Identity authentication methods and active pen

Abstract

This application relates to an authentication method and an active pen. The method includes: during a user's writing activity on a host computer's display screen using the active pen, sending the user's identity information bound to the active pen during this writing activity to the host computer; and acquiring first and second sensing data collected by sensors integrated in the active pen; wherein the first sensing data includes data characterizing the user's hand movement features during writing; and the second sensing data includes data characterizing the user's writing behavior features during writing; and sending the first and second sensing data to the host computer; wherein the user's identity information, the first sensing data, and the second sensing data are used by the host computer to authenticate the user's identity. This method can improve the security and accuracy of the identity verification process.

Description

Technical Field

[0001] This application relates to the field of computer input device technology, and in particular to an authentication method and an active pen. Background Technology

[0002] With the popularization of paperless office, electronic contracts, mobile payment and e-government, handwriting authentication based on touch screen and active pen has become a key link to ensure operational security and legal validity.

[0003] Traditional identity authentication mainly relies on static image comparison, such as scanning handwritten images. This verification method is easily counterfeited, copied, or tampered with, has low security, and cannot adapt to the rapid development of highly reliable, paperless signature scenarios. Summary of the Invention

[0004] Therefore, it is necessary to provide an identity authentication method and an active pen to address the aforementioned technical issues, which can improve the security and accuracy of the identity authentication process.

[0005] Firstly, this application provides an authentication method for use with an active pen, comprising:

[0006] During the process of a user writing on the display screen of the host computer using the active pen, the user's identity information bound to the active pen during this writing session is sent to the host computer; and,

[0007] The system acquires first and second sensing data collected by sensors integrated in the active pen; wherein the first sensing data includes data characterizing the user's hand movement characteristics during writing; and the second sensing data includes data characterizing the user's writing behavior characteristics during writing.

[0008] The first sensing data and the second sensing data are sent to the host; wherein the user identity information, the first sensing data, and the second sensing data are used by the host to authenticate the user.

[0009] Secondly, this application provides an authentication method applied to a host, including:

[0010] During the process of a user writing on the display screen of the host computer using the active pen, the user's identity information, first sensor data, and second sensor data sent by the active pen are acquired. The user's identity information is bound to the active pen during this writing session. The first and second sensor data are collected by sensors integrated into the active pen. The first sensor data includes data characterizing the user's hand movement features during writing; the second sensor data includes data characterizing the user's writing behavior features during writing.

[0011] The user is authenticated based on the user identity information, the first sensor data, and the second sensor data.

[0012] Thirdly, this application also provides an identity authentication device, configured on an active pen, comprising:

[0013] The data transmission module is used to send the user identity information bound to the active pen during the writing process to the host computer while the user is writing on the display screen of the host computer using the active pen; and,

[0014] The data acquisition module is used to acquire first sensing data and second sensing data collected by the sensors integrated in the active pen; wherein, the first sensing data includes data characterizing the user's hand movement characteristics during writing; and the second sensing data includes data characterizing the user's writing behavior characteristics during writing.

[0015] The first authentication module is used to send the first sensing data and the second sensing data to the host; wherein the user identity information, the first sensing data, and the second sensing data are used by the host to authenticate the user.

[0016] Fourthly, this application also provides an identity authentication device configured in a host, comprising:

[0017] The data receiving module is used to acquire user identity information, first sensor data, and second sensor data sent by the active pen during the process of a user writing on the display screen of the host computer using the active pen; wherein, the user identity information is bound to the active pen during this writing, the first sensor data and the second sensor data are collected by sensors integrated in the active pen, the first sensor data includes data characterizing the user's hand movement characteristics during the writing process, and the second sensor data includes data characterizing the user's writing behavior characteristics during the writing process;

[0018] The second authentication module is used to authenticate the user's identity based on the user's identity information, the first sensor data, and the second sensor data.

[0019] Fifthly, this application also provides an active pen, which includes a pen body, a pen tip, a sensor, and a control unit;

[0020] The control unit is used for:

[0021] During the process of a user writing on the display screen of the host computer using the active pen, the user's identity information bound to the active pen during this writing session is sent to the host computer; and,

[0022] The system acquires first and second sensing data collected by sensors integrated in the active pen; wherein the first sensing data includes data characterizing the user's hand movement characteristics during writing; and the second sensing data includes data characterizing the user's writing behavior characteristics during writing.

[0023] The first sensing data and the second sensing data are sent to the host; wherein the user identity information, the first sensing data, and the second sensing data are used by the host to authenticate the user.

[0024] Sixthly, this application also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0025] During the process of a user writing on the display screen of the host computer using the active pen, the user identity information, first sensor data, and second sensor data sent by the active pen are acquired. The user identity information is bound to the active pen during this writing session. The first and second sensor data are collected by sensors integrated into the active pen. The first sensor data includes data characterizing the user's hand movement features during writing; the second sensor data includes data characterizing the user's writing behavior features during writing.

[0026] The user is authenticated based on the user identity information, the first sensor data, and the second sensor data.

[0027] Seventhly, this application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, performs the following steps:

[0028] During the process of a user writing on the display screen of the host computer using the active pen, the user identity information, first sensor data, and second sensor data sent by the active pen are acquired. The user identity information is bound to the active pen during this writing session. The first and second sensor data are collected by sensors integrated into the active pen. The first sensor data includes data characterizing the user's hand movement features during writing; the second sensor data includes data characterizing the user's writing behavior features during writing.

[0029] The user is authenticated based on the user identity information, the first sensor data, and the second sensor data.

[0030] Eighthly, this application also provides a computer program product, including a computer program that, when executed by a processor, performs the following steps:

[0031] During the process of a user writing on the display screen of the host computer using the active pen, the user identity information, first sensor data, and second sensor data sent by the active pen are acquired. The user identity information is bound to the active pen during this writing session. The first and second sensor data are collected by sensors integrated into the active pen. The first sensor data includes data characterizing the user's hand movement features during writing; the second sensor data includes data characterizing the user's writing behavior features during writing.

[0032] The user is authenticated based on the user identity information, the first sensor data, and the second sensor data.

[0033] The aforementioned authentication method and active pen collect macroscopic hand movement features through a pen body sensor and microscopic writing behavior features through a pen tip sensor. These two types of data form a complete biometric profile of the user's writing, which is richer in feature dimensions compared to single sensor acquisition. User identity information is synchronously bound and transmitted with writing operations and sensor data, preventing the separation of identity information from writing behavior and the theft of identity information for writing. This ensures that every writing operation corresponds to the real user, improves authentication traceability, and solves the problems of low security, easy forgery, and poor accuracy of traditional electronic identity authentication. Attached Figure Description

[0034] To more clearly illustrate the technical solutions in the embodiments or related technologies of this application, the accompanying drawings used in the description of the embodiments or related technologies will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0035] Figure 1 This is a diagram illustrating the application environment of an identity authentication method in one embodiment.

[0036] Figure 2 This is a flowchart illustrating an identity authentication method in one embodiment;

[0037] Figure 3 This is a flowchart illustrating the identity authentication method in another embodiment;

[0038] Figure 4 This is a schematic diagram of the user authentication process in one embodiment;

[0039] Figure 5This is a schematic diagram of the user authentication process in another embodiment;

[0040] Figure 6 This is a schematic diagram of the active pen structure in one embodiment;

[0041] Figure 7 This is a schematic diagram of an active pen integrating a capacitive touch device in one embodiment;

[0042] Figure 8 This is a schematic diagram of an active pen with integrated electrodes in one embodiment;

[0043] Figure 9 This is a signaling diagram of an authentication method in one embodiment;

[0044] Figure 10 This is a structural block diagram of an identity authentication device in one embodiment;

[0045] Figure 11 This is a structural block diagram of an identity authentication device in another embodiment;

[0046] Figure 12 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0047] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0048] The identity authentication method provided in this application embodiment can be applied to, for example, Figure 1 In the application environment shown, the stylus 101 can communicate with the host 102 via a network or Bluetooth. The stylus 101 refers to a writing input device integrating a pen tip sensor, a pen body sensor, and a control unit. In this embodiment, the stylus is not limited to a pen shape, but also includes writing input devices with the same functions. The host 102 refers to an electronic device with data receiving, data processing, handwriting synthesis, and display / output functions. In this embodiment, the host 102 includes, but is not limited to, smartphones, tablets, laptops, desktop computers, smart writing tablets, and other smart terminal devices with data processing and display functions.

[0049] In one exemplary embodiment, such as Figure 2 As shown, an identity authentication method is provided, which can be applied to... Figure 1 Taking the active pen 101 as an example, the explanation includes the following steps:

[0050] S201: During the process of the user writing on the display screen of the host using the active pen, the user identity information bound to the active pen during this writing is sent to the host.

[0051] The user identity information can be pre-entered and exclusively bound to the active pen hardware, serving as basic identity data to uniquely identify the writing user and clarify the subject to whom the writing operation belongs. In this embodiment, the active pen supports two flexible input and binding modes to adapt to different usage scenarios.

[0052] The writing process refers to the user's action of inputting handwriting using an active pen on the host's display screen. During this process, user identity information, hand movement characteristic data, and writing behavior characteristic data are collected and used as the basis for the host to authenticate the user. The content input during the writing process can be at least one of the following: pre-set text, numbers, symbols, signatures, graphics, doodles, or arbitrary handwriting patterns.

[0053] The active pen uses a real-time synchronous sending mode, which can ensure that the identity subject corresponding to this writing operation is unique and avoid mismatch between identity information and writing behavior.

[0054] Optionally, during the entire dynamic writing period—from when the user holds the active pen, the pen tip touches the host's display screen to begin writing, until writing is completed—the active pen synchronously transmits pre-bound exclusive user identity information to the host device, achieving real-time binding and transmission of writing operations and identity information. Specifically, the active pen has a built-in pen tip touch detection module that monitors the contact status between the pen tip and the host's display screen in real time. The moment the pen tip first touches the screen and the writing action begins, a writing start trigger signal is immediately generated, simultaneously waking up the active pen's internal identity information transmission module, avoiding invalid transmission and power consumption during standby.

[0055] After receiving a trigger signal, the active pen retrieves the identity information from the corresponding storage area according to the preset binding mode. After retrieval, the identity information data packet is sent to the host in real time through a pre-established communication link. From the moment the pen tip touches the screen until writing is completed and the pen tip leaves the screen, synchronous verification frames can be sent periodically to ensure that the host locks the current writing user's identity throughout the process, avoiding the loss of identity binding due to mid-process disconnection.

[0056] S202, acquire the first sensing data and the second sensing data collected by the sensors integrated in the active pen.

[0057] The first sensor data includes data characterizing the user's hand movement characteristics during the writing process; the second sensor data includes data characterizing the user's writing behavior characteristics during the writing process.

[0058] The active pen integrates sensors, which can be categorized into tip sensors and body sensors based on their placement. The body sensor, which collects hand movement-related features, is installed on the main body of the pen, not the tip, and is used to sense how the hand holds and moves the pen. In this embodiment, the body sensor includes at least one of a six-axis sensor, a capacitive touch device, and a micro-electromyography sensor; the capacitive touch device covers the periphery of the active pen body. The first sensing data includes at least one of speed data, pen grip feature data, and electromyography signals from the user's hand while holding the active pen during writing; wherein, the speed data characterizes the hand movement features during writing.

[0059] The six-axis sensors, typically accelerometers and gyroscopes, are used to collect data reflecting the dynamic movements of the hand in the air or while writing, such as the pen's speed, acceleration, angle, posture, and trajectory. Capacitive touch devices are placed on the pen's surface to detect data reflecting each individual's unique pen-holding habits, including the finger's contact position, contact area, grip posture, grip tightness, and the area covered by the fingers. Miniature electromyography (EMG) sensors are attached to the inner wall or surface of the pen, close to the skin of the hand, to collect weak electrical signals generated by the hand muscles during gripping, applying force, and writing, reflecting the characteristics of muscle movement during writing.

[0060] Speed ​​data reflects the speed and acceleration changes of the active pen movement during writing. Each person's writing speed and acceleration / deceleration habits differ, representing unique behavioral characteristics. Pen grip characteristics include the height of the grip, the number of finger contact points, the contact area, the grip area, and the tightness of the grip. These are fixed pen grip habits formed over a long period and are unique to each individual. Electromyography (EMG) signals are bioelectrical signals generated by the contraction of the finger and wrist muscles during writing. These are deep physiological characteristics that cannot be imitated or forged.

[0061] The pen sensor combines a six-axis sensor, capacitive touch device, and miniature electromyography sensor to collect hand features from three levels: movement speed, pen grip habits, and electromyographic signals. This data forms the first sensing data, which is used to accurately identify the user's identity and significantly improve the security and anti-counterfeiting capabilities of identity authentication.

[0062] The core of the collected second sensor data characterizes the user's unique writing habits, including writing pressure and tilt angle during writing. The pen tip sensor is typically a pressure sensor, a writing trajectory positioning sensor, or a pen tip contact duration sensor. In this embodiment, the pen tip sensor includes a pressure sensor. Electrodes are also arranged at the tip of the active pen. The tilt angle of the active pen is determined by the signal coupling strength between the pen tip electrode and at least one electrode disposed on the outer periphery of the pen tip or on the pen body, or by the ratio / phase difference of the signal strength received by multiple electrodes spaced axially along the pen tip or pen body.

[0063] The pressure sensor is connected to the pen tip and is used to detect information such as the magnitude of the pressure applied when the pen tip contacts the display screen, the trend of pressure change, and the duration of pressure. Electrodes are arranged in the pen tip area and near the front end of the pen barrel, working in conjunction with the display screen of the host to sense spatial information such as the pen tip's tilt posture and orientation angle relative to the screen.

[0064] The second set of sensor data is used to characterize the user's writing behavior. Writing pressure information, collected by a pressure sensor, reflects the magnitude, variation, and rhythm of pressure applied to different strokes during writing. Each person's writing pressure habits are unique, making it a crucial behavioral characteristic for distinguishing different users. The tilt angle reflects the direction and angle of the pen's tilt relative to the host's display screen during writing. Stable differences exist in the pen grip angle and pen movement angle among different users, further enhancing the distinguishability and security of identity authentication.

[0065] By collecting writing force through a pressure sensor, and determining the tilt angle by the signal relationship between the pen tip electrode and the pen body electrode obtained through the display screen, or by the signal intensity ratio between multiple pen body electrodes, a second set of sensing data is formed. This data, combined with the first set of sensing data collected by the pen body sensor, enables multi-dimensional biometric authentication that integrates writing force, stroke angle, hand movement, pen grip habits, and electromyography signals, significantly improving the accuracy of identity authentication and its anti-counterfeiting capabilities.

[0066] Optionally, data acquisition is fully synchronized with the writing action. Data acquisition is triggered when the pen tip touches the screen and ends when the pen tip leaves the screen. High-frequency continuous acquisition is performed throughout the process to capture complete hand movement dynamics.

[0067] S203, send the first sensor data and the second sensor data to the host.

[0068] Among them, user identity information, first sensor data, and second sensor data are used by the host to authenticate the user's identity.

[0069] Optionally, after the active pen completes the synchronous data acquisition of the pen body and pen tip dual sensors, it packages the two types of sensor data and transmits them to the host synchronously or in real time to form a complete verification data group with the user's identity information. The two types of data can be transmitted together with the identity information or transmitted synchronously through separate links to ensure data timing consistency.

[0070] In this embodiment of the application, the transmission process must ensure the integrity, real-time performance and temporal correlation of the data, and ensure that the sensing data corresponds to the current writing and the corresponding identity information, so as to avoid data loss, misalignment or tampering.

[0071] After receiving user identity information, first sensor data, and second sensor data, the host initiates multi-dimensional identity authentication logic, rather than single-dimensional verification. For example, it first verifies the basic user identity information, then compares, matches, and verifies the real-time collected first and second sensor data with the pre-stored standard writing template data for the user (including standard hand movement features, standard writing behavior features, etc.), and finally determines whether the current writing user is the legitimate user corresponding to the identity information.

[0072] In an exemplary embodiment, if the stylus integrates a high-performance data processing module, after collecting the first sensor data, the stylus can analyze the first sensor data to obtain the user's actual hand movement characteristics. Further, the actual hand movement information is compared with standard hand movement information corresponding to pre-stored user identity information for preliminary identity verification. If the preliminary identity verification is successful, the second sensor data is transmitted to the host, allowing the host to analyze the received second sensor data to obtain the user's actual writing behavior characteristics. These actual behavior characteristics are then compared with standard writing behavior characteristics corresponding to pre-stored user identity information to ultimately determine whether the current writing user is the legitimate user corresponding to the identity information.

[0073] In the aforementioned identity authentication method, macroscopic hand movement features are collected by the pen body sensor, and microscopic writing behavior features are collected by the pen tip sensor. The two types of data form a complete biometric profile of the user's writing, which is richer in feature dimensions compared to single sensor collection. User identity information is synchronously bound and transmitted with writing operations and sensor data, avoiding the separation of identity information from writing behavior, preventing others from borrowing the pen and stealing identity information to write, ensuring that every writing corresponds to the real user, improving authentication traceability, and solving the problems of low security, easy forgery, and poor accuracy of traditional electronic identity authentication.

[0074] Optionally, in one embodiment, two alternative technical solutions are provided to obtain user identity information. Optionally, user identity information is read from the hardware storage module of the active pen; or, during the user's writing process, user identity information is collected through an information collection device integrated in the active pen. User identity information includes at least one of user identification information and user biometric information. Specifically, user identification information is at least one of a unique identifier such as a number, account, or binding information; user biometric information is the user's inherent physiological characteristics, including at least one of fingerprint, facial features, and iris features.

[0075] This application provides two methods for binding and obtaining user identity information. One method is temporary one-time binding and real-time acquisition, where the active pen has an information collection device pre-integrated inside. While the user is writing, this device collects and stores the user's identity information in real time. This information collection device may include a fingerprint sensor, a biometric acquisition module, an identity recognition module, etc., enabling simultaneous collection of identity information during writing without prior storage. This method is suitable for scenarios such as shared use, temporary authorization, and public devices.

[0076] Correspondingly, the writing template data (including standard hand movement characteristics and standard writing behavior characteristics) corresponding to the user's identity information can be pre-collected and stored on the host or in the cloud. During this writing identity authentication process, the active pen sends the real-time collected user identity information, first sensor data, and second sensor data to the host. The host retrieves the corresponding pre-generated writing template data from the host or cloud based on the real-time acquired user identity information and compares it with the first and second sensor data to complete identity authentication. After completing identity authentication, the host sends an identity authentication completion signal to the stylus pen. Furthermore, in response to the identity authentication completion signal sent by the host, the stylus pen deletes the user identity information bound to the active pen during this writing session. By immediately deleting the temporarily bound user identity information after identity authentication, no user identity data remains in the active pen, effectively protecting user privacy. This approach is suitable for scenarios such as public devices, shared use by multiple users, and temporary authorization, improving the security and privacy of identity authentication.

[0077] Another approach is permanent binding, with local reading during use. This involves pre-writing and storing the user's identity information in the active pen's internal hardware storage module, which is a non-volatile storage unit integrated into the active pen. During writing, the active pen directly reads the stored user identity information from its own hardware storage module, without external input or real-time data collection. This method offers fast reading speeds and high stability, making it suitable for personal, long-term, and fixed-use active pen scenarios.

[0078] Correspondingly, in the early data entry stage, the pre-stored user identity information is permanently bound to the writing template data collected multiple times (including standard hand movement features and standard writing behavior features), and stored in the stylus and host.

[0079] It should be noted that regardless of the method of binding and obtaining user identity information, the stylus will only bind to the user identity information of one user during each writing process.

[0080] In one exemplary embodiment, such as Figure 3 As shown, an identity authentication method is provided, which can be applied to... Figure 1Taking host 102 as an example, the specific steps are as follows:

[0081] S301: During the process of the user writing on the display screen of the host using the active pen, the user's identity information, first sensor data and second sensor data sent by the active pen are acquired.

[0082] Among them, the user identity information is bound to the active pen during this writing process, and the first and second sensor data are collected by the sensors integrated in the active pen. The first sensor data includes data representing the user's hand movement characteristics during the writing process; the second sensor data includes data representing the user's writing behavior characteristics during the writing process.

[0083] Optionally, during the entire dynamic writing period—from when the user holds the active pen, the pen tip touches the host's display screen to begin writing, until writing is completed—the active pen synchronously transmits pre-bound exclusive user identity information to the host device, achieving real-time binding and transmission of writing operations and identity information. The active pen has a built-in pen tip touch detection module that monitors the contact state between the pen tip and the host's display screen in real time. The moment the pen tip first touches the host's display screen and the writing action begins, a writing start trigger signal is immediately generated, simultaneously waking up the active pen's internal identity information transmission module, avoiding invalid transmission and power consumption during standby. Upon receiving the trigger signal, the active pen retrieves the identity information from the corresponding storage area according to the preset binding mode. After retrieval, the identity information data packet is sent to the host in real time through a pre-established communication link. Simultaneously, the active pen's data acquisition is completely synchronized with the writing action; acquisition is triggered when the pen tip touches the host's display screen and ends when the pen tip leaves the host's display screen, with high-frequency continuous acquisition throughout, capturing complete hand movement dynamics.

[0084] S302, authenticates the user's identity based on the user's identity information, first sensor data, and second sensor data.

[0085] Optionally, after receiving user identity information, first sensor data, and second sensor data, the host initiates multi-dimensional identity authentication logic, rather than single-dimensional verification. For example, it first verifies the basic user identity information, and then compares, matches, and verifies the real-time collected first and second sensor data with the user's pre-stored standard writing template data (including standard hand movement features, standard writing behavior features, etc.) to ultimately determine whether the current writing user is the legitimate user corresponding to the identity information.

[0086] The above-mentioned identity authentication method collects and transmits user identity information, first sensor data, and second sensor data synchronously with the writing action throughout the entire process. The three types of data correspond one-to-one and are bound in time sequence. Unlike the traditional method that only compares static handwriting and simply verifies account passwords, this solution combines two types of dynamic biometric features: hand movement and writing behavior, thus eliminating the risk of identity forgery and identity impersonation.

[0087] Optionally, in an exemplary embodiment, such as Figure 4 As shown, a method for authenticating user identity is provided, which specifically includes the following steps:

[0088] S401: After this writing is completed, acquire the target handwriting captured on the display screen.

[0089] The target handwriting refers to the original static handwriting image captured by the display screen after the user completes writing on the host computer's display screen using the active pen.

[0090] Optionally, after the user completes the writing action and the pen tip is completely detached from the host's display screen, the target handwriting captured by the display screen is obtained. Specifically, the host calls the touch capture module or the matching image capture module built into the display screen to capture a static image of the target handwriting that the user has completed writing on the screen. This target handwriting is the final visual presentation of the user's writing content, including the font outline, stroke layout, overall size, writing continuity, and other appearance features.

[0091] S402, based on the first sensor data, determine the user's actual hand features; and based on the second sensor data, determine the user's actual handwriting features.

[0092] Among them, actual hand features refer to the physiological movements and grip behaviors of the user's hands during the writing process. These are dynamic, real-time behavioral data, including but not limited to core features such as hand movement speed, wrist swing amplitude, pen grip posture, grip strength, hand muscle exertion, and hand tremor frequency, fully reproducing the user's actual hand behavior habits during the writing process. Actual handwriting features refer to the microscopic writing behavior features derived from the pen tip writing action during the writing process, including but not limited to the weight and pressure of each stroke, the pressure change curve, tilt angle, pen tilt angle, and the starting and ending pressure values ​​of the strokes. These features rely on pen tip sensor data collection and are a direct reflection of the user's writing muscle memory.

[0093] Optionally, the host computer parses, processes, and extracts features from the received first and second sensor data, transforming the raw sensor data into standardized feature parameters that can be directly compared. For example, the host computer preprocesses and performs feature fitting on the first sensor data collected by the pen body sensor. The first sensor data includes at least one of speed data, pen grip feature data, and hand muscle electrical signals, and extracts actual hand features using a built-in algorithm. Simultaneously, the host computer performs deep analysis on the second sensor data, which includes writing force information from the pressure sensor and the active pen tilt angle, and generates actual handwriting features through algorithm fitting.

[0094] S403, Obtain standard handwriting, standard hand features, and standard handwriting features associated with user identity information.

[0095] Among them, standard handwriting refers to the static visual image of the baseline writing content that the user has legally registered and reserved in the system in advance. It belongs to the pre-stored legal handwriting template and serves as the reference standard for handwriting visual comparison. It is fixedly stored in the database and corresponds only to the user. Standard hand features refer to the baseline hand movement and grip feature template that the user has collected and stored in advance when writing in a normal state. It corresponds to the actual hand features and is the user's inherent and stable standard value of hand writing behavior. It is used to compare the consistency with the actual hand features in this case. Standard handwriting features refer to the micro-writing behavior template that the user has reserved in advance during normal writing. It corresponds to the actual handwriting features and includes baseline parameters such as standard writing pressure and standard stroke inclination angle. It is the core reference for judging whether the writing pressure and angle in this case are in line with the user's habits.

[0096] Optionally, the host uses the acquired user identity information as the unique retrieval index to retrieve a pre-registered standard feature template library from a local authentication database, a cloud authorization server, or the active pen hardware storage module. This template is baseline data pre-collected and stored under the user's legitimate identity and is bound one-to-one with the current user's identity information. In this embodiment, the standard template is user-exclusive, pre-encrypted and stored, and corresponds only to the user's legitimate identity, possessing uniqueness and immutability.

[0097] S404 authenticates users based on actual hand features, actual handwriting features, target handwriting, standard handwriting, standard hand features, and standard handwriting features.

[0098] Optionally, the host can use a multi-dimensional weighted comparison algorithm to accurately compare the actual data collected during the writing process with the standard template data item by item, comprehensively calculate the overall matching degree, and finally determine the identity authentication result.

[0099] In this embodiment, user identity, hand movement characteristics, and microscopic writing features are verified. These features are unique physiological and behavioral characteristics of the user, influenced by the individual's hand bones, muscle memory, and writing habits over a long period of time. They cannot be imitated, replicated, or forged. Even if a similar-looking static handwriting is imitated, it cannot match the hand movement and writing force characteristics, thus eliminating identity theft and forgery at the source. Compared to single-dimensional comparison, the three-dimensional cross-verification effectively avoids misjudgments caused by minor adjustments to the user's writing posture or changes in writing speed, while accurately identifying deliberately imitated abnormal handwriting.

[0100] Optionally, in one embodiment, such as Figure 5 As shown, a method for authenticating user identity is provided, which specifically includes the following steps:

[0101] S501, determine the first similarity between the actual hand features and the standard hand features, the second similarity between the actual handwriting features and the standard handwriting features, and the third similarity between the target handwriting and the standard handwriting.

[0102] The first similarity score is a numerical value representing the degree of matching between actual hand features and standard hand features. It quantifies the degree to which the user's hand movements, grip, and muscle exertion during writing conform to the user's usual writing habits; a higher score indicates stronger consistency in hand behavior. The second similarity score is a numerical value representing the degree of matching between actual handwriting features and standard handwriting features. It quantifies the degree to which micro-writing behaviors such as pen tip pressure, tilt angle, and pen stroke posture conform to the user's baseline writing habits; a higher score indicates stronger consistency in the details of writing behavior. The third similarity score is a numerical value representing the degree of visual matching between the target handwriting and standard handwriting. It quantifies the degree to which the static appearance of the written content conforms to the appearance of the user's pre-stored legally written content; a higher score indicates stronger consistency in handwriting form.

[0103] Optionally, for the hand movement behavior dimension, a behavior feature matching algorithm is invoked to compare the actual hand features extracted this time with the pre-stored standard hand features item by item, and the overall matching percentage is obtained through weighted calculation, which is the first similarity.

[0104] For the micro-behavioral dimension of writing, a writing feature fitting algorithm is invoked to compare the actual handwriting features extracted this time with the standard handwriting features item by item. Through difference calculation and fit degree analysis, the overall matching percentage is obtained, which is the second similarity.

[0105] For the static handwriting visual dimension, an image contour matching algorithm is called to visually compare the target handwriting image collected this time with the standard handwriting image in terms of contour, stroke layout, font structure, and overall size, and obtain the image matching percentage, which is the third similarity.

[0106] In this embodiment, the three sets of similarity can be calculated synchronously in parallel, which is highly efficient and maintains the consistency of timing. They all correspond to the current writing operation, and there are no problems of data misalignment or timing disorder.

[0107] S502, if the first similarity is greater than the first threshold, the second similarity is greater than the second threshold, and the third similarity is greater than the third threshold, then the user's identity authentication is deemed successful.

[0108] The first, second, and third thresholds are similarity thresholds pre-set within the host system. In this embodiment, the first, second, and third thresholds can be flexibly adjusted according to scenario requirements. In high-security scenarios (such as financial transfers and contract signing), the thresholds can be increased to enhance the security level; in ordinary office scenarios, the thresholds can be appropriately adjusted to improve the fault tolerance rate. The solution is highly adaptable and can cover the needs of multiple scenarios.

[0109] Optionally, if the first similarity is greater than the first threshold, the second similarity is greater than the second threshold, and the third similarity is greater than the third threshold simultaneously (i.e., all three dimensions of features meet the criteria), the host determines that the user's identity authentication is successful, confirming that the writing was performed by the user and that the written content is valid. If any similarity is not greater than the corresponding threshold (i.e., any one dimension of feature fails to meet the criteria), the host directly determines that the identity authentication fails and may trigger an exception alert, indicating a risk of unauthorized operation.

[0110] In this embodiment, compared with single-dimensional comparison, the three-dimensional cross-verification effectively avoids misjudgment caused by normal physiological fluctuations such as temporary adjustment of the user's writing posture, change in writing speed, and slight hand tremors.

[0111] Optionally, the host acquires user identity information, first sensor data, and second sensor data via a dedicated communication link between the display screen and the active pen, ensuring stable, real-time, and secure data transmission throughout, synchronized with the writing action sequence. In one embodiment, acquiring user identity information, first sensor data, and second sensor data sent by the active pen includes any of the following: acquiring user identity information, first sensor data, and second sensor data sent by the active pen through coupling communication between the host's touch encoding signal and the active pen tip; acquiring user identity information, first sensor data, and second sensor data sent by the active pen through NFC (Near Field Communication) between the host and the active pen tip; acquiring user identity information, first sensor data, and second sensor data sent by the active pen through Bluetooth Low Energy (BLE) communication between the host and the active pen tip.

[0112] Among them, touch coding coupling communication utilizes the host's own touch coding signal to form a dedicated touch coupling channel with the pen tip. It does not require an additional independent communication module, but relies on the original touch interaction link to transmit data. It has strong compatibility, is compatible with various conventional touch display screens, and has no additional power consumption for data transmission, with high link stability.

[0113] Near Field Communication (NFC) is an NFC module integrated between the host and the active pen tip, enabling near-field communication. It features strong encryption and high security in data transmission, with no signal interference. It is suitable for high-security writing scenarios with extremely high data security requirements and short transmission distances. It transmits identity information and sensor data in encrypted form, preventing eavesdropping and tampering.

[0114] Bluetooth Low Energy (BLE) communication uses the Bluetooth BLE low-power communication protocol to establish a dedicated wireless link between the host and the active pen. It has a moderate transmission distance and extremely low power consumption, making it compatible with portable hosts and mobile touch devices. It does not require physical contact coupling, allowing for a high degree of freedom in writing operations while balancing battery life and transmission efficiency.

[0115] The core purpose of the above three communication methods is to reliably acquire user identity information, first sensor data, and second sensor data sent by the active pen during the user's writing process.

[0116] Optionally, in one embodiment, an active pen is provided, such as Figure 6 The diagram shows the structure of the active pen. The active pen includes a pen body 601, a pen tip 602, sensors, and a control unit 605. The sensors integrated into the active pen are divided into a pen body sensor 603 and a pen tip sensor 604 according to their placement. The pen tip sensor 604 can be located at the pen tip or one end of the pen body near the pen tip, or partly inside the pen tip and partly inside the pen body. The control unit 605 is used to: send the user's identity information bound to the active pen during the writing process on the host's display screen; and acquire first and second sensing data collected by the sensors integrated in the active pen. The first sensing data includes data characterizing the user's hand movement features during writing; the second sensing data includes data characterizing the user's writing behavior features during writing; and send the first and second sensing data to the host. The user identity information, the first sensing data, and the second sensing data are used by the host to authenticate the user.

[0117] The pen body sensor includes at least one of a six-axis sensor, a 360° capacitive touch device, and a miniature electromyography (EMG) sensor; wherein, the six-axis sensor is used to collect speed data of the active pen during the writing process; the 360° capacitive touch device covers the pen body and is used to detect the grip characteristics data of the user's fingers on the pen body when holding the pen; the miniature EMG sensor is used to collect muscle electrical signals when the user's hand holds the active pen during the writing process; the pen tip sensor includes a pressure sensor; wherein, the pressure sensor is used to detect the writing force information of the user during the writing process.

[0118] The pen body, the main gripping part of the active pen, is a long, rod-shaped structure made of insulating and non-slip material. It is the primary gripping area for the user during writing and is responsible for the integration of core components, circuit layout, and power supply. The pen body houses the pen body sensor and control unit, and can also integrate hardware storage modules, communication modules (NFC / BLE modules), and power supply batteries. All components are embedded inside the pen body cavity, not exposed, and do not affect the grip or writing smoothness.

[0119] The pen body sensor is integrated into the grip area in the middle of the pen body, close to the user's grip and far from the writing tip, to avoid interference from pen tip vibrations on the acquisition accuracy. The pen body sensor is a multi-sensor fusion module, including at least one of a six-axis sensor (accelerometer + gyroscope), a capacitive touch device, and a miniature electromyography sensor, which can be combined and installed according to the hardware configuration.

[0120] The capacitive touch device covers and adheres to the inner wall of the pen body around its perimeter, enabling full-angle capture of pen grip features. For example... Figure 7 The diagram shown is a structural schematic of an active pen integrating a capacitive touch device according to an embodiment of this application. The capacitive touch device can be a flexible circuit board covering the perimeter of the pen body. The active pen can determine the specific position of the writer's grip area on the pen body and the grip pressure by detecting changes in capacitance in different areas of the pen body.

[0121] The pen body sensor is electrically connected to the control unit via an internal ribbon cable. It is controlled by the start and stop commands of the control unit. It automatically wakes up to collect data when the pen tip touches the display screen and stops immediately when the pen tip leaves the screen, thus reducing power consumption.

[0122] The control unit is the core control chip of the active pen. As a microcontroller unit, it is the core of the pen's computation and control, possessing data reception, processing, encapsulation, and transmission control functions. It is the core execution component of this authentication process. Integrated into the rear area inside the pen body, away from the pen tip sensor, it avoids electromagnetic interference and ensures chip operational stability. The control unit is electrically connected to the pen body sensor, pen tip sensor, communication module, and storage module, respectively, realizing centralized control and data scheduling of all components, making it the central hub of the entire pen.

[0123] The pen tip, located at the writing execution end of the active pen, is a small contact made of flexible and wear-resistant material. It directly contacts the touch layer of the host's display screen to complete the output of writing handwriting and the interaction of sensor signals. It is the core execution part for collecting writing behavior features.

[0124] In one example, the pen tip sensor is integrated into the rear end of the internal contact point of the pen tip, close to the writing contact point, to accurately capture the real-time state of the pen tip during writing, with no acquisition delay. Electrodes are also arranged inside the pen tip.

[0125] In one alternative embodiment, the electrode can be a multi-ring electrode, with multiple ring electrodes arranged at intervals along the pen axis in the pen tip area to form an array, and the tilt angle is calculated by the signal strength difference between different rings.

[0126] In another alternative embodiment, the electrodes may also be arranged at the tip of the pen and near the front root of the pen body, coupled to the touch electrodes of the host's display screen. For example... Figure 8 The diagram shows a schematic of an active pen integrated with electrodes according to an embodiment of this application. The electrodes include a first electrode (TX1) and a second electrode (TX2). TX2 is typically farther from the display screen than TX1, and the signal received by the display screen from TX2 is less than that from TX1. The host computer can calculate the tilt angle of the active pen during writing on the display screen by measuring the distance between the collected TX1 and TX2 signals. The greater the distance, the greater the pen tilt angle. Specifically, the tilt angle refers to the angle between the central axis of the active pen and the normal direction of the plane containing the host computer's display screen.

[0127] The pen tip sensor is electrically connected to the control unit via a flexible ribbon cable inside the pen body. The collected data is directly transmitted to the control unit for unified processing, complementing the data collected by the pen body sensor and together forming dynamic writing biometric data.

[0128] The active pen provided in this application embodiment is responsible for hand feature acquisition and control by the pen body and for writing feature acquisition by the pen tip. The dual sensing modules are physically separated to avoid data interference and achieve higher acquisition accuracy. All components are embedded in the pen body and pen tip, eliminating the need for additional external devices. It conforms to the shape of a conventional handwriting pen, is compatible with various touch terminals, and has low hardware modification costs.

[0129] Figure 9 This is a signaling diagram for an authentication method in another embodiment. Based on the above embodiments, this embodiment provides an optional example of an authentication method. Combined with... Figure 9 The specific implementation process is as follows:

[0130] S901: When a user writes on the display screen of the host computer using the active pen, the active pen sends the user identity information bound to the active pen during this writing session to the host computer.

[0131] Optionally, the active pen reads the user's identity information from its hardware storage module; or, during the user's writing process, the active pen collects the user's identity information through an information collection device integrated into it.

[0132] S902, the active pen acquires first and second sensing data collected by the sensors integrated in the active pen.

[0133] The first sensor data includes data characterizing the user's hand movement characteristics during the writing process; the second sensor data includes data characterizing the user's writing behavior characteristics during the writing process.

[0134] The sensors integrated into the active pen can be divided into pen tip sensors and pen body sensors according to their placement. The pen body sensor includes at least one of a six-axis sensor, a capacitive touch device, and a micro electromyography sensor; the capacitive touch device covers the periphery of the active pen body; the first sensing data includes at least one of speed data, pen grip characteristic data, and electromyographic signals of the user's hand holding the active pen during writing; wherein, the speed data is used to characterize the user's hand movement characteristics during writing.

[0135] The pen tip sensor includes a pressure sensor; the second sensing data includes writing force information collected by the pressure sensor during writing and tilt angle information collected during writing.

[0136] S903, the active pen sends the first and second sensor data to the host.

[0137] S904, the host obtains the user identity information, first sensor data and second sensor data sent by the active pen.

[0138] S905: After the host completes this writing task, it acquires the target handwriting captured on the display screen.

[0139] S906, the host determines the user's actual hand features based on the first sensor data; and determines the user's actual handwriting features based on the second sensor data.

[0140] S907, the host acquires standard handwriting, standard hand features and standard handwriting features associated with user identity information.

[0141] S908, the host determines the first similarity between the actual hand features and the standard hand features, the second similarity between the actual handwriting features and the standard handwriting features, and the third similarity between the target handwriting and the standard handwriting.

[0142] S909: If the host determines that the user's identity authentication is successful when the first similarity is greater than the first threshold, the second similarity is greater than the second threshold, and the third similarity is greater than the third threshold.

[0143] The specific processes of S901-S909 described above can be found in the description of the above method embodiments. Their implementation principles and technical effects are similar, and will not be repeated here.

[0144] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0145] Based on the same inventive concept, this application also provides an identity authentication device for implementing the aforementioned identity authentication method. The solution provided by this device is similar to the implementation described in the above method; therefore, the specific limitations in one or more identity authentication device embodiments provided below can be found in the limitations of the identity authentication method described above, and will not be repeated here.

[0146] In one exemplary embodiment, such as Figure 10 As shown, an identity authentication device 1000 is provided, configured on an active pen, including: a data transmission module 1010, a data acquisition module 1020, and a first authentication module 1030, wherein:

[0147] The data transmission module 1010 is used to send the user identity information bound to the active pen during the writing process to the host computer while the user is writing on the display screen of the host computer using the active pen; and,

[0148] The data acquisition module 1020 is used to acquire first sensing data and second sensing data collected by the sensors integrated in the active pen; wherein, the first sensing data includes data characterizing the user's hand movement characteristics during writing; and the second sensing data includes data characterizing the user's writing behavior characteristics during writing.

[0149] The first authentication module 1030 is used to send first sensing data and second sensing data to the host; wherein, the user identity information, the first sensing data and the second sensing data are used by the host to authenticate the user's identity.

[0150] In one embodiment, the pen body sensor includes at least one of a six-axis sensor, a capacitive touch device, and a micro electromyography sensor; the capacitive touch device covers the periphery of the active pen body; the first sensing data includes at least one of speed data, pen grip characteristic data, and electromyography signals when the user holds the active pen during writing; wherein, the speed data is used to characterize the user's hand movement characteristics during writing; the pen tip sensor includes a pressure sensor; the second sensing data includes writing force information collected by the pressure sensor during writing and tilt angle collected during writing.

[0151] In one embodiment, the identity authentication device 1000 further includes an information collection module, used for:

[0152] User identity information is read from the hardware storage module of the active pen; or, during the user's writing process, user identity information is collected by the information collection device integrated in the active pen; wherein, user identity information includes at least one of user identification information and user biometric information.

[0153] In one embodiment, when user identity information is collected by an information collection device, the information collection module is also used for:

[0154] In response to the authentication completion signal sent by the host, the user identity information bound to the active pen during this writing session is deleted.

[0155] In one exemplary embodiment, such as Figure 11 As shown, an identity authentication device 1100 is provided, configured in a host, including: a data receiving module 1110 and a second authentication module 1120, wherein:

[0156] The data receiving module 1110 is used to acquire user identity information, first sensor data, and second sensor data sent by the active pen during the process of the user writing on the display screen of the host using the active pen. The user identity information is bound to the active pen during this writing process. The first sensor data and the second sensor data are collected by the sensors integrated in the active pen. The first sensor data includes data characterizing the user's hand movement characteristics during the writing process. The second sensor data includes data characterizing the user's writing behavior characteristics during the writing process.

[0157] The second authentication module 1120 is used to authenticate the user's identity based on the user's identity information, the first sensor data, and the second sensor data.

[0158] In one embodiment, the second authentication module 1120 includes:

[0159] The first acquisition unit is used to acquire the target handwriting captured by the display screen after the writing is completed;

[0160] The second acquisition unit is used to determine the user's actual hand features based on the first sensing data; and to determine the user's actual handwriting features based on the second sensing data.

[0161] The third acquisition unit is used to acquire standard handwriting, standard hand features, and standard handwriting features associated with user identity information;

[0162] The identity authentication unit is used to authenticate users based on actual hand features, actual handwriting features, target handwriting, standard handwriting, standard hand features, and standard handwriting features.

[0163] In one embodiment, the identity authentication unit is specifically used for:

[0164] Determine the first similarity between the actual hand features and the standard hand features, the second similarity between the actual handwriting features and the standard handwriting features, and the third similarity between the target handwriting and the standard handwriting; if the first similarity is greater than the first threshold, the second similarity is greater than the second threshold, and the third similarity is greater than the third threshold, then the user's identity authentication is confirmed to be successful.

[0165] In one embodiment, the data receiving module 1110 is specifically used for:

[0166] Through the coupling communication between the host's touch-coded signal and the pen tip, the user's identity information, first sensor data, and second sensor data sent by the pen are obtained; or,

[0167] The system acquires user identity information, first sensor data, and second sensor data transmitted by the active pen via NFC (Near Field Communication) between the host and the pen tip; or...

[0168] The host computer obtains user identity information, first sensor data, and second sensor data sent by the active pen through low-power Bluetooth BLE communication between the host computer and the pen tip.

[0169] Each module in the aforementioned identity authentication device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in the processor of a computer device in hardware form or independent of it, or stored in the memory of the computer device in software form, so that the processor can call and execute the operations corresponding to each module.

[0170] In one embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be as follows: Figure 12As shown, the computer device includes a processor, memory, communication interface, display screen, and input device connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The communication interface is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, NFC (Near Field Communication), or other technologies. When executed by the processor, the computer program implements an authentication method.

[0171] Those skilled in the art will understand that Figure 12 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0172] In one exemplary embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0173] During the process of a user writing on the display screen of the host using an active pen, the system acquires user identity information, first sensor data, and second sensor data sent by the active pen. The user identity information is bound to the active pen during this writing session, and the second sensor is collected by the sensor integrated in the active pen. The first sensor data includes data characterizing the user's hand movement features during the writing process; the second sensor data includes data characterizing the user's writing behavior features during the writing process.

[0174] The user is authenticated based on their identity information, first sensor data, and second sensor data.

[0175] In one embodiment, when the processor executes a computer program to authenticate a user based on user identity information, first sensor data, and second sensor data, it also performs the following steps:

[0176] After the writing is completed, the target handwriting captured by the display screen is obtained; the user's actual hand features are determined based on the first sensor data; and the user's actual handwriting features are determined based on the second sensor data; the standard handwriting, standard hand features, and standard handwriting features associated with the user's identity information are obtained; and the user's identity is authenticated based on the actual hand features, actual handwriting features, target handwriting, standard handwriting, and standard handwriting features.

[0177] In one embodiment, when the processor executes a computer program to authenticate a user based on actual hand features, actual handwriting features, target handwriting, standard handwriting, standard hand features, and standard handwriting features, it also performs the following steps:

[0178] Determine the first similarity between the actual hand features and the standard hand features, the second similarity between the actual handwriting features and the standard handwriting features, and the third similarity between the target handwriting and the standard handwriting; if the first similarity is greater than the first threshold, the second similarity is greater than the second threshold, and the third similarity is greater than the third threshold, then the user's identity authentication is confirmed to be successful.

[0179] In one embodiment, when the processor executes a computer program to obtain user identity information, first sensor data, and second sensor data sent by the active pen, it also performs any of the following steps:

[0180] The system acquires user identity information, first sensor data, and second sensor data sent by the active pen through coupling communication between the host's touch coding signal and the active pen tip; it also acquires user identity information, first sensor data, and second sensor data sent by the active pen through NFC (Near Field Communication) between the host and the active pen tip; and it acquires user identity information, first sensor data, and second sensor data sent by the active pen through Bluetooth Low Energy (BLE) communication between the host and the active pen tip.

[0181] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, the computer program performing the following steps when executed by a processor:

[0182] During the process of a user writing on the display screen of the host using an active pen, the system acquires user identity information, first sensor data, and second sensor data sent by the active pen. The user identity information is bound to the active pen during this writing session. The first and second sensor data are collected by the body sensors integrated in the active pen. The first sensor data includes data characterizing the user's hand movement characteristics during the writing process. The second sensor data includes data characterizing the user's writing behavior characteristics during the writing process.

[0183] The user is authenticated based on their identity information, first sensor data, and second sensor data.

[0184] In one embodiment, when the processor executes a computer program to authenticate a user based on user identity information, first sensor data, and second sensor data, it also performs the following steps:

[0185] After the writing is completed, the target handwriting captured by the display screen is obtained; the user's actual hand features are determined based on the first sensor data; and the user's actual handwriting features are determined based on the second sensor data; the standard handwriting, standard hand features, and standard handwriting features associated with the user's identity information are obtained; and the user's identity is authenticated based on the actual hand features, actual handwriting features, target handwriting, standard handwriting, and standard handwriting features.

[0186] In one embodiment, when the processor executes a computer program to authenticate a user based on actual hand features, actual handwriting features, target handwriting, standard handwriting, standard hand features, and standard handwriting features, it also performs the following steps:

[0187] Determine the first similarity between the actual hand features and the standard hand features, the second similarity between the actual handwriting features and the standard handwriting features, and the third similarity between the target handwriting and the standard handwriting; if the first similarity is greater than the first threshold, the second similarity is greater than the second threshold, and the third similarity is greater than the third threshold, then the user's identity authentication is confirmed to be successful.

[0188] In one embodiment, when the processor executes a computer program to obtain user identity information, first sensor data, and second sensor data sent by the active pen, it also performs any of the following steps:

[0189] The system acquires user identity information, first sensor data, and second sensor data sent by the active pen through coupling communication between the host's touch coding signal and the active pen tip; it also acquires user identity information, first sensor data, and second sensor data sent by the active pen through NFC (Near Field Communication) between the host and the active pen tip; and it acquires user identity information, first sensor data, and second sensor data sent by the active pen through Bluetooth Low Energy (BLE) communication between the host and the active pen tip.

[0190] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, performs the following steps:

[0191] During the process of a user writing on the display screen of the host using an active pen, the system acquires user identity information, first sensor data, and second sensor data sent by the active pen. The user identity information is bound to the active pen during this writing session. The first and second sensor data are collected by sensors integrated into the active pen. The first sensor data includes data characterizing the user's hand movement features during the writing process. The second sensor data includes data characterizing the user's writing behavior features during the writing process.

[0192] The user is authenticated based on their identity information, first sensor data, and second sensor data.

[0193] In one embodiment, when the processor executes a computer program to authenticate a user based on user identity information, first sensor data, and second sensor data, it also performs the following steps:

[0194] After the writing is completed, the target handwriting captured by the display screen is obtained; the user's actual hand features are determined based on the first sensor data; and the user's actual handwriting features are determined based on the second sensor data; the standard handwriting, standard hand features, and standard handwriting features associated with the user's identity information are obtained; and the user's identity is authenticated based on the actual hand features, actual handwriting features, target handwriting, standard handwriting, and standard handwriting features.

[0195] In one embodiment, when the processor executes a computer program to authenticate a user based on actual hand features, actual handwriting features, target handwriting, standard handwriting, standard hand features, and standard handwriting features, it also performs the following steps:

[0196] Determine the first similarity between the actual hand features and the standard hand features, the second similarity between the actual handwriting features and the standard handwriting features, and the third similarity between the target handwriting and the standard handwriting; if the first similarity is greater than the first threshold, the second similarity is greater than the second threshold, and the third similarity is greater than the third threshold, then the user's identity authentication is confirmed to be successful.

[0197] In one embodiment, when the processor executes a computer program to obtain user identity information, first sensor data, and second sensor data sent by the active pen, it also performs any of the following steps:

[0198] The system acquires user identity information, first sensor data, and second sensor data sent by the active pen through coupling communication between the host's touch coding signal and the active pen tip; it also acquires user identity information, first sensor data, and second sensor data sent by the active pen through NFC (Near Field Communication) between the host and the active pen tip; and it acquires user identity information, first sensor data, and second sensor data sent by the active pen through Bluetooth Low Energy (BLE) communication between the host and the active pen tip.

[0199] It should be noted that the user information (including but not limited to user identity information, first sensor data, second sensor data, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of related data must comply with relevant regulations.

[0200] Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium. When executed, the computer program can include the processes of the embodiments described above. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0201] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0202] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. An identity authentication method, characterized in that, Applied to an active pen, the method includes: During the process of a user writing on the display screen of the host computer using the active pen, the user's identity information bound to the active pen during this writing session is sent to the host computer; and, The system acquires first and second sensing data collected by sensors integrated in the active pen; wherein the first sensing data includes data characterizing the user's hand movement characteristics during writing; and the second sensing data includes data characterizing the user's writing behavior characteristics during writing. The first sensing data and the second sensing data are sent to the host; wherein the user identity information, the first sensing data, and the second sensing data are used by the host to authenticate the user.

2. The method according to claim 1, characterized in that, The first sensing data includes at least one of speed data, pen grip feature data, and electromyographic signals of the hand holding the active pen during the user's writing process; The speed data is used to characterize the user's hand movements during the writing process; The second sensor data includes writing force information and tilt angle collected during the writing process.

3. The method according to claim 1, characterized in that, The method further includes: Read the user identity information from the hardware storage module of the active pen; or, During the user's writing process, the user's identity information is collected by the information collection device integrated in the active pen; The user identity information includes at least one of user identification information and user biometric information.

4. The method according to claim 3, characterized in that, When the user identity information is collected by the information collection device, the method further includes: In response to the authentication completion signal sent by the host, the user identity information bound to the active pen during this writing session is deleted.

5. An identity authentication method, characterized in that, Applied to a host, the method includes: During the process of a user writing on the display screen of the host computer using the active pen, the user's identity information, first sensor data, and second sensor data sent by the active pen are acquired. The user's identity information is bound to the active pen during this writing session. The first and second sensor data are collected by sensors integrated into the active pen. The first sensor data includes data characterizing the user's hand movement features during writing; the second sensor data includes data characterizing the user's writing behavior features during writing. The user is authenticated based on the user identity information, the first sensor data, and the second sensor data.

6. The method according to claim 5, characterized in that, The step of authenticating the user's identity based on the user identity information, the first sensor data, and the second sensor data includes: After this writing is completed, the target handwriting captured by the display screen is obtained; Based on the first sensor data, the actual hand features of the user are determined; and based on the second sensor data, the actual handwriting features of the user are determined. Obtain standard handwriting, standard hand features, and standard handwriting features associated with the user's identity information; The user is authenticated based on the actual hand features, the actual handwriting features, the target handwriting, the standard handwriting, the standard hand features, and the standard handwriting features.

7. The method according to claim 6, characterized in that, The step of authenticating the user's identity based on the actual hand features, the actual handwriting features, the target handwriting, the standard handwriting, the standard hand features, and the standard handwriting features includes: Determine a first similarity between the actual hand features and the standard hand features, a second similarity between the actual handwriting features and the standard handwriting features, and a third similarity between the target handwriting and the standard handwriting; If the first similarity is greater than the first threshold, the second similarity is greater than the second threshold, and the third similarity is greater than the third threshold, then the user identity authentication is determined to be successful.

8. An active pen, characterized in that, Includes the pen body, pen tip, sensor, and control unit; The control unit is used for: During the process of the user writing on the display screen of the host using the active pen, the user identity information bound to the active pen during this writing is sent to the host. as well as, The system acquires first sensing data and second sensing data collected by sensors integrated in the active pen; wherein the first sensing data includes data characterizing the user's hand movement characteristics during writing; and the second sensing data includes data characterizing the user's writing behavior characteristics during writing. The first sensing data and the second sensing data are sent to the host; wherein the user identity information, the first sensing data, and the second sensing data are used by the host to authenticate the user.

9. The active pen according to claim 8, characterized in that, The sensors include a pen body sensor and a pen tip sensor; The pen body sensor includes at least one of a six-axis sensor, a 360° capacitive touch device, and a micro electromyography sensor; The six-axis sensor is used to collect speed data of the active pen during the writing process; The 360° capacitive touch device covers the perimeter of the active pen body and is used to detect the pen grip feature data of the user's fingers on the active pen body when holding the pen. The miniature electromyography sensor is used to collect the electrical signals of the muscles in the user's hand when holding the active pen during the writing process; The pen tip sensor includes a pressure sensor; The pressure sensor is used to detect the writing pressure information of the user during the writing process.

10. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 5 to 7.

Images