The present application relates to
face identity authentication method based on terminal device legitimacy
precondition constraint and related device. Including: face recognition terminal sends device check request including device identification to
server;
Server generates device key based on
master key and device identification, and performs device check using device key; If not pass the check, terminate the
authentication; If pass, generate collection permission token through the
server, so that the terminal collects face
feature data based on the collection permission token, calculates the first
message authentication code using the pre-stored
authentication material for face feature, device identification and session identification, generates
face identity authentication request, and forwards to the
server through the
client; Through the server, generate device key based on
master key and received device identification using key derivation
algorithm, and verify the first
message authentication code based on the device key, and determine the identity authentication result according to the
verification result. The security of identity authentication is improved, and the risk of privacy leakage is reduced.