Authentication system based on biological characteristics and identification authentication method thereof

Abstract

The invention relates to an authentication system and an authentication method based on biological features. The method comprises the steps of conducting centralized storage and biological feature comparison operation for a large quantity of user biological feature templates according to user ID identifiers stored on a memory on a limited use machine and corresponding biding ID identifiers thereof on a biological authentication device of a digital processing terminal; separating the biological feature templates from the authentication function of the limited use machine; allocating to digital processing terminals (including PCs, notebooks or mobile phones, PDAs of users)of users as biological authentication device-storing the biological feature templates with decentralization and operating and processing biological features to be authenticated with decentralization so as to conduct comparison with the biological feature templates pre-stored on the respective digital processing terminals; feeding back comparison and verification results to the limited use machines; authorizing to conduct equal authentication of the biological authentication device ID identifier on the digital processing terminal for the corresponding binding user ID identifiers by the centralized authentication of the limited use machine according to the comparison verification result data.

Description

technical field [0001] The invention generally belongs to the category of security authentication systems, and relates to an authentication system based on biometric features and an identity authentication method thereof. Background technique [0002] Generally, the security scope of an information system is defined in five categories of security technologies, namely: identity authentication, access control, data confidentiality, data integrity, and non-repudiation. Identity authentication is the most basic security requirement of an application system. The traditional identity identification and authentication method is to use passwords or user interface module (PIM) artifacts (such as user cards) or their combination. These methods are all through the authentication of passwords or other artifacts, and users indirectly identify and authenticate the identity of the holder through the control of these objects, rather than the identification of the user's "self". The disadva...

AI Technical Summary

Problems solved by technology

Although in the prior art, some application servers and biometric authentication servers are separated and run on different servers to separate business processing and biometric authentication processing, it is difficult for users to generate sudden biometric authentication data during the peak period of centralized request login. The biometric authentication server is faced with the risk of crashing (downtime); and in the middle of the night, the number of user requests for biometric authentication is relatively small, and the biometric authentication server may be relatively idle

Moreover, from an application level, biometric authentication is different from password authentication—users can control and change passwords at any time (one of the disadvantages of password authentication is that it is difficult for users to remember long passwords that are frequently changed, and short passwords are very uncomfortable. Security), the use of biometric data for identity authentication requires users to leave their constant biometric data templates in all merchants, which will bring trouble to the user's personal privacy and also bring danger to the authentication system. A certain user's biometric data templates are kept in many merchants, because all the biometric characteristics of a person are constant, and some of their biometric data should also be consistent

Images