Biological characteristic identity authentication system with desensitization security

Abstract

The invention provides a biological characteristic identity authentication system with desensitization security. The system comprises an M1 (desensitization security biological characteristic identity registration client), an M2 (desensitization security biological characteristic identity registration server), an M3 (desensitization security biological characteristic identity verification server), an M4 (real person information management database), an M5 (desensitization security biological characteristic identity certificate server), an M6 (desensitization security biological characteristic identity authentication server), and M7 (a desensitization security biological characteristic identity authentication client). The system process is used for establishing a relation in each composition entity, and comprises the steps: S1 realizing desensitization security biological characteristic identity registration; S2 realizing desensitization security biological characteristic identity verification; S3 realizing desensitization security biological characteristic identity certificate generation; S4 realizing desensitization security biological characteristic identity authentication. According to the system, a desensitization data set is used for replacing biological characteristics of a user, neither a client side nor a server stores the biological characteristics of the user, neither a process nor transmits the biological characteristics through a network, data in the process does not contain any information of the biological characteristics, the biological characteristics are irreversibly derived, and the attack risk and the leakage risk are avoided; different random numbers are used for constructing a desensitization authentication set in each time of identity authentication, so that guessing of the desensitization authentication set is avoided.

Description

technical field [0001] The present invention relates to biometric identity authentication system and workflow, including but not limited to this field. Background technique [0002] Identity authentication is the process of determining whether the user's identity is legal. Generally, the following three methods are used: (1) Known by the user: knowledge known to the user, such as passwords, etc.; (2) Owned by the user: things held by the user such as IC card / USB shield etc.; (3) Who the user is: the user's biological characteristics such as fingerprints, etc. Among them, the biometric feature has the advantages of being portable, no need to remember, and convenient to use. More importantly, it has the characteristics of non-repudiation, which can realize the integration of the biological body and the certificate, and its security and reliability are higher. [0003] In the field of electronic information, biometrics are generally digitized into biometric templates, which co...

AI Technical Summary

Problems solved by technology

Due to the irrevocability, privacy and non-repudiation of biometrics, once the biometric template is leaked, it will cause irreversible information security problems

In view of the above security risks, the existing biometric authentication restricts the authentication to the local device without network transmission, so that network authentication cannot be realized; at the same time, in order to avoid the risk of theft at the local end, the biometric feature needs to be stored in the security area of ​​the local end However, the cost of this method is high, and there is still a risk of cracking after the terminal is stolen

Images