Specific embodiment
With reference to the accompanying drawings and examples, specific embodiments of the present invention will be described in further detail.Implement belowExample is not intended to limit the scope of the invention for illustrating the present invention.
The use environment of identification authentication system provided by the invention is illustrated first.Authentication provided by the inventionDevice can be used for the online transaction systems such as Web bank, online payment.
When user uses online transaction system on the terminal device, identification authentication system is connect with terminal device, when withWhen the operation carried out in online system needs to carry out authentication, online transaction system can prompt to carry out authentication at family, useFamily carries out authentication using identification authentication system, after certification passes through, user is allowed to carry out the operation；When certification does not pass throughWhen, do not allow user to carry out the operation.
Terminal device can be the fixed terminals such as server, ATM, computer, be also possible to tablet computer, intelligenceEnergy mobile phone, intelligent automobile or other mobile intelligent terminals, can also be internet of things equipment.
Fig. 1 is a kind of structural schematic diagram of identification authentication system of the embodiment of the present invention.As shown in Figure 1, a kind of authenticationDevice includes image capture module 11, for biometric image when acquiring user's registration and biological characteristic figure when certificationPicture；Processing module 12 is connect with image capture module 11, and biometric image when processing module 12 is used for according to registration obtainsFirst biological characteristic coding, biometric image when according to certification obtain the second biological characteristic coding；Memory module 13, with placeModule connection 12 is managed, memory module 13 is for storing the first biological characteristic coding；Processing module 12 is also used to: the second biology is specialAssemble-publish code is compared with the first biological characteristic coding being stored in memory module 13, to complete authentication.
Specifically, image capture module 11 is connect with processing module 12, and processing module 12 is connect with memory module 13.
Image capture module 11 can be camera, but not limited to this.
Before user uses online transaction system for the first time, need first to be registered, by the identity information of user, biological characteristicIt is associated with identification authentication system.When user's registration, image capture module 11 acquires biometric image when user's registration；After biometric image when the acquisition registration of image capture module 11, note that processing module 12 is acquired according to image capture module 11Biometric image when volume obtains the first biological characteristic coding, and stores into memory module 13, completes registration.
After the completion of registration, after user when carrying out operation using online transaction system and needing to carry out authentication, according toThe prompt of online transaction system carries out authentication using identification authentication system.When user authenticates, image capture module 11Acquire biometric image when user authentication；After biometric image when the acquisition certification of image capture module 11, mould is handledThe biometric image when certification that block 12 is acquired according to image capture module 11 obtains the second biological characteristic coding；Handle mouldAfter block 12 obtains the second biological characteristic coding, the first biology that the second biological characteristic is encoded and is stored in memory module 13 is specialAssemble-publish code compares, and completes authentication.
When the second biological characteristic coding is with the first biological characteristic codes match, when illustrating user and the registration when certificationUser is same people, and authentication passes through, and user is allowed to carry out the operation；When the second biological characteristic coding and the first biological characteristicWhen coding mismatches, illustrate that user when certification and user when registration are not same people, authentication does not pass through, do not allow intoThe row operation.
The embodiment of the present invention is avoided and is recognized using password progress identity by carrying out authentication based on living things feature recognitionThe problems such as password is easily lost, forgets or is stolen when card has taken into account convenience and the safety of authentication, has improved online friendshipEasy safety and privacy.
Fig. 2 is a kind of structural schematic diagram of identification authentication system of the embodiment of the present invention.Based on the above embodiment, as one kindPreferred embodiment, as shown in Fig. 2, identification authentication system further includes eyeglass 15, for making user in user's registration and when authenticatingBiological characteristic surface be aligned image capture module 11.
Specifically, eyeglass 15 is between image capture module 11 and user.
When user's registration and when certification, the biological characteristic surface that image capture module 11 is aligned to user is required, to adoptCollect high-quality biometric image, improves the speed and accuracy rate for carrying out living things feature recognition.
Eyeglass 15 can be set between image capture module 11 and user.By eyeglass 15 to the side such as reflection of lightFormula makes the biological characteristic surface of user be directed at image capture module 11.For example, special carrying out biology related with the eye of user, can be by 15 reflection light of eyeglass when levying Image Acquisition, image capture module 11 after making the eye alignment eyeglass 15 of user,Collect the preferable biometric image of quality.
The material of eyeglass 15 includes glass, resin etc..
The embodiment of the present invention makes the biological characteristic surface of user be directed at image capture module by the way that eyeglass is arranged, and can collectHigh-quality biometric image improves the speed and accuracy rate of the authentication based on living things feature recognition.
Based on the above embodiment, as a kind of preferred embodiment, the wavelength of light by eyeglass is 450 to 1000 nanometers.
Wavelength is 450 to 1000 nanometers of light, cover in infrared light and visible light in addition to purple light other are visibleLight makes image capture module carry out biometric image acquisition in extensive optical band.
Based on the above embodiment, as a kind of preferred embodiment, the wavelength of light by eyeglass is 810 to 940 nanometers.
The light that wavelength is 810 to 940 nanometers, the short-wave band near infrared light, human eye can't see, and it is special to acquire biologyHuman eye will not be damaged when levying image, be particularly suitable for being acquired the biology relevant to eye in biometric imageCharacteristic image.
The embodiment of the present invention makes image capture module exist by selecting the eyeglass by allowing suitable range of light wavelengthsHuman eye will not be damaged when acquiring biometric image relevant to eye, so that the use of identification authentication system be made to pacifyEntirely, harmless.
Based on the above embodiment, as a kind of preferred embodiment, as shown in Fig. 2, identification authentication system further includes the mould that shinesBlock 16, for carrying out light compensation when the biometric image when acquiring user's registration and biometric image when certification.
Specifically, identification authentication system further includes light emitting module 16.Light emitting module 16 closes on image capture module 11, with placeModule 12 is managed to connect.Light emitting module 16 and image capture module 11 are located at the ipsilateral of eyeglass 15.
When biometric image when biometric image when acquiring user's registration and certification, especially at night etc.It in the case where user surrounding environment dark, can be shone by light emitting module 16, the biology that light is irradiated to user is specialSurface is levied, light compensation is carried out, keeps the light on the biological characteristic surface of user stronger, image capture module 11 is made to collect qualityBetter biometric image.
The embodiment of the present invention carries out the light emitting device of light filling by setting, can collect the biological characteristic figure of better qualityPicture improves the speed and accuracy rate of the authentication based on living things feature recognition.
Based on the above embodiment, biometric image includes: iris feature image, retinal feature image, eyeprint featureOne of image, facial feature image, palm print characteristics image or fingerprint characteristic image are a variety of.
Biometric image makes finger contain the image of biological characteristic.Can extract from biometric image can be used forThe biological characteristic of living things feature recognition.
Living things feature recognition refer to by using the intrinsic physiological characteristic (fingerprint, iris, face phase, DNA etc.) of human body orBehavioural characteristic (gait, keystroke habit etc.) Lai Jinhang personal identification identification.
Collect physiological characteristic image, it is general only to acquire secondary or negligible amounts an a few width still images, and acquire rowThe image being characterized need to generally acquire the video image with certain time length.Therefore in contrast, according to the intrinsic life of human bodyManage feature carry out personal identification identification than according to behavioural characteristic carry out personal identification identify it is simple, conveniently.
The biometric image acquired in the embodiment of the present invention is the image of physiological characteristic, including iris feature image, viewAt least one in nethike embrane characteristic image, eyeprint characteristic image, facial feature image, palm print characteristics image and fingerprint characteristic imageKind.
Acquire iris feature image, retinal feature image, eyeprint characteristic image, facial feature image, palm print characteristics figureA variety of biometric images in picture and fingerprint characteristic image carry out the compound authentication based on living things feature recognition, makeThe accuracy rate of authentication is higher.
Preferably, in order to guarantee identification safety under the premise of improve identification speed and convenience,The biometric image of acquisition includes iris feature image, retinal feature image, eyeprint characteristic image, facial characteristics figureOne of picture, palm print characteristics image and fingerprint characteristic image.Recognize for example, retinal feature image can be acquired and carry out identityCard, but not limited to this.
Fig. 2 is a kind of structural schematic diagram of identification authentication system of the embodiment of the present invention.Based on the above embodiment, such as Fig. 2 instituteTo show, processing module 12 includes extraction unit 31, the first biological characteristic is extracted in biometric image when for from user's registration,And encode the first biological characteristic, the first biological characteristic coding is obtained, and biological characteristic figure when for from user authenticationThe second biological characteristic is extracted as in, and the second biological characteristic is encoded, obtains the second biological characteristic coding；Judging unit32, it is electrically connected with subelement 31 is extracted, for reading the first biological characteristic coding of storage in a storage module, and it is raw to state secondObject feature coding is compared with the first biological characteristic coding, generates identity authentication result.
Specifically, processing module 12 includes extraction unit 31 and judging unit 32.32 electricity of extraction unit 31 and judging unitConnection.
When user's registration, in biometric image when extraction unit 31 is from the user's registration that image capture module acquires intoRow image segmentation, normalization extract the first biological characteristic in biometric image when from user's registration after normalization, and rightFirst biological characteristic is encoded, and the first biological characteristic coding is generated, by the first biological characteristic code storage into memory module.
When user authentication, in biometric image when extraction unit 31 is from the user authentication that image capture module acquires intoRow image segmentation, normalization extract the second biological characteristic in biometric image when from user authentication after normalization, and rightSecond biological characteristic is encoded, and the second biological characteristic coding is generated.
When user authentication, judging unit 32 reads the first biological characteristic coding of storage from memory module, when by authenticatingThe the second biological characteristic coding obtained is compared with the first biological characteristic coding read, generates identity authentication result.
When the second biological characteristic coding is with the first biological characteristic codes match, when illustrating user and the registration when certificationUser is same people, and authentication passes through, and user is allowed to carry out the operation；When the second biological characteristic coding and the first biological characteristicWhen coding mismatches, illustrate that user when certification and user when registration are not same people, authentication does not pass through, do not allow intoThe row operation.
The embodiment of the present invention is avoided and is recognized using password progress identity by carrying out authentication based on living things feature recognitionThe problems such as password is easily lost, forgets or is stolen when card has taken into account convenience and the safety of authentication, has improved online friendshipEasy safety and privacy.
Based on the above embodiment, as a kind of preferred embodiment, as shown in Fig. 2, processing module further include: pretreatment unit33, it is electrically connected with extraction unit 31, biological characteristic figure when biometric image and user authentication when for user's registrationAs being pre-processed, so that the quality of biometric image when biometric image when registration and certification is corresponded with and is mentionedTake the requirement of the first biological characteristic and the second biological characteristic.
Specifically, processing module further includes the pretreatment unit 33 being electrically connected with extraction unit 31.
When user's registration, the biometric image when user's registration that pretreatment unit 33 acquires image capture module intoRow pretreatment carries out before so that the quality of biometric image when pretreated user's registration is met the first biological characteristic of extractionThe requirement of image segmentation.
When user authentication, the biometric image when user authentication that pretreatment unit 33 acquires image capture module intoRow pretreatment carries out before so that the quality of biometric image when pretreated user authentication is met the second biological characteristic of extractionThe requirement of image segmentation.
It under normal circumstances, include that biometric image is subjected to ash with certain gray level to the pretreatment of biometric imageDegreeization carries out image segmentation according to the discontinuity of adjacent pixel gray value.
The embodiment of the present invention passes through life when biometric image and user authentication of the pretreatment unit to user's registration whenObject characteristic image is pre-processed, and so that the quality of biometric image is met the requirement for extracting biological characteristic, is made the biology extractedFeature is more accurate, improves the accuracy rate of the authentication based on living things feature recognition.
Based on the above embodiment, it as shown in Fig. 2, identification authentication system further includes interface module 17, is set for connecting terminalIt is standby, for carrying out data transmission with terminal device and being powered by terminal device to identification authentication system.
Specifically, identity recognition device is attached by interface module 17 with terminal device, is counted with terminal deviceAccording to transmission.
For user when the online transaction system of terminal device operates, terminal device leads to the request for carrying out authenticationIt crosses interface module 17 and is transferred to identity recognition device.After identity recognition device completes authentication, the result of authentication is led toIt crosses interface module 17 to be transferred on terminal device, online transaction system is made to allow or forbid the behaviour according to the result of authenticationMake.
By interface module 17, power supply is provided for identification authentication system by terminal device.
The embodiment of the present invention realizes that the data of identification authentication system and terminal device are transmitted by interface module, sets terminalStandby upper online transaction system allows according to the result of authentication or forbids user's operation, improves user and carries out online transactionSafety and privacy.Further, by interface module, power supply is provided for identification authentication system by terminal device, makes bodyPart authentication device will not lead to not because of powerup issue using improving the service life and range of identification authentication system.
Based on the above embodiment, as shown in Fig. 2, interface module 17 includes: usb 1 71 and/or audio interface 172.
Universal serial bus (English: Universal Serial Bus, abbreviation USB) is connection computer system and outerA kind of serial bus standard of portion's equipment and a kind of technical specification of input/output interface are widely used in personal electricityThe information communications product such as brain and mobile device, and extend to other correlations such as photographic goods, DTV (set-top box), game machineField.USB interface can be used for data transmission and power supply.The maximum of USB interface is powered up to 100W.
It is typically provided audio interface on computer, mobile intelligent terminal, is mainly used for the sound of computer, mobile intelligent terminalFrequency exports.Audio interface on computer, mobile intelligent terminal is generally 3.5mm interface.In addition to carrying out audio output, audio is connectMouth can also be used in data transmission and power supply.
The embodiment of the present invention realizes the data of identification authentication system and terminal device by USB interface and/or audio interfaceTransmission makes the online transaction system on terminal device be allowed according to the result of authentication or forbid user's operation, improves useFamily carries out safety and the privacy of online transaction.Further, by USB interface and/or audio interface, it is by terminal deviceIdentification authentication system provides power supply, lead to not identification authentication system will not because of powerup issue using improving authenticationThe service life and range of device.
Based on the above embodiment, as shown in Fig. 2, interface module 17 further includes wireless submodule 173；Wireless submodule 173Including wireless communication unit and/or wireless charging unit；Wireless communication unit is logical for making terminal device and identification authentication systemCross wireless connection；Wireless charging unit is for making terminal device pass through the power supply of wireless charging mode identification authentication system.
Specifically, interface module 17 further includes wireless submodule 173.
Wireless submodule 173 can be used for the connection of terminal device and identification authentication system, it can also be used to which terminal device isThe power supply of identification authentication system.
Wireless submodule 173 includes wireless communication unit and/or wireless charging unit.
Wireless communication unit can make terminal device and identification authentication system by bluetooth, infrared, Wi-Fi, WLAN,The connection of the wireless modes such as ZigBee.
Wireless charging unit is based on wireless power transmission technology, realizes cordless wireless power.For authenticationThe low power devices such as device carry out wireless power frequently with induction wireless power transmission technology.
The embodiment of the present invention realizes that the data of identification authentication system and terminal device are transmitted by wireless submodule, makes terminalOnline transaction system in equipment allows according to the result of authentication or forbids user's operation, improves user and is handed on the netEasy safety and privacy.Further, by wireless submodule, power supply is provided for identification authentication system by terminal device,Lead to not identification authentication system will not because of powerup issue using improving the service life and range of identification authentication system.
Based on the above embodiment, as shown in Fig. 2, identification authentication system further include: control module 18, with image capture module11 connections, for controlling biometric image when image capture module 11 acquires user's registration and biological characteristic figure when certificationPicture；Control module is also connect with processing module 12, completes authentication for controlling processing module 12；Control module 18 also with depositIt stores up module 13 to connect, stores the first biological characteristic coding for controlling memory module 13.
Control module 18 is also connect with light emitting module 16, for controlling biology of the light emitting module 16 when acquiring user's registrationLight compensation is carried out when biometric image when characteristic image and user authentication.
Control module 18 is also connect with interface module 17, is passed for the data between control interface module 17 and terminal deviceDefeated and power supply of the terminal device to identification authentication system.
Specifically, control module 18 and image capture module 11, processing module 12, storage institute's module 13, light emitting module 16It is connected with interface module 17, control image capture module 11, processing module 12, storage institute's module 13, light emitting module 16 and interfaceModule 17 is completed to realize respective function.
The embodiment of the present invention passes through the control of control module other each modules to identification authentication system, keeps other each modules realExisting respective function, realizes the authentication based on living things feature recognition, close when avoiding using password progress authenticationThe problems such as code is easily lost, forgets or is stolen, has taken into account convenience and the safety of authentication, has improved the peace of online transactionFull property and privacy.
Based on the above embodiment, as shown in Fig. 2, interface module 17 further includes power supply unit 174, for being Image Acquisition mouldBlock 11, storage institute's module 13, processing module 12, light emitting module 16 and control module 18 are powered.
Interface module 17 further includes power switch 175, is in power supply state for Switching power unit 174 or shape of not poweringState.
Specifically, interface module 17 can also include power supply unit 174, set identity recognition device can both by terminalAvailable electricity can also be powered by the power supply unit 174 in itself interface module 17.
Power supply unit 174 can for identity recognition device image capture module 11, storage institute's module 13, processing module12, light emitting module 16 and control module 18 are powered.
As a kind of preferred embodiment, interface module 17 further includes the power switch 175 for controlling power supply unit 174.Identity recognition device in the off state when, by power switch 175, power supply unit 174 can be switched to power supply state, openedDynamic identity recognition device；Identity recognition device in the start-up conditions when, by power switch 175, power supply unit 174 can be cutIt is changed to not power supply state, closes identity recognition device.
The embodiment of the present invention is identity recognition device power supply by power supply unit, and the power supply mode of identity recognition device is clevererIt is living, improve the service life and range of identification authentication system.Further, start or close identification by power switchDevice can save the electricity of power supply unit, further increase the service life of identity recognition device.
Based on the above embodiment, as a kind of preferred embodiment, as shown in Fig. 2, interface module 17 further includes function button176, the function that identification authentication system executes is confirmed for user.
Specifically, user can confirm that activation biological characteristic identification function carries out identity registration by function button 176,Other function can also be confirmed, can be also used for function prompt.Preferably, user's long-pressing function button 176 carries out bodyPart registration, short-press function button 176 carry out the confirmation of other function.
The function that the embodiment of the present invention makes user confirm that identification authentication system executes by function button, fills authenticationIt sets and executes the functions such as registration, acquisition according to the demand of user, ensure that being normally carried out for online transaction.
Based on the above embodiment, as shown in Fig. 2, identification authentication system further include: casing 14, for accommodating processing module12, memory module 13, control module 18 and interface module 17；Image capture module 11 and light emitting module 16 are set to casing 14Surface.
Specifically, in order to acquire the identity characteristic image of user, image capture module 11 is set to the surface of casing 14.ForLight compensation is carried out when acquiring the identity characteristic image of user, light projected on the biological characteristic surface of user, is sent outOptical module 16 is also disposed on the surface of casing 14.Eyeglass 15 can be from outer side covering in image capture module 11 and light emitting module 16Surface.
In order to protect processing module 12, memory module 13, control module 18 and interface module 17, processing module 12, storageModule 13, control module 18 and interface module 17 are arranged in casing 14.
The embodiment of the present invention by the other components of casing protective device, make the other components of device be not easy byDamage, extends the service life of device.
The connection of identification authentication system provided by the invention and terminal device is specifically described below.
When identification authentication system is connect with terminal device, authentication can be filled by USB interface or audio interfaceThe corresponding interface on insertion terminal device is set, realizes connection；The wireless sub-block searches of identification authentication system can also be made to wirelesslyTerminal device in network realizes connection by pressing function button after terminal device proposes matching demand.
Fig. 3 is a kind of application scenarios schematic diagram of identification authentication system of the embodiment of the present invention.In the embodiment of the present invention, eventuallyEnd equipment is the smart phone 31 that user 32 holds.As shown in figure 3, the audio interface 172 of identification authentication system 30 can be inserted into eventuallyThe audio output hole 311 of end equipment, connect identification authentication system 30 with smart phone 31.Identification authentication system 30 can also lead toThe USB port that usb 1 71 is inserted into terminal device is crossed, connect identification authentication system 30 with smart phone 31.
The audio output hole 311 of smart phone 31 is set to 312 surface of shell, the input/output module of smart phone 31313 can be used for showing that the interface of online transaction and user input, select.
After identification authentication system connect realization connection with terminal device, so that it may carry out data transmission, when terminal device is sent outOut when ID authentication request, the biological characteristic surface of user is placed in the identification range of identification authentication system by user can be realExisting authentication.
Fig. 4 is a kind of flow chart of the application method of identification authentication system of the embodiment of the present invention.Based on the above embodiment, oneThe application method of kind identification authentication system, comprising: step S1, acquire biometric image when user's registration, and store basisThe first biological characteristic coding that biometric image when registration obtains；Step S2, biological characteristic figure when user authentication is acquiredPicture, biometric image when according to certification obtain the second biological characteristic coding, by the second biological characteristic encode with store theOne biological feature coding compares, to complete authentication.
Specifically, user for the first time use online transaction system before, need first to be registered, by the identity information of user,Biological characteristic and identification authentication system are associated.When user's registration, identification authentication system and terminal device are connected by step S1It connects, identification authentication system acquires biometric image when user's registration, and biometric image when according to the registration of acquisition obtainsIt takes the first biological characteristic to encode, and stores the first biological characteristic coding.
After the completion of registration, after user when carrying out operation using online transaction system and needing to carry out authentication, according toThe prompt of online transaction system carries out authentication using identification authentication system.When user authenticates, identity is recognized by step S2Card device is connect with terminal device, and identification authentication system acquires biometric image when user authentication, according to the certification of acquisitionWhen biometric image, obtain the second biological characteristic coding, and by the second biological characteristic encode be stored in authentication dressThe first biological characteristic coding in setting compares, and completes authentication.
When the second biological characteristic coding is with the first biological characteristic codes match, when illustrating user and the registration when certificationUser is same people, and authentication passes through, and user is allowed to carry out the operation；When the second biological characteristic coding and the first biological characteristicWhen coding mismatches, illustrate that user when certification and user when registration are not same people, authentication does not pass through, do not allow intoThe row operation.
The embodiment of the present invention is avoided and is recognized using password progress identity by carrying out authentication based on living things feature recognitionThe problems such as password is easily lost, forgets or is stolen when card has taken into account convenience and the safety of authentication, has improved online friendshipEasy safety and privacy.
Identification authentication system provided by the invention and its application method are specifically described below.
Fig. 5 is the application scenarios schematic diagram of a kind of identification authentication system of the embodiment of the present invention and its application method.Such as Fig. 5 instituteShow, user 32, according to the prompt of bank clerk 41, carries out biological characteristic registration when bank carries out online transaction.This hairIn bright embodiment, terminal device is fixed terminal, specially computer 42；Identification authentication system 30 is U-shield；Using iris featureCarry out authentication.Identification authentication system 30 and computer 42 pass through wireless network connection.Bank clerk 41 is to user 32Verbal cue is carried out, prompts user 32 by eye alignment identification authentication system 30, so that identification authentication system 30 acquires user'sIris feature image obtains the first biological characteristic coding according to the iris feature image of acquisition, and stores the first biological characteristic and compileCode.
After succeeding in registration, user in using terminal equipment online transaction system carry out online transaction when, when need intoWhen row authentication, according to the prompt of online transaction system, the terminal device used when identification authentication system 30 with user is connectedIt connects, biometric image when user authentication, biological characteristic figure when according to the certification of acquisition is acquired by identification authentication systemThe first biology that picture obtains the second biological characteristic coding, and the second biological characteristic is encoded and is stored in identification authentication systemFeature coding compares, and completes authentication.
Finally, the present processes are only preferable embodiment, it is not intended to limit the scope of the present invention.It is allWithin the spirit and principles in the present invention, any modification, equivalent replacement, improvement and so on should be included in protection of the inventionWithin the scope of.