Privacy-protection fingerprint authentication method and system based on token

Abstract

The invention provides an identity authentication method and system using fingerprints in an open network. The identity authentication system comprises an authentication terminal, an authentication server, a token and an authentication information issuance server. The identity authentication method comprises the following steps: the authentication terminal or the token calculates a hash value in the event that transformation detailed points and a random binary string are cascaded with each other, the token encrypts the hash value, the authentication terminal transfers the encryption result of the token to the authentication server, and the authentication server cascades the encrypted binary string with each stored template set value and calculates a cascaded hash value; and the authentication server judges whether identity of a user is accepted according to the number of the transformation detailed points matched with the hash value. By adopting the identity authentication method and system, private fingerprint data of the user and the authentication server is not leaked to each other during the fingerprint identity authentication process in an open network environment, which protects data privacy of the user and the authentication server.

Description

technical field [0001] The invention relates to the fields of biometric identification technology and information security, in particular to a fingerprint identity authentication method and system capable of protecting user privacy and fingerprint authentication process security in an open network. Background technique [0002] Fingerprint-based identification is traditionally completed locally, that is, fingerprint template storage, fingerprint image collection, processing, and matching are all completed in one place or on one device. Even if the network is used, the relevant data is usually closed. transmission in a secure local area network. At present, more and more commercial activities rely on fingerprints to identify users' identities, such as large-amount bank withdrawals and pension collections. With the widespread use of the network, more and more fingerprint-based authentication applications need to be carried out in an open network environment. At present, the ...

AI Technical Summary

Problems solved by technology

2) Biometric features are stable and invariant, once leaked, they cannot be revoked and updated in the database

[0006] The database on the server side in the above patents stores the biometric template "naked", and the matching process is also a direct fingerprint comparison, so it does not have the privacy protection of the server side, which may cause the user data on the server side to be abused, and once the server is hacked. , there is a risk of large-scale leakage of user sensitive information

Images