CN105610873A - Identity verification method and device - Google Patents

Abstract

The invention discloses an identity authentication method and device, wherein the method comprises the following steps: acquiring first fingerprint information of a user; encrypting preset initial password information by using a preset encryption algorithm to obtain target password information and outputting the target password information to a user; when the fact that the identity authentication task is triggered is detected, second fingerprint information of the user is obtained, and the second fingerprint information is matched with the first fingerprint information; and if the second fingerprint information is matched with the first fingerprint information, acquiring password information input by the user, and confirming that the user passes the identity authentication when the acquired password information is consistent with the target password information. The invention realizes the identity authentication based on multiple password protection, so that the same account has a plurality of different passwords simultaneously, and the safety and the concealment of the user when the user inputs the passwords in public places can be improved.

Description

Identity verification method and device

technical field

The invention belongs to the technical field of intelligent mobile terminals, and in particular relates to an identity verification method and device.

Background technique

With the rapid development of related technologies of smart mobile terminals, smart mobile terminals such as smart phones and tablet computers have become more and more popular in people's lives, which greatly facilitates people's life, entertainment and learning. In order to protect the user's information security, usually before the user performs certain operations, the user needs to be authenticated. For example, before logging into the operating system and unlocking the screen, the user is required to enter a verification password for identity verification. In the prior art, the user's fingerprint is used as a password, and different combinations of fingerprints are input multiple times to perform encryption and decryption algorithms to realize identity verification. However, since the screens of smart mobile terminals tend to be larger, when users enter passwords, for large-screen mobile phones, the input process may be spied on by others, resulting in password leakage, which is detrimental to the user's information security. influences.

Contents of the invention

The invention provides an identity verification method and device, and realizes identity verification based on multiple password protection, so that the same account has multiple different passwords at the same time, which can increase the security and concealment of users when inputting passwords in public places.

The first aspect of the present invention provides an identity verification method, including: obtaining the first fingerprint information of the user; using a preset encryption algorithm to encrypt the preset initial password information to obtain target password information and output it to the user; When it is detected that the identity verification task is triggered, obtain the second fingerprint information of the user, and match the second fingerprint information with the first fingerprint information; if the second fingerprint information is consistent with the first fingerprint If the information matches, the password information input by the user is obtained, and when the obtained password information is consistent with the target password information, it is confirmed that the user has passed the identity verification.

With reference to the first aspect, in the first possible implementation manner of the first aspect, when it is detected that the identity verification task is triggered, before obtaining the second fingerprint information of the user, further includes: obtaining the user's own fingerprint information. Defined password information.

With reference to the first possibility of the first aspect, in the second possible implementation manner of the first aspect, after the matching of the second fingerprint information and the first fingerprint information, further includes: if the If the second fingerprint information does not match the first fingerprint information, then obtain the backup password information input by the user, and when the backup password information is consistent with the self-defined password information, confirm that the user has passed the identity verification .

With reference to the first possibility of the first aspect, in a third possible implementation manner of the first aspect, the method further includes: after detecting that the identity verification task is triggered, if only the input password of the user is detected If the operation is performed, the password information corresponding to the operation is obtained, and when the password information corresponding to the operation is consistent with the user-defined password information, it is confirmed that the user has passed the identity verification.

In combination with the first aspect, the first possibility of the first aspect, the second possibility of the first aspect, or the third possibility of the first aspect, in a fourth possible implementation of the first aspect, the use A preset encryption algorithm, encrypting the preset initial password information, and obtaining the target password information includes: using the first fingerprint information as the initial password information, and using the encryption algorithm to perform encryption on the first fingerprint information Encrypt to obtain the target password information.

In combination with the first aspect, the first possibility of the first aspect, the second possibility of the first aspect, or the third possibility of the first aspect, in a fifth possible implementation of the first aspect, the use The preset encryption algorithm, encrypting the preset initial password information, and obtaining the target password information includes: randomly generating the initial password information according to the preset generation rules, and encrypting the initial password information by using the encryption algorithm , to obtain the target password information.

With reference to the first aspect, in the sixth possible implementation manner of the first aspect, the encryption of the preset initial password information using a preset encryption algorithm, and before obtaining the target password information, further includes: detecting the The encryption algorithm setting operation of the user obtains the encryption algorithm pointed to by the encryption algorithm setting operation as the preset encryption algorithm.

The second aspect of the present invention provides an identity verification device, including: a fingerprint acquisition module, used to acquire the user's first fingerprint information; an encryption module, used to use a preset encryption algorithm to encrypt the preset initial password information, Obtain the target password information and output it to the user; the detection module is used to detect whether the identity verification task is triggered; the fingerprint acquisition module is also used to acquire when the detection module detects that the identity verification task is triggered. The second fingerprint information of the user; a matching module, configured to match the second fingerprint information with the first fingerprint information; a password acquisition module, configured to match the second fingerprint information if the matching result of the matching module is the second If the fingerprint information matches the first fingerprint information, the password information input by the user is obtained; the comparison module is used to compare whether the obtained password information is consistent with the target password information; the verification module is used to compare When the comparison result of the module is that the acquired password information is consistent with the target password information, it is confirmed that the user has passed the identity verification.

With reference to the second aspect, in a first possible implementation manner of the second aspect, the password obtaining module is further configured to obtain the user-defined password information.

With reference to the first possibility of the second aspect, in a second possible implementation manner of the second aspect, the password obtaining module is further configured to: if the matching result of the matching module is that the second fingerprint information and the If the first fingerprint information does not match, then obtain the backup password information input by the user; the comparison module is also used to compare whether the backup password information is consistent with the self-defined password information; the verification module is also used to It is used for confirming that the user has passed the identity verification when the comparison result of the comparison module is that the backup password information is consistent with the user-defined password information.

With reference to the second possibility of the second aspect, in a third possible implementation manner of the second aspect, the detection module is further configured to detect the user's input after detecting that the identity verification task is triggered password operation; the password acquisition module is also used to acquire the The password information corresponding to the operation; the comparison module is also used to compare whether the password information corresponding to the operation is consistent with the self-defined password information; the verification module is also used to determine whether the comparison result of the comparison module is When the password information corresponding to the operation is consistent with the user-defined password information, it is confirmed that the user passes the identity verification.

In combination with the second aspect, the first possibility of the second aspect, the second possibility of the second aspect, or the third possibility of the second aspect, in a fourth possible implementation manner of the second aspect, the encryption The module is specifically configured to use the first fingerprint information as the initial password information, and use the encryption algorithm to encrypt the first fingerprint information to obtain the target password information.

In combination with the second aspect, the first possibility of the second aspect, the second possibility of the second aspect, or the third possibility of the second aspect, in a fifth possible implementation manner of the second aspect, the encryption The module is specifically configured to randomly generate initial password information according to a preset generation rule, and encrypt the initial password information by using the encryption algorithm to obtain the target password information.

With reference to the second aspect, in a sixth possible implementation manner of the second aspect, the detection module is further configured to detect the encryption algorithm setting operation of the user; the device further includes: an algorithm acquisition module, configured to When the detection module detects the user's encryption algorithm setting operation, it acquires the encryption algorithm pointed to by the encryption algorithm setting operation as the preset encryption algorithm.

It can be seen from the above embodiments of the present invention that by using the first fingerprint information input by the user and the password information generated by using a preset encryption algorithm as the password for identity verification, when it is detected that the identity verification task is triggered, the user's first fingerprint information is obtained. Two fingerprint information, and when the second fingerprint information matches the first fingerprint information, obtain the password information entered by the user, and when the obtained password information is consistent with the previously generated password information, confirm that the user has passed the identity verification. The present invention realizes identity verification based on multiple password protection, so that the same account has multiple different passwords at the same time, which can increase the security and concealment of users when inputting passwords in public places.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained according to these drawings on the premise of not paying creative efforts.

Fig. 1 is a structural block diagram of an intelligent mobile terminal;

Fig. 2 is a schematic diagram of the implementation flow of the identity verification method provided by the first embodiment of the present invention;

FIG. 3 is a schematic diagram of an implementation flow of an identity verification method provided by a second embodiment of the present invention;

Fig. 4 is a schematic structural diagram of an identity verification device provided by a third embodiment of the present invention;

Fig. 5 is a schematic structural diagram of an identity verification device provided by a fourth embodiment of the present invention.

detailed description

In order to make the purpose, features and advantages of the present invention more obvious and understandable, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described The embodiments are only some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without making creative efforts belong to the protection scope of the present invention.

Fig. 1 shows a structural block diagram of an intelligent mobile terminal. The identity verification method provided by the embodiment of the present invention can be applied to the smart mobile terminal 10 shown in Figure 1. The smart mobile terminal 10 can include, but is not limited to: smart phones, tablet computers and wearable smart devices with fingerprint information acquisition functions. etc.

As shown in Figure 1, the smart mobile terminal 10 includes a memory 101, a storage controller 102, one or more (only one is shown in the figure) processors 103, a peripheral interface 104, a radio frequency module 105, a button module 106, an audio module 107 , a touch screen 108 and a fingerprint module 109 . These components communicate with each other via one or more communication buses/signal lines 110 .

It can be understood that the structure shown in FIG. 1 is only for illustration, and it does not limit the structure of the smart mobile terminal. The smart mobile terminal 10 may also include more or fewer components than those shown in FIG. 1 , or have a different configuration from that shown in FIG. 1 . Each component shown in FIG. 1 may be implemented by hardware, software or a combination thereof.

The memory 101 can be used to store software programs and modules, such as program instructions/modules corresponding to the identity verification method and device in the embodiment of the present invention, and the processor 103 executes various functions by running the software programs and modules stored in the memory 101 The application and data processing are to implement the above-mentioned identity verification method implemented in the smart mobile terminal 10 .

The memory 101 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 101 may further include a memory that is remotely located relative to the processor 103, and these remote memories may be connected to the smart mobile terminal 10 through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof. Access to the memory 101 by the processor 103 and possibly other components may be under the control of the memory controller 102 .

The peripheral interface 104 couples various input/output devices to the CPU and the memory 101 . The processor 103 runs various software and instructions in the memory 101 to execute various functions of the smart mobile terminal 10 and perform data processing.

In some embodiments, peripheral interface 104, processor 103, and memory controller 102 may be implemented in a single chip. In some other instances, they can be implemented by independent chips respectively.

The radio frequency module 105 is used to receive and send electromagnetic waves, realize mutual conversion between electromagnetic waves and electrical signals, and communicate with communication networks or other devices. The radio frequency module 105 may include various existing circuit elements for performing these functions, such as antenna, radio frequency transceiver, digital signal processor, encryption/decryption chip, Subscriber Identity Module (SIM) card, memory and so on. The radio frequency module 105 can communicate with various networks such as the Internet, an intranet, a preset type of wireless network, or communicate with other devices through a preset type of wireless network. The aforementioned preset type of wireless network may include a cellular telephone network, a wireless local area network or a metropolitan area network. The aforementioned preset type of wireless network can use various communication standards, protocols and technologies, including but not limited to Global System for Mobile Communication (GSM), Enhanced DataGSMEnvironment (EDGE), Wideband Code Division Multiple Access Technology (WidebandCodeDivisionMultipleAccess, W-CDMA), Code Division Multiple Access (CodeDivisionAccess, CDMA), Time Division Multiple Access (TimeDivisionMultipleAccess, TDMA), Bluetooth, Wireless-Fidelity (Wireless-Fidelity, WiFi) (such as American electrical and electronic engineers Association standards IEEE802.11a, IEEE802.11b, IEEE802.11g and/or IEEE802.11n), VoIP (VoiceoverInternetProtocal, VoIP), Worldwide Interoperability for MicrowaveAccess (Wi-Max), others for mail, instant messaging and protocol for short messages, and any other suitable communication protocol.

The button module 106 provides an interface for the user to input to the smart mobile terminal, and the user can press different buttons to make the smart mobile terminal 10 perform different functions.

The audio module 107 provides an audio interface to the user, which may include one or more microphones, one or more speakers, and audio circuitry. The audio circuit receives sound data from the peripheral interface 104, converts the sound data into electrical information, and transmits the electrical information to the speaker. Speakers convert electrical information into sound waves that can be heard by the human ear. The audio circuit also receives electrical information from the microphone, converts the electrical signal into sound data, and transmits the sound data to the peripheral interface 104 for further processing. Audio data can be obtained from the memory 101 or through the radio frequency module 105 . In addition, the audio data can also be stored in the memory 101 or sent through the radio frequency module 105 . In some examples, the audio module 107 may further include an earphone jack for providing an audio interface for earphones or other devices.

The touch screen 108 simultaneously provides an output and input interface between the smart mobile terminal and the user. Specifically, the touch screen 108 displays video output to the user, and the content of the video output may include text, graphics, video, and any combination thereof. Some output results correspond to some user interface objects. The touch screen 108 also receives user input, such as user gesture operations such as clicking and sliding, so that the user interface objects respond to these user inputs. The technique for detecting user input may be based on resistive, capacitive or any other possible touch detection techniques. Specific examples of the display unit of the touch screen 108 include, but are not limited to, liquid crystal displays or light emitting polymer displays.

The fingerprint module 109 is used to acquire the fingerprint information of the user.

Please refer to FIG. 2 . FIG. 2 is a schematic diagram of an implementation flow of the identity verification method provided by the first embodiment of the present invention. The identity verification method provided in this embodiment can be applied to the smart mobile terminal 10 shown in Figure 1, and as shown in Figure 2, the method mainly includes the following steps:

S201. Obtain the first fingerprint information of the user;

The first fingerprint image of the user is acquired through the fingerprint module 109, and the first fingerprint information is extracted and saved for later identity verification.

S202. Using a preset encryption algorithm, encrypt the preset initial password information to obtain the target password information and output it to the user;

Specifically, the extracted first fingerprint information may be used as the initial password information, or the password information composed of one or more different types of characters input by the user may be used as the initial password information, or, according to a preset generation rule, Randomly generate a set of password information composed of one or more different types of characters as the initial password information. Then use the preset encryption algorithm to encrypt any of the above initial password information to obtain the target password information and output it to the user for later identity verification.

It should be noted that, in this embodiment, the preset encryption algorithm is not specifically limited.

S203. When it is detected that the identity verification task is triggered, acquire the second fingerprint information of the user, and match the second fingerprint information with the first fingerprint information;

When it is detected that the user performs a preset operation that requires authentication, such as: start the operating system, open the specified encrypted file, unlock the screen, log in to the specified client, etc., confirm that the authentication task is triggered . At this time, the fingerprint module 109 acquires the user's second fingerprint image, extracts the second fingerprint information therein, and matches the extracted second fingerprint information with the first fingerprint information extracted in step S201.

S204. If the second fingerprint information matches the first fingerprint information, acquire password information input by the user, and confirm that the user has passed identity verification when the acquired password information is consistent with the target password information.

If the second fingerprint information matches the first fingerprint information, then display the password input interface, obtain the password information input by the user on the password input interface, and compare whether the acquired password information is consistent with the target password information obtained by using the encryption algorithm in step S202 , if the two are consistent, confirm that the user has passed the authentication, and perform subsequent operations, such as: displaying the desktop, opening the specified file, unlocking the screen, logging in to the specified client, and so on.

In the identity verification method provided by the embodiment of the present invention, the first fingerprint information input by the user and the target password information generated by using the preset encryption algorithm are used as the password for identity verification. When it is detected that the identity verification task is triggered, the The user's second fingerprint information, and when the second fingerprint information matches the first fingerprint information, obtain the password information entered by the user, and when the obtained password information is consistent with the previously generated target password information, confirm that the user has passed the identity verification, Compared with the prior art, the present invention realizes identity verification based on multiple password protection, so that the same account has multiple different passwords at the same time, which can increase the security and concealment of users when inputting passwords in public places.

Please refer to FIG. 3 . FIG. 3 is a schematic diagram of an implementation flow of the identity verification method provided by the second embodiment of the present invention. The identity verification method provided in this embodiment can be applied to the smart mobile terminal 10 shown in Figure 1, and as shown in Figure 3, the method mainly includes the following steps:

S301. Obtain the user's first fingerprint information and user-defined password information;

The fingerprint module 109 acquires the user's first fingerprint image, extracts the first fingerprint information therein and saves it, so that the user can use it when performing identity verification in public places. Obtain user-defined password information composed of one or more different types of characters through the password input interface, for example, password information composed of numbers, or numbers and letters, so that users can use it when performing identity verification in non-public places.

S302. Detect the user's encryption algorithm setting operation, and obtain the encryption algorithm pointed to by the encryption algorithm setting operation as a preset encryption algorithm.

A variety of encryption algorithms can be preset in the smart mobile terminal to detect the user's encryption algorithm setting operation, and determine the encryption algorithm pointed to by the encryption algorithm setting operation from the preset various encryption algorithms, as this generation for the user in the public The encryption algorithm used by the target password information used in authentication. Alternatively, according to the user's encryption algorithm setting operation, the corresponding encryption algorithm can be obtained from other locations, such as an external storage device or a network server, as the target password information generated this time for the user to use for identity verification in public places. The encryption algorithm used.

S303. Use the first fingerprint information as the preset initial password information, and use the preset encryption algorithm to encrypt the initial password information to obtain the target password information and output it to the user;

Specifically, the first fingerprint information may include characteristic information such as the acquired user fingerprint type, pointing direction, and number of stripes. The first fingerprint information is converted into a number, and the converted number is encrypted with a preset encryption algorithm to obtain the target password information for identity verification and output to the user.

Alternatively, a preset encryption algorithm can also be used to directly encrypt the first fingerprint image to obtain the target password information. Alternatively, other similar methods may also be used, using the first fingerprint information as the initial password information, and using a preset encryption algorithm to encrypt the initial password information to obtain the target password information and output it to the user.

In other embodiments of the present invention, a group of password information composed of one or more different types of characters is randomly generated as the initial password information, such as a 6-digit password composed of numbers or letters, or a mixture of numbers and letters Then use the encryption algorithm to encrypt the initial password information to obtain the target password information used when the user performs identity verification in public places.

S304. When it is detected that the identity verification task is triggered, acquire the second fingerprint information of the user, and match the second fingerprint information with the first fingerprint information;

When it is detected that the user performs a preset operation that requires authentication, such as: start the operating system, open the specified encrypted file, unlock the screen, log in to the specified client, etc., confirm that the authentication task is triggered . At this time, the second fingerprint image of the user is acquired by the fingerprint module, the second fingerprint information is extracted therein, and the extracted second fingerprint information is matched with the first fingerprint information extracted in step S301.

S305. If the second fingerprint information matches the first fingerprint information, obtain the password information input by the user, and confirm that the user has passed the identity verification when the obtained password information is consistent with the target password information;

If the second fingerprint information matches the first fingerprint information, then display the password input interface, obtain the password information input by the user on the password input interface, and compare whether the acquired password information is consistent with the target password information obtained by using the encryption algorithm in step S303 , if the two are consistent, confirm that the user has passed the authentication, and perform subsequent operations, such as: displaying the desktop, opening the specified file, unlocking the screen, logging in to the specified client, and so on.

S306. If the second fingerprint information does not match the first fingerprint information, obtain backup password information input by the user, and confirm that the user has passed identity verification when the backup password information is consistent with the user-defined password information.

If the second fingerprint information does not match the first fingerprint information, then display the password input interface, obtain the backup password information input by the user, compare the obtained backup password information with the user-defined password information in step S301, and judge whether the two Consistent, if the two are consistent, confirm that the user has passed the authentication. Understandably, if the two are inconsistent, it is confirmed that the user has not passed the identity verification, and a preset prompt message is displayed, and the prompt message is used to prompt that the user has not passed the identity verification.

Furthermore, in other embodiments of the present invention, after detecting that the identity verification task is triggered, if only the user’s password input operation is detected, the password information corresponding to the operation is obtained, and when the password information corresponding to the operation is the same as the user’s When the defined password information is consistent, confirm that the user has passed the authentication. That is, if it is detected that after the identity verification task is triggered, the user does not perform the operation of fingerprint entry, but directly performs the operation of inputting the password through the interactive interface displayed on the screen, then the password input by the user on the interactive interface is obtained, and Compare the password with the user-defined password to determine whether the two are consistent, and if the two are consistent, confirm that the user has passed the authentication.

In the identity verification method provided by the embodiment of the present invention, the first fingerprint information input by the user and the target password information generated by using the preset encryption algorithm are used as the password used by the user for identity verification in public places. When triggered, obtain the user's second fingerprint information, and when the second fingerprint information matches the first fingerprint information, obtain the password information entered by the user, and when the obtained password information is consistent with the previously generated target password information, confirm the user's Through identity verification, compared with the prior art, the present invention realizes identity verification based on multiple password protection, so that the same account has multiple different passwords at the same time, which can increase the security and concealment of users when entering passwords in public places . Further, when the second fingerprint information does not match the first fingerprint information, or after detecting that the identity verification task is triggered, if only the user's input password information is detected, then when the password input by the user When the information is consistent with the user-defined password information, it is confirmed that the user has passed the identity verification, so that the user can perform identity verification in a relatively simple way in non-public places, which improves the flexibility and convenience of identity verification operations.

Please refer to FIG. 4 . FIG. 4 is a schematic structural diagram of an identity verification device provided by a third embodiment of the present invention. For ease of description, only parts related to the embodiment of the present invention are shown. The identity verification device illustrated in FIG. 4 may be the subject of execution of the identity verification method provided in the foregoing embodiments, and it may be a smart mobile terminal or a functional module in the smart mobile terminal. The identity verification device illustrated in FIG. 4 mainly includes: a fingerprint acquisition module 401 , an encryption module 402 , a detection module 403 , a matching module 404 , a password acquisition module 405 , a comparison module 406 and a verification module 407 . The detailed description of each functional module is as follows:

A fingerprint acquisition module 401, configured to acquire the first fingerprint information of the user;

The encryption module 402 is used to encrypt the preset initial password information by using the preset encryption algorithm, obtain the target password information and output it to the user;

A detection module 403, configured to detect whether the identity verification task is triggered;

The fingerprint acquisition module 401 is further configured to acquire the second fingerprint information of the user when the detection module 403 detects that the identity verification task is triggered;

A matching module 404, configured to match the second fingerprint information with the first fingerprint information;

A password acquisition module 405, configured to acquire the password information input by the user if the matching result of the matching module 404 is that the second fingerprint information matches the first fingerprint information;

A comparison module 406, configured to compare whether the acquired password information is consistent with the target password information;

The verification module 407 is configured to confirm that the user passes the identity verification when the comparison result of the comparison module 406 is that the acquired password information is consistent with the target password information.

Specifically, the fingerprint acquisition module 401 acquires the user's first fingerprint image, extracts the first fingerprint information therein and saves it for later identity verification. The encryption module 402 uses a preset encryption algorithm to encrypt the preset initial password information to obtain the target password information and output it to the user, wherein the preset initial password information can be the first fingerprint information extracted by the fingerprint acquisition module 401, or A set of password information consisting of one or more different types of characters randomly generated by the encryption module 402 according to preset generation rules, or a set of user input obtained by the password acquisition module 405 consisting of one or more Password information composed of different types of characters.

When the detection module 403 detects that the user performs a preset operation that requires authentication, such as the operation of starting the operating system, the operation of opening a specified encrypted file, the operation of unlocking the screen, the operation of logging into a specified client, etc., confirm the identity authentication The task is triggered. At this time, the fingerprint acquisition module 401 acquires the second fingerprint image of the user, and extracts the second fingerprint information therein. The matching module 404 matches the second fingerprint information extracted by the fingerprint acquisition module 401 with the first fingerprint information.

If the matching result of the matching module 404 is that the second fingerprint information matches the first fingerprint information, the password acquisition module 405 displays a password input interface and acquires the password information input by the user on the password input interface. Comparison module 406 compares whether the obtained password information is consistent with the target encryption information obtained by encryption module 402. If the two are consistent, verification module 407 confirms that the user has passed identity verification, and performs subsequent operations, such as: displaying the desktop, opening specified files, canceling Screen lock status, login to specified client, etc.

It should be noted that in the implementation of the identity verification device illustrated in FIG. 4 above, the division of each functional module is only an example. In actual applications, it can be considered according to needs, such as the configuration requirements of corresponding hardware or the convenience of software implementation, and The above-mentioned function allocation is completed by different functional modules, that is, the internal structure of the device is divided into different functional modules, so as to complete all or part of the functions described above. Moreover, in practical applications, the corresponding functional modules in this embodiment may be implemented by corresponding hardware, or may be completed by corresponding hardware executing corresponding software. Each of the embodiments provided in this specification can apply the above-mentioned description principle, which will not be described in detail below.

The identity verification device provided by the embodiment of the present invention uses the first fingerprint information input by the user and the target password information generated by using the preset encryption algorithm as the password for identity verification, and when it detects that the identity verification task is triggered, obtains The user's second fingerprint information, and when the second fingerprint information matches the first fingerprint information, obtain the password information entered by the user, and when the obtained password information is consistent with the previously generated target password information, confirm that the user has passed the identity verification, Compared with the prior art, the present invention realizes identity verification based on multiple password protection, so that the same account has multiple different passwords at the same time, which can increase the security and concealment of users when inputting passwords in public places.

Please refer to FIG. 5 . FIG. 5 is a schematic structural diagram of an identity verification device provided by a fourth embodiment of the present invention. For ease of description, only parts related to the embodiment of the present invention are shown. The identity verification device illustrated in FIG. 5 may be the subject of execution of the identity verification method provided in the foregoing embodiments, and it may be a smart mobile terminal or a functional module in the smart mobile terminal. On the basis of the identity verification device provided by the third embodiment of the present invention shown in Figure 4, different from the third embodiment, in the fourth embodiment, the device as shown in Figure 5 further includes: an algorithm acquisition module 501. The detailed description of each functional module is as follows:

Further, the password obtaining module 405 is also used to obtain the user-defined password information.

Further, the password acquisition module 405 is also configured to acquire the backup password information input by the user if the matching result of the matching module 404 is that the second fingerprint information does not match the first fingerprint information;

The comparison module 406 is also used to compare whether the standby password information is consistent with the self-defined password information;

The verification module 407 is further configured to confirm that the user has passed the identity verification when the comparison result of the comparison module 406 is that the backup password information is consistent with the user-defined password information.

Further, the detection module 403 is also configured to detect the user's operation of inputting a password after detecting that the identity verification task is triggered;

The password acquisition module 405 is also used to obtain the password information corresponding to the operation if the detection module 403 only detects the operation of inputting the password of the user after the detection module 403 detects that the identity verification task is triggered;

The comparison module 406 is also used to compare whether the password information corresponding to the operation is consistent with the user-defined password information;

The verification module 407 is further configured to confirm that the user has passed the identity verification when the comparison result of the comparison module 406 is that the password information corresponding to the operation is consistent with the user-defined password information.

Further, the encryption module 402 is specifically configured to use the first fingerprint information as the initial password information, and use the encryption algorithm to encrypt the first fingerprint information to obtain the target password information.

Further, the encryption module 402 is specifically configured to randomly generate initial password information according to a preset generation rule, and encrypt the initial password information by using the encryption algorithm to obtain the target password information.

Further, the detection module 403 is also used to detect the user's encryption algorithm setting operation;

The unit also includes:

The algorithm acquisition module 501 is configured to acquire the encryption algorithm pointed to by the encryption algorithm setting operation as the preset encryption algorithm when the detection module 403 detects the user's encryption algorithm setting operation.

Specifically, the fingerprint acquisition module 401 acquires the user's first fingerprint image, extracts the first fingerprint information therein and saves it, so that the user can use it when performing identity verification in public places. The password acquisition module 405 acquires user-defined password information composed of one or more different types of characters through the password input interface, for example, password information composed of numbers, or numbers and letters, so that users can identify themselves in non-public places. Used for authentication.

A variety of encryption algorithms can be preset in the smart mobile terminal. When the detection module 403 detects the user's encryption algorithm setting operation, the algorithm acquisition module 501 determines the encryption algorithm pointed to by the encryption algorithm setting operation from among the various preset encryption algorithms. , as the encryption algorithm used to generate the target password information used when the user authenticates in public this time. Alternatively, the algorithm acquisition module 501 can also obtain the corresponding encryption algorithm from other locations, such as an external storage device or a network server, according to the encryption algorithm setting operation of the user, as the generated encryption algorithm for the user to use when performing identity verification in public places. The encryption algorithm used for the target password information.

The first fingerprint information may include characteristic information such as the type, direction of pointing, and number of stripes of the obtained user fingerprint. The encryption module 402 queries the preset records with characteristic information such as type, direction of pointing, and number of stripes and the corresponding numbers. The first fingerprint information is converted into a number, and the converted number is encrypted using a preset encryption algorithm to obtain the target password information and output it to the user.

In other embodiments of the present invention, the encryption module 402 randomly generates a set of password information consisting of one or more different types of characters as the initial password information according to preset generation rules, such as 6 characters consisting entirely of numbers or letters. digit password, or an 8-digit password composed of a mixture of numbers and letters, etc., and then use an encryption algorithm to encrypt the initial password information to obtain the target password information used by users for identity verification in public places.

When the detection module 403 detects that the user performs a preset operation that requires authentication, such as the operation of starting the operating system, the operation of opening a specified encrypted file, the operation of unlocking the screen, the operation of logging into a specified client, etc., confirm the identity authentication The task is triggered. At this time, the fingerprint acquisition module 401 acquires the second fingerprint image of the user, and extracts the second fingerprint information therein. The matching module 404 matches the second fingerprint information extracted by the fingerprint acquisition module 401 with the first fingerprint information.

If the matching result of the matching module 404 is that the second fingerprint information matches the first fingerprint information, the password acquisition module 405 displays a password input interface to obtain the password information input by the user on the password input interface, and the comparison module 406 compares the password acquisition module 405 to obtain Whether the password information obtained by the encryption module 402 is consistent with the target encryption information obtained by the encryption algorithm by the encryption module 402, if the two are consistent, the verification module 407 confirms that the user has passed the identity verification, and performs subsequent operations, such as: displaying the desktop, opening the specified file, and unlocking the screen Status, login specified client, etc.

If the matching result of the matching module 404 is that the second fingerprint information does not match the first fingerprint information, the password acquisition module 405 displays a password input interface to obtain the backup password information input by the user, and the comparison module 406 compares the backup password obtained by the password acquisition module 405 The information is compared with the user-defined password information to determine whether the two are consistent, and if the two are consistent, the verification module 407 confirms that the user has passed the identity verification. Understandably, if the two are inconsistent, the verification module 407 confirms that the user has not passed the identity verification, and displays a preset prompt message, which is used to remind the user that the user has not passed the identity verification.

Furthermore, in other embodiments of the present invention, when the detection module 403 detects that the identity verification task is triggered, the user does not perform the operation of fingerprint entry, but directly performs the operation of inputting the password through the interactive interface displayed on the screen, then The password acquisition module 405 acquires the password input by the user on the interactive interface, and the comparison module 406 compares the password with the user-defined password to determine whether the two are consistent. If the two are consistent, the verification module 407 confirms that the user has passed the identity verification.

The identity verification device provided by the embodiment of the present invention uses the first fingerprint information input by the user and the target password information generated by a preset encryption algorithm as the password information used by the user for identity verification in public places. When triggered, obtain the second fingerprint information of the user, and when the second fingerprint information matches the first fingerprint information, obtain the password information entered by the user, and when the obtained password information is consistent with the previously generated target password information, confirm The user passes the identity verification. Compared with the prior art, the present invention realizes the identity verification based on multiple password protection, so that the same account has multiple different passwords at the same time, which can increase the security and concealment of users when entering passwords in public places. sex. Further, when the second fingerprint information does not match the first fingerprint information, or after detecting that the identity verification task is triggered, if only the user's input password information is detected, then when the password input by the user When the information is consistent with the user-defined password information, it is confirmed that the user has passed the identity verification, so that the user can perform identity verification in a relatively simple way in non-public places, which improves the flexibility and convenience of identity verification operations.

In the several embodiments provided in this application, it should be understood that the disclosed devices and methods may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the modules is only a logical function division. In actual implementation, there may be other division methods. For example, multiple modules or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or modules may be in electrical, mechanical or other forms.

The modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical modules, that is, they may be located in one place, or may be distributed to multiple network modules. Part or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional module in each embodiment of the present invention may be integrated into one processing module, each module may exist separately physically, or two or more modules may be integrated into one module. The above-mentioned integrated modules can be implemented in the form of hardware or in the form of software function modules.

If the integrated modules are realized in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-OnlyMemory), random access memory (RAM, RandomAccessMemory), magnetic disk or optical disk and other media that can store program codes.

It should be noted that, for the sake of simplicity of description, the aforementioned method embodiments are expressed as a series of action combinations, but those skilled in the art should know that the present invention is not limited by the described action sequence. Because of the present invention, certain steps may be performed in other orders or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification belong to preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

In the foregoing embodiments, the descriptions of each embodiment have their own emphases, and for parts not described in detail in a certain embodiment, reference may be made to relevant descriptions of other embodiments.

The above is the description of the identity verification method and device provided by the present invention. For those skilled in the art, according to the idea of the embodiment of the present invention, there will be changes in the specific implementation and application range. In summary, this specification The content should not be construed as a limitation of the invention.

Claims (14)

1. An identity verification method, characterized in that the method comprises: Obtain the first fingerprint information of the user; Using a preset encryption algorithm to encrypt the preset initial password information to obtain target password information and output it to the user; When it is detected that the identity verification task is triggered, obtain the second fingerprint information of the user, and match the second fingerprint information with the first fingerprint information; If the second fingerprint information matches the first fingerprint information, acquire password information input by the user, and confirm that the user has passed identity verification when the acquired password information is consistent with the target password information. 2. The method according to claim 1, wherein when it is detected that the identity verification task is triggered, before obtaining the second fingerprint information of the user, further comprising: Obtain the user-defined password information. 3. The method according to claim 2, characterized in that, after matching the second fingerprint information with the first fingerprint information, further comprising: If the second fingerprint information does not match the first fingerprint information, obtain backup password information input by the user, and when the backup password information is consistent with the user-defined password information, confirm that the user Authenticated. 4. The method according to claim 2, characterized in that the method further comprises: After detecting that the identity verification task is triggered, if only the user's password input operation is detected, then obtain the password information corresponding to the operation, and when the password information corresponding to the operation is the same as the user-defined When the password information is consistent, it is confirmed that the user passes the authentication. 5. The method according to any one of claims 1-4, wherein said utilizing a preset encryption algorithm to encrypt the preset initial password information to obtain the target password information comprises: The first fingerprint information is used as the initial password information, and the encryption algorithm is used to encrypt the first fingerprint information to obtain the target password information. 6. The method according to any one of claims 1-4, wherein said utilizing a preset encryption algorithm to encrypt the preset initial password information to obtain the target password information comprises: The initial password information is randomly generated according to a preset generation rule, and the initial password information is encrypted by using the encryption algorithm to obtain the target password information. 7. The method according to claim 1, wherein said utilizing a preset encryption algorithm to encrypt the preset initial password information, and before obtaining the target password information, further includes: Detecting the encryption algorithm setting operation of the user, and obtaining the encryption algorithm pointed to by the encryption algorithm setting operation as the preset encryption algorithm. 8. An identity verification device, characterized in that the device comprises: A fingerprint acquisition module, configured to acquire the first fingerprint information of the user; An encryption module, configured to use a preset encryption algorithm to encrypt the preset initial password information to obtain the target password information and output it to the user; A detection module, configured to detect whether the identity verification task is triggered; The fingerprint acquisition module is further configured to acquire the second fingerprint information of the user when the detection module detects that the identity verification task is triggered; A matching module, configured to match the second fingerprint information with the first fingerprint information; A password acquisition module, configured to acquire the password information input by the user if the matching result of the matching module is that the second fingerprint information matches the first fingerprint information; A comparison module, configured to compare whether the acquired password information is consistent with the target password information; A verification module, configured to confirm that the user has passed identity verification when the comparison result of the comparison module is that the acquired password information is consistent with the target password information. 9. The device of claim 8, wherein: The password obtaining module is also used to obtain the user-defined password information. 10. The apparatus of claim 9, wherein: The password acquisition module is further configured to acquire backup password information input by the user if the matching result of the matching module is that the second fingerprint information does not match the first fingerprint information; The comparison module is also used to compare whether the standby password information is consistent with the self-defined password information; The verification module is further configured to confirm that the user has passed identity verification when the comparison result of the comparison module is that the backup password information is consistent with the user-defined password information. 11. The apparatus of claim 10, wherein: The detection module is further configured to detect the user's operation of inputting a password after detecting that the identity verification task is triggered; The password acquisition module is further configured to obtain the password corresponding to the operation if the detection module only detects the user's operation of inputting a password after the detection module detects that the identity verification task is triggered information; The comparison module is also used to compare whether the password information corresponding to the operation is consistent with the user-defined password information; The verification module is further configured to confirm that the user has passed the identity verification when the comparison result of the comparison module is that the password information corresponding to the operation is consistent with the user-defined password information. 12. The device according to any one of claims 8-11, characterized in that, The encryption module is specifically configured to use the first fingerprint information as the initial password information, and use the encryption algorithm to encrypt the first fingerprint information to obtain the target password information. 13. The device according to any one of claims 8-11, characterized in that, The encryption module is specifically configured to randomly generate initial password information according to a preset generation rule, and encrypt the initial password information by using the encryption algorithm to obtain the target password information. 14. The apparatus of claim 8, wherein: The detection module is also used to detect the encryption algorithm setting operation of the user; The device also includes: An algorithm acquisition module, configured to acquire, as the preset encryption algorithm, the encryption algorithm pointed to by the encryption algorithm setting operation when the detection module detects the user's encryption algorithm setting operation.