CN109450867B - An identity authentication method, device and storage medium - Google Patents

Abstract

The embodiment of the invention discloses an identity authentication method, device and storage medium, which are applied in the technical field of information processing. After obtaining the information of n dimensions in the identity document information, the multimedia information consistent with the information of m dimensions in the n dimensions will be obtained from at least one third-party information system, and each dimension of each set of multimedia information obtained will be The information is matched with the information in n dimensions, and finally the identity authentication score is calculated according to at least one set of matching results obtained, and the user's identity authentication is performed according to the identity authentication score. In this way, by obtaining multimedia information about the user from the third-party information system, and comparing the multimedia information with the ID information entered by the user, it can be determined from various information whether the ID information entered by the user is true, and the identity authentication of the user is provided. It guarantees security; and it can be extended to the authentication of certain types of user identities (such as professional identities).

Description

An identity authentication method, device and storage medium

technical field

The present invention relates to the technical field of information processing, in particular to an identity authentication method, device and storage medium.

Background technique

Nowadays, many application systems need to authenticate the user of the application terminal who logs in to the application server for the safety of the user and the information security in the application system, so as to authenticate the credibility of the user who uses the application terminal. If the authentication is passed, Then the application terminal is allowed to connect to the application server to use the service of the application server.

The existing identity authentication schemes mainly focus on the real-name authentication of individuals or enterprises, which is characterized by the existence of one or more government agencies or authoritative enterprises (such as banks, etc.), which have 100% credible information of the user's real name, and can Real-name authentication of individuals or companies through a unique identification such as tax ID number, ID number, ID photo, etc.

However, in some scenarios, such as in some academic systems (such as medical systems), it is necessary to authenticate the occupational identity of the user of the application terminal, and the existing identity authentication scheme cannot be well used in this scenario.

Contents of the invention

Embodiments of the present invention provide an identity authentication method, device, and storage medium, which realize user identity authentication based on multimedia information acquired from a third-party information system and identity document information input by the user.

The first aspect of the embodiment of the present invention provides an identity authentication method, including:

Acquiring identity document information input by the user, where the identity document information includes n-dimension information of the user;

Acquiring multimedia information consistent with the information of m dimensions in the n dimensions from at least one third-party information system to obtain at least one set of multimedia information; the n is an integer greater than or equal to m, and the m is greater than or equal to an integer equal to 1;

matching the information of each dimension in the at least one set of multimedia information with the information of the n dimensions respectively, to obtain at least one set of matching results;

calculating an identity authentication score based on the at least one set of matching results;

If the identity authentication score is within a preset range, the user's identity authentication is passed.

The second aspect of the embodiment of the present invention provides an identity authentication device, including:

A certificate information acquisition unit, configured to obtain identity certificate information input by a user, where the identity certificate information includes n-dimensional information of the user;

The multimedia acquisition unit is used to acquire multimedia information consistent with the information of m dimensions in the n dimensions from at least one third-party information system, and obtain at least one set of multimedia information; the n is an integer greater than or equal to m, The m is an integer greater than or equal to 1;

A matching unit, configured to match the information of each dimension in the at least one set of multimedia information with the information of the n dimensions respectively, to obtain at least one set of matching results;

A score calculation unit, configured to calculate an identity authentication score according to the at least one set of matching results;

An authentication unit, configured to pass the user's identity authentication if the identity authentication score is within a preset range.

The third aspect of the embodiment of the present invention provides a storage medium, the storage medium stores a plurality of instructions, and the instructions are suitable for being loaded by a processor and executing the identity authentication method according to the first aspect of the embodiment of the present invention.

A fourth aspect of the embodiments of the present invention provides a server, including a processor and a storage medium, and the processor is configured to implement various instructions;

The storage medium is used to store a plurality of instructions, and the instructions are used to be loaded by a processor and execute the identity authentication method according to the first aspect of the embodiment of the present invention.

It can be seen that, in the method of this embodiment, after the identity authentication device obtains the information of n dimensions in the identity document information, it will respectively obtain the multimedia information consistent with the information of m dimensions in the n dimensions from at least one third-party information system. Information, and match the information of each dimension in each group of multimedia information obtained with the information of n dimensions respectively, and finally calculate the identity authentication score based on at least one set of matching results obtained, and then perform user authentication based on the identity authentication score. authentication. In this way, by obtaining multimedia information about the user from a third-party information system, and comparing the multimedia information with the ID information entered by the user, it can be further determined from various information whether the ID information entered by the user is authentic. The user's identity authentication provides security guarantee; and it is not limited to the real-name authentication of users through certain authority organizations, but can be extended to the authentication of certain types of user identities (such as professional identities) that do not have authority authority authentication.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained according to these drawings without any creative effort.

FIG. 1 is a schematic diagram of a scenario where an identity authentication method provided by an embodiment of the present invention is applied;

Fig. 2 is a flow chart of an identity authentication method provided by an embodiment of the present invention;

Fig. 3 is a schematic diagram of an information input interface displayed by an identity authentication device in an embodiment of the present invention;

Fig. 4 is a schematic diagram of a scenario where an identity authentication method provided by an application embodiment of the present invention is applied;

Fig. 5 is a flow chart of an identity authentication method provided by an application embodiment of the present invention;

6 is a schematic diagram of a user interface displayed by a medical application terminal in an application embodiment of the present invention;

Fig. 7 is a schematic diagram of the authentication passing information displayed on the medical application terminal in the application embodiment of the present invention;

Fig. 8 is a schematic structural diagram of an identity authentication device provided by an embodiment of the present invention;

FIG. 9 is a schematic structural diagram of a server provided by an embodiment of the present invention.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

The terms "first", "second", "third", "fourth", etc. (if any) in the description and claims of the present invention and the above drawings are used to distinguish similar objects and not necessarily Describe a specific order or sequence. It is to be understood that the data so used are interchangeable under appropriate circumstances such that the embodiments of the invention described herein are, for example, capable of practice in sequences other than those illustrated or described herein. Furthermore, the terms "comprising" and "having" and any variations thereof are intended to cover a non-exclusive inclusion, for example, a process, method, system, product or device comprising a sequence of steps or elements need not be limited to the expressly listed Instead, other steps or elements not explicitly listed or inherent to the process, method, product or apparatus may be included.

An embodiment of the present invention provides an identity authentication method, which can be mainly applied to the scenario shown in Figure 1, which may include an identity authentication device and at least one third-party information system (in Figure 1, t is used as an example to illustrate ), wherein the identity authentication device is used to authenticate the user's identity (such as professional identity) according to the identity document information input by the user; the third-party information system is used to provide information related to the identity document information input by the user.

In a specific embodiment, the identity authentication device may be an application server in a certain application system, and the user may upload identity certificate information to the application server through the application terminal in the application system.

Specifically, in the embodiment of the present invention, the identity authentication device can realize the identity authentication of the user through the following steps:

Obtaining the identity document information input by the user, the identity document information including information of n dimensions of the user; obtaining multimedia information consistent with the information of m dimensions in the n dimensions from at least one third-party information system, At least one set of multimedia information is obtained; the n is an integer greater than or equal to m, and the m is an integer greater than or equal to 1; the information of each dimension in each set of multimedia information is respectively compared with the information of the n dimensions Matching, obtaining at least one set of matching results; calculating an identity authentication score according to the at least one set of matching results; if the identity authentication score is within a preset range, the identity authentication of the user is passed.

In this way, by obtaining multimedia information about the user from a third-party information system, and comparing the multimedia information with the ID information entered by the user, it can be further determined from various information whether the ID information entered by the user is authentic. The user's identity authentication provides security guarantee; and it is not limited to the real-name authentication of users through certain authority organizations, but can be extended to the authentication of certain types of user identities (such as professional identities) that do not have authority authority authentication.

An embodiment of the present invention provides an identity authentication method, which is mainly a method executed by an identity authentication device. The flow chart is shown in Figure 2, including:

In step 101, the identity document information input by the user is acquired, and the identity document information includes information of n dimensions of the user.

It can be understood that in one case, the identity authentication device in this embodiment may be an application server in a certain application system, so that the user can input identity certificate information through the user interface provided by the application terminal in the application system, and the application terminal will Carry the ID information entered by the user in the identity authentication request and send it to the application server to request the application server to authenticate the user's identity; when the application server receives the identity authentication request, it extracts the identity information from the identity authentication request , and initiate the identity authentication process of this embodiment.

In another case, the user can operate the identity authentication device so that the identity authentication device directly displays an information input interface, and the information input interface includes a credential information input interface, so that the user can input identity certificate information from the credential information input interface; and the identity authentication device The identity certificate information input by the user is received from the certificate information input interface.

For example, Fig. 3 shows the information input interface displayed by the identity authentication device, including the button of "input ID card", the button of "input medical qualification certificate", the button of "input practicing qualification certificate" and the button of "confirm and submit", wherein, The button of "input ID card", the button of "input medical qualification certificate" and the button of "input practice qualification certificate" are the document information input interface. When the user clicks a certain button, such as the button of "input ID card", the identity authentication device will start the image capture function, so that the identity authentication device can capture the image of the user's ID card.

Here, the identity document information can be information of one or more identity documents, such as ID card image, qualification certificate image, etc.; and the information of each identity document can include information of one or more dimensions, and any two identity documents The information can include information of the same dimension. For example, the ID card image includes information of dimensions such as user name, ID number, and user avatar, and the qualification image includes information of dimensions such as user name, user avatar, and qualification certificate number. In this way, both the ID card image and the qualification certificate image include the information of the two dimensions of the user's name and the user's avatar.

It should be noted that, after the identity authentication device executes step 101, the following situations may occur:

In one case, if the identity authentication device obtains information on multiple identity documents when performing step 101, and any two identity documents have information of at least one dimension of the same dimension, then After the identity authentication device executes step 101, it can first match the information of the same dimension between the information of any two identity documents, if any information of the same dimension does not match, the user's identity authentication fails, and the process ends ; If all information of the same dimension matches, proceed to the following steps 102 to 105.

For example, if the identity authentication device acquires an ID card image and a qualification certificate image, and both images include the two-dimensional information of the user name and user avatar, the identity authentication device will send the user name in the two images Match, and match the user avatars in the two images, if the user name or user avatar between the two images is inconsistent, the user's identity authentication has not passed, and the process ends; if the user name between the two images If they are consistent, and the user avatar is consistent, the following step 102 will be executed.

In another case, after the identity authentication device executes step 101, it may first send an authentication request to the third-party authentication device, and the authentication request is used to request the third-party authentication device to verify the Certain information is authenticated; if the authentication passing information returned by the third-party authentication device is received, the identity authentication device will continue to perform step 102; if the authentication failed information returned by the third-party authentication device is received, the identity authentication device will end process. Among them, some information that needs to be authenticated by a third-party authentication device may include user name, ID number and other information, and the third-party authentication device belongs to a device with a high degree of credibility such as a government agency or an authoritative enterprise (such as a bank). Authentication of certain information is more secure.

For example, if the n-dimensional information includes the user name and ID number, the identity authentication device can send an authentication request to the identity authentication system of the Ministry of Public Security, and include the user name and ID number in the authentication request to request the identity authentication of the Ministry of Public Security. The system authenticates the user's name and ID number.

In addition, in other cases, if the identity authentication device is an application server in the application system, before the identity authentication device obtains multimedia information from a third-party information system, it can also send an authorization request to the application terminal, and the authorization request uses To request the application terminal to authorize the identity authentication device to obtain multimedia information in a third-party information system; when the application terminal receives the authorization request, it will prompt the user to choose to accept or reject the authorization request. If the user chooses Accepting the authorization request, the application terminal sends authorization confirmation information to the identity authentication device; when the identity authentication device receives the authorization confirmation information returned by the application terminal according to the authorization request, it obtains the m Multimedia information consistent with the information of each dimension.

And if the user chooses to reject the authorization request, the application terminal will send the authorization rejection information to the identity authentication device; when the identity authentication device receives the authorization rejection information returned by the application terminal according to the authorization request, it will not obtain information from the third-party information system. Multimedia information consistent with information in m dimensions out of n dimensions. In this way, some information of the user will not be obtained by the identity authentication device, thereby ensuring the security of the user's information.

Step 102, obtain multimedia information consistent with information in m dimensions in n dimensions from at least one third-party information system, and obtain at least one set of multimedia information; where n is an integer greater than or equal to m, and m is greater than or equal to 1 an integer of .

Here, the third-party information system refers to a system that is in a different system from the identity authentication device and is used to provide information, such as a microblog system, a news system, and the like. And the number of dimensions of the information based on which the identity authentication device acquires multimedia information from different third-party information systems may be the same or different. A set of multimedia information, and a set of multimedia information consistent with the information of the two dimensions is obtained from the third-party information system 2.

Specifically, when the identity authentication device obtains a corresponding set of multimedia information from a third-party information system, it can search for at least one piece of corresponding multimedia information in the third-party information system according to the information of m dimensions, and each piece of multimedia information All include information of the m dimensions, and may also include information of other dimensions of the user.

The multimedia information here may be information in formats such as text, video or text.

Step 103, matching the information of each dimension in each group of multimedia information with the information of the n dimensions mentioned above to obtain at least one set of matching results.

Specifically, each set of matching results obtained by the identity authentication device includes information on whether the information of each dimension in the group of multimedia information matches or does not match the information of the above n dimensions. Wherein, if the information of the above n dimensions includes information of a certain dimension in the group of multimedia information, the matching result may include: the information of this dimension matches or does not match the information of the above n dimensions; if If the information of the above n dimensions does not include the information of a certain dimension in the group of multimedia information, the matching result includes: the information of this dimension is not matched with the information of the above n dimensions.

For example, the multimedia information obtained by the identity authentication device is multimedia information group 1, multimedia information group 2, ..., multimedia information group x, and the identity authentication device can compare the information of each dimension in multimedia information group 1 with the information of n dimensions respectively Matching to obtain a matching result 1, which specifically includes: whether the information of each dimension in the multimedia information group 1 matches or does not match the information of the above n dimensions;

The identity authentication device matches the information of each dimension in the multimedia information group 2 with the information of the above n dimensions respectively, and obtains the matching result 2, which specifically includes: whether the information of each dimension in the multimedia information group 2 is consistent with the information of the above n dimensions Matched or not matched information;

...;

The identity authentication device can match the information of each dimension in the multimedia information group x with the information of the above n dimensions respectively to obtain the matching result x, which specifically includes: whether the information of each dimension in the multimedia information group x is the information of the above n dimensions respectively Matched or not matched information.

Step 104, calculating an identity authentication score according to at least one set of matching results. In general, when the identity authentication device calculates the identity authentication score, it can calculate according to a certain preset strategy. Specifically, the preset strategy can include: after quantifying the information in each group of matching results, and then according to the quantified value , and a certain functional correspondence between the quantified value and the identity authentication score, to calculate the identity authentication score.

Specifically, if each group of matching results obtained in the above step 103 includes: whether the information of each dimension in a group of multimedia information matches or does not match the information of the above n dimensions, the identity authentication device calculates the identity authentication value, you can first count the total score corresponding to each group of matching results according to whether the information of each dimension in each group of matching results matches or does not match, and the preset scoring strategy; then according to at least one group of matching results The respective corresponding total scores are used to calculate the identity authentication scores.

Among them, the preset scoring strategy may include: for information that matches one item in a set of matching results, the corresponding score is the first value (such as 2); for information that does not match one item in a set of matching results , the corresponding score is the second value (for example, 0); for a piece of information that is not matched in a set of matching results, the corresponding score is the third value (for example, 1). In this way, the total score value corresponding to each group of matching results is the sum of the score values corresponding to the matching results of information of each dimension in a group of multimedia information.

For example, a set of matching results includes: the information of dimension 1 in a set of multimedia information matches the information of the above n dimensions, then the corresponding count is the first value a1, and the information of dimension 2 in a set of multimedia information matches the information of the above n dimensions If the dimension information does not match, it is correspondingly counted as the second value a2, and the information of dimension 3 in a group of multimedia information does not match in the information of the above n dimensions, then it is correspondingly counted as the third value a3, and the matching result of this group The corresponding total score is the sum of a1, a2 and a3.

Further, when the identity authentication device calculates the identity authentication score based on the total score corresponding to at least one group of matching results, it will respectively calculate the total score corresponding to each group of matching results, and the highest possible score corresponding to the corresponding group of matching results The ratio; then the function calculation value of the ratio corresponding to each group of matching results is used as the identity authentication score.

Wherein, under normal circumstances, when the information of each dimension in a set of multimedia information matches the information of the above n dimensions, the scoring value is the highest, that is, the above-mentioned first value is greater than both the second value and the second value, Then the highest possible score corresponding to a certain group of matching results refers to: the total integral value when the information of each dimension in a group of multimedia information matches the information of the above n dimensions, assuming that a group of multimedia information includes y Dimension information, the highest possible score is y times the first value.

And when the identity authentication device uses the function calculation value of the ratio corresponding to each group of matching results as the identity authentication score, it can use the sum of the ratios corresponding to each group of matching results as the identity authentication score, or use the corresponding value of each group of matching results as the identity authentication score. The weighted sum of the ratios is used as the identity authentication score.

Step 105, if the identity authentication score is within the preset range, the user's identity authentication is passed; if the identity authentication score is not within the preset range, the user's identity authentication is not passed.

Further, the identity authentication device will also prompt the user, if the user's identity authentication is passed, the user will be prompted; if the user's identity authentication is not passed, the user will be prompted not to pass.

It can be seen that, in the method of this embodiment, after the identity authentication device obtains the information of n dimensions in the identity document information, it will respectively obtain the multimedia information consistent with the information of m dimensions in the n dimensions from at least one third-party information system. information, and match the information of each dimension in at least one set of multimedia information obtained with the information of the above n dimensions respectively, and finally calculate the identity authentication score according to the obtained at least one set of matching results, and then proceed according to the identity authentication score. User authentication. In this way, by obtaining multimedia information about the user from a third-party information system, and comparing the multimedia information with the ID information entered by the user, it can be further determined from various information whether the ID information entered by the user is authentic. The user's identity authentication provides security guarantee; and it is not limited to the real-name authentication of users through certain authority organizations, but can be extended to the authentication of certain types of user identities (such as professional identities) that do not have authority authority authentication.

The identity authentication method of the present invention is described below with a specific embodiment. The method of this embodiment can be applied to the scene shown in Figure 4, which includes: a medical application server, a microblog system, a news website system, The hospital website system, the identity authentication system of the Ministry of Public Security, and the medical application terminal, wherein the medical application server is the above-mentioned identity authentication device, the medical application terminal is the above-mentioned application terminal, the microblog system, the news website system and the hospital website system are the above-mentioned first The three-party information system and the identity authentication system of the Ministry of Public Security are the above-mentioned third-party authentication systems. specifically:

The medical application server may include an authentication information analysis module, an authentication core module, a real-name authentication module, a microblog module, a news website module and a hospital website module, wherein:

The authentication information parsing module is used to obtain the identity document information uploaded by the user through the medical application terminal, and analyze the identity document information to obtain n-dimensional information;

The authentication core module is used to send information such as the user name and ID number in the n-dimensional information to the identity authentication system of the Ministry of Public Security through the real-name authentication module after the authentication information parsing module obtains n-dimensional information. Carry out real-name authentication; and notify the microblog module, the news website module and the hospital website module to obtain the multimedia information group 1, the multimedia information group 2 and the multimedia information group 3 from the microblog system, the news website system and the hospital website system respectively; The information of each dimension in information group 1, multimedia information group 2, and multimedia information group 3 is matched with the information of the above n dimensions respectively, and three sets of matching results are obtained; finally, the identity authentication score is calculated according to the three sets of matching results, and according to the identity The authentication score is used to authenticate the identity of the user.

Referring to FIG. 5, in this embodiment, the medical application server can perform user identity authentication through the following steps, specifically the authentication of professional identity, including:

Step 201, the user can operate the medical application terminal so that the medical application terminal displays a user interface, which includes an input interface for "ID card", an input interface for "medical qualification certificate" and an input interface for "practicing qualification certificate"; the user Corresponding ID card information can be input through these input interfaces, so that the medical application terminal will send the ID card information input by the user to the medical application server. In this embodiment, the ID card information input by the user includes an ID card image, a medical qualification certificate image, and a practice qualification certificate image, that is, an ID card image.

For example, as shown in Figure 6, the user interface displayed by the medical application terminal includes: "Upload the front of the ID card" and a button with a "camera" pattern above the word (that is, the input interface of the "ID card"), "Upload the medical qualification certificate" The words "Camera" above the word and the button with the image of "Camera" above the word (i.e. the input interface of the "Medical Qualification Certificate"), the words "Upload the Practice Qualification Certificate" and the button with the image of "Camera" above the word (i.e. the input interface of the "Practice Qualification Certificate") , and the "Submit Certification" button.

Step 202, after the authentication information parsing module in the medical application server receives the ID card information (i.e. ID card image) input by the user, it can specifically cut the ID card image through image cutting technology to obtain multiple cut images, and then use the A character recognition technology such as an optical character recognition (Optical Character Recognition, OCR) technology recognizes a cut image to obtain structured n-dimensional information. Wherein, after obtaining multiple cut images, the cut images containing information of n dimensions may be selected first, and then recognized, thereby saving calculation time.

For example, the information of 3 dimensions is extracted from the ID card image: [ID card number (text), user name (text), user avatar (picture)]; Information extracted into 4 dimensions: [user name (text), user avatar (picture), title (text), unit (text)].

Step 203, the authentication core module in the medical application server first matches the user name and user avatar in the ID card image with the user name and user avatar in the practice qualification certificate image, and if they match, continue to step 204; If the user's name does not match or the user's avatar does not match, then the user's identity authentication fails, and the authentication failure information is returned to the medical application terminal.

Step 204, the authentication core module in the medical application server will send the user name and ID number in the information of multiple dimensions to the identity authentication system of the Ministry of Public Security through the real-name authentication module for real-name authentication. If the real-name authentication fails, then If the identity authentication of the user fails, return the information that the authentication fails to the medical application terminal; if the real-name authentication passes, continue to execute step 205 .

Step 205, the authentication core module sends the user's name and title in the identity certificate information to the microblog module, so as to obtain the microblog authentication information associated with the user's name and title from the microblog system through the microblog module; and the microblog The module normalizes the Weibo authentication information to obtain a set of multimedia information, that is, multimedia information group 1: [position (text), unit (text)].

In a specific embodiment, before performing step 205, the authentication core module may send an authorization request to the medical application terminal to request the medical application terminal to authorize the medical application server to obtain the user's information stored in the microblog system; if If the user agrees to the authorization through the medical application terminal, the medical application terminal will send information confirming the authorization to the medical application server, and the authentication core module will perform step 205; if the user refuses authorization through the medical application terminal, the medical application terminal will send the medical application server If the authorization rejection message is sent, the authentication core module will not execute step 205 .

Step 206, the authentication core module sends the user's name and title in the above-mentioned identity certificate information to the news website module, so as to obtain the news information associated with the user's name and title from the news website system through the news website module; and the news website module The obtained news information is normalized to obtain a set of multimedia information, that is, multimedia information set 2: [position (text), unit (text), user name (text)].

Step 207, the authentication core module sends the user's name and title in the above identity certificate information to the hospital website module, so as to obtain the schedule associated with the user's name and title, department doctor introduction, etc. from the hospital website system through the hospital website module information; and the obtained information is normalized by the hospital website module to obtain a set of multimedia information, that is, multimedia information group 3: [position (text), unit (text)].

It should be noted that there is no absolute sequence relationship among the above steps 205 to 207, and they can be performed simultaneously or sequentially, which is not limited here.

Step 208, the authentication core module matches the information of each dimension in the multimedia information group 1, the multimedia information group 2 and the multimedia information group 3 (that is, in the 3 groups of multimedia information) with the information of the n dimensions in the above-mentioned identity document information, and obtains 3 sets of matching results. Each set of matching results includes information about whether the information of each dimension in a set of multimedia information matches or does not match the information of the above n dimensions.

Step 209, the authentication core module calculates the identity authentication score according to the three sets of matching results.

Specifically, the authentication core module may include the following parts when calculating the identity authentication score:

(1) The authentication core module first scores the information in each group of matching results, specifically, in each group of matching results: if the information of a certain dimension in a group of multimedia information matches the information of the above n dimensions , can be scored as 2; if the information of a certain dimension in a set of multimedia information does not match the information of the above n dimensions, it can be scored as 0; if the information of a certain dimension in a set of multimedia information is within the above n When there is no match in the information of dimensions, it can be scored as 1. Then, for a certain group of matching results, all the scores obtained according to the group of matching results are added to obtain a corresponding total score value.

(2) Take the quotient of the total score obtained according to each group of matching results and the highest possible score of the corresponding group of matching results as the corresponding ratio S.

For the news information obtained from the news website system, since the news website system can include multiple websites, a corresponding weight w can be set for each website, then a set of matching results obtained according to the multimedia information obtained from the news website system , the calculated ratio S can be: S (news website)=s (website 1)*w (website 1)+s (website 2)*w (website 2)+s (website 3)*w (website 3), Among them, s is the ratio obtained according to the news information in each website.

(3) The weighted sum of the ratio S of each group of matching results is taken as the final identity authentication score. For example, S(microblog)*W(microblog)+S(hospital website)*W(hospital website)+S(news website)*W(news website), where W is obtained from a third-party information system The weight value of the multimedia information, S is the ratio obtained from the multimedia information obtained from a third-party information system.

For example, the authentication core module obtains the following three dimensions of information from the ID information: [Zhang San, Chief Physician, Beijing Hospital].

A set of multimedia information obtained from the microblog system includes: [empty, chief physician], and the corresponding weight W is 0.3.

A set of multimedia information obtained from the hospital website system includes: [Zhang San, chief physician], and the corresponding weight W is 0.4.

The weight W corresponding to the news website system is 0.3.

A set of multimedia information obtained from the news website 1 includes: [Zhang San, attending physician, Beijing Hospital], and the corresponding weight w1 is 0.5.

A set of multimedia information obtained from the news website 2 includes: [Zhang San, chief physician, Beijing Hospital], and the corresponding weight w2 is 0.3.

A set of multimedia information obtained from the news website 3 includes: [Zhang San, chief physician, Beijing Hospital], and the corresponding weight w3 is 0.2.

Like this, S (microblog) can be (1+2)/(2*2)=0.75; S (hospital website)=(2+2)/(2*2)=1;

For the news website system, the corresponding ratio S (news website) needs to be calculated first s(website 1)=(2+0+2)/(3*2)=0.67, s(website 2)=(2+2 +2)/(3*2)=1, s(website 3)=(2+2+2)/(3*2)=1; then get integral ratio S(news website)=0.67*0.5+1 *0.3+1*0.2＝0.83;

The final identity authentication score is: 0.75*0.3+1*0.4+0.83*0.3＝0.874

Step 210, in this implementation, two preset ranges can be set. If the identity authentication score is within a preset range, the user's identity authentication is passed, and the authentication core module can send the authentication pass information to the medical application terminal. If the identity authentication score is not within a preset range, but within another preset range, manual review can be carried out, so that the automation of identity authentication can be effectively combined with manual authentication; and if the identity authentication score is both If it is not within one preset range and not within another preset range, it is directly determined that the user's identity authentication has not passed.

Specifically, continuing the above example, if the obtained identity authentication score is 0.874 greater than 0.8 (that is, within a preset range), the identity authentication is passed; if in other embodiments, the obtained identity authentication score is less than a certain value, such as 0.5 (neither in one preset range nor in another preset range), the identity authentication fails, and if the identity authentication score is between 0.5 and 0.8 (not in a preset range, but within another preset range), the user’s identity is considered uncertain and manual review can be performed.

For example, as shown in Figure 7, the authentication core module can send the information of passing the authentication (authentication successful words), and the specific identity information of the authenticated user to the medical application terminal, and the medical application terminal can display these information, for example: display The system that authenticates the user's identity is "a medical system", the user's hospital "Shenzhen Hospital", the user's department "gynecology" and the user's professional title "attending physician".

It can be seen that in this embodiment, a method for authenticating the professional identity of the user is provided on the basis of authenticating the user's real name, and this method can still work in the absence of 100% authoritative data sources.

The embodiment of the present invention also provides an identity authentication device, the structural diagram of which is shown in Figure 8, which may specifically include:

The credential information acquiring unit 10 is configured to acquire the identity credential information input by the user, the identity credential information including n-dimension information of the user.

The credential information acquisition unit 10 is specifically configured to receive an identity authentication request sent by an application terminal, the identity authentication request includes the identity credential information input by the user, and extract the identity credential information from the identity authentication request; or , for displaying an information input interface, where the information input interface includes a credential information input interface, and receives identity certificate information input by a user from the credential information input interface.

The multimedia acquiring unit 11 is configured to acquire from at least one third-party information system respectively the multimedia information consistent with the information of the m dimensions in the n dimensions acquired by the credential information acquiring unit 10, and obtain at least one set of multimedia information; the n is an integer greater than or equal to m, said m being an integer greater than or equal to 1;

The matching unit 12 is configured to match the information of each dimension in the at least one set of multimedia information acquired by the multimedia acquiring unit 11 with the information of the n dimensions respectively, to obtain at least one set of matching results.

A score calculation unit 13, configured to calculate an identity authentication score according to at least one set of matching results obtained by the matching unit 12.

The score calculation unit 13 is specifically configured to: if each group of matching results includes: whether the information of each dimension in a group of multimedia information matches or does not match the information of the above n dimensions, then according to each Whether the information of each dimension in the group matching results matches or does not match the information, and the preset scoring strategy, counting the total score corresponding to each group of matching results; according to the total score corresponding to the at least one group of matching results respectively , to calculate the identity authentication score.

Among them, the preset scoring strategy includes: for a matching information in a set of matching results, the corresponding score is the first value; for an unmatching information in a group of matching results, the corresponding scoring is the second value, and for a piece of information that is not matched in a group of matching results, the corresponding score is the third value; the total score corresponding to each group of matching results is the sum of the information of each dimension in a group of multimedia information The sum of the scoring values corresponding to the matching results.

When the score calculation unit 13 calculates the identity authentication score according to the total score corresponding to the at least one group of matching results, the specific user calculates the total score corresponding to each group of matching results, and matches with the corresponding group. The ratio of the highest possible score corresponding to the result; the function calculation value of the ratio corresponding to each group of matching results is used as the identity authentication score.

When the score calculation unit 13 uses the function calculation value of the ratio corresponding to each group of matching results as the identity authentication score, it is specifically configured to use the sum of the ratios corresponding to each group of matching results as the The identity authentication score, or the weighted sum of the ratios corresponding to the matching results of each group is used as the identity authentication score.

An authentication unit 14, configured to pass the user's identity authentication if the identity authentication score calculated by the score calculation unit 13 is within a preset range. If the identity authentication score is not within the preset range, the identity authentication of the user fails.

Further, in addition to the above structure, the identity authentication device may also include: a credential information processing unit 15 and an authorization unit 16, wherein:

The credential information processing unit 15 is configured to if the credential information acquisition unit 10 acquires information of a plurality of identity certificates input by the user, and there is at least one information of the same dimension between the information of any two identity certificates; Between the certificate information, the information of the same dimension is matched, and if all the information of the same dimension is matched, the multimedia acquisition unit 11 is notified to execute the step of obtaining at least one set of multimedia information.

Further, the credential information processing unit 15 is configured to send an authentication request to a third-party authentication device, and the authentication request is used to request the third-party authentication device to authenticate certain information in the n-dimensional information ; Notifying the multimedia acquisition unit 11 to execute the step of obtaining at least one set of multimedia information when receiving the authentication passing information returned by the third-party authentication device according to the authentication request.

The authorization unit 16 is configured to send an authorization request to the application terminal, the authorization request is used to request the application terminal to authorize the identity authentication device to obtain multimedia information in the certain third-party information system; if the application terminal receives the According to the authorization confirmation information returned by the authorization request, the multimedia acquisition unit 11 is notified to acquire multimedia information consistent with information in m dimensions in the n dimensions from the certain third-party information system.

It can be seen that in the identity authentication device of this embodiment, after the certificate information acquisition unit 10 obtains the information of the n dimensions in the identity certificate information, the multimedia acquisition unit 11 will obtain the information in the n dimensions from at least one third-party information system respectively. For multimedia information with consistent information in m dimensions, the matching unit 12 matches the information of each dimension in each group of multimedia information obtained with the information of the above n dimensions respectively, and finally the score calculation unit 13 is based on at least one group of matching information obtained. As a result, after the identity authentication score is calculated, the authentication unit 14 performs identity authentication of the user according to the identity authentication score. In this way, by obtaining multimedia information about the user from a third-party information system, and comparing the multimedia information with the ID information entered by the user, it can be further determined from various information whether the ID information entered by the user is authentic, The user's identity authentication provides security guarantee; and it is not limited to the real-name authentication of users through some authoritative organizations, but can be extended to the authentication of certain types of user identities (such as professional identities) that do not have authority authentication.

The embodiment of the present invention also provides a server, the structural diagram of which is shown in FIG. (eg, one or more processors) and memory 21, and one or more storage media 22 (eg, one or more mass storage devices) for storing application programs 221 or data 222 . Wherein, the memory 21 and the storage medium 22 may be temporary storage or persistent storage. The program stored in the storage medium 22 may include one or more modules (not shown in the figure), and each module may include a series of instruction operations on the server. Furthermore, the central processing unit 20 may be configured to communicate with the storage medium 22, and execute a series of instruction operations in the storage medium 22 on the server.

Specifically, the application program 221 stored in the storage medium 22 includes an application program for identity authentication, and the program may include the certificate information acquisition unit 10, the multimedia acquisition unit 11, the matching unit 12, and the score calculation unit in the above-mentioned identity authentication device. 13. The authentication unit 14, the credential information processing unit 15 and the authorization unit 16, which will not be described in detail here. Furthermore, the central processing unit 20 may be configured to communicate with the storage medium 22, and execute a series of operations corresponding to the identity authentication application program stored in the storage medium 22 on the server.

The server can also include one or more power supplies 23, one or more wired or wireless network interfaces 24, one or more input and output interfaces 25, and/or, one or more operating systems 223, such as WindowsServerTM, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM, etc.

The steps performed by the identity authentication device described in the foregoing method embodiments may be based on the structure of the server shown in FIG. 9 .

An embodiment of the present invention also provides a storage medium, the storage medium stores a plurality of instructions, and the instructions are suitable for being loaded by a processor and executing the identity authentication method as performed by the above-mentioned identity authentication device.

The embodiment of the present invention also provides a server, including a processor and a storage medium, and the processor is configured to implement various instructions;

The storage medium is used to store a plurality of instructions, and the instructions are used to be loaded by the processor and execute the identity authentication method as performed by the above-mentioned identity authentication device.

Those of ordinary skill in the art can understand that all or part of the steps in the various methods of the above-mentioned embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable storage medium, and the storage medium can include: Read Only Memory (ROM), Random Access Memory (RAM), Magnetic Disk or Optical Disk, etc.

The identity authentication method, device and storage medium provided by the embodiment of the present invention are described above in detail. In this paper, specific examples are used to illustrate the principle and implementation of the present invention. The description of the above embodiment is only for helping to understand the present invention. The method of the invention and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present invention, there will be changes in the specific implementation and scope of application. In summary, the content of this specification should not be understood To limit the present invention.

Claims (14)

1. An identity authentication method, characterized in that, comprising: Acquiring identity document information input by the user, where the identity document information includes n-dimension information of the user; Acquiring multimedia information consistent with the information of m dimensions in the n dimensions from at least one third-party information system to obtain at least one set of multimedia information; the n is an integer greater than or equal to m, and the m is greater than or equal to an integer equal to 1; matching the information of each dimension in the at least one set of multimedia information with the information of the n dimensions respectively, to obtain at least one set of matching results; calculating an identity authentication score based on the at least one set of matching results; If the identity authentication score is within a preset range, the user's identity authentication is passed. 2. The method according to claim 1, wherein the identity document information is an identity document image, and after obtaining the identity document information input by the user, further comprising: cutting the ID card image according to the image cutting technology to obtain a cutting image; and then recognizing the cutting image according to the character recognition technology to obtain the structured information of the n dimensions. 3. The method of claim 1, wherein, The acquiring the identity document information input by the user includes: acquiring the information of multiple identity documents input by the user, and the information of any two identity documents has at least one information of the same dimension; After the acquisition of the identity document information input by the user, it also includes: matching the information of the same dimension between the information of any two identity documents. Steps to group multimedia messages. 4. The method according to claim 1, characterized in that, after obtaining the identity document information input by the user, the method further comprises: Sending an authentication request to a third-party authentication device, where the authentication request is used to request the third-party authentication device to authenticate some of the information in the n dimensions; The step of obtaining at least one set of multimedia information is performed when receiving the authentication passing information returned by the third-party authentication device according to the authentication request. 5. The method according to claim 1, wherein the multimedia information consistent with the information of m dimensions in the n dimensions is respectively obtained from a third-party information system in the at least one third-party information system , the method also includes: sending an authorization request to the application terminal, where the authorization request is used to request the application terminal to authorize the identity authentication device to obtain multimedia information in the certain third-party information system; If the authorization confirmation information returned by the application terminal according to the authorization request is received, the multimedia information consistent with the information in the m dimensions in the n dimensions is obtained from the certain third-party information system. 6. The method according to any one of claims 1 to 5, wherein if each group of matching results includes: whether the information of each dimension in a group of multimedia information matches or does not match the information of the n dimensions The information obtained; then the calculation of the identity authentication score according to the at least one set of matching results specifically includes: According to the information of whether the information of each dimension in each group of matching results is matched or not matched, and the preset scoring strategy, count the total score value corresponding to each group of matching results; calculating the identity authentication score according to the total scores respectively corresponding to the at least one group of matching results; Wherein, the preset scoring strategy includes: For information that matches one item in a set of matching results, the corresponding score is the first value; for information that does not match one item in a set of matching results, the corresponding score is the second value; if a set of matching results If one item of information is not matched, the corresponding score is the third value; The total score value corresponding to each group of matching results is the sum of the score values corresponding to the matching results of information of each dimension in a group of multimedia information. 7. The method according to claim 6, wherein the calculation of the identity authentication score according to the total score corresponding to the at least one set of matching results includes: Calculate the ratio of the total score corresponding to each group of matching results to the highest possible score corresponding to the corresponding group of matching results; The function calculation value of the ratio corresponding to each group of matching results is used as the identity authentication score. 8. The method according to claim 7, wherein the function calculation value of the ratio corresponding to each group of matching results is used as the identity authentication score, specifically comprising: The sum of the ratios corresponding to each group of matching results is used as the identity authentication score, or the weighted sum of the ratios corresponding to each group of matching results is used as the identity authentication score. 9. An identity authentication device, comprising: A certificate information acquisition unit, configured to obtain identity certificate information input by a user, where the identity certificate information includes n-dimensional information of the user; The multimedia acquisition unit is used to acquire multimedia information consistent with the information of m dimensions in the n dimensions from at least one third-party information system, and obtain at least one set of multimedia information; the n is an integer greater than or equal to m, The m is an integer greater than or equal to 1; A matching unit, configured to match the information of each dimension in the at least one set of multimedia information with the information of the n dimensions respectively, to obtain at least one set of matching results; A score calculation unit, configured to calculate an identity authentication score according to the at least one set of matching results; An authentication unit, configured to pass the user's identity authentication if the identity authentication score is within a preset range. 10. The device according to claim 9, further comprising: a certificate information processing unit; The document information obtaining unit is specifically used to obtain information of multiple identity documents input by the user, and information of any two identity documents has at least one information of the same dimension; The credential information processing unit is configured to match information of the same dimension between the information of any two identity documents, and if each information of the same dimension matches, notify the multimedia acquisition unit to execute the at least A set of steps for multimedia information. 11. The apparatus of claim 10, wherein The credential information processing unit is configured to send an authentication request to a third-party authentication device, and the authentication request is used to request the third-party authentication device to authenticate certain information in the n dimensions of information; when receiving The third-party authentication device notifies the multimedia acquisition unit to execute the step of obtaining at least one set of multimedia information according to the authentication passing information returned by the authentication request. 12. Apparatus according to any one of claims 9 to 11, wherein The score calculation unit is specifically configured to: if each group of matching results includes: whether the information of each dimension in a group of multimedia information matches or does not match the information of the n dimensions, then according to each Information about whether the information of each dimension in the group matching results matches or does not match, and the preset scoring strategy, counting the total score value corresponding to each group of matching results; Score, calculating the identity authentication score; The calculating the identity authentication score according to the total score corresponding to the at least one group of matching results respectively includes: calculating the total score corresponding to each group of matching results respectively, and the highest possible score corresponding to the matching result of the corresponding group The ratio of values; the function calculation value of the ratio corresponding to each group of matching results is used as the identity authentication score. 13. A storage medium, characterized in that the storage medium stores a plurality of instructions, and the instructions are suitable for being loaded by a processor and executing the identity authentication method according to any one of claims 1 to 8. 14. A server, characterized in that it includes a processor and a storage medium, the processor is configured to implement various instructions; The storage medium is used to store a plurality of instructions, and the instructions are used to be loaded by a processor and execute the identity authentication method according to any one of claims 1 to 8.