the independent sandbox environment of the update isolation module.

4. The terminal according to claim 1, wherein When the update isolation module identifies the identity information of the plugging / unplugging personnel, it is used to receive NFC verification information, analyze the NFC verification information, determine whether there is an internal update permission for the work card. If so, obtain the face recognition information and fingerprint authentication information; analyze the face recognition information and the fingerprint authentication information to determine whether the update is allowed; If the internal update permission does not exist, send a device ejection signal to the pluggable function module to disconnect the connection of the external device.

5. The terminal according to claim 1, wherein The terminal further includes a key verification module, which is connected to the pluggable function module, and is used to sense the connection state of the pluggable function module in real time, obtain and verify the key string. When it is determined that the key string verification is incorrect, if the connection state is that the external device exists, trigger the physical port to perform power-off protection.

6. The terminal according to claim 1, characterized in that The terminal further includes an update recognition module, which is connected to the update isolation module; After detecting the connection permission of the external device and determining that there is a link permission, the update isolation module is configured to send the task to be updated to the update recognition module; After receiving the task to be updated, the update recognition module parses the task to be updated to determine the encrypted watermark and digital signature of the task to be updated; Retrieve the verification information of the remaining existing processes; verify the encrypted watermark and the digital signature according to the verification information; If both the encrypted watermark and the digital signature match the verification information, and the encrypted watermark and the digital signature only correspond to one of the existing processes, a verification passed signal is sent to the update isolation module.

7. An intelligent self-service method with an identity recognition function, characterized in that, Applied to the terminal according to any one of claims 1-6, including: Detect the connection permission of the external device; Identify the identity information of the plugging and unplugging personnel; After determining that the update is allowed, receive and download the task to be updated through a preset API interface.

Images