On-line fingerprint authentication system and method based on bidirectional privacy protection

Abstract

The invention discloses an on-line fingerprint authentication system and method based on bidirectional privacy protection. With the system and method, a problem that bidirectional privacy protection of fingerprint data of the user and fingerprint template data is not involved in the prior art can be solved. The system is composed of a trusted center (1), a fingerprint authentication server (2), and a user terminal (3). The trusted center (1) completes system initialization, provides registration and secret key distribution for a user terminal and the fingerprint authentication server, collects a user fingerprint as an authentication template, and gives authorization of the template to a legal fingerprint authentication server in a ciphertext mode; the fingerprint authentication server (2) provides an on-line encryption fingerprint authentication service with privacy protection and returns an authentication result to the user terminal; and the user terminal (3) sends an encrypted fingerprint authentication request to the fingerprint authentication server and decrypts the reply of the fingerprint authentication server to obtain an authentication result. According to the invention, bidirectional privacy protection of the user fingerprint data and the fingerprint template data is realized and a secure on-line fingerprint authentication service is provided.

Description

technical field [0001] The invention belongs to the technical field of information security, and specifically relates to a privacy-protected online fingerprint authentication system and method, which can be used to provide accurate and efficient online fingerprint authentication services for user terminals, and realize effective privacy protection for user fingerprint data and fingerprint template data. Background technique [0002] With the development and popularization of biometric technology, the use of biometric technology for identity verification provides users with more convenient and efficient services. In the traditional online fingerprint authentication system, the service provider collects and stores fingerprint matching templates. When the service provider needs the user to provide fingerprints for identity authentication, the user terminal extracts the user's fingerprint and sends it to the service provider. The service provider compares the stored fingerprint t...

AI Technical Summary

Problems solved by technology

Although this method can realize the privacy protection of the fingerprint template in the transmission process, since the encrypted fingerprint template data needs to be decrypted into plain text after being sent to the user terminal, and then the matching operation is performed, when the attacker pretends to be a user terminal Sending an authentication request will get the user's fingerprint template data, which cannot achieve effective privacy protection of fingerprint template data

Images