Source: Interface News
Author: Gao Jia
On May 21, 2023, the press conference of the Daxing Airport Line of Beijing's Beijing Metro was held, marking the era of the "hand -brushing" ride in the opening of the Beijing rail transit.In an interview with the media, the Beijing Municipal Transportation Commission said that the pilot of the palm -to -hand ride service at the Daxing Airport Line was the first time that the palm -patterned biometric technology was applied to the rail transit scene for the first time.
Daxing Airport Line "Palm" payment technology is provided by WeChat payment.On May 21, Tencent officially released WeChat "hand -brushing" payment. This is another new payment method launched by WeChat after scanning code payment, fingerprint payment, and face payment.
WeChat introduces that the "palm" payment uses "palm pattern+palm vein" identification technology, which has the characteristics of non -media, non -contact, high convenience, and high safety.
In fact, "hand -handed" payment is not new technology.As early as September 2020, Amazon has developed Amazon ONE, palm palmist recognition technology, and was initially applied to the payment link of retail physical stores to achieve "hand" checkout.In March 2023, according to Reuters, Amazon's palm recognition payment technology "Amazon One" has been extended to more than 200 places around the world.
In China, mobile payment services are mainly provided and tried in the field of palm -pattern recognition.In August 2021, the "Palm" payment began to conduct pre -research internal technology in WeChat.The Tianyancha APP shows that in March 2022, Tencent applied for the patent of the "Palm Equipment" and was authorized on July 26. It is estimated that it will expire on March 24, 2032.On October 14, 2022, the "WeChat Palm Payment" applet was launched, and some merchants in Shenzhen were tested to test the palm payment equipment.
In February 2022, the State Intellectual Property Office disclosed Ali's invention patent, the patent name is "identity recognition method, device, terminal, and storage medium".Method equipment.Tianyancha APP shows that recently, multiple palm -patterned payment patents of Alipay (Hangzhou) Information Technology Co., Ltd. have been authorized, including palm line identification equipment and cashier equipment.
Zhong Dexing, a professor at the School of Automation of Xi'an Jiaotong University, told the interface news that the research on the academic level of palm pattern recognition technology has been carried out for a long time. The technical advantage of "handling" payment is first reflected in its security.
"Palmprint recognition depends on the multi -mode recognition achieved by the combination of palm lines and palm veins, that is, dual verification." Zhong Dexing said, "In terms of hardware equipment, the identification equipment uses visible light and infrared supplement technology,With both visible light and near -infrared camera, users only need to show their palms to the camera, and the device can collect palm lines and palm vein data simultaneously. These two types of data are difficult to forge at the same time. "
Zhong Dexing also mentioned the characteristics of high -precision payment of "hand -brushing".It has advantages in safety, and it is still difficult to achieve large -scale promotion.
"In the field of third -party payment, palm pattern recognition is difficult to replace QR code, and it lacks advantages in terms of cost performance and efficiency." Zhong Dexing pointed out that "specifically in different application scenarios, this payment method can be possible to pay.Provide you with one more choice. "
Before the "hand -brushing" payment technology landed, there was no lack of voices in the industry that biometric payment methods were an important trend of mobile payment in the future.At present, the application of palm line identification technology to the payment field has also aroused concern about information security and privacy protection.
"The palm vein recognition is indeed safer than the face, but is the legislation and supervision in this field improved?" A few days ago, some netizens asked questions about the supervision of "palm" payment technology.In this regard, the relevant person in charge of Tencent Pay said recently that the "hand -brushing" ride service can effectively ensure the safe use of users by using data desensitization and data encryption technology.Essence
Three US Senate members pointed out in a public letter to Amazon CEO that the palm pattern is the same biometric information as facial features.If the leak is likely to affect the user.
Beijing Guantao Zhongmao (Shanghai) Law Firm partner and lawyer Wu Danjun told the interface news that the United States has not yet faced the protection of biometrics and biometric information on the federal level, but legislation and practice in this fieldExplore the continuous development of the application of biometric technology.
The United States promulgated the Privacy Act of Face recognition in 2019 to regulate the commercialization of face recognition information.The US Senate reviewed the National Biometric Information Privacy Act in 2020, intending to regulate the collection and disclosure of biometrics and biometric information through the bill to protect the right of personal information subjects, and clarify the enterprise's protection of biometrics and biological informationobligation.
"Recently, the Federal Trade Commission issued a policy statement on the use of biometric data and Article 5 of the Federal Trade Commission Law, emphasizing the cracking down on the use of consumer biometric information for commercial fraud." Wu Danjunintroduce.
China Institute of Information and Communication Research Institute, etc. in 2020, released a research report on biometric privacy protection protection, stating that with the large -scale application of biometric information, the problem of user privacy and security protection has gradually exposed, which has caused them to be exposed.risks of.Biometric information is highly bound to personal identity, and has the characteristics of difficulty changing. Biological information leakage, lack of authorization, and deep falsification seriously threaten the vital interests of the majority of users. The abuse of biometric information will bring serious social problems.
At present, China has not specially formulated management specifications for palm lines and palm vein information.The Personal Information Protection Law, which was officially implemented in November 2021, has special protection for sensitive personal information.According to the national standard information security technology personal information security specifications, palm pattern and palm vein information are personal biometric information, which is the category of sensitive information.
Interface News also noticed that in April 2023, the National Information Technology Standardization Technical Committee released news on its official public account that the committee is promoting human biological characteristics to identify multi -mode recognition of the technical specificationsStandard work.
In addition to the current application of traffic scenarios, "hand -handed" payment is still expanding in the fields of office, campus, fitness, retail, catering and other fields.In the case where technical related standards have not yet been perfected, what measures should technical service providers and regulators take the information security risks that may bring about "handling" payment?
Wu Danjun believes that service providers must first ensure the safety of biometric information, carry out the impact assessment of personal information protection beforehand, and follow the minimum necessary principles to clarify the purpose, processing method, collection scope, scope of collection and collection of biometric information in the scene.Guarantee measures.Secondly, the legitimate rights and interests of the subject of personal information need to be guaranteed, and the personal information subject to be paid by the "hand -handed" payment is clearly notified and obtained a separate consent in accordance with the personal information protection law.At the same time, it also needs to clearly inform the personal information subject to withdraw the consent and respond to its rights request in a timely manner.Finally, it needs to respond to the risk of personal information infringement in a timely manner, strengthen risk monitoring when conducting biometric information processing activities, and timely take remedial measures when data security defects and vulnerabilities and other risks are found.
"The supervisor needs to be combined with the technical characteristics and potential risks of the payment of the" palm "to be introduced and the corresponding legal documents are implemented as soon as possible to standardize the biometric information processing behavior of service providers.Placing the "Payment advantage and risk prevention related to the rule of law, improve the protection consciousness and protection ability of the subject of personal information." Wu Danjun said.
Wu Danjun also suggested that users and consumers should carefully consider the necessity of taking the payment method before choosing to use the "palm", and carefully examine whether the service provider has the corresponding qualifications and whether it is in the privacy policy and other documents and other documents.Clearly disclose personal information processing rules.
"When you no longer use the" Palm "payment, it is recommended that users contact the service provider in a timely manner or withdraw the consent in accordance with the manner provided by the service provider to delete the corresponding biological identification information." Wu Danjun suggested that "users and consumers should improveWhen information sensitivity and awareness of rights protection, when their personal information rights and interests are infringed, they actively protect their rights and interests in accordance with the laws and regulations of the Personal Information Protection Law. "
