Identity authentication method, identity authentication device and storage medium

Abstract

The invention discloses an identity authentication method, an identity authentication device and a storage medium, and relates to the technical field of identity authentication, and the method comprises the steps: obtaining to-be-authenticated biological feature data of a user when a public key and a first ciphertext sent by an authentication end which establishes Bluetooth connection with an intelligent glasses end are recognized; performing homomorphic encryption processing on the to-be-authenticated biological characteristic data by using the public key and the first ciphertext to obtain a result ciphertext; and the result ciphertext is sent to the authentication end, so that the authentication end performs identity authentication according to the result ciphertext, and the security of data transmission between the intelligent glasses end and the authentication end is ensured while the authentication convenience with the authentication end is improved based on the intelligent glasses end.

Description

Technical Field

[0001] The present application relates to the field of identity authentication technology, and in particular to an identity authentication method, an identity authentication device and a storage medium. Background Art

[0002] In recent years, with the development of smart wearable devices, the application fields of smart glasses have become more and more extensive, including the field of identity authentication. For example, in scenarios such as smart cars, regional access control, and smart access locks, using smart glasses for identity authentication will greatly improve the convenience of authentication.

[0003] However, identity authentication of smart glasses involves data transmission with the authentication end (such as smart cars, regional access control smart door locks, etc.), which inevitably involves the transmission of user identity data, and there is a risk of data leakage during the transmission process. Therefore, how to ensure the security of data transmission while ensuring the convenience of authentication has become an urgent problem to be solved. Summary of the invention

[0004] The main purpose of this application is to provide an identity authentication method, an identity authentication device and a storage medium, aiming to solve the technical problem of how to ensure the security of data transmission while ensuring the convenience of authentication.

[0005] To achieve the above purpose, the present application proposes an identity authentication method, which is applied to the smart glasses end, and the identity authentication method includes: When the public key and the first ciphertext sent by the authentication end that establishes a Bluetooth connection with the smart glasses end are identified, the biometric data of the user to be authenticated is obtained; Using the public key and the first ciphertext to perform homomorphic encryption on the biometric data to be authenticated, to obtain a result ciphertext; The result ciphertext is sent to the authentication end so that the authentication end can perform identity authentication based on the result ciphertext.

[0006] In one embodiment, the step of identifying the public key and the first ciphertext sent by the authentication end that establishes a Bluetooth connection with the smart glasses end also includes: Establish a binding relationship with the authentication end; The steps to establish a binding relationship with the authentication end include: Based on the Bluetooth connection, when the public key transmitted by the authentication end is recognized, the target biometric data is obtained; The target biometric data is encrypted using the public key, and the encrypted biometric data is transmitted to the authentication end so that the authentication end can decrypt and store the encrypted biometric data and establish a binding relationship with the smart glasses end.

[0007] In one embodiment, the steps of performing homomorphic encryption processing on the biometric data to be authenticated using the public key and the first ciphertext to obtain the result ciphertext include: Using the public key, encrypting the biometric feature data to be authenticated after the left shift operation to obtain a second ciphertext, wherein the left shift operation is to left-shift the biometric feature data to be authenticated in binary form by a preset number of bits; The first ciphertext and the second ciphertext are homomorphically compared to obtain a result ciphertext.

[0008] In addition, to achieve the above purpose, the present application also proposes an identity authentication method, which is applied to the authentication end, and the identity authentication method includes: Performing homomorphic addition processing on the stored target biometric data to obtain a first ciphertext, and transmitting the generated public key and the first ciphertext to the smart glasses end that has established a Bluetooth connection with the authentication end; When the result ciphertext returned by the smart glasses based on the public key and the first ciphertext is received, the result ciphertext is decrypted to obtain the identity authentication result.

[0009] In one embodiment, before the step of performing homomorphic addition processing on the stored encrypted biometric data, the step further includes: Establish a binding relationship with the smart glasses; The steps to establish a binding relationship with the smart glasses include: Based on the Bluetooth connection, generate public and private keys according to encryption parameters, and send the public key to the smart glasses; Receive the encrypted biometric data returned by the smart glasses based on the public key, use the private key to decrypt the encrypted biometric data, obtain the target biometric data, and then store the target biometric data to establish a binding relationship with the smart glasses.

[0010] In one embodiment, the step of performing homomorphic addition processing on the stored encrypted biometric data to obtain a first ciphertext includes: When a Bluetooth connection is detected with the smart glasses, a random value of a preset number of digits is generated; The target biometric data after the left shift operation is homomorphically added to the random value to obtain a first ciphertext, wherein the left shift operation is to left-shift the encrypted biometric data in binary form by a preset number of bits.

[0011] In one embodiment, the step of decrypting the result ciphertext to obtain the identity authentication result includes: Use the private key to decrypt the result ciphertext to obtain the result plaintext; The value at the reciprocal preset digit in the result plaintext is extracted to obtain the result value, the result value is compared with the random value, and the identity authentication result is determined according to the comparison result.

[0012] In one embodiment, the step of determining the identity authentication result according to the comparison result includes: If the comparison result is that the result value is the same as the random value, an identity authentication result indicating that the identity authentication is successful is generated; If the comparison result value is different from the random value, an authentication result indicating that the authentication failed is generated.

[0013] In addition, to achieve the above-mentioned purpose, the present application also proposes an identity authentication device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the identity authentication method as described above.

[0014] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the identity authentication method as described above are implemented.

[0015] One or more technical solutions proposed in this application have at least the following technical effects: An identity authentication method applied to a smart glasses end is proposed. The identity authentication method comprises the following steps: when a public key and a first ciphertext sent by an authentication end that establishes a Bluetooth connection with the smart glasses end are identified, the user's biometric data to be authenticated is obtained; the public key and the first ciphertext are used to perform homomorphic encryption on the biometric data to be authenticated to obtain a result ciphertext; and the result ciphertext is sent to the authentication end so that the authentication end performs identity authentication according to the result ciphertext.

[0016] That is, the present application encrypts the ciphertext of the result used for identity authentication transmitted between the smart glasses and the authentication end through homomorphic encryption processing, so that the encryption state of the user identity data can always be maintained during the data transmission process, thereby avoiding the transmission and authentication risks of data leakage, and achieving the security of data transmission between the smart glasses and the authentication end while ensuring the convenience of authentication based on the smart glasses and the authentication end. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0018] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0019] Figure 1 This is a flow chart of an embodiment of the identity authentication method of the present application when it is applied to smart glasses; Figure 2 It is a structural diagram of the smart glasses end; Figure 3 This is a brief flowchart of homomorphic encryption processing; Figure 4 This is a flow chart of an embodiment of the identity authentication method of this application when it is applied to the authentication end; Figure 5 A brief flowchart of the identity authentication method provided for this application; Figure 6 This is a schematic diagram of the device structure of the hardware operating environment involved in the identity authentication method in the embodiment of the present application.

[0020] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0021] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0022] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0023] The main solution of the embodiment of the present application is: when the public key and the first ciphertext sent by the authentication end that establishes a Bluetooth connection with the smart glasses end are identified, the user's biometric data to be authenticated is obtained; the public key and the first ciphertext are used to perform homomorphic encryption on the biometric data to be authenticated to obtain the result ciphertext; the result ciphertext is sent to the authentication end so that the authentication end can perform identity authentication based on the result ciphertext.

[0024] In the existing technology, identity authentication of smart glasses involves data transmission between the authentication end (such as smart cars, regional access control smart door locks, etc.), which inevitably involves the transmission of user identity data, and there is a risk of data leakage during the transmission process. Therefore, how to ensure the security of data transmission while ensuring the convenience of authentication has become an urgent problem to be solved.

[0025] This application provides a solution, which uses homomorphic encryption to encrypt the result ciphertext used for identity authentication transmitted between the smart glasses and the authentication end, so that the user identity data can always be kept encrypted during the data transmission process. In this way, the transmission and authentication risks of data leakage are avoided, and the security of data transmission between the smart glasses and the authentication end is ensured while ensuring the convenience of authentication based on the smart glasses and the authentication end.

[0026] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, an identity authentication device, etc. The following takes the identity authentication device as an example to illustrate this embodiment and the following embodiments.

[0027] Based on this, the present application embodiment provides an identity authentication method, referring to Figure 1 , Figure 1 This is a flow chart of an embodiment of the identity authentication method of the present application when it is applied on the smart glasses side.

[0028] In this embodiment, the identity authentication method includes steps S10 to S30: Step S10, when the public key and the first ciphertext sent by the authentication end that establishes a Bluetooth connection with the smart glasses end are identified, the user's biometric data to be authenticated is obtained.

[0029] It should be noted that the collected biometric data of the user may be iris data, retina data, voiceprint data, etc. The biometric data of the user collected in this embodiment is the user's fingerprint data. Figure 2 The fingerprint recognition area on the smart glasses shown realizes collection.

[0030] like Figure 2 The smart glasses shown mainly include three parts: the left temple, the right temple and the front frame. The parts are electrically connected through FPC. The left temple is mainly provided with a battery and a fingerprint recognition area, the right temple is mainly provided with a main control module, and the front frame is mainly provided with a camera and a main controller. The core components required in this embodiment are the main control module, the main controller and the fingerprint recognition area. The main control module is used for performing calculations and Bluetooth connection with the authentication end. The main controller is used for encrypting biometric data and transmitting between the two ends. The fingerprint recognition area is used to collect the user's fingerprint data.

[0031] Specifically, when the main controller on the smart glasses in this embodiment recognizes the public key and the first ciphertext sent by the authentication end with which a Bluetooth connection has been established, it will output a voice prompt or a prompt sound prompt, etc., prompting the user to place the fingerprint for identity authentication on the fingerprint recognition area. By touching the fingerprint recognition area, the fingerprint recognition area can collect the biometric data to be authenticated corresponding to the fingerprint, thereby improving the convenience of identity authentication through smart glasses.

[0032] Step S20, using the public key and the first ciphertext to perform homomorphic encryption on the biometric data to be authenticated to obtain a result ciphertext.

[0033] After receiving the public key and the first ciphertext, the main controller uses the public key and the first ciphertext to perform homomorphic encryption on the biometric data to be authenticated to obtain the result ciphertext, thereby improving the security of the result ciphertext transmitted to the authentication end. Figure 3 , the homomorphic encryption process is explained.

[0034] Homomorphic encryption processing is an encryption operation that allows data to be calculated and transmitted in an encrypted state. Specifically, the authentication end uses the generated public key to encrypt the data plaintext to obtain the data ciphertext, and then sends the data ciphertext and the public key to the smart glasses. The smart glasses perform ciphertext operations on the biometric data to be authenticated based on the data ciphertext and the public key. After obtaining the result ciphertext, the result ciphertext is sent to the authentication end. The authentication end uses the generated private key to decrypt the result ciphertext to obtain the first result plaintext, and at the same time performs plaintext operations on the data plaintext to obtain the second result plaintext. The first result plaintext and the second result plaintext are compared, and the authentication end determines whether the identity authentication of the wearer of the smart glasses is passed based on the comparison file.

[0035] Among them, ciphertext operation is the representation of plaintext operation in ciphertext state, which is essentially the same. Therefore, this encryption process can guarantee the security of the user's biometric data transmitted between the two ends to the greatest extent. At the same time, because homomorphic encryption processing has the security of anti-quantum attack, it can further guarantee the security of data to the greatest extent and realize the user's identity authentication without data leakage.

[0036] It should be noted that Figure 3 The data plaintext in is the correct biometric data corresponding to the smart glasses end stored in the early stage on the authentication end, and the data ciphertext is the first ciphertext.

[0037] Step S30, sending the result ciphertext to the authentication end so that the authentication end performs identity authentication based on the result ciphertext.

[0038] The result ciphertext after homomorphic encryption processing is sent to the authentication end, and identity authentication is performed on the authentication end. Because the data used to represent the identity comparison result is in an encrypted state, even if the result ciphertext is intercepted or leaked during the transmission process, it is in an encrypted state and will not cause the user's biometric data to be stolen.

[0039] Exemplarily, step S10 may further include step A10: Step A10: Establish a binding relationship with the authentication end.

[0040] Before formally entering the operation process of step S10, a binding relationship between the smart glasses and the authentication end needs to be established, that is, the authentication end needs to store biometric data that can indicate the correct user. The specific binding relationship establishment process is as follows: In a feasible embodiment, step A10 may include steps A11-A12: Step A11, based on the Bluetooth connection, when the public key transmitted by the authentication end is identified, the target biometric data is obtained.

[0041] First, the smart glasses used for identity authentication must first establish a Bluetooth connection with the authentication end through the main control module in order to transmit data based on the Bluetooth connection.

[0042] After the authentication end detects that a Bluetooth connection has been established between the smart glasses and the authentication end, the authentication end will first set the encryption parameters used to generate the public key and the private key, and input the encryption parameters into the key generation algorithm Keygen to obtain the public key and the private key, as shown in Formula 1: ————Formula 1 Wherein, pk in Formula 1 is a public key used for encryption, sk is a private key used for decryption, and params is an encryption parameter.

[0043] After completing the generation of the public key and private key, the authentication end will first send the public key to the smart glasses based on the Bluetooth connection. After the main controller on the smart glasses recognizes the public key transmitted by the authentication end, it will output a voice or prompt tone to prompt the user to place the fingerprint for identity authentication on the fingerprint recognition area. After the fingerprint recognition area recognizes the user's fingerprint data, it will collect the user's fingerprint data to obtain the target biometric data.

[0044] Step A12, encrypt the target biometric data using the public key, and transmit the encrypted biometric data to the authentication end, so that the authentication end decrypts and stores the encrypted biometric data and establishes a binding relationship with the smart glasses end.

[0045] The main controller on the smart glasses receives the target biometric data and encrypts the target biometric data using the accessed public key. After obtaining the encrypted biometric data, the encrypted biometric data is transmitted to the authentication end. After receiving the encrypted biometric data, the authentication end decrypts the encrypted biometric data using the private key, obtains the target biometric data and stores it. After the storage operation is completed, it means that a binding relationship is established between the smart glasses and the authentication end, which facilitates the subsequent authentication end to perform user identity authentication.

[0046] Exemplarily, step S20 may include steps S21-S22: Step S21, using the public key, encrypting the biometric feature data to be authenticated after the left shift operation to obtain a second ciphertext, wherein the left shift operation is to left-shift the biometric feature data to be authenticated in binary form by a preset number of bits.

[0047] Step S22, performing a homomorphic comparison operation on the first ciphertext and the second ciphertext to obtain a result ciphertext.

[0048] On the smart glasses side, the specific process of homomorphic encryption of the authentication biometrics based on the public key and the first ciphertext is as follows: After the main controller on the smart glasses obtains the biometric data to be authenticated collected in the fingerprint recognition area, because the biometric data to be authenticated is stored in binary form in the main controller, each value in the biometric data to be authenticated can be shifted left by a preset number of bits in turn, and then the public key can be used to encrypt the biometric data to be authenticated after being shifted left by the preset number of bits to obtain a second ciphertext.

[0049] At this time, the second ciphertext and the first ciphertext are both encrypted. Figure 3 It is explained in the figure that homomorphic encryption processing is an encryption operation that allows data to be calculated and transmitted in an encrypted state. Therefore, the main controller can use the properties of homomorphic encryption to perform a homomorphic comparison operation on the first ciphertext and the second ciphertext in an encrypted state at this time, so as to compare the encrypted values ​​in the first ciphertext and the second ciphertext without decrypting the ciphertext, and obtain the result ciphertext, that is, perform a ciphertext operation on the first ciphertext and the second ciphertext to obtain the result ciphertext, which can be shown in Formula 2: ————Formula 2 Among them, C3 is the result ciphertext, and HE.Compare(C1,C2) represents a homomorphic comparison operation on the first ciphertext and the second ciphertext.

[0050] It should be noted that the second ciphertext in this embodiment is Figure 3 The data ciphertext in .

[0051] Because the first ciphertext and the second ciphertext are ciphertext operations on the smart glasses, the security of the user identity comparison operation process on the smart glasses can be increased, avoiding data leakage problems caused by the smart glasses being hacked, and further improving data security.

[0052] In this embodiment, the present application uses homomorphic encryption to encrypt the result ciphertext for identity authentication transmitted between the smart glasses and the authentication end, so that the user identity data can always be kept encrypted during the data transmission process. In this way, the transmission and authentication risks of data leakage are avoided, and the security of data transmission between the smart glasses and the authentication end is ensured while ensuring the convenience of authentication based on the smart glasses and the authentication end.

[0053] Based on the above identity authentication method applied to the smart glasses, this application also proposes an identity authentication method applied to the authentication end, specifically referring to Figure 4 As shown, the identity authentication method includes steps S40 to S50: Step S40, performing homomorphic addition processing on the stored target biometric data to obtain a first ciphertext, and transmitting the generated public key and the first ciphertext to the smart glasses end that establishes a Bluetooth connection with the authentication end.

[0054] Specifically, when the smart glasses end that has established a Bluetooth connection with the authentication end needs to perform identity authentication, the authentication end at this time will extract the stored target biometric data, and perform homomorphic addition processing on the target biometric data, and after obtaining the first ciphertext, the generated public key and the first ciphertext will be sent to the smart glasses end, and step S10 will be executed.

[0055] Although the data transmitted from the authentication end to the smart glasses contains the public key at this time, because the first ciphertext is formed by homomorphic addition processing, even if the transmission process at this time is illegally intercepted, because the first ciphertext containing the legitimate user identity data is in an encrypted state, it will not cause the user identity data to be leaked, thereby effectively improving the security of data transmission during the identity authentication process at both ends.

[0056] Step S50, when the result ciphertext returned by the smart glasses based on the public key and the first ciphertext is received, the result ciphertext is decrypted to obtain the identity authentication result.

[0057] When the authentication end receives the result ciphertext returned based on step S30, it will decrypt the result ciphertext and obtain the comparison result of the user identity comparison performed on the smart glasses end. The authentication end can directly determine whether the user identity data of the user currently wearing the smart glasses end is legal user identity data based on the comparison result. If the comparison result is that the user identity data of the user is legal user identity data, it is determined that the identity authentication is passed, and the authentication end performs the operation corresponding to the identity authentication passing; if the comparison result is that the user identity data of the user is not legal user identity data, it is determined that the identity authentication is not passed, and the authentication end performs the operation corresponding to the identity authentication not passing.

[0058] Because the result ciphertext is transmitted in an encrypted state between the smart glasses and the authentication end, it is possible to avoid leakage of user identity data caused by interception of the result ciphertext during transmission. At the same time, decryption of the result ciphertext is performed on the authentication end, which can avoid the problem of a high risk of leakage of the legitimate user identity data (i.e., target biometric data) stored on the authentication end in plain text on the smart glasses.

[0059] Exemplarily, before step S40, step B10 may be further included: Step B10, establishing a binding relationship with the smart glasses.

[0060] In a feasible embodiment, step B10 may include steps B11-B12: Step B11, based on the Bluetooth connection, generate a public key and a private key according to the encryption parameters, and send the public key to the smart glasses.

[0061] Step B12, receiving the encrypted biometric data returned by the smart glasses based on the public key, storing the encrypted biometric data, and thereby establishing a binding relationship with the smart glasses.

[0062] The specific implementation of step B11 to step B12 can refer to the specific implementation of the above-mentioned step A10 to step A12, and will not be repeated here.

[0063] In a feasible implementation manner, step S40 may further include steps S41-S42: Step S41, when it is detected that a Bluetooth connection is established with the smart glasses, a random value of a preset number of bits is generated.

[0064] Step S42, performing homomorphic addition processing on the target biometric data after the left shift processing operation and the random value to obtain a first ciphertext, wherein the left shift processing operation is to left-shift the target biometric data in binary form by a preset number of bits.

[0065] On the authentication side, when the smart glasses are identified as needing identity authentication, the specific operations are as follows: When the authentication end detects that a Bluetooth connection has been established with the smart glasses and the smart glasses need to perform identity authentication, in order to ensure security, the authentication end will first use a pseudo-random number generator to obtain a random value of a preset number of bits. In this embodiment, the random value generated by the pseudo-random number generator is 128 bits.

[0066] In order to improve the data transmission security of the target biometric data between the authentication end and the smart glasses end, it is also proposed to perform a left shift processing operation on the target biometric data in binary form at the authentication end before transmission, so as to confuse the target biometric data, making it difficult to obtain the correct target biometric data without the correct decryption steps and private key.

[0067] Because the preset number of bits of the random value generated in the above step is 128 bits, the left shift processing operation in this step is to shift the value of the target biometric data in binary form to the left by 128 bits in sequence to obtain the target biometric data after the left shift processing operation, and perform homomorphic addition processing on the target biometric data after the left shift processing operation and the random value to obtain the first ciphertext transmitted to the smart glasses end, which can be shown as Formula 3: ————Formula 3 Among them, C1 is the first ciphertext, HE.Add represents homomorphic addition processing, C is the target biometric data, HE.RotateL(C,128) means shifting the target biometric data left by 128 bits, and r is a random value.

[0068] It should be noted that in order to make the number of numerical digits on the first ciphertext correspond to the number of numerical digits on the second ciphertext and avoid the problem of comparison confusion in the homomorphic comparison operation due to the confusion of numerical digits, the preset number of bits for left shift when performing the left shift operation on the biometric data to be authenticated in step S21 must be consistent with the preset number of bits for left shift in this step, for example, both are 128 bits.

[0069] In a feasible implementation manner, step S50 may further include steps S51-S52: Step S51, decrypt the result ciphertext using the private key to obtain the result plaintext.

[0070] Step S52, extracting the value at the reciprocal preset digit in the result plaintext to obtain the result value, comparing the result value with the random value, and determining the identity authentication result according to the comparison result.

[0071] After receiving the result ciphertext transmitted by the smart glasses based on step S22, the authentication end will directly use the private key to decrypt the result ciphertext to obtain the result plaintext that can represent the comparison result between the biometric feature to be authenticated and the target biometric feature.

[0072] Because the result ciphertext is obtained by comparing the numerical values ​​of each digit in the first ciphertext with the numerical values ​​of the corresponding digits in the second ciphertext in sequence, and the first ciphertext and the second ciphertext are both obtained by performing corresponding encryption processing after the numerical values ​​of the corresponding biometrics are shifted left by a preset number of bits, that is, the first ciphertext is composed of the target biometric + a 128-bit random value, and the second ciphertext is composed of the biometric to be authenticated + a blank value. In the homomorphic comparison operation, if the numerical value corresponding to the target biometric and the numerical value corresponding to the biometric to be authenticated can correspond to each other, the 128-bit random value on the first ciphertext can directly replace the blank value in the second ciphertext, and the resulting ciphertext is composed of the target biometric / the numerical value of the biometric to be authenticated + a 128-bit random value.

[0073] Therefore, after decrypting the result plaintext, the authentication end extracts the result value obtained by extracting the reciprocal preset digits of the result plaintext, that is, the reciprocal 128-bit value, and compares it with the random value. If the value corresponding to the target biometric feature and the value corresponding to the biometric feature to be authenticated correspond to each other, then the extracted reciprocal 128-bit value is the 128-bit random value. Therefore, by comparing the comparison result obtained by comparing the result value and the random value, it can be determined whether the user identity data of the user currently wearing the smart glasses is legal user identity data.

[0074] It should be noted that Figure 3 The ciphertext operation and plaintext operation in the embodiment are specifically described. The ciphertext operation in this embodiment is to use the public key to encrypt the biometric data to be authenticated after the left shift operation to obtain the second ciphertext, and to perform a homomorphic comparison operation on the first ciphertext and the second ciphertext whose reciprocal 128-bit value is a random value to obtain the result ciphertext, while the plaintext operation in this embodiment is to generate a random value of a preset number of bits, because the value corresponding to the target biometric and the value corresponding to the biometric to be authenticated can correspond to each other, and the composition of the result ciphertext is the value of the target biometric / the biometric to be authenticated + a 128-bit random value, which can be obtained. In essence, they are all extractions of random values, and whether the identity authentication is passed is determined by comparing the random values. Therefore, it can be considered that the ciphertext operation and the plaintext operation are essentially the same.

[0075] Further, step S52 includes step S53 or step S54: Step S53: If the comparison result is that the result value is the same as the random value, an identity authentication result indicating that the identity authentication is successful is generated.

[0076] If the comparison result is that the result data and the random value are the same, that is, the value of the last 128 bits in the result plaintext is equal to the 128-bit random value, it means that the value corresponding to the biometric to be authenticated can completely correspond to the value corresponding to the target biometric, that is, the biometric to be authenticated is equal to the target biometric. At this time, the user identity data of the user wearing the smart glasses is legal user identity data. At this time, the authentication end will generate an authentication result indicating that the authentication is successful, and perform corresponding operations such as unlocking the area access control and smart door lock according to the authentication result.

[0077] Step S54: If the comparison shows that the result value is different from the random value, an identity authentication result indicating that the identity authentication has failed is generated.

[0078] If the comparison result is that the result data and the random value are different, that is, the value of the last 128 bits in the result plaintext is not equal to the 128-bit random value, it means that the value corresponding to the biometric feature to be authenticated cannot completely correspond to the value corresponding to the target biometric feature, that is, the biometric feature to be authenticated is not equal to the target biometric feature. At this time, the user identity data of the user wearing the smart glasses is illegal user identity data. At this time, the authentication end will generate an authentication result indicating that the authentication failed, and execute operations to keep the area access control, smart door locks, etc. in a locked state according to the authentication result.

[0079] In this embodiment, the present application encrypts and transmits the first ciphertext for identity authentication transmitted between the authentication end and the smart glasses end through homomorphic encryption processing, so that the encryption state of the user identity data can always be maintained during the data transmission process. In this way, the transmission and authentication risks of data leakage are avoided, and the security of data transmission between the smart glasses end and the authentication end is ensured while ensuring the convenience of authentication based on the smart glasses end and the authentication end.

[0080] For example, to help understand the implementation process of the identity authentication method obtained by combining this embodiment with the above-mentioned embodiment 1, please refer to Figure 5 , Figure 5 A brief flow chart of an identity authentication method is provided, specifically: In the initial stage, after the authentication end detects that a smart glasses end has established a Bluetooth connection with it, the authentication end will set encryption parameters, and after generating a public key and a private key through the encryption parameters, the public key will be sent to the smart glasses end. The smart glasses end obtains the user's target biometric data, and uses the public key to encrypt the target biometric data to obtain encrypted biometric data, and transmits the encrypted biometric data to the authentication end. The authentication end decrypts the encrypted biometric data, obtains the target biometric data and stores it.

[0081] During the identity authentication process, upon detecting that a Bluetooth connection has been established with the smart glasses, the authentication end generates a preset 128-bit random value, shifts the value of the target biometric data in binary form to the left by 128 bits in sequence, and performs homomorphic addition processing on the target biometric data after the left shift operation and the random value to obtain the first ciphertext. The first ciphertext and the public key are transmitted to the smart glasses end, which obtains the user's biometric data to be authenticated, and shifts the value of the biometric data to be authenticated in binary form to the left by 128 bits in sequence, and encrypts the random value of the biometric data to be authenticated after the left shift operation with the public key. After obtaining the second ciphertext, the first ciphertext and the second ciphertext are homomorphically compared to obtain the result ciphertext. The result ciphertext is sent to the authentication end, which decrypts it using the private key, and after obtaining the result plaintext, determines the identity authentication result according to the result plaintext.

[0082] According to the above process, the data is always in an encrypted state when transmitted between the authentication end and the smart glasses end. Therefore, the implementation process of the identity authentication method proposed in this embodiment can ensure the convenience of authentication based on smart glasses while ensuring the security of data transmission.

[0083] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the identity authentication method of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0084] The present application provides an identity authentication device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the identity authentication method in the above-mentioned embodiment one.

[0085] Reference below Figure 6 , which shows a schematic diagram of the structure of an identity authentication device suitable for implementing the embodiment of the present application. The identity authentication device in the embodiment of the present application may include but is not limited to devices such as smart glasses, regional access control, smart access control locks, etc. Figure 6 The identity authentication device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0086] like Figure 6As shown, the identity authentication device may include a processing device 1001 (such as a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the identity authentication device are also stored. The processing device 1001, ROM1002 and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a microphone, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the identity authentication device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows an identity authentication device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems may be implemented or have instead.

[0087] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0088] The identity authentication device provided by the present application adopts the identity authentication method in the above embodiment, which can solve the technical problem of how to ensure the security of data transmission while ensuring the convenience of authentication. Compared with the prior art, the beneficial effects of the identity authentication device provided by the present application are the same as the beneficial effects of the identity authentication method provided by the above embodiment, and the other technical features in the identity authentication device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0089] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0090] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0091] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, the computer-readable program instructions being used to execute the identity authentication method in the above-mentioned embodiment.

[0092] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM: Random Access Memory), a read-only memory (ROM: Read Only Memory), an erasable programmable read-only memory (EPROM: Erasable Programmable Read Only Memory or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM: CD-Read Only Memory), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency: Radio Frequency), etc., or any suitable combination of the above.

[0093] The computer-readable storage medium may be included in the identity authentication device; or may exist independently without being assembled into the identity authentication device.

[0094] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by the identity authentication device, the identity authentication device: when identifying the public key and the first ciphertext sent by the authentication end that establishes a Bluetooth connection with the smart glasses end, obtains the user's biometric data to be authenticated; uses the public key and the first ciphertext to perform homomorphic encryption on the biometric data to be authenticated to obtain the result ciphertext; sends the result ciphertext to the authentication end, so that the authentication end performs identity authentication based on the result ciphertext.

[0095] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0096] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0097] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0098] The readable storage medium provided in the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned identity authentication method, and can solve the technical problem of how to ensure the security of data transmission while ensuring the convenience of authentication. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided in the present application are the same as the beneficial effects of the identity authentication method provided in the above-mentioned embodiment, and will not be repeated here.

[0099] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. An identity authentication method, characterized in that: The identity authentication method is applied to the smart glasses, and the identity authentication method includes: When the public key and the first ciphertext sent by the authentication end that establishes a Bluetooth connection with the smart glasses end are identified, the biometric data of the user to be authenticated is obtained; Using the public key and the first ciphertext to perform homomorphic encryption on the biometric data to be authenticated to obtain a result ciphertext; The result ciphertext is sent to the authentication end so that the authentication end performs identity authentication according to the result ciphertext.

2. The identity authentication method according to claim 1, characterized in that: The step of identifying the public key and the first ciphertext sent by the authentication end that establishes a Bluetooth connection with the smart glasses end also includes: Establishing a binding relationship with the authentication end; The step of establishing a binding relationship with the authentication end comprises: Based on the Bluetooth connection, when the public key transmitted by the authentication end is identified, the target biometric data is acquired; The target biometric data is encrypted using the public key, and the encrypted biometric data is transmitted to the authentication end so that the authentication end can decrypt and store the encrypted biometric data and establish a binding relationship with the smart glasses end.

3. The identity authentication method according to claim 1, characterized in that: The step of performing homomorphic encryption processing on the biometric data to be authenticated by using the public key and the first ciphertext to obtain a result ciphertext comprises: Using the public key, encrypting the biometric feature data to be authenticated after the left shift operation to obtain a second ciphertext, wherein the left shift operation is to left-shift the biometric feature data to be authenticated in binary form by a preset number of bits; Performing a homomorphic comparison operation on the first ciphertext and the second ciphertext to obtain the result ciphertext.

4. An identity authentication method, characterized in that: The identity authentication method is applied to the authentication end, and the identity authentication method includes: Performing homomorphic addition processing on the stored target biometric data to obtain a first ciphertext, and transmitting the generated public key and the first ciphertext to a smart glasses end that establishes a Bluetooth connection with the authentication end; When the result ciphertext returned by the smart glasses based on the public key and the first ciphertext is received, the result ciphertext is decrypted to obtain the identity authentication result.

5. The identity authentication method according to claim 4, characterized in that: Before the step of performing homomorphic addition processing on the stored encrypted biometric data, the method further includes: Establishing a binding relationship with the smart glasses; The step of establishing a binding relationship with the smart glasses terminal comprises: Based on the Bluetooth connection, generate the public key and the private key according to the encryption parameters, and send the public key to the smart glasses; The encrypted biometric data returned by the smart glasses based on the public key is received, the encrypted biometric data is decrypted using the private key, and after obtaining the target biometric data, the target biometric data is stored, thereby establishing a binding relationship with the smart glasses.

6. The identity authentication method according to claim 5, characterized in that: The step of performing homomorphic addition processing on the stored encrypted biometric data to obtain a first ciphertext comprises: When a Bluetooth connection is detected to be established with the smart glasses, a random value of a preset number of bits is generated; The target biometric data after the left shift operation is homomorphically added to the random value to obtain the first ciphertext, wherein the left shift operation is to left-shift the encrypted biometric data in binary form by a preset number of bits.

7. The identity authentication method according to claim 6, characterized in that: The step of decrypting the result ciphertext to obtain the identity authentication result comprises: Decrypting the result ciphertext using the private key to obtain the result plaintext; The numerical value at the reciprocal preset digit in the result plaintext is extracted to obtain a result numerical value, the result numerical value is compared with the random numerical value, and the identity authentication result is determined according to the comparison result.

8. The identity authentication method according to claim 7, characterized in that: The step of determining the identity authentication result according to the comparison result comprises: If the comparison result is that the result value is the same as the random value, generating an identity authentication result indicating that the identity authentication is successful; If the comparison shows that the result value is different from the random value, an identity authentication result indicating that the identity authentication has failed is generated.

9. An identity authentication device, characterized in that: The identity authentication device comprises a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the identity authentication method according to any one of claims 1 to 8.

10. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the identity authentication method according to any one of claims 1 to 8 are implemented.

Images