Man-machine authentication method and device based on fingerprint features

Abstract

The invention discloses a man-machine authentication method and device based on fingerprint features, and belongs to the technical field of network security, according to the method, authentication is performed between a user and an equipment server through fingerprint biological features and challenge-response in the authentication process, compared with traditional identity features, the fingerprint features are complex in structure and have uniqueness, and the authentication efficiency is improved. The authentication stability is improved, and the authentication speed is increased; according to the method, encryption is carried out by using the response value generated by PUF operation, the uniqueness of a key is ensured, clone attacks are effectively resisted, and meanwhile, encryption, decryption and MAC operation are adopted in the authentication process, so that the integrity of messages is verified.

Description

Technical Field

[0001] The invention belongs to the technical field of network security and relates to a human-machine authentication method and device based on fingerprint features. Background Art

[0002] In today's rapidly developing digital society, users are increasingly connected to various smart devices, a trend that benefits from significant advances in technology. Specifically, with the continuous innovation of technology, the types of devices used by users are rapidly expanding, including but not limited to smartphones, smart wearable devices, etc. These devices have greatly improved the quality of people's daily lives with their rich and diverse functions. In addition, the integrated application of cutting-edge technologies such as 5G communication technology and artificial intelligence (AI) has further enhanced the performance of devices, bringing user experience to an unprecedented level.

[0003] However, there are hidden security risks that cannot be ignored. On the one hand, as the network environment becomes increasingly complex, the risk of illegal users accessing and maliciously controlling servers through technical means has increased significantly. Such attacks are often aimed at performing illegal operations, such as stealing sensitive data on the server and destroying the integrity of the system, thus seriously threatening the safe and stable operation of the server.

[0004] On the other hand, while the traditional identity authentication mechanism ensures security, it also exposes certain vulnerabilities. Under this mechanism, users usually need to provide real personal information, such as name, ID number and other sensitive data, for identity authentication. However, this information is very easy to become a target of attack by criminals during transmission and storage. Once this information is illegally obtained, criminals may use it to commit fraud or other illegal activities, thereby posing a threat to property safety. Summary of the invention

[0005] The purpose of the present invention is to overcome the shortcomings of the above-mentioned prior art and provide a human-machine authentication method and device based on fingerprint features to solve the problem that the traditional identity authentication mechanism in the prior art is highly vulnerable and easy to be attacked.

[0006] In order to achieve the above object, the present invention adopts the following technical solutions: A human-machine authentication method based on fingerprint features comprises the following steps: S11, the user sends a user fingerprint feature and a one-time random number to the device server; the device server is used to authenticate the user through the received user fingerprint feature and the one-time random number, and if the user passes the authentication, the device server is used to obtain a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation; S12, if the user receives the first challenge value, the first MAC operation result and the first encrypted message, the user compares the second MAC operation result generated by itself with the received first MAC operation result to see if they are consistent. If they are consistent, the device server passes the authentication and executes S13; S13, the user performs a hash operation on the generated random number and encrypts it to obtain a second encrypted message, and performs a MAC operation to obtain a third MAC operation result; the second encrypted message and the third MAC operation result are sent to the device server; the device server is used to authenticate the user through the second encrypted message and the third MAC operation result, and if the authentication is successful, the device server is used to send an encrypted success message; S14, if the user receives the encrypted success message, the authentication is completed after decryption.

[0007] A further improvement of the present invention is: Preferably, in S12, the process of the user comparing the second MAC operation result generated by itself with the received first MAC operation result to see whether they are consistent is: (1) The user receives the first challenge value Generate a second response value ; (2) Through the second response value Decrypt the first encrypted message received , get the random number of the second device ; (3) For the first encrypted message , second response value and the second device random number Perform MAC operation to generate the second MAC operation result , compare whether the received first MAC operation result is consistent with the second MAC operation result.

[0008] Preferably, in S13, the user performs a hash operation on the generated random number and encrypts it to obtain a second encrypted message, and performs a MAC operation to obtain a third MAC operation result. The process is as follows: (1) The user generates the first user random number , for the first user random number and the first device random number generated by the device server Perform hash operation to obtain the third challenge value , pass the third challenge value Get the third response value ; (2) The first response value obtained by the first challenge value in S11 User fingerprint features , the first random number , the first user random number and the third response value Encrypt to obtain the second encrypted message ; (3) Second encrypted message , first response value and the first user random number Perform MAC operation to generate the third MAC operation result .

[0009] Preferably, in S14, the user uses the first device to generate a random number Decrypt the received success message.

[0010] A human-machine authentication device based on fingerprint features, comprising: A user sending unit is used to control the user to send a user fingerprint feature and a one-time random number to a device server; the device server is used to authenticate the user through the received user fingerprint feature and the one-time random number, and if the user passes the authentication, the device server is used to obtain a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation; A user comparison unit, if the user receives the first challenge value, the first MAC operation result and the first encrypted message, is used to control the user to compare whether the second MAC operation result generated by the user is consistent with the received first MAC operation result. If they are consistent, the device server passes the authentication and executes the user encryption unit; The user encryption unit is used to control the user to obtain a second encrypted message after performing a hash operation on the generated random number and encrypting it, and to perform a MAC operation to obtain a third MAC operation result; the second encrypted message and the third MAC operation result are sent to the device server; the device server is used to authenticate the user through the second encrypted message and the third MAC operation result, and if the authentication is successful, the device server is used to send an encrypted success message; The user decryption unit is used to control the user to decrypt and then end the authentication if the user receives the encrypted success message.

[0011] A human-machine authentication method based on fingerprint features comprises the following steps: S21, the device server authenticates the user. If the authentication is successful, execute S22; S22, the device server obtains a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation, and sends the first challenge value, the first MAC operation result and the first encrypted message to the user; the user is used to authenticate the device server by comparing the second MAC operation result generated by itself with the received first MAC operation result. After the authentication is passed, the user is used to perform a Hami operation and a MAC operation to obtain a second encrypted message and a third MAC operation result; S23, if the device server receives the second encrypted message and the third MAC operation result, it decrypts the second encrypted message, performs MAC operation on the decrypted result, obtains a fourth MAC operation result, and authenticates the user by comparing the fourth MAC operation result with the third MAC operation result. If the user passes the authentication, execute S24; S24, the device server generates encrypted success information and sends it to the user.

[0012] In S21, the device server compares the fingerprint features stored in the device User fingerprint features , if the two are consistent, user authentication is successful.

[0013] In S22, the process of the device server obtaining the first challenge value, the first MAC operation result and the first encrypted message through the challenge response rule and the MAC operation is: (1) The device server generates the first device random number ; (2) The device server uses the first response value User fingerprint features , a one-time random number generated by the user and the first device random number After encryption, the first encrypted message is obtained ; (3) For the first encrypted message , first response value and the first device random number After performing MAC operation, the first MAC operation result is obtained .

[0014] In S23, the process of performing MAC operation on the decryption result to obtain the fourth MAC operation result is as follows: the device server receives the first response value Decrypt the received second encrypted message , get the second user random number , for the second encrypted message , first response value and the second user random number Perform MAC operation to obtain the fourth MAC operation result .

[0015] A human-machine authentication device based on fingerprint features, comprising: The first authentication unit of the device is used to control the device server to authenticate the user, and if the authentication is successful, execute the device encryption unit; The device encryption unit is used to control the device server to obtain a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation, and send the first challenge value, the first MAC operation result and the first encrypted message to the user; the user is used to authenticate the device server by comparing the second MAC operation result generated by itself with the received first MAC operation result. After the authentication is passed, the user is used to perform a Hami operation and a MAC operation to obtain a second encrypted message and a third MAC operation result; a second authentication unit of the device, for decrypting the second encrypted message if the device server receives the second encrypted message and the third MAC operation result, performing MAC operation on the decrypted message to obtain a fourth MAC operation result, authenticating the user by comparing the fourth MAC operation result with the third MAC operation result, and executing the second encryption unit of the device if the user passes the authentication; The second encryption unit of the device is used to control the device server to generate encryption success information and send it to the user.

[0016] Compared with the prior art, the present invention has the following beneficial effects: The present invention discloses a human-machine authentication method based on fingerprint features. In the authentication process, the method performs authentication between a user and a device server through fingerprint biometric features and challenge-response. Compared with traditional identity features, the fingerprint feature has a complex structure and uniqueness, which improves the stability of authentication and speeds up authentication. In the present invention, a response value generated by PUF operation is used for encryption, which ensures the uniqueness of the key and effectively resists cloning attacks. At the same time, encryption, decryption and MAC operations are used in the authentication process to verify the integrity of the message. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 The human-machine authentication method based on fingerprint features of the user terminal of the present invention; Figure 2 The human-machine authentication method based on fingerprint features on the device server side invented by this law; Figure 3 Flow chart of a human-machine authentication method based on fingerprint features in an embodiment of the present invention; DETAILED DESCRIPTION In the following, the terms "first", "second", "third", and "fourth" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, a feature defined as "first", "second", "third", and "fourth" may explicitly or implicitly include one or more of the features.

[0018] The co-shooting method provided in the embodiment of the present application can be applied to terminal devices such as mobile phones, tablet computers, wearable devices, vehicle-mounted devices, augmented reality (AR) / virtual reality (VR) devices, laptop computers, ultra-mobile personal computers (UMPC), netbooks, personal digital assistants (PDA), etc. The embodiment of the present application does not impose any restrictions on the specific type of the terminal device.

[0019] It should be noted that the terms "first", "second", etc. in the specification and drawings of the present invention are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0020] In the present invention, since there are many symbols involved, they are uniformly defined as follows: It is the user's fingerprint feature; is a one-time random number; Store fingerprint features for the device; is a random number for the first device; is the first challenge value; is the first response value; A first encrypted message; is the first MAC operation result; is the second response value; is a random number for the second device; is the second MAC operation result; is the first user's random number; is the third challenge value; is the third response value; for the second encrypted message; is the third MAC operation result; is a random number for the second user; is the fourth MAC operation result.

[0021] As the problem raised in the background technology, in today's society, the relationship between users and devices is developing rapidly, but it is also accompanied by many hidden dangers. In terms of development, with the advancement of science and technology, user devices are becoming increasingly diversified, such as smart phones, smart wearable devices, etc., which have greatly enriched people's lives. At the same time, the application of new technologies such as 5G and AI has made device functions more powerful and the user experience has been continuously improved. However, hidden dangers cannot be ignored. Illegal users access the server, causing the server to be maliciously controlled, and then perform illegal operations, such as stealing sensitive data, destroying system integrity, etc., which seriously damages the security of the server. At the same time, in the traditional identity authentication process, users need to provide real personal information, such as name, ID number, etc. There is a risk of leakage of this information during transmission and storage, and it may be used by criminals to commit fraud or other illegal activities. The above problems seriously affect the security of individuals and even the country, and it is also urgent to solve these security issues.

[0022] To solve the above problems, see Figure 1 The first aspect of the present invention discloses a human-machine authentication method based on fingerprint features, which is used at a user end and includes the following steps: S11, the user sends a user fingerprint feature and a one-time random number to the device server; the device server is used to authenticate the user through the received user fingerprint feature and the one-time random number, and if the user passes the authentication, the device server is used to obtain a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation; S12, if the user receives the first challenge value, the first MAC operation result and the first encrypted message, the user compares the second MAC operation result generated by itself with the received first MAC operation result to see if they are consistent. If they are consistent, the device server passes the authentication and executes S13; S13, the user performs a hash operation on the generated random number and encrypts it to obtain a second encrypted message, and performs a MAC operation to obtain a third MAC operation result; the second encrypted message and the third MAC operation result are sent to the device server; the device server is used to authenticate the user through the second encrypted message and the third MAC operation result, and if the authentication is successful, the device server is used to send an encrypted success message; S14, if the user receives the encrypted success message, the authentication is completed after decryption.

[0023] In some implementation schemes of the present invention, in S12, the process of the user comparing the second MAC operation result generated by itself with the received first MAC operation result to see whether they are consistent is: (1) The user receives the first challenge value Generate a second response value ; (2) Through the second response value Decrypt the first encrypted message received , get the random number of the second device ; (3) For the first encrypted message , second response value and the second device random number Perform MAC operation to generate the second MAC operation result , compare whether the received first MAC operation result is consistent with the second MAC operation result.

[0024] In some implementation schemes of the present invention, S13, the user performs a hash operation on the generated random number and encrypts it to obtain a second encrypted message, and performs a MAC operation to obtain a third MAC operation result. The process is: (1) The user generates the first user random number , for the first user random number and the first device random number generated by the device server Perform hash operation to obtain the third challenge value , pass the third challenge value Get the third response value ; (2) The first response value obtained by the first challenge value in S11 User fingerprint features , the first random number , the first user random number and the third response value Encrypt to obtain the second encrypted message ; (3) Second encrypted message , first response value and the first user random number Perform MAC operation to generate the third MAC operation result .

[0025] In some embodiments of the present invention, in S14, the user uses the first device to generate a random number. Decrypt the received success message.

[0026] The second aspect of the present invention discloses a human-machine authentication device based on fingerprint features, comprising: A user sending unit is used to control the user to send a user fingerprint feature and a one-time random number to a device server; the device server is used to authenticate the user through the received user fingerprint feature and the one-time random number, and if the user passes the authentication, the device server is used to obtain a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation; A user comparison unit, if the user receives the first challenge value, the first MAC operation result and the first encrypted message, is used to control the user to compare whether the second MAC operation result generated by the user is consistent with the received first MAC operation result. If they are consistent, the device server passes the authentication and executes the user encryption unit; The user encryption unit is used to control the user to obtain a second encrypted message after performing a hash operation on the generated random number and encrypting it, and to perform a MAC operation to obtain a third MAC operation result; the second encrypted message and the third MAC operation result are sent to the device server; the device server is used to authenticate the user through the second encrypted message and the third MAC operation result, and if the authentication is successful, the device server is used to send an encrypted success message; The user decryption unit is used to control the user to decrypt and then end the authentication if the user receives the encrypted success message.

[0027] See also Figure 3 The third aspect of the present invention discloses a human-machine authentication method based on fingerprint features, which is used on a device server and includes the following steps: S21, the device server authenticates the user. If the authentication is successful, execute S22; S22, the device server obtains a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation, and sends the first challenge value, the first MAC operation result and the first encrypted message to the user; the user is used to authenticate the device server by comparing the second MAC operation result generated by itself with the received first MAC operation result. After the authentication is passed, the user is used to perform a Hami operation and a MAC operation to obtain a second encrypted message and a third MAC operation result; S23, if the device server receives the second encrypted message and the third MAC operation result, it decrypts the second encrypted message, performs MAC operation on the decrypted result, obtains a fourth MAC operation result, and authenticates the user by comparing the fourth MAC operation result with the third MAC operation result. If the user passes the authentication, execute S24; S24, the device server generates encrypted success information and sends it to the user.

[0028] In some embodiments of the present invention, in S21, the device server compares the fingerprint feature stored in the device User fingerprint features , if the two are consistent, user authentication is successful.

[0029] In some implementation schemes of the present invention, in S22, the process in which the device server obtains the first challenge value, the first MAC operation result and the first encrypted message through the challenge response rule and the MAC operation is: (1) The device server generates the first device random number ; (2) The device server uses the first response value User fingerprint features , a one-time random number generated by the user and the first device random number After encryption, the first encrypted message is obtained ; (3) For the first encrypted message , first response value and the first device random number After performing MAC operation, the first MAC operation result is obtained .

[0030] In some implementation schemes of the present invention, in S23, the process of performing MAC operation on the decryption result to obtain the fourth MAC operation result is as follows: the device server receives the first response value Decrypt the received second encrypted message , get the second user random number , for the second encrypted message , first response value and the second user random number Perform MAC operation to obtain the fourth MAC operation result .

[0031] The fourth aspect of the present invention discloses a human-machine authentication device based on fingerprint features, comprising: The first authentication unit of the device is used to control the device server to authenticate the user, and if the authentication is successful, execute the device encryption unit; The device encryption unit is used to control the device server to obtain a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation, and send the first challenge value, the first MAC operation result and the first encrypted message to the user; the user is used to authenticate the device server by comparing the second MAC operation result generated by itself with the received first MAC operation result. After the authentication is passed, the user is used to perform a Hami operation and a MAC operation to obtain a second encrypted message and a third MAC operation result; a second authentication unit of the device, for decrypting the second encrypted message if the device server receives the second encrypted message and the third MAC operation result, performing MAC operation on the decrypted message to obtain a fourth MAC operation result, authenticating the user by comparing the fourth MAC operation result with the third MAC operation result, and executing the second encryption unit of the device if the user passes the authentication; The second encryption unit of the device is used to control the device server to generate encryption success information and send it to the user.

[0032] See also Figure 3 In some specific embodiments of the present invention, a human-machine authentication method based on fingerprint features is disclosed, comprising the following steps: (1) User sends his / her fingerprint to the device server and a one-time random value ; (2) The device fingerprint features stored in the device server are: , and the received fingerprint features Perform a comparison. If they are consistent, execute step (3); otherwise, exit the authentication.

[0033] (3) The device server generates the first device random number , the set of challenge-response pairs stored is , where the calculation formula is , is a physical unclonable function, is the first challenge value, is the first response value; Using device response values encryption , and the first device random number Generate the first encrypted message , for the first encrypted message , device response value and the first device random number Perform MAC operation to generate the first MAC operation result ,Will , , Sent to user User; (4) User uses the first challenge value received Generate response value second response value , and then use the second response value Decrypt the first encrypted message received Get the random number of the second device ,right , and Perform MAC operation to generate the second MAC operation result , and the first MAC operation result received A comparison is performed. If they are consistent, the device server Server passes the authentication and executes step (5); otherwise, the authentication is exited.

[0034] (5) User generates the first user random number ,right and Perform HASH operation to generate a new third challenge value , and then use the new challenge value Generate a new third response value ,use encryption , , and Generate the second encrypted message ,right , and Perform MAC operation to generate the third MAC operation result ,Will , Sent to the device server.

[0035] (6) Device server usage Decrypt the received second encrypted message Get the second user's random number ,right , and Perform MAC operation to generate a fourth MAC operation result , and the received third MAC operation result A comparison is performed. If they are consistent, the user User has passed the authentication and the process goes to step (7); otherwise, the authentication is exited.

[0036] (7) The device server uses the second user's random number Encrypted success generation And send it to user User; (8) User User uses the first user random number Decrypt the received message and get success, and the authentication is completed.

[0037] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A human-machine authentication method based on fingerprint features, characterized in that: The following steps are involved: S11, the user sends the user fingerprint feature and a one-time random number to the device server; The device server is used to authenticate the user through the received user fingerprint feature and the one-time random number. If the user passes the authentication, the device server is used to obtain a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation; S12, if the user receives the first challenge value, the first MAC operation result and the first encrypted message, the user compares the second MAC operation result generated by itself with the received first MAC operation result to see if they are consistent. If they are consistent, the device server passes the authentication and executes S13; S13, the user performs a hash operation on the generated random number and encrypts it to obtain a second encrypted message, and performs a MAC operation to obtain a third MAC operation result; the second encrypted message and the third MAC operation result are sent to the device server; the device server is used to authenticate the user through the second encrypted message and the third MAC operation result, and if the authentication is successful, the device server is used to send an encrypted success message; S14, if the user receives the encrypted success message, the authentication is completed after decryption.

2. According to the fingerprint feature-based human-machine authentication method of claim 1, it is characterized in that: In S12, the process of the user comparing the second MAC operation result generated by itself with the received first MAC operation result to see whether they are consistent is as follows: (1) The user receives the first challenge value Generate a second response value ; (2) Through the second response value Decrypt the first encrypted message received , get the random number of the second device ; (3) For the first encrypted message , second response value and the second device random number Perform MAC operation to generate the second MAC operation result , compare whether the received first MAC operation result is consistent with the second MAC operation result.

3. According to the fingerprint feature-based human-machine authentication method of claim 1, it is characterized in that: S13, the user performs a hash operation on the generated random number and encrypts it to obtain a second encrypted message, and performs a MAC operation to obtain a third MAC operation result: (1) The user generates the first user random number , for the first user random number and the first device random number generated by the device server Perform hash operation to obtain the third challenge value , pass the third challenge value Get the third response value ; (2) The first response value obtained by the first challenge value in S11 User fingerprint features , the first random number , the first user random number and the third response value Encrypt to obtain the second encrypted message ; (3) Second encrypted message , first response value and the first user random number Perform MAC operation to generate the third MAC operation result .

4. A human-machine authentication method based on fingerprint features according to claim 3, characterized in that: In S14, the user uses the first device to generate a random number Decrypt the received success message.

5. A human-machine authentication device based on fingerprint features, characterized in that: include: A user sending unit, used to control the user to send the user fingerprint feature and a one-time random number to the device server; The device server is used to authenticate the user through the received user fingerprint feature and the one-time random number. If the user passes the authentication, the device server is used to obtain a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation; A user comparison unit, if the user receives the first challenge value, the first MAC operation result and the first encrypted message, is used to control the user to compare whether the second MAC operation result generated by the user is consistent with the received first MAC operation result. If they are consistent, the device server passes the authentication and executes the user encryption unit; The user encryption unit is used to control the user to obtain a second encrypted message after performing a hash operation on the generated random number and encrypting it, and to perform a MAC operation to obtain a third MAC operation result; the second encrypted message and the third MAC operation result are sent to the device server; the device server is used to authenticate the user through the second encrypted message and the third MAC operation result, and if the authentication is successful, the device server is used to send an encrypted success message; The user decryption unit is used to control the user to decrypt and then end the authentication if the user receives the encrypted success message.

6. A human-machine authentication method based on fingerprint features, characterized in that: The following steps are involved: S21, the device server authenticates the user. If the authentication is successful, execute S22; S22, the device server obtains a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation, and sends the first challenge value, the first MAC operation result and the first encrypted message to the user; The user is used to authenticate the device server by comparing the second MAC operation result generated by itself with the received first MAC operation result. After the authentication is passed, the user is used to perform Hami operation and MAC operation to obtain a second encrypted message and a third MAC operation result; S23, if the device server receives the second encrypted message and the third MAC operation result, it decrypts the second encrypted message, performs MAC operation on the decrypted result, obtains a fourth MAC operation result, and authenticates the user by comparing the fourth MAC operation result with the third MAC operation result. If the user passes the authentication, execute S24; S24, the device server generates encrypted success information and sends it to the user.

7. A fingerprint-based human-machine authentication method according to claim 6, characterized in that: In S21, the device server compares the fingerprint features stored in the device User fingerprint features , if the two are consistent, user authentication is successful.

8. The human-machine authentication method based on fingerprint features according to claim 6 is characterized in that: In S22, the process of the device server obtaining the first challenge value, the first MAC operation result and the first encrypted message through the challenge response rule and the MAC operation is: (1) The device server generates the first device random number ; (2) The device server uses the first response value User fingerprint features , a one-time random number generated by the user and the first device random number After encryption, the first encrypted message is obtained ; (3) For the first encrypted message , first response value and the first device random number After performing MAC operation, the first MAC operation result is obtained .

9. The human-machine authentication method based on fingerprint features according to claim 6 is characterized in that: In S23, the process of performing MAC operation on the decryption result to obtain the fourth MAC operation result is as follows: the device server receives the first response value Decrypt the received second encrypted message , get the second user random number , for the second encrypted message , first response value and the second user random number Perform MAC operation to obtain the fourth MAC operation result .

10. A human-machine authentication device based on fingerprint features, comprising: The first authentication unit of the device is used to control the device server to authenticate the user, and if the authentication is successful, execute the device encryption unit; A device encryption unit, used to control the device server to obtain a first challenge value, a first MAC operation result and a first encrypted message through a challenge response rule and a MAC operation, and send the first challenge value, the first MAC operation result and the first encrypted message to the user; The user is used to authenticate the device server by comparing the second MAC operation result generated by itself with the received first MAC operation result. After the authentication is passed, the user is used to perform Hami operation and MAC operation to obtain a second encrypted message and a third MAC operation result; a second authentication unit of the device, for decrypting the second encrypted message if the device server receives the second encrypted message and the third MAC operation result, performing MAC operation on the decrypted message to obtain a fourth MAC operation result, authenticating the user by comparing the fourth MAC operation result with the third MAC operation result, and executing the second encryption unit of the device if the user passes the authentication; The second encryption unit of the device is used to control the device server to generate encryption success information and send it to the user.

Images