WO2017031850A1

WO2017031850A1 - User identity authentication method, device, system and smart home

Info

Publication number: WO2017031850A1
Application number: PCT/CN2015/095783
Authority: WO
Inventors: 周福家
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-08-27
Filing date: 2015-11-27
Publication date: 2017-03-02
Also published as: CN105160226A; CN105160226B

Abstract

A user identity authentication method, device, system and smart home. The method comprises: receiving fingerprint information collected by a terminal and pre-stored first authentication information; verifying whether the first authentication information matches second authentication information pre-stored in a local device; if so, merging the first authentication information and the second authentication information to generate fingerprint authentication information; performing authentication by comparing the fingerprint authentication information and the fingerprint information; and if the authentication is successful, determining the user identity authentication is successful. The method can improve security of user identity authentication.

Description

User authentication method, device, system and smart home

This application claims the priority of the Chinese patent application filed on August 27, 2015 by the Chinese Patent Office, application number 201510534923.X, and the invention name is "user authentication method, device, system and smart home". The citations are incorporated herein by reference.

Technical field

The present invention relates to the field of data processing, and in particular, to a user identity verification method, apparatus, system, and smart home.

Background technique

At present, with the development of technology, the security of a simple fingerprint authentication user identity has been questioned. For example, in the field of intelligent control, if a simple fingerprint authentication has a loophole, it will bring huge hidden dangers to the use and security of the control device.

Therefore, how to improve the security of user identity verification is a technical problem that a person skilled in the art needs to solve.

Summary of the invention

The object of the present invention is to provide a user identity verification method, which can improve the security of user identity verification; another object of the present invention is to provide a user identity verification apparatus, system and smart home.

To solve the above technical problem, the present invention provides a user identity verification method, including:

Receiving fingerprint information collected by the terminal and pre-stored first verification information;

Verifying whether the first verification information and the second verification information pre-stored by the local device match;

When the matching is performed, the first verification information and the second verification information are fused to generate verification fingerprint information;

And verifying the verification fingerprint information and the fingerprint information;

If the verification is passed, the user authentication is passed.

The method for obtaining the first verification information and the second verification information includes:

Collecting fingerprint information of the user and acquiring feature information of the fingerprint information;

The feature information of the fingerprint information is divided into two parts according to a predetermined rule to form first verification information and second verification information.

The user identity verification method further includes:

After the verification is passed, the terminal acquires the control authority corresponding to the identity of the user.

The user identity verification method further includes:

After the verification is passed, obtaining a distance difference between the terminal location and the local device location;

When the distance difference is within the first range, the terminal acquires the first control authority;

When the distance difference is within the second range, the terminal acquires the second control authority.

The invention provides a user identity verification device, comprising:

a receiving module, configured to receive fingerprint information collected by the terminal and pre-stored first verification information;

a matching module, configured to verify whether the first verification information and the second verification information pre-stored by the local device match;

a generating module, configured to: when the matching is performed, the first verification information and the second verification information are fused to generate verification fingerprint information;

The verification module is configured to compare and verify the verification fingerprint information and the fingerprint information; if the verification is passed, the user identity verification is passed.

The user identity verification device further includes:

The first authority setting module is configured to: after the verification is passed, the terminal acquires a control authority corresponding to the identity of the user.

The user identity verification device further includes:

a distance module, configured to obtain a distance difference between the terminal location and the local device location after the verification is passed;

a second authority setting module, configured to: when the distance difference is in the first range, the terminal acquires a first control authority; when the distance difference is in a second range, the terminal acquires a second Control permissions.

The invention provides a smart home comprising the user identity verification device.

The invention provides a user identity verification system, comprising:

a terminal, configured to collect fingerprint information; send fingerprint information to the device and pre-stored first verification information;

a device, configured to receive fingerprint information collected by the terminal and pre-stored first verification information; verify whether the first verification information and the second verification information pre-stored by the local device match; when matching, the first verification The information and the second verification information are fused to generate verification fingerprint information; the verification fingerprint information and the fingerprint information are compared and verified; if the verification is passed, the user identity verification is passed.

The terminal is further configured to collect fingerprint information of the user, and obtain feature information of the fingerprint information; and divide the feature information of the fingerprint information into two parts according to a predetermined rule to form first verification information and second verification information, and Sending the second verification information to the device.

The user identity verification method provided by the present invention includes: receiving fingerprint information collected by the terminal and pre-stored first verification information; verifying whether the first verification information and the second verification information pre-stored by the local device match; The first verification information and the second verification information are fused to generate verification fingerprint information; the verification fingerprint information and the fingerprint information are compared and verified; if the verification is passed, the user identity verification is passed.

The method divides the fingerprint information of the user into the first verification information and the second verification information in advance, and stores the first verification information and the second verification information in the user terminal and the device, respectively. When the user is to perform the authentication, the fingerprint information collected by the terminal and the first verification information stored in the terminal are sent to the device. The device first matches the received first verification information with the second verification information stored in the device. After the matching is successful, the fusion is generated to generate the verification fingerprint information. The device compares and verifies the received fingerprint information and the verification fingerprint information; if the verification is passed, the user identity verification passes.

The method does not store complete verification fingerprint information in the device. Therefore, if the user has only fingerprint information and no first verification information, fingerprint recognition cannot be performed. If the user has the first verification information and the user fingerprint information is wrong, the fingerprint comparison identification cannot pass. Therefore, only when the fingerprint information sent by the user terminal is correct and the first verification information is also correct, the user identity verification can be performed. Therefore, the method can improve the security of the user identity verification and ensure the legitimate rights and interests of the user.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can obtain other drawings according to the provided drawings without any creative work.

FIG. 1 is a flowchart of a user identity verification method according to an embodiment of the present invention;

2 is a structural block diagram of a user identity verification apparatus according to an embodiment of the present invention;

FIG. 3 is a structural block diagram of a user identity verification system according to an embodiment of the present invention.

detailed description

The core of the invention is to provide a user identity verification method, which can improve the security of user identity verification; another core of the invention is to provide a user identity verification device, a system and a smart home.

The technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

Please refer to FIG. 1. FIG. 1 is a flowchart of a user identity verification method according to an embodiment of the present invention; the method may include:

Step s100: Receive fingerprint information collected by the terminal and pre-stored first verification information;

Step s110: Verify whether the first verification information and the second verification information pre-stored by the local device match.

The method for obtaining the first verification information and the second verification information may be multiple, and the method for obtaining the first verification information and the second verification information may include:

Specifically, for example, the device performs a fingerprint collection of the user, and extracts the fingerprint image, and divides the fingerprint features into two parts, each part is a picture with fingerprint feature information, and the two parts are combined to form a complete fingerprint. Verify the picture; one part of the storage terminal is stored in the device. The terminal may also collect the fingerprint image of the user, and extract the fingerprint image, and divide the fingerprint features into two parts, each part is a picture with fingerprint feature information, and the two parts together can form a complete fingerprint. Verify the picture; one part of the storage terminal is stored in the device. Of course, the first verification information and the second verification information may be extracted by other devices, and the first verification information is sent to the terminal and the second verification information is sent to the device. Two of them may be to divide the feature information into two figures equally, or to divide according to unused weights.

The following is specifically described by taking the first verification information and the second verification information by the terminal as an example. The terminal uses a mobile phone as an example. Of course, the terminal may also be a device with a fingerprint collection function.

1) First establish a connection between the mobile console (mobile phone) and the device console, and the data can be transmitted through the NFC near field (the data transmission can also be performed by other means, such as Bluetooth).

2) The device console selects the verification information input, and collects the fingerprint information of the user through the fingerprint verification module of the mobile phone.

3) The mobile application side divides the fingerprint field, the reference point, the detail feature and other core judgment basis information into two parts A and B, and A and B have a matching verification binding relationship.

Among them, a specific way to divide A and B is:

Collecting a user fingerprint image to identify feature information in the fingerprint image, wherein each feature information in the figure is a small rectangular feature point;

Use a curve to pass through the center point of the feature point of the small rectangle as much as possible without crossing. Since the curve passes through the center point of the feature point, the feature along which the curve can pass is The point is divided into two parts; therefore, according to the curve, the feature information can be divided into two parts A and B; at the same time, the user fingerprint picture can be divided into picture A and picture B by the curve, wherein picture A has feature information A and picture B has characteristics Information B.

Among them, there are many algorithms divided into A and B. Here, as long as the feature information can be divided into two fingerprint images, they can be merged into a complete feature information. Fingerprint image can be.

4) A part of the information B is transmitted to the device console through the NFC for storage. The mobile terminal only retains half of the information A. Prevent the hacker from getting black and get the entire authentication permission.

Step s120: When matching, the first verification information and the second verification information are fused to generate verification fingerprint information;

When there is no match, the first verification information and the second verification information may not be merged into complete verification fingerprint information.

Step s130: Perform comparison verification on the verification fingerprint information and the fingerprint information.

The feature information of the fingerprint information and the fingerprint information is to be compared, and when the threshold is met, the comparison verification is considered to pass.

In step s140, if the verification is passed, the user identity verification is passed.

Among them, when the verification is passed, the user identity is legal and safe. Subsequent operations can be performed on the device.

Based on the foregoing technical solution, the user identity verification method provided by the embodiment of the present invention is configured to divide the fingerprint information of the user into the first verification information and the second verification information in advance, and respectively separate the first verification information and the second verification information. Stored in user terminals and devices. When the user is to perform the authentication, the fingerprint information collected by the terminal and the first verification information stored in the terminal are sent to the device. The device first matches the received first verification information with the second verification information stored in the device. After the matching is successful, the fusion is generated to generate the verification fingerprint information. The device compares and verifies the received fingerprint information and the verification fingerprint information; if the verification is passed, the user identity verification passes. The method does not store complete verification fingerprint information in the device. Therefore, if the user has only fingerprint information and no first verification information, fingerprint recognition cannot be performed. If the user has the first verification information and the user fingerprint information is wrong, the fingerprint comparison identification cannot pass. Therefore, only when the fingerprint information sent by the user terminal is correct and the first verification information is also correct, the user identity verification can be performed. Therefore, the method can improve the security of the user identity verification and ensure the legitimate rights and interests of the user.

Preferably, based on the user identity verification method of the foregoing embodiment, the method further includes:

After the verification is passed, the device can know the identity information of the user, and can find the corresponding control authority information by using the identity information of the user. For example, according to the information of the user M, the control permission of finding M is only viewable. The device will control the operation of the user M, M can only view it, and cannot make other instructions to the device, that is, other operation instructions are regarded as illegal instructions by the device.

Through such a setting, the security of the device can be ensured as much as possible, and the confidential information is guaranteed not to leak back. Convenient for personalized management of user rights.

Among them, preferably, in some cases, it is also necessary to perform different settings for the same user's rights under different conditions.

For example, the same user M, the permissions are different in different operating conditions of the device, so that when the user rights in the device are set, the corresponding provisions are made, and the user M is given different functions under different working states of the device. Permissions. This method needs to be set according to the actual use of the device.

The preferred privilege is also added to the time limit. For example, the user M obtains the privilege of the user M through the verification, but the execution time of the privilege is a predetermined time, and may be 1 hour or the like. After the predetermined time has elapsed, the permission will be canceled. If user M wants to operate the device, he must authenticate again.

Preferably, the user identity verification method on the basis of the embodiment of FIG. 1 may further include:

Among them, according to the distance information, the user rights are different, and can be used for remote control devices, for example, remote control of the smart home, when the distance is far, only the switch of all the smart homes in the home can be viewed, and a few smart The opening permission of the home; but in the case of a close distance at home, the user can be given full access to all smart homes.

The following is a description of a specific embodiment of a smart home:

(1) The smart home console is connected to the network through a router, and the mobile home application end establishes a connection with the console through the network.

(2) after the verification is passed, obtaining a distance difference between the location of the mobile phone and the location of the local device; when the distance difference is within the first range, the terminal acquires the first control permission; View permissions and appliance shutdown permissions as well as a few home appliances. Timely discover the operating status of the home appliance and shut it down. For opening permissions, users need to manually give permissions to the console to ensure security.

(3) When the user is at home (that is, when the distance difference is in the second range, the terminal acquires the second control authority), if you want to obtain all the operation rights, you need to let the mobile phone and the console pass after the verification is passed. Near field NFC verification (the console needs to manually open NFC once). At this point, give the mobile app 12-hour connection control permission.

(4) When the user leaves home, the mobile application determines that it is within the range of the home, and will automatically report to the console to cancel the connection. Becomes the default permission when connecting again.

The console may be a device dedicated to user authentication, or may be used as part of the device, for example, the console device may be set in the smart home.

Based on the foregoing technical solution, the user identity verification method provided by the embodiment of the present invention does not store complete verification fingerprint information in the device. Therefore, if the user only has fingerprint information and does not have the first verification information, fingerprint identification cannot be performed. If the user has the first verification information and the user fingerprint information is wrong, the fingerprint comparison identification cannot pass. Therefore, only when the fingerprint information sent by the user terminal is correct and the first verification information is also correct, the user identity verification can be performed. Therefore, the method can improve the security of the user identity verification and ensure the legitimate rights and interests of the user. Moreover, different authenticated information can be given to the authenticated user to ensure the security of the device.

Referring to FIG. 2, FIG. 2 is a structural block diagram of a user identity verification apparatus according to an embodiment of the present invention;

The receiving module 100 is configured to receive fingerprint information collected by the terminal and pre-stored first verification information;

The user terminal may be a mobile phone or a terminal such as a tablet.

The matching module 200 is configured to verify whether the first verification information and the second verification information pre-stored by the local device match;

a generating module 300, configured to: when the matching is performed, the first verification information and the second verification information are fused to generate verification fingerprint information;

The verification module 400 is configured to compare and verify the verification fingerprint information and the fingerprint information; if the verification is passed, the user identity verification is passed.

Preferably, the foregoing user identity verification apparatus may further include:

The embodiment of the invention provides a smart home, which comprises the above user identity verification device.

The above user identity verification device may be set inside the smart home or may be set on an external control platform to implement user identity verification and permission setting through the control finger platform.

Based on the foregoing technical solution, the smart home provided by the embodiment of the present invention uses the fingerprint information to be segmented and stored in the user terminal and the user identity verification device, thereby enhancing the security of the user remotely controlling the home, realizing different rights management, and facilitating the user to work and work at home. Understanding and control of the home. Enhanced security to prevent the operation of criminals. Improve the security management and security of the smart home.

Please refer to FIG. 3. FIG. 3 is a structural block diagram of a user identity verification system according to an embodiment of the present invention; the system may include:

The terminal 500 is configured to collect fingerprint information, and send the fingerprint information to the device and the first verification information stored in advance;

The device 600 is configured to receive fingerprint information collected by the terminal and pre-stored first verification information, and verify whether the first verification information and the second verification information pre-stored by the local device match; when matching, the first The verification information and the second verification information are fused to generate verification fingerprint information; the verification fingerprint information and the fingerprint information are compared and verified; if the verification is passed After that, user authentication is passed.

Preferably, the terminal is further configured to collect fingerprint information of the user, and acquire feature information of the fingerprint information; and divide the feature information of the fingerprint information into two parts according to a predetermined rule to form first verification information and second verification. Information and transmitting the second verification information to the device.

The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on differences from other embodiments, and the same similar parts between the various embodiments may be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

A person skilled in the art will further appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware, computer software or a combination of both, in order to clearly illustrate the hardware and software. Interchangeability, the composition and steps of the various examples have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

The steps of a method or algorithm described in connection with the embodiments disclosed herein can be implemented directly in hardware, a software module executed by a processor, or a combination of both. The software module can be placed in random access memory (RAM), memory, read only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or technical field. Any other form of storage medium known.

The user identity verification method, device, system and smart home provided by the present invention are described in detail above. The principles and embodiments of the present invention have been described herein with reference to specific examples, and the description of the above embodiments is only to assist in understanding the method of the present invention and its core idea. It should be noted that those skilled in the art can make various modifications and changes to the present invention without departing from the spirit and scope of the invention.

Claims

A user identity verification method, comprising:

Receiving fingerprint information collected by the terminal and pre-stored first verification information;

Verifying whether the first verification information and the second verification information pre-stored by the local device match;

When the matching is performed, the first verification information and the second verification information are fused to generate verification fingerprint information;

And verifying the verification fingerprint information and the fingerprint information;

If the verification is passed, the user authentication is passed.
The method for obtaining a user identity according to claim 1, wherein the method for obtaining the first verification information and the second verification information comprises:

Collecting fingerprint information of the user and acquiring feature information of the fingerprint information;

The feature information of the fingerprint information is divided into two parts according to a predetermined rule to form first verification information and second verification information.
The user identity verification method according to claim 1, further comprising:

After the verification is passed, the terminal acquires the control authority corresponding to the identity of the user.
The user identity verification method according to any one of claims 1 to 3, further comprising:

After the verification is passed, obtaining a distance difference between the terminal location and the local device location;

When the distance difference is within the first range, the terminal acquires the first control authority;

When the distance difference is within the second range, the terminal acquires the second control authority.
A user identity verification device, comprising:

a receiving module, configured to receive fingerprint information collected by the terminal and pre-stored first verification information;

a matching module, configured to verify whether the first verification information and the second verification information pre-stored by the local device match;

a generating module, configured to: when the matching is performed, the first verification information and the second verification information are fused to generate verification fingerprint information;

a verification module, configured to compare and verify the verification fingerprint information and the fingerprint information; If the verification is passed, the user authentication is passed.
The user identity verification device of claim 5, further comprising:

The first authority setting module is configured to: after the verification is passed, the terminal acquires a control authority corresponding to the identity of the user.
The user identity verification device according to claim 5 or 6, further comprising:

a distance module, configured to obtain a distance difference between the terminal location and the local device location after the verification is passed;

a second authority setting module, configured to: when the distance difference is in the first range, the terminal acquires a first control authority; when the distance difference is in a second range, the terminal acquires a second Control permissions.
A smart home characterized by comprising the user identity verification device according to any one of claims 5 to 7.
A user identity verification system, comprising:

a terminal, configured to collect fingerprint information; send fingerprint information to the device and pre-stored first verification information;

a device, configured to receive fingerprint information collected by the terminal and pre-stored first verification information; verify whether the first verification information and the second verification information pre-stored by the local device match; when matching, the first verification The information and the second verification information are fused to generate verification fingerprint information; the verification fingerprint information and the fingerprint information are compared and verified; if the verification is passed, the user identity verification is passed.
A user identity verification system according to claim 9 wherein:

The terminal is further configured to collect fingerprint information of the user, and acquire feature information of the fingerprint information; and divide the feature information of the fingerprint information into two parts according to a predetermined rule to form first verification information and second verification information, and The second verification information is sent to the device.