CN108710833B

CN108710833B - User identity authentication method and mobile terminal

Info

Publication number: CN108710833B
Application number: CN201810388136.2A
Authority: CN
Inventors: 张威; 陈巍伟
Original assignee: Vivo Mobile Communication Co Ltd
Current assignee: Vivo Mobile Communication Co Ltd
Priority date: 2018-04-26
Filing date: 2018-04-26
Publication date: 2020-10-02
Anticipated expiration: 2038-04-26
Also published as: CN108710833A

Abstract

The embodiment of the invention provides a user identity authentication method and a mobile terminal, wherein the method comprises the following steps: determining an authentication mode and an authentication sequence of user identity authentication, wherein the authentication mode comprises at least one of iris identity authentication and face identity authentication; when the iris identity authentication is executed according to the authentication sequence, driving the first light supplement lamp to emit first light, calling the first camera to collect first image data under the first light, and performing iris identification according to the first image data; and when the face identity authentication is executed according to the authentication sequence, driving the second light supplement lamp to emit second light, calling the second camera to collect second image data under the second light, and performing face recognition according to the second image data. The iris recognition and the face recognition can be simultaneously realized, the diversity of user identity authentication is increased, and the efficiency and the safety are both considered.

Description

User identity authentication method and mobile terminal

Technical Field

The present invention relates to the field of communications technologies, and in particular, to a method for authenticating a user identity and a mobile terminal.

Background

With the development of science and technology, mobile terminals such as mobile phones and tablet computers have higher and higher utilization rate in various aspects such as work, study and daily communication of people.

In a mobile terminal, a user stores privacy information such as contact information, communication data, mails, and photos, and also performs operations such as account login and payment.

In order to satisfy the requirements of security for such private information and operations, the identity of a user is generally authenticated by biometric features such as a face and an iris.

However, the mobile terminal often selects one of the biometric features for authentication, if only face recognition is performed, the mobile terminal is not suitable for operations requiring high accuracy, such as payment, due to high error rate, and if only iris recognition is performed, the mobile terminal is not suitable for operations requiring high speed, such as unlocking, due to complicated operations, so that the authentication flexibility of the user identity is poor and the efficiency is low.

Disclosure of Invention

The embodiment of the invention provides a user identity authentication method, which aims to solve the problems of poor user identity authentication flexibility and low efficiency.

In order to solve the technical problem, the invention is realized as follows:

a user identity authentication method is applied to a mobile terminal, wherein the mobile terminal is provided with a first camera, a second camera, a first light supplement lamp and a second light supplement lamp in the same direction, and the method comprises the following steps:

determining an authentication mode and an authentication sequence of user identity authentication, wherein the authentication mode comprises at least one of iris identity authentication and face identity authentication;

when the iris identity authentication is executed according to the authentication sequence, driving the first light supplement lamp to emit first light, calling the first camera to collect first image data under the first light, and performing iris identification according to the first image data;

and when the face identity authentication is executed according to the authentication sequence, driving the second light supplement lamp to emit second light, calling the second camera to collect second image data under the second light, and performing face recognition according to the second image data.

The embodiment of the present invention further provides a mobile terminal, where the mobile terminal is provided with a first camera, a second camera, a first light supplement lamp and a second light supplement lamp in the same direction, and the mobile terminal includes:

the user identity authentication determining module is used for determining an authentication mode and an authentication sequence of user identity authentication, wherein the authentication mode comprises at least one of iris identity authentication and face identity authentication;

the iris identity authentication module is used for driving the first light supplementing lamp to emit first light when the iris identity authentication is executed according to the authentication sequence, calling the first camera to collect first image data under the first light, and performing iris identification according to the first image data;

and the face identity authentication module is used for driving the second light supplementing lamp to emit second light when the face identity authentication is executed according to the authentication sequence, calling the second camera to collect second image data under the second light, and performing face recognition according to the second image data.

The embodiment of the invention also provides a mobile terminal, which comprises a processor, a memory and a computer program which is stored on the memory and can run on the processor, wherein the computer program realizes the steps of the authentication method of the user identity when being executed by the processor.

The embodiment of the invention also provides a computer readable storage medium, wherein a computer program is stored on the computer readable storage medium, and when being executed by a processor, the computer program realizes the steps of the authentication method for the user identity.

In the embodiment of the invention, the authentication mode and the authentication sequence of the user identity authentication are determined, when the iris identity authentication is executed according to the authentication sequence, the first light supplementing lamp is driven to emit first light, the first camera is called to collect first image data under the first light, the iris recognition is carried out according to the first image data, when the face identity authentication is executed according to the authentication sequence, the second light supplementing lamp is driven to emit second light, the second camera is called to collect second image data under the second light, the face recognition is carried out according to the second image data, the iris recognition and the face recognition can be simultaneously realized, the user can flexibly match the authentication sequence according to the actual requirements, the diversity of the user identity authentication is increased, the corresponding authentication sequence is used under different occasions, the efficiency and the safety can be considered, the flexibility of the user identity authentication is improved, and the efficiency of the user identity authentication is improved, moreover, the camera and the light supplement lamp which correspond to the iris recognition and the face recognition are respectively configured for processing, so that high accuracy of the iris recognition and the face recognition can be maintained.

Drawings

Fig. 1 is a flowchart of an embodiment of a method for authenticating a user identity according to the present invention.

Fig. 2 is a diagram illustrating an example of calculation of the visual range for iris recognition according to the present invention.

Fig. 3 is a schematic diagram of a front arrangement of a mobile terminal of the present invention.

FIG. 4 is a diagram illustrating a relationship between a visual range and an illumination range according to the present invention.

Fig. 5 is a flow chart of iris recognition according to the present invention.

Fig. 6 is a flowchart of face recognition according to the present invention.

Fig. 7 is a flowchart of a method for authenticating a user identity according to another embodiment of the present invention.

Fig. 8 is a block diagram of an embodiment of a mobile terminal of the present invention.

Fig. 9 is a block diagram of another embodiment of a mobile terminal of the present invention.

Fig. 10 is a schematic diagram of a hardware structure of a mobile terminal implementing various embodiments of the present invention.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

Referring to fig. 1, a flowchart of an embodiment of the method for authenticating a user identity according to the present invention is shown, which may specifically include the following steps:

step 101, determining an authentication mode and an authentication sequence of user identity authentication.

In a specific implementation, the embodiment of the present invention may be applied to a mobile terminal, for example, a mobile phone, a tablet computer, a wearable device (such as VR (Virtual Reality) glasses, a VR helmet, a smart watch), and the like, which is not limited in this respect.

In the embodiment of the invention, the mobile terminal is provided with the first camera, the second camera, the first light supplement lamp and the second light supplement lamp towards the same direction.

The first camera and the second camera work independently, all belong to cameras, can collect light, project the collected light to the image sensor, convert optical signals into electric signals through the image sensor, and perform digital quantization on the electric signals to obtain image data.

Further, the first camera may filter visible light, collect infrared light for iris recognition, and its field of view (FOV) is typically small, 20 °, 100 °, in order to ensure that the pixels in the iris region are sufficient for iris recognition.

As shown in fig. 2, if the long-edge pixels of the first camera are H, the FOV is a °, and the recognition distance is L, then to ensure the iris recognition accuracy, the number of pixels required to be on the human eye region (1cm) during iris recognition is about 100, and then the following requirements are satisfied:

in order to achieve both the recognition effect and the hardware cost, the first camera is currently a sensor with smaller pixels, typically 2M (1920 × 1080 pixels), and in this case, the FOV of the first camera is preferably 34 °.

Similarly, the second camera can collect visible light and infrared light, and can be used for face recognition, according to the use habit of the user, the distance from the face to the mobile terminal is usually [20cm, 70cm ], and in order to ensure that the whole face is recorded, the FOV of the second camera is usually larger, and is [60 °, 100 ° ], and is preferably 78 °.

The first Light supplement lamp and the second Light supplement lamp work independently of each other, both belong to Light supplement lamps, and can be Light-Emitting diodes (LEDs) or laser lamps, and the like, and emit Light for Light supplement.

The first light supplement lamp is used for supplementing light for iris recognition, so that the illumination range of the first light supplement lamp covers the visual range of the first camera, and the illumination range is [15 degrees and 100 degrees ].

The second light supplement lamp is used for supplementing light for face recognition, so that the illumination range of the second light supplement lamp covers the visual range of the second camera, and the illumination range is [70 degrees and 140 degrees ].

When arranging, because first camera, second camera, first light filling lamp and second light filling lamp are used for carrying out user's authentication, for convenience of customers ' operation, as shown in fig. 3, first camera 301, second camera 302, first light filling lamp 303 and second light filling lamp 304 can set up in mobile terminal's front, and at this moment, first camera 301, second camera 302 also are leading camera.

Further, for being used for iris discernment, when first light filling lamp and first camera head rest were close too, the retina of people's eye can reflect light, leads to iris area details to lose, consequently, first light filling lamp sets up apart from certain distance with first camera usually.

In one example, the distance between the first fill light and the first camera may be [15mm, 90mm ].

For face recognition, the closer the second light supplement lamp and the second camera are, the more the area where the FOV of the second camera overlaps with the illumination range of the second light supplement lamp is, the smaller the light supplement blind area is, and therefore, the second light supplement lamp and the second camera are usually close to each other.

In one example, the distance between the second fill light and the second camera may be [6mm, 90mm ].

Therefore, when the camera is arranged, the first camera can be located on one side of the second camera, the second light supplement lamp can be located on the other side of the second camera, and the first light supplement lamp can be located on the other side of the second light supplement lamp relative to the second camera (namely, the second camera is located on one side of the second light supplement lamp, and the first light supplement lamp is located on the other side of the second light supplement lamp).

In one example, as shown in fig. 4, the first camera 401 is located at the left side of the second camera 402, the second fill-in light 404 is located at the right side of the second camera 402, and the first fill-in light 403 is located at the right side of the second fill-in light 404.

In this example, if the FOV (i.e., α) of the first camera 401 is 34 ° and the FOV (i.e., β) of the second camera is 78 °, the illumination range (i.e., γ) of the first fill-in lamp 403 is 26 ° and the illumination range (i.e., θ) of the second fill-in lamp 404 is 120 °.

Of course, the above-mentioned arrangement is only an example, and when the embodiment of the present invention is implemented, other arrangement manners may be set according to actual situations, for example, the first camera, the second camera, the first fill-in light lamp and the second fill-in light lamp may be set on the back of the mobile terminal, the first camera is located on one side of the first fill-in light lamp, the second camera is located on the other side of the first fill-in light lamp, and the like, which is not limited in this embodiment of the present invention. In addition, besides the above arrangement, a person skilled in the art may also adopt other arrangements according to actual needs, and the embodiment of the present invention is not limited to this.

When the user identity authentication is performed, the mobile terminal may determine an authentication method and an authentication sequence of the user identity authentication, and sequentially execute the authentication method according to the authentication sequence.

The authentication mode comprises at least one of iris identity authentication and face identity authentication.

The authentication sequence is an execution sequence of the authentication mode, and includes a sequence of the execution modes and a logic condition of the execution mode (if the execution mode passes, the execution mode continues, and if the execution mode fails, the execution mode terminates).

102, when the iris identity authentication is executed according to the authentication sequence, driving the first light supplement lamp to emit first light, calling the first camera to collect first image data under the first light, and performing iris identification according to the first image data.

When each authentication mode is executed according to the authentication sequence, if iris identity authentication is executed, the processor sends a control instruction to the driving chip of the first light supplement lamp, and the driving chip drives the first light supplement lamp to emit first light according to a first mode suitable for iris recognition according to the control instruction so as to perform light supplement processing on the iris recognition.

In addition, the processor sends a control instruction to the first camera, and the first camera collects first light rays reflected to the first camera when encountering other objects according to the control instruction so as to generate first image data and transmit the first image data to the processor.

The processor performs iris recognition based on the first image data to realize iris identity authentication.

In one embodiment of the present invention, as shown in FIG. 5, step 102 may include the following sub-steps:

and a sub-step S11 of detecting human eye data in the first image data.

In the embodiment of the present invention, the human eye data may be detected in the first image data by means of feature point positioning or the like.

A substep S12, when the human eye data is detected, determining whether the first brightness parameter meets a preset first brightness condition; if so, go to substep S13, and if so, go to substep S16.

If human eye data are detected in the first image data, the first brightness parameter of the first image data can be counted, so that the first image data has the first brightness parameter, and whether the first brightness parameter meets a first brightness condition required by iris recognition is judged.

In one example of the first brightness condition, it may be determined whether the first brightness parameter is within a specified first brightness range, and if so, the first brightness condition is determined to be met, otherwise, the first brightness condition is not met.

And a substep S13 of extracting a target iris feature from the human eye data and matching the target iris feature with a preset reference iris feature.

And a substep S14 of determining that the iris identity authentication is passed when the matching is successful.

And a substep S15 of determining that the iris authentication is not passed when the matching fails.

If the first brightness parameter meets a preset first brightness condition, the target iris feature can be extracted from the human eye data and matched with a reference iris feature which is recorded in advance as a sample.

If the matching of the target iris features and the reference iris features is successful, the iris identity authentication is determined to be passed, otherwise, if the matching of the target iris features and the reference iris features is failed, the iris identity authentication is determined not to be passed.

And a substep S16 of adjusting the exposure parameters.

If the first brightness parameter does not meet the preset first brightness condition, the exposure parameter can be adjusted, the first light supplementing lamp is driven again to emit the first light according to the preset first mode, the first camera is called again to collect the first image data under the first light, and iris recognition is carried out again.

A substep S17, when the human eye data is not detected, determining whether a preset first time is exceeded; if yes, go to substep S18, otherwise go to substep S19.

And a substep S18 of determining that the iris identity authentication is not passed.

And a substep S19 of generating a prompt for moving the eye position.

If no human eye data is detected in the first image data, judging whether the time spent for identification exceeds a preset first time, namely judging whether the time is overtime.

If the time is out, the iris identity authentication is determined not to be passed, otherwise, prompt information aiming at the position of the moving eye is generated, the user is prompted to move the head, and the eye is moved into the first image data.

And the first light supplementing lamp is driven again to emit first light according to a preset first mode, the first camera is called again to collect first image data under the first light, and iris recognition is carried out again.

103, when the face identity authentication is executed according to the authentication sequence, driving the second light supplement lamp to emit second light, calling the second camera to collect second image data under the second light, and performing face recognition according to the second image data.

When each authentication mode is executed according to the authentication sequence, if the face identity authentication is executed, the processor sends a control instruction to the driving chip of the second light supplementing lamp, and the driving chip drives the second light supplementing lamp to emit second light according to a second mode suitable for face recognition according to the control instruction so as to perform light supplementing processing on iris recognition.

In addition, the processor sends a control instruction to the second camera, and the second camera collects second light rays reflected to the second camera by other objects according to the control instruction so as to generate second image data and transmit the second image data to the processor.

The processor performs iris recognition based on the second image data to realize face identity authentication.

In one embodiment of the present invention, as shown in fig. 6, step 103 may include the following sub-steps:

and a substep S21 of detecting face data in the second image data.

In the embodiment of the present invention, the face data may be detected in the second image data by means of feature point positioning and the like.

A substep S22, when the face data is detected, determining whether the second brightness parameter meets a preset second brightness condition; if so, go to substep S23, and if so, go to substep S26.

If the human eye data are detected in the second image data, the second brightness parameter of the second image data can be counted, so that the second image data has the second brightness parameter, and whether the second brightness parameter meets a second brightness condition required by face recognition is judged.

In one example of the second brightness condition, it may be determined whether the second degree parameter is within a specified second brightness range, and if so, the second brightness condition is determined to be met, otherwise, the second brightness condition is not met.

And a substep S23 of extracting target face features from the face data and matching the target face features with preset reference face features.

And a substep S24, determining that the face identity authentication is passed when the matching is successful.

And a substep S25, when the matching fails, determining that the face identity authentication is not passed.

If the second brightness parameter meets a preset second brightness condition, the target face feature can be extracted from the face data and matched with a reference face feature which is input in advance as a sample.

And if the matching of the target face features and the reference face features is successful, determining that the face identity authentication is passed, otherwise, if the matching of the target face features and the reference face features is failed, determining that the face identity authentication is not passed.

And a substep S26 of adjusting the exposure parameters.

And if the brightness of the second image data does not meet the preset second brightness condition, the second light supplement lamp is driven again to emit second light according to a preset second mode, the second camera is called again to collect the second image data under the second light, and the face recognition is carried out again.

A substep S27, when the face data is not detected, determining whether a preset second time is exceeded; if yes, go to substep S28.

And a substep S28 of determining that the face authentication is not passed.

If the face data is not detected in the second image data, judging whether the time spent for recognition exceeds the preset time, namely judging whether the time is overtime.

If the face identification is overtime, the fact that the face identification fails is determined, otherwise, the second light supplement lamp is re-driven to emit second light according to a preset second mode, the second camera is re-called to collect second image data under the second light, and face recognition is carried out again.

Referring to fig. 7, a flowchart illustrating another embodiment of the method for authenticating a user identity according to the present invention is shown, where the method is applied to a mobile terminal, and the mobile terminal is provided with a first camera, a second camera, a first fill-in light and a second fill-in light in the same direction, and the method specifically includes the following steps:

step 701, identifying a user operation triggering user identity authentication.

Step 702, inquiring an authentication mode and an authentication sequence corresponding to the user operation.

In practical applications, a user may perform various user operations in the mobile terminal, such as unlocking, opening a secure area, payment, and the like.

For the user operations, corresponding authentication modes and authentication sequences can be set, and corresponding relations among the user operations, the authentication modes and the authentication sequences are established and stored in a database or other positions, so that the safety is enhanced, the convenience is improved, and the like.

The authentication mode may include at least one of iris identity authentication and face identity authentication.

Further, the authentication order may include at least one of:

1. and executing face identity authentication, confirming that the user identity authentication is passed when the face identity authentication is passed, and confirming that the user identity authentication is not passed when the face identity authentication is not passed.

2. And executing iris identity authentication, confirming that the user identity authentication is passed when the iris identity authentication is passed, and confirming that the user identity authentication is not passed when the iris identity authentication is not passed.

3. And executing iris identity authentication, executing face identity authentication when the iris identity authentication is passed, confirming that the user identity authentication is passed when the face identity authentication is passed, and confirming that the user identity authentication is not passed when the face identity authentication is not passed.

4. And performing iris identity authentication, performing face identity authentication when the iris identity authentication is not passed, confirming that the user identity authentication is passed when the face identity authentication is passed, and confirming that the user identity authentication is not passed when the face identity authentication is not passed.

5. And executing face identity authentication, executing iris identity authentication when the face identity authentication is passed, confirming that the user identity authentication is passed when the iris identity authentication is passed, and confirming that the user identity authentication is not passed when the iris identity authentication is not passed.

6. And executing face identity authentication, executing iris identity authentication when the face identity authentication is not passed, confirming that the user identity authentication is passed when the iris identity authentication is passed, and confirming that the user identity authentication is not passed when the iris identity authentication is not passed.

In practical application, a user may set a corresponding authentication manner and an authentication sequence for different user operations as needed, and of course, the authentication manner and the authentication sequence corresponding to the user operation may also be default for the system, which is not limited in the embodiment of the present invention.

For example, for unlocking, if efficiency is the main priority, face authentication may be performed, when the face authentication is passed, it is determined that user authentication is passed, and unlocking is performed, when the face authentication is not passed, iris authentication is performed, when the iris authentication is passed, it is determined that user authentication is passed, and unlocking is performed, otherwise, it is determined that user authentication is not passed, and unlocking is prohibited.

For another example, for payment, if security is the main factor, iris authentication is performed, and when the iris authentication is passed, it is determined that the user authentication is passed and payment is performed, otherwise, it is determined that the user authentication is not passed and payment is prohibited.

Of course, the authentication sequence is only an example, and when the embodiment of the present invention is implemented, other authentication sequences may be set according to actual situations, which is not limited in the embodiment of the present invention. In addition, besides the above authentication sequence, those skilled in the art may also adopt other authentication sequences according to actual needs, and the embodiment of the present invention is not limited thereto.

When the user identity authentication is triggered through the user operation, the user operation can be identified, and the authentication mode and the authentication sequence corresponding to the user operation can be searched from the preset corresponding relation.

And 703, when the iris identity authentication is executed according to the authentication sequence, driving the first light supplement lamp to emit first light with a first wavelength according to a preset first intensity, calling the first camera to collect first image data under the first light, and performing iris identification according to the first image data.

Step 704, when the face identity authentication is executed according to the authentication sequence, driving the second fill-in light to emit second light with a second wavelength according to a preset second intensity, calling the second camera to collect second image data under the second light, and performing face recognition according to the second image data.

In order to ensure the clarity of the iris image, the first wavelength of the first fill-in light for iris recognition is 750nm, 950nm, preferably 810 nm.

In order to avoid outdoor sunlight interference, the wavelength of the second supplementary lighting lamp used for face recognition by the second supplementary lighting lamp is [850nm, 1050nm ], preferably 940 nm.

In addition, in the control of power, when carrying out iris discernment, the power of first light filling lamp is great, outputs the first light of first intensity (being the luminous intensity), guarantees that iris regional light filling is enough, and when carrying out face identification, the second light filling lamp can output less power, outputs the second light of second intensity (being the luminous intensity), reduces the consumption of electric quantity.

Wherein the first intensity is greater than the second intensity.

Therefore, the light intensity of the first light is greater than the light intensity of the second light.

And luminous intensity of first light filling lamp, second light filling lamp is relevant with the electric current of driving first light filling lamp, second light filling lamp, therefore, the drive chip of first light filling lamp, second light filling lamp can use electric current formula drive chip, through the electric current of changing first light filling lamp of drive, second light filling lamp, can change luminous intensity.

Of course, instead of the current-type driver chip, a voltage-type driver chip may be selected, and the intensity of light emission may be changed by changing the voltage or by changing the duty ratio of on/off of the driver chip without changing the voltage.

It should be noted that, the first mode may further set other parameters, such as brightness, besides the first intensity and the first wavelength, and the second mode may also set other parameters, such as brightness, besides the second intensity and the second wavelength, which is not limited in this embodiment of the present invention.

It should be noted that, for simplicity of description, the method embodiments are described as a series of acts or combination of acts, but those skilled in the art will recognize that the present invention is not limited by the illustrated order of acts, as some steps may occur in other orders or concurrently in accordance with the embodiments of the present invention. Further, those skilled in the art will appreciate that the embodiments described in the specification are presently preferred and that no particular act is required to implement the invention.

Referring to fig. 8, which shows a block diagram of an embodiment of a mobile terminal of the present invention, a first camera, a second camera, a first fill-in light, and a second fill-in light are disposed in the same direction of the mobile terminal 800 shown in fig. 8, which may specifically include the following modules:

a user identity authentication determining module 801, configured to determine an authentication manner and an authentication sequence of user identity authentication, where the authentication manner includes at least one of iris identity authentication and face identity authentication;

the iris identity authentication module 802 is configured to drive the first fill-in light to emit first light when the iris identity authentication is performed according to the authentication sequence, call the first camera to collect first image data under the first light, and perform iris recognition according to the first image data;

and the face identity authentication module 803 is configured to drive the second light supplement lamp to emit second light when the face identity authentication is performed according to the authentication sequence, call the second camera to collect second image data under the second light, and perform face recognition according to the second image data.

In an embodiment of the present invention, an illumination range of the first fill-in light covers a visual range of the first camera, and an illumination range of the second fill-in light covers a visual range of the second camera.

In an embodiment of the present invention, the first camera is located on one side of the second camera, the second fill-in light is located on the other side of the second camera, and the first fill-in light is located on the other side of the second fill-in light relative to the second camera.

In an embodiment of the present invention, the user identity authentication determining module 801 includes:

the user operation identification submodule is used for identifying user operation triggering user identity authentication;

and the corresponding relation query submodule is used for querying the authentication mode and the authentication sequence corresponding to the user operation.

In one embodiment of the invention, the authentication sequence comprises at least one of:

executing the iris identity authentication, executing the face identity authentication when the iris identity authentication is passed, confirming that the user identity authentication is passed when the face identity authentication is passed, and confirming that the user identity authentication is not passed when the face identity authentication is not passed;

executing the iris identity authentication, executing the face identity authentication when the iris identity authentication is not passed, confirming that the user identity authentication is passed when the face identity authentication is passed, and confirming that the user identity authentication is not passed when the face identity authentication is not passed;

executing the face identity authentication, executing the iris identity authentication when the face identity authentication is passed, confirming that the user identity authentication is passed when the iris identity authentication is passed, and confirming that the user identity authentication is not passed when the iris identity authentication is not passed;

and executing the face identity authentication, executing the iris identity authentication when the face identity authentication is not passed, confirming that the user identity authentication is passed when the iris identity authentication is passed, and confirming that the user identity authentication is not passed when the iris identity authentication is not passed.

In one embodiment of the present invention, the light intensity of the first light is greater than the light intensity of the second light;

the iris identity authentication module 802 includes:

the first driving submodule is used for driving the first light supplement lamp to emit first light with a first wavelength according to preset first intensity;

the face identity authentication module 803 includes:

the second driving submodule is used for driving the second light supplement lamp to emit second light rays with second wavelengths according to preset second intensity;

wherein the first intensity is greater than the second intensity.

In one embodiment of the present invention, the iris identity authentication module 802 includes:

the human eye data detection sub-module is used for detecting human eye data in the first image data, and the first image data has a first brightness parameter;

the first brightness condition judgment submodule is used for judging whether the first brightness parameter meets a preset first brightness condition or not when the human eye data are detected; if yes, calling an iris feature matching sub-module, and if not, calling a first exposure parameter adjusting sub-module;

the iris feature matching sub-module is used for extracting target iris features from the human eye data and matching the target iris features with preset reference iris features;

the first determining sub-module is used for determining that the iris identity authentication is passed when the matching is successful;

the second determining sub-module is used for determining that the iris identity authentication is not passed when the matching fails;

the first exposure parameter adjusting submodule is used for adjusting the exposure parameters;

the first time judgment sub-module is used for judging whether the preset first time is exceeded or not when the human eye data is not detected; if yes, calling a third determining submodule; if not, calling a prompt message generation submodule;

a third determining sub-module, configured to determine that the iris identity authentication is not passed;

and the prompt message generation submodule is used for generating prompt messages for moving the positions of the eyes.

In an embodiment of the present invention, the face identity authentication module 803 includes:

the face data detection submodule is used for detecting face data in the second image data, and the second image data has a second brightness parameter;

the second brightness condition judgment submodule is used for judging whether the second brightness parameter meets a preset second brightness condition or not when the face data is detected; if yes, calling a face feature matching sub-module, and if not, calling a second exposure parameter adjusting sub-module;

the face feature matching sub-module is used for extracting target face features from the face data and matching the target face features with preset reference face features;

the fourth determining sub-module is used for determining that the face identity authentication is passed when the matching is successful;

the fifth determining sub-module is used for determining that the face identity authentication is not passed when the matching fails;

the second exposure parameter adjusting submodule is used for adjusting the exposure parameters;

the second time judgment submodule is used for judging whether the preset second time is exceeded or not when the face data is not detected; if yes, calling a sixth determining submodule;

and the sixth determining sub-module is used for determining that the face identity authentication is not passed.

The mobile terminal provided in the embodiment of the present invention can implement each process implemented by the mobile terminal in the method embodiments of fig. 1 to fig. 7, and is not described herein again to avoid repetition.

Referring to fig. 9, which is a block diagram illustrating another embodiment of the mobile terminal of the present invention, the mobile terminal 900 shown in fig. 9 includes a processor 910, a driving chip 920, and a first camera 931, a second camera 932, a first fill-in light 941 and a second fill-in light 942 that are disposed in the same direction; the processor package 910 includes a user identity authentication determination module 911, a user identity authentication control module 912, an iris recognition module 913, and a face recognition module 914;

a user identity authentication determining module 911, configured to determine an authentication manner and an authentication sequence of user identity authentication, where the authentication manner includes at least one of iris identity authentication and face identity authentication;

a user identity authentication control module 912, configured to send a control instruction to the first camera 931, the second camera 932, and the driver chip 920 when executing the authentication manner according to the authentication sequence;

the driving chip 920 has one end connected to the processor 910 and the other end connected to the first light supplement lamp 941 and the second light supplement lamp 942, and is configured to drive the first light supplement lamp 941 to emit first light when the iris identity authentication is performed, and drive the second light supplement lamp 942 to emit second light when the face identity authentication is performed;

the first camera 931, connected to the processor 910, configured to acquire first image data under the first light when performing the iris identity authentication;

the second camera 932 is connected to the processor 910, and configured to collect second image data under the second light when performing the face identity authentication,

an iris recognition module 913 configured to perform iris recognition according to the first image data;

and the face recognition module 914 is configured to perform face recognition according to the second image data.

In an embodiment of the present invention, an illumination range of the first fill-in light 941 covers a visual range of the first camera 931, and an illumination range of the second fill-in light 942 covers a visual range of the second camera 932.

In an embodiment of the present invention, the first camera 931 is located at one side of the second camera 932, the second fill-in light 942 is located at the other side of the second camera 932, and the first fill-in light 941 is located at the other side of the second fill-in light 942 relative to the second camera 932.

In one embodiment of the present invention, the user authentication determination module 911 includes:

the driving chip 920 is further configured to drive the first light supplement lamp 941 to emit first light with a first wavelength according to a preset first intensity, and drive the second light supplement lamp 942 to emit second light with a second wavelength according to a preset second intensity;

wherein the first intensity is greater than the second intensity.

In one embodiment of the present invention, the iris recognition module 913 includes:

In one embodiment of the present invention, the face recognition module 914 comprises:

The mobile terminal 1000 includes, but is not limited to: a radio frequency unit 1001, a network module 1002, an audio output unit 1003, an input unit 1004, a sensor 1005, a display unit 1006, a user input unit 1007, an interface unit 1008, a memory 1009, a processor 1010, and a power supply 1011. Those skilled in the art will appreciate that the mobile terminal architecture illustrated in fig. 10 is not intended to be limiting of mobile terminals, and that a mobile terminal may include more or fewer components than those illustrated, or some components may be combined, or a different arrangement of components. In the embodiment of the present invention, the mobile terminal includes, but is not limited to, a mobile phone, a tablet computer, a notebook computer, a palm computer, a vehicle-mounted terminal, a wearable device, a pedometer, and the like.

The mobile terminal is provided with a first camera, a second camera, a first supplementary lighting lamp and a second supplementary lighting lamp in the same direction, and a processor 1010 is used for determining an authentication mode and an authentication sequence of user identity authentication, wherein the authentication mode comprises at least one of iris identity authentication and face identity authentication; when the iris identity authentication is executed according to the authentication sequence, driving the first light supplement lamp to emit first light, calling the first camera to collect first image data under the first light, and performing iris identification according to the first image data; and when the face identity authentication is executed according to the authentication sequence, driving the second light supplement lamp to emit second light, calling the second camera to collect second image data under the second light, and performing face recognition according to the second image data.

It should be understood that, in the embodiment of the present invention, the radio frequency unit 1001 may be used for receiving and sending signals during a message transmission or a call, and specifically, receives downlink data from a base station and then processes the received downlink data to the processor 1010; in addition, the uplink data is transmitted to the base station. In general, radio frequency unit 1001 includes, but is not limited to, an antenna, at least one amplifier, a transceiver, a coupler, a low noise amplifier, a duplexer, and the like. Further, the radio frequency unit 1001 may also communicate with a network and other devices through a wireless communication system.

The mobile terminal provides the user with wireless broadband internet access through the network module 1002, such as helping the user send and receive e-mails, browse webpages, access streaming media, and the like.

The audio output unit 1003 may convert audio data received by the radio frequency unit 1001 or the network module 1002 or stored in the memory 1009 into an audio signal and output as sound. Also, the audio output unit 1003 may also provide audio output related to a specific function performed by the mobile terminal 1000 (e.g., a call signal reception sound, a message reception sound, etc.). The audio output unit 1003 includes a speaker, a buzzer, a receiver, and the like.

The input unit 1004 is used to receive an audio or video signal. The input Unit 1004 may include a Graphics Processing Unit (GPU) 10041 and a microphone 10042, the Graphics processor 10041 Processing image data of still pictures or video obtained by an image capturing device (such as a camera) in a video capturing mode or an image capturing mode. The processed image frames may be displayed on the display unit 1006. The image frames processed by the graphic processor 10041 may be stored in the memory 1009 (or other storage medium) or transmitted via the radio frequency unit 1001 or the network module 1002. The microphone 10042 can receive sound and can process such sound into audio data. The processed audio data may be converted into a format output transmittable to a mobile communication base station via the radio frequency unit 1001 in case of a phone call mode.

The mobile terminal 1000 can also include at least one sensor 1005, such as a light sensor, motion sensor, and other sensors. Specifically, the light sensor includes an ambient light sensor that can adjust the brightness of the display panel 10061 according to the brightness of ambient light, and a proximity sensor that can turn off the display panel 10061 and/or the backlight when the mobile terminal 1000 moves to the ear. As one of the motion sensors, the accelerometer sensor can detect the magnitude of acceleration in each direction (generally three axes), detect the magnitude and direction of gravity when stationary, and can be used to identify the posture of the mobile terminal (such as horizontal and vertical screen switching, related games, magnetometer posture calibration), and vibration identification related functions (such as pedometer, tapping); the sensors 1005 may also include a fingerprint sensor, a pressure sensor, an iris sensor, a molecular sensor, a gyroscope, a barometer, a hygrometer, a thermometer, an infrared sensor, etc., which will not be described in detail herein.

The display unit 1006 is used to display information input by the user or information provided to the user. The Display unit 1006 may include a Display panel 10061, and the Display panel 10061 may be configured in the form of a Liquid Crystal Display (LCD), an Organic Light-Emitting Diode (OLED), or the like.

The user input unit 1007 may be used to receive input numeric or character information and generate key signal inputs related to user settings and function control of the mobile terminal. Specifically, the user input unit 1007 includes a touch panel 10071 and other input devices 10072. The touch panel 10071, also referred to as a touch screen, may collect touch operations by a user on or near the touch panel 10071 (e.g., operations by a user on or near the touch panel 10071 using a finger, a stylus, or any other suitable object or attachment). The touch panel 10071 may include two parts, a touch detection device and a touch controller. The touch detection device detects the touch direction of a user, detects a signal brought by touch operation and transmits the signal to the touch controller; the touch controller receives touch information from the touch sensing device, converts the touch information into touch point coordinates, sends the touch point coordinates to the processor 1010, and receives and executes commands sent by the processor 1010. In addition, the touch panel 10071 may be implemented by various types, such as a resistive type, a capacitive type, an infrared ray, and a surface acoustic wave. In addition to the touch panel 10071, the user input unit 1007 can include other input devices 10072. Specifically, the other input devices 10072 may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a track ball, a mouse, and a joystick, which are not described herein again.

Further, the touch panel 10071 can be overlaid on the display panel 10061, and when the touch panel 10071 detects a touch operation thereon or nearby, the touch operation is transmitted to the processor 1010 to determine the type of the touch event, and then the processor 1010 provides a corresponding visual output on the display panel 10061 according to the type of the touch event. Although in fig. 10, the touch panel 10071 and the display panel 10061 are two independent components for implementing the input and output functions of the mobile terminal, in some embodiments, the touch panel 10071 and the display panel 10061 may be integrated to implement the input and output functions of the mobile terminal, which is not limited herein.

The interface unit 1008 is an interface through which an external device is connected to the mobile terminal 1000. For example, the external device may include a wired or wireless headset port, an external power supply (or battery charger) port, a wired or wireless data port, a memory card port, a port for connecting a device having an identification module, an audio input/output (I/O) port, a video I/O port, an earphone port, and the like. The interface unit 1008 may be used to receive input (e.g., data information, power, etc.) from external devices and transmit the received input to one or more elements within the mobile terminal 1000 or may be used to transmit data between the mobile terminal 1000 and external devices.

The memory 1009 may be used to store software programs as well as various data. The memory 1009 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application program required by at least one function (such as a sound playing function, an image playing function, and the like), and the like; the storage data area may store data (such as audio data, a phonebook, etc.) created according to the use of the cellular phone, and the like. Further, the memory 1009 may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device.

The processor 1010 is a control center of the mobile terminal, connects various parts of the entire mobile terminal using various interfaces and lines, and performs various functions of the mobile terminal and processes data by operating or executing software programs and/or modules stored in the memory 1009 and calling data stored in the memory 1009, thereby integrally monitoring the mobile terminal. Processor 1010 may include one or more processing units; preferably, the processor 1010 may integrate an application processor, which mainly handles operating systems, user interfaces, application programs, etc., and a modem processor, which mainly handles wireless communications. It will be appreciated that the modem processor described above may not be integrated into processor 1010.

The mobile terminal 1000 may also include a power supply 1011 (e.g., a battery) for powering the various components, and the power supply 1011 may be logically coupled to the processor 1010 via a power management system that may be configured to manage charging, discharging, and power consumption.

In addition, the mobile terminal 1000 includes some functional modules that are not shown, and are not described in detail herein.

Preferably, an embodiment of the present invention further provides a mobile terminal, including a processor 1010, a memory 1009, and a computer program stored in the memory 1009 and capable of running on the processor 1010, where the computer program is executed by the processor 1010 to implement each process of the above-mentioned embodiment of the method for authenticating a user identity, and can achieve the same technical effect, and in order to avoid repetition, details are not described here again.

The embodiment of the present invention further provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the computer program implements each process of the above-mentioned embodiment of the method for authenticating a user identity, and can achieve the same technical effect, and in order to avoid repetition, details are not repeated here. The computer-readable storage medium may be a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk.

It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.

Through the above description of the embodiments, those skilled in the art will clearly understand that the method of the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but in many cases, the former is a better implementation manner. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium (such as ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal (such as a mobile phone, a computer, a server, an air conditioner, or a network device) to execute the method according to the embodiments of the present invention.

While the present invention has been described with reference to the embodiments shown in the drawings, the present invention is not limited to the embodiments, which are illustrative and not restrictive, and it will be apparent to those skilled in the art that various changes and modifications can be made therein without departing from the spirit and scope of the invention as defined in the appended claims.

Claims

1. A user identity authentication method is applied to a mobile terminal, and is characterized in that the mobile terminal is provided with a first camera, a second camera, a first light supplement lamp and a second light supplement lamp in the same direction, and the method comprises the following steps:

when the face identity authentication is executed according to the authentication sequence, the second light supplement lamp is driven to emit second light, the second camera is called to collect second image data under the second light, and face recognition is carried out according to the second image data;

the first camera is positioned on one side of the second camera, the second light supplement lamp is positioned on the other side of the second camera, and the first light supplement lamp is positioned on the other side, opposite to the second camera, of the second light supplement lamp;

the determining of the authentication mode and the authentication sequence of the user identity authentication comprises:

identifying a user operation triggering user identity authentication;

inquiring an authentication mode and an authentication sequence corresponding to the user operation;

wherein the iris recognition according to the first image data includes:

detecting human eye data in the first image data, the first image data having a first brightness parameter;

when the human eye data are detected, judging whether the first brightness parameter meets a preset first brightness condition;

if yes, extracting target iris features from the human eye data, matching the target iris features with preset reference iris features, determining that the iris identity authentication is passed when the matching is successful, and determining that the iris identity authentication is not passed when the matching is failed;

if not, adjusting exposure parameters;

when the human eye data are not detected, judging whether the preset first time is exceeded or not;

if yes, determining that the iris identity authentication is not passed;

and if not, generating prompt information for moving the eye position.

2. The method of claim 1, wherein an illumination range of the first fill light covers a visual range of the first camera and an illumination range of the second fill light covers a visual range of the second camera.

3. The method of any of claims 1-2, wherein the authentication order comprises at least one of:

4. The method of any one of claims 1-2, wherein the light intensity of the first light is greater than the light intensity of the second light.

5. The method according to any one of claims 1-2, wherein said performing face recognition from said second image data comprises:

detecting face data in the second image data, wherein the second image data has a second brightness parameter;

when the face data is detected, judging whether the second brightness parameter meets a preset second brightness condition;

if yes, extracting target face features from the face data, matching the target face features with preset reference face features, determining that the face identity authentication is passed when the matching is successful, and determining that the face identity authentication is not passed when the matching is failed;

if not, adjusting exposure parameters;

when the face data is not detected, judging whether the preset second time is exceeded or not; and if so, determining that the face identity authentication is not passed.

6. The utility model provides a mobile terminal, its characterized in that, mobile terminal is provided with first camera, second camera, first light filling lamp and second light filling lamp towards same direction, mobile terminal includes:

the face identity authentication module is used for driving the second light supplementing lamp to emit second light when the face identity authentication is executed according to the authentication sequence, calling the second camera to collect second image data under the second light, and performing face recognition according to the second image data; the first camera is positioned on one side of the second camera, the second light supplement lamp is positioned on the other side of the second camera, and the first light supplement lamp is positioned on the other side, opposite to the second camera, of the second light supplement lamp;

the user identity authentication determination module comprises:

the corresponding relation query submodule is used for querying an authentication mode and an authentication sequence corresponding to the user operation;

wherein, the iris identity authentication module includes:

7. The mobile terminal of claim 6, wherein an illumination range of the first fill-in light covers a visual range of the first camera, and an illumination range of the second fill-in light covers a visual range of the second camera.

8. A mobile terminal according to any of claims 6 to 7, wherein the authentication order comprises at least one of:

9. The mobile terminal according to any of claims 6-7, wherein the light intensity of the first light is greater than the light intensity of the second light.

10. The mobile terminal according to any one of claims 6 to 7, wherein the face identity authentication module comprises:

11. A mobile terminal, characterized in that it comprises a processor, a memory and a computer program stored on said memory and executable on said processor, said computer program, when executed by said processor, implementing the steps of the authentication method of a user identity according to any one of claims 1 to 5.

12. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out the steps of the method of authentication of a user identity according to any one of claims 1 to 5.