Identity recognition method and device, electronic equipment and storage medium

By setting up a super administrator for the target location, using their terminal to collect biometric information and determining the candidate set through the verification server, the problem of identity verification in media replacement scenarios is solved, achieving rapid identity verification and efficient security management.

CN121765705APending Publication Date: 2026-03-31TENCENT TECHNOLOGY (SHENZHEN) CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-09-30
Publication Date
2026-03-31

AI Technical Summary

Technical Problem

In media replacement scenarios, the inability to quickly verify the identity of the object can lead to the inability to promptly notify family members or perform critical operations in emergency situations, thus affecting the efficiency of safety management.

Method used

By setting up a super administrator for the target location, the first object terminal with business management authority is used to collect the biometric information of the second object, and the candidate biometric information set is determined by the verification server to quickly confirm the identity.

Benefits of technology

In emergency situations, it enables rapid identification of individuals, improves security management efficiency, enhances site security, reduces identification difficulty, and increases the efficiency of identity verification.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN121765705A_ABST
    Figure CN121765705A_ABST
Patent Text Reader

Abstract

The invention relates to the technical field of computers, in particular to an identity recognition method and device, electronic equipment and a storage medium, and is used for quickly confirming the identity of an object in a medium replacement scene. The method comprises the steps that a verification instruction sent by a first object terminal is received, the verification instruction comprises a place identifier of a target place and target biological information, and the target biological information is a verification operation triggered by the first object terminal in response to a first object and biological information of a second object, the first object is an object with business management authority in the target place; determining a candidate biological information set according to the place identifier; the candidate biological information set comprises candidate biological information of at least one candidate object, and each candidate object is an object executing the target business through biological recognition verification in the target place; and when the target biological information hits the candidate biological information set, determining identity information of the second object based on the hit candidate biological information, and returning the identity information to the first object terminal.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of computer technology, and in particular to an identity recognition method, apparatus, electronic device, and storage medium. Background Technology

[0002] With the development of artificial intelligence technology, there are increasingly more applications using biometric information to verify the identity of individuals, such as facial recognition, fingerprint recognition, iris recognition, voiceprint recognition, and palm recognition. Taking palm recognition as an example, it can be further subdivided into palm recognition for access control, palm recognition for payment, palm recognition for attendance, and palm recognition for storage. These applications not only improve the convenience and security of services but also bring about a trend of medium replacement; that is, individuals no longer need traditional physical media such as keys, cards, or wristbands, but can complete various services through biometric information verification.

[0003] For example, in swimming pools, palm-swiping technology is used for identity verification and locker services. After binding an identity through palm swipes, individuals can pass through the gates to swim after storing their belongings, eliminating the need for a separate wristband. However, in extreme scenarios, such as after a swimmer drowns, lifeguards need to know the drowning victim's identity and quickly notify their family. In this situation, due to the change in the medium, it's no longer possible to use the wristband to access the locker and retrieve personal items for identification, potentially leading to timeliness issues in notifying the family.

[0004] In summary, how to quickly identify an object in a media replacement scenario is an urgent problem to be solved. Summary of the Invention

[0005] This application provides an identity recognition method, apparatus, electronic device, and storage medium to quickly verify the identity of an object in a media replacement scenario.

[0006] This application provides an identity recognition method, including:

[0007] The system receives a verification command sent by a first object terminal; wherein the verification command includes a location identifier and target biometric information; the target biometric information is: biometric information of a second object collected by the first object terminal in response to a verification operation triggered by a first object; the first object is an object with business management authority in the target location;

[0008] A candidate biometric information set is determined based on the location identifier; the candidate biometric information set contains candidate biometric information of at least one candidate object, each of the candidate objects being: an object in the target location whose identity is verified through biometrics to perform the target business;

[0009] When the target biometric information matches the set of candidate biometric information, the identity information of the second object is determined based on the matched candidate biometric information, and the identity information is returned to the terminal of the first object.

[0010] Another identity recognition method provided in this application includes:

[0011] In response to a verification operation triggered by a first object, target biometric information of a second object is collected; wherein, the first object is an object with business management authority in the target location;

[0012] The location identifier of the target location and the target biometric information are sent to the verification server via a verification command, so that the verification server determines a set of candidate biometric information based on the location identifier, and when the target biometric information matches the set of candidate biometric information, the identity information of the second object is determined based on the matched candidate biometric information; the set of candidate biometric information contains candidate biometric information of at least one candidate object, and each candidate object is an object that performs target business in the target location by verifying its identity through biometrics.

[0013] After receiving the identity information returned by the verification server, the identity of the second object is confirmed based on the identity information.

[0014] An identity recognition device provided in this application includes:

[0015] A receiving unit is configured to receive a verification instruction sent by a first object terminal; wherein the verification instruction includes a location identifier of the target location and target biometric information; the target biometric information is: biometric information of a second object collected by the first object terminal in response to a verification operation triggered by a first object; the first object is an object with business management authority in the target location;

[0016] The processing unit is configured to determine a set of candidate biometric information based on the location identifier; the set of candidate biometric information includes candidate biometric information of at least one candidate object, each of the candidate objects being an object in the target location that verifies its identity through biometrics to perform target business;

[0017] An identity verification unit is used to determine the identity information of the second object based on the matched candidate biometric information when the target biometric information matches the candidate biometric information set, and return the identity information to the first object terminal.

[0018] Optionally, the verification instruction may further include the acquisition time corresponding to the target biological information, in which case the processing unit is specifically used for:

[0019] Determine the time interval to which the acquisition time belongs;

[0020] From at least one set of location biometric information, a set of candidate biometric information that matches the location identifier and the time interval is selected; wherein each candidate object is an object that performs target business by verifying its identity through biometrics in the target location within the time interval.

[0021] Optionally, if the candidate biometric information includes standard biometric information uploaded when an object activates the biometric verification function, then the device further includes:

[0022] The construction unit is configured to store the standard biometric information uploaded by each object when activating the biometric verification function before the processing unit determines the candidate biometric information set based on the location identifier, and to construct the at least one location biometric information set in the following manner:

[0023] For each location, if an object performs a target service through biometric verification within the time interval, the object's standard biometric information is added to the location's corresponding biometric information set.

[0024] Optionally, if the target location includes multiple sub-locations, and the first object collects the target biological information in the target sub-location through the first object terminal, then the verification instruction further includes the sub-location identifier of the target sub-location;

[0025] The processing unit is specifically used for:

[0026] From multiple sets of location biometric information, select multiple sets of reference biometric information that match the location identifier;

[0027] From the plurality of reference biometric information sets, a candidate biometric information set matching the sub-location identifier is selected; wherein each candidate object is an object in the target sub-location that verifies its identity through biometrics to perform the target business.

[0028] Optionally, the device further includes:

[0029] An authentication unit is configured to receive an authentication instruction sent by the first object terminal before the processing unit determines the candidate biometric information set based on the location identifier; the authentication instruction is sent by the first object terminal in response to a verification operation triggered by the first object.

[0030] The first object is authenticated based on the account information of the first object in the authentication instruction;

[0031] If authentication determines that the first object is an object with business management authority in the target location, then the terminal of the first object is notified to invoke the collection device to collect the target biological information of the second object through the collection device.

[0032] Optionally, there are multiple target biometric information items, and the identity verification unit is specifically used for:

[0033] Based on the target biological information whose information quality meets the preset quality requirements among the multiple target biological information, the target biological information features of the second object are extracted;

[0034] Candidate biological information in the candidate biological information set whose feature similarity to the target biological information features is higher than a preset threshold is selected as the hit candidate biological information.

[0035] The account information associated with the matched candidate biometric information shall be used as the identity information of the second object;

[0036] The account information of each candidate in the candidate biometric information set is bound when the corresponding object activates the biometric verification function.

[0037] Another identity recognition device provided in this application embodiment includes:

[0038] A response unit is used to collect target biometric information of a second object in response to a verification operation triggered by a first object; wherein the first object is an object with business management authority in the target location;

[0039] The sending unit is configured to send the location identifier of the target location and the target biometric information to the verification server via a verification command, so that the verification server determines a set of candidate biometric information based on the location identifier, and when the target biometric information matches the set of candidate biometric information, determines the identity information of the second object based on the matched candidate biometric information; the set of candidate biometric information contains candidate biometric information of at least one candidate object, each candidate object being an object in the target location that performs target business by verifying its identity through biometrics;

[0040] An identity verification unit is used to verify the identity of the second object based on the identity information returned by the verification server.

[0041] Optionally, the sending unit is specifically used for:

[0042] Determine the collection time for collecting the target biological information at the target location;

[0043] The location identifier, the target biometric information, and the collection time are sent to the verification server via the verification command, so that the verification server determines the candidate biometric information set based on the location identifier and the collection time; correspondingly, each candidate object is an object that performs target business by verifying its identity through biometrics in the target location within the time interval to which the collection time belongs.

[0044] Optionally, if the target location includes multiple sub-locations, the sending unit is specifically used for:

[0045] Determine the target sub-location where the first object collects the target biological information among the plurality of sub-locations;

[0046] The location identifier, the sub-location identifier of the target sub-location, and the target biometric information are sent to the verification server via the verification command, so that the verification server determines a set of candidate biometric information based on the location identifier and the sub-location identifier; wherein, each candidate object is an object in the target sub-location whose identity is verified through biometrics to perform the target business.

[0047] Optionally, the response unit is further configured to:

[0048] Before collecting the target biometric information of the second object in response to the verification operation triggered by the first object, the business sub-application associated with the first object is redirected to the verification sub-application in response to the first redirection operation.

[0049] The response unit is specifically used for:

[0050] The verification sub-application responds to the verification operation triggered by the first object and sends the account information of the first object to the verification server through the authentication command, so as to authenticate the first object through the verification server.

[0051] If authentication determines that the first object is an object with business management authority in the target location, then the collection device is invoked to collect the target biometric information of the second object.

[0052] Optionally, if the identity information is the account information bound when the second object activates the biometric verification function, and the target business includes the item storage business, then the identity verification unit is specifically used for:

[0053] In response to the second redirection operation, the verification sub-application is redirected to the business sub-application associated with the first object;

[0054] The business sub-application responds to the opening operation triggered by the first object and opens the target locker through remote control service, combined with the identity information; the target locker is the locker most recently used by the second object in the target location when performing the storage service through biometric verification;

[0055] The identity information of the second object is determined based on the items in the target locker.

[0056] An electronic device provided in this application includes a processor and a memory, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor performs the steps of any of the above-described identity recognition methods.

[0057] This application provides a computer-readable storage medium including a computer program. When the computer program is run on an electronic device, the computer program is used to cause the electronic device to perform the steps of any of the above-described identity recognition methods.

[0058] This application provides a computer program product, which includes a computer program stored in a computer-readable storage medium. When the processor of an electronic device reads the computer program from the computer-readable storage medium, the processor executes the computer program, causing the electronic device to perform the steps of any of the above-described identity recognition methods.

[0059] The beneficial effects of this application are as follows:

[0060] This application provides an identity recognition method, apparatus, electronic device, and storage medium. By assigning a super administrator to each location—such as a first object with business management permissions in a target location—and providing biometric verification capabilities to such objects, in special scenarios (such as emergencies), the first object can collect the biometric information of a second object (i.e., the target's biometric information) through its logged-in terminal. This enables rapid identity verification and efficient response in emergencies. Furthermore, only the authorized first object can perform critical operations in emergencies, improving security management efficiency and enhancing location security.

[0061] Furthermore, by sending the location identifier and verification command of the target location to the verification server, the verification server can determine a set of candidate biometric information that matches the target location after receiving the verification command. This set of candidate biometric information is only related to the target location and contains only the candidate biometric information of objects that have performed the target business in the target location. It is a small set used for auxiliary identification, rather than a large set used for general identification (containing the biometric information of all objects that have enabled biometric verification). Based on this set of candidate biometric information, the identity of the second object can be quickly identified, reducing the difficulty of identification and improving the efficiency of identity confirmation.

[0062] Based on this, after the verification server determines the identity information of the second object through the candidate biometric information set, it can send this information back to the first object terminal. The first object terminal can then confirm the actual identity of the second object based on this identity information, so as to quickly confirm the identity of the object in the case of media replacement.

[0063] Other features and advantages of this application will be set forth in the description which follows, and will be apparent in part from the description, or may be learned by practicing the application. The objectives and other advantages of this application may be realized and obtained by means of the structures particularly pointed out in the written description, claims, and drawings. Attached Figure Description

[0064] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0065] Figure 1 This is an optional schematic diagram of an application scenario in an embodiment of this application;

[0066] Figure 2 This is a schematic diagram of a verification terminal in an embodiment of this application;

[0067] Figure 3 This is a flowchart illustrating the implementation of an identity recognition method in an embodiment of this application.

[0068] Figure 4 This is a schematic diagram of a sub-application jump in an embodiment of this application;

[0069] Figure 5 This is a schematic diagram of a palm recognition scenario in an embodiment of this application;

[0070] Figure 6 This is a schematic diagram of another palm recognition scenario in an embodiment of this application;

[0071] Figure 7This is a schematic diagram of a palm-swipe storage method in an embodiment of this application;

[0072] Figure 8 This is a schematic diagram illustrating a one-click cabinet opening and item retrieval method in an embodiment of this application;

[0073] Figure 9 This is a flowchart illustrating another identity recognition method in the embodiments of this application;

[0074] Figure 10 This is a schematic diagram illustrating the screening process of a candidate palmprint set in an embodiment of this application;

[0075] Figure 11 This application presents an identity recognition service architecture based on palm recognition technology from an instant messaging application.

[0076] Figure 12 This is a flowchart illustrating identity recognition in a multi-terminal interaction scenario as described in this application embodiment;

[0077] Figure 13 This is a schematic diagram of the composition structure of an identity recognition device according to an embodiment of this application;

[0078] Figure 14 This is a schematic diagram of the composition structure of another identity recognition device in an embodiment of this application;

[0079] Figure 15 This is a schematic diagram of the hardware structure of an electronic device using an embodiment of this application;

[0080] Figure 16 This is a schematic diagram of the hardware structure of another electronic device using an embodiment of this application. Detailed Implementation

[0081] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of this application will be clearly and completely described below with reference to the accompanying drawings of the embodiments of this application. Obviously, the described embodiments are only some embodiments of the technical solutions of this application, and not all embodiments. Based on the embodiments recorded in this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the technical solutions of this application.

[0082] The following describes some of the concepts involved in the embodiments of this application.

[0083] 1. Biometric information: refers to data extracted from the inherent physiological or behavioral characteristics of an object (such as a human body) that can be used for identification. This information is unique and stable, and is often used for security authentication and identity verification. The biometric information in this application embodiment includes, but is not limited to, at least one of the following:

[0084] Fingerprints, facial features (such as a face), iris, voiceprints, palm prints, veins, etc.

[0085] 2. Biometric verification: This is a technology that uses multimedia information from the palm of the hand (i.e., palm data) to obtain a person's identity information (such as an account number). For example, a palm-swipe payment device is a device that uses biometric verification technology, allowing users to complete payments for a target order by swiping their palm.

[0086] 3. Location and Sublocation: A location generally refers to a specific geographical location or physical space. It can be a building, an area, or any other place with clearly defined boundaries that can accommodate activities or services. For example, a shopping mall, a restaurant, or a stadium can all be considered a location. A sublocation, on the other hand, refers to a smaller functional area or independently operating space within a larger location. Sublocations are typically small spaces with their own specific uses within the structure of a larger location. For instance, in a shopping mall, each individual shop can be considered a sublocation within the larger shopping mall; in a university campus, each teaching building, library, or sports field is a sublocation within the campus.

[0087] In this application embodiment, the venue and sub-venues support biometric verification. For example, a shopping mall, as a comprehensive commercial venue, can use biometric verification technology to provide convenient membership services, such as fast payment and points redemption. A stadium, as a venue for hosting sporting events and concerts, can use biometric verification for ticket verification, improving entry efficiency and security.

[0088] For example, as a specific type of sports and leisure venue, swimming pools can use biometric verification for unlocking lockers and passing through gates. Swimming pools can also be divided into multiple sub-areas such as children's play areas, professional training areas, and leisure areas. Furthermore, they can be divided into men's areas, women's areas, family areas, and general areas. Biometric verification can differentiate the access permissions of different members, ensuring that each area is only open to qualified individuals, thereby improving the overall operational efficiency and security of the swimming pool.

[0089] For example, water parks, as venues combining entertainment and leisure, can utilize biometric verification technology to improve the user experience and venue management efficiency. Water parks can also include multiple sub-areas such as children's water play areas, adult swimming pools, water slides, and wave pools, and so on.

[0090] 4. Biometric data set: This refers to a collection of hand feature data from several objects. This data includes biometric images of the objects and their corresponding biometric information, used for subsequent identity verification or identification processes.

[0091] In this application embodiment, based on function and size, biological information sets can be divided into the following two main categories:

[0092] The large set for general identification refers to the collection of palm feature data from all registered subjects in a biometric identification system. This set covers a broad range of subjects and aims to support high-traffic, high-concurrency authentication requirements.

[0093] Small sets for auxiliary identification: This is a relatively small set of biometric data, mainly used for identification needs in specific scenarios or for special groups of objects, to ensure efficiency and accuracy in specific application scenarios. For example, the site biometric data set, reference biometric data combination, and candidate biometric data combination in this application all refer to small sets related to the target site or target sub-site for auxiliary identification.

[0094] 5. Object: Generally refers to an individual or entity participating in a system or business process, which can be a person (such as a user or administrator). In the embodiments of this application, it includes a first object, a second object, etc. The first object typically refers to an administrator or staff member who initiates a verification operation in an emergency to verify the identity of other objects, while the second object refers to a user who needs to verify their identity. For example, in a swimming pool scenario, the first object might be a swimming pool safety officer, and the second object might be a drowning person in the pool. When the first object discovers an emergency, it can verify the identity of the second object through biometric verification and take appropriate action. Similarly, in a gym scenario, the first object might be a gym staff member or manager, and the second object might be a gym member. If the second object experiences discomfort during their workout and needs emergency assistance, the first object can verify the identity of the second object through biometric verification and take appropriate action. Other scenarios are similar and will not be elaborated further here.

[0095] 6. Sub-applications: These are small applications that run within another application (which can be referred to as the main application), also known as mini-programs or lightweight applications. Sub-applications are characterized by their small size and fast startup. They do not require separate installation and can run directly within the main application's environment. They often rely on a larger platform, utilizing the infrastructure and service interfaces provided by the platform to implement specific functions or services, such as instant messaging application mini-programs, third-party payment platform mini-programs, or operating system plugins (widgets). Sub-applications can provide a user experience close to native applications, while also having the advantages of easy development and low maintenance costs, making them ideal for providing use-and-go services.

[0096] 7. 3D Cameras: Analogous to traditional cameras, 3D cameras incorporate liveness detection hardware and software, such as depth cameras and infrared cameras, to ensure information security. 3D cameras offer multiple functions including facial recognition, gesture recognition, 3D measurement, environmental perception, and image acquisition, and are widely used in televisions, mobile phones, robots, autonomous driving, and biometric verification. For example, a 3D camera can be deployed on a palm-swipe payment device to capture multimedia information from the palm.

[0097] The design concept of the embodiments of this application is briefly introduced below:

[0098] With the development of artificial intelligence technology, biometric verification is being used in more and more scenarios, such as biometric access control, biometric payment, biometric check-in, and biometric storage. These applications not only improve the convenience and security of services, but also bring about a trend of medium replacement, meaning that users no longer need traditional physical media, such as keys, cards, or wristbands, for identity verification, but can complete various services through biometric verification.

[0099] In scenarios where palm-scanning replaces traditional physical media, such as using it for identity verification and storage services in swimming pools, the palm scan serves as the new medium. When a user first uses the service, they need to bind their palm scan to their personal identity. This means that the user's biometric information is registered and linked to their personal information, becoming a new identity verification medium. Afterward, users can verify their identity simply by scanning their palm, without needing to carry any additional physical medium (such as a wristband).

[0100] In the scenarios described above, before the introduction of palm-swipe technology, users might have needed to wear wristbands for authentication and storage services. With palm-swipe technology, users can now complete these services directly by swiping their palm, eliminating the need for wristbands. This medium replacement achieves a seamless transition from traditional (wristbands) to the new medium (palm-swipe), improving user experience and service efficiency. Users no longer need to worry about forgetting or losing their wristbands; they can complete services using only their palm, while also enhancing authentication security.

[0101] However, replacing the medium also brings certain drawbacks. Taking the above scenario as an example, in some extreme cases, such as after a swimmer drowns, the safety officer needs to know the drowning person's identity and quickly notify the family. At this time, due to the replacement of the medium, it is no longer possible to use the wristband to access the locker door to retrieve the person's personal belongings for identification, which may lead to some timeliness issues in notifying the family.

[0102] In view of this, this application proposes an identity recognition method, apparatus, electronic device, and storage medium. Specifically, by setting up super administrators for each location, such as a first object with business management permissions in the target location, and opening up biometric verification capabilities to such objects, in some special scenarios (such as emergencies), the first object can collect the biometric information of the second object (i.e., the target biometric information) through its own logged-in first object terminal, so as to quickly realize identity verification and efficient response in emergency situations. Moreover, only the first object with the permissions can perform critical operations in emergency situations, improving security management efficiency and enhancing location security.

[0103] Furthermore, by sending the location identifier and verification command of the target location to the verification server, the verification server can determine a set of candidate biometric information that matches the target location after receiving the verification command. This set of candidate biometric information is only related to the target location and contains only the candidate biometric information of objects that have performed the target business in the target location. It is a small set used for auxiliary identification, rather than a large set used for general identification (which can contain the biometric information of all objects that have enabled biometric verification). Based on this set of candidate biometric information, the identity of the second object can be quickly identified, reducing the difficulty of identification and improving the efficiency of identity confirmation.

[0104] Based on this, after the verification server determines the identity information of the second object through the candidate biometric information set, it can send this information back to the first object terminal. The first object terminal can then confirm the actual identity of the second object based on this identity information, so as to quickly confirm the identity of the object in the case of media replacement.

[0105] The preferred embodiments of this application are described below with reference to the accompanying drawings. It should be understood that the preferred embodiments described herein are for illustration and explanation only and are not intended to limit this application. Furthermore, the embodiments and features in the embodiments of this application can be combined with each other without conflict.

[0106] like Figure 1 The diagram shown is an application scenario illustration of an embodiment of this application. The application scenario diagram includes a first object terminal 110, a verification terminal 120, and a verification server 130.

[0107] Both the first object terminal 110 and the verification terminal 120 are electronic devices capable of biometric verification. The first object terminal 110 refers to the terminal device used by the first object, such as a mobile phone, tablet computer, multimedia playback device, personal computer (PC), intelligent robot, vehicle terminal, smart home appliance, intelligent voice interaction device, access control device, purchasing device, and any electronic device with biometric verification function; this application embodiment does not limit this.

[0108] Optionally, a target client may be installed in the first target terminal 110. This target client can be a browser, instant messaging client, payment client, shopping client, access control client, or any client that supports biometric authentication; this embodiment does not limit the specific application. Furthermore, the target client can be software, a webpage, a mini-program, etc.

[0109] Verification terminal 120 is an electronic device deployed in a specific location or sub-location, specifically designed to perform biometric identification and verification tasks. These terminals are typically fixedly installed at the entrance, service counter, or other key locations requiring identity verification. They are designed to provide a stable and professional biometric verification solution for quickly and accurately verifying the identity of an individual.

[0110] Optionally, the verification terminal 120 is equipped with a biometric verification module, which can be divided into an image acquisition submodule and an interface display submodule. The image acquisition submodule can be implemented using a 3D camera, such as... Figure 2 The diagram shown is a schematic of a verification terminal in an embodiment of this application. For example, if the verification terminal is a palm-swipe terminal... Figure 2 21 in the diagram refers to the image acquisition submodule in the verification terminal 120, which is also the palm acquisition area used to acquire images, such as palm images. For example... Figure 2 The 22 in the diagram refers to the interface display submodule, which can be implemented as a touch screen for displaying the interface to enable human-computer interaction between the object and the verification terminal 120, and to display information to the object. For example, the verification terminal 120 can refer to a biometric verification device used for purchasing tickets in scenarios such as subways, buses, and high-speed trains; it can also refer to a biometric verification device used for payment and purchasing goods in scenarios such as supermarkets and shopping malls; and it can also refer to a biometric verification device used for payment and identity verification in scenarios such as organizations, merchants, and individuals. This application embodiment does not limit this to any particular type.

[0111] It should be noted that, among them Figure 1 or Figure 2The example used here is a palm-swiping terminal for verification. However, this verification terminal can be other types of terminals, specifically related to the biometric information used for identification. Examples include: fingerprint recognition terminals (such as fingerprint door locks and attendance machines); facial recognition terminals (such as smart cameras and facial recognition payment devices); iris recognition terminals (such as iris access control systems and high-end security equipment); voiceprint recognition terminals (such as voice assistants and telephone banking systems); vein recognition terminals (such as vein access control systems and payment terminals); and so on.

[0112] The verification server 130 can refer to the target client in the first object terminal 110 and the backend service platform of the verification terminal 120. For example, the verification server 130 can be used to provide backend services such as permission verification, biometric verification, and payment processing for the target client in the first object terminal 110 and the verification terminal 120.

[0113] Optionally, the verification server 130 can be implemented as a server, specifically a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, content delivery networks (CDN), and big data and artificial intelligence platforms. In other words, the verification server 130 can be implemented as a single server, a server cluster composed of multiple servers, or a cloud computing service center.

[0114] In one optional implementation, the first target terminal 110 and the verification server 130 can communicate with each other via a communication network, and the verification terminal 120 and the verification server 130 can also communicate with each other via a communication network. This communication network can be a wired network or a wireless network.

[0115] In one alternative implementation, the communication network is a wired network or a wireless network.

[0116] It should be noted that, Figure 1 The examples shown are merely illustrative; in reality, the number of terminals and servers is unlimited and is not specifically limited in this application embodiment.

[0117] In this embodiment of the application, when there are multiple servers, the multiple servers can form a blockchain, and the server is a node on the blockchain; as disclosed in the identity recognition method of this embodiment, the relevant data involved can be stored on the blockchain, such as biometric information, identity information, etc.

[0118] Furthermore, the embodiments of this application can be applied to various scenarios, including but not limited to cloud technology, artificial intelligence, smart transportation, and assisted driving. Specifically, they are applicable to business scenarios related to biometric verification in these scenarios. Taking palm recognition as an example, it can be used for scenarios such as palm recognition for traffic / access control gates, palm recognition for storing and retrieving items in lockers / deposits, palm recognition for check-in, palm recognition for attendance, palm recognition for payment, and palm recognition for registration in medical institutions.

[0119] This application mainly involves some business scenarios of media replacement through biometric identification and verification. A few examples are listed below:

[0120] (1) In places such as office buildings, school dormitories, and gyms, biometric identification verification can be used to replace traditional access cards or passwords. For example, the person can unlock the access control by simply scanning their face or palm.

[0121] (2) In places such as stadiums, swimming pools, and entertainment venues, the user can bind the locker service by swiping their palm. There is no need to wear a wristband or key. The user can open the locker by swiping their face or palm.

[0122] In addition, in these locations, rapid verification can also be carried out through biometric identification, allowing individuals to quickly pass through simply by scanning their face or palm.

[0123] (3) In some public places, such as airports, train stations, supermarkets, etc., the object can verify the right to use the locker through biometric identification without the need to use traditional keys or cards.

[0124] In addition, at baggage storage services at airports or train stations, individuals can verify their baggage storage service through biometric identification, eliminating the need for traditional baggage tags or vouchers. For example, individuals can retrieve their baggage simply by scanning their face or palm.

[0125] (4) In the field of public transportation, biometric identification and verification technology can significantly improve the passenger experience. For example, after installing biometric identification and verification gates in subway stations or buses, passengers can simply place their palm on the reader to complete identity verification and pass through the gate; or, passengers can simply scan their face in front of the reader to complete identity verification and pass through the gate; and so on.

[0126] (5) Introducing biometric identification and verification technology into medical institutions can greatly simplify the patient's medical treatment process. When a patient arrives at the hospital, they can simply complete the registration or enrollment procedures by swiping their palm, and the system will automatically link the patient's personal information and medical records, etc.

[0127] (6) In conferences, exhibitions, and other events, use biometric identification and verification instead of paper sign-in sheets or electronic sign-in cards. Specifically, participants register for the sign-in system by swiping their palms, and the system links the participant's biometric information to their conference eligibility. Afterward, participants can simply sign in by swiping their palms, and so on.

[0128] It should be noted that the scenarios listed above are just simple examples, and other scenarios are also applicable to the embodiments of this application, which will not be elaborated here.

[0129] It should be emphasized that the specific embodiments of this application involve data related to the identity of the target, such as biometric information, account information, and location information listed above. When the above embodiments of this application are applied to specific products or technologies, permission or consent from the target is required, and the collection, use, and processing of related data must comply with the relevant laws, regulations, and standards of the relevant countries and regions.

[0130] The following describes the identity recognition method provided by exemplary embodiments of this application in conjunction with the application scenarios described above and with reference to the accompanying drawings. It should be noted that the above application scenarios are only shown to facilitate understanding of the spirit and principles of this application, and the embodiments of this application are not limited in any way in this respect.

[0131] See Figure 3 The diagram shown is a flowchart of an identity recognition method provided in this application. Taking a first target terminal as the execution subject, the specific implementation process of the method is as follows: S31 to S33:

[0132] S31: In response to the verification operation triggered by the first object, collect the target biometric information of the second object; wherein, the first object is an object with business management authority in the target location.

[0133] In this embodiment, each location can be configured with one or more super administrators, which are, in this document, objects with business management permissions within a particular location. For such objects, the ability to collect biometric information from other objects based on their own object terminals can be enabled, thereby assisting other objects in biometric verification.

[0134] In one optional implementation, each venue may have only one super administrator, who manages the entire venue. In another optional implementation, each venue may have multiple super administrators, each managing the entire venue, and these super administrators may manage the venue simultaneously or at different times. In yet another optional implementation, each sub-venue within a venue has one super administrator, and each super administrator manages its own sub-venue. In yet another optional implementation, each sub-venue within a venue has multiple super administrators, each managing its own sub-venue, and multiple super administrators may manage the same sub-venue, and these super administrators may manage the sub-venue simultaneously or at different times. Of course, to avoid extreme cases, it is also permissible for the same super administrator to manage different sub-venues within the same venue; this is not specifically limited herein.

[0135] It should be noted that the super administrator in this article is pre-configured for each location. In practical applications, the conditions for setting up a super administrator include, but are not limited to, the following aspects:

[0136] (1) Job Responsibilities: Candidates should have key job responsibilities and be able to assume business management responsibilities within the venue / sub-venue, such as venue / sub-venue manager or supervisor. (2) Trustworthiness: Candidates should be highly trustworthy employees with a good moral and integrity record. (3) Technical Skills: Possess certain technical knowledge and be proficient in biometric verification technology and related terminal equipment. (4) Emergency Response Capabilities: Possess the ability to handle emergencies and make rapid decisions in emergency situations. (5) Years of Work Experience: Have certain work experience and be familiar with the operation process and service standards of the venue / sub-venue.

[0137] It should be noted that the above-listed conditions are just simple examples. Other conditions also apply, and this article does not impose specific limitations.

[0138] In S31, the first object refers to the super administrator of the target location. In this way, in some special scenarios, the first object can collect the target biometric information of the second object through its own logged-in terminal, so as to quickly realize identity verification and efficient response in emergency situations.

[0139] The biometric information in the embodiments of this application includes, but is not limited to, at least one of the following: fingerprints, facial features (such as a face), iris, voiceprints, palm prints, veins, etc.

[0140] Correspondingly, the verification operations in this article are identity verification operations related to these biometric information, such as palm swiping, fingerprint recognition, facial recognition, iris recognition, voiceprint recognition, and vein recognition. One or more verification operations can be used to verify the identity of an object; however, combining multiple verification operations results in higher accuracy in confirming the object's identity.

[0141] For ease of understanding, the following text mainly uses palm prints as an example. Correspondingly, the verification operation can also be called the palm scan operation. Of course, other types of biometric information and palm scan operations are equally applicable, but will not be elaborated on in this article.

[0142] In one alternative implementation, the first object needs to register and bind the administrator account information corresponding to the current location in advance, and only this account can perform critical operations in an emergency.

[0143] For example, merchants in sports venues, swimming pools, and entertainment venues, acting as super administrators, need to register and bind the administrator account information corresponding to their current venue on the merchant platform. Only this account information can trigger biometric verification operations for other objects, such as palm scanning, for quick photo location. Of course, other verification operations are also possible, such as facial recognition or iris recognition, which will not be elaborated on in this article.

[0144] For example, subway and bus conductors, acting as super administrators, need to register and bind the administrator account information corresponding to the current location on the relevant transportation platform. Only this account information can trigger the verification operation of other objects' biometric information, such as palm swiping, for quick photo location.

[0145] For example, airport or train station staff need to register and bind the administrator account information corresponding to the current location on the relevant transportation platform. Only this account information can trigger verification operations for other objects, such as palm swipe operation, for quick photo location; and so on.

[0146] Based on the above method, the super administrator's account information can be bound to the corresponding venue, which facilitates subsequent authentication.

[0147] This application takes into account that in most emergency or special circumstances, the second subject is unable to perform biometric verification normally, and therefore needs to be verified by an authorized first subject to verify the second subject's biometrics in order to authenticate the identity. Therefore, in order to improve the efficiency and security of the identity verification process, it supports the first subject to trigger the verification operation through a specific entry point.

[0148] For example, the first object can be redirected to a dedicated verification sub-application for identity verification via palm scan through the associated business sub-application, in order to collect the biometric information of the second object. One possible implementation method is as follows:

[0149] Before S31, the following step S30 can also be performed ( Figure 3 (Not shown):

[0150] S30: In response to the first redirection operation, the business sub-application associated with the first object is redirected to the verification sub-application.

[0151] Among them, business sub-applications refer to small applications or functional modules that run within a main application (such as instant messaging applications, third-party payment platforms, etc.) to provide specific services or functions.

[0152] Verification sub-applications are mini-programs or functional modules specifically designed to perform biometric verification. They can be embedded in the same or different main applications as business sub-applications for purposes such as identity verification and payment confirmation. Examples of mini-programs include palm recognition mini-programs, fingerprint verification mini-programs, face recognition mini-programs, iris recognition mini-programs, voiceprint recognition mini-programs, and vein recognition mini-programs.

[0153] In emergency situations, redirecting from the business sub-application to the verification sub-application allows the authorized primary entity (such as a security officer, staff member, or super administrator) to quickly verify the identity of the secondary entity (such as someone who needs assistance).

[0154] In the embodiments of this application, the first object corresponding to different locations may not be the same, and correspondingly, the business sub-application associated with the first object may also be different.

[0155] For example, in the context of a swimming pool, the business sub-application could be a mini-program offered by the swimming pool merchant on their service platform, providing various services such as ticket purchase, locker rental, class booking, payment, and membership management. In emergencies, safety officers can use this mini-program to redirect to the "Scan Palm" mini-program for identity verification, enabling them to quickly identify and assist those in need.

[0156] like Figure 4 The diagram illustrates a sub-application redirection in an embodiment of this application. In the context of a swimming pool, the business sub-application can be a merchant mini-program, and the verification sub-application can be a swipe-based mini-program. Both the merchant mini-program and the swipe-based mini-program can run within a main application, such as an instant messaging application. The merchant mini-program's interface includes a shortcut to the swipe-based mini-program, such as... Figure 4 In section 40, security personnel can use this shortcut to jump to the Shuazhang mini-program to trigger identity verification.

[0157] In this embodiment of the application, by using the swipe app of an instant messaging application, swimming pool safety officers can quickly verify the identity of customers. Especially in emergency situations, safety officers can quickly identify people who need help and take timely action.

[0158] Instant messaging applications, as widely used social applications, can have their built-in swipe functionality seamlessly integrated into the swimming pool's services. This way, swimming pool safety officers do not need to download any additional applications; they can simply complete identity verification through the merchant's mini-program, simplifying the operation process.

[0159] Similar to swimming pools, a membership management sub-application can be developed for gyms. A business sub-application is a small program provided by the gym on its service platform, offering various gym services such as member check-in, fitness records, and personal training appointments. When rapid identity verification is needed, staff can quickly activate the palm recognition function through this sub-application.

[0160] For example, stadiums hosting large-scale sporting events or activities can use the event sub-application to help participants with ticket verification, seating arrangements, and more. In emergencies, staff can use this business sub-application to quickly jump to the verification sub-application to verify spectators' identities, assist with emergency evacuation, or provide timely assistance; and so on.

[0161] It should be noted that the above-listed situations are just simple examples. Of course, other locations and related business sub-applications are also applicable to this application, and this document does not make specific limitations on them.

[0162] Based on S30, an optional implementation of S31 is as follows, including S311 to S312 ( Figure 3 (Not shown):

[0163] S311: By verifying the verification operation triggered by the first object in the sub-application, the account information of the first object is sent to the verification server through the authentication command so that the first object can be authenticated by the verification server.

[0164] Specifically, when collecting target biological information of a second object, it is necessary to authenticate the first object.

[0165] Once the verification sub-application responds to the verification operation triggered by the first object, it prepares to invoke the data collection device. In this embodiment, before actually collecting the target biometric information (such as facial information, palm information, etc.) of the second object, the system needs to confirm the current operator's permissions to ensure that only a legitimate administrator can continue the operation.

[0166] Therefore, in response to the verification operation triggered by the first object, the verification sub-application can send an authentication instruction containing the account information of the first object to the verification server, which will then authenticate the first object and analyze whether the first object has business management permissions in the target location.

[0167] Specifically, the verification server can store a mapping relationship between venue identifiers and super administrator account information. The authentication command can further include the venue identifier of the target venue. Thus, after receiving the authentication command containing the account information of the first object and the venue identifier of the target venue, the verification server extracts the account information and venue identifier from the authentication command, and then, in conjunction with the pre-stored mapping relationship, analyzes whether the super administrator under the target venue is the first object, or whether the first object is included. If so, it can be determined that the first object has business management permissions in the target venue, and the authentication result is returned to the first object's terminal, and then the following process is executed:

[0168] S312: If the authentication determines that the first object is an object with business management authority in the target location, then the collection device is invoked to collect the target biometric information of the second object.

[0169] The data acquisition devices also vary depending on the type of biometric information. These devices can include cameras, dedicated palmprint scanners, fingerprint scanners, microphones, and vein scanners. These devices can be integrated into the terminal as components or modules, or they can be independent of the terminal; this article does not impose specific limitations.

[0170] If the first object terminal receives the authentication result returned by the verification server, and the authentication result indicates that the first object is an object with business management authority in the target location, then it can call the collection device, thereby ensuring that the first object can collect the target biological information of the second object through the collection device.

[0171] Of course, the first object terminal can also store the mapping relationship between the location identifier and the super administrator account information locally. In this way, when the verification sub-application responds to the verification operation triggered by the first object, it does not need to send an authentication command to the verification server. Instead, it can directly analyze whether the super administrator in the target location is the first object, or whether the first object is included, etc., based on the locally stored mapping relationship.

[0172] Of course, if authentication fails, it means that the first object is not actually an object with business management authority in the target location, and therefore, the biometric information of the second object cannot be collected.

[0173] In this application embodiment, the authentication process is a crucial step in ensuring security and correct operation. Authentication can also occur at the following points in time:

[0174] Specifically, when the first object triggers the first redirect operation, authentication can be performed on the first object. If authentication is successful, it indicates that the first object is the object with business management permissions in the target location, and the business sub-application associated with the first object will redirect to the verification sub-application. If authentication fails, the redirect to the verification sub-application cannot be performed, and the collection of the second object's biometric information cannot continue.

[0175] For example, when a user attempts to navigate from a merchant's mini-program to the Shuazhang mini-program, the merchant's mini-program will first verify the user's administrator status. This authentication process can be performed by the verification server mentioned above, or it can be performed by the primary terminal. Specifically, authentication can be performed directly on the merchant's mini-program side (i.e., the business sub-application). For instance, the merchant's mini-program can check the super administrator's account information in local storage to confirm whether the user has been authenticated as the super administrator of the target location, and so on. This process ensures that only authenticated administrators can navigate from the merchant's mini-program to the Shuazhang mini-program, thereby guaranteeing system security and data integrity.

[0176] Of course, authentication can also be performed on the first object when it enters the business sub-application. If authentication is successful, it indicates that the first object is the one with business management permissions in the target location, thus triggering the first redirect operation. The business sub-application associated with the first object will redirect to the verification sub-application, and then the biometric information of the second object will be collected through the verification sub-application. If authentication fails, the object cannot enter the business sub-application, and therefore cannot be redirected to the verification sub-application, and consequently, the biometric information of the second object cannot be collected.

[0177] For example, when a user logs into a merchant's mini-program, the first-party terminal or the verification server (one type of verification server in this article) checks whether the user's identity matches the account information of the super administrator bound during registration. If the user is not the registered super administrator, they are not allowed to access functions involving sensitive operations (such as verification).

[0178] It should be noted that the timing and process of the authentication process listed above are just simple examples. Other authentication methods are also applicable to this application, as long as they are implemented before the first object collects the biometric information of the second object. This article does not make specific limitations.

[0179] In the above implementation, when an emergency occurs, the first object can jump to the verification sub-application through the business sub-application, and after the authentication is passed, the verification sub-application calls the collection device to collect the biometric information of other objects. Through the above authentication process, it can be ensured that only the first object with the right can perform critical operations in an emergency, thereby improving the efficiency of security management and enhancing the security of the venue.

[0180] Furthermore, by allowing users to navigate between sub-applications, biometric verification services can be centrally managed, simplifying backend operations. Super administrators can manage permissions and respond to emergencies on a unified platform, improving management efficiency.

[0181] Of course, in addition to triggering verification operations through sub-application redirection as described above, in this embodiment of the application, to improve the efficiency and security of the identity verification process, and considering the actual needs in emergency situations, the following methods can also be used to trigger verification operations:

[0182] Triggering method 1: QR code scanning.

[0183] The first person (i.e., the authorized super administrator or other authorized personnel) can trigger the biometric verification process by scanning a specific QR code. This QR code can be placed in key locations within the swimming pool, such as lifeguard stations and first-aid points. In case of an emergency, the first person simply needs to scan the QR code with their mobile device to quickly access the biometric verification interface and authenticate the identity of the second person (i.e., the person needing assistance). This method is simple, fast, and suitable for rapid response in emergency situations.

[0184] Triggering method two: voice command.

[0185] The first user can quickly access the biometric verification interface using a pre-set voice command, such as "xx, initiate emergency authentication." This method is particularly suitable for situations where the user's hands are unavailable or where rapid response is required. A simple voice command can activate the authentication process, not only increasing the speed of operation but also adding flexibility, especially in emergency situations where resources can be quickly mobilized.

[0186] Triggering method 3: Physical button or hardware device.

[0187] Dedicated physical buttons or hardware devices can be installed in the venue. When these devices are pressed or activated, they can immediately initiate the biometric verification process. For example, in a venue, emergency buttons can be installed in key areas. When these buttons are pressed, the application on the mobile or fixed terminal connected to the first person will automatically open the biometric verification interface. This method is particularly suitable for situations requiring immediate action, minimizing response time.

[0188] Of course, under some of the triggering methods listed above, the first object can also be authenticated before the verification operation is performed. This article does not make specific restrictions on this.

[0189] It should be noted that the triggering methods listed above are merely simple examples, and these methods can effectively support the first object to quickly and accurately perform palm-swiping authentication in emergency situations, thereby improving the efficiency of rescue or emergency response. Of course, other triggering methods are also applicable to the embodiments of this application, and will not be described in detail here.

[0190] S32: Send the location identifier and target biometric information of the target location to the verification server through a verification command, so that the verification server determines the candidate biometric information set based on the location identifier, and when the target biometric information matches the candidate biometric information set, determines the identity information of the second object based on the matched candidate biometric information; the candidate biometric information set contains the candidate biometric information of at least one candidate object, each candidate object being: an object in the target location that performs the target business by verifying its identity through biometrics.

[0191] In this embodiment, the object can perform target services through biometric verification in certain locations. For example, in a swimming pool, the target services include, but are not limited to, gate access, storage, and payment; in a gym, the target services include, but are not limited to, gate access, check-in, storage, and payment; and in a library, the target services include, but are not limited to, borrowing books, making and canceling reservations, and payment.

[0192] Taking a swimming pool as an example, such as Figure 5 As shown, this is a schematic diagram of a palm recognition scenario in an embodiment of this application. Wherein, Figure 5 This example illustrates palm-scanning for gate access. In a swimming pool, individuals can use palm scans to enter and exit changing rooms, and to swim. Specifically, when an individual arrives at the gate, they simply place their palm on the palm-scanning terminal installed on the gate, which quickly and accurately identifies the individual's identity. Once verification is successful, the gate automatically opens, allowing the individual to enter the changing room or pool area.

[0193] Taking a swimming pool as an example, such as Figure 6 As shown, this is a schematic diagram of another palm recognition scenario in an embodiment of this application. Wherein, Figure 6 This example illustrates how to access items by swiping your palm. In a swimming pool, an object can access items in a locker in the changing room by swiping its palm. Specifically, when using a locker, the object simply places its palm on the palm-swiping terminal installed on the locker, completing the access process with a simple swipe.

[0194] To ensure that an object can be quickly identified in the event of an emergency at a location, simplify the identity verification process, and improve identification efficiency, this application supports the collection and storage of the object's biometric information through a small set used for auxiliary identification, such as the location biometric information set in this paper.

[0195] Specifically, the verification command is sent after the first object collects the biometric information of the second object. The verification server can use this command to confirm the identity of the second object. The target biometric information in the verification command is used to confirm the identity of the second object, while the location identifier is used to confirm the set of location biometric information. Based on the location identifier, a matching set of location biometric information can be filtered out, i.e., the candidate biometric information set in this paper. Then, the target biometric information is retrieved from the candidate biometric information set to check if it matches, thereby improving retrieval efficiency.

[0196] In this embodiment of the application, the verification server can construct multiple sets of location biometric information. Each set of location biometric information is a database or data collection that stores the biometric information of objects in the corresponding location (such as swimming pool, gym, stadium, etc.) that perform target business (such as gate access, storage, payment, identity verification, etc.) through biometric verification. Furthermore, each location can construct one or more such sets according to different business needs, so each location can correspond to one or more sets of location biometric information.

[0197] When each site's biological information set is considered as a database, a database such as Structured Query Language (SQLite) can be used. SQLite is a lightweight database that adheres to the Atomicity-Consistency-Isolation-Durability (ACID) relational database management system. By storing the biological information of objects in an SQLite database, the system's security, operational efficiency, and management convenience can be improved, while also ensuring data consistency and durability.

[0198] The candidate biometric information set in this application is determined from these location biometric information sets. It is a location biometric information set related to the target location. After determining the candidate biometric information set, it can be searched in the candidate biometric information set. Specifically, the target biometric information is compared with each candidate biometric information in the candidate biometric information set. If there is a matching candidate biometric information, the candidate biometric information is matched. The identity information of the second object can be determined based on the candidate biometric information.

[0199] Specifically, the candidate biological information set in this application embodiment is a smaller database (referred to as the small database) compared to the large set used for general identification. This small database supports data retrieval by a single condition (specifically, the target biological information). Since the dataset is small and only involves one retrieval condition, the retrieval process is usually very fast. Moreover, using a single condition for retrieval generally does not result in multiple records being matched, so the retrieval results are highly accurate.

[0200] Optionally, candidate biological information includes, but is not limited to, at least one of the following:

[0201] The standard biometric information uploaded by the candidate when activating the biometric verification function; the latest biometric information collected when the candidate performs the target business by swiping their palm at the target location.

[0202] In this embodiment, each object uploads standard biometric information when activating the biometric verification function. This standard biometric information is collected by the object's terminal (such as a smartphone, tablet, etc.) or a verification terminal in the venue (such as a dedicated biometric verification device installed in the venue) when the object first registers or activates the biometric verification function. For example, when activating the palm recognition function for the first time, the object needs to place its palm at the designated position on the dedicated palm recognition device to capture a clear palm image.

[0203] This standard biometric information serves as the basis for subsequent object authentication. Subsequently, each time an object performs biometric verification, the verification server will compare the biometric information collected each time it is used (such as a palm image) with this standard biometric information to confirm the object's identity and ensure that only legally registered objects can use the relevant services and execute target business.

[0204] Taking a swimming pool as an example, if a user needs to activate functions such as palm-scanning for locker access and swimming turnstile access, their palm can be collected at an offline palm-scanning terminal. After collection, the terminal will display a QR code associated with the palm print. Initial activation requires the user to scan the code using an instant messaging application to link their identity. Then, they are redirected to the swimming pool's merchant mini-program for authorization and verification, thus activating the user's palm-scanning recognition capability and enabling the relevant applications at the venue. After activation, the user can then perform target services at the swimming pool by palm-scanning, such as opening locker machines or accessing the swimming pool turnstiles.

[0205] Furthermore, when an individual performs business operations at a location that supports palm recognition (such as a swimming pool, gym, or library), for example, by using palm recognition to pass through a gate or access items, the palm recognition terminal installed within the location will capture images of the individual's palm in real time. Specifically, when an individual places their palm on the palm recognition terminal, the terminal captures the current palm image and uses it as the latest palmprint data. This latest palmprint can be used for identification of a second individual in a subsequent emergency. Real-time palmprint capture reflects the current state of the palm and adapts to subtle changes in palm features; therefore, using the latest real-time palmprint data as a candidate palmprint allows for faster identity verification, especially in emergency situations, improving the accuracy and reliability of identification.

[0206] In addition, to protect the privacy of the objects, optimize storage space and improve system performance, deletion policies can be set for the biometric information set of the location, such as periodic deletion or irregular deletion. The specific deletion interval can be flexibly set according to business needs.

[0207] For example, if a location does not allow overnight stays, a daily deletion policy can be set up to clear the location's biometric data set once a day, retaining only the data from the most recent day. Taking a swimming pool as an example, during the early morning hours each day (e.g., between 1 AM and 2 AM), the verification server automatically deletes the biometric data of objects that performed the target business (such as storage or swimming through the gates) at the swimming pool the previous day, ensuring that the location's biometric data set only stores the activity records of that day, guaranteeing data freshness and security.

[0208] For example, in addition to daily deletion, you can also set fixed cycles for deletion based on business needs, such as every two days, once a week, or once a month; another example is that you can set a fixed time window, such as 7 days or 30 days, and the system will delete data that exceeds the time window every day to retain access records within a certain period of time; you can also trigger deletion after certain specific events occur, and so on.

[0209] The methods listed above are just simple examples, and these deletion strategies can be adjusted according to the specific business needs of the venue and the behavioral patterns of the objects to achieve the best privacy protection and system performance optimization.

[0210] By periodically or irregularly deleting a portion of historical data using the methods described above, the risk of potential data leakage can be reduced, ensuring that only the latest and relevant data is retained. At the same time, it can also free up some storage space and improve the system's response speed and performance.

[0211] In addition, considering that some places may have high traffic, if the auxiliary identification is divided only according to the place, there may be a lot of candidate biometric information in a small set. In order to further improve the retrieval efficiency, a time factor can be introduced to further label or divide the set of place biometric information according to the time interval.

[0212] Therefore, an optional implementation of S32 is as follows:

[0213] First, the collection time for the target biometric information at the target location is determined. Then, the collection time, location identifier, and target biometric information are sent to the verification server via a verification command. The verification server then determines a set of candidate biometric information based on the location identifier and collection time. Accordingly, each candidate is defined as an object that, within the time interval of the collection time, has verified its identity through biometric identification at the target location to perform the target service. In other words, the candidate biometric information in this set consists of the biometric information of objects who, within the time interval of the collection time, have verified their identity through biometric identification at the target location to perform the target service.

[0214] Specifically, each location can correspond to multiple sets of location biometric information, and different sets of location biometric information are bound to different time intervals. In this way, each set of location biometric information only stores the biometric information of the object whose identity is verified by biometrics in this location within the corresponding time interval to perform the target business.

[0215] For example, if the time interval is one day, then each location will generate a set of location biometric information every day. Or, if the time interval is two days, then each location will generate a set of location biometric information every two days. Furthermore, more detailed time intervals can be defined based on the location's operating hours. For instance, assuming a swimming pool is open from 8:00 AM to 10:00 PM daily, this operating time can be used as a time interval, or further subdivided based on this operating time, etc. This article does not impose specific limitations on this.

[0216] In this embodiment, to achieve efficient biometric verification services at the target location, the first target terminal needs to determine the specific time (i.e., the collection time) for collecting the target biometric information. After collecting the target biometric information, the first target terminal sends the collection time, location identifier (e.g., the unique ID of a swimming pool), and the target biometric information to the verification server via a verification command. The collection time in the verification command belongs to a time interval, and each location biometric information set is also bound to a time interval. Upon receiving the verification command, the verification server can filter out matching candidate biometric information sets based on the location identifier and the time interval to which the collection time belongs. This set contains the biometric information of all objects that have performed the target service through biometric verification at the target location within the time interval to which the collection time belongs. The server then retrieves the target biometric information from the candidate biometric information set to check for a match, thereby improving retrieval efficiency.

[0217] For example, a day can be considered a time interval, and the target location is a swimming pool. For that swimming pool, there would be a set of location biometric information each day. If someone (the second target) drowns in that swimming pool on that day, the swimming pool's safety officer (the first target), acting as the super administrator, can collect the drowning victim's target biometric information using the method described above. Assuming the collection time is 10:12 AM on September 5th, xx year (or accurate to the hour, or even the day), the time interval is September 5th, (xx year). Accordingly, the set of location biometric information for that swimming pool on September 5th is the candidate biometric information set. The verification server can use the stored candidate biometric information set to check whether the second target performed the target service via palm swipe on that day.

[0218] In this way, the scope of identity verification can be quickly narrowed, the efficiency and accuracy of identification can be improved, and the biometric information of candidates who actually appeared in the swimming pool during the relevant time period can be used for matching and verification.

[0219] In addition, considering that some places may be divided into different functional areas, i.e. sub-places, if only the place is used to divide the small set for auxiliary identification, there may be a lot of candidate biological information in a small set. In order to further improve the retrieval efficiency, time can be introduced to further label or divide the set of place biological information according to the sub-place.

[0220] Therefore, if the target location contains multiple sub-locations, an optional implementation of S32 is as follows:

[0221] First, the target sub-location for collecting target biometric information from the first object is determined among multiple sub-locations. Then, the location identifier, the sub-location identifier of the target sub-location, and the target biometric information are sent to the verification server through a verification command, so that the verification server can determine a set of candidate biometric information based on the location identifier and the sub-location identifier. Each candidate object is an object in the target sub-location that verifies its identity through biometrics to perform the target business.

[0222] Specifically, the verification server can filter out matching sets of biological information from multiple sets of biological information based on the location identifier and sub-location identifier, i.e., the candidate biological information set in this article, and then search the candidate biological information set to see if the target biological information is matched, so as to improve the retrieval efficiency.

[0223] In the embodiments of this application, there are many ways to determine the target sub-location. For example, the location information of the first object can be determined by the positioning of the first object terminal, and the target sub-location can be determined as which sub-location in the target location is based on this location information.

[0224] Alternatively, the redirection can be determined based on the first redirection operation of the first object. For example, different sub-venue pages can be set in the business sub-application. The first object can trigger the first redirection operation on any sub-venue page or a sub-venue page it has permission to access, redirecting from the business sub-application to the verification sub-application. Therefore, the target sub-venue can also be determined based on the sub-venue page when the first object triggers the first redirection operation, thus identifying which sub-venue within the target venue.

[0225] Taking a swimming pool as an example, the swimming pool can include the following four sub-areas: men's area, women's area, family area, and general area.

[0226] Assuming that in the swimming pool's merchant mini-program, each sub-venue corresponds to a sub-venue page, for example, after the first person enters the sub-venue page corresponding to the men's area, they can access the mini-program through the quick entry point on that sub-venue page (similar to...). Figure 4 If 40 is selected, the first redirect operation is triggered, and the user enters the "Swipe Palm" mini-program. The target sub-location is then the men's area of ​​the swimming pool.

[0227] Alternatively, the selection of the first object can be used to determine which sub-location the target location is. For example, in a business sub-application, the first object can trigger the first jump operation on the main page corresponding to the target location, jumping from the business sub-application to the verification sub-application. Before the sub-application jumps, the object can be prompted to select a sub-location, and the target sub-location can be determined based on the object's selection.

[0228] It should be noted that the above-listed methods for determining target sub-locations are merely simple examples. Other methods are also applicable to the embodiments of this application, and will not be elaborated upon here.

[0229] In the above implementation, the first target terminal also sends the sub-location identifier to the verification server. In this way, the verification server can efficiently find the most relevant set of candidate biometric information from a large amount of biometric data, thereby improving the accuracy and efficiency of identity verification. This method not only reduces unnecessary data processing, but also ensures accurate identity verification in specific locations and sub-locations.

[0230] Furthermore, it should be noted that whether introducing time factors or sub-location identifiers, the location biometric information set can also be optimized through the deletion strategies listed above. For example, certain location biometric information sets can be deleted periodically or irregularly, or some biometric information in certain location biometric information sets can be deleted, etc., which will not be repeated here.

[0231] It should be noted that the verification command can also include the sub-location identifier and the collection time. In this way, the verification server can also find the most relevant candidate biological information set from a large amount of biological information data based on the hierarchical screening mechanism. The specific implementation method is not specifically limited in this article. Furthermore, the information contained in the verification commands listed above are just simple examples. In addition, it can also include some auxiliary information for quickly realizing the identification of the second object. For example, it can further include the gender information of the second object. That is, when constructing the location biological information set, different genders can be labeled, or different location biological information sets can be constructed according to different genders, etc. This article does not specifically limit this.

[0232] S33: After receiving the identity information returned by the verification server, confirm the identity of the second object based on the identity information.

[0233] In this embodiment of the application, after verifying the palm image of the second object, the verification server will return the identity information bound to the object. The first object terminal can confirm the true identity of the second object based on the identity information.

[0234] Identity information refers to data used to uniquely identify and verify an individual's identity. In this embodiment, identity information refers to information related to the object's identity that is bound when the object activates the biometric verification function, such as account information. In addition, it can also be the object's real name, mobile phone number, email address, membership number, and even, in some higher security scenarios, ID card number, digital certificate, etc.

[0235] The information listed above can be used individually or in combination to enhance the security and accuracy of authentication.

[0236] Taking a swimming pool as an example, such as Figure 7 As shown, this is a schematic diagram of a palm-swiping item storage method in an embodiment of this application. The diagram illustrates the process of an object using palm-swiping technology to store items in a swimming pool's changing room. Assume a second object (which can be any object other than the swimming pool's super administrator) arrives at the swimming pool on September 5th (Friday) and performs the item storage service by palm-swiping at 10:12 AM. Figure 7 Before the customer scans their palm, the display interface of the palm-scanning terminal installed on the locker in the changing room shows the time, the number of available lockers (e.g., 50), and the total number of lockers (e.g., 54). The display interface also has a "Store / Retrieve" button. After clicking, the customer selects the palm-scanning method, and can then use the palm-scanning terminal installed on the locker to open the locker. After the palm scan is successful, the display interface on the palm-scanning terminal can remind the customer: "Locker door number 6 is open. Please take your items and close the locker door."

[0237] Suppose that after storing the items, the second person verifies their identity by swiping their palm and opens the gate to the swimming pool to swim.

[0238] In the event of an emergency such as drowning during swimming, the first person (the super administrator of the swimming pool) can collect the target palm print of the second person through the above method and send it to the palm print server for identity verification to confirm the identity information of the second person.

[0239] Considering that in emergency situations, it is crucial to quickly verify the identity of the second party, and the identity information returned by the swipe server may not directly indicate the identity of the second party, but the second party has previously performed the storage service, if the locker contains the second party's personal items, this can serve as a basis for further verification of their identity. Therefore, this application also provides a one-click locker opening function.

[0240] In one optional implementation, the identity information is the account information bound when the second object activates the biometric verification function, and the target business includes the item storage business. Then, one optional implementation of S33 includes the following processes S331 to S333. Figure 3 (Not shown):

[0241] S331: In response to the second jump operation, the verification sub-application is redirected to the business sub-application associated with the first object.

[0242] As mentioned above, the first object can trigger the first jump operation, jump to the verification sub-application through the business sub-application, and then collect the target biological information of the second object through the verification sub-application. After collecting the target biological information and sending the corresponding verification instruction to the verification server, it can return to the business sub-application. For example, in S331, when the first object performs the second jump operation, the verification sub-application jumps to the business sub-application associated with the first object. In this business sub-application, the verification result returned by the verification server can be presented.

[0243] For example, if the verification fails, it means that the target biometric information did not match any candidate biometric information set (i.e., when the target biometric information failed to match any candidate biometric information set). In this case, the identity information of the second object cannot be confirmed. The verification server can send a verification failure message to the first object's terminal. In addition, it can prompt the first object to re-collect the biometric information of the second object to improve the verification success rate, and so on.

[0244] For example, if verification is successful, it means that the target biometric information matches a candidate biometric information set (i.e., when the target biometric information matches a candidate biometric information in the candidate biometric information set). At this time, the identity information of the second object can be determined based on the matched candidate biometric information. The verification server can send a verification success message to the first object's terminal. In addition, it can also return the identity information of the second object, including but not limited to the second object's account information. Based on this account information, the locker last used by the second object can be automatically identified, recorded as the target locker, and opened via remote control service. The specific process is as follows:

[0245] S332: The business sub-application responds to the opening operation triggered by the first object and opens the target locker through the remote control service and in combination with the identity information; the target locker is the locker most recently used by the second object when performing the storage business through biometric verification in the target location.

[0246] Specifically, considering that the second party may use different lockers when performing the storage business at the target location multiple times at different times, the target locker in this article refers to the locker used last time.

[0247] In this embodiment of the application, the business sub-application supports one-click locker opening. Specifically, the business sub-application responds to the opening operation triggered by the first object, and through the remote control service, combined with the identity information of the second object, opens the locker last used by the second object in the target location when performing the storage business through biometric verification.

[0248] In practical applications, after the business sub-application responds to the opening operation triggered by the first object, it can send an opening instruction to the server corresponding to the business sub-application. The instruction contains the account information of the second object and / or the locker identifier of the target locker, and the target locker is opened through the server.

[0249] Of course, the verification server can also directly provide the locker identifier corresponding to the account information, which can be presented through pop-ups, overlays, etc. Based on the locker identifier, the target locker can be remotely controlled to open.

[0250] like Figure 8 The diagram shown illustrates a one-click locker retrieval system in an embodiment of this application. It displays an application page called "Merchant Mini Program," which includes a pop-up window displaying "xx Swimming Pool." Below this is a dialog box asking, "Men's lockers 2-6, one-click opening?" Two options, "Yes" and "No," are available. If the first user clicks "Yes," the corresponding locker in the swimming pool's changing room can be remotely opened, allowing the second user to retrieve their items.

[0251] Then, the identity information of the second person can be further confirmed based on the items in the locker. The specific process is as follows:

[0252] S333: Determine the identity information of the second object based on the items in the target locker.

[0253] Because the items in the lockers often have personal characteristics that can serve as supplementary verification, once the locker is opened, the first person can quickly confirm the actual identity of the second person based on the items inside, such as personal belongings or other identification documents.

[0254] In addition, opening the cabinet may help the first person quickly find other important information about the second person, such as emergency contact information and medical information, thereby improving the efficiency and targeting of the rescue.

[0255] Furthermore, if the locker contains items or medications needed for first aid, the first person can immediately retrieve them and use them to help the second person, further improving the effectiveness of first aid, and so on.

[0256] The above-described implementation not only improves the accuracy and security of identity verification but also achieves efficient and automated operation processes through remote control and service integration, reducing the time required for manual intervention and ensuring that the identity of a second party can be quickly and accurately confirmed and appropriate measures taken in emergency situations. Furthermore, this application also considers user experience, simplifying the operation process through features such as one-click cabinet opening.

[0257] Optionally, to ensure the security of identity information transmission, the verification server can also securely return the confirmed identity information of the second object to the first object terminal via a serial port.

[0258] Therefore, before S33, the first target terminal can receive the identity information returned by the verification server through the serial port. The specific implementation method of realizing secure communication between the two ends based on the serial port can be found in the relevant description of the verification server side below, and will not be repeated here.

[0259] Of course, in addition to identity information, other information can also be transmitted via serial port to further improve communication security. For example, the first object terminal and the verification server can transmit verification commands, authentication commands, authentication results, etc. via serial port. This article does not make specific limitations.

[0260] It should be noted that the above is a description of the identity recognition method in this application embodiment from the perspective of the first target terminal. The following is a further description of the identity recognition method in this application embodiment from the perspective of the verification server:

[0261] See Figure 9 The diagram shown is a flowchart of an identity recognition method provided in this application. Taking the verification server as the execution subject as an example, the specific implementation process of this method is as follows: S91 to S93:

[0262] S91: Receive a verification instruction sent by the first object terminal; wherein the verification instruction includes the location identifier of the target location and the target biometric information; the target biometric information is: the biometric information of the second object collected by the first object terminal in response to the verification operation triggered by the first object; the first object is an object with business management authority in the target location.

[0263] In this embodiment, after the first object collects the biometric information of the second object through its own terminal, it sends the information to the verification server for analysis to confirm the identity of the second object and return the information to the first object's terminal. However, to ensure that only authorized first objects can perform critical operations in emergency situations, improve security management efficiency, and enhance site security, authentication is performed on the first object before it collects the biometric information of the second object.

[0264] Accordingly, before determining the candidate biometric information set based on location identifiers, one possible authentication method is as follows:

[0265] First, the authentication command sent by the first object terminal is received; the authentication command is sent by the first object terminal in response to the verification operation triggered by the first object; then, the first object is authenticated according to the account information of the first object in the authentication command.

[0266] As mentioned above, in practical applications, the first object needs to register and bind the administrator account information corresponding to the current location in advance. Only this account can perform critical operations in emergency situations.

[0267] In this embodiment of the application, the verification server can store a mapping relationship between venue identifiers and super administrator account information. This mapping relationship can reflect the super administrator corresponding to each venue, or even each sub-venue. Specifically, this mapping relationship can be stored in a database, such as an SQLite database or other databases.

[0268] Specifically, when the first object triggers a verification operation through its terminal, the terminal responds by sending an authentication command to the verification server. This authentication command may contain the administrator account information of the first object when it registered and bound the current location. In addition, it may also contain the corresponding location identifier (or even the sub-location identifier). After receiving the authentication command containing the account information of the first object and the location identifier of the target location, the verification server extracts the account information and location identifier from the authentication command, and then queries the pre-stored mapping relationship in the database to analyze whether the super administrator under the target location is the first object, or whether the first object is included.

[0269] If the first object is included, it can be determined that the first object has business management authority in the target location, and the authentication result is returned to the first object's terminal. Subsequently, the first object's terminal can call the collection device to collect the target biometric information of the second object. Then, the target biometric information, along with some other information, is sent to the verification server so that the verification server can identify the second object.

[0270] If the first object is not included, it can be determined that the first object does not have business management authority in the target location, and the authentication result is returned to the first object's terminal. Subsequently, the first object's terminal cannot call the collection device to collect the target biometric information of the second object, and thus cannot perform subsequent identity recognition of the second object to protect the privacy of the second object.

[0271] In the above implementation, when an emergency occurs, the authentication server authenticates the first object (such as an administrator) to ensure that the first object's terminal can call the collection device to collect the second object's biometric information only after the authentication is passed. Through the above authentication process, it is effectively ensured that only the first object with the right to perform critical operations in an emergency, thereby improving security management efficiency and enhancing site security.

[0272] Specifically, after receiving a verification command containing the target's biometric information and location identifier from the first target terminal, the verification server can trigger the identity recognition process for the second target. The specific implementation method is as follows:

[0273] S92: Determine a set of candidate biometric information based on the location identifier; the set of candidate biometric information contains candidate biometric information of at least one candidate object, each candidate object being: an object in the target location that verifies its identity through biometrics to perform the target business.

[0274] Specifically, the verification command is sent after the first object collects the biometric information of the second object. The verification server can use this command to confirm the identity of the second object. The target biometric information in the verification command is used to confirm the identity of the second object, while the location identifier is used to confirm the set of location biometric information. Based on the location identifier, a matching set of location biometric information can be filtered out, i.e., the candidate biometric information set in this paper. Then, the target biometric information is retrieved from the candidate biometric information set to check if it matches, thereby improving retrieval efficiency.

[0275] In this embodiment of the application, the verification server side can construct multiple sets of location biometric information. Each location can construct one or more such sets according to different business needs. Therefore, each location can correspond to one or more sets of location biometric information. The specific implementation method is the same as the relevant description of the first object terminal side, and will not be repeated here.

[0276] Optionally, considering that some places may have high traffic, in order to further improve retrieval efficiency, a time factor can be introduced to further mark or divide the biometric information set of the place according to the time interval. In this way, each biometric information set of the place only stores the biometric information of the object that performs the target business by verifying identity through biometrics in the corresponding time interval. For details, please refer to the relevant description on the first object terminal side, which will not be repeated here.

[0277] Optionally, the biometric information of the objects stored in the location biometric information set may include the standard biometric information uploaded when the object enables the biometric verification function. Correspondingly, the candidate biometric information in the candidate biometric information set also includes the standard biometric information. Therefore, before executing S92, the standard biometric information uploaded when each object enables the biometric verification function may also be stored, and at least one location biometric information set may be constructed in the following manner:

[0278] For each location, if an object performs a target business through biometric verification within a specified time interval, the object's standard biometric information is added to the location's corresponding biometric information set.

[0279] For example, each day can be considered a time interval, and there are 5 venues, denoted as: Swimming Pool 1, Swimming Pool 2, ..., Swimming Pool 5. Then, for each swimming pool, a set of palm prints (a type of biometric information set in this paper) can be constructed each day. For example, on September 1, 2024, for the above 5 swimming pools, the following sets can be constructed: Swimming Pool 1 - Palm Print Set 1, Swimming Pool 2 - Palm Print Set 1, ..., Swimming Pool 5 - Palm Print Set 1; on September 2, 2024, for the above 5 swimming pools, the following sets can be constructed: Swimming Pool 1 - Palm Print Set 2, Swimming Pool 2 - Palm Print Set 2, ..., Swimming Pool 5 - Palm Print Set 2; ...

[0280] If we divide the venues into sub-venues, then for each swimming pool, we can construct multiple sets of palm prints for each venue every day, which will not be elaborated on here.

[0281] In this way, it is possible to effectively manage the objects in each location who verify their identity through biometrics to perform target business, and form a daily (i.e., each time interval) set of location biometric information. This method can update and maintain biometric information data in a timely manner, improve the accuracy and timeliness of identity verification, avoid identification errors caused by outdated data, facilitate subsequent identity verification, and thus improve the accuracy of identity verification.

[0282] In addition, to protect the privacy of the object, optimize storage space and improve system performance, a deletion policy for the location biometric information set can be set. For details, please refer to the relevant description on the first object terminal side. For example, the historical location biometric information set can be deleted every two days, or the historical location biometric information set can be deleted every day, etc. No specific limitation is made here.

[0283] Based on this, an optional implementation of S92 is as follows:

[0284] First, determine the time interval to which the collection time belongs; then, from at least one set of biometric information of a location, select a set of candidate biometric information that matches the location identifier and the time interval; wherein, each candidate object is: an object that performs target business by verifying its identity through biometrics in the target location within the time interval.

[0285] Here, the acquisition time refers to the time when the first object acquires the biological information of the second object. It can be a point in time or a short period of time. Correspondingly, the target biological information of the second object can also be one or more biological information. If the acquisition time is a short period of time, the target biological information can essentially be multiple palm images or a video stream containing palm images acquired during that short period of time.

[0286] In the above-described method of constructing location biometric information sets, each location biometric information set is also bound to a time interval. After receiving the verification instruction, the verification server can filter out matching candidate biometric information sets based on the location identifier and the time interval to which the collection time belongs. This set contains the biometric information of all objects that have performed the target business through biometric verification in the target location within the time interval to which the collection time belongs. Then, the server retrieves the target biometric information from the candidate biometric information set to see if it matches, thereby improving retrieval efficiency.

[0287] In the above implementation, combining time intervals to filter the candidate biometric information set can quickly narrow down the scope of identity verification, improve identification efficiency and accuracy, and ensure that only the biometric information of candidate objects who actually appeared in the swimming pool within the relevant time period is used for matching and verification.

[0288] In addition, when checking whether the target biological information matches the candidate biological information set, it is necessary to compare the target biological information with each candidate biological information in the candidate biological information set. There are many comparison methods, which are not specifically limited in this article.

[0289] Different detection methods can be used for different types of biometric information. For example, palm prints and faces can be compared through images, fingerprints can be compared based on minutiae features (such as endpoints and bifurcation points), voiceprints can be compared based on the spectral features of sound, veins can be compared based on the features of vein patterns, and so on.

[0290] The following is a simple explanation using palm prints as an example:

[0291] For example, key feature points of the target palm print can be extracted and compared with the feature points of each candidate palm print in the candidate palm print set to calculate the feature similarity between the target palm print and each candidate palm print. If the feature similarity exceeds a preset threshold, the two are considered a match. This process typically involves comparing the position, orientation, and texture details of the feature points to ensure accurate identification even under conditions of lighting, angle, or quality differences. By comparing candidate palm prints one by one, the palm scan server can determine whether the target palm print exists in the set, thereby completing the authentication of the second object.

[0292] For example, the images of the target palm print and candidate palm prints can be converted into feature vectors of fixed length, and then the distance between the target palm print and candidate palm prints (such as Euclidean distance or cosine similarity) can be calculated. By comparing these distances, the overall similarity between the two palm print images can be evaluated, and the feature similarity can be obtained, thereby determining whether they match. This method can capture the overall structural information of the palm print and improve the robustness of recognition.

[0293] It should be noted that the two comparison methods listed above are just simple examples. Other comparison methods are also applicable to the embodiments of this application, and will not be described in detail here.

[0294] Optionally, if there are multiple target biometrics, the identity information of the second object can also be determined in the following ways:

[0295] Based on target biometric information that meets preset quality requirements from multiple target biometric information sources, the target biometric information features of the second object are extracted. Candidate biometric information from the candidate biometric information set whose feature similarity to the target biometric information features is higher than a preset threshold is selected as the matched candidate biometric information. The account information associated with the matched candidate biometric information is used as the identity information of the second object. The account information of each candidate object in the candidate biometric information set is bound when the corresponding object activates the biometric verification function.

[0296] In this application embodiment, the information quality in the target biometric information refers to the accuracy and completeness of the collected biometric data. For example, clear fingerprint images, palm print images, complete facial features, and stable voiceprint spectra are all high-quality information that helps ensure the effectiveness and security of biometric identification.

[0297] Specifically, these multiple target biological information can be collected from multiple angles, or collected multiple times in a short period of time, or from video streams. This can obtain more information samples and increase the accuracy of selection.

[0298] It should be noted that the biological information collected in this application can be obtained through biopsy. Biopsy means that the biological information collected comes from a real human body, rather than a forgery such as a photograph or mold, in order to prevent fraud using prosthetic hands or digital images.

[0299] Based on this, when there are multiple target biometric information, the first step is to select one target biometric information whose information quality meets the preset quality requirements. This process can be understood as optimization, that is, selecting the target biometric information with the best information quality for matching to ensure accurate identity verification.

[0300] Taking palm prints as an example, when optimizing the collected palm images containing palm prints, the optimal palm image, that is, the target palm print that meets the preset quality requirements, can be selected by comprehensively evaluating factors such as palm size, angle, image contrast, image brightness, and sharpness. Of course, before optimization, each collected palm image can also be preprocessed, including noise reduction, contrast adjustment, and edge detection, to improve image quality.

[0301] Next, feature extraction is performed on the selected high-quality target biometric information to obtain target biometric features (such as key points or feature vectors). These target biometric features are then compared with each candidate biometric feature in the candidate biometric information set to calculate feature similarity. The specific calculation method is as described above and will not be repeated here. If a candidate biometric feature has a similarity to the target biometric feature higher than a preset threshold, that candidate biometric feature is considered a successful candidate. If multiple candidate biometric features have similarities to the target biometric feature higher than the preset threshold, the one with the highest similarity is considered a successful candidate. Furthermore, the account information associated with the successful candidate biometric feature is used as the identity information of the second object. This account information is bound when the object activates the biometric verification function.

[0302] In the above implementation, by screening high-quality biometric images and extracting their features, and then performing high-precision comparisons with a set of candidate biometric images, the accuracy and reliability of identity verification can be effectively improved. By setting preset quality requirements and feature similarity thresholds, the system can eliminate interference from low-quality images and focus on feature matching of high-quality biometric information. This not only reduces the possibility of misidentification but also improves the robustness of the verification process. Finally, the identity of the second object is determined based on the account information associated with the matched candidate biometric information, ensuring the security and effectiveness of identity verification.

[0303] In addition, considering that some places may be divided into different functional areas, i.e. sub-places, if only the place is used to divide the small set for auxiliary identification, there may be a lot of candidate biological information in a small set. In order to further improve the retrieval efficiency, time can be introduced to further label or divide the set of place biological information according to the sub-place.

[0304] Therefore, if the target location includes multiple sub-locations, and the first object collects target biological information in the target sub-location through the first object terminal, the verification instruction also includes the sub-location identifier of the target sub-location; based on this, an optional implementation of S92 is as follows:

[0305] The verification server first filters out multiple reference biometric information sets that match the location identifier from multiple location biometric information sets; then, it filters out candidate biometric information sets that match the sub-location identifier from multiple reference biometric information sets; thus, each candidate object in the candidate biometric information set is an object that can verify its identity through biometrics in the target sub-location to perform the target business.

[0306] Specifically, the verification server first filters out multiple reference biometric sets from multiple location biometric sets that match a specific location identifier (such as swimming pool 4) to narrow the search scope and retain only biometric data related to the specified location. Based on this, it further filters out candidate biometric sets that match a specific sub-location identifier (such as a certain area within swimming pool 4) from the multiple reference biometric sets selected in the previous step, further refining the search scope and ensuring that only objects that have performed target business through biometric verification within the specified sub-location are considered.

[0307] like Figure 10 The diagram illustrates a screening process for a candidate palmprint set in an embodiment of this application. Multiple location palmprint sets can be used for auxiliary identification. Taking the five swimming pools mentioned above as an example, assume swimming pool 1 has two sub-locations, corresponding to the palmprint sets for swimming pool 1-sub-location 1 and 1-sub-location 2; swimming pool 4 has four sub-locations, corresponding to the palmprint sets for swimming pool 4-sub-location 1, 4-sub-location 2, 4-sub-location 3, and 4-sub-location 4; swimming pools 2 and 3 are not divided into sub-locations, corresponding to the palmprint sets for swimming pool 2 and 3, respectively. Assuming the location identifier in the verification command represents swimming pool 4, the first screening locks in swimming pool 4, with four reference palmprint sets: swimming pool 4-sub-location 1, 4-sub-location 2, 4-sub-location 3, and 4-sub-location 4. Figure 10 The black-marked area indicates sub-venue 2. Therefore, the second screening narrows down the candidate palmprint set to the palmprint set of Swimming Pool 4 - Sub-venue 2. Figure 10 The part marked in black.

[0308] Through this hierarchical screening mechanism, the verification server can efficiently find the most relevant set of candidate biometric information from a large amount of biometric data, thereby improving the accuracy and efficiency of identity verification. This method not only reduces unnecessary data processing, but also ensures accurate identity verification in specific locations and sub-locations.

[0309] It should be noted that the verification command can also include the sub-location identifier and the collection time. In this way, the verification server can also find the most relevant candidate biological information set from a large amount of biological information data based on the hierarchical screening mechanism. The specific implementation method is not specifically limited in this article. Furthermore, the information contained in the verification commands listed above are just simple examples. In addition, it can also include some auxiliary information for quickly realizing the identification of the second object. For example, it can further include the gender information of the second object. That is, when constructing the location biological information set, different genders can be labeled, or different location biological information sets can be constructed according to different genders, etc. This article does not specifically limit this.

[0310] S93: When the target biometric information matches the candidate biometric information set, the identity information of the second object is determined based on the matched candidate biometric information, and the identity information is returned to the terminal of the first object.

[0311] In this embodiment of the application, after verifying the palm image of the second object, the verification server will return the identity information bound to the object. The first object terminal can confirm the true identity of the second object based on the identity information. For specific implementation details, please refer to the relevant description on the first object terminal side, which will not be repeated here.

[0312] Optionally, to ensure the security of identity information transmission, the verification server can also securely return the confirmed identity information of the second object to the first object terminal via a serial port.

[0313] Specifically, securely returning identity information via serial port involves ensuring the integrity and security of data during transmission. In this application embodiment, the following technical solutions can be adopted to achieve secure two-way communication based on serial port:

[0314] First, protocols such as RS-232, RS-422, and RS-485 can be selected as the serial communication protocol between the two ends. Among them, the RS-485 communication protocol supports multi-point communication and differential signal transmission, enabling higher data transmission rates and longer transmission distances. Therefore, this application takes RS-485 as the serial communication protocol as an example.

[0315] Furthermore, to ensure the security of communication data, either symmetric or asymmetric encryption algorithms can be used to encrypt the data. Symmetric encryption algorithms are suitable for encrypting small amounts of data, such as the Advanced Encryption Standard (AES) algorithm, which uses the same key for both encryption and decryption, ensuring that even if the data is intercepted, it cannot be easily read. Asymmetric encryption algorithms are suitable for encrypting large amounts of data, such as the RSA (Rivest-Shamir-Adleman) algorithm, which uses a public key and a private key for both encryption and decryption, ensuring that only the party holding the correct private key can decrypt the data.

[0316] The communication data in this article can be the identity information of a second party. Since the data volume is relatively small, a symmetric encryption algorithm can be used. If a symmetric encryption algorithm is used to transmit communication data, then when establishing a secure connection between the two ends, a key negotiation method can also be used. That is, both parties generate a consistent key through a certain key negotiation algorithm and use this key for communication encryption, further improving the security of data transmission.

[0317] During communication, communication data can be assembled into data frames according to a certain format for transmission, and the data frames can be parsed at the receiving end (such as the first target terminal). The design of the data frame can include a frame header, data length, data fields, frame trailer, etc., to ensure the integrity and correctness of the communication data.

[0318] Taking the account information, which is the second object of the communication data, as an example, the data field in the corresponding data frame is the account information. The frame header marks the beginning of the data frame, helping the receiving end to identify the existence of the data frame. The data length indicates the actual length of the data field, helping the receiving end to correctly parse the data. The frame tail marks the end of the data frame, helping the receiving end to identify the end position of the data frame.

[0319] Optionally, to prevent data from being tampered with or resent, information such as data integrity checks and timestamps can be added to the data frame to ensure the correctness and uniqueness of the data.

[0320] The data integrity checksum is used to detect errors during data transmission. The receiving end calculates the checksum of the received data and compares it with the checksum provided by the sending end to ensure data integrity. The timestamp is used to ensure data freshness and prevent replay attacks. The receiving end checks the timestamp to verify the freshness of the data and prevent replay attacks.

[0321] Optionally, to improve communication efficiency and security, hardware acceleration modules, such as hardware encryption chips or field-programmable gate arrays (FPGAs), can be used to accelerate encryption and decryption operations while improving system security.

[0322] Besides the serial port-based secure communication solutions listed above, other serial port methods can also be used. For example: implementing a two-way authentication mechanism to ensure the trustworthiness of both parties; using encrypted communication protocols, such as Transport Layer Security (TLS) / Secure Sockets Layer (SSL), to provide a secure tunnel for data transmission; implementing strict access control policies to allow only authorized devices to communicate via the serial port; ensuring the security of the serial port connection to prevent unauthorized physical access; using error detection codes (such as cyclic redundancy check) to detect errors in data transmission and request retransmission when necessary; implementing anti-tampering measures through hardware or firmware to ensure the serial port device is not maliciously modified; and regularly updating the serial port device firmware to fix known security vulnerabilities, etc.

[0323] These technical solutions can significantly improve the security of information returned via serial port. It is important to note that the specific technical solution should be selected based on the application scenario and security requirements; this article does not impose any specific limitations.

[0324] It should be noted that the above is an introduction to the identity recognition method in this application embodiment from the perspective of the verification server side. For ease of understanding, the identity recognition method in this application embodiment is briefly described below from the perspective of multi-terminal interaction:

[0325] The following example uses a swimming pool. Let's assume the first target is the swimming pool's safety officer, the business sub-application is the swimming pool's merchant mini-program, and the verification sub-application is the "Shuazhang" mini-program. Both of these mini-programs can run within an instant messaging application.

[0326] like Figure 11 As shown, this is an identity recognition service architecture based on instant messaging application swipe recognition technology in an embodiment of this application. The entire system consists of multiple parts, including a front-end comprising a venue administrator's mobile phone (a first object terminal), lockers, and turnstiles (two types of swipe terminals), and a back-end comprising an instant messaging application back-end (a swipe server) service (specifically, a cloud-based related recognition service) and a merchant back-end service. The following is a brief description of each part:

[0327] (a) Lockers and turnstiles.

[0328] The swimming pool can be equipped with lockers and turnstiles, each equipped with a palm recognition module for instant messaging applications. The palm recognition module for instant messaging applications in the lockers is a palm recognition hardware device integrated inside the lockers, used to identify the palm print of the user. The palm recognition module for instant messaging applications on the turnstiles is a palm recognition hardware device installed on the turnstiles, also used to identify the palm print of the user.

[0329] In practical applications, the modules listed above are manifested as a palm recognition APP on the front end. The palm recognition APP is an independent palm recognition application that provides richer functions and experiences, including a palm recognition module for recognizing the palm print of the object. This process involves biopsy and selection, as detailed in the above embodiments, which will not be repeated here.

[0330] Specifically, after the second person scans their palm using the palm-scanning app on the locker, the app further collects the person's palm information and sends the data to the instant messaging application's backend service for identification. Technically, this involves the palm-scanning app using a 3D camera to collect streaming media data of the second person's palm. After acquiring the streaming media data, it performs optimization. Simultaneously, the instant messaging application's backend service receives the palm data uploaded from the corresponding palm-scanning module of the locker, extracts features, and further obtains relevant information about the person. This information is then securely returned to the locker's machine via serial port. After the locker machine further verifies the person's identity, the person can open the locker to store their items. Once the person has finished storing their items, the locker automatically locks to ensure the safety of the belongings.

[0331] After storing their belongings, the second person can also verify their identity by swiping their palm and then swim through the turnstile installed in front of the swimming pool. The specific process is similar to the storage process described above, and will not be repeated here.

[0332] (ii) Instant messaging application backend services.

[0333] Instant messaging application backend services include administrator authorization services related to merchant platforms, instant messaging application palm recognition services (providing core algorithms and service support for palm recognition), as well as a large library for general recognition and a small library for auxiliary recognition.

[0334] In practical applications, swimming pool safety officers, acting as super administrators, pre-register and bind their accounts to the corresponding administrator accounts for the current venue. The administrator authorization service is used to grant or revoke the super administrator permissions for certain specific individuals. Other individuals will also pre-activate palm recognition capabilities for the current venue, and the standard palm prints uploaded by all individuals when activating palm recognition are stored in a large database.

[0335] In addition, the backend service of the instant messaging application will also establish a small database based on objects such as gates and storage, on a daily basis. This small database is used for the rapid location and identification of the second object in emergency situations, as described in this article, to ensure that the first object can quickly locate the identity of the current object in emergency situations when there is no wristband.

[0336] (iii) Mobile terminal for venue administrators.

[0337] The venue manager's mobile app refers to the mobile terminal used by the swimming pool venue. This mobile app has an instant messaging application installed, which can run merchant mini-programs and swipe-the-palm mini-programs.

[0338] In case of an emergency, the first person can be redirected to the "Scan Palm" mini-program via the merchant's mini-program. After the "Scan Palm" mini-program is launched, it can authenticate the first person through the authentication module. After successful authentication, it further calls the first person's mobile phone camera (such as the front camera) to guide the first person to capture the palm information (i.e., the target palm print) of the second person. After capturing the palm information, the "Scan Palm" mini-program can send an authentication command to the backend service of the instant messaging application through the identity verification module to upload the collected palm information. The backend service of the instant messaging application will combine the current date and the venue information to further search and confirm the identity of the second person in the previously established gate access database. For the specific process, please refer to the above embodiment. Repeated parts will not be described again.

[0339] (iv) Merchant backend services.

[0340] The merchant backend service includes a remote control service for lockers, which provides remote control functions for lockers, such as one-click opening and closing. Specifically, after the instant messaging application backend service confirms the identity of the second object, it returns the current identity information to the merchant mini-program. The first object can then associate with the locker using this current second object identity and open it with one click. The remote control service for lockers in the merchant backend service can respond to the one-click opening. For specific implementation details, please refer to the above embodiments; repeated details will not be elaborated further.

[0341] It should be noted that the above is a simple example using a swimming pool, and the same applies to other places, which will not be elaborated on here.

[0342] By designating security personnel as super administrators at specific locations, and enabling clapping and hand-photo recognition capabilities for these super administrators, a small-database single-factor search capability is provided, based on... Figure 11 The service architecture shown allows the super administrator to jump to the swipe app via the merchant's mini-program in case of an emergency. After confirming the identity, the swipe app can be opened with one click once the identity is sent back to the merchant's mini-program, ensuring the closed loop of swipe app application capabilities even in media replacement scenarios.

[0343] See Figure 12 The diagram shown is a flowchart of a multi-terminal interaction for identity recognition in an embodiment of this application. The venue security guard is the first object, the user is the second object, the venue security guard's mobile phone is the first object terminal, and the swipe terminal can be installed on a venue locker. The following is a detailed description of the process:

[0344] S1201: The user collects a palm image through the palm-swiping terminal.

[0345] S1202: Identity Recognition. Specifically, the palm-swiping terminal notifies the palm-swiping server to perform user identity recognition based on the collected palm image.

[0346] S1203: Return Identity. Specifically, the swipe server will return the user's identity verification result to the swipe terminal.

[0347] S1204: Return Identity. Specifically, the mobile terminal will return the user's identity verification result to the locker.

[0348] S1205: Open cabinet storage. The user is responsible for opening the cabinet for storage.

[0349] In summary, S1201 to S1205 indicate that: the user collects his palm image through the palm-swiping terminal, the captured palm image is sent to the palm-swiping server for identity recognition, the recognition result is returned, and the cabinet is opened for storage based on the recognition result. For specific implementation methods, please refer to the above embodiments, and repeated parts will not be described again.

[0350] S1206: Site safety officers open the "Scan Palm" mini-program on their mobile phones.

[0351] S1207: Captures an image of the user's palm. Specifically, the venue security officer uses a palm-scanning app on their mobile phone to access the phone's camera to take the image.

[0352] S1208: Identity Recognition. Specifically, the venue security officer notifies the palm-scanning server via their mobile phone, which then identifies the user based on the captured palm image.

[0353] S1209: Return Identity. Specifically, the mobile terminal will return the user's identity verification result to the site security officer's mobile phone.

[0354] S1210: Redirect to the merchant's mini-program. Specifically, the venue security officer will use the "scan palm" mini-program on their mobile phone to redirect back to the merchant's mini-program.

[0355] S1211: Open the cabinet to retrieve items and verify identity. This is done by the venue security personnel using a merchant's mini-program to open the cabinet with one click.

[0356] In summary, S1206 to S1211 indicate that in an emergency, the venue security officer opens the "Palm Scanning" mini-program on their mobile phone, takes a picture of the user's palm, and sends it to the Palm Scanning server for identity verification, returning the verification result. If the verification is successful, the user is redirected back to the merchant's mini-program to open the locker with one click. The locker receives the instruction and opens automatically, allowing the venue security officer to open the locker, retrieve the items, and verify the user's identity. For specific implementation details, please refer to the above embodiments; repeated details will not be elaborated upon.

[0357] It should be noted that, Figure 12 The process shown is just a simple example. Other interaction methods are also applicable to the embodiments of this application, and will not be described in detail here.

[0358] Based on the same inventive concept, embodiments of this application also provide an identity recognition device. For example... Figure 13 As shown, this is a structural schematic diagram of the identity recognition device 1300, which may include:

[0359] The receiving unit 1301 is configured to receive a verification instruction sent by a first object terminal; wherein the verification instruction includes a location identifier of the target location and target biometric information; the target biometric information is: biometric information of a second object collected by the first object terminal in response to a verification operation triggered by a first object; the first object is an object with business management authority in the target location;

[0360] Processing unit 1302 is configured to determine a candidate biometric information set based on the location identifier; the candidate biometric information set includes candidate biometric information of at least one candidate object, each of the candidate objects being an object in the target location that verifies its identity through biometrics to perform target business;

[0361] The identity verification unit 1303 is used to determine the identity information of the second object based on the matched candidate biometric information when the target biometric information matches the candidate biometric information set, and return the identity information to the first object terminal.

[0362] Optionally, the verification instruction may further include the acquisition time corresponding to the target biological information, in which case the processing unit 1302 is specifically used for:

[0363] Determine the time interval to which the acquisition time belongs;

[0364] From at least one set of location biometric information, a set of candidate biometric information that matches the location identifier and the time interval is selected; wherein each candidate object is an object that performs target business by verifying its identity through biometrics in the target location within the time interval.

[0365] Optionally, if the candidate biometric information includes standard biometric information uploaded when an object activates the biometric verification function, then the device further includes:

[0366] Construction unit 1304 is configured to store standard biometric information uploaded by each object when activating biometric verification function before the processing unit 1302 determines the candidate biometric information set based on the location identifier, and construct the at least one location biometric information set in the following manner:

[0367] For each location, if an object performs a target service through biometric verification within the time interval, the object's standard biometric information is added to the location's corresponding biometric information set.

[0368] Optionally, if the target location includes multiple sub-locations, and the first object collects the target biological information in the target sub-location through the first object terminal, then the verification instruction further includes the sub-location identifier of the target sub-location;

[0369] The processing unit 1302 is specifically used for:

[0370] From multiple sets of location biometric information, select multiple sets of reference biometric information that match the location identifier;

[0371] From the plurality of reference biometric information sets, a candidate biometric information set matching the sub-location identifier is selected; wherein each candidate object is an object in the target sub-location that verifies its identity through biometrics to perform the target business.

[0372] Optionally, the device further includes:

[0373] The authentication unit 1305 is configured to receive an authentication instruction sent by the first object terminal before the processing unit 1302 determines the candidate biometric information set based on the location identifier; the authentication instruction is sent by the first object terminal in response to a verification operation triggered by the first object.

[0374] The first object is authenticated based on the account information of the first object in the authentication instruction;

[0375] If authentication determines that the first object is an object with business management authority in the target location, then the terminal of the first object is notified to invoke the collection device to collect the target biological information of the second object through the collection device.

[0376] Optionally, there are multiple target biometric information, and the identity verification unit 1303 is specifically used for:

[0377] Based on the target biological information whose information quality meets the preset quality requirements among the multiple target biological information, the target biological information features of the second object are extracted;

[0378] Candidate biological information in the candidate biological information set whose feature similarity to the target biological information features is higher than a preset threshold is selected as the hit candidate biological information.

[0379] The account information associated with the matched candidate biometric information shall be used as the identity information of the second object;

[0380] The account information of each candidate in the candidate biometric information set is bound when the corresponding object activates the biometric verification function.

[0381] Based on the same inventive concept, embodiments of this application also provide another identity recognition device. For example... Figure 14 As shown, this is a structural schematic diagram of the identity recognition device 1400, which may include:

[0382] The response unit 1401 is used to collect the target biometric information of the second object in response to the verification operation triggered by the first object; wherein the first object is an object with business management authority in the target location;

[0383] The sending unit 1402 is configured to send the location identifier of the target location and the target biometric information to the verification server via a verification command, so that the verification server determines a set of candidate biometric information based on the location identifier, and when the target biometric information matches the set of candidate biometric information, determines the identity information of the second object based on the matched candidate biometric information; the set of candidate biometric information contains candidate biometric information of at least one candidate object, each of the candidate objects being an object in the target location that performs the target business by verifying its identity through biometrics;

[0384] The identity verification unit 1403 is used to verify the identity of the second object based on the identity information returned by the verification server.

[0385] Optionally, the sending unit 1402 is specifically used for:

[0386] Determine the collection time for collecting the target biological information at the target location;

[0387] The location identifier, the target biometric information, and the collection time are sent to the verification server via the verification command, so that the verification server determines the candidate biometric information set based on the location identifier and the collection time; correspondingly, each candidate object is an object that performs target business by verifying its identity through biometrics in the target location within the time interval to which the collection time belongs.

[0388] Optionally, if the target location includes multiple sub-locations, the sending unit 1402 is specifically used for:

[0389] Determine the target sub-location where the first object collects the target biological information among the plurality of sub-locations;

[0390] The location identifier, the sub-location identifier of the target sub-location, and the target biometric information are sent to the verification server via the verification command, so that the verification server determines a set of candidate biometric information based on the location identifier and the sub-location identifier; wherein, each candidate object is an object in the target sub-location whose identity is verified through biometrics to perform the target business.

[0391] Optionally, the response unit 1401 is further configured to:

[0392] Before collecting the target biometric information of the second object in response to the verification operation triggered by the first object, the business sub-application associated with the first object is redirected to the verification sub-application in response to the first redirection operation.

[0393] The response unit 1401 is specifically used for:

[0394] The verification sub-application responds to the verification operation triggered by the first object and sends the account information of the first object to the verification server through the authentication command, so as to authenticate the first object through the verification server.

[0395] If authentication determines that the first object is an object with business management authority in the target location, then the collection device is invoked to collect the target biometric information of the second object.

[0396] Optionally, if the identity information is the account information bound when the second object activates the biometric verification function, and the target business includes the item storage business, then the identity verification unit 1403 is specifically used for:

[0397] In response to the second redirection operation, the verification sub-application is redirected to the business sub-application associated with the first object;

[0398] The business sub-application responds to the opening operation triggered by the first object and opens the target locker through remote control service, combined with the identity information; the target locker is the locker most recently used by the second object in the target location when performing the storage service through biometric verification;

[0399] The identity information of the second object is determined based on the items in the target locker.

[0400] This application sets up super administrators for each location, such as a first object with business management authority in the target location, and opens up biometric verification capabilities to such objects. In some special scenarios (such as emergencies), the first object can collect the biometric information of the second object (i.e., the target biometric information) through its own logged-in terminal. This enables rapid identity verification and efficient response in emergencies. Furthermore, only the first object with the authority can perform critical operations in emergencies, improving security management efficiency and enhancing location security.

[0401] Furthermore, by sending the location identifier and verification command of the target location to the verification server, the verification server can determine a set of candidate biometric information that matches the target location after receiving the verification command. This set of candidate biometric information is only related to the target location and contains only the candidate biometric information of objects that have performed the target business in the target location. It is a small set used for auxiliary identification, rather than a large set used for general identification (containing the biometric information of all objects that have enabled biometric verification). Based on this set of candidate biometric information, the identity of the second object can be quickly identified, reducing the difficulty of identification and improving the efficiency of identity confirmation.

[0402] Based on this, after the verification server determines the identity information of the second object through the candidate biometric information set, it can send this information back to the first object terminal. The first object terminal can then confirm the actual identity of the second object based on this identity information, so as to quickly confirm the identity of the object in the case of media replacement.

[0403] For ease of description, the above sections are divided into modules (or units) according to their functions and described separately. Of course, in implementing this application, the functions of each module (or unit) can be implemented in one or more software or hardware components.

[0404] In this application embodiment, the terms "module" or "unit" refer to a computer program or part of a computer program that has a predetermined function and works with other related parts to achieve a predetermined goal, and can be implemented wholly or partially using software, hardware (such as processing circuitry or memory), or a combination thereof. Similarly, a processor (or multiple processors or memory) can be used to implement one or more modules or units. Furthermore, each module or unit can be part of an overall module or unit that includes the functionality of that module or unit.

[0405] Having introduced the identity recognition method and apparatus according to exemplary embodiments of this application, we will now introduce an electronic device according to another exemplary embodiment of this application.

[0406] Those skilled in the art will understand that various aspects of this application can be implemented as a system, method, or program product. Therefore, various aspects of this application can be specifically implemented in the following forms: a completely hardware implementation, a completely software implementation (including firmware, microcode, etc.), or a combination of hardware and software implementations, collectively referred to herein as a "circuit," "module," or "system."

[0407] Based on the same inventive concept as the above-described method embodiments, this application also provides an electronic device. In one embodiment, the electronic device may be a server, such as... Figure 1 The verification server is shown. In this embodiment, the electronic device can be structured as follows. Figure 15 As shown, it includes a memory 1501, a communication module 1503, and one or more processors 1502.

[0408] The memory 1501 is used to store computer programs executed by the processor 1502. The memory 1501 may mainly include a program storage area and a data storage area. The program storage area may store the operating system and programs required to run instant messaging functions, etc.; the data storage area may store various instant messaging information and operation instruction sets, etc.

[0409] Memory 1501 may be volatile memory, such as random-access memory (RAM); memory 1501 may also be non-volatile memory, such as read-only memory, flash memory, hard disk drive (HDD), or solid-state drive (SSD); or memory 1501 may be any other medium capable of carrying or storing a desired computer program having the form of instructions or data structures and accessible by a computer, but is not limited thereto. Memory 1501 may be a combination of the above-described memories.

[0410] Processor 1502 may include one or more central processing units (CPUs) or digital processing units, etc. Processor 1502 is used to implement the above-mentioned identity recognition method when calling computer programs stored in memory 1501.

[0411] The communication module 1503 is used to communicate with terminals and other servers.

[0412] This application embodiment does not limit the specific connection medium between the memory 1501, communication module 1503, and processor 1502. This application embodiment... Figure 15 The memory 1501 and the processor 1502 are connected via a bus 1504, and the bus 1504 is in Figure 15 The diagram uses thick lines to describe the connections between other components; these are for illustrative purposes only and should not be considered limiting. The 1504 bus can be divided into address bus, data bus, control bus, etc. For ease of description, Figure 15 It is described using only a thick line, but does not indicate that there is only one bus or one type of bus.

[0413] The memory 1501 stores a computer storage medium, which in turn stores computer-executable instructions for implementing the identity recognition method of this application embodiment. The processor 1502 is used to execute the aforementioned identity recognition method, such as... Figure 9 As shown.

[0414] In another embodiment, the electronic device may also be other electronic devices, such as... Figure 1 The first object terminal, verification terminal, etc. (hereinafter referred to as terminals) shown are illustrated. In this embodiment, the structure of the electronic device can be as follows: Figure 16As shown, it includes components such as: communication component 1610, memory 1620, display unit 1630, camera 1640, sensor 1650, audio circuit 1660, Bluetooth module 1670, processor 1680, etc.

[0415] The communication component 1610 is used to communicate with the server. In some embodiments, it may include a Circuit-Based Wireless Fidelity (WiFi) module, which is a short-range wireless transmission technology. Electronic devices can use the WiFi module to help users send and receive information.

[0416] The memory 1620 can be used to store software programs and data. The processor 1680 executes various functions of the terminal 110 and performs data processing by running the software programs or data stored in the memory 1620. The memory 1620 may include high-speed random access memory, and may also include non-volatile memory, such as at least one disk storage device, flash memory device, or other volatile solid-state storage device. The memory 1620 stores an operating system that enables the terminal to run. In this application, the memory 1620 may store the operating system and various application programs, and may also store a computer program that executes the identity recognition method of the embodiments of this application.

[0417] The display unit 1630 can also be used to display information input by the user or information provided to the user, as well as various menus of the terminal 110, in a graphical user interface (GUI). Specifically, the display unit 1630 may include a display screen 1632 disposed on the front of the terminal. The display screen 1632 may be configured as a liquid crystal display, a light-emitting diode, or the like. The display unit 1630 can be used to display the display interface shown in the embodiments of this application.

[0418] The display unit 1630 can also be used to receive input digital or character information and generate signal inputs related to user settings and function control of the terminal 110. Specifically, the display unit 1630 may include a touch screen 1631 disposed on the front of the terminal 110, which can collect touch operations of the user on or near it, such as clicking buttons, dragging scroll boxes, etc.

[0419] The touchscreen 1631 can be placed on top of the display screen 1632, or the touchscreen 1631 and the display screen 1632 can be integrated to realize the input and output functions of the terminal. After integration, it can be referred to as a touch display screen. In this application, the display unit 1630 can display the application and the corresponding operation steps.

[0420] Camera 1640 can be used to capture still images, which users can then share via an application. There can be one or multiple cameras 1640. An object is projected onto a photosensitive element through a lens, generating an optical image. This photosensitive element can be a charge-coupled device (CCD) or a complementary metal-oxide-semiconductor (CMOS) phototransistor. The photosensitive element converts the light signal into an electrical signal, which is then transmitted to the processor 1680 for conversion into a digital image signal.

[0421] The terminal may also include at least one sensor 1650, such as an accelerometer 1651, a proximity sensor 1652, a fingerprint sensor 1653, and a temperature sensor 1654. The terminal may also be equipped with other sensors such as a gyroscope, barometer, hygrometer, thermometer, infrared sensor, light sensor, and motion sensor.

[0422] Audio circuitry 1660, speaker 1661, and microphone 1662 provide an audio interface between the user and terminal 110. Audio circuitry 1660 converts received audio data into electrical signals, which are then transmitted to speaker 1661, where they are converted into sound signals for output. The terminal may also be equipped with volume buttons for adjusting the volume of the sound signal. Conversely, microphone 1662 converts collected sound signals into electrical signals, which are then received by audio circuitry 1660, converted back into audio data, and output to communication component 1610 for transmission to, for example, another terminal, or to memory 1620 for further processing.

[0423] The Bluetooth module 1670 is used to interact with other Bluetooth devices that also have a Bluetooth module via the Bluetooth protocol. For example, a terminal can establish a Bluetooth connection with a wearable electronic device (such as a smartwatch) that also has a Bluetooth module through the Bluetooth module 1670, thereby exchanging data.

[0424] The processor 1680 is the control center of the terminal, connecting various parts of the terminal through various interfaces and lines. It executes various functions and processes data by running or executing software programs stored in the memory 1620 and calling data stored in the memory 1620. In some embodiments, the processor 1680 may include one or more processing units; the processor 1680 may also integrate an application processor and a baseband processor, wherein the application processor mainly handles the operating system, user interface, and applications, and the baseband processor mainly handles wireless communication. It is understood that the baseband processor may not be integrated into the processor 1680. In this application, the processor 1680 can run the operating system, applications, user interface display and touch response, and the identity recognition method of this application embodiment. Furthermore, the processor 1680 is coupled to the display unit 1630.

[0425] In some possible implementations, various aspects of the identity verification method provided in this application can also be implemented in the form of a program product, which includes a computer program. When the program product is run on an electronic device, the computer program causes the electronic device to perform the steps of the identity verification method according to the various exemplary embodiments of this application described above. For example, the electronic device can perform actions such as... Figure 3 or Figure 9 The steps are shown in the figure.

[0426] The program product may employ any combination of one or more readable media. A readable medium may be a readable signal medium or a readable storage medium. A readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples (a non-exhaustive list) of readable storage media include: electrical connections having one or more wires, portable disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0427] The program product of the embodiments of this application may employ a portable compact disc read-only memory (CD-ROM) and include a computer program, and may run on an electronic device. However, the program product of this application is not limited thereto. In this document, the readable storage medium may be any tangible medium that contains or stores a program that may be used by or in conjunction with a command execution system, apparatus, or device.

[0428] A readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, carrying a readable computer program. This propagated data signal may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A readable signal medium may also be any readable medium other than a readable storage medium, capable of sending, propagating, or transmitting a program for use by or in conjunction with a command execution system, apparatus, or device.

[0429] Computer programs contained on readable media may be transmitted using any suitable medium, including but not limited to wireless, wired, optical fiber, RF, etc., or any suitable combination thereof.

[0430] Computer programs for performing the operations of this application can be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java and C++, and conventional procedural programming languages ​​such as C or similar languages. The computer program can execute entirely on the user's electronic device, partially on the user's electronic device, as a standalone software package, partially on the user's electronic device and partially on a remote electronic device, or entirely on a remote electronic device or server. In cases involving remote electronic devices, the remote electronic device can be connected to the user's electronic device via any type of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external electronic device (e.g., via the Internet using an Internet service provider).

[0431] It should be noted that although several units or sub-units of the device have been mentioned in the detailed description above, this division is merely exemplary and not mandatory. In fact, according to embodiments of this application, the features and functions of two or more units described above can be embodied in one unit. Conversely, the features and functions of one unit described above can be further divided and embodied by multiple units.

[0432] Furthermore, although the operations of the method of this application are described in a specific order in the accompanying drawings, this does not require or imply that these operations must be performed in that specific order, or that all the operations shown must be performed to achieve the desired result. Additionally or alternatively, certain steps may be omitted, multiple steps may be combined into one step, and / or one step may be broken down into multiple steps.

[0433] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing a computer-usable computer program.

[0434] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, produce a machine for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0435] These computer program commands may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the commands stored in the computer-readable storage medium produce an article of manufacture including command means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0436] These computer program commands can also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing the commands executed on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0437] Although preferred embodiments of this application have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of this application.

[0438] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Therefore, if such modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include such modifications and variations.

Claims

1. An identity recognition method, characterized by, The method comprises: receiving a verification instruction sent by a first object terminal; wherein the verification instruction comprises a site identifier of a target site and target biological information; the target biological information is biological information of a second object collected by the first object terminal in response to a verification operation triggered by a first object; the first object is an object having a business management right in the target site; determining a candidate biological information set according to the site identifier; the candidate biological information set comprises candidate biological information of at least one candidate object; each candidate object is an object that verifies identity by biological recognition in the target site to perform a target business; when the target biological information hits the candidate biological information set, determining identity information of the second object based on the hit candidate biological information, and returning the identity information to the first object terminal.

2. The method of claim 1, wherein, If the verification instruction further comprises a collection time corresponding to the target biological information, then determining the candidate biological information set according to the site identifier comprises: determining a time interval to which the collection time belongs; from at least one site biological information set, screening a candidate biological information set matching the site identifier and the time interval; wherein each candidate object is an object that verifies identity by biological recognition in the target site to perform a target business within the time interval.

3. The method of claim 2, wherein, If the candidate biological information comprises standard biological information uploaded by an object when the object opens a biological recognition verification function, then before determining the candidate biological information set according to the site identifier, the method further comprises: storing the standard biological information uploaded by each object when the object opens the biological recognition verification function, and constructing the at least one site biological information set by the following method: for each site, for each object that verifies and performs a target business in the site by biological recognition within the time interval, adding the standard biological information of the object to the site biological information set corresponding to the site.

4. The method according to any one of claims 1 to 3, characterized in that, If the target site comprises a plurality of sub-sites, and the first object collects the target biological information in a target sub-site in the plurality of sub-sites through the first object terminal, then the verification instruction further comprises a sub-site identifier of the target sub-site. Determining the candidate biological information set according to the site identifier comprises: from a plurality of site biological information sets, screening a plurality of reference biological information sets matching the site identifier; from the plurality of reference biological information sets, screening a candidate biological information set matching the sub-site identifier; wherein each candidate object is an object that verifies identity by biological recognition in the target sub-site to perform a target business.

5. The method according to any one of claims 1 to 3, characterized in that, Before determining the candidate biological information set according to the site identifier, the method further comprises: receiving an authentication instruction sent by the first object terminal; the authentication instruction is sent by the first object terminal in response to a verification operation triggered by the first object; authenticating the first object according to account information of the first object in the authentication instruction; If it is determined through authentication that the first object is an object having a business management right in the target place, the first object terminal is notified to call a collection device to collect target biological information of the second object through the collection device.

6. The method according to any one of claims 1 to 3, characterized in that, The target biological information has a plurality of target biological information, and when the target biological information hits the candidate biological information set, the identity information of the second object is determined based on the hit candidate biological information, comprising: Based on the target biological information in the plurality of target biological information, the target biological information of the second object is extracted. The candidate biological information in the candidate biological information set, and the feature similarity of the target biological information feature is higher than the preset threshold value, is used as the hit candidate biological information. The account information associated with the hit candidate biological information is used as the identity information of the second object. Wherein, the account information of each candidate object in the candidate biological information set is bound when the biological recognition verification function of the corresponding object is opened.

7. The method according to any one of claims 1 to 3, wherein The identity information is returned to the first object terminal through the serial port. The method comprises:

8. An identity recognition method, characterized by, In response to the verification operation triggered by the first object, the target biological information of the second object is collected; wherein the first object is an object having a business management right in the target place; The place identifier of the target place and the target biological information are sent to the verification server through a verification instruction, so that the verification server determines a candidate biological information set according to the place identifier, and determines the identity information of the second object based on the hit candidate biological information when the target biological information hits the candidate biological information set; the candidate biological information set contains candidate biological information of at least one candidate object, and each candidate object is an object that verifies identity through biological recognition to execute target business in the target place; After receiving the identity information returned by the verification server, the identity of the second object is confirmed according to the identity information. The place identifier of the target place and the target biological information are sent to the verification server through a verification instruction, so that the verification server determines a candidate biological information set according to the place identifier, comprising:

9. The method of claim 8, wherein, Determine the collection time of the target biological information in the target place; The place identifier, the target biological information and the collection time are sent to the verification server through the verification instruction, so that the verification server determines the candidate biological information set according to the place identifier and the collection time; correspondingly, each candidate object is an object that verifies identity through biological recognition to execute target business in the target place in the time interval to which the collection time belongs. If the target place contains a plurality of sub-places, the place identifier of the target place and the target biological information are sent to the verification server through a verification instruction, so that the verification server determines a candidate biological information set according to the place identifier, comprising:

10. The method of claim 8, wherein, ​ determine a target sub-site in the plurality of sub-sites where the first object collects the target biological information; send the site identifier, the sub-site identifier of the target sub-site, and the target biological information to a verification server through the verification instruction, so that the verification server determines a candidate biological information set according to the site identifier and the sub-site identifier; wherein each candidate object is an object that verifies identity through biological recognition in the target sub-site to perform a target business.

11. The method according to any one of claims 8 to 10, characterized in that, Before the target biological information of the second object is collected in response to the verification operation triggered by the first object, the method further includes: in response to a first jump operation, a business application associated with the first object jumps to a verification sub-application; then the target biological information of the second object is collected in response to the verification operation triggered by the first object, including: sending account information of the first object to the verification server through the authentication instruction through the verification sub-application in response to the verification operation triggered by the first object, so as to authenticate the first object through the verification server; if it is determined through authentication that the first object is an object with business management authority in the target site, then a collection device is called to collect the target biological information of the second object through the collection device.

12. The method according to any one of claims 8 to 10, characterized in that, The identity information is account information bound when the biological recognition verification function of the second object is opened, and the target business includes a storage business. Then, determining the identity of the second object according to the identity information includes: in response to a second jump operation, the verification sub-application jumps to a business sub-application associated with the first object; in response to an opening operation triggered by the first object through the business sub-application, a target storage cabinet is opened through a remote control service in combination with the identity information; the target storage cabinet is a storage cabinet that is most recently used by the second object when performing a storage business through biological recognition verification in the target site; determining the identity information of the second object according to the items in the target storage cabinet.

13. An identity recognition apparatus, characterized by comprising: The device includes: a receiving unit configured to receive a verification instruction sent by a first object terminal; wherein the verification instruction contains a site identifier of a target site and target biological information; the target biological information is biological information of a second object collected by the first object terminal in response to a verification operation triggered by the first object; the first object is an object with business management authority in the target site; a processing unit configured to determine a candidate biological information set according to the site identifier; the candidate biological information set contains candidate biological information of at least one candidate object; each candidate object is an object that verifies identity through biological recognition in the target site to perform a target business; an identity confirmation unit configured to, when the target biological information hits the candidate biological information set, determine identity information of the second object based on the hit candidate biological information, and return the identity information to the first object terminal.

14. An identity recognition apparatus characterized by comprising: The device includes: A response unit is configured to collect target biological information of the second object in response to the verification operation triggered by the first object, wherein the first object is an object having a business management right in the target site; A sending unit is configured to send a site identifier of the target site and the target biological information to a verification server through a verification instruction, so that the verification server determines a candidate biological information set according to the site identifier, and determines identity information of the second object based on a hit candidate biological information when the target biological information hits the candidate biological information set; the candidate biological information set contains candidate biological information of at least one candidate object, and each candidate object is an object that verifies identity through biological recognition to perform a target business in the target site; An identity confirmation unit is configured to confirm identity of the second object according to the identity information after receiving the identity information returned by the verification server.

15. An electronic device, comprising: It includes a processor and a memory, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of any one of the methods in claims 1-12.

16. A computer-readable storage medium, characterized in that, It includes a computer program, and when the computer program runs on an electronic device, the computer program is used to make the electronic device execute the steps of any one of the methods in claims 1-12.

17. A computer program product, characterised in that, It includes a computer program stored in a computer readable storage medium; when the processor of an electronic device reads the computer program from the computer readable storage medium, the processor executes the computer program, so that the electronic device executes the steps of any one of the methods in claims 1-12.