TW201843613A - Personal identity authentication method and system using graphic lock capable of ensuring a high-security identity authentication - Google Patents

Abstract

In a personal identity authentication method and system using a graphic lock, a user end provides a graphic input interface having N graphic areas, and obtains N graphic values respectively representing the graphic areas according to a stored specific identity identification code of a specific user and a predetermined reference code. Furthermore, when an input graphic trajectory (P<=N) passing through P graphic areas is generated via a user's sliding operation on the graphic input interface, an input code is generated according to P graphic values corresponding to P graphic areas by using a predetermined data encryption and a numerical value-to-letter code conversion method. A verification end determines whether the identity of the user is authenticated or not according to the input code from the user end and a stored reference verification code corresponding to the identity identification code.

Description

Personal identity authentication method and system using graphic lock

The invention relates to a personal identity authentication method and system, in particular to a personal identity authentication method and system using a graphic lock.

Thanks to the rapid development of mobile communication and network technologies, mobile devices can not only realize instant messaging but also meet the needs of mobile payment. In view of this, user identity authentication for mobile devices has become more important. For example, when performing a network payment process using a mobile device, personal identity authentication is related to the financial security of the payer, or when the user wants to use the mobile device to log into the personal account of the online bank, the personal identity is also required. Certification.

Although the current authentication method for mobile devices may generally include password authentication, graphic lock authentication, etc. via human input operation, the user may lose the authentication due to forgetting the password or password input error, or the user inputs the password or When unlocking a graphic, the password or unlocked graphic is stolen by others and the identity of the individual is stolen. Therefore, the existing identity authentication technology still has a lot of room for improvement. Therefore, in order to ensure the security of user information, it is urgent to develop a personal identity authentication method that is free of memory passwords and has high security.

Accordingly, it is an object of the present invention to provide a personal identity authentication method utilizing a graphics lock that overcomes the shortcomings of the prior art.

Therefore, the present invention provides a personal identity authentication method, which is implemented by a user terminal and a verification terminal connected to the user terminal via a communication network, and the user terminal provides a graphic with N different graphic regions. Input interface. The personal identity authentication method includes the following steps: (A) storing, by the user terminal, an identity identifier uniquely assigned to a specific user, and a predetermined reference code; (B) by the user terminal, according to And the at least one predetermined coding mode is used to obtain a set of N graphic values corresponding to the identity identification codes respectively representing the N graphic regions; (C) by using the verification end, Storing a reference verification code uniquely corresponding to the identity identifier; (D) passing the N graphics generated by a sliding operation of the user on the graphic input interface by the user terminal When the input graphics track of the P graphics area is in the region, the P graphics regions are respectively defined as the first to Pth input graphics regions according to the order in which the P graphics regions appear on the input graphics track, wherein P ≤ N; (E) by the user end, according to the P values of the N graphical values respectively representing the graphical values of the first to P input graphic regions, using a predetermined data encryption algorithm and a predetermined Numerical turn a code mode, generating an input code, and transmitting the input code to the verification terminal via the communication network; and (F) by the verification terminal, when receiving the input code from the user end, according to the input code And the reference verification code determines whether the identity of the user is successfully authenticated.

Accordingly, it is another object of the present invention to provide a personal identity authentication system that utilizes a graphical lock that overcomes the shortcomings of the prior art.

Accordingly, the present invention provides a personal identity authentication system including a user terminal and a verification terminal.

A user terminal includes a user input/output unit, a storage unit, a communication module, and a processing unit. The user input/output unit is provided with a graphic input interface having N different graphic areas, the storage unit stores an identity identifier uniquely assigned to a specific user, and a predetermined reference code, and the communication module is connected to a communication network. The processing unit is electrically connected to the user input/output unit, the storage unit, and the communication module, and includes an encoding module, and the encoding module stores the identity identifier and the reservation according to the storage unit. The reference code obtains, by using at least one predetermined coding mode, a set of N graphic values corresponding to the identity identification codes respectively representing the N graphic regions.

The verification terminal is connected to the communication network and stores a reference verification code uniquely corresponding to the identity identifier.

The user input/output unit generates an input graphic trajectory through the P graphics regions of the N graphics regions according to a slip operation on the graphics input interface by a user, where P≤N, and one Outputting an input result corresponding to the input graphic trajectory to the processing unit, the processing 2 unit, according to the input result, ordering the P graphic regions to appear on the input graphic trajectory, and the P graphic regions They are defined as first to Pth input graphic areas, respectively. The processing unit uses a predetermined data encryption algorithm and a predetermined value transcoding method according to the graphic values of the first to the Pth input graphic regions, respectively, according to the P values of the N graphic values obtained by the encoding module. , generating an input code. The processing unit transmits the input code to the verification terminal via the communication network through the communication module. When receiving the input code from the user end, the verification terminal determines whether the identity of the user is successfully authenticated according to the input code and the reference verification code.

The effect of the present invention is that since the user end held by the specific user has a set of graphic values obtained according to the code of the identity identification code and the predetermined reference code, by P corresponding to the input graphic track The input value generated by the predetermined data encryption algorithm is difficult to be solved, so that high security identity authentication can be ensured.

Referring to FIG. 1 and FIG. 2, an embodiment of the personal identity authentication system 100 of the present invention includes a user terminal 1 and a verification terminal 2. In this embodiment, the user terminal 1 can be implemented as a mobile device such as a smart phone or a tablet, and is held by a specific user.

The user terminal 1 includes a user input/output unit 11, a storage unit 12, a communication module 13, and a processing unit 14. The user input/output unit 11 is provided with a graphic input interface 111 (see FIG. 2) having N (for example, N=9) different graphic areas A1 to A9, and the communication module 13 is connected to a communication network such as the Internet. The processing unit 14 is electrically connected to the user input/output unit 11, the storage unit 12, and the communication module 13, and includes an encoding module 141, an encryption module 142, and a processing module 143. It is worth noting that the graphical input interface 111 can be viewed as a graphical lock interface.

The personal identity authentication system 100 must complete a registration procedure for the particular user and the client 1 before actually executing the identity authentication program. On the other hand, the user terminal 1 can perform related processing of the registration program by executing an associated application (not shown). For example, the related application may be an application related to login to the online banking, and a banking server may serve as the verification terminal 2, but not limited thereto.

Hereinafter, how the personal identity authentication system 100 executes the registration procedure will be described in detail with reference to FIGS. 1, 3, and 4.

First, in step S31, the processing unit 14 stores the identity identifier after the user input/output unit 11 obtains an identity identifier uniquely assigned to the specific user via an operation of the specific user. The storage unit 12 (FIG. 1) uses the communication module 13 to transmit a registration request including the identity identification code to the verification terminal 2 via the communication network 200. In this embodiment, the identity identifier is, for example, an identity card number, but is not limited thereto. The identity identification code has, for example, a character code portion containing an English word, and a digital code portion composed of N (e.g., N = 9) digital codes. In the present embodiment, the digital code portion is represented, for example, as d ₁ d ₂ ..d _N-1 d _N .

Next, in step S32, the verification terminal 2, upon receiving the registration request from the user terminal 1, responds to the registration request, and transmits a reply including a predetermined reference code to the user terminal via the communication network 200. 1. In the present embodiment, the predetermined reference code is composed of N digital codes and can be expressed, for example, as r ₁ r ₂ ..r _N-1 r _N . It should be noted that the predetermined reference code may be preset by the verification terminal 2, for example, but not limited thereto, and may be used as a private key for subsequent encoding processing.

Then, in step S33, when the user terminal 1 receives the reply from the verification terminal 2, the processing module 143 stores the predetermined reference code in the storage unit 12 (FIG. 1), and the coding mode The group 141 obtains a set of N corresponding to the identity identification code by using a predetermined coding mode and a predetermined text-to-digital method according to the identity identification code stored in the storage unit 12 and the predetermined reference code (for example, N=9). The graphic values R ₁ to R _N representing the nine graphic areas A1 to A9, respectively. In this embodiment, the predetermined text-to-digital method may use, for example, an ASCII code lookup table (not shown), but is not limited thereto. More specifically, the encoding module 141 first converts the text code portion of the identity identification code into a number M, and according to the predetermined encoding mode, performs the following operation: d' _x =d _x +r _x , where x =1,2,...,N; S=sum(d' ₁ +d' ₂ +...+d' _N ); and R _y =MOD(M ́S+d' _y ,100)+P _y , where y =1, 2, . . . , N, R _y represents that one of the N graphical values corresponds to the graphical value of the yth graphical region, and P _y represents a parameter value assigned to the yth graphical region, thereby obtaining The N graphical values R ₁ ~ R _N . Then, the processing module 143 stores the N pieces of graphic values R ₁ to R _N in the storage unit 12 (step S34).

For example, the identity identifier is A100000015 and the predetermined reference code is 374987245 (that is, the character code portion of the identity identifier is a single English letter A, d ₁ d ₂ ..d ₈ d ₉ = 100000015, And r ₁ r ₂ ..r ₈ r ₉ =374987245) and the nine parameters P _1~ P ₉ are 100, 200, 300, 400, 500, 600, 700, 800 and 900, respectively, in English letters A is converted to M and M=65, and the following result is obtained by performing the above operation d' ₁ =1+3=4, d' ₂ =7, d' ₃ =4, d' ₄ =9, d' ₅ = 8,d' ₆ =7,d' ₇ =2,d' ₈ =1+4=5,d' ₉ =5+5=10, S=4+7+4+9+8+7+2+ 5+10=56, R ₁ =MOD(65 ́56+4,100)+100=144, R ₂ =MOD(65 ́56+7,100)+200=247, R ₃ =MOD(65 ́56 +4,100)+300=344, R ₄ =MOD(65 ́56+9,100)+400=449, R ₅ =MOD(65 ́56+8,100)+500=548, R ₆ =MOD (65 ́56+7,100)+600=647, R ₇ =MOD(65 ́56+2,100)+700=742, R ₈ =MOD(65 ́56+5,100)+800=845, And R ₉ = MOD (65 ́56 + 10, 100) + 900 = 950.

Next, in step S35, the user input/output unit 11 generates a passing of the N (for example, N=9) graphic areas A1 by a slip operation of the specific user on the graphic input interface 111. After a specific graphic track T of the P desired graphic areas is output to the processing unit 14 , the processing module 143 indicates the specific input result. The order in which the P desired graphic regions appear on the specific graphic track T is defined as the first to the Pth desired graphic regions, respectively, where P≤N. In the present embodiment, for example, P=6, but not limited thereto. For example, as shown in FIG. 4, the desired graphic track T passing through the six graphic areas A1, A4, A5, A7, A8, A9 is represented as A4→A5→A9→A8→A7→A1, That is, the processing module 143 defines the graphic regions A4, A5, A9, A8, A7, and A1 as the first to sixth desired graphic regions, respectively, according to the specific input result.

In step S36, the processing unit 14 uses a predetermined one according to the graphical values of the first and the Pth desired graphic regions, respectively, according to the P values of the N graphical values R ₁ to R _N stored by the storage unit 12 . The data encryption algorithm and a predetermined value transcoding method generate a reference verification code uniquely corresponding to the identity identification code. Hereinafter, referring to FIG. 5, how the processing unit 14 generates the reference verification code will be described in further detail.

The processing module 143 first defines the P graphic values representing the first to Pth desired graphic regions as the first to Pth reference graphic values, respectively (step S51). For example, according to the above example, six graphical values R ₄ (= 449), R ₅ (= 548) representing the first to sixth desired pattern areas A4, A5, A9, A8, A7, A1, respectively. R ₉ (= 950), R ₈ (= 845), R ₇ (= 742), and R ₁ (= 144) are defined as the first to sixth reference pattern values, respectively.

Then, the encryption module 142 uses the predetermined data encryption algorithm to encrypt the second reference graphic value by using the first reference graphic value as a first key, so as to obtain a first encrypted value, and encrypt the ith. The value is used as an (i+1)th key and the (i+2)th reference pattern value is encrypted with the (i+1)th key to obtain an (i+1)th encrypted value, where i=1 , 2, ..., (P-2) (step S52). In this embodiment, the predetermined data encryption algorithm is, for example, a Triple Data Encryption Algorithm, but not limited thereto, and the first to (P-1) encrypted values are all sixteen. The value of the hexadecimal. For example, in accordance with the above example, and where P=6 and using, for example, an initial vector of bf0d80b16262738f _(H) : 449 (first reference pattern value /R4) is used as the first key encryption 548 (second reference) Numerical graphics / R5) obtained 76f9e33fb0fb0dab9a5 _(H) (first encrypted value); in 76f9e33fb0fb0dab9a5 _(H) a second encryption key 950 (third reference pattern value / R9) obtained 22fdd3bccac50c14 _{(H) (a} second encrypted value ; obtaining a fea646465c3853364 _(H) (third encrypted value) with 22fdd3bccac50c14 _(H) as the third key encryption 845 (fourth reference pattern value /R8); encrypting 742 with fea646465c3853364 _(H) as the third key (the first key ₎ 5 reference pattern value /R7) to obtain 9a27610b6ab5fd46 _(H) (fourth encrypted value); 9a27610b6ab5fd46 _(H) for the fourth key encryption 144 (sixth reference figure value /R1) to obtain 624b2d5a442db931 _(H) (fifth Encrypted value).

Thereafter, the encoding module 141 converts the (P-1) encrypted value into a word code by using the predetermined value transcoding method (step S53). In the present embodiment, the predetermined value transcoding method is based on, for example, a base64 encoding technique, but is not limited thereto. For example, according to the above example, 624b2d5a442db931 _(H) (fifth encrypted value) is converted to YksWkQtuTE=.

Finally, the processing module 143 extracts a portion of the word code containing the first Q code words of the word code from the word code, and replaces the code portion with a predetermined code word to obtain the reference verification code. In this embodiment, for example, Q=12, but not limited thereto, and the predetermined codeword replacement logic includes, for example, replacing "a" with "/", "b" with "+", and "=" with "=". c", but not limited to this. For example, according to the previous example, since YksWkQtuTE= has exactly 12 code words, the word code portion is the word code, and the last code word "=" is replaced by "c" to obtain YksWkQtuTEc as the reference verification code.

In step S37 (FIG. 3), the processing unit 14 uses the communication module 13 to transmit the reference verification code to the verification terminal together with the identity identification code stored in the storage unit 12 via the communication network 200. 2. Then, when the verification terminal 2 receives the reference verification code and the identity identification code from the user terminal 1, the verification terminal 2 stores the reference verification code and the identity identification code in a unique corresponding manner, for example. S38). At this point, the registration process is completed.

Hereinafter, how the personal identity authentication system 100 executes the personal identity authentication program will be described in detail with reference to FIGS. 1 and 6.

First, in step S61, the user input/output unit 11 generates a passing of the N (for example, N=9) graphic areas A1 through a sliding operation of the user on the graphic input interface 111. After A9 (for example, P=6) input graphic traces of the input graphic area and outputting an input result corresponding to the input graphic track to the processing unit 14, the processing module 143 is instructed according to the input result. The order in which the P input pattern regions appear on the input pattern track is defined as the first to Pth input pattern regions, respectively.

In step S62, the processing unit 14 uses the predetermined data according to the graphical values of the first to the Pth input graphic regions, respectively, according to the P values of the N pieces of the graphic values R ₁ to R _N stored by the storage unit 12 . The encryption algorithm and the predetermined value transcoding method generate an input code. Hereinafter, referring to FIG. 7, how the processing unit 14 generates the input code will be described in further detail.

Similar to step S51, the processing module 143 first defines the P-shaped graphic values representing the first to P-th input graphic regions as the first to P-th reference graphic values, respectively (step S71).

Then, the encryption module 142 obtains the first to (P-1) encrypted values by using the predetermined data encryption algorithm according to the first to Pth reference pattern values (step S72). More specifically, for example, P=6, the encryption module 142 encrypts the second reference pattern value by using the first reference pattern value as a first key to obtain a first encrypted value, and the first encrypted value. As a second key; encrypting the third reference pattern value with the second key to obtain a second encrypted value, and using the second encrypted value as a third key; encrypting the third key with the third key The fourth reference graphic value is used to obtain a third encrypted value, and the third encrypted value is used as a fourth key; the fifth reference graphic value is encrypted with the fourth key to obtain a fourth encrypted value, and The fourth encrypted value is used as a fifth key; and the sixth reference graphic value is encrypted with the fifth key to obtain a fifth encrypted value.

Thereafter, similarly to step S53, the encoding module 141 converts the (P-1)th encrypted value into a one-word code by using the predetermined value transcoding method (step S73).

Finally, similar to step S54, the processing module 143 extracts a portion of the word code containing the first Q code words of the word code from the word code obtained in step S73, and replaces the code portion with the predetermined code word in place of the logic processing. Obtain the input code.

In step S63 (FIG. 3), the processing unit 14 uses the communication module 13 to transmit the input code to the verification terminal 2 together with the identity identification code stored in the storage unit 12 via the communication network 200. .

In step S64, when the verification terminal 2 receives the input code and the identity identification code from the user terminal 1, the verification terminal 2 stores the identifier according to the input code and the verification terminal 2 and corresponds to the identity identification. The reference verification code of the code determines whether the identity of the user is successfully authenticated. More specifically, the verification terminal 2 determines whether the identity of the user is successfully authenticated by determining whether the input code conforms to the reference verification code corresponding to the identity identification code (that is, whether the user identity is The specific user identity). Ideally, for example, if the input graphic trajectory sequentially passes through the six input graphic areas A4, A5, A9, A8, A7, A1, as shown in FIG. 4, and is represented as A4→A5→A9→A8→ A7→A1, that is, the input graphic trajectory is exactly the same as the specific graphic trajectory T. In this case, when the verification terminal 2 determines that the input code matches the reference verification code corresponding to the identity identification code, Then, the verification terminal 2 determines that the identity of the user is successfully authenticated, and then the flow proceeds to step S65. Conversely, if the input graphic track is different from the specific graphic track, the verification terminal 2 determines that the input code does not correspond to the reference verification code corresponding to the identity identification code, and then the verification terminal 2 determines the use. The authentication of the identity of the person fails, and then the flow proceeds to step S66. At this point, the personal identity authentication process is completed.

In step S65, the verification terminal 2 transmits a success message indicating that the identity of the user is successfully authenticated to the user terminal 1 via the communication network 200. Therefore, when receiving the success message from the verification terminal 2, the user terminal 1 allows the user to perform subsequent processing, for example, logging in the personal account of the user at the online bank.

In step S66, the verification terminal 2 transmits a failure message indicating that the user identity authentication failed to the user terminal via the communication network 200. Therefore, when receiving the failure message from the verification terminal 2, the user terminal 1 does not allow the user to perform subsequent processing.

In summary, since the user terminal 1 held by the specific user has obtained and stored a set of N graphical values corresponding to the identity identifier during the registration phase, the N graphical values can be viewed. Is a graphic lock corresponding to the identity identifier (the specific user). Therefore, different identity codes (users) will have different graphic locks. Thus, even if the input pattern trajectory is sneaked at the stage of generating the input pattern trajectory, the input code that can be successfully authenticated cannot be generated due to the lack of the corresponding N pattern values. In addition, the input code generated by encrypting the P graphic values corresponding to the input graphic trajectory by the predetermined data encryption algorithm is difficult to be solved, so that high security identity authentication can be ensured. Therefore, the object of the present invention can be achieved.

However, the above is only the embodiment of the present invention, and the scope of the invention is not limited thereto, and all the simple equivalent changes and modifications according to the scope of the patent application and the patent specification of the present invention are still Within the scope of the invention patent.

100‧‧‧personal identity authentication system

1‧‧‧User side

11‧‧‧User input/output unit

111‧‧‧Graphic input interface

12‧‧‧ storage unit

13‧‧‧Communication module

14‧‧‧Processing unit

141‧‧‧Code Module

142‧‧‧Encryption Module

143‧‧‧Processing module

2‧‧‧Verification

200‧‧‧Communication network

A1-A6‧‧‧ graphic area

S31-S38‧‧‧Steps

S51-S54‧‧‧Steps

S61-S66‧‧‧Steps

S71-S74‧‧‧Steps

Other features and advantages of the present invention will be apparent from the embodiments of the present invention, wherein: FIG. 1 is a block diagram illustrating an embodiment of the personal identification system of the present invention. FIG. An exemplary input interface of the embodiment is shown by way of example; FIG. 3 is a flow chart illustrating an example of how the embodiment performs a registration procedure; FIG. 4 is a schematic diagram illustrating the graphical input interface. Figure 5 is a flow chart illustrating an example of how a processing unit of the embodiment generates a reference verification code. Figure 6 is a flow chart illustrating an example of how the embodiment performs a person identity. The authentication procedure; and Figure 7 is a flow chart illustrating, by way of example, how the processing unit generates an input code.

Claims (18)

A personal identity authentication method is implemented by a user terminal and a verification terminal connected to the user end via a communication network, the user terminal providing a graphic input interface having N different graphic areas, the personal identity authentication The method comprises the following steps: (A) storing, by the user end, an identity identifier uniquely assigned to a specific user, and a predetermined reference code; (B) by the user terminal, according to the identity identifier And the predetermined reference code, at least using a predetermined encoding manner, obtaining a set of N graphic values corresponding to the identity identification codes respectively representing the N graphic regions; (C) storing a unique correspondence by using the verification terminal And a reference verification code of the identity identifier; (D) a P-type of the N graphics regions generated by a sliding operation of the user on the graphics input interface by the user terminal When inputting the graphic trajectory of the graphic area, the P graphic areas are respectively defined as the first to Pth input patterns according to the order in which the P graphic areas appear on the input graphic trajectory a field, wherein P ≤ N; (E) by the user end, using a predetermined data encryption algorithm according to P values of the N to the P input graphics regions respectively represented by the N graphical values And a predetermined value transcoding method, generating an input code, and transmitting the input code to the verification terminal via the communication network; and (F) by the verification terminal, when receiving the input code from the user end And determining, according to the input code and the reference verification code, whether the identity of the user is successfully authenticated. The personal identity authentication method according to claim 1, further comprising the following steps between the step (B) and the step (C): (G) by the user terminal, the graphic input interface via the specific user a sliding operation on the top, generating a specific pattern trajectory through the P pattern regions in the N graphics regions, and according to the order in which the P graphics regions appear on the specific graphics track, The P desired graphic regions are respectively defined as the first to the Pth desired graphic regions; (H) by the user terminal, the P pixels representing the first to the Pth desired graphics respectively according to the N graphic values a graphical value of the region, using the predetermined data encryption algorithm and the predetermined value transcoding method to generate the reference verification code; and (I) transmitting, by the user terminal, the reference verification code to the a verification terminal; wherein the verification terminal performs step (C) upon receiving the reference verification code from the user end. The personal identity authentication method according to claim 1, wherein: in the step (A), the identity identification code has a character code portion, and a digital code portion composed of N digital codes and the digital code portion is represented. Is d ₁ d ₂ ..d _N-1 d _N , and the predetermined reference code is composed of N digital codes and is represented as r ₁ r ₂ ..r _N-1 r _N ; and in step (B) The user end further converts the character code portion of the identity identification code into a number M by using a predetermined text-to-digital method, and according to the predetermined coding mode, performs the following operation d' _x =d _x +r _x , where x=1,2,...,N, S=sum(d' ₁ +d' ₂ +...+d' _N ), and R _y =MOD(M ́S+d' _y ,100)+P _y Where y = 1, 2, ..., N, R _y represents one of the N graphical values corresponding to the graphical value of the yth graphical region, and P _y represents a parameter value assigned to the yth graphical region . The personal identity authentication method of claim 3, wherein the predetermined text-to-digital method utilizes an ASCII code lookup table. The personal identity authentication method according to claim 3, wherein the identity identifier is an identity card number and N=9. The personal identity authentication method according to claim 1, wherein the step (E) comprises the following sub-steps: (E1) by the user terminal, the P pixels respectively represent the first to the Pth input graphic regions. The graphic values are respectively defined as first to Pth reference graphic values; (E2) by the user end, using the predetermined data encryption algorithm, encrypting the second reference with the first reference graphic value as a first key Graphical value to obtain a first encrypted value, and using the ith encrypted value as an (i+1)th key and encrypting the (i+2)th reference graphic value by the (i+1)th key In order to obtain an (i+1)th encrypted value, wherein i=1, 2, . . . , (P-2); and (E3) by using the predetermined value by the user end, the first (P-1) The encrypted value is converted into a word code, and the input code is generated based on the word code. The personal identity authentication method according to claim 6, wherein the predetermined data encryption algorithm is a triple data encryption algorithm and the first to (P-1) encryption values are hexadecimal values. And the predetermined value transcoding method is based on the base64 encoding technique. The personal identity authentication method according to claim 6, wherein in step (E3), the user terminal extracts a word code portion containing the first Q code words of the word code from the word code, and the code portion is in accordance with A predetermined codeword is substituted for the logical process to obtain the input code. The personal identity authentication method of claim 8, wherein the predetermined codeword substitution logic comprises "a" instead of "a", "+" instead of "b", and "c" instead of "c". A personal identity authentication system includes: a user terminal, including a user input/output unit, providing a graphic input interface having N different graphic areas; and a storage unit storing an identity uniquely assigned to a specific user An identification code, a predetermined reference code, a communication module, a communication network, and a processing unit electrically connected to the user input/output unit, the storage unit, and the communication module, and including an encoding module And the encoding module obtains, according to the identity identification code and the predetermined reference code stored by the storage unit, a set of N corresponding to the identity identification code to represent the N graphic regions, at least by using a predetermined encoding manner. a graphical value; and a verification terminal connected to the communication network and storing a reference verification code uniquely corresponding to the identity identifier; wherein the user input/output unit is based on a slide on the graphical input interface via a user The shift operation generates an input pattern trajectory through the P graphics regions of the N graphics regions, where P ≤ N, and one The input result of the input graphic track is output to the processing unit, and the processing unit indicates, according to the input result, the order in which the P graphic areas appear on the input graphic track, and the P graphic areas are respectively The first to the Pth input graphic area are defined by the processing unit, wherein the P pieces of the N pieces of the graphic values obtained by the processing unit respectively represent the graphic values of the first to Pth input graphic areas. a predetermined data encryption algorithm and a predetermined value transcoding method to generate an input code; wherein the processing unit transmits the input code to the verification terminal via the communication network through the communication module; and wherein the verification end is Upon receiving the input code from the user end, based on the input code and the reference verification code, it is determined whether the identity of the user is successfully authenticated. The personal identity authentication system of claim 10, wherein the reference verification code stored by the verification terminal is obtained by the user terminal performing the following steps: the user input/output unit is located by the specific user a sliding operation on the graphic input interface, generating a specific graphic trajectory passing through the P desired graphic regions of the N graphic regions, and outputting a specific input result corresponding to the specific graphic trajectory to the processing unit, The processing module defines, according to the specific input result, the order in which the P desired graphic regions appear on the specific graphic track, and defines the P desired graphic regions as the first to Pth desired graphic regions respectively; The processing unit uses the predetermined data encryption algorithm and the predetermined value transcoding code according to the graphic values of the first to Pth desired graphic regions, respectively, according to the P values of the N graphic values obtained by the encoding module. The method, the reference verification code is generated; and the processing unit transmits the reference verification code to the verification terminal via the communication network through the communication module Such that the verification is received from the terminal in the user terminal when the reference storing the reference code verification codes. The personal identity authentication system of claim 10, wherein: the identity identification code has a character code portion, and a digital code portion consisting of N digital codes and the digital code portion is represented as d ₁ d ₂ .. d _N-1 d _N , and the predetermined reference code is composed of N digital codes and is represented as r ₁ r ₂ ..r _N-1 r _N ; and the coding module further utilizes a predetermined text to digital method, The character code portion of the identity identification code is converted into a number M, and according to the predetermined coding mode, the following operation d' _x = d _x + r _{x is performed} , where x = 1, 2, ..., N, S = Sum(d' ₁ +d' ₂ +...+d' _N ), and R _y =MOD(M ́S+d' _y ,100)+P _y , where y=1,2,...,N,R _y Representing one of the N graphical values corresponding to the graphical value of the yth graphical region, and P _y representing a parameter value assigned to the yth graphical region. The personal identity authentication system of claim 12, wherein the predetermined text-to-digital method utilizes an ASCII code lookup table. The personal identity authentication system of claim 12, wherein the identity identifier is an identity card number and N=9. The personal identity authentication system of claim 10, wherein the processing unit further includes a processing module and an encryption module, wherein the encryption module respectively represents the first to the Pth input graphic regions. The graphic values are respectively defined as first to Pth reference graphic values, and the predetermined data encryption algorithm is used to encrypt the second reference graphic value by using the first reference graphic value as a first key to obtain a first encryption. a value, and the ith encrypted value is used as an (i+1)th key and the (i+2)th reference graphic value is encrypted by the (i+1)th key to obtain an (i+1)th Encrypted value, wherein i=1, 2, ..., (P-2), the encoding module converts the (P-1) encrypted value into a word code by using the predetermined value transcoding method, the processing module The input code is generated based on the word. The personal identity authentication system of claim 15, wherein the predetermined data encryption algorithm is a triple data encryption algorithm and the first to (P-1) encryption values are hexadecimal values. And the predetermined value transcoding method is based on the base64 encoding technique. The personal identity authentication system of claim 15, wherein the processing module extracts a portion of the word code containing the first Q code words of the word code from the word code, and replaces the code portion with a predetermined code word. The input code is obtained later. The personal identity authentication method of claim 17, wherein the predetermined codeword substitution logic comprises "a" instead of "a", "+" instead of "b", and "c" instead of "c".