Iris key plug-in and identity verification method based on iris key plug-in

Through the design of the iris key plug-in, iris data is collected and driver packages are generated by shooting first and then access, which solves the problem of operation difficulty and identification accuracy caused by the poor position of the iris acquisition module, and achieves efficient and secure identity verification.

CN120337199APending Publication Date: 2025-07-18ZHENGHE ZHILIAN TECHNOLOGY (GUANGDONG) CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202510333017.7
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-03-20
Publication Date
2025-07-18

AI Technical Summary

Technical Problem

When the existing iris acquisition module is connected to the device, due to poor position or inability to rotate and adjust the angle, the user's operation difficulty increases, which affects the recognition accuracy and efficiency, especially in the case of unsatisfactory lighting conditions.

Method used

A iris key plug-in is designed, including an iris acquisition module, a data processing module, a storage module and an interface module. Iris data is collected by shooting first and then accessing and generating a driver package containing iris characteristic information. The live detection module is used to ensure data security and authenticate through multiple data packets.

Benefits of technology

It reduces the difficulty of user operations, improves the efficiency and accuracy of iris recognition, and enhances the security and robustness of identity verification.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120337199A_ABST
    Figure CN120337199A_ABST
Patent Text Reader

Abstract

The invention provides an iris key plug-in and an identity verification method based on the iris key plug-in, and the iris key plug-in comprises an iris collection module which is used for collecting iris data; the data processing module is connected with the iris acquisition module and is used for generating a corresponding data packet according to the iris data; the data packet is a driving packet which is generated according to the iris data and contains iris feature information; the storage module is connected with the data processing module and is used for storing the data packet in a time-limited manner; the interface module is connected with the storage module and is used for accessing any target device; when the interface module accesses any target device, the data processing module transmits the data packet stored in the storage module to the connected device for identity verification. According to the method and the device, the iris key plug-in which acquires the iris data is inserted into the target equipment in a mode of first shooting and then accessing, and an original traditional plug-in use mode of first accessing and then shooting is replaced, so that the operation difficulty of a user can be reduced, and the use efficiency is improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the technical field of iris, and particularly to an iris key plug-in and an authentication method based on the iris key plug-in. Background Art

[0002] In modern biometric technologies, iris recognition is widely used in authentication due to its high uniqueness and non-forgeability. Generally, a module with iris acquisition function can be activated and perform iris acquisition after being connected to a computer, thus achieving efficient and secure authentication. However, there are some challenges and inconveniences in practical applications.

[0003] Specifically, when a user connects a plug-in with iris acquisition function (such as a USB key or a dedicated iris scanning device) to a computer, it is difficult to align with the user's eyes for shooting due to poor plug-in connection position or inability of the iris acquisition module to rotate and adjust the angle. This limitation in design makes it necessary for the user to laboriously adjust the posture or the position of the device during use to ensure that the iris acquisition module can correctly capture a clear iris image. This not only increases the operation difficulty for the user but also may affect the accuracy and efficiency of iris recognition, especially in situations with unfavorable lighting conditions. Summary of the Invention

[0004] Embodiments of the present invention provide an iris key plug-in and an authentication method based on the iris key plug-in to solve the problems existing in the related technologies. The technical solutions are as follows:

[0005] In a first aspect, embodiments of the present invention provide an iris key plug-in, including:

[0006] An iris acquisition module for acquiring iris data;

[0007] A data processing module connected to the iris acquisition module for generating a corresponding data packet according to the iris data; the data packet is a driver packet containing iris feature information generated according to the iris data;

[0008] A storage module connected to the data processing module for storing the data packet for a limited time;

[0009] An interface module connected to the storage module for accessing any target device;

[0010] When the interface module accesses any target device, the data processing module transfers the data packet stored in the storage module to the connected device for authentication.

[0011] In one implementation, the storage module stores the data packet for a limited time, records the storage duration of the data packet, and automatically deletes the data packet when the storage duration exceeds the set value.

[0012] In one embodiment, it further includes:

[0013] A live detection module, connected to the iris acquisition module, is configured to perform a live state detection on the iris data acquired by the iris acquisition module, and feedback a passing message to the data processing module in the case of passing the live state detection, so that the data processing module generates a corresponding data packet according to the iris data only after receiving the feedback passing message.

[0014] In one embodiment, the data processing module extracts the iris feature information of the iris data, and embeds the encrypted iris feature information into the driver package to obtain a data packet.

[0015] In one embodiment, the driver package is formed by packaging multiple versions of driver programs, and the multiple versions of driver programs are used to match the installation requirements of different device systems.

[0016] In one embodiment, the data processing module constructs a corresponding iris model for the acquired iris data, randomly selects the feature information of multiple local regions in the iris model, and generates multiple data packets according to the feature information of the multiple local regions. Each data packet contains the features of one or more local regions.

[0017] In a second aspect, an embodiment of the present invention provides an authentication method based on an iris key plugin, including:

[0018] When detecting the access of the iris key plugin, obtaining the data packet transmitted by the iris key plugin; wherein the data packet is a driver package containing iris feature information generated by the iris key plugin by pre-acquiring iris data before access.

[0019] Parsing the data packet to obtain the iris feature information and the corresponding driver program, using the iris feature information for authentication, and installing the driver program in the case of successful authentication to obtain the access permission of the iris key plugin.

[0020] In one embodiment, it further includes:

[0021] When receiving multiple data packets, during the authentication process, use the multiple data packets for matching in sequence. If a specified number of data packets match successfully, it is considered that the authentication is passed.

[0022] In a third aspect, an embodiment of the present invention provides an electronic device, which includes: a memory and a processor. Wherein, the memory and the processor communicate with each other through an internal connection path. The memory is used to store instructions, and the processor is used to execute the instructions stored in the memory. And when the processor executes the instructions stored in the memory, the processor executes the method in any one of the above aspects.

[0023] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium storing a computer program, and when the computer program runs on a computer, the methods in any of the above aspects are executed.

[0024] The advantages or beneficial effects in the above technical solutions at least include:

[0025] The present invention allows the iris key plugin that has already collected iris data to be inserted into the target device by the method of shooting first and then accessing, so that the target device can perform identity authentication and driver installation through the iris feature information in the iris key plugin, replacing the original traditional plugin usage method of accessing first and then shooting, which can reduce the operation difficulty of users and improve the usage efficiency.

[0026] The above summary is only for the purpose of the specification and is not intended to be limiting in any way. In addition to the illustrative aspects, embodiments and features described above, further aspects, embodiments and features of the present invention will be readily apparent by reference to the drawings and the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In the drawings, unless otherwise specified, the same reference numerals throughout the several views denote the same or similar components or elements. These drawings are not necessarily drawn to scale. It should be understood that these drawings only depict some embodiments disclosed according to the present invention and should not be regarded as limiting the scope of the present invention.

[0028] Figure 1 It is a schematic diagram of the modules of the iris key plugin of the present invention;

[0029] Figure 2 It is a schematic flowchart of the identity authentication method based on the iris key plugin of the present invention;

[0030] Figure 3 It is a structural block diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0031] In the following, only some exemplary embodiments are simply described. As those skilled in the art can recognize, the described embodiments can be modified in various different ways without departing from the spirit or scope of the present invention. Therefore, the drawings and the description are considered to be exemplary in nature and not restrictive.

[0032] Embodiment 1

[0033] In modern biometric technologies, iris recognition is widely used in authentication due to its high uniqueness and non-forgeability. Usually, a module with iris acquisition function can be activated and perform iris acquisition after being connected to a computer, thus achieving efficient and secure authentication. However, there are some challenges and inconveniences in practical applications.

[0034] Specifically, when a user connects a plug-in with iris acquisition function (such as a USB key or a dedicated iris scanning device) to a computer, it is difficult to aim at the user's eyes for shooting due to the poor connection position of the plug-in or the inability of the iris acquisition module to rotate and adjust the angle. This limitation in design makes it necessary for the user to laboriously adjust their posture or the position of the device during use to ensure that the iris acquisition module can correctly capture a clear iris image. This not only increases the operation difficulty for the user but also may affect the accuracy and efficiency of iris recognition, especially in situations with unfavorable lighting conditions or when the user wears glasses.

[0035] To overcome these inconveniences and improve the user experience and system usability, it is necessary to improve the existing iris acquisition module and its installation method. Currently, the improvement is to structurally improve the iris acquisition module to add an adjustable angle function, but this improvement method requires a redesign of the hardware structure and incurs a relatively high improvement cost.

[0036] To solve the above problems, this embodiment provides an iris key plug-in, which is connected to a target device by the method of shooting first and then connecting, improving the user experience and iris recognition efficiency.

[0037] As Figure 1 shown, the iris key plug-in mainly includes an iris acquisition module, a data processing module, a storage module, and an interface module, and signal intercommunication is achieved between the modules through circuits.

[0038] It should be explained that the iris key plug-in refers to a hardware device integrated with iris recognition function and equipped with a USB interface or other standard interfaces, which can be directly connected to a computer or other devices. For example, the iris key plug-in can be a USB security key integrated with an iris acquisition module, suitable for scenarios requiring high-security authentication, such as financial transactions, enterprise internal network access, etc.; the iris key plug-in can also be a mobile device, such as a smart phone, a tablet computer, a smart watch, etc., which uses the built-in camera of the mobile device for iris recognition and generates and manages keys through a dedicated application; the iris key plug-in can also be an external docking station or expansion module, which realizes the iris recognition function through the external docking station or expansion module and is suitable for the upgrade of existing devices.

[0039] In this embodiment, the iris acquisition module in the iris key plugin is used to acquire iris data. For this purpose, the iris acquisition module needs to be equipped with a high-resolution sensor, that is, a camera with a high resolution (at least over 5 million pixels), to capture clear and detailed iris images, and perform denoising and contrast enhancement processing on the iris images to ensure that the image quality reaches the best state.

[0040] Furthermore, the iris acquisition module can also be equipped with an autofocus system and an optical zoom function. The autofocus system is used to ensure that the camera can quickly and accurately focus on the user's eyes to obtain clear iris images; the optical zoom function can adjust the focal length at different distances to adapt to different usage scenarios and user positions. Even the iris acquisition module can use binocular or multi-camera to capture iris images from different perspectives to generate depth information, which is convenient for subsequent construction of a three-dimensional model.

[0041] It should be noted that the iris data acquired by the iris acquisition module in this embodiment includes but is not limited to iris images, depth information, etc., which is convenient for subsequent processing by the data processing module.

[0042] Furthermore, the iris key plugin is also equipped with a live detection module. The input end of the live detection module is connected to the iris acquisition module, and its output end is connected to the data processing module. The live detection module is used to detect the live state of the iris data acquired by the iris acquisition module. Only when the live state detection is passed, a passing message is fed back to the data processing module. The data processing module only generates corresponding data packets according to the iris data after receiving the passing message fed back by the live detection module. Among them, the live state detection can generate a depth map through stereo vision or a depth sensor to judge whether the iris has a real three-dimensional structure. If there is a real three-dimensional structure, it is determined that the iris is in a live state. If the three-dimensional structure cannot be constructed, it is considered that the iris data is forged.

[0043] In this embodiment, the data processing module generates corresponding data packets according to the iris data, where the data packet is a driver packet containing iris feature information generated according to the iris data.

[0044] Specifically, texture features such as spots, stripes, and crypts are extracted from the iris data, color features such as pigment spots in the iris and their distribution patterns are extracted, and even a three-dimensional model of the iris is generated using stereo vision or a depth sensor to extract its structural features.

[0045] After determining the iris feature information (texture feature, color feature, structural feature), a strong encryption algorithm (such as AES) is used to encrypt the extracted iris features to ensure data security, and a digital signature is used for the encrypted iris feature information with a private key to ensure the legality and integrity of the data source.

[0046] Obtain multiple different versions of driver programs suitable for different operating systems and hardware platforms, write detailed metadata information for each driver program to generate a set of driver programs. In this embodiment, the encrypted iris feature information and the set of driver programs are packaged into a data packet and digitally signed.

[0047] In this embodiment, the data packet structure includes metadata, iris feature data, and a set of driver programs. The metadata includes the supported operating system version, hardware compatibility information, driver program version number, release date, etc.; the iris feature data includes the encrypted iris feature information, such as texture features, color features, and three-dimensional structure features, etc.; the set of driver programs contains multiple different versions of driver programs suitable for different operating systems and hardware platforms.

[0048] Furthermore, the data processing module can also construct a corresponding iris model for the collected iris data. This iris model is a three-dimensional model. Besides being used to determine whether the iris has a real three-dimensional structure, it can also generate multiple data packets according to the iris model; after the iris key plugin accesses the target device, authentication is performed through multiple data packets to improve the security of authentication.

[0049] Among them, the method for generating multiple data packets according to the iris model is as follows:

[0050] After constructing the iris model, randomly select several local regions from the iris model through a random algorithm, and identify the feature information (such as texture features, color features, three-dimensional structure features, etc.) of each selected local region, and package the feature information of the randomly selected local regions into multiple data packets. Each data packet contains the feature information of one or more local regions. The number of randomly selected local regions can be preset, and the local region features included in the data packet can also be preset. Authentication is performed through multiple data packets to improve the security and robustness of authentication.

[0051] The iris key plugin accesses the target device through its interface module. The target device can be a computer, a mobile phone, a tablet, etc. When the target device automatically detects the presence of new hardware, it will obtain the data packet of the iris key plugin, parse the data packet for authentication and start the pre-configured driver installation program. Among them, for the plug design of the interface module, a universal interface can be used, such as widely used interface standards, such as USB Type-C or USB-A, etc.; or an interface that supports plugging in both directions (such as USB Type-C) can be used to reduce the user's insertion direction error; a magnetic interface (such as MagSafe) can also be used, which is convenient for quick alignment and insertion, and at the same time avoids damage caused by accidental pulling out.

[0052] In some embodiments, the interface module can also be connected to the target device via a wireless connection. That is, the interface module can be a Bluetooth or Wi-Fi module, providing Bluetooth or Wi-Fi connection options, reducing the limitations of physical connections and facilitating switching between different devices for use.

[0053] Meanwhile, an indicator light can also be provided on the iris key plugin to display the device status (such as power, connection status, verification result, etc.) through the indicator light, helping the user understand the progress of the current operation.

[0054] The iris key plugin also has a storage module. The storage module can be built into the iris key plugin or connected to the storage module in the cloud through a wireless network to achieve the effect of data packet storage. In this embodiment, the iris key plugin has a built-in storage module. The storage module stores data packets within a limited time, that is, the storage module only stores the generated data packets within a certain time. When the storage duration exceeds the set value, the storage module will automatically clear the data packets.

[0055] When the storage module of the iris key plugin stores data packets, the iris key plugin can transfer the data packets stored in the storage module to the connected device for identity verification only when it is connected to the target device. If the storage module has cleared the data packets, even if the iris key plugin is connected to the target device, no identity verification program or driver installation process will be started.

[0056] The status of whether there are data packets in the storage module can also be prompted through the corresponding indicator light, allowing the user to access the target device for identity verification and driver installation within the time when the data packets still remain in the storage module after collecting iris data.

[0057] The working principle of the iris key plugin in this embodiment is as follows:

[0058] Before the iris key plugin is connected to any target device, it pre-collects the user's iris data through the iris collection module on the iris key plugin, and generates one or more data packets according to the iris data through its built-in data processing module, and stores them in the storage module of the iris key plugin within a limited time. The user can connect the interface module of the iris key plugin to any target device within the limited time. After connection, the target device obtains all the data packets stored in the iris key plugin. After parsing all the data packets, the iris feature information and the driver program set contained in the data packets can be obtained. The iris feature information obtained by parsing is compared with the pre-stored iris template in the target device for verification. If the iris feature information matches the iris template, the identity verification is considered successful. If the iris feature information does not match the iris template, the identity verification is considered failed.

[0059] When the authentication is successful, the target device obtains its own system information, finds the driver that matches its own system information from the driver set, and installs the driver so that the target device can obtain the access permission to the iris key plugin. For example, it can obtain the resource access permission of the iris key plugin (such as devices like USB or smartphones) for data access. If the authentication fails, an alarm prompt is given by the target device or the iris key plugin. At this time, the corresponding driver cannot be installed, so the corresponding access permission cannot be obtained.

[0060] Embodiment 2

[0061] This embodiment provides an authentication method based on an iris key plugin, and its execution object is a target device connected to the iris key plugin. The target device can be a server, a smartphone, a computer tablet, etc.

[0062] It should be noted that the structure of the iris key plugin connected to the target device and the way it generates data packets have been described in Embodiment 1 and will not be elaborated here.

[0063] As Figure 2 shown, the authentication method based on the iris key plugin specifically includes the following steps:

[0064] Step S1: When it is detected that the iris key plugin is connected, obtain the data packet transmitted by the iris key plugin; the data packet is a driver package containing iris feature information that the iris key plugin pre-collects iris data before connection and generates according to the iris data.

[0065] After the iris key plugin is connected to the target device, a secure communication channel is established between the iris key plugin and the target device. Usually, an encryption protocol (such as TLS / SSL) is used to ensure the security of data transmission. When establishing a secure connection, the two parties exchange encryption keys for subsequent data encryption and decryption. During this period, all data transmitted from the plugin to the computer is encrypted to prevent man-in-the-middle attacks or data leakage.

[0066] Step S2: Analyze the data packet to obtain the iris feature information and the corresponding driver, use the iris feature information for authentication, and install the driver to obtain the access permission to the iris key plugin when the authentication is passed.

[0067] When the target device receives a data packet generated by the iris key plugin, it decrypts the encrypted data packet using the corresponding decryption key, and extracts the feature information of the local area from the decrypted data packet. The feature information is compared with the iris template pre-stored in the target device. The comparison content can be one or a combination of texture matching (comparing texture features such as speckle density and stripe direction), color matching (comparing color distribution patterns), and three-dimensional structure matching (comparing three-dimensional features such as height changes in depth maps). If the feature matching is successful, the authentication is considered passed.

[0068] When the target device receives multiple data packets generated by the iris key plugin, during the authentication process, multiple data packets are used for matching in sequence. If a specified number of data packets match successfully, the authentication is considered passed. Assume that the iris key plugin generates three data packets, and the target device sequentially performs iris template comparison on the three data packets. If the number of successfully matched data packets exceeds the matching threshold, the authentication can be considered passed. To improve security, the matching threshold for multiple data packets can be set (for example, at least 2 data packets match successfully). If the matching threshold is not met, the system prompts the user to re-perform iris collection and verification, and gives the reason for the error (such as poor image quality, feature mismatch, etc.).

[0069] It should be noted that the iris template is the iris data of legitimate users pre-stored in the target device. The iris data is relatively complete, clear, and standard. The standard iris data is used as the iris template, and it is compared with the iris features collected by the iris key plugin to achieve the purpose of authentication. The iris template can be obtained through pre-collection or network transmission, and the user's iris template can be downloaded to the target device for storage after Internet authorization and authentication.

[0070] In this embodiment, the iris key plugin that has already collected iris data is inserted into the target device in the way of shooting first and then connecting, so that the target device can perform authentication and drive installation through the iris feature information in the iris key plugin, replacing the original traditional plugin usage method of connecting first and then shooting, which can reduce the user operation difficulty and improve the usage efficiency.

[0071] Embodiment III

[0072] This embodiment provides an electronic device, Figure 3 showing a structural block diagram of an electronic device according to an embodiment of the present invention. As Figure 3 shown, the electronic device includes: a memory 100 and a processor 200. The memory 100 stores a computer program that can run on the processor 200. When the processor 200 executes the computer program, it implements the iris key plugin-based authentication method in the above embodiment. The number of the memory 100 and the processor 200 can be one or more.

[0073] The electronic device further includes:

[0074] A communication interface 300, configured to communicate with external devices and perform data interaction and transmission.

[0075] If the memory 100, the processor 200, and the communication interface 300 are implemented independently, the memory 100, the processor 200, and the communication interface 300 can be interconnected through a bus and complete communication with each other. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, an Extended Industry Standard Architecture (EISA) bus, or the like. The bus can be divided into an address bus, a data bus, a control bus, and the like.

[0076] Optionally, in a specific implementation, if the memory 100, the processor 200, and the communication interface 300 are integrated on a single chip, the memory 100, the processor 200, and the communication interface 300 can complete communication with each other through an internal interface.

[0077] An embodiment of the present invention provides a computer-readable storage medium, which stores a computer program that, when executed by a processor, implements the method provided in the embodiment of the present invention.

[0078] An embodiment of the present invention further provides a chip, which includes a processor configured to call and run instructions stored in a memory, so that a communication device installed with the chip executes the method provided in the embodiment of the present invention.

[0079] An embodiment of the present invention further provides a chip, including: an input interface, an output interface, a processor, and a memory. The input interface, the output interface, the processor, and the memory are connected through an internal connection path. The processor is configured to execute code in the memory, and when the code is executed, the processor is configured to execute the method provided in the embodiment of the invention.

[0080] It should be understood that the above-mentioned processor may be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application specific integrated circuits (ASICs), field programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor, etc. It is worth noting that the processor may be a processor that supports the advanced RISC machines (ARM) architecture.

[0081] Further, optionally, the above-mentioned memory may include a read-only memory and a random access memory, and may also include a non-volatile random access memory. The memory may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may include a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may include a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available. For example, static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct rambus random access memory (DR RAM).

[0082] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions according to the present invention are generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another.

[0083] In the description of this specification, the descriptions referring to terms such as "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. mean that the specific features, structures, materials, or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present invention. Moreover, the specific features, structures, materials, or characteristics described can be combined in a suitable manner in any one or more embodiments or examples. In addition, without contradiction, those skilled in the art can combine and combine the different embodiments or examples described in this specification and the features of different embodiments or examples.

[0084] In addition, the terms "first" and "second" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance or implicitly specifying the quantity of the indicated technical features. Thus, the features defined with "first" and "second" can explicitly or implicitly include at least one of the features. In the description of the present invention, "a plurality of" means two or more unless otherwise specifically defined.

[0085] As described above, it is only the specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art within the technical scope disclosed by the present invention can easily think of various changes or substitutions, and these should all be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be subject to the protection scope of the claims.

Claims

1. An iris key plugin, characterized in that, Comprising: An iris acquisition module for acquiring iris data; A data processing module connected to the iris acquisition module for generating a corresponding data packet according to the iris data; The data packet is a driver packet containing iris feature information generated according to the iris data; A storage module connected to the data processing module for storing the data packet within a limited time; An interface module connected to the storage module for accessing any target device; When the interface module accesses any target device, the data processing module transfers the data packet stored in the storage module to the connected device for identity authentication.

2. The iris key plugin according to claim 1, wherein The storage module stores the data packet within a limited time, records the storage duration of the data packet, and automatically deletes the data packet when the storage duration exceeds the set value.

3. The iris key plugin according to claim 1, characterized in that, Further comprising: A liveness detection module connected to the iris acquisition module for detecting the liveness state of the iris data acquired by the iris acquisition module, and feeding back a pass message to the data processing module when the liveness state is detected, so that the data processing module generates a corresponding data packet according to the iris data only after receiving the feedback pass message.

4. The iris key plugin according to claim 1, wherein The data processing module extracts the iris feature information of the iris data, encrypts the iris feature information, and embeds it into the driver packet to obtain the data packet.

5. The iris key plugin according to claim 1, characterized in that, The driver packet is formed by packing multiple versions of driver programs, and the multiple versions of driver programs are used to match the installation requirements of different device systems.

6. The iris key plugin according to claim 1, characterized in that, The data processing module constructs a corresponding iris model for the acquired iris data, randomly selects the feature information of multiple local regions in the iris model, and generates multiple data packets according to the feature information of the multiple local regions. Each data packet contains the features of one or more local regions.

7. An authentication method based on an iris key plugin, characterized in that, Comprising: When detecting the access of an iris key plugin, obtaining the data packet transmitted by the iris key plugin; Wherein the data packet is a driver packet containing iris feature information generated by the iris key plugin pre-acquiring iris data before access and according to the iris data; Parsing the data packet to obtain the iris feature information and the corresponding driver program, using the iris feature information for identity authentication, and installing the driver program to obtain the access permission of the iris key plugin when the identity authentication is passed.

8. The authentication method based on the iris key plug-in according to claim 7, characterized in that, Further comprising: When receiving multiple data packets, sequentially using the multiple data packets for matching during the identity authentication process, and if a specified number of data packets match successfully, it is considered that the identity authentication is passed.

9. An electronic device, characterized in that, Comprising: A processor and a memory, wherein instructions are stored in the memory, and the instructions are loaded and executed by the processor to implement the iris key plugin-based identity authentication method according to any one of claims 7 to 8.

10. A computer-readable storage medium, characterized in that, A computer program is stored in the computer-readable storage medium, and when the computer program is executed by the processor, it implements the iris key plugin-based identity authentication method according to any one of claims 7 to 8.