IMAGE COLLECTION DEVICE, SERVER, ENCRYPTION METHOD, AND DECRYPTION METHOD

Abstract

To provide an image collection apparatus, a server, an encryption method, and a decryption method that secure a safety of image data.SOLUTION: An image collection apparatus includes an image collection module incorporating encryption means and data output means. The encryption means uses a stored first key, encrypts image data collected by the image collection module, and acquires image cipher text data. The data output means acquires the image cipher text data, and outputs the image cipher text to a terminal apparatus.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] This application claims priority to Chinese Patent Application No. 201910624184.1, filed on July 11, 2019, entitled "IMAGE COLLECTION DEVICE, SERVER, ENCRYPTION METHOD, AND DECRYPTION METHOD," the entire contents of which are incorporated herein by reference.

[0002] The present application relates to the field of data processing, and in particular to an image collection device, a server, an encryption method, and a decryption method. [Background technology]

[0003] Face recognition is a biometric recognition technology that recognizes a person's identity based on his / her facial feature information. At present, with the rapid development of face recognition technology, face recognition is increasingly applied to various scenes, such as trading scenes.

[0004] Since human facial feature information has characteristics such as uniqueness and difficulty in copying, face recognition has great advantages in accuracy. Due to the above characteristics of facial feature information, the security of face data (i.e., data of human facial feature information) becomes more important. In order to ensure the security of the face data, the identification terminal has an encryption module. The encryption module can encrypt the face data transmitted from the image collection device, and upload the encrypted face data to perform face recognition. However, the face data may be tampered with or leaked in the image collection device or in the process of transmitting from the image collection device to the identification terminal, which reduces the security of the face data. Summary of the Invention

[0005] The embodiments of the present application provide an image collection device, a server, an encryption method, and a decryption method that can ensure the security of image data.

[0006] In a first aspect, an embodiment of the present application provides an image collection device, the image collection device comprising an image collection module incorporating an encryption means and a data output means, the encryption means being used to encrypt image data collected by the image collection module using a stored first key to obtain image ciphertext data, and the data output means being used to obtain the image ciphertext data and output the image ciphertext data to a terminal device.

[0007] In a second aspect, an embodiment of the present application provides a server, the server comprising a receiving module and a decryption module, the receiving module is used for receiving image ciphertext data transmitted from a terminal device, the image ciphertext data is obtained by encrypting image data collected by the image collection module using a stored first key by an encryption means built into the image collection module in the image collection device, and the decryption module decrypts the image ciphertext data using the stored first key.

[0008] In a third aspect, an embodiment of the present application provides a data encryption method, and the data encryption method used in the image collection device in the above technical solution includes: collecting image data, using a stored first key to encrypt the collected image data to obtain image ciphertext data, and outputting the image ciphertext data to a terminal device.

[0009] In a fourth aspect, an embodiment of the present application provides a data decryption method, and the data decryption method applied to the server in the above technical solution includes: receiving image ciphertext data transmitted from a terminal device, and the image ciphertext data is obtained by encrypting the image data collected by the image collection module using a first key stored by an encryption means built into the image collection module in the image collection device; and decrypting the image ciphertext data using the stored first key.

[0010] The embodiments of the present application provide an image collection device, a server, an encryption method, and a decryption method, and an encryption means and a data output means are provided in an image collection module of the image collection device, so that the encryption means encrypts the collected image data, and the data output means outputs the data to the outside. That is, after the image data is collected, the encryption is performed directly in the image collection module. The encrypted image data, i.e., the image ciphertext data, is transmitted to the outside, and the image ciphertext data is not easily tampered with or stolen, thereby ensuring the security of the image data.

[0011] The present application can be better understood from the following description of specific embodiments thereof with reference to the drawings, in which the same or similar reference numerals indicate the same or similar features. [Brief description of the drawings]

[0012] [Figure 1] 1 is a structural schematic diagram of an image acquisition device according to an embodiment of the present application; [Diagram 2] FIG. 2 is a structural schematic diagram of an encryption means according to an embodiment of the present application; [Diagram 3] FIG. 2 is a structural schematic diagram of a server according to an embodiment of the present application; [Figure 4] FIG. 2 is a structural schematic diagram of a server according to another embodiment of the present application; [Diagram 5] FIG. 2 is a structural schematic diagram of a server according to another embodiment of the present application; [Figure 6] 1 is a structural schematic diagram of a data secure transmission system according to an embodiment of the present application; [Figure 7] 2 is a flowchart of a data encryption method according to an embodiment of the present application. [Figure 8] 4 is a flowchart of a data encryption method according to another embodiment of the present application. [Figure 9] 4 is a flow chart of a data decoding method according to an embodiment of the present application; [Figure 10] 1 is a flowchart of a method for securely transmitting data according to one embodiment of the present application. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] The features and exemplary examples of each embodiment of the present application will be described in detail below. In the following detailed description, many specific details are provided to provide a comprehensive understanding of the present application. However, as will be apparent to those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is used to provide examples of the present application to better understand the present application. The present application is not limited to any specific configurations and algorithms presented below, and covers any modifications, substitutions and improvements of elements, components and algorithms without departing from the spirit of the present application. In the drawings and the following description, known structures and technologies are not shown to avoid introducing unnecessary fuzziness into the present application.

[0014] The embodiments of the present application provide an image collection device, a server, an encryption method, and a decryption method, which can be applied to scenes of collecting images and identifying images, such as various service scenes based on facial recognition, specifically including, but not limited to, transaction services, login services, attendance investigation services (e.g., commuting card checks), and passage services (e.g., passing through a gate machine).

[0015] An embodiment of the present application relates to a data secure transmission system that can include an image collection device, a terminal device, and a server.

[0016] The image collecting device may specifically be a camera, etc. The specific form of the camera is not limited, and includes, but is not limited to, specific physical forms such as ordinary type, ball machine, gun machine, etc. The camera may be in the form of a built-in integrated device, or may be externally connected to other devices through a motherboard to be plug-and-play, and the specific form and usage method may be determined according to the actual application scenario.

[0017] The terminal device may be a smart terminal in which a face recognition application is installed and provides a user with face recognition-related services. The form of the terminal device is not limited, and may be a large device such as a vending machine, or a small desktop self-service face verification terminal, such as a smart vending terminal (i.e., a POS terminal), a gate, or a self-service checkout terminal. The server can perform data verification and face recognition and output the recognition result. The data secure transmission system and its components are described in detail below.

[0018] 1 is a structural schematic diagram of an image collection device according to an embodiment of the present application. As shown in FIG. 1, the image collection device 10 includes an image collection module 11. The image collection module 11 is provided with an encryption means 112 and a data output means 113.

[0019] The image acquisition module 11 may specifically include an imaging module, and may capture general image information, thereby acquiring image data. The image data may specifically be RGB image data, which is image data that adopts the RGB (i.e., red, green, blue) color standard.

[0020] The encryption means 112 uses the stored first key to encrypt the image data collected by the image collection module 11 to obtain image ciphertext data.

[0021] The first key is stored in the encryption means 112. In the encryption means 112, the management method of each key (including the first key) is not limited, and the key may be preset in the encryption means 112 during the shipping process, or a key update interface may be set in the encryption means 112, and the key is updated through key protection.

[0022] The image ciphertext data is image data encrypted by the first key. The encryption means 112 can be specifically realized as an encryption chip installed in the camera. The encryption algorithm for encrypting the image data is not limited, and may be a symmetric or asymmetric encryption algorithm. For example, it includes, but is not limited to, the Data Encryption Standard (DES) algorithm, the Triple Data Encryption Standard (3DES) algorithm, the Advanced Encryption Standard (AES) algorithm, the RSA algorithm (i.e., an asymmetric encryption algorithm), the SM4 algorithm (i.e., a packet encryption standard algorithm), etc.

[0023] The data output means 113 acquires the ciphertext image data, and outputs the ciphertext image data to the terminal device.

[0024] In some examples, the data output means 113 includes a data output standard interface, which can output various types of data.

[0025] In the embodiment of the present application, the image collection module of the image collection device 10 is provided with an encryption means 112 and a data output means 113, so that the image data collected by the encryption means 112 is encrypted and output to the outside by the data output means 113. That is, after the image data is collected, it is directly encrypted in the image collection module 11. The encrypted image data, i.e., the image ciphertext data, is transmitted to the outside, and the image ciphertext data is difficult to be tampered with or stolen, thereby ensuring the security of the image data. And since the image data is encrypted in the image collection module 11, the terminal device receiving the image ciphertext data does not need to install an encryption interface accordingly, which reduces the difficulty of developing and modifying the terminal device.

[0026] Further, to ensure the security and accuracy of the decrypted image ciphertext data for performing the identification function in the server, a security verification can be further performed on the decrypted image ciphertext data in the server.

[0027] In some embodiments, the data output means 113 further outputs image verification auxiliary information obtained based on the image data to a terminal device.

[0028] The image verification auxiliary information is used to perform security verification on the decrypted image ciphertext data. Security verification here refers to whether the image ciphertext data transmitted from the image collection module 11 has been tampered with or an error has occurred. Security verification ensures the accuracy of the transmitted image data. If security verification is successful, it indicates that the image ciphertext data transmitted from the image collection module 11 is accurate. If security verification fails, it indicates that the image ciphertext data transmitted from the image collection module 11 is not accurate. The server decides whether to perform image recognition such as face recognition based on whether security verification is successful.

[0029] In some examples, the image verification auxiliary information may include image data.

[0030] In another example, the encryption means 112 is further used for calculating a digest of the image data based on the digest algorithm, and using the stored second key to obtain a signature of the digest of the image data as image verification auxiliary information, i.e., the image verification auxiliary information includes the signature of the digest of the image data.

[0031] The digest algorithm is not limited, and may be MD5 Message-Digest Algorithm (MD 5), Secure Hash Algorithm (SHA1), SHA256 algorithm (i.e. hash value algorithm), SM3 algorithm (i.e. password hash function standard), etc. The signature algorithm is also not limited.

[0032] In order to prevent people from providing false image data using counterfeit means such as photos or videos, the image collection module 11 is further used to collect biometric feature data corresponding to the image data, so as to further improve the security and reliability of the subsequent identification function.

[0033] Specifically, the image collection module 11 may include a biometric feature capture module for collecting 3D biometric feature data of a living body. The biometric feature capture module may specifically be a 3D biopsy module. The 3D biopsy module may include, but is not limited to, a structured light module, a Time of Flight (TOF) module, an infrared detection module, etc. The biometric feature data may be used for biometric detection to determine whether the subject of the collected image data is a living body.

[0034] Correspondingly, in some examples, the data output means 113 is specifically further used to output the biometric feature data collected by the image collection module 11, and specifically, the biometric feature data can be transmitted to a terminal device for processing.

[0035] In another example, the encryption means 112 is further used to perform liveness detection based on the biometric feature data, obtain liveness detection result data, and obtain a signature of the liveness detection result data by using the stored third key.

[0036] The liveness detection result data can characterize whether the collected biometric characteristic data is a living organism or not. A third key is stored in the encryption means 112, and in order to ensure the security of the liveness detection result data, the signature of the liveness detection result data can be obtained using the third key, and it is the signature of the liveness detection result data that is transmitted in the data security transmission system (i.e., between the image collection device 10, the terminal device, and the server), thereby preventing the occurrence of a situation in which the liveness detection result data is tampered with and leaked. Here, the signature algorithm is not limited here either.

[0037] The data output means 113 outputs the liveness detection result data and the signature of the liveness detection result data to the terminal device.

[0038] The image collecting device 10 outputs the live body detection result data and the signature of the live body detection result data to the terminal device. The live body detection result data and the signature of the live body detection result data can be used for live body detection safety verification in the subsequent process.

[0039] In yet another example, the encryption means 112 is further used to perform biometric detection based on the biometric characteristic data, obtain biometric detection result data, calculate a summary of the obtained image data, integrate the biometric detection result data and the summary of the image data into integrated data, and obtain an integrated signature of the integrated data as image verification auxiliary information using the stored fourth key.

[0040] The data output means 113 is used to output the biodetection result data.

[0041] By integrating a summary of the live detection result data and image data and calculating an integrated signature of the acquired integrated data, the accuracy and reliability of live detection safety verification in subsequent processes can be further guaranteed, and problems such as tampering or leakage of the live detection result data and image data during the transmission process can be prevented.

[0042] In the above embodiment, when the encryption means 112 performs liveness detection and calculates a signature of liveness detection data, the encryption means 112 can include a liveness detection sub-means and an encryption sub-means. Here, the liveness detection sub-means 112a is used to perform liveness detection based on the biometric feature data and obtain liveness detection result data. The encryption sub-means can include a first sub-means 112b for calculating a signature of the liveness detection result data and a second sub-means 112c for encrypting image data. For example, as shown in FIG. 2, FIG. 2 is a structural schematic diagram of the encryption means according to the embodiment of the present application. Note that the structure of the encryption means 112 includes, but is not limited to, the above structure.

[0043] Whether the image collection device 10 collects biometric feature data can be set according to specific operating scenes and operating needs. For example, in application scenes where humans are on guard and the probability of fraud occurring is low, biometric feature data does not need to be collected, that is, there is no need to add a function of collecting biometric feature data to the image collection module 11, and the cost of the image collection device 10 can be reduced.

[0044] 3 is a structural schematic diagram of a server according to an embodiment of the present application. As shown in FIG. 3, the server 30 includes: a receiving module 301 and a decoding module 302.

[0045] The receiving module 301 is used for receiving the image ciphertext data transmitted from the terminal device.

[0046] The image ciphertext data is obtained by an encryption means built into the image collection module in the image collection device encrypting the image data collected by the image collection module using the stored first key.

[0047] The decryption module 302 utilizes the stored first key to decrypt the image ciphertext data.

[0048] The decrypted image ciphertext data can be used to perform identification functions, such as face recognition.

[0049] The first key is stored only in the image collection device 10 and the server 30, so that the first key is unlikely to be leaked. The image ciphertext data is decrypted only by the server in which the first key is stored, and cannot be decrypted by the face recognition application or any third party, which further improves the security of image data transmission and improves the accuracy and security of recognition functions such as face recognition.

[0050] The technical effects of the server 30 can be referred to the technical effects of the image collection device 10 in the above embodiment, and the description thereof will be omitted here.

[0051] 4 is a structural schematic diagram of a server according to another embodiment of the present application. The difference between FIG. 4 and FIG. 3 is that the server 30 shown in FIG. 4 can further include a security verification module 303 and a first identification module 304.

[0052] The security verification module 303 receives image verification information transmitted from the terminal device, and performs security verification on the decrypted image ciphertext data using the image verification information.

[0053] The image verification information is acquired by the terminal device based on the image verification auxiliary information output from the image collection device.

[0054] In some examples, the image verification auxiliary information includes image data. The image verification information includes a signature of a digest of the image data obtained by the terminal device using the fifth key.

[0055] Specifically, the security verification module 303 is used for calculating a summary of the decrypted image ciphertext data, matching the summary of the decrypted image ciphertext data with image verification information based on the stored fifth key, and determining that the security verification is successful if the summary of the decrypted image ciphertext data matches the image verification information.

[0056] The terminal device and the server 30 store a fifth key.

[0057] Specifically, the fifth key can be used to obtain the signature of the digest of the decrypted image ciphertext data. The signature of the digest of the decrypted image ciphertext data is compared with the signature of the digest of the image data in the image verification information. If the signature of the digest of the decrypted image ciphertext data matches the signature of the digest of the image data in the image verification information, it is considered that the digest of the decrypted image ciphertext data and the image verification information match. If the signature of the digest of the decrypted image ciphertext data and the signature of the digest of the image data in the image verification information do not match, it is considered that the digest of the decrypted image ciphertext data and the image verification information do not match.

[0058] Alternatively, the fifth key can be used to obtain a summary of image data corresponding to the image verification information based on the signature of the summary of image data in the image verification information. The summary of image data corresponding to the image verification information is compared with the summary of the decrypted image ciphertext data. If the summary of image data corresponding to the image verification information matches the summary of the decrypted image ciphertext data, it is considered that the summary of the decrypted image ciphertext data and the image verification information match. If the summary of image data corresponding to the image verification information does not match the summary of the decrypted image ciphertext data, it is considered that the summary of the decrypted image ciphertext data and the image verification information do not match.

[0059] In another example, the image verification auxiliary information includes a signature of a digest of the image data obtained using the second key. The image verification information includes a signature of a digest of the image data obtained by the image capture device using the second key.

[0060] Specifically, the security verification module 303 is used to calculate a summary of the decrypted image ciphertext data, match the summary of the decrypted image ciphertext data with image verification information based on the stored second key, and determine that the security verification is successful if the summary of the decrypted image ciphertext data matches the image verification information.

[0061] Here, both the image collection device 10 and the server 30 store the second key.

[0062] Matching the summary of the decrypted image ciphertext data with the image verification information can refer to the process of matching the summary of the decrypted image ciphertext data with the image verification information in the above example, and the explanation will be omitted here.

[0063] In yet another example, the image verification auxiliary information includes an integrated signature of integrated data obtained by the image acquisition device using a fourth key. The integrated data includes a summary of the image data and the liveness detection result data. The image verification information includes the integrated signature of the integrated data.

[0064] The receiving module 301 is further used for receiving the transmitted liveness detection result data.

[0065] Specifically, the security verification module 303 is used for calculating a summary of the decrypted image ciphertext data, matching the summary of the decrypted image ciphertext data with image verification information based on the stored fourth key, matching the live body detection result data with the image verification information, determining that the security verification is successful if the summary of the decrypted image ciphertext data matches the image verification information, and determining that the live body detection security verification is successful if the live body detection result data matches the image verification information.

[0066] Here, both the image collection device 10 and the server 30 store the fourth key.

[0067] In the above embodiment, the success of the security verification indicates that the image ciphertext data is not tampered with and is accurate, while the failure of the security verification indicates that the image ciphertext data is not accurate, which can further ensure the security and reliability of the data transmitted in the data secure transmission system, and improve the security and reliability of the identification function, such as face identification, in the subsequent process.

[0068] If the security verification is successful, the first identification module 304 performs user identification based on the decrypted image ciphertext data and the user identity information collected and provided by the terminal device, obtains the identification result, and sends the identification result to the terminal device, so that the terminal device processes the service corresponding to the image data based on the identification result.

[0069] If the security verification fails, the server 30 will not identify the user, thus ensuring the security and reliability of the identification function, for example, face identification.

[0070] 5 is a structural schematic diagram of a server according to another embodiment of the present application. The differences between FIG. 5 and FIG. 3 are as follows: the server shown in FIG. 5 can further include a safety verification module 303, the server can further include a first biometric safety verification module 305 and / or a second biometric safety verification module 306, and the server 30 can further include a second identification module 307.

[0071] The description of the safety verification module 303 can be referred to in the relevant description in the above embodiment, and the description will be omitted here.

[0072] The first biometric safety verification module 305 matches the signature of the transmitted biometric detection result data with the biometric detection result data based on the stored sixth key, and determines that the biometric detection safety verification is successful if the signature of the transmitted biometric detection result data matches the biometric detection result data.

[0073] The liveness detection result data is acquired by the terminal device performing liveness detection based on the biometric feature data output from the image collecting device. The signature of the liveness detection result data is acquired by the terminal device based on the liveness detection result data using the stored sixth key. The terminal device 20 and the server 30 each store the sixth key.

[0074] Specifically, the transmitted live detection result data can be processed based on the sixth key to obtain a signature for the live detection result data. The signature for the live detection result data obtained by processing is compared with the signature for the transmitted live detection result data, and if the signature for the live detection result data obtained by processing matches the signature for the transmitted live detection result data, it is considered that the signature for the transmitted live detection result data matches the live detection result data. If the signature for the live detection result data obtained by processing does not match the signature for the transmitted live detection result data, it is considered that the signature for the transmitted live detection result data does not match the live detection result data.

[0075] Alternatively, the signature of the transmitted live detection result data can be processed based on the sixth key to obtain the live detection result data. The live detection result data obtained by processing is compared with the transmitted live detection result data, and if the live detection result data obtained by processing matches the transmitted live detection result data, it is considered that the signature of the transmitted live detection result data matches the live detection result data. If the live detection result data obtained by processing does not match the transmitted live detection result data, it is considered that the signature of the transmitted live detection result data does not match the live detection result data.

[0076] In this embodiment, liveness detection safety verification can be performed, which further ensures the safety and reliability of the data transmitted in the data safety transmission system, and improves the safety and reliability of the identification function in subsequent processes, such as face identification.

[0077] The second biometric safety verification module 306 matches the signature of the transmitted biometric detection result data with the biometric detection result data based on the stored third key, and determines that the biometric detection safety verification is successful if the signature of the transmitted biometric detection result data matches the biometric detection result data.

[0078] The liveness detection result data is obtained by the image collecting device performing liveness detection based on the collected biometric feature data. The signature of the liveness detection result data is obtained by the image collecting device based on the liveness detection result data using the stored third key.

[0079] The image collection device 10 and the server 30 each store a third key. For matching the signature of the transmitted live body detection result data with the live body detection result data, the relevant content in the above embodiment can be referred to, and the description is omitted here.

[0080] In the embodiments of the present application, liveness detection safety verification can be performed, which further ensures the safety and reliability of the data transmitted in the data safety transmission system, and improves the safety and reliability of the identification function in subsequent processes, such as face identification.

[0081] In the embodiments of the present application, dual verification of safety verification and liveness detection safety verification can be performed, which further ensures the safety and reliability of the data transmitted in the data safety transmission system, and further improves the safety and reliability of the identification function in subsequent processes, such as face identification.

[0082] In the above embodiment, the success of the liveness detection security verification indicates that the liveness detection result data is not tampered with and is accurate, whereas the failure of the liveness detection security verification indicates that the liveness detection result data is inaccurate.

[0083] If the security verification is successful and the liveness detection security verification is successful, the second identification module 307 performs user identification based on the decrypted image ciphertext data and the user identity information collected and provided by the terminal device, obtains the identification result, and sends the identification result to the terminal device, so that the terminal device can process the service corresponding to the image data based on the identification result.

[0084] If at least one of the security verification and the liveness detection security verification fails, the server 30 will not perform user identification, thus ensuring the security and reliability of the identification function, for example, face identification.

[0085] The first to sixth keys in the above embodiment may be the same key or different keys, and are not limited thereto.

[0086] In order to more completely describe the entire data transmission process and the identification process, the following describes a data secure transmission system in an embodiment of the present application.

[0087] 6 is a structural schematic diagram of a data secure transmission system according to an embodiment of the present application. As shown in FIG. 6, the data secure transmission system includes an image collection device 10, a terminal device 20 and a server 30 in the above embodiment.

[0088] Here, the relevant description of the image collecting device 10 can be referred to the above related content, and the description will be omitted here.

[0089] For the relevant description of the server 30, please refer to the above related content, and the description will be omitted here.

[0090] The terminal device 20 is used to receive the image ciphertext data output from the image collection device 10 and transmit the image ciphertext data to the server 30. An identification application that receives an identification request is installed in the terminal device 20, thereby driving the image collection device 10 so that a service corresponding to the collected image data can be executed based on the identification result of the server 30.

[0091] The technical effects of the data secure transmission system can be referred to the technical effects of the image collection device 10 in the above embodiment, and the description is omitted here.

[0092] The terminal device 20 is further used to collect user identity information and output the user identity information to the server 30. Specifically, the user identity information may include, but is not limited to, the user's mobile phone number, some bits in the user's mobile phone number, a user account, etc.

[0093] The server 30 can perform user identification based on the user identification information and the decrypted ciphertext image data, obtain an identification result, and transmit the identification result to the terminal device 20.

[0094] The terminal device 20 can receive the identification result and process services corresponding to the collected image data based on the identification result, such as transaction services, registration services, attendance survey services, passage services, etc.

[0095] The terminal device 20 can further realize identifying related tasks, such as displaying images corresponding to the image data, tracking identified objects in the collected image data, and so on.

[0096] In some instances, the image capture device is further used to transmit image data to a terminal device.

[0097] The terminal device 20 is further used to perform identification of related tasks based on the image data output from the image collection device 10. For example, the terminal device 20 can easily display an image interface corresponding to the image data based on the received image data to a user directly. Also, for example, the terminal device 20 can perform image tracking of the identification target based on the received image data.

[0098] In another example, the terminal device 20 may store a first key, and the terminal device 20 is further used to use the stored first key to decrypt the image ciphertext data output from the image collection device 10 and perform identification of related tasks based on the decrypted image ciphertext data.

[0099] The decrypted image ciphertext data is image data. The description of how to identify related tasks can be found in the above example, and the description will be omitted here.

[0100] In some embodiments, image capture device 10 is further used to output image verification auxiliary information.

[0101] The terminal device 20 is further used to acquire image verification information based on the image verification auxiliary information output from the image collection device 10 and transmit the image verification information to the server 30. The image verification information may be the same as or different from the image verification auxiliary information, and is not limited here.

[0102] The server 30 is further used to perform security verification on the decrypted image ciphertext data using the image verification information.

[0103] In some embodiments, liveness detection is performed by the terminal device 20, thereby reducing the cost of the image capture device 10 since its implementation is relatively simple.

[0104] 7 is a flowchart of a data encryption method according to an embodiment of the present application. This data encryption method can be applied to the imaging device of the above-mentioned embodiment. As shown in FIG. 7, the data encryption method can include steps S401 to S403.

[0105] In step S401, image data is collected.

[0106] In step S402, the collected image data is encrypted using the stored first key to obtain image ciphertext data.

[0107] In step S403, the image ciphertext data is output to the terminal device.

[0108] In an embodiment of the present application, the image data collected in the image collection module of the image collection device is encrypted, and the encrypted image data, i.e., image ciphertext data, is transmitted to the outside. The image ciphertext data encrypted in the image collection device is difficult to be tampered with or stolen, thereby ensuring the security of the image data. And since the image data is encrypted in the image collection module of the image collection device, the terminal device receiving the image ciphertext data does not need to install an encryption interface, which reduces the difficulty of developing and modifying the terminal device.

[0109] In some examples, Figure 8 is a flowchart of a data encryption method according to another embodiment of the present application. It is further used to ensure the security of outputting the image ciphertext data to other devices such as a terminal device, a server, etc., and to ensure the security and reliability of the identification function in the subsequent process, such as face identification. Based on Figure 7, the data encryption method in the embodiment of the present application can further include steps S404 to S408.

[0110] In step S404, image verification auxiliary information obtained based on the image data is output to the terminal device.

[0111] The image verification auxiliary information is used to perform security verification on the decrypted image ciphertext data.

[0112] In some examples, the image verification auxiliary information includes image data.

[0113] In another example, the image verification auxiliary information includes a signature of the image data digest. Specifically, step S404 can be subdivided into calculating a digest of the image data based on the digest algorithm, and obtaining the signature of the digest of the image data as the image verification auxiliary information using the stored second key.

[0114] In step S405, biometric characteristic data corresponding to the image data is collected.

[0115] In step S406, the biometric characteristic data is output to the terminal device.

[0116] In step S407, liveness detection is performed based on the biometric characteristic data, liveness detection result data is obtained, and a signature of the liveness detection result data is obtained using the stored third key.

[0117] In step S408, the liveness detection result data and the signature of the liveness detection result data are output to the terminal device.

[0118] In yet another example, biometric feature data is collected, and biometric detection is performed based on the biometric feature data to obtain biometric detection result data. The image verification assistance information includes an integrated signature of the integrated data. Specifically, step S404 can be divided into: taking the biometric detection result data and a summary of the image data as integrated data, and using the stored fourth key to obtain the integrated signature of the integrated data as image verification assistance information.

[0119] 9 is a flowchart of a data decryption method according to an embodiment of the present application. This data decryption method can be applied to the server in the above-mentioned embodiment. The data decryption method can include steps S501 and S502.

[0120] In step S501, encrypted image data transmitted from a terminal device is received.

[0121] The image ciphertext data is obtained by an encryption means built into the image collection module in the image collection device encrypting the image data collected by the image collection module using the stored first key.

[0122] In step S502, the image ciphertext data is decrypted using the stored first key.

[0123] The technical effects of the data decryption method in the embodiments of the present application may refer to the technical effects of the server in the above embodiments, and the description will be omitted here.

[0124] This is to further ensure the security of the image ciphertext data transmitted to the server, and ensure the security and reliability of the identification function, such as face identification, in the subsequent process. In the data secure transmission method shown in Fig. 9, the data decryption method can further include step S503. The data decryption method can further include steps S504 to S505, or can include steps S506 to S507. The data decryption method can further include steps S508 to S509, or can include steps S510 to S511.

[0125] In step S503, image verification information transmitted from the terminal device is received, and security verification is performed on the decrypted image ciphertext data using the image verification information.

[0126] The image verification information is acquired by the terminal device based on the image verification auxiliary information output from the image collection device.

[0127] In some examples, the image verification auxiliary information includes image data. The image verification information includes a signature of a digest of the image data obtained by the terminal device using the fifth key.

[0128] The above step S503 may be specifically subdivided into calculating a summary of the decrypted image ciphertext data, matching the summary of the decrypted image ciphertext data with image verification information based on the stored fifth key, and determining that the security verification is successful if the summary of the decrypted image ciphertext data matches the image verification information.

[0129] In another example, the image verification auxiliary information includes a signature of a digest of the image data obtained using the second key. The image verification information includes a signature of a digest of the image data obtained by the image capture device using the second key.

[0130] The above step S503 may be specifically subdivided into calculating a summary of the decrypted image ciphertext data, matching the summary of the decrypted image ciphertext data with image verification information based on the stored second key, and determining that the security verification is successful if the summary of the decrypted image ciphertext data matches the image verification information.

[0131] In step S504, the signature of the transmitted liveness detection result data is matched with the liveness detection result data based on the stored sixth key.

[0132] In step S505, if the signature of the transmitted liveness detection result data matches with the liveness detection result data, it is determined that the liveness detection security verification is successful.

[0133] Here, the live body detection result data is obtained by the terminal device performing live body detection based on the biometric feature data output from the image collection device. The signature of the live body detection result data is obtained by the terminal device using the stored sixth key based on the live body detection result data.

[0134] In step S506, the signature of the transmitted liveness detection result data is matched with the liveness detection result data based on the stored third key.

[0135] In step S507, if the signature of the transmitted liveness detection result data matches with the liveness detection result data, it is determined that the liveness detection security verification is successful.

[0136] The liveness detection result data is obtained by the image collecting device performing liveness detection based on the collected biometric feature data. The signature of the liveness detection result data is obtained by the image collecting device based on the liveness detection result data using the stored third key.

[0137] In some examples, the image verification auxiliary information includes an integrated signature of integrated data obtained by the image capture device using a fourth key, the integrated data including a summary of the image data and the liveness detection result data, and the image verification information includes an integrated signature of the integrated data.

[0138] Specifically, the data decryption method further includes receiving the transmitted live detection result data, calculating a summary of the decrypted image ciphertext data, matching the summary of the decrypted image ciphertext data with image verification information based on the stored fourth key, matching the live detection result data with the image verification information, determining that the security verification is successful if the summary of the decrypted image ciphertext data and the image verification information match, and determining that the live detection security verification is successful if the live detection result data and the image verification information match.

[0139] In step S508, if the security verification is successful, user identification is performed based on the decrypted encrypted image data and the user identity information collected and provided by the terminal device, and an identification result is obtained.

[0140] In step S509, the identification result is sent to the terminal device, so that the terminal device processes the service corresponding to the image data based on the identification result.

[0141] In step S510, if the security verification is successful and the liveness detection security verification is successful, user identification is performed according to the decrypted image ciphertext data and the user identity information collected and provided by the terminal device, and an identification result is obtained.

[0142] In step S511, the identification result is sent to the terminal device, so that the terminal device processes the service corresponding to the image data based on the identification result.

[0143] 10 is a flowchart of a method for securely transmitting data according to an embodiment of the present application. This method for securely transmitting data can be applied to the data secure transmission system in the above-mentioned embodiment. The method for securely transmitting data can include steps S601 to S603.

[0144] In step S601, the image collection device collects image data, uses the stored first key to encrypt the image data, obtains and outputs image ciphertext data to the terminal device.

[0145] In step S602, the terminal device receives the image ciphertext data and transmits the image ciphertext data to the server.

[0146] In step S603, the server uses the stored first key to decrypt the image ciphertext data.

[0147] The relevant description of the above steps may refer to the relevant content in the above embodiments, and the description will be omitted here. The technical effects of the data secure transmission method in the embodiments of the present application may refer to the technical effects of the data secure transmission system in the above embodiments, and the description will be omitted here.

[0148] In some examples, the above-mentioned data secure transmission method further includes the image collection device transmitting image data to the terminal device, and the terminal device further performing identification of an associated task based on the image data output from the image collection device.

[0149] In another example, the above-mentioned data secure transmission method further includes: the terminal device uses the stored first key to decrypt the image ciphertext data output from the image collection device, and performs related task identification according to the decrypted image ciphertext data.

[0150] It is further used to ensure the security of transmitting the image ciphertext data to the server, and ensure the security and reliability of the identification function in the subsequent process, such as face identification. Based on the data secure transmission method shown in Figure 10, the data secure transmission method can further include steps S604 to S606, and the data secure transmission method can further include steps S607 to S610, or include steps S611 to S613.

[0151] In step S604, the image collection device outputs image verification auxiliary information.

[0152] In step S605, the terminal device obtains image verification information based on the image verification auxiliary information output from the image collection device, and transmits the image verification information to the server.

[0153] In step S606, the server performs security verification on the decrypted image ciphertext data using the image verification information.

[0154] In some examples, the image verification auxiliary information includes image data.

[0155] Step S605 may be specifically subdivided into the terminal device calculating and obtaining a summary of the image data in the image verification auxiliary information, using the stored fifth key to obtain a signature of the summary of the image data in the image verification auxiliary information, and transmitting the signature of the summary of the image data in the image verification auxiliary information to the server as image verification information.

[0156] Step S606 may be specifically subdivided into the following steps: the server calculates a summary of the decrypted image ciphertext data; matches the summary of the decrypted image ciphertext data with image verification information based on the stored fifth key; and determines that the security verification is successful if the summary of the decrypted image ciphertext data and the image verification information match.

[0157] In another embodiment, the image verification auxiliary information includes a signature of a digest of the image data obtained using a second key.

[0158] Step S605 may be specifically divided into the terminal device transmitting a signature of the digest of the image data obtained by using the second key to the server as image verification information.

[0159] Step S606 may be specifically subdivided into the server calculating a summary of the decrypted image ciphertext data, matching the summary of the decrypted image ciphertext data with image verification information based on the stored second key, and determining that the secure verification is successful if the summary of the decrypted image ciphertext data and the image verification information match.

[0160] The above-mentioned data secure transmission method further includes: the terminal device collects user identity information and outputs the user identity information to the server; if the secure verification is successful, the server performs user identification based on the user identity information and the decrypted image ciphertext data, obtains an identification result, and sends the identification result to the terminal device; and the terminal device receives the identification result sent from the server, and processes a service corresponding to the collected image data based on the identification result.

[0161] In step S607, the image capture device outputs the biometric feature data.

[0162] In step S608, the terminal device performs liveness detection based on the biometric characteristic data output from the image collection device, and obtains liveness detection result data.

[0163] In step S609, the terminal device uses the stored sixth key to obtain a signature of the liveness detection result data, and transmits the liveness detection result data and the signature of the liveness detection result data to the server.

[0164] In step S610, the server matches the signature of the transmitted live detection result data with the live detection result data based on the stored sixth key, and if the signature of the transmitted live detection result data matches with the live detection result data, it determines that the security verification of live detection is successful.

[0165] In step S611, the image collection device outputs the liveness detection result data and a signature of the liveness detection result data obtained using the third key.

[0166] In step S612, the terminal device transmits the liveness detection result data output from the image collection device and a signature of the liveness detection result data obtained by using the third key to the server.

[0167] In step S613, the server matches the signature of the transmitted live detection result data with the live detection result data based on the stored third key, and if the signature of the transmitted live detection result data matches with the live detection result data, it determines that the live detection security verification is successful.

[0168] The above-mentioned data secure transmission method further includes: the terminal device collects user identity information and outputs the user identity information to the server; if the security verification is successful and the liveness detection security verification is successful, the server performs user identification based on the user identity information and the decrypted image ciphertext data to obtain an identification result, and sends the identification result to the terminal device; the terminal device receives the identification result sent from the server, and processes a service corresponding to the collected image data based on the identification result.

[0169] In some examples, the image verification auxiliary information includes an integrated signature of the integrated data obtained using a fourth key, the integrated data includes a summary of the image data and the liveness detection result data, and the image verification information includes the integrated signature of the integrated data.

[0170] The imaging device outputs the live body detection result data. The terminal device transmits the live body detection result data output by the image collecting device to a server.

[0171] The server calculates a digest of the decrypted image ciphertext data. The server matches the digest of the decrypted image ciphertext data with the image verification information based on the stored fourth key, and matches the liveness detection result data with the image verification information. If the digest of the decrypted image ciphertext data matches with the image verification information, the server determines that the security verification is successful, and if the liveness detection result data matches with the image verification information, the server determines that the liveness detection security verification is successful.

[0172] For the relevant description of the above-mentioned secure data transmission method, please refer to the relevant content of the data secure transmission system in the above-mentioned embodiment, and the description will be omitted here.

[0173] In addition, each embodiment in this specification is described in a stepwise manner, and the same or similar parts between the embodiments may be referred to, and the main points to be described in each embodiment are the differences from other embodiments. For the server embodiment and the method embodiment, the relevant parts may be referred to the description of the image collection device embodiment. In addition, the present invention is not limited to the specific steps and configurations shown in the above-mentioned embodiments. Those skilled in the art may make various changes, modifications, and additions, or change the order of steps after understanding the spirit of this application. In addition, for the sake of brevity, detailed descriptions of known method technologies are omitted here.

[0174] The above describes each aspect of the present application with reference to flowcharts and / or block diagrams of methods, devices, and systems according to the embodiments of the present application. It will be understood that each block in the flowcharts and / or block diagrams, and combinations of blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, a special purpose computer, or other programmable data processing apparatus to generate an apparatus such that the instructions executed by the processor of the computer or other programmable data processing apparatus can implement the functions / operations specified in one or more blocks in the flowcharts and / or block diagrams. Such a processor may be, but is not limited to, a general purpose processor, a special purpose processor, a special application processor, or a field programmable logic circuit. It will be further understood that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented by dedicated hardware that performs the specified functions or operations, or by a combination of dedicated hardware and computer instructions.

[0175] As can be understood by those skilled in the art, the above embodiments are all illustrative and not restrictive. Different technical features appearing in different embodiments can be combined to achieve beneficial effects. Those skilled in the art should understand and realize other variations of the disclosed embodiments after studying the drawings, the specification and the claims. In the claims, the term "comprises" does not exclude other devices or steps. The quantifier "one" does not exclude a plurality. The terms "first" and "second" are used to indicate names, but not to indicate any particular order. Any reference signs in the claims should not be construed as limiting the scope of protection. The functions of multiple parts appearing in the claims can be realized by one independent hardware or software module. The fact that some technical features appear in different dependent claims does not mean that these technical features cannot be combined to achieve beneficial effects.

Claims

1. An image acquisition device; A terminal device provided separately from the image collecting device; A server; A data secure transmission system comprising: The image acquisition device includes: an image acquisition module including an imaging module, a biometric feature acquisition module, an encryption means and a data output means; The imaging module collects image data; the biometric feature capture module collects biometric feature data corresponding to the image data; The encryption means uses the stored first key to encrypt the image data to obtain image ciphertext data; The encryption means obtains image verification auxiliary information based on the image data, the data output means outputs the image ciphertext data, the image verification auxiliary information, and the biometric characteristic data to the terminal device; The terminal device Obtaining image verification information based on the image verification auxiliary information; performing liveness detection based on the biometric characteristic data, acquiring liveness detection result data, and acquiring a first signature, which is a signature of the liveness detection result data, by using a sixth key stored in the memory; Collect user identity information, Transmitting the image ciphertext data, the image verification information, the liveness detection result data, the first signature, and the user identity information to the server; The server, The method includes: a decryption module, a security verification module, a biometric security verification module, and an identification module; The decryption module decrypts the image ciphertext data using the stored first key; The security verification module performs security verification on the decrypted image ciphertext data using the image verification information; The biometric safety verification module performs a biometric detection safety verification based on the sixth key stored therein, verifying whether the first signature matches the biometric detection result data, and determines that the biometric detection safety verification is successful if the first signature matches the biometric detection result data in the biometric detection safety verification; The identification module performs user identification based on the decrypted image ciphertext data and the user identity information when the safety verification in the safety verification module and the live body detection safety verification in the live body safety verification module are successful, and obtains an identification result. A data secure transmission system comprising:

2. The image verification auxiliary information includes the image data.

2. A data secure transmission system according to claim 1.

3. The encryption means further comprises: calculating a summary of the image data based on a summarization algorithm; obtaining a second signature, the second signature being a signature of the digest of the image data, using the stored second key; the image verification auxiliary information includes the second signature, the image verification information includes the second signature, In the safety verification in the safety verification module, calculating a digest of the decrypted image ciphertext data; verifying whether the decrypted digest of the image ciphertext data matches the image verification information based on the stored second key, and determining that the security verification is successful if the decrypted digest of the image ciphertext data matches the image verification information; 2. A data secure transmission system according to claim 1.

4. the image verification auxiliary information includes the image data, The terminal device further comprises: calculating a summary of the image data in the image verification auxiliary information; obtaining a third signature, which is a signature of a summary of the image data in the image verification auxiliary information, by using the stored fifth key; the image verification information includes the third signature, In the safety verification in the safety verification module, calculating a digest of the decrypted image ciphertext data; verifying whether the decrypted digest of the image ciphertext data matches the image verification information based on the stored fifth key, and determining that the security verification is successful if the decrypted digest of the image ciphertext data matches the image verification information; 2. A data secure transmission system according to claim 1.

5. an image capture device comprising an image capture module including an imaging module, a biometric feature capture module, an encryption means, and a data output means; A terminal device provided separately from the image collecting device; a server comprising a decryption module, a security verification module, a biometric security verification module and an identification module; A data secure transmission method using a data secure transmission system comprising: collecting image data by the imaging module; acquiring, by the biometric feature capture module, biometric feature data corresponding to the image data; encrypting the image data by the encryption means using the stored first key to obtain image ciphertext data; obtaining image verification auxiliary information based on the image data by the encryption means; outputting the image ciphertext data, the image verification auxiliary information, and the biometric characteristic data to the terminal device by the data output means; acquiring, by the terminal device, image verification information based on the image verification auxiliary information; performing liveness detection based on the biometric characteristic data by the terminal device, acquiring liveness detection result data, and acquiring a first signature that is a signature of the liveness detection result data by using a sixth key stored in the terminal device; collecting user identity information by the terminal device; transmitting the image ciphertext data, the image verification information, the liveness detection result data, the first signature, and the user identity information to the server by the terminal device; decrypting, by the decryption module, the image ciphertext data using the stored first key; performing security verification on the decrypted image ciphertext data by the security verification module using the image verification information; A liveness detection safety verification is performed by the liveness detection safety verification module based on the sixth key stored therein, to verify whether the first signature matches the liveness detection result data, and if the first signature matches the liveness detection result data in the liveness detection safety verification, the liveness detection safety verification is determined to be successful; When the safety verification in the safety verification module and the live body detection safety verification in the live body safety verification module are successful, the identification module performs user identification according to the decrypted image ciphertext data and the user identity information to obtain an identification result; A method for securely transmitting data, comprising:

Images