A secure fingerprint identification method, system, device and storage medium

Abstract

The present invention discloses a secure fingerprint recognition method, system, device and storage medium, including performing key matching according to a unique identifier of an encrypted index user to obtain a user public key corresponding to a private key of the encrypted index user, decrypting a ciphertext of fingerprint data of the encrypted index user according to the public key of the encrypted index user to obtain a plaintext of the user fingerprint data, performing key matching according to the encrypted index to generate a corresponding symmetric key, decrypting a fingerprint feature ciphertext of an encrypted index database according to the symmetric key of the encrypted index to obtain a plaintext of the fingerprint feature of the encrypted index database, comparing the plaintext of the fingerprint data of the encrypted index user with the plaintext of the fingerprint feature of the encrypted index database to obtain a fingerprint recognition result, and reducing the risk of information leakage during the use of fingerprint recognition by performing data decryption only when comparing fingerprint feature data, thereby improving the security of privacy data.

Description

Technical Field

[0001] The present invention relates to the technical field related to fingerprint identification, and in particular to a secure fingerprint identification method, system, device and storage medium. Background Art

[0002] With the vigorous development of information security technology and the rapid update of security concepts, the application of human biometrics in the field of information security and identity authentication is in the ascendant and is increasingly valued by governments around the world. In the internationally accepted technical standards for information security levels, human biometrics authentication has been identified as an identity authentication technology used by high-level information security systems. The industry generally believes that human biometrics is gradually replacing traditional identity authentication technology, and fingerprint recognition technology, as a cutting-edge representative of human biometrics, is increasingly playing a leading role with its high accuracy, high uniqueness and reliability.

[0003] Fingerprints, as individual characteristics of human beings, are personal privacy data and are closely related to personal rights and interests. If fingerprint information is leaked, it will cause great damage to personal information security. Therefore, how to prevent information leakage during the use of fingerprint recognition and protect personal fingerprint privacy information is a technical problem that needs to be solved urgently in identity authentication. Summary of the invention

[0004] The present invention aims to at least solve the technical problems existing in the prior art. To this end, the present invention proposes a secure fingerprint recognition method, system, device and storage medium, which can prevent information leakage during the fingerprint recognition process and improve the security of private data.

[0005] A first aspect of the present invention provides a security fingerprint recognition method for comparing servers, comprising the following steps:

[0006] Receive a user unique identifier and a user fingerprint data ciphertext from an authentication server, wherein the user unique identifier is generated when the authentication server receives terminal registration information, and the user fingerprint data ciphertext is obtained by encrypting the user fingerprint data with a pre-stored user private key;

[0007] Perform key matching according to the user unique identifier to obtain a user public key corresponding to the user private key;

[0008] Decrypt the user fingerprint data ciphertext according to the user public key to obtain the user fingerprint data plaintext;

[0009] Receiving an encrypted index and a fingerprint feature ciphertext of the database from the database according to the unique identifier of the user;

[0010] Perform key matching according to the encryption index to generate a corresponding symmetric key;

[0011] Decrypting the fingerprint feature ciphertext of the database according to the symmetric key to obtain the fingerprint feature plaintext of the database;

[0012] The user fingerprint data plaintext is compared with the fingerprint feature plaintext in the database to obtain a fingerprint recognition result.

[0013] The control method according to the embodiment of the present invention has at least the following beneficial effects:

[0014] The method performs key matching according to the unique identifier of the encrypted index user to obtain the user public key corresponding to the encrypted index user private key, decrypts the encrypted index user fingerprint data ciphertext according to the encrypted index user public key to obtain the user fingerprint data plaintext, performs key matching according to the encrypted index to generate the corresponding symmetric key, decrypts the fingerprint feature ciphertext of the encrypted index database according to the encrypted index symmetric key to obtain the fingerprint feature plaintext of the encrypted index database, compares the encrypted index user fingerprint data plaintext with the fingerprint feature plaintext of the encrypted index database to obtain the fingerprint recognition result, and reduces the risk of information leakage during the use of fingerprint recognition by only decrypting data when comparing fingerprint feature data, thereby improving the security of privacy data.

[0015] According to some embodiments of the present invention, after comparing the plaintext of the user fingerprint data with the plaintext of the fingerprint feature in the database to obtain the fingerprint recognition result, the method further includes:

[0016] The fingerprint recognition result is sent to the authentication server, so that the authentication server sends the fingerprint recognition result to the terminal according to the user unique identifier.

[0017] According to some embodiments of the present invention, before receiving the fingerprint feature ciphertext of the database from the database according to the user unique identifier, the method includes:

[0018] Receiving the user unique identifier and the user registered fingerprint data ciphertext from the authentication server, wherein the user registered fingerprint data ciphertext is obtained by encrypting the user registered fingerprint data with a pre-stored user private key;

[0019] Perform key matching according to the user unique identifier to obtain a user public key corresponding to the user private key;

[0020] decrypting the ciphertext of the user registered fingerprint data according to the user public key to obtain the plaintext of the user registered fingerprint data, and extracting the user fingerprint feature data from the plaintext of the user registered fingerprint data;

[0021] The user's fingerprint feature data is symmetrically encrypted through KMS according to the encryption index to obtain the fingerprint feature ciphertext of the database;

[0022] The encrypted index, the user unique identifier and the ciphertext of the fingerprint feature of the database are sent to the database, so that the database saves the encrypted index, the user unique identifier and the ciphertext of the fingerprint feature of the database.

[0023] According to some embodiments of the present invention, the terminal obtains the ciphertext of the user fingerprint data in the following manner, including:

[0024] Receiving a user private key sent by the comparison server;

[0025] Collecting a user fingerprint image, and extracting the user fingerprint data from the user fingerprint image;

[0026] The user fingerprint data is encrypted using the user private key to obtain a ciphertext of the user fingerprint data.

[0027] According to some embodiments of the present invention, the database obtains the fingerprint feature ciphertext and the encrypted index of the database in the following manner, including:

[0028] Receiving the user unique identifier sent by the authentication server;

[0029] Data matching is performed according to the user unique identifier to obtain the fingerprint feature ciphertext and encrypted index of the database.

[0030] According to some embodiments of the present invention, performing key matching according to the encryption index to obtain a corresponding symmetric key includes:

[0031] Key matching is performed according to the encryption index, and the corresponding symmetric key is generated through KMS.

[0032] According to some embodiments of the present invention, before performing key matching according to the user unique identifier to obtain a user public key corresponding to the user private key, the method further includes:

[0033] The user private key and the user public key corresponding to the user private key are generated by an asymmetric encryption algorithm.

[0034] A second aspect of the present invention provides a security fingerprint recognition system for comparing servers, the security fingerprint recognition system comprising:

[0035] A data acquisition module, used to receive a user unique identifier and a user fingerprint data ciphertext from an authentication server, wherein the user unique identifier is generated when the authentication server receives terminal registration information, and the user fingerprint data ciphertext is obtained by encrypting the user fingerprint data with a pre-stored user private key;

[0036] A key matching module, used to perform key matching according to the user unique identifier to obtain a user public key corresponding to the user private key;

[0037] A user data decryption module, used to decrypt the user fingerprint data ciphertext according to the user public key to obtain the user fingerprint data plaintext;

[0038] An encryption index and ciphertext acquisition module, used to receive an encryption index and a fingerprint feature ciphertext of the database from the database according to the user unique identifier;

[0039] A symmetric key matching module, used to perform key matching according to the encryption index and generate a corresponding symmetric key;

[0040] A database ciphertext decryption module, used to decrypt the fingerprint feature ciphertext of the database according to the symmetric key to obtain the fingerprint feature plaintext of the database;

[0041] The fingerprint recognition module is used to compare the plaintext of the user's fingerprint data with the plaintext of the fingerprint feature in the database to obtain a fingerprint recognition result.

[0042] This system performs key matching based on the unique identifier of the encrypted index user to obtain the user public key corresponding to the encrypted index user private key, decrypts the encrypted index user fingerprint data ciphertext based on the encrypted index user public key to obtain the user fingerprint data plaintext, performs key matching based on the encrypted index to generate the corresponding symmetric key, decrypts the fingerprint feature ciphertext of the encrypted index database based on the encrypted index symmetric key to obtain the fingerprint feature plaintext of the encrypted index database, compares the encrypted index user fingerprint data plaintext with the fingerprint feature plaintext of the encrypted index database to obtain the fingerprint recognition result, and reduces the risk of information leakage during the use of fingerprint recognition by decrypting data only when comparing fingerprint feature data, thereby improving the security of privacy data.

[0043] According to a third aspect of the present invention, a secure fingerprint recognition electronic device is provided, comprising at least one control processor and a memory for communicating with the at least one control processor; the memory stores instructions executable by the at least one control processor, and the instructions are executed by the at least one control processor so that the at least one control processor can execute the above-mentioned secure fingerprint recognition method.

[0044] According to a fourth aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to enable a computer to execute the above-mentioned secure fingerprint recognition method.

[0045] It should be noted that the beneficial effects between the second to fourth aspects of the present invention and the prior art are the same as the beneficial effects between the above-mentioned security fingerprint recognition system and the prior art, and will not be described in detail here.

[0046] Additional aspects and advantages of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] The above and / or additional aspects and advantages of the present invention will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:

[0048] Figure 1 is a flow chart of a secure fingerprint recognition method according to an embodiment of the present invention;

[0049] Figure 2 It is a structural schematic diagram of a secure fingerprint recognition system according to an embodiment of the present invention. DETAILED DESCRIPTION

[0050] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and cannot be understood as limiting the present invention.

[0051] In the description of the present invention, if there is a description of first, second, etc., it is only for the purpose of distinguishing technical features, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features or implicitly indicating the order of the indicated technical features.

[0052] In the description of the present invention, it should be understood that descriptions involving orientation, such as orientation or positional relationship indicated as up, down, etc., are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present invention.

[0053] In the description of the present invention, it should be noted that, unless otherwise clearly defined, terms such as setting, installing, connecting, etc. should be understood in a broad sense, and technicians in the relevant technical field can reasonably determine the specific meanings of the above terms in the present invention in combination with the specific content of the technical solution.

[0054] With the vigorous development of information security technology and the rapid update of security concepts, the application of human biometrics in the field of information security and identity authentication is in the ascendant and is increasingly valued by governments around the world. In the internationally accepted technical standards for information security levels, human biometrics authentication has been identified as an identity authentication technology used by high-level information security systems. The industry generally believes that human biometrics is gradually replacing traditional identity authentication technology, and fingerprint recognition technology, as a cutting-edge representative of human biometrics, is increasingly playing a leading role with its high accuracy, high uniqueness and reliability.

[0055] Fingerprints, as individual characteristics of human beings, are personal privacy data and are closely related to personal rights and interests. If fingerprint information is leaked, it will cause great damage to personal information security. Therefore, how to prevent information leakage during the use of fingerprint recognition and protect personal fingerprint privacy information is a technical problem that needs to be solved urgently in identity authentication.

[0056] In order to solve the above technical defects, refer to Figure 1 The present invention provides a security fingerprint recognition method for comparing servers, comprising:

[0057] Step S101, receiving a user unique identifier and a user fingerprint data ciphertext from an authentication server, wherein the user unique identifier is generated when the authentication server receives terminal registration information, and the user fingerprint data ciphertext is obtained by encrypting the user fingerprint data with a pre-stored user private key;

[0058] Step S102: performing key matching according to the user's unique identifier to obtain a user public key corresponding to the user's private key;

[0059] Step S103: decrypt the ciphertext of the user's fingerprint data according to the user's public key to obtain the plaintext of the user's fingerprint data;

[0060] Step S104: receiving the encrypted index and the fingerprint feature ciphertext of the database from the database according to the user unique identifier;

[0061] Step S105: performing key matching according to the encryption index to generate a corresponding symmetric key;

[0062] Step S106, decrypting the fingerprint feature ciphertext of the database according to the symmetric key to obtain the fingerprint feature plaintext of the database;

[0063] Step S107: Compare the plaintext of the user's fingerprint data with the plaintext of the fingerprint feature in the database to obtain a fingerprint recognition result.

[0064] The method performs key matching according to the unique identifier of the encrypted index user to obtain the user public key corresponding to the encrypted index user private key, decrypts the encrypted index user fingerprint data ciphertext according to the encrypted index user public key to obtain the user fingerprint data plaintext, performs key matching according to the encrypted index to generate the corresponding symmetric key, decrypts the fingerprint feature ciphertext of the encrypted index database according to the encrypted index symmetric key to obtain the fingerprint feature plaintext of the encrypted index database, compares the encrypted index user fingerprint data plaintext with the fingerprint feature plaintext of the encrypted index database to obtain the fingerprint recognition result, and reduces the risk of information leakage during the use of fingerprint recognition by only decrypting data when comparing fingerprint feature data, thereby improving the security of privacy data.

[0065] In some embodiments, after comparing the plain text of the user's fingerprint data with the plain text of the fingerprint feature in the database to obtain the fingerprint recognition result, the method further includes:

[0066] The fingerprint recognition result is sent to the authentication server, so that the authentication server sends the fingerprint recognition result to the terminal according to the user's unique identifier.

[0067] In some embodiments, before receiving the fingerprint feature ciphertext of the database from the database according to the user unique identifier, the process includes:

[0068] Receive the user's unique identifier and the user's registered fingerprint data ciphertext from the authentication server, where the user's registered fingerprint data ciphertext is obtained by encrypting the user's registered fingerprint data with a pre-stored user private key;

[0069] Perform key matching based on the user's unique identifier to obtain the user's public key corresponding to the user's private key;

[0070] Decrypt the ciphertext of the user's registered fingerprint data according to the user's public key to obtain the plaintext of the user's registered fingerprint data, and extract the user's fingerprint feature data from the plaintext of the user's registered fingerprint data;

[0071] According to the encryption index, the user's fingerprint feature data is symmetrically encrypted through KMS to obtain the fingerprint feature ciphertext of the database;

[0072] The encrypted index, the user's unique identifier, and the fingerprint feature ciphertext of the database are sent to the database, so that the database saves the encrypted index, the user's unique identifier, and the fingerprint feature ciphertext of the database.

[0073] In some embodiments, the terminal obtains the user fingerprint data ciphertext in the following manner, including:

[0074] Receive the user private key sent by the comparison server;

[0075] Collecting a user's fingerprint image and extracting user's fingerprint data from the user's fingerprint image;

[0076] The user's fingerprint data is encrypted using the user's private key to obtain the user's fingerprint data ciphertext.

[0077] In some embodiments, the database obtains the fingerprint feature ciphertext and encrypted index of the database in the following manner, including:

[0078] Receiving a unique user identifier sent by an authentication server;

[0079] Data matching is performed based on the user's unique identifier to obtain the database's fingerprint feature ciphertext and encrypted index.

[0080] In some embodiments, performing key matching according to the encryption index to obtain the corresponding symmetric key includes:

[0081] Key matching is performed based on the encryption index, and the corresponding symmetric key is generated through KMS.

[0082] In some embodiments, before performing key matching according to the user unique identifier to obtain the user public key corresponding to the user private key, the method further includes:

[0083] The user's private key and the user's public key corresponding to the user's private key are generated through an asymmetric encryption algorithm.

[0084] In addition, refer to Figure 2 One embodiment of the present invention provides a secure fingerprint recognition system for comparing servers, including a data acquisition module 1100, a key matching module 1200, a user data decryption module 1300, an encryption index and ciphertext acquisition module 1400, a symmetric key matching module 1500, a database ciphertext decryption module 1600 and a fingerprint recognition module 1700, wherein:

[0085] The data acquisition module 1100 is used to receive a user unique identifier and a user fingerprint data ciphertext from an authentication server, wherein the user unique identifier is generated when the authentication server receives terminal registration information, and the user fingerprint data ciphertext is obtained by encrypting the user fingerprint data with a pre-stored user private key;

[0086] The key matching module 1200 is used to perform key matching according to the user's unique identifier to obtain a user public key corresponding to the user's private key;

[0087] The user data decryption module 1300 is used to decrypt the user fingerprint data ciphertext according to the user public key to obtain the user fingerprint data plaintext;

[0088] The encryption index and ciphertext acquisition module 1400 is used to receive the encryption index and the fingerprint feature ciphertext of the database from the database according to the user unique identifier;

[0089] The symmetric key matching module 1500 is used to perform key matching according to the encryption index and generate a corresponding symmetric key;

[0090] The database ciphertext decryption module 1600 is used to decrypt the fingerprint feature ciphertext of the database according to the symmetric key to obtain the fingerprint feature plaintext of the database;

[0091] The fingerprint recognition module 1700 is used to compare the plain text of the user's fingerprint data with the plain text of the fingerprint feature in the database to obtain a fingerprint recognition result.

[0092] This system performs key matching based on the unique identifier of the encrypted index user to obtain the user public key corresponding to the encrypted index user private key, decrypts the encrypted index user fingerprint data ciphertext based on the encrypted index user public key to obtain the user fingerprint data plaintext, performs key matching based on the encrypted index to generate the corresponding symmetric key, decrypts the fingerprint feature ciphertext of the encrypted index database based on the encrypted index symmetric key to obtain the fingerprint feature plaintext of the encrypted index database, compares the encrypted index user fingerprint data plaintext with the fingerprint feature plaintext of the encrypted index database to obtain the fingerprint recognition result, and reduces the risk of information leakage during the use of fingerprint recognition by decrypting data only when comparing fingerprint feature data, thereby improving the security of privacy data.

[0093] It should be noted that the present system embodiment and the above-mentioned system embodiment are based on the same inventive concept, so the relevant contents of the above-mentioned method embodiment are also applicable to the present system embodiment and will not be repeated here.

[0094] The present application also provides a secure fingerprint recognition electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the secure fingerprint recognition method as described above is implemented.

[0095] The processor and the memory may be connected via a bus or other means.

[0096] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0097] The non-transient software program and instructions required to implement the security fingerprint recognition method of the above embodiment are stored in the memory. When executed by the processor, the security fingerprint recognition method of the above embodiment is executed, for example, the above described Figure 1The method comprises steps S101 to S107.

[0098] The present application also provides a computer-readable storage medium storing computer-executable instructions, wherein the computer-executable instructions are used to execute: the secure fingerprint recognition method as described above.

[0099] The computer-readable storage medium stores computer-executable instructions, which are executed by a processor or a controller, for example, by a processor in the above electronic device embodiment, so that the above processor can execute the security fingerprint recognition method in the above embodiment, for example, execute the above described Figure 1 The method comprises steps S101 to S107.

[0100] It will be appreciated by those skilled in the art that all or some of the steps and systems in the disclosed method above may be implemented as software, firmware, hardware and appropriate combinations thereof. Some physical components or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor or a microprocessor, or may be implemented as hardware, or may be implemented as an integrated circuit, such as an application specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or a non-transitory medium) and a communication medium (or a temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program units or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technologies, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, disk storage or other magnetic storage devices, or any other medium that may be used to store desired information and may be accessed by a computer. Furthermore, it is well known to those skilled in the art that communication media generally contain computer readable instructions, data structures, program elements, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.

[0101] The embodiments of the present invention are described in detail above in conjunction with the accompanying drawings, but the present invention is not limited to the above embodiments, and various changes can be made within the knowledge scope of ordinary technicians in the relevant technical field without departing from the purpose of the present invention.

Claims

1. A secure fingerprint recognition method, characterized in that: For comparing servers, the security fingerprint recognition method includes: Receive a user unique identifier and a user fingerprint data ciphertext from an authentication server, wherein the user unique identifier is generated when the authentication server receives terminal registration information, and the user fingerprint data ciphertext is obtained by encrypting the user fingerprint data with a pre-stored user private key; Perform key matching according to the user unique identifier to obtain a user public key corresponding to the user private key; Decrypt the user fingerprint data ciphertext according to the user public key to obtain the user fingerprint data plaintext; Receiving a key index and a fingerprint feature ciphertext of the database from the database according to the unique identifier of the user; Perform key matching according to the key index to generate a corresponding symmetric key; Decrypting the fingerprint feature ciphertext of the database according to the symmetric key to obtain the fingerprint feature plaintext of the database; The user fingerprint data plaintext is compared with the fingerprint feature plaintext in the database to obtain a fingerprint recognition result.

2. A secure fingerprint recognition method according to claim 1, characterized in that: After the fingerprint recognition result is obtained by comparing the plaintext of the user fingerprint data with the plaintext of the fingerprint feature in the database, the method further includes: The fingerprint recognition result is sent to the authentication server, so that the authentication server sends the fingerprint recognition result to the terminal according to the user unique identifier.

3. A secure fingerprint recognition method according to claim 1, characterized in that: Before receiving the fingerprint feature ciphertext of the database from the database according to the user unique identifier, the method includes: Receiving the user unique identifier and the user registered fingerprint data ciphertext from the authentication server, wherein the user registered fingerprint data ciphertext is obtained by encrypting the user registered fingerprint data with a pre-stored user private key; Perform key matching according to the user unique identifier to obtain a user public key corresponding to the user private key; decrypting the ciphertext of the user registered fingerprint data according to the user public key to obtain the plaintext of the user registered fingerprint data, and extracting the user fingerprint feature data from the plaintext of the user registered fingerprint data; According to the key index, the user fingerprint feature data is symmetrically encrypted through the KMS to obtain the fingerprint feature ciphertext of the database, wherein the KMS is a key management service; The key index, the user unique identifier and the fingerprint feature ciphertext of the database are sent to the database, so that the database saves the key index, the user unique identifier and the fingerprint feature ciphertext of the database.

4. A secure fingerprint recognition method according to claim 1, characterized in that: The terminal obtains the user fingerprint data ciphertext in the following manner, including: Receiving a user private key sent by the comparison server; Collecting a user fingerprint image, and extracting the user fingerprint data from the user fingerprint image; The user fingerprint data is encrypted using the user private key to obtain a ciphertext of the user fingerprint data.

5. A secure fingerprint recognition method according to claim 1, characterized in that: The database obtains the fingerprint feature ciphertext and key index of the database in the following manner, including: Receiving the user unique identifier sent by the authentication server; Data matching is performed according to the user unique identifier to obtain the fingerprint feature ciphertext and key index of the database.

6. A secure fingerprint recognition method according to claim 1, characterized in that: The performing key matching according to the key index to obtain a corresponding symmetric key includes: Key matching is performed according to the key index, and a corresponding symmetric key is generated through KMS, where the KMS is a key management service.

7. A secure fingerprint recognition method according to claim 1, characterized in that: Before performing key matching according to the user unique identifier to obtain a user public key corresponding to the user private key, the method further includes: The user private key and the user public key corresponding to the user private key are generated by an asymmetric encryption algorithm.

8. A secure fingerprint recognition system, characterized in that: For comparing servers, the security fingerprint recognition system includes: A data acquisition module, used to receive a user unique identifier and a user fingerprint data ciphertext from an authentication server, wherein the user unique identifier is generated when the authentication server receives terminal registration information, and the user fingerprint data ciphertext is obtained by encrypting the user fingerprint data with a pre-stored user private key; A key matching module, used to perform key matching according to the user unique identifier to obtain a user public key corresponding to the user private key; A user data decryption module, used to decrypt the user fingerprint data ciphertext according to the user public key to obtain the user fingerprint data plaintext; An encryption index and ciphertext acquisition module, used to receive a key index and a fingerprint feature ciphertext of the database from the database according to the user unique identifier; A symmetric key matching module, used to perform key matching according to the key index and generate a corresponding symmetric key; A database ciphertext decryption module, used to decrypt the fingerprint feature ciphertext of the database according to the symmetric key to obtain the fingerprint feature plaintext of the database; The fingerprint recognition module is used to compare the plaintext of the user's fingerprint data with the plaintext of the fingerprint feature in the database to obtain a fingerprint recognition result.

9. A secure fingerprint recognition device, characterized in that: It includes at least one control processor and a memory for communicating with the at least one control processor; the memory stores instructions that can be executed by the at least one control processor, and the instructions are executed by the at least one control processor so that the at least one control processor can execute a security fingerprint recognition method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to enable a computer to execute a secure fingerprint recognition method according to any one of claims 1 to 7.

Images