Biological characteristic identity authentication method for desensitization security

Abstract

The invention provides a biological characteristic identity authentication method with desensitization security. When the user identity is registered, the biological characteristic template is processed through a cryptographic algorithm to generate a desensitization data set, the desensitization data set is stored in an authentication server, and the desensitization data set does not contain any biological characteristic information. And during identity authentication, the authentication server generates an authentication data set by using the random number as a secret and the desensitization data set, and sends the authentication data set to the user, and the user performs password calculation by using the biological characteristics and the authentication data set to complete identity authentication. In each time of identity authentication, the authentication server uses different random numbers as temporary secrets to construct an authentication data set, so that desensitization data guessing is avoided; and the authentication server does not store the biological characteristic information of the user, so that the biological characteristic leakage risk caused by attacks is avoided.

Description

technical field [0001] The present invention relates to biometric identity authentication methods, including but not limited to this field. Background technique [0002] Identity authentication is the process of determining whether the user's identity is legal. Generally, the following three methods are used: (1) Known by the user: knowledge known to the user, such as passwords, etc.; (2) Owned by the user: things held by the user such as IC card / USB shield etc.; (3) Who the user is: the user's biological characteristics such as fingerprints, etc. Among them, the biometric feature has the advantages of being portable, no need to remember, and convenient to use. More importantly, it has the characteristics of non-repudiation, which can realize the integration of the biological body and the certificate, and its security and reliability are higher. [0003] In the field of electronic information, biometrics are generally digitized into biometric templates, which consist of a s...

AI Technical Summary

Problems solved by technology

Due to the irrevocability, privacy and non-repudiation of biometrics, once the biometric template is leaked, it will cause irreversible information security problems

In view of the above security risks, the existing biometric authentication restricts the authentication to the local device without network transmission, so that network authentication cannot be realized; at the same time, in order to avoid the risk of theft at the local end, the biometric feature needs to be stored in the security area of ​​the local end However, the cost of this method is high, and there is still a risk of cracking after the terminal is stolen

Images