WO2019179253A1 - 身份验证的方法及装置和电子设备 - Google Patents

身份验证的方法及装置和电子设备 Download PDF

Info

Publication number
WO2019179253A1
WO2019179253A1 PCT/CN2019/074090 CN2019074090W WO2019179253A1 WO 2019179253 A1 WO2019179253 A1 WO 2019179253A1 CN 2019074090 W CN2019074090 W CN 2019074090W WO 2019179253 A1 WO2019179253 A1 WO 2019179253A1
Authority
WO
WIPO (PCT)
Prior art keywords
server
verification
device identifier
identity
mobile terminal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2019/074090
Other languages
English (en)
French (fr)
Inventor
廖晖
李京
周凡
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Alibaba Group Holding Ltd
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Priority to SG11202006204TA priority Critical patent/SG11202006204TA/en
Priority to EP19771488.4A priority patent/EP3716227B1/en
Publication of WO2019179253A1 publication Critical patent/WO2019179253A1/zh
Priority to US16/892,902 priority patent/US11323430B2/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K7/00—Methods or arrangements for sensing record carriers, e.g. for reading patterns
    • G06K7/10—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation
    • G06K7/14—Methods or arrangements for sensing record carriers, e.g. for reading patterns by electromagnetic radiation, e.g. optical sensing; by corpuscular radiation using light without selection of wavelength, e.g. sensing reflected white light
    • G06K7/1404—Methods for optical code recognition
    • G06K7/1408—Methods for optical code recognition the method being specifically adapted for the type of code
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0861—Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0884—Network architectures or network communication protocols for network security for authentication of entities by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00309—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated with bidirectional data transmission between data carrier and locks
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00571—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys operated by interacting with a central unit

Definitions

  • the embodiments of the present disclosure relate to the field of Internet technologies, and in particular, to a method, an apparatus, and an electronic device for identity verification.
  • the user can use the mobile terminal to unlock.
  • the smart door lock needs to verify the identity of the user, and after the identity verification is passed, the mobile terminal can obtain an electronic pass or an electronic key. That is to say, before the mobile terminal obtains the electronic pass or the electronic key, the device end needs to verify the identity of the user.
  • the device side needs to have certain software and/or hardware requirements. For example, when using face recognition for identity verification, the device side of the software needs to have certain computing power, and the hardware side needs a camera.
  • a method, device and electronic device for identity verification provided by embodiments of the present specification:
  • a method for authentication comprising:
  • the mobile terminal acquires the device identifier of the device end, and uploads the acquired device identifier to the server;
  • the server performs legality verification on the device identifier, and returns a verification result to the mobile terminal;
  • the mobile terminal After receiving the verification result returned by the server, the mobile terminal collects the identity feature information of the user, and uploads the collected identity feature information to the server;
  • the server authenticates the identity feature information, and sends an electronic passport to the mobile terminal if the verification is passed; wherein the electronic passport is used to obtain the service provided by the device.
  • a method for identity verification is provided, where the method is applied to a mobile terminal, and the method includes:
  • an apparatus for authenticating the apparatus being applied to a mobile terminal, the apparatus comprising:
  • a first acquiring unit acquiring a device identifier of the device end
  • the first uploading unit uploads the device identifier to the server, so that the server performs legality verification on the device identifier;
  • the collecting unit collects the identity characteristic information of the user when receiving the verification result returned by the server is legal
  • a second uploading unit uploading the identity feature information to the server, so that the server performs identity verification on the identity feature information
  • the second obtaining unit acquires an electronic passport issued by the server when the authentication is passed; wherein the electronic passport is used to obtain the service provided by the device.
  • an electronic device including:
  • a memory for storing processor executable instructions
  • processor is configured to implement the method of identity verification according to any of the above.
  • the identity verification that needs to be completed by the device end is transferred to the server, thereby reducing the software and hardware requirements of the device end, and thus can also be applied to the device end with low performance.
  • FIG. 1 is a conceptual diagram of a system architecture for implementing identity verification according to an embodiment of the present disclosure
  • FIG. 2 is a flowchart of a method for identity verification provided by an embodiment of the present disclosure
  • FIG. 3 is a flowchart of a method for identity verification provided by an embodiment of the present disclosure
  • FIG. 4 is a hardware structural diagram of an apparatus for identity verification provided by an embodiment of the present specification.
  • FIG. 5 is a schematic block diagram of an apparatus for identity verification according to an embodiment of the present disclosure.
  • first, second, third, etc. may be used in this specification to describe various information, such information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other.
  • first information may also be referred to as the second information without departing from the scope of the present description.
  • second information may also be referred to as the first information.
  • word "if” as used herein may be interpreted as "when” or “when” or “in response to a determination.”
  • the device side needs to have certain software and/or hardware requirements.
  • the device side of the software needs to have certain computing power, and the hardware side needs a camera.
  • some device designs are more stringent in terms of energy consumption, such as battery-powered low-power devices. These devices are generally low-power modules and cannot perform complex computing requirements for a long time. For example, the door lock is generally powered by a battery. In order to achieve long-term use, a low-power module is used.
  • the system architecture concept map may include a device end 11, a mobile terminal 12, and a server 13.
  • the device terminal 11 may refer to a device that requires an electronic pass or an electronic key.
  • the device end corresponds to a specific device; for example, in the hotel stay scenario, the device end can be a self-service terminal for check-in.
  • the device side can be a smart door lock.
  • the mobile terminal 11 may refer to a client used by a user.
  • the client may refer to a terminal on which an application is installed; for example, a mobile phone with an application APP installed.
  • the server 13 may refer to an application server, a server cluster, or a cloud platform built based on a server cluster that communicates with the device end 11 and the mobile terminal 12.
  • the server 13 can be used for identity verification.
  • the device identifier of the device 11 and the identity information of the user are obtained by the mobile terminal 12, and the server 13 performs verification, and finally the server 13 delivers the information.
  • An embodiment of a method for implementing identity verification in the present specification may be introduced in the following with reference to the example shown in FIG. 2. As shown in FIG. 2, the method may include the following steps:
  • Step 110 The mobile terminal acquires the device identifier of the device end, and uploads the acquired device identifier to the server.
  • the device identification comprises a static device identification and/or a dynamic device identification.
  • the device identifier is unique, that is, each device end can have a unique device identifier. For example, the device number, ID, etc. when the device is shipped.
  • the device identifier may include a dynamic token, such as a token.
  • the dynamic token may refer to a string of encrypted strings, which may be generated by a preset algorithm.
  • the dynamic token is dynamically changed. For example, the dynamic token acquired by the mobile terminal is different each time; or the device periodically generates a new token.
  • the acquiring, by the mobile terminal, the device identifier of the device specifically includes:
  • the mobile terminal obtains the device identifier transmitted by the device end by establishing short-range wireless communication with the device end.
  • the short-range wireless communication includes one of Bluetooth communication, infrared communication, wireless local area network, WIFI, ultra-wideband communication, Zifeng communication, and near field communication.
  • a module suitable for short-range wireless communication such as a Bluetooth module, an infrared (IrDA) module, a wireless local area network (WI-FI or WLAN, mostly using an 802.11 series protocol), may be integrated in the device end.
  • Module WIFI Direct (Wi-Fi Direct) module, Ultra Wide Band (Ultra Wide Band) module, Zifeng (Zigbee) module, Near Field Communication (NFC) module, etc., to achieve short-distance wireless signal transmission and reception .
  • the same module suitable for short-range wireless communication can be integrated in the mobile terminal.
  • the Bluetooth technology is taken as an example for description.
  • Bluetooth technology can support point-to-point and point-to-multipoint communication, enabling fast and convenient information exchange between devices.
  • the device side can send a broadcast signal containing its own identification (UUID) through the Bluetooth module.
  • the Bluetooth module can be identified by a "Universally Unique Identifier" (UUID). Each such UUID guarantees the uniqueness of the Bluetooth service in time and space.
  • the UUID may specifically be short shaping (16 or 32 bits) and long shaping (128 bits).
  • the UUID can be sent via a Bluetooth broadcast signal.
  • the Bluetooth technology can adopt Bluetooth Low Energy (BLE). More preferably, iBeacon technology can be used. iBeacon technology is a technology based on BLE development, featuring low cost, wide expansion and flexible customization. This iBeacon technology enables a smartphone or other device to execute commands within the sensing range of an iBeacon base station.
  • the payment device may be an iBeacon base station.
  • iBeacon has been installed on the mobile device OS (iOS7) released by Apple in September 2013.
  • BLE communication methods generally include two types: advertising (advertising) and connecting (connecting).
  • Advertising is a one-way sending mechanism and belongs to one of the broadcast modes.
  • Devices that want to be searched can send a packet of data at intervals of 20 milliseconds to 10 seconds. The shorter the time interval used, the faster the battery is consumed and the faster the device will be discovered.
  • the packet length is up to 47 bytes and can generally consist of the following:
  • BLE devices can run in a single, non-connectable ad mode (in this mode all information is included in the ad packet); in addition, the BLE device can also run in a connectable mode (ie, connecting mode) .
  • the device side in this embodiment can be operated in a single non-connectable advertisement mode.
  • the device side mainly sends its own device ID through the advertisement mode.
  • the device identifier of the device end may be carried in the PDU data packet.
  • the mobile terminal can discover the UUID of the device side by scanning the broadcasted Bluetooth signal.
  • the application installed on the mobile terminal can drive the mobile terminal to scan the wireless signal by calling an underlying application programming interface (API).
  • API application programming interface
  • the acquiring, by the mobile terminal, the device identifier of the device specifically includes:
  • the mobile terminal obtains the device identifier of the device end by scanning a graphic code provided by the device.
  • the device side can display a graphic code including the device identification.
  • a module for scanning a graphic code such as a camera, a scanner, or the like, may be integrated in the mobile terminal to implement scanning of the graphic code to obtain the device identification.
  • a camera is taken as an example for description.
  • the mobile terminal can open the camera. After the camera captures the image of the graphic code, the mobile terminal local analysis software or the remote server parses the device identifier included in the graphic code.
  • the graphic code may include a two-dimensional code, a barcode, or the like.
  • Step 120 The server performs legality verification on the device identifier, and returns a verification result to the mobile terminal.
  • the server performs the validity verification on the device identifier, and specifically includes:
  • the manufacturer on the device side can register on the server when the device is shipped from the factory, so that the correspondence between the device identifier and the device can be stored on the server, and the registered record is also available.
  • the server has the same algorithm for generating dynamic tokens as the device side. Through the algorithm, the server can verify whether the dynamic token uploaded by the mobile terminal is correct, and in the correct case, determine that the verification result is legal.
  • the verification result can be returned to the mobile terminal.
  • Step 130 The mobile terminal collects the identity feature information of the user and uploads the collected identity feature information to the server if the verification result returned by the server is legal.
  • the identity feature information may include biometric information.
  • the biometric information includes at least one of a fingerprint, a palm print, an iris, an eye, a face, a sound wave, and a brain wave.
  • the mobile terminal needs to integrate a module for collecting biometric information, for example, a camera can collect a user's face image; a fingerprint module can collect a user's fingerprint; and a sound wave module can collect user sound wave information and the like.
  • the identity feature information may also include password information input by the user.
  • Step 140 The server performs identity verification on the identity feature information, and sends an electronic passport to the mobile terminal if the verification is passed.
  • the electronic passport is used to obtain the service provided by the device. .
  • the server stores the identity feature information reserved by the user. After receiving the identity feature information uploaded by the mobile terminal, the server may compare with the reserved identity feature information. If the server is consistent, the current user is the user; otherwise, the current user is not the user.
  • the electronic passport can be issued to the mobile terminal.
  • the electronic pass can be approved by the device end, and the mobile terminal can use the electronic pass to obtain the service provided by the device.
  • the smart door lock when the mobile terminal obtains the electronic pass, the smart door lock can be opened by using the electronic pass.
  • the electronic pass can be used to complete the check-in.
  • the identity verification that needs to be completed by the device end is transferred to the server, thereby reducing the software and hardware requirements of the device end, and thus can also be applied to the device end with low performance.
  • identity verification it can be determined whether the current user is the person, preventing fraudulent use and improving reliability.
  • the mobile terminal uses an electronic pass, which may specifically be:
  • the mobile terminal sends an electronic pass to the device.
  • the device can verify the electronic passport locally, and the service can be provided after the verification is passed.
  • the device can upload the electronic passport to the server, and the server performs verification. After the verification result returned by the server is passed, the service can be provided.
  • FIG. 3 An embodiment of the method in which the mobile terminal is the main body of the present application is described below with reference to FIG. 3, which may correspond to FIG. 2:
  • Step 210 Obtain a device identifier of the device end.
  • Step 220 Upload the device identifier to the server, so that the server performs legality verification on the device identifier.
  • Step 230 Collect the identity characteristic information of the user when receiving the verification result returned by the server is legal.
  • Step 240 Upload the identity feature information to the server, so that the server performs identity verification on the identity feature information.
  • Step 250 Acquire an electronic passport issued by the server when the authentication is passed; wherein the electronic passport is used to obtain the service provided by the device.
  • the acquiring the device identifier of the device end includes:
  • the device identifier of the device end is obtained by scanning a graphic code provided by the device.
  • the short-range wireless communication includes one of Bluetooth communication, infrared communication, wireless local area network, WIFI, ultra-wideband communication, Zifeng communication, and near field communication.
  • the identity feature information includes biometric information.
  • the biometric information includes at least one of a fingerprint, a palm print, an iris, an eye, a face, a sound wave, and a brain wave.
  • the device identification comprises a static device identification and/or a dynamic device identification.
  • the dynamic device identification comprises a dynamic token.
  • the present specification also provides an embodiment of an apparatus for authentication.
  • the device embodiment may be implemented by software, or may be implemented by hardware or a combination of hardware and software.
  • the processor of the device in which it is located reads the corresponding computer program instructions in the non-volatile memory into the memory.
  • a hardware structure of a device in which the device for authenticating the authentication device is located may include a processor, a network interface, a memory, and a non-volatile memory as shown in FIG. 4, and the device in which the device is located in the embodiment is usually According to the actual function of the identity verification, other hardware may also be included, which will not be described again.
  • FIG. 5 is a block diagram of an apparatus for identity verification according to an embodiment of the present disclosure, where the apparatus includes:
  • the first obtaining unit 310 acquires a device identifier of the device end.
  • the first uploading unit 320 uploads the device identifier to the server, so that the server performs legality verification on the device identifier.
  • the collecting unit 330 collects the identity characteristic information of the user when receiving the verification result returned by the server is legal;
  • the second uploading unit 340 is configured to upload the identity feature information to the server, so that the server performs identity verification on the identity feature information.
  • the second obtaining unit 350 is configured to obtain an electronic passport issued by the server when the identity verification is passed; wherein the electronic passport is used to obtain the service provided by the device end.
  • the first acquiring unit 310 specifically includes:
  • the first obtaining sub-unit obtains the device identifier transmitted by the device end by establishing short-range wireless communication with the device end;
  • the second obtaining sub-unit obtains the device identifier of the device end by scanning a graphic code provided by the device.
  • the short-range wireless communication includes one of Bluetooth communication, infrared communication, wireless local area network, WIFI, ultra-wideband communication, Zifeng communication, and near field communication.
  • the identity feature information includes biometric information.
  • the biometric information includes at least one of a fingerprint, a palm print, an iris, an eye, a face, a sound wave, and a brain wave.
  • the device identification includes a static device identification and/or a dynamic device identification.
  • the dynamic device identification includes a dynamic token.
  • the system, device, module or unit illustrated in the above embodiments may be implemented by a computer chip or an entity, or by a product having a certain function.
  • a typical implementation device is a computer, and the specific form of the computer may be a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email transceiver, and a game control.
  • the device embodiment since it basically corresponds to the method embodiment, reference may be made to the partial description of the method embodiment.
  • the device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, ie may be located A place, or it can be distributed to multiple network units. Some or all of the modules may be selected according to actual needs to achieve the objectives of the present specification. Those of ordinary skill in the art can understand and implement without any creative effort.
  • FIG. 1 illustrates the internal functional modules and structure of the device for authentication.
  • the substantial execution body of the device may be an electronic device, including:
  • a memory for storing processor executable instructions
  • the acquiring the device identifier of the device end includes:
  • the device identifier of the device end is obtained by scanning a graphic code provided by the device.
  • the short-range wireless communication includes one of Bluetooth communication, infrared communication, wireless local area network, WIFI, ultra-wideband communication, Zifeng communication, and near field communication.
  • the identity feature information includes biometric information.
  • the biometric information includes at least one of a fingerprint, a palm print, an iris, an eye, a face, a sound wave, and a brain wave.
  • the device identifier includes a static device identifier and/or a dynamic device identifier.
  • the dynamic device identifier includes a dynamic token.
  • the processor may be a central processing unit (English: Central Processing Unit, CPU for short), or other general-purpose processor, digital signal processor (English: Digital Signal Processor) , referred to as: DSP), ASIC (English: Application Specific Integrated Circuit, referred to as: ASIC).
  • the general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like, and the foregoing memory may be a read-only memory (English: read-only memory, abbreviation: ROM), a random access memory (English) :random access memory (abbreviation: RAM), flash memory, hard disk or solid state disk.
  • the steps of the method disclosed in the embodiments of the present invention may be directly implemented as a hardware processor, or may be performed by a combination of hardware and software modules in the processor.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • General Physics & Mathematics (AREA)
  • Power Engineering (AREA)
  • Biomedical Technology (AREA)
  • Electromagnetism (AREA)
  • Toxicology (AREA)
  • Artificial Intelligence (AREA)
  • Computer Vision & Pattern Recognition (AREA)
  • Theoretical Computer Science (AREA)
  • Telephone Function (AREA)
  • Telephonic Communication Services (AREA)
  • Collating Specific Patterns (AREA)

Abstract

一种身份验证的方法及装置和电子设备，所述方法包括：（110）移动终端获取设备端的设备标识，并将所获取的设备标识上传到服务器；（120）所述服务器对所述设备标识进行合法性验证，并将验证结果返回给所述移动终端；（130）所述移动终端在接收到所述服务器返回的验证结果为合法的情况下，采集用户的身份特征信息，并将所采集到的身份特征信息上传到所述服务器；（140）所述服务器对所述身份特征信息进行身份验证，并在验证通过的情况下，向所述移动终端下发电子通行证；其中，所述电子通行证用于获取所述设备端提供的服务。

Description

身份验证的方法及装置和电子设备 技术领域
本说明书实施例涉及互联网技术领域，尤其涉及一种身份验证的方法及装置和电子设备。
背景技术
随着互联网的不断发展，通过移动终端实现电子通行证或者电子钥匙的场景越来越多，例如移动支付、酒店登记、上班打卡、智能门锁等。
以智能门锁为例，用户可以使用移动终端开锁。具体地，智能门锁需要对用户的身份进行验证，在身份验证通过后，移动终端才可以获取电子通行证或者电子钥匙。也就是说，移动终端获取电子通行证或者电子钥匙之前，需要设备端对用户身份进行核实。可以看出，由于设备端需要进行身份核实，因此设备端需要具有一定的软件和/或硬件上的要求。例如采用人脸识别进行身份验证时，软件方面设备端需要有一定的计算能力，硬件方面设备端需要有摄像头。
需要提供一种适用设备端性能要求不高的身份验证的方案。
发明内容
本说明书实施例提供的一种身份验证的方法及装置和电子设备：
根据本说明书实施例的第一方面，提供一种身份验证的方法，所述方法包括：
移动终端获取设备端的设备标识，并将所获取的设备标识上传到服务器；
所述服务器对所述设备标识进行合法性验证，并将验证结果返回给所述移动终端；
所述移动终端在接收到所述服务器返回的验证结果为合法的情况下，采集用户的身份特征信息，并将所采集到的身份特征信息上传到所述服务器；
所述服务器对所述身份特征信息进行身份验证，并在验证通过的情况下，向所述移动终端下发电子通行证；其中，所述电子通行证用于获取所述设备端提供的服务。
根据本说明书实施例的第二方面，提供一种身份验证的方法，所述方法应用于移动终端，所述方法包括：
获取设备端的设备标识；
将所述设备标识上传到服务器，以使所述服务器对所述设备标识进行合法性验证；
在接收到所述服务器返回的验证结果为合法的情况下，采集用户的身份特征信息；
将所述身份特征信息上传到所述服务器，以使所述服务器对所述身份特征信息进行身份验证；
获取所述服务器在身份验证通过时下发的电子通行证；其中，所述电子通行证用于获取所述设备端提供的服务。
根据本说明书实施例的第三方面，提供一种身份验证的装置，所述装置应用于移动终端，所述装置包括：
第一获取单元，获取设备端的设备标识；
第一上传单元，将所述设备标识上传到服务器，以使所述服务器对所述设备标识进行合法性验证；
采集单元，在接收到所述服务器返回的验证结果为合法的情况下，采集用户的身份特征信息；
第二上传单元，将所述身份特征信息上传到所述服务器，以使所述服务器对所述身份特征信息进行身份验证；
第二获取单元，获取所述服务器在身份验证通过时下发的电子通行证；其中，所述电子通行证用于获取所述设备端提供的服务。
根据本说明书实施例的第四方面，提供一种电子设备，包括：
处理器；
用于存储处理器可执行指令的存储器；
其中，所述处理器被配置为实现上述任一项所述的身份验证的方法。
本说明书实施例，将原本需要由设备端完成的身份验证转由服务器完成，从而可以降低设备端对软件、硬件方面的需求，从而也可以适用于性能不高的设备端。
附图说明
图1是本说明书一实施例提供的实现身份验证的系统架构概念图；
图2是本说明书一实施例提供的身份验证的方法的流程图；
图3是本说明书一实施例提供的身份验证的方法的流程图；
图4是本说明书一实施例示提供的身份验证的装置的硬件结构图；
图5是本说明书一实施例提供的身份验证的装置的模块示意图。
具体实施方式
这里将详细地对示例性实施例进行说明，其示例表示在附图中。下面的描述涉及附图时，除非另有表示，不同附图中的相同数字表示相同或相似的要素。以下示例性实施例中所描述的实施方式并不代表与本说明书相一致的所有实施方式。相反，它们仅是与如所附权利要求书中所详述的、本说明书的一些方面相一致的装置和方法的例子。
在本说明书使用的术语是仅仅出于描述特定实施例的目的，而非旨在限制本说明书。在本说明书和所附权利要求书中所使用的单数形式的“一种”、“所述”和“该”也旨在包括多数形式，除非上下文清楚地表示其他含义。还应当理解，本文中使用的术语“和/或”是指并包含一个或多个相关联的列出项目的任何或所有可能组合。
应当理解，尽管在本说明书可能采用术语第一、第二、第三等来描述各种信息，但这些信息不应限于这些术语。这些术语仅用来将同一类型的信息彼此区分开。例如，在不脱离本说明书范围的情况下，第一信息也可以被称为第二信息，类似地，第二信息也可以被称为第一信息。取决于语境，如在此所使用的词语“如果”可以被解释成为“在……时”或“当……时”或“响应于确定”。
如前所述，一方面，由于设备端需要进行身份核实，因此设备端需要具有一定的软件和/或硬件上的要求。例如采用人脸识别进行身份验证时，软件方面设备端需要有一定的计算能力，硬件方面设备端需要有摄像头。另一方面，某些设备端设计时，对能耗要求比较严格，例如采用电池供电的低功耗设备，这些设备由于普遍采用了低功耗模块，无法长期进行复杂的计算需求；同样以智能门锁为例，智能门锁普遍采用电池供电，为了达到长时间使用，采用的是低功耗模块。
本说明书可以涉及一个或多个系统。以下请参考图1示出了本说明书中可以适用的示例性的系统架构概念图。所述系统架构概念图可以包括设备端11、移动终端12和服务器13。
所述设备端11可以是指进行需要电子通行证或者电子钥匙的设备。不同场景中，设 备端对应了具体不同的设备；例如酒店入住场景，设备端可以为用于入住登记的自助终端。开锁场景中，设备端可以是智能门锁。
所述移动终端11可以是指用户使用的客户端。该客户端可以是指安装有应用的终端；例如安装有应用APP的手机。
所述服务器13可以是指与所述设备端11和移动终端12通信的应用服务器、服务器集群或者基于服务器集群构建的云平台。所述服务器13可以用于进行身份验证。
在实际应用中，当用户需要获取设备端11提供的服务时，可以通过移动终端12获取设备端11的设备标识以及采集用户的身份特征信息，并由服务器13进行验证，最终获取服务器13下发的电子通行证；然后移动终端12可以基于该电子通行证来获取设备端11提供的服务。
以下可以结合图2所示的例子介绍本说明书一种实现身份验证的方法的实施例，如图2所示，该方法可以包括以下步骤：
步骤110：移动终端获取设备端的设备标识，并将所获取的设备标识上传到服务器。
在一实施例中，所述设备标识包括静态的设备标识和/或动态的设备标识。
以静态的设备标识为例，所述设备标识具有唯一性，即每一个设备端都可以对应有一个唯一的设备标识。例如，设备出厂时的设备编号，ID等。
以动态的设备标识为例，所述设备标识可以包括动态令牌，例如token。所述动态令牌可以是指一串加密的字符串，可以是由预设的算法生成的。一般的，动态令牌是动态变化的，例如移动终端每次获取的动态令牌都是不同的；或者设备端周期性生成新的令牌。
在一实施例中，所述移动终端获取设备端的设备标识，具体包括：
移动终端通过与设备端建立短距离无线通信，从而获取所述设备端传输的设备标识。
具体地，所述短距离无线通信包括蓝牙通信、红外通信、无线局域网、WIFI、超宽带通信、紫峰通信、近场通信的一种。
在实施例中，所述设备端中可以集成有适用于短距离无线通信的模块，如蓝牙(Bluetooth)模块、红外(IrDA)模块、无线局域网(WI-FI或WLAN，大多采用802.11系列协议)模块、WIFI直连(Wi-Fi Direct)模块、超宽带通信(Ultra Wide Band)模块、紫峰(Zigbee)模块、近场通信(Near Field Communication，NFC)模块等，以实 现短距离无线信号的收发。同样地，移动终端中也可以集成有同样的适用于短距离无线通信的模块。
在一实施例中，以蓝牙技术为例进行说明。
蓝牙技术作为取代数据电缆的短距离无线通信技术，可以支持点对点以及点对多点的通信，从而在设备间实现快捷而方便的信息交互。
设备端可以通过蓝牙模块发出包含自身的标识(UUID)的广播信号。蓝牙技术中，蓝牙模块可以通过“全球唯一标识符”(Universally Unique Identifier，UUID)来标识。每一个这样的UUID都在时空上保证蓝牙服务的唯一性。UUID具体可以是短整形(16或32位)和长整形(128位)。UUID可以通过蓝牙广播信号发送。
优选地，所述蓝牙技术，可以采用低功耗蓝牙技术(Bluetooth Low Energy，BLE)。更优地，可以采用iBeacon技术。iBeacon技术是一种基于BLE开发的技术，具有成本低，扩展广，定制灵活的特点。这种iBeacon技术可以使一个智能手机或其他装置在一个iBeacon基站的感应范围内能够执行相应的命令。例如本实施例中，收款设备可以为iBeacon基站。iBeacon已由苹果公司于2013年9月发布的移动设备用OS(iOS7)上配备。
BLE的通信方式一般包括两种：advertising(广告)和connecting(连接)。广告(Advertising)是一种单向的发送机制，属于广播模式的一种。想要被搜索到的设备(如iBeacon基站，收款设备)可以以20毫秒到10秒钟的时间间隔发送一段数据包。使用的时间间隔越短，电池消耗的越快，设备被发现的速度也就会快。数据包长度最多47个字节，一般可以由以下部分组成：
1 byte：preamble(1字节做报头)
4 byte：access address(4字节做地址)
39 bytes：advertising channel PDU(39个字节用于PDU数据包)
3 bytes：CRC(3个字节用于CRC数据校验)
BLE设备可以运行在单一的不可连接的广告模式中(在这种模式下所有的信息都包含在广告数据包中)；此外，BLE设备也可以运行在可被连接的模式下(即connecting模式)。
本实施例中的设备端，可以运行在单一的不可连接的广告模式中。这样，设备端主 要是将自身的设备标识通过广告模式发送出去。具体的，所述设备端的设备标识，可以承载于上述PDU数据包中。
移动终端可以通过扫描广播的蓝牙信号发现设备端的UUID。具体的，安装于移动终端上的应用可以通过调用底层应用编程接口(Application Programming Interface，API)，驱动移动终端对无线信号的扫描。进而，可以扫描到设备端发出的无线信号，例如通过广播方式发出的蓝牙信号。由于设备端发出的蓝牙信号包含其自身的设备标识信息UUID，因此，移动终端可以通过扫描的蓝牙广播信号中发现该UUID。
在一实施例中，所述移动终端获取设备端的设备标识，具体包括：
移动终端通过扫描设备端提供的图形码，从而获取所述设备端的设备标识。
该实施例中，设备端可以展示出包含设备标识的图形码。移动终端中可以集成有用于扫描图形码的模块，例如摄像头、扫码器等，以实现扫描图形码从而获取设备标识。
在一实施例中，以摄像头为例进行说明。
移动终端可以通过开启摄像头，当摄像头采集到图形码的图像后，通过移动终端本地解析软件或者远程服务器解析出所述图形码包含的设备标识。
在一实施例中，所述图形码可以包括二维码、条形码等。
步骤120：所述服务器对所述设备标识进行合法性验证，并将验证结果返回给所述移动终端。
在一实施例中，所述服务器对所述设备标识进行合法性验证，具体可以包括：
判断所述设备标识对应的设备是否已在服务器上注册；
在所述设备标识对应的设备已在服务器上注册的情况下，确定验证结果为合法。
一般的，设备端的生产商可以在设备端出厂时，可以在服务器上完成注册，从而在服务器上可以存储有设备标识与设备之间的对应关系，并且还有已注册记录。
在一实施例中，针对动态的设备标识，服务器具有与设备端相同的用于生成动态令牌的算法。通过该算法，服务器可以验证移动终端上传的动态令牌是否正确，并在正确的情况下，确定验证结果为合法。
服务器在确定了验证结果后，就可以将验证结果返回给移动终端。
步骤130：所述移动终端在接收到所述服务器返回的验证结果为合法的情况下，采 集用户的身份特征信息，并将所采集到的身份特征信息上传到所述服务器。
在一实施例中，所述身份特征信息可以包括生物特征信息。
所述生物特征信息包括指纹、掌纹、虹膜、眼纹、人脸、声波、脑电波中的至少一种。对应的，所述移动终端中需要集成有采集生物特征信息的模块，例如通过摄像头可以采集用户的人脸图像；通过指纹模块可以采集用户的指纹；通过声波模块可以采集用户声波信息等等。
在一实施例中，所述身份特征信息也可以包括用户输入的密码信息。
步骤140：所述服务器对所述身份特征信息进行身份验证，并在验证通过的情况下，向所述移动终端下发电子通行证；其中，所述电子通行证用于获取所述设备端提供的服务。
本实施例中，所述服务器中保存有用户预留的身份特征信息。当服务器收到移动终端上传的身份特征信息后，可以与所述预留的身份特征信息进行比对，如果一致，则说明当前用户为本人；反之，则说明当前用户不是本人。
服务器在验证通过的情况下，进而可以向所述移动终端下发电子通行证。所述电子通行证可以是设备端认可的，移动终端可以使用该电子通行证获取设备端提供的服务。
以智能门锁场景为例，当移动终端获取到电子通行证后，使用该电子通行证就可以打开智能门锁。
以酒店入住场景为例，当移动终端获取到电子通行证后，使用该电子通行证就可以完成登记入住。
本说明书实施例，将原本需要由设备端完成的身份验证转由服务器完成，从而可以降低设备端对软件、硬件方面的需求，从而也可以适用于性能不高的设备端。另一方面，通过身份验证，可以确定当前用户是否为本人，防止冒用的情况出现，提升了可靠性。
在一实施例中，移动终端使用电子通行证，具体可以为：
移动终端将电子通行证发送给设备端。这里，参考步骤110所示，可以是基于短距离无线通信实现的。之后，设备端可以在本地对电子通行证进行校验，待校验通过后才可以提供服务。或者，设备端可以将电子通行证上传到服务器，由服务器进行校验，待服务器返回的校验结果为通过后才可以提供服务。
以下结合图3介绍本申请以移动终端为主体的方法实施例，该实施例可以对应图2：
步骤210：获取设备端的设备标识；
步骤220：将所述设备标识上传到服务器，以使所述服务器对所述设备标识进行合法性验证；
步骤230：在接收到所述服务器返回的验证结果为合法的情况下，采集用户的身份特征信息；
步骤240：将所述身份特征信息上传到所述服务器，以使所述服务器对所述身份特征信息进行身份验证；
步骤250：获取所述服务器在身份验证通过时下发的电子通行证；其中，所述电子通行证用于获取所述设备端提供的服务。
在一实施例中，所述获取设备端的设备标识，具体包括：
通过与设备端建立短距离无线通信，从而获取所述设备端传输的设备标识；
或者，
通过扫描设备端提供的图形码，从而获取所述设备端的设备标识。
在一实施例中，所述短距离无线通信包括蓝牙通信、红外通信、无线局域网、WIFI、超宽带通信、紫峰通信、近场通信的一种。
在一实施例中，所述身份特征信息包括生物特征信息。
在一实施例中，所述生物特征信息包括指纹、掌纹、虹膜、眼纹、人脸、声波、脑电波中的至少一种。
在一实施例中，所述设备标识包括静态的设备标识和/或动态的设备标识。
在一实施例中，所述动态的设备标识包括动态令牌。
与前述身份验证的方法实施例相对应，本说明书还提供了身份验证的装置的实施例。所述装置实施例可以通过软件实现，也可以通过硬件或者软硬件结合的方式实现。以软件实现为例，作为一个逻辑意义上的装置，是通过其所在设备的处理器将非易失性存储器中对应的计算机程序指令读取到内存中运行形成的。从硬件层面而言，本说明书身份验证的装置所在设备的一种硬件结构如图4所示可以包括处理器、网络接口、内存以及非易失性存储器之外，实施例中装置所在的设备通常根据该身份验证的实际功能，还可以包括其他硬件，对此不再赘述。
请参见图5，为本说明书一实施例提供的身份验证的装置的模块图，所述装置包括：
第一获取单元310，获取设备端的设备标识；
第一上传单元320，将所述设备标识上传到服务器，以使所述服务器对所述设备标识进行合法性验证；
采集单元330，在接收到所述服务器返回的验证结果为合法的情况下，采集用户的身份特征信息；
第二上传单元340，将所述身份特征信息上传到所述服务器，以使所述服务器对所述身份特征信息进行身份验证；
第二获取单元350，获取所述服务器在身份验证通过时下发的电子通行证；其中，所述电子通行证用于获取所述设备端提供的服务。
在一个可选的实施例中：
所述第一获取单元310，具体包括：
第一获取子单元，通过与设备端建立短距离无线通信，从而获取所述设备端传输的设备标识；
或者，
第二获取子单元，通过扫描设备端提供的图形码，从而获取所述设备端的设备标识。
在一个可选的实施例中：
所述短距离无线通信包括蓝牙通信、红外通信、无线局域网、WIFI、超宽带通信、紫峰通信、近场通信的一种。
在一个可选的实施例中：
所述身份特征信息包括生物特征信息。
在一个可选的实施例中：
所述生物特征信息包括指纹、掌纹、虹膜、眼纹、人脸、声波、脑电波中的至少一种。
在一个可选的实施例中：
所述设备标识包括静态的设备标识和/或动态的设备标识。
在一个可选的实施例中：
所述动态的设备标识包括动态令牌。
上述实施例阐明的系统、装置、模块或单元，具体可以由计算机芯片或实体实现，或者由具有某种功能的产品来实现。一种典型的实现设备为计算机，计算机的具体形式可以是个人计算机、膝上型计算机、蜂窝电话、相机电话、智能电话、个人数字助理、媒体播放器、导航设备、电子邮件收发设备、游戏控制台、平板计算机、可穿戴设备或者这些设备中的任意几种设备的组合。
上述装置中各个单元的功能和作用的实现过程具体详见上述方法中对应步骤的实现过程，在此不再赘述。
对于装置实施例而言，由于其基本对应于方法实施例，所以相关之处参见方法实施例的部分说明即可。以上所描述的装置实施例仅仅是示意性的，其中所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部模块来实现本说明书方案的目的。本领域普通技术人员在不付出创造性劳动的情况下，即可以理解并实施。
以上图5描述了身份验证的装置的内部功能模块和结构示意，其实质上的执行主体可以为一种电子设备，包括：
处理器；
用于存储处理器可执行指令的存储器；
获取设备端的设备标识；
将所述设备标识上传到服务器，以使所述服务器对所述设备标识进行合法性验证；
在接收到所述服务器返回的验证结果为合法的情况下，采集用户的身份特征信息；
将所述身份特征信息上传到所述服务器，以使所述服务器对所述身份特征信息进行身份验证；
获取所述服务器在身份验证通过时下发的电子通行证；其中，所述电子通行证 用于获取所述设备端提供的服务。
可选的，所述获取设备端的设备标识，具体包括：
通过与设备端建立短距离无线通信，从而获取所述设备端传输的设备标识；
或者，
通过扫描设备端提供的图形码，从而获取所述设备端的设备标识。
可选的，所述短距离无线通信包括蓝牙通信、红外通信、无线局域网、WIFI、超宽带通信、紫峰通信、近场通信的一种。
可选的，所述身份特征信息包括生物特征信息。
可选的，所述生物特征信息包括指纹、掌纹、虹膜、眼纹、人脸、声波、脑电波中的至少一种。
可选的，所述设备标识包括静态的设备标识和/或动态的设备标识。
可选的，所述动态的设备标识包括动态令牌。
在上述电子设备的实施例中，应理解，该处理器可以是中央处理单元(英文：Central Processing Unit，简称：CPU)，还可以是其他通用处理器、数字信号处理器(英文：Digital Signal Processor，简称：DSP)、专用集成电路(英文：Application Specific Integrated Circuit，简称：ASIC)等。通用处理器可以是微处理器或者该处理器也可以是任何常规的处理器等，而前述的存储器可以是只读存储器(英文：read-only memory，缩写：ROM)、随机存取存储器(英文：random access memory，简称：RAM)、快闪存储器、硬盘或者固态硬盘。结合本发明实施例所公开的方法的步骤可以直接体现为硬件处理器执行完成，或者用处理器中的硬件及软件模块组合执行完成。
本说明书中的各个实施例均采用递进的方式描述，各个实施例之间相同相似的部分互相参见即可，每个实施例重点说明的都是与其他实施例的不同之处。尤其，对于电子设备实施例而言，由于其基本相似于方法实施例，所以描述的比较简单，相关之处参见方法实施例的部分说明即可。
本领域技术人员在考虑说明书及实践这里公开的发明后，将容易想到本说明书的其它实施方案。本说明书旨在涵盖本说明书的任何变型、用途或者适应性变化，这些变型、用途或者适应性变化遵循本说明书的一般性原理并包括本说明书未公开的本技术领域中的公知常识或惯用技术手段。说明书和实施例仅被视为示例性的，本说明书的真 正范围和精神由下面的权利要求指出。
应当理解的是，本说明书并不局限于上面已经描述并在附图中示出的精确结构，并且可以在不脱离其范围进行各种修改和改变。本说明书的范围仅由所附的权利要求来限制。

Claims (10)

  1. 一种身份验证的方法，所述方法包括：
    移动终端获取设备端的设备标识，并将所获取的设备标识上传到服务器；
    所述服务器对所述设备标识进行合法性验证，并将验证结果返回给所述移动终端；
    所述移动终端在接收到所述服务器返回的验证结果为合法的情况下，采集用户的身份特征信息，并将所采集到的身份特征信息上传到所述服务器；
    所述服务器对所述身份特征信息进行身份验证，并在验证通过的情况下，向所述移动终端下发电子通行证；其中，所述电子通行证用于获取所述设备端提供的服务。
  2. 一种身份验证的方法，所述方法应用于移动终端，所述方法包括：
    获取设备端的设备标识；
    将所述设备标识上传到服务器，以使所述服务器对所述设备标识进行合法性验证；
    在接收到所述服务器返回的验证结果为合法的情况下，采集用户的身份特征信息；
    将所述身份特征信息上传到所述服务器，以使所述服务器对所述身份特征信息进行身份验证；
    获取所述服务器在身份验证通过时下发的电子通行证；其中，所述电子通行证用于获取所述设备端提供的服务。
  3. 根据权利要求2所述的方法，所述获取设备端的设备标识，具体包括：
    通过与设备端建立短距离无线通信，从而获取所述设备端传输的设备标识；
    或者，
    通过扫描设备端提供的图形码，从而获取所述设备端的设备标识。
  4. 根据权利要求3所述的方法，所述短距离无线通信包括蓝牙通信、红外通信、无线局域网、WIFI、超宽带通信、紫峰通信、近场通信的一种。
  5. 根据权利要求2所述的方法，所述身份特征信息包括生物特征信息。
  6. 根据权利要求5所述方法，所述生物特征信息包括指纹、掌纹、虹膜、眼纹、人脸、声波、脑电波中的至少一种。
  7. 根据权利要求2所述的方法，所述设备标识包括静态的设备标识和/或动态的设备标识。
  8. 根据权利要求7所述的方法，所述动态的设备标识包括动态令牌。
  9. 一种身份验证的装置，所述装置包括：
    第一获取单元，获取设备端的设备标识；
    第一上传单元，将所述设备标识上传到服务器，以使所述服务器对所述设备标识进 行合法性验证；
    采集单元，在接收到所述服务器返回的验证结果为合法的情况下，采集用户的身份特征信息；
    第二上传单元，将所述身份特征信息上传到所述服务器，以使所述服务器对所述身份特征信息进行身份验证；
    第二获取单元，获取所述服务器在身份验证通过时下发的电子通行证；其中，所述电子通行证用于获取所述设备端提供的服务。
  10. 一种电子设备，包括：
    处理器；
    用于存储处理器可执行指令的存储器；
    其中，所述处理器被配置为实现上述权利要求1-8中任一项所述的方法。
PCT/CN2019/074090 2018-03-21 2019-01-31 身份验证的方法及装置和电子设备 Ceased WO2019179253A1 (zh)

Priority Applications (3)

Application Number Priority Date Filing Date Title
SG11202006204TA SG11202006204TA (en) 2018-03-21 2019-01-31 Identity verification method and device and electronic device
EP19771488.4A EP3716227B1 (en) 2018-03-21 2019-01-31 Identity verification method and device and electronic device
US16/892,902 US11323430B2 (en) 2018-03-21 2020-06-04 Identity verification method and device and electronic device

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201810234267.5 2018-03-21
CN201810234267.5A CN108564688A (zh) 2018-03-21 2018-03-21 身份验证的方法及装置和电子设备

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US16/892,902 Continuation US11323430B2 (en) 2018-03-21 2020-06-04 Identity verification method and device and electronic device

Publications (1)

Publication Number Publication Date
WO2019179253A1 true WO2019179253A1 (zh) 2019-09-26

Family

ID=63532981

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/074090 Ceased WO2019179253A1 (zh) 2018-03-21 2019-01-31 身份验证的方法及装置和电子设备

Country Status (6)

Country Link
US (1) US11323430B2 (zh)
EP (1) EP3716227B1 (zh)
CN (1) CN108564688A (zh)
SG (1) SG11202006204TA (zh)
TW (1) TWI755580B (zh)
WO (1) WO2019179253A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113360888A (zh) * 2021-06-07 2021-09-07 厦门熵基科技有限公司 一种身份验证配置方法、系统平台和终端设备

Families Citing this family (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108564688A (zh) * 2018-03-21 2018-09-21 阿里巴巴集团控股有限公司 身份验证的方法及装置和电子设备
FI128637B (en) * 2018-10-16 2020-09-15 Telia Co Ab Access to the service
CN109379388B (zh) * 2018-12-17 2021-04-06 福建联迪商用设备有限公司 一种身份识别方法、终端及可穿戴设备
CN109557682A (zh) * 2018-12-29 2019-04-02 四川九洲电器集团有限责任公司 一种智能变焦眼镜
CN111915305B (zh) * 2019-05-10 2023-07-25 腾讯科技（深圳）有限公司 支付方法、装置、设备以及存储介质
CN110266657A (zh) * 2019-05-30 2019-09-20 浙江大华技术股份有限公司 认证处理方法及装置、资源访问方法及装置、存储介质
CN112446995A (zh) * 2020-10-20 2021-03-05 支付宝(杭州)信息技术有限公司 身份信息登记处理方法、装置、设备及系统
US12495040B2 (en) 2021-01-15 2025-12-09 Assa Abloy Ab Use of QR codes in online encoding
CN114546115A (zh) * 2022-02-17 2022-05-27 北京脑陆科技有限公司 基于脑电信号的考勤管理方法、装置及介质
CN114791834B (zh) * 2022-02-25 2024-04-26 数字广东网络建设有限公司 一种应用程序的启动方法、装置、电子设备及存储介质
CN116938501A (zh) * 2022-04-12 2023-10-24 腾讯科技（深圳）有限公司 身份验证方法、设备、存储介质及程序产品
US11528153B1 (en) * 2022-05-27 2022-12-13 Vouch.Io Llc Systems and methods for delayed-message attack mitigation
CN118200035B (zh) * 2024-04-25 2024-12-17 北京锐客科技有限公司 一种安全通信的方法及系统
CN121053716A (zh) * 2024-05-31 2025-12-02 华为技术有限公司 一种验证方法、系统、电子设备及存储介质
CN118413324B (zh) * 2024-07-02 2024-10-18 国网江苏省电力有限公司信息通信分公司 一种电力网络实体身份标识方法、装置、设备及介质

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105635174A (zh) * 2016-02-03 2016-06-01 武汉天梯极客网络科技有限公司 一种智能设备分享方法
CN105654592A (zh) * 2016-01-12 2016-06-08 中科院微电子研究所昆山分所 一种基于云技术和无线技术的智能门锁系统
CN105913132A (zh) * 2016-05-09 2016-08-31 优住（北京）科技股份公司 一种酒店速住系统、方法
CN107493561A (zh) * 2017-08-07 2017-12-19 北京小米移动软件有限公司 共享设备解锁方法、装置及系统
CN108564688A (zh) * 2018-03-21 2018-09-21 阿里巴巴集团控股有限公司 身份验证的方法及装置和电子设备

Family Cites Families (97)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5979754A (en) 1995-09-07 1999-11-09 Martin; Jay R. Door lock control apparatus using paging communication
JP3261394B2 (ja) * 1996-05-28 2002-02-25 松下電器産業株式会社 無線携帯端末装置
EP1293857A1 (en) * 2001-09-17 2003-03-19 Caplin Systems Limited Server access control
US7184750B2 (en) * 2004-03-30 2007-02-27 Nokia Corporation Smart terminal remote lock and format
US20070206838A1 (en) 2006-02-22 2007-09-06 Fouquet Julie E Time synchronous biometric authentication
US7720505B2 (en) * 2006-03-07 2010-05-18 Marvell World Trade Ltd. Personal lifestyle device
US8274365B2 (en) * 2008-04-14 2012-09-25 The Eastern Company Smart lock system
US8838503B2 (en) * 2008-12-08 2014-09-16 Ebay Inc. Unified identity verification
US9886693B2 (en) * 2009-03-30 2018-02-06 Yuh-Shen Song Privacy protected anti identity theft and payment network
WO2011150405A2 (en) 2010-05-28 2011-12-01 Suridx, Inc. Wireless encrypted control of physical access systems
US8648694B2 (en) 2010-12-29 2014-02-11 Sasken Communication Technologies Ltd. Multiparty controlled remote security lock system
US8966602B2 (en) * 2011-11-07 2015-02-24 Facebook, Inc. Identity verification and authentication
US20130198836A1 (en) 2012-01-31 2013-08-01 Google Inc. Facial Recognition Streamlined Login
BR112014025965A2 (pt) * 2012-04-18 2018-05-08 Bbp Tecnologia Desenvolvimento De Sist Ltda sistema e método para verificação e autenticação de dados e identidade
US20180262471A1 (en) * 2012-04-18 2018-09-13 Edgard Lobo Baptista Pereira Identity verification and authentication method and system
US20130342314A1 (en) * 2012-06-22 2013-12-26 Gun Chen Smart lock structure and operating method thereof
US10735216B2 (en) 2012-09-21 2020-08-04 Google Llc Handling security services visitor at a smart-home
US10691953B2 (en) 2013-03-15 2020-06-23 August Home, Inc. Door lock system with one or more virtual fences
US9235943B2 (en) * 2013-07-26 2016-01-12 Joseph Frank Scalisi Remote identity verification of lodging guests
CN104424678B (zh) * 2013-08-30 2016-12-28 聚龙股份有限公司 一种电子密码锁系统及其控制方法
US9473491B1 (en) * 2014-12-16 2016-10-18 Amazon Technologies, Inc. Computing device with integrated authentication token
CN104753898B (zh) * 2013-12-31 2018-08-03 中国移动通信集团公司 一种验证方法、验证终端、验证服务器
KR101480880B1 (ko) * 2014-02-07 2015-01-13 김광우 자물쇠 시스템의 무선 제어 및 제어 권한 전송이 가능한 전자키 장치, 시스템 및 그 방법
US20170076082A1 (en) * 2014-03-14 2017-03-16 Yorid Pty Ltd Identity Verification System and Method
US10049202B1 (en) * 2014-03-25 2018-08-14 Amazon Technologies, Inc. Strong authentication using authentication objects
US10050787B1 (en) * 2014-03-25 2018-08-14 Amazon Technologies, Inc. Authentication objects with attestation
CN103888265B (zh) * 2014-04-11 2017-07-25 上海博路信息技术有限公司 一种基于移动终端的应用登录系统和方法
CN103971435B (zh) * 2014-05-22 2016-07-06 广东欧珀移动通信有限公司 开锁方法、服务器、移动终端、电子锁及开锁系统
AU2015271650A1 (en) * 2014-06-04 2017-01-05 Token One Pty Ltd Identity verification
US9264419B1 (en) * 2014-06-26 2016-02-16 Amazon Technologies, Inc. Two factor authentication with authentication objects
HK1232112A1 (zh) * 2014-07-29 2018-01-05 泰美有限公司 身份验证
US9892579B2 (en) 2014-08-06 2018-02-13 Che-Ming KU Control method for smart lock, a smart lock, and a lock system
US9685012B2 (en) 2014-08-20 2017-06-20 Gate Labs Inc. Access management and resource sharing platform based on biometric identity
US9942222B1 (en) * 2014-09-02 2018-04-10 Amazon Technologies, Inc. Authentication with wearable device
JP6349579B2 (ja) * 2014-11-13 2018-07-04 マカフィー， エルエルシー 条件付きログインプロモーション
US9728022B2 (en) 2015-01-28 2017-08-08 Noke, Inc. Electronic padlocks and related methods
US9953151B2 (en) 2015-02-03 2018-04-24 Chon Hock LEOW System and method identifying a user to an associated device
US10013825B2 (en) * 2015-03-03 2018-07-03 Acsys Ip Holding, Inc. Systems and methods for redundant access control systems based on mobile devices
US10057227B1 (en) * 2015-03-27 2018-08-21 Amazon Technologies, Inc. Determination of authentication mechanism
US9426139B1 (en) * 2015-03-30 2016-08-23 Amazon Technologies, Inc. Triggering a request for an authentication
US9721406B2 (en) 2015-04-08 2017-08-01 Thomas M. Isaacson System and method for door unlocking using a payment account
CN106302330B (zh) * 2015-05-21 2021-01-05 腾讯科技（深圳）有限公司 身份验证方法、装置和系统
US9396599B1 (en) * 2015-05-29 2016-07-19 Google Inc. Systems and methods for anticipatory locking and unlocking of a smart-sensor door lock
WO2016205815A1 (en) * 2015-06-18 2016-12-22 Andium Inc. Identity verification of wireless beacons based on a chain-of-trust
US9948630B2 (en) * 2015-06-30 2018-04-17 United States Postal Service System and method of providing identity verification services
US9852562B2 (en) * 2015-07-06 2017-12-26 Acsys Ip Holding, Inc. Systems and methods for redundant access control systems based on mobile devices and removable wireless buttons
US9672674B2 (en) * 2015-07-06 2017-06-06 Acsys Ip Holding, Inc. Systems and methods for secure lock systems with redundant access control
HK1248385B (zh) * 2015-07-06 2020-05-22 Acsys Holdings Limited 用於提供冗余访问通道的锁
US9864852B2 (en) * 2015-07-27 2018-01-09 Amazon Technologies, Inc. Approaches for providing multi-factor authentication credentials
CN105553928B (zh) * 2015-07-31 2020-02-18 宇龙计算机通信科技(深圳)有限公司 一种基于生物特征识别的通信方法、装置及系统
US9923927B1 (en) * 2015-09-29 2018-03-20 Amazon Technologies, Inc. Methods and systems for enabling access control based on credential properties
US9762398B2 (en) * 2015-10-15 2017-09-12 Verizon Patent And Licensing Inc. Application-based toll-free data service
US10572640B2 (en) * 2015-11-16 2020-02-25 Personnus System for identity verification
CN107066847A (zh) * 2015-12-07 2017-08-18 由田新技股份有限公司 身份验证方法、装置及系统
US9965911B2 (en) * 2015-12-07 2018-05-08 Capital One Services, Llc Electronic access control system
CN106980780A (zh) * 2016-01-18 2017-07-25 由田新技股份有限公司 身份验证方法及装置
WO2017147696A1 (en) * 2016-02-29 2017-09-08 Troy Jacob Ronda Systems and methods for distributed identity verification
US9985964B2 (en) * 2016-03-28 2018-05-29 Black Gold Coin, Inc. Systems and methods for providing block chain-based multifactor personal identity verification
CN105869244B (zh) * 2016-03-31 2018-11-02 青岛歌尔声学科技有限公司 一种声音密码开锁方法及密码锁
US20170302663A1 (en) * 2016-04-14 2017-10-19 Cisco Technology, Inc. BLOCK CHAIN BASED IoT DEVICE IDENTITY VERIFICATION AND ANOMALY DETECTION
US9762581B1 (en) 2016-04-15 2017-09-12 Striiv, Inc. Multifactor authentication through wearable electronic device
US10192043B2 (en) * 2016-04-19 2019-01-29 ProctorU Inc. Identity verification
CN105871874A (zh) 2016-04-27 2016-08-17 武汉市国扬科技有限公司 一种移动互联网虚拟钥匙授权系统及其硬件门锁控制方法
US20170330165A1 (en) * 2016-05-10 2017-11-16 Danal Inc. Methods and systems for identity verification at self-service machines
US20170339141A1 (en) * 2016-05-20 2017-11-23 Azurecoast, LLC System and Method of Identity Verification
WO2018009564A1 (en) * 2016-07-05 2018-01-11 Ryan Fox Systems and methods for secure remote identity verification
TW201802718A (zh) * 2016-07-14 2018-01-16 李殿基 非接觸式身份驗證裝置及非接觸式身份驗證系統及非接觸式身份驗證方法
CN106228054A (zh) * 2016-08-02 2016-12-14 北京小米移动软件有限公司 身份验证方法和装置
US10313358B2 (en) * 2016-08-02 2019-06-04 Capital One Services, Llc Systems and methods for proximity identity verification
CN106296917A (zh) * 2016-08-08 2017-01-04 浪潮电子信息产业股份有限公司 一种开锁系统、方法以及云管理平台
US10997280B2 (en) * 2016-08-11 2021-05-04 Motorola Mobility Llc Biometric identity verification with location feasibility determination
US20180053184A1 (en) * 2016-08-21 2018-02-22 Christine Casey Method of identity verification during payment card processing
US10291609B2 (en) * 2016-08-23 2019-05-14 Reavire, Inc. Vault appliance for identity verification and secure dispatch of rights
CN106335572B (zh) 2016-08-31 2019-07-09 武汉大学 一种低功耗蓝牙智能车锁及采用车锁的基于时空安全的物联网技术下的公共自行车系统
US10089521B2 (en) * 2016-09-02 2018-10-02 VeriHelp, Inc. Identity verification via validated facial recognition and graph database
CN106656952B (zh) * 2016-09-21 2020-11-20 北京神州绿盟信息安全科技股份有限公司 一种登录设备的认证方法、装置和系统
CN107018121B (zh) * 2016-10-13 2021-07-20 创新先进技术有限公司 用户身份验证的方法及装置
CN106437317B (zh) * 2016-10-26 2019-02-01 李平川 一种无线供电智能门锁
CN106454800B (zh) * 2016-11-21 2018-07-27 北京小米移动软件有限公司 身份验证方法、装置及系统
US12536534B2 (en) * 2016-11-30 2026-01-27 Ncr Atleos Corporation Identity verification systems and methods
US10891626B2 (en) * 2016-12-09 2021-01-12 Lexisnexis Risk Solutions Inc. Systems and methods for identity verification
CN108288470B (zh) * 2017-01-10 2021-12-21 富士通株式会社 基于声纹的身份验证方法和装置
US20180260522A1 (en) * 2017-03-08 2018-09-13 Grant A. Bitter Identity verification by computational analysis of genomic dna
CN107154115A (zh) * 2017-05-04 2017-09-12 上海众启建筑装饰工程集团有限公司 一种电动汽车租赁方法、装置及系统
US10382965B2 (en) * 2017-05-30 2019-08-13 Sap Se Identity verification using computer-implemented decentralized ledger
US10218697B2 (en) * 2017-06-09 2019-02-26 Lookout, Inc. Use of device risk evaluation to manage access to services
CN107151415A (zh) 2017-06-13 2017-09-12 张子光 工程堵水用酚醛树脂注浆材料及制备方法
CN107483398B (zh) * 2017-06-28 2019-04-19 北京三快在线科技有限公司 一种静默验证方法及装置，电子设备
US10637664B2 (en) * 2017-07-14 2020-04-28 NortonLifeLock Inc. User-directed identity verification over a network
CN107527620B (zh) * 2017-07-25 2019-03-26 平安科技（深圳）有限公司 电子装置、身份验证的方法及计算机可读存储介质
US10637662B2 (en) * 2017-08-28 2020-04-28 International Business Machines Corporation Identity verification using biometric data and non-invertible functions via a blockchain
US10922690B2 (en) 2017-08-28 2021-02-16 David Joseph Ross System and method for purchasing using biometric authentication
WO2019083517A1 (en) * 2017-10-25 2019-05-02 Google Llc IDENTITY VERIFICATION PRESERVING CONFIDENTIALITY
WO2019117889A1 (en) * 2017-12-13 2019-06-20 Google Llc Mechanism for achieving mutual identity verification via one-way application-device channels
CN111512658B (zh) * 2017-12-19 2023-05-02 海拉有限双合股份公司 用于分散式数字认证的方法和系统
US10693650B2 (en) * 2017-12-19 2020-06-23 Mastercard International Incorporated Biometric identity verification systems, methods and programs for identity document applications and renewals
US10986123B2 (en) * 2017-12-29 2021-04-20 Paypal, Inc. Passive and active identity verification for online communications

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105654592A (zh) * 2016-01-12 2016-06-08 中科院微电子研究所昆山分所 一种基于云技术和无线技术的智能门锁系统
CN105635174A (zh) * 2016-02-03 2016-06-01 武汉天梯极客网络科技有限公司 一种智能设备分享方法
CN105913132A (zh) * 2016-05-09 2016-08-31 优住（北京）科技股份公司 一种酒店速住系统、方法
CN107493561A (zh) * 2017-08-07 2017-12-19 北京小米移动软件有限公司 共享设备解锁方法、装置及系统
CN108564688A (zh) * 2018-03-21 2018-09-21 阿里巴巴集团控股有限公司 身份验证的方法及装置和电子设备

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3716227A4 *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113360888A (zh) * 2021-06-07 2021-09-07 厦门熵基科技有限公司 一种身份验证配置方法、系统平台和终端设备

Also Published As

Publication number Publication date
EP3716227A1 (en) 2020-09-30
TWI755580B (zh) 2022-02-21
EP3716227B1 (en) 2022-03-30
US20200304490A1 (en) 2020-09-24
TW201941092A (zh) 2019-10-16
SG11202006204TA (en) 2020-07-29
US11323430B2 (en) 2022-05-03
CN108564688A (zh) 2018-09-21
EP3716227A4 (en) 2020-12-23

Similar Documents

Publication Publication Date Title
US11323430B2 (en) Identity verification method and device and electronic device
US12182739B2 (en) Short-range device communications for secured resource access
US10305881B2 (en) Controlled token distribution to protect against malicious data and resource access
US9898881B2 (en) Short-range device communications for secured resource access
KR102559827B1 (ko) 블록체인과 해쉬 암호화 기술을 기반으로 한 영상 인증 시스템 및 그 방법
CN105847253B (zh) 用于认证的方法和设备
CN108156155B (zh) 一种基于无线网络的生物认证系统、移动设备及方法
CN113196236A (zh) 一种跨设备认证方法及电子设备
JP2009135688A (ja) 認証方法、認証システムおよび車載装置
CN106716471A (zh) 用于识别移动装置的方法和系统
EP3380975B1 (en) Short-range device communications for secured resource access
WO2021135593A1 (zh) 一种分享设备的方法及电子设备
CN114510178B (zh) 一种共享数据分发方法及电子设备
CN105450546A (zh) 可穿戴设备及其局域网接入方法、智能终端
CN111511043B (zh) 网络连接方法、装置、电子设备及存储介质
JP6533963B2 (ja) ユーザ端末、認証端末、認証方法及びプログラム
US20230283994A1 (en) Automatic Control Method, Electronic Device, and Computer-Readable Storage Medium
WO2020156152A1 (zh) 支付信息绑定方法、装置、移动终端及系统
KR102308859B1 (ko) 생체 정보 기반 대리 인증 서비스 시스템 및 방법
CN113645024A (zh) 密钥分发方法、系统、装置及可读存储介质和芯片
KR101297166B1 (ko) 생체 정보를 이용한 사용자 인증 방법 및 시스템과 생체정보를 이용하여 인증 정보를 전송하는 이동통신 단말기
CN118629119A (zh) 一种智能门锁的开锁方法、移动终端及计算机可读存储介质
HK1259042A1 (zh) 身份验证的方法及装置和电子设备
KR101737382B1 (ko) 이동통신 간편 가입 서비스 제공방법
JP7496177B1 (ja) 被認証装置、認証装置、認証要求出力方法、認証方法、及びプログラム

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19771488

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2019771488

Country of ref document: EP

Effective date: 20200626

NENP Non-entry into the national phase

Ref country code: DE