Biological feature recognition and digital identity fusion authentication method and system for digital office

Abstract

The invention provides a biological feature recognition and digital identity fusion authentication method and system for digital office. The method comprises the following steps: acquiring image information of biological features; generating a biological feature template based on the image information of the biological features; carrying out biological feature and digital identity fusion registration based on the biological feature template, and generating a biological feature encryption template; and performing authentication by using the biological feature encryption template and the digital identity. According to the method, the biological characteristics and the digital identity of the user are fused, the mapping binding from the physical identity to the digital identity is established, and the advantages of biological characteristic recognition and a password technology are absorbed, so that the fused identity not only has the safety and reliability of biological characteristic recognition, but also has the advantages of accuracy, randomness, revocable and the like of the digital identity; compared with an existing authentication mode, a stronger authentication means is provided for digital office, the illegal access risk can be reduced, the multi-source identity and multi-factor authentication service safety of the enterprise digital office environment is improved, and the data leakage risk is reduced.

Description

Technical Field

[0001] The present invention relates to the field of information security for digital office, and in particular to a biometric feature recognition and digital identity fusion authentication method and system for digital office. Background Art

[0002] Biometric identification is the collection and verification of each person's unique behavior and physical characteristics. Common ones include fingerprints, irises, gestures, etc. The probability that different people have the same biometrics is almost zero. In theory, biometrics are almost the most reliable authentication method. However, biometrics are unique, and their templates may be stolen, facing threats such as man-in-the-middle attacks and counterfeit attacks. USB Key is a typical two-factor authentication method, which mainly solves the problem that it is difficult to achieve both ease of use and security. Because the Key itself contains a microprocessor and an integrated circuit, it can process information. When the user inserts the key into the verification device, he needs to enter a PIN code to open it. The hardware storage content in the USB Key may be a password or a certificate. The authentication mode based on challenge / response or PKI system can be designed, which has high security. PKI certificates use public key cryptography to authenticate users. Unlike password-based authentication methods, password-based authentication methods require a database backup at the authentication end. Digital certificates use the public key system to implement index authentication. The public key cryptography system implements data encryption and decryption and signature verification. The public key certificates of users and issuing agencies at all levels are completely open to the public. The issuing agencies at all levels and users only need to ensure that the private keys are not leaked.

[0003] In the digital office environment of enterprises, multiple authentication methods are usually built according to security needs. However, the fragmentation of authentication methods may bring risks of illegal access. For example, user B holds the key of user A and can illegally access by entering the password. Biometric authentication may face man-in-the-middle attacks, and the risk of biological templates being leaked may be used for counterfeit attacks. Summary of the invention

[0004] At present, the physical authentication and digital identity authentication systems of enterprise digital office environments are separated from each other and coexist. There is a risk of illegal access in weak links. In view of the problems of insufficient adaptability, coverage and effectiveness of digital office environment authentication, the present invention provides a biometric feature recognition and digital identity fusion authentication method and system for digital office.

[0005] In a first aspect, the present invention provides a biometric feature recognition and digital identity fusion authentication method for digital office, comprising:

[0006] Collect biometric image information;

[0007] Generate a biometric template based on biometric image information;

[0008] Perform biometric and digital identity fusion registration based on biometric templates to generate biometric encryption templates;

[0009] Authentication using biometric encrypted templates and digital identities.

[0010] In some embodiments, the step of generating a biometric template based on biometric image information includes:

[0011] Selecting a corresponding data processing algorithm according to the type of the biometric feature to process the image information of the biometric feature to obtain corresponding biometric feature data;

[0012] A corresponding feature extraction model is selected according to the type of the biometric feature to perform feature extraction on the biometric feature data to obtain a corresponding biometric feature template.

[0013] In some embodiments, the biometric and digital identity fusion registration based on the biometric template to generate a biometric encryption template includes:

[0014] Generate user unique identification ID, password, certificate and key;

[0015] Encrypting the biometric template using the key to generate a biometric encryption template;

[0016] Call the hash algorithm to perform hash calculation on the key and generate the key hash value;

[0017] Generate a fused credential based on the corresponding key hash value and biometric encryption template;

[0018] The user's unique identification and fusion credential are stored correspondingly to complete the fusion registration of biometrics and digital identity.

[0019] In some embodiments, if there is newly collected biometric image information, a corresponding biometric encryption template is generated for the newly collected biometric image information to update the biometric encryption template.

[0020] In some embodiments, the authentication using the biometric encryption template and the digital identity includes:

[0021] The user terminal enters the user's unique ID and password to complete the terminal login, and releases the user terminal certificate; at the same time, new biometrics are collected and the newly collected biometric encryption template is obtained;

[0022] Perform two-level authentication: use the newly collected biometric encryption template to perform biometric authentication and obtain the biometric authentication result; use the user terminal certificate to perform certificate digital signature authentication and obtain the certificate verification result;

[0023] A fusion decision is made based on the certificate verification result and the biometric authentication result to obtain the final authentication result.

[0024] In some embodiments, when performing certificate digital signature authentication, if the user terminal does not hold a certificate, the certificate is downloaded from the trusted center according to the biometric authentication result, and the certificate digital signature authentication is completed with the downloaded certificate.

[0025] In some embodiments, when making a fusion decision based on the certificate verification result and the biometric authentication result, it is necessary to configure a security policy according to the application scenario, perform credibility calculation according to the security policy, and make a threshold-based fusion decision based on the credibility calculation result.

[0026] In some embodiments, a verification ticket is generated after the final authentication is passed for the user to log in to the application system. The verification ticket can be used multiple times within a set time. If single sign-on function needs to be supported, an identity assertion for accessing the application is issued after the final authentication is passed and returned to the user terminal for single sign-on to the application system.

[0027] In some embodiments, the fusion authentication method further includes: logging out the user who has completed the fusion registration of biometrics and digital identity.

[0028] In a second aspect, the present invention further provides a biometric feature recognition and digital identity fusion authentication system for digital office, comprising:

[0029] User interface or service interface, used to provide user operations and function calls;

[0030] Data interface, used to realize biometric and digital identity fusion registration and authentication; the data interface includes:

[0031] The first interface is used to collect image information of biometric features;

[0032] The second interface is used to select a corresponding data processing algorithm according to the type of the biometric feature to process the image information of the biometric feature;

[0033] The third interface selects a corresponding feature extraction model according to the type of the biometric feature to extract features from the biometric feature data to obtain a corresponding biometric feature template;

[0034] Password protection system interface, used to perform biometric and digital identity fusion registration based on biometric templates, generate biometric encryption templates; and use biometric encryption templates and digital identities for authentication.

[0035] In summary, due to the adoption of the above technical solution, the beneficial effects of the present invention are:

[0036] The present invention integrates the user's biometrics and digital identity, establishes a mapping binding from physical identity to digital identity, absorbs the advantages of biometric identification and cryptographic technology, and makes the integrated identity not only have the security and reliability of biometric identification, but also have the advantages of accuracy, randomness, and revocable change of digital identity, providing a stronger identification method for digital office than the existing authentication method, which can reduce the risk of illegal access, enhance the security of multi-source identity and multi-factor authentication services in the enterprise digital office environment, and reduce the risk of data leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1 It is a schematic diagram of a biometric feature recognition and digital identity fusion authentication method for digital office in an embodiment of the present invention.

[0038] Figure 2 The schematic diagram is an example of the fusion registration of biometrics and digital identity in an embodiment of the present invention.

[0039] Figure 3 The schematic diagram is an example of biometric and digital identity fusion authentication in an embodiment of the present invention.

[0040] Figure 4 Schematic diagram of a biometric feature recognition and digital identity fusion authentication method for digital office in an embodiment of the present invention. DETAILED DESCRIPTION

[0041] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0042] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0043] like Figure 1 As shown, the embodiment of the present invention proposes a biometric feature recognition and digital identity fusion authentication method for digital office, including:

[0044] S1, collects biometric image information;

[0045] S2, generating a biometric template based on the biometric image information;

[0046] S3, performs biometric and digital identity fusion registration based on the biometric template and generates a biometric encryption template;

[0047] S4, authentication using biometric encryption template and digital identity.

[0048] In some embodiments, in step S1, the biometric feature includes one or more of face, gesture, fingerprint, iris, voiceprint and palmprint. It should be noted that other biometric features can also be applied to the present invention, and the types of biometric features are not limited here.

[0049] In some embodiments, in step S1, the biometric image information includes video and / or image information of the biometric feature, and the biometric image information can usually be obtained by using a camera device, such as a smartphone with a camera, a tablet computer, a camcorder, a camera, etc.

[0050] In some embodiments, in step S2, generating a biometric template based on the image information of the biometric includes:

[0051] S21, selecting a corresponding data processing algorithm according to the type of the biometric feature to process the image information of the biometric feature to obtain corresponding biometric feature data; some implementation methods are as follows:

[0052] When the biometric feature is a gesture, selecting a data processing algorithm for processing the gesture, and generating biometric data of the gesture as a sequence of hand contours corresponding to the gesture;

[0053] When the biometric feature is a face, a data processing algorithm for processing the face is selected to generate biometric data of the face as a facial coordinate sequence corresponding to the face;

[0054] Similarly, other types of biometric features also generate corresponding biometric feature data, wherein the corresponding data processing algorithm can be implemented by using existing algorithms, which will not be described in detail here.

[0055] S22, selecting a corresponding feature extraction model according to the type of the biometric feature to extract features from the biometric feature data to obtain a corresponding biometric feature template (vector); some implementation methods are as follows:

[0056] When the biometric feature is a gesture, selecting a feature extraction model of the gesture as a gesture recognition model;

[0057] When the biological feature is a face, selecting a feature extraction model for the face as a face recognition model;

[0058] Similarly, other types of biometric features also select corresponding feature extraction models, wherein the corresponding feature extraction model can be implemented by using an existing feature extraction model, which will not be described in detail here.

[0059] In some embodiments, in step S3, biometric and digital identity fusion registration is performed based on the biometric template to generate a biometric encryption template, including:

[0060] S31, generate a user unique identification ID (User ID), password (Password), certificate (Cert) and key;

[0061] S32, encrypting the biometric template using the key to generate a biometric encryption template;

[0062] S33, calling a hash algorithm to perform hash calculation on the key to generate a key hash value;

[0063] S34, generating a fusion credential based on the corresponding key hash value and the biometric encryption template;

[0064] S35, store the user's unique identifier and the fusion credential correspondingly, and complete the fusion registration of biometrics and digital identity.

[0065] In some specific implementations, when the biometric template is first input, a user ID, password, certificate, and key are generated. It should be noted that the user ID is unique, and the biometric template, password, and certificate may be re-registered due to changes. Figure 2 As shown in the figure, assuming that n users are registered in the system, the biometric template w of user i is input i , randomly generate the key m used to encrypt the biometric template i On the one hand, the biometric template can be encrypted using a key, and an error correction code (ECC) can be selected for the key m. i Encode to get codeword c i (Take BCH code as an example, calculate c i =BCH(m i ), calculate the deviation δ i =w i ⊕c i As a biometric encryption template, complete the biometric registration; on the other hand, call the hash algorithm to perform hash calculation on the key to generate the key hash value Hash (m i ) to protect the key; then, a fusion credential is generated based on the corresponding key hash value and biometric encryption template, represented as {Hash(m i ),δ i}, and finally store the user's unique identifier and fusion credential correspondingly to complete the fusion registration of biometrics and digital identity.

[0066] In some embodiments, if there is newly collected biometric image information, the corresponding biometric encryption template is generated for the newly collected biometric image information through steps S2 to S3, and the biometric encryption template is used for updating to prevent security risks caused by leakage or changes of the user's biometric template. In some specific implementations, the update process includes: first, collecting a new biometric template w * , randomly generate a new key m for encrypting the biometric template i * ; Then select the error correction coding key m i * Encode to get codeword C * , calculate BCH(m i * )=C * , calculate the deviation δ * =w * ⊕C * , and generate a new fusion certificate {Hash(m i * ),δ *}; Finally, update the new fusion credential to the corresponding user unique identifier.

[0067] In some embodiments, in step S4, authentication is performed using the biometric encryption template and the digital identity, including:

[0068] S41, the user terminal enters the user's unique identification ID and password to complete the terminal login, and releases the user terminal certificate; at the same time, a new biometric feature is collected, and a newly collected biometric feature encryption template is obtained through steps S2 to S3;

[0069] S42, two-level authentication:

[0070] (1) Use the newly collected biometric encryption template to perform biometric authentication and obtain the biometric authentication result; Figure 3 As shown, a specific implementation process of biometric authentication includes: a newly collected biometric encryption template W ′ Input into the password protection system, match the user's unique ID with the stored fusion credentials one by one, and calculate c for the i-th data ′ =w ′ ⊕δ i =w ′ ⊕(w i ⊕c i ), for c ′ Do error correction decoding BCH (c ′ )=M ′ ; Judge Hash(m i )=Hash(M ′) is true, if so, the biometric authentication is successful.

[0071] (2) Use the certificate of the user terminal to perform certificate digital signature authentication and obtain the certificate verification result; in some embodiments, if the user terminal does not hold a certificate, the certificate is downloaded from the trusted center according to the biometric authentication result, and the certificate digital signature authentication is completed with the downloaded certificate. The certificate stores basic information related to the user, and the biometric template stores the user's biometric information. The two are associated and indexed through a custom feature identifier.

[0072] S43, perform a fusion judgment based on the certificate verification result and the biometric authentication result to obtain the final authentication result. The certificate authentication result and the biometric authentication result each give their own judgment results 1 (authentication success) or 0 (authentication failure); receive the judgment results of the certificate authentication result and the biometric authentication result (possibly multiple), perform a fusion judgment, and obtain the final authentication result.

[0073] Considering the separation of digital identity and physical identity, in actual applications, there may be situations where passwords, USB keys, etc. are disclosed to others, and there is a risk of password leakage leading to terminal loss of control. Therefore, it is necessary to configure security policies according to application scenarios, perform credibility calculations based on security policies, and make threshold-based fusion decisions based on credibility calculation results. The fusion decision logic adapts to different scenario requirements by setting security policies, such as:

[0074] In high-security scenarios, you can set the "and" condition for multiple authentication methods. For example, the certificate authentication result must be 1 and the biometric authentication result must be 1 to obtain access rights; even the face and fingerprint authentication results in the biometric authentication results must all be 1.

[0075] Low security requirements set the "OR" condition of multiple authentication methods. For example, the certificate authentication result must be 1, or the biometric authentication result must be 1 to obtain access rights.

[0076] In some embodiments, after the final authentication is passed (the final authentication result is 1), a verification ticket is generated for the user to log in to the application system, and the verification ticket can be used multiple times within a set time. If the single sign-on function needs to be supported, an identity assertion (authentication ticket) for accessing the application is issued after the final authentication is passed, and it is returned to the user terminal for the application system to implement single sign-on. In addition, if the security policy allows the user authentication process not to use a certificate, then after the final authentication is passed, the terminal authentication agent software can apply for and download the user certificate for subsequent use.

[0077] In some embodiments, the biometric identification and digital identity fusion authentication method for digital office also includes user deregistration for users who have completed the biometric and digital identity fusion registration. A specific user deregistration operation method includes: deleting the user's unique identification ID and prohibiting the user from accessing related systems and applications. When the user is deregistered, in order to ensure auditability, the user status is marked as deregistered after the user is deregistered, and the user certificate and biometric template are revoked. It should be noted that if there is a lower-level authentication device, the corresponding revocation information needs to be sent.

[0078] like Figure 4 As shown, the embodiment of the present invention also proposes a biometric feature recognition and digital identity fusion authentication system for digital office, including:

[0079] User interface or service interface, used to provide user operations and function calls;

[0080] The data interface is used to collect biometric image information, generate a biometric template based on the biometric image information, perform biometric and digital identity fusion registration based on the biometric template, generate a biometric encryption template, and perform authentication using the biometric encryption template and digital identity.

[0081] The data interface comprises:

[0082] The first interface is used to collect image information of biometric features;

[0083] The second interface is used to select a corresponding data processing algorithm according to the type of the biometric feature to process the image information of the biometric feature;

[0084] The third interface selects a corresponding feature extraction model according to the type of the biometric feature to extract features from the biometric feature data to obtain a corresponding biometric feature template;

[0085] Password protection system interface, used to perform biometric and digital identity fusion registration based on biometric templates, generate biometric encryption templates; and use biometric encryption templates and digital identities for authentication.

[0086] In some embodiments, the first interface is defined as a GetVideo / GetImage interface, which is used to collect biometric video / images, and includes two working modes (0: real-time collection of biometric video / image data streams, 1: reading local biometric video / image files). The specific definition is expressed as:

[0087] GetVideo / GetImage(device ID, local file path, working mode)

[0088] Parameter description: The device ID is used to indicate the hardware device actually called; the local file path refers to the video / image file that needs to be read; when the working mode is 0, the local file path is invalid, and when the working mode is 1, the device ID is invalid.

[0089] Return value: video data (such as RGB format) / image data (such as JPEG format).

[0090] In some embodiments, the second interface is defined as a GetBioData interface, which is used to extract corresponding biometric data (for example, 0: gestures correspond to hand contour sequences, 1: faces, fingerprints correspond to coordinate sequences and other static data) from video data / image data. The specific definition is expressed as:

[0091] GetBioData (video / image data, biometric pattern)

[0092] Parameter description: Video data is obtained by the GetVideo interface; when the biometric mode is 0, the function returns a sequence of gesture contours; when the biometric mode is 1, the function returns a sequence of coordinates such as face and fingerprint.

[0093] Return value: corresponding biometric data.

[0094] In some embodiments, the third interface is defined as a FeatureExtract interface, which extracts features from biometric data such as gestures, faces, fingerprints, etc., and selects a corresponding feature extraction model according to the type of the biometric. The specific definition is expressed as:

[0095] FeatureExtract (biometric data)

[0096] Parameter description: When the biometric feature is a face, the face recognition model is used; when the biometric feature is a gesture, the gesture recognition model is used.

[0097] Return value: biometric template (binary feature template).

[0098] It should be noted that both registration and authentication will go through the three stages of the first interface, the second interface and the third interface mentioned above. The full life cycle management of user identity is centered on the password protection system interface.

[0099] In some embodiments, the password protection system interface is designed around the full life cycle of digital identity and physical identity. When performing a registration task, the password protection system interface performs biometric and digital identity fusion registration based on the biometric template, generates a biometric encryption template, and completes the registration; when performing an authentication task, the password protection system interface uses the biometric encryption template and digital identity for authentication. In addition, the password protection system interface also includes a user logout interface for logging out users who have completed the biometric and digital identity fusion registration.

[0100] In some embodiments, the password protection system interface includes a user identity registration interface, a biometric registration interface, and a biometric update interface for performing a registration task;

[0101] The user identity registration interface is used to generate a user unique identification ID (User ID), password (Password), certificate (Cert) and key;

[0102] The biometric registration interface is used to encrypt the biometric template with a key to generate a biometric encryption template; call a hash algorithm to perform hash calculation on the key to generate a key hash value; generate a fusion credential based on the corresponding key hash value and the biometric encryption template; store the user's unique identifier and the fusion credential in correspondence to complete the biometric and digital identity fusion registration;

[0103] The biometric update interface is used to update the newly collected biometric image information through the first interface, the second interface, the third interface, the user identity registration interface and the biometric registration interface to prevent security risks caused by leakage or changes of user biometric templates.

[0104] In some embodiments, the password protection system interface includes a certificate authentication interface, a biometric authentication interface, and a fusion authentication interface for performing authentication tasks; when the user unique identification ID and password are entered through the user interface / service interface to complete the terminal login, the certificate of the user terminal is released; at the same time, the newly collected biometrics generate the corresponding biometric encryption template;

[0105] The biometric authentication interface is used to perform biometric authentication using the newly collected biometric encryption template to obtain a biometric authentication result;

[0106] The certificate authentication interface is used to perform certificate digital signature authentication using the certificate of the user terminal to obtain the certificate verification result;

[0107] The fusion authentication interface is used to perform fusion judgment based on the certificate verification result and the biometric authentication result to obtain the final authentication result.

[0108] It should be noted that, in the biometric feature recognition and digital identity fusion authentication system for digital office, the specific implementation method of each interface can refer to the description in the aforementioned fusion authentication method, which will not be repeated here.

[0109] Through the above-mentioned biometric and digital identity fusion authentication method and new system for digital office, the user's biometrics and digital identity are integrated, and a mapping and binding of physical identity to digital identity is established. The advantages of biometric and cryptographic technology are absorbed, so that the fused identity not only has the security and reliability of biometric identification, but also has the advantages of accuracy, randomness, and revocable changes of digital identity. It provides digital office with a stronger identification method than existing authentication methods, can reduce the risk of illegal access, enhance the security of multi-source identity and multi-factor authentication services in the enterprise digital office environment, and reduce the risk of data leakage.

[0110] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A biometric feature recognition and digital identity fusion authentication method for digital office, characterized in that: include: Collect biometric image information; Generate a biometric template based on biometric image information; Perform biometric and digital identity fusion registration based on biometric templates to generate biometric encryption templates; Authentication using biometric encrypted templates and digital identities.

2. The biometric feature recognition and digital identity fusion authentication method for digital office according to claim 1 is characterized in that: The generating of the biometric template based on the biometric image information includes: Selecting a corresponding data processing algorithm according to the type of the biometric feature to process the image information of the biometric feature to obtain corresponding biometric feature data; A corresponding feature extraction model is selected according to the type of the biometric feature to perform feature extraction on the biometric feature data to obtain a corresponding biometric feature template.

3. The biometric feature recognition and digital identity fusion authentication method for digital office according to claim 1 is characterized in that: The biometric and digital identity fusion registration based on the biometric template to generate a biometric encryption template includes: Generate user unique identification ID, password, certificate and key; Encrypting the biometric template using the key to generate a biometric encryption template; Call the hash algorithm to perform hash calculation on the key and generate the key hash value; Generate a fused credential based on the corresponding key hash value and biometric encryption template; The user's unique identification and fusion credential are stored correspondingly to complete the fusion registration of biometrics and digital identity.

4. The biometric feature recognition and digital identity fusion authentication method for digital office according to claim 1 is characterized in that: If there is newly collected biometric image information, a corresponding biometric encryption template is generated for the newly collected biometric image information to update the biometric encryption template.

5. The biometric feature recognition and digital identity fusion authentication method for digital office according to claim 3 is characterized in that: The authentication using the biometric encryption template and the digital identity includes: The user terminal enters the user's unique ID and password to complete the terminal login, and releases the user terminal certificate; at the same time, new biometrics are collected and the newly collected biometric encryption template is obtained; Perform two-level authentication: use the newly collected biometric encryption template to perform biometric authentication and obtain the biometric authentication result; use the user terminal certificate to perform certificate digital signature authentication and obtain the certificate verification result; A fusion decision is made based on the certificate verification result and the biometric authentication result to obtain the final authentication result.

6. The biometric feature recognition and digital identity fusion authentication method for digital office according to claim 5 is characterized in that: When performing certificate digital signature authentication, if the user terminal does not hold a certificate, the certificate is downloaded from the trusted center according to the biometric authentication result, and the certificate digital signature authentication is completed with the downloaded certificate.

7. The biometric feature recognition and digital identity fusion authentication method for digital office according to claim 5 is characterized in that: When making a fusion decision based on the certificate verification result and the biometric authentication result, it is necessary to configure a security policy according to the application scenario, perform credibility calculation based on the security policy, and make a threshold-based fusion decision based on the credibility calculation result.

8. The biometric feature recognition and digital identity fusion authentication method for digital office according to claim 5 is characterized in that: After the final authentication is passed, a verification ticket is generated for the user to log in to the application system. The verification ticket can be used multiple times within a set time. If single sign-on function needs to be supported, an identity assertion for accessing the application is issued after the final authentication is passed and returned to the user terminal for single sign-on to the application system.

9. The biometric feature recognition and digital identity fusion authentication method for digital office according to any one of claims 1 to 8, characterized in that: The fusion authentication method also includes: deregistering the user who has completed the fusion registration of biometrics and digital identity.

10. A biometric feature recognition and digital identity fusion authentication system for digital office, characterized in that: include: User interface or service interface, used to provide user operations and function calls; Data interface, used to realize biometric and digital identity fusion registration and authentication; the data interface includes: The first interface is used to collect image information of biometric features; The second interface is used to select a corresponding data processing algorithm according to the type of the biometric feature to process the image information of the biometric feature; The third interface selects a corresponding feature extraction model according to the type of the biometric feature to extract features from the biometric feature data to obtain a corresponding biometric feature template; Password protection system interface, used to perform biometric and digital identity fusion registration based on biometric templates, generate biometric encryption templates; and use biometric encryption templates and digital identities for authentication.

Images