Biological characteristic-based security verification method, client and server

Abstract

The invention discloses a biological characteristic-based security verification method, a client and a server. The method includes the following steps that: a client sends an authentication request to a server; after receiving the authentication request, the server returns an authentication request reply message; the client receives a fingerprint image for verification inputted by a user, obtains a corresponding biometric characteristic template ID, compares the biometric characteristic template ID with a locally-stored biometric characteristic template ID in an enabling record, generates an authentication response message containing the acquired biometric characteristic template ID, and sends the authentication response message to the server; the server receives the authentication response message and compares the biometric characteristic template ID in the authentication response message with a locally-stored biometric characteristic template ID in a corresponding user record; if the biometric characteristic template ID in the authentication response message is matched with the locally-stored biometric characteristic template ID in the corresponding user record, verification is successful, otherwise, an error is reported. The present invention also provides a client and a server corresponding to the above method. With the biological characteristic-based security verification method, the client and the serve of the invention adopted, the risk of personal biological characteristic leakage when personal biological characteristics are uploaded to a network can be avoided, and the network traffic of network transmission can be decreased, and therefore, higher security can be achieved.

Description

technical field [0001] The invention belongs to the technical field of identity authentication, and in particular relates to a biometric-based security verification method, a client and a server in the identity authentication process. Background technique [0002] In the traditional password verification process, a password needs to be entered, and every time the password is entered, there is a risk of leakage, such as a keylogging Trojan horse, physical peeping, etc. Due to the characteristics of strong stability, personal uniqueness, and high algorithm accuracy of fingerprints, many devices have begun to use the fingerprint verification function in recent years. For example, online payment can be realized through fingerprint verification, which can improve user experience and increase payment security. [0003] In the prior art, during the online fingerprint verification process, the client sends the user's fingerprint data (fingerprint image or fingerprint feature data) t...

AI Technical Summary

Problems solved by technology

Because the fingerprint data needs to be transmitted to the server, there is a risk of fingerprint data leakage during the upload process. The fingerprint data is personal privacy data, and the user does not necessarily agree to upload it. At the same time, leakage will cause reputational risks.

Even if the user agrees to upload the fingerprint data, network traffic will be consumed during the fingerprint data upload process, and the server will also need to compare the fingerprint data, which will consume additional computing resources and storage resources

Images