Verification code authentication method and system based on biological characteristics

Abstract

The invention discloses a verification code authentication method and system based on biological characteristics, and the method comprises the steps: transmitting an authentication request, and receiving a verification code; generating a first private key and a first public key according to the acquired biological characteristics; performing hash operation on the biological characteristics to obtain a first private key, and performing elliptic curve encryption on the first private key to obtain a first public key; and signing the verification code according to the first private key, and sending the verification code and the signature information, so as to obtain an authentication result that authentication is completed by the first public key. The biological characteristic value of the user is taken as a private key, thedigital signature is performed on the verification code of the remote server, and the verification code is returned to the remote server; and the remote server authenticates the verification code and the signature information according to the user public key. The biometric features have uniqueness and non-reproducibility, network transmission and key management arenot needed, and the verification code is signed, so that the verification code has authentication, integrity and non-repudiation, and the security of the verification code is improved.

Description

technical field [0001] The invention relates to the technical field of identity authentication, in particular to a verification code authentication method and system based on biometric features. Background technique [0002] The statements in this section merely provide background information related to the present invention and do not necessarily constitute prior art. [0003] When using third-party software for online payment, third-party payment companies widely use SMS verification codes as carriers to confirm user identities; A text message containing a verification code, the user enters the verification code into the prompt dialog box within the specified time and sends it to the remote server to verify the authenticity of the user. Through the identity authentication mode of the verification code, the user can directly use the SMS verification code to log in without a password, which brings convenience to the user. [0004] However, the inventor believes that there ...

AI Technical Summary

Problems solved by technology

Or store the user name and password in a card called a password manager, and the user logs in with the "user name + password" method, and then the system uses the card for secondary identity authentication; but this method requires card maintenance and password change. key inconvenient

Furthermore, based on the OMS mobile phone platform identity authentication, that is, use a hardware-based specific dynamic password for identity authentication, and integrate the USB-Key function on the mobile phone, and use the SIM card inside the mobile phone to realize the USB-Key function. In electronic password authentication, it is not necessary to carry hardware with you, reducing unnecessary troubles; however, this method has limited data transmission capacity, and does not realize the separation of man and machine. When the user's mobile phone is lost, criminals can pretend to be legitimate users for identity authentication

Images