CN111104661A

CN111104661A - Distributed biometric verification

Info

Publication number: CN111104661A
Application number: CN201911395214.2A
Authority: CN
Inventors: 黄策
Original assignee: Individual
Current assignee: Individual
Priority date: 2019-12-30
Filing date: 2019-12-30
Publication date: 2020-05-05
Also published as: WO2021135799A1

Abstract

The invention provides a brand-new authentication method taking biological characteristics as an authentication target. The authentication method is characterized in that target biological characteristics used for authentication are stored at a terminal side, and a result data string of the biological characteristic authentication is stored at a server side. The authentication process is that the terminal collects the biological characteristics of the authenticated body and completes comparison, and then the comparison result data string is sent to the server. And the server compares the received comparison result data string with a target comparison result data string stored in the server side to finish final comparison verification. The method has the advantages of high verification speed, high accuracy, biological characteristics which are not afraid of being stolen and cannot be stolen, and the like. The method can effectively avoid two general defects of the currently and commonly used centralized biological characteristic verification method. The disadvantages are as follows: once the biological characteristics are stolen, the object to be detected has no defect of availability of the detected object. The disadvantages are as follows: the detected biological characteristics are at risk of being stolen on-line or off-line and cannot be avoided.

Description

Distributed biometric verification

Technical Field

The invention relates to a verification method for distributed biometric verification.

Background

Authentication is the basis for all network applications. It can be said that there is no network application without authentication. Authentication can be divided into two broad categories, depending on the subject matter to be authenticated: password authentication and biometric authentication. These two kinds of verification have advantages and disadvantages respectively.

The password authentication has the advantages that: 1) the privacy of the verification target is strong. 2) The demand of storage resources on the server is small, and the verification speed is high. 3) Once the server is compromised or the password is stolen, replacing the password can repair the stolen authentication object.

The disadvantages of password authentication are: 1) the correlation between the strength of the password and the length and complexity of the password directly creates a strength paradox between the strength of the password and the memory ability of the holder of the password: short passwords are easily hacked-passwords are too short to work with. Long passwords test the memory of the person-passwords are too long to be practical. 2) In the present day, a plurality of applications are held by one person, and the excessive applications present a more serious challenge to the application and the use of the human body. For most people, it is impossible to remember an independent password for an application. For the absolutely most common people, the number of passwords is too large. And one password covering multiple applications becomes a password policy that most people have to adopt. This strategy, in turn, makes the application under the same password virtually increase the risk of uncontrollable.

The advantages of biometric verification: without remembering the password, this essentially overcomes all the disadvantages of password authentication.

Disadvantages of biometric verification: 1) biological characteristics are susceptible to leakage, and there are numerous leakage points, whether off-line or on-line. 2) Once a server is compromised or a password is revealed, it faces two fatal hazards, hazard 1: the biological characteristics to be detected cannot be replaced. Hazard 2: the attacker can lock the account owner in the reverse direction by using the biometric features stolen from the server side. 3) The biological characteristic verification method has huge demand on storage resources of the server and has low verification speed.

There is a need in the art for an authentication method that maintains the advantages of both password authentication and biometric authentication, but overcomes the disadvantages of both.

Disclosure of Invention

In order to overcome the defects of password authentication and biological characteristic authentication and keep the advantages of the password authentication and the biological characteristic authentication, the invention provides a brand new authentication method, namely a distributed biological characteristic authentication method.

The technical scheme of the invention is that the biological characteristics of the verified target are stored at the terminal side, and the server side stores the verification comparison result data string corresponding to the biological characteristics of the verified target. The terminal completes the collection and comparison of the biological characteristics of the verified target locally, and sends the comparison result data string to the server, and the server compares the received comparison result data string with the comparison result data string stored in the server, thereby completing the verification process of the distributed biological characteristic verification method.

In the method, the biometric features include, but are not limited to, fingerprints, voiceprints, face images, and the like, and may also include specific pictures, images of objects, or a combination of the above biometric features and specific pictures or objects. The combination may be a same-frame combination of the targets at the acquisition time, or a time-sharing combination of all or part of the targets in the effective acquisition time period.

In the method, the comparison result data string is composed of a fixed comparison result data segment and a dynamic comparison result data segment. The fixed comparison result data segment is characterized in that: the data of the data segment is directly associated with the detected object and cannot be changed once generated unless regenerated; after the terminal finishes the biological characteristic comparison, the terminal reports the fixed comparison result data string associated with the detected object. The data segment of the dynamic comparison result includes, but is not limited to, the precision, similarity, time or place of comparison, serial number of comparison times, and the like of the comparison result.

The authentication method has the advantages of not only integrating all the advantages of password authentication and biometric authentication, but also overcoming all the disadvantages of the two types of authentication methods. The authentication scheme also has its own advantages. The method has the advantages that: whether the space is the offline space or the online space, the verification data of the other space cannot be obtained by intercepting the verification data. The method has the advantages that: the length of the data segment of the fixed comparison result can be lengthened to set up a verification password which is not more complex.

Detailed Description

The present invention will be described in detail with reference to specific examples.

And (5) carrying out online silver face brushing verification.

Stage 1: and acquiring the biological characteristics of the verified target and generating a corresponding comparison result data string.

And the account owner performs one-time face data acquisition by taking the specific picture as a background to generate two fixed comparison result data segments. The fixed comparison result data segment 1 is associated with the biological characteristics of the face + the specific picture, and the fixed comparison result data segment 2 is associated with the biological characteristics of the face. The two fixed comparison result data segments are endowed with different transfer limits and are respectively stored by the server and the mobile phone of the account owner.

And (2) stage: authentication

When the account owner performs the account transfer operation, the mobile phone is used for refreshing the face. And the mobile phone sends out a comparison result data string according to the acquired biological features of the human face and the background. Wherein the fixed comparison result data segment 1 or the fixed comparison result data segment 2 is given according to different biological characteristics. And after receiving the comparison result data string sent by the mobile phone, the server completes corresponding verification.

In this embodiment, different transfer limits set by different backgrounds give the bank account owner additional security assurance. The account owner can only "steal" a low limit of account funds at most even if the same-ovum twin brother of the bank account owner as long as background information is not revealed. In addition, if the mobile phone is not attacked, even if the photo face recognition technology which is generally regarded as the most unsafe in the industry at present is adopted, the attack of photos taken at any angle of any account owner on the highest transfer limit can be resisted.

Claims

1. The distributed biological characteristic verification method is characterized in that: the biological characteristics of the verified target exist at the terminal side, and the server side stores a verification comparison result data string corresponding to the biological characteristics of the target; the verification process of the verification method is that the terminal locally finishes the acquisition and comparison of the biological characteristics of the verified target, the comparison result data string is sent to the server, and the server compares the received comparison result data string with the comparison result data string stored at the server end, so that the verification process of the distributed biological characteristic verification method is finished.

2. The biometric feature of claim 1, wherein: the biometric features include, but are not limited to, fingerprints, voiceprints, face images, and other biometric features, and may also include specific pictures, object images, or a combination of the above biometric features and specific picture information or object information.

3. The combination of claim 2, wherein: the combination can be the same frame combination of the biological characteristics and the acquisition time of some pictures or article information, or the time-sharing combination of all or part of the combination in the effective acquisition time period.

4. The alignment result data string of claim 1, wherein: the comparison result data string is composed of a fixed comparison result data section and a dynamic comparison result data section.

5. The data segment of claim 4, wherein: the data of the data segment is directly associated with the detected object and cannot be changed once generated unless regenerated; after the terminal finishes the biological characteristic comparison, the terminal reports the fixed comparison result data string associated with the detected object.

6. The data segment of dynamic alignment result of claim 4, wherein: the data segment of the dynamic comparison result includes, but is not limited to, the precision, similarity, time or place of comparison, serial number of comparison times, and the like of the comparison result.