CN115473652B - Identity authentication method - Google Patents

Abstract

This application belongs to the technical field of identity authentication, and discloses an identity authentication method. The method includes: the server obtains the identity ID _i , password PW _i , and biometric information BIO _i input by the user U _i , and obtains the information stored in the smart card of the user U _i . The stored original parameter information set {E _i , F _i , G _i , Ccb(X,Y), _ri }; among them, Ccb(X,Y) is the operation rule of the cross-combined bit algorithm, which is based on An algorithm that performs bit operations on Hamming weights of encrypted information. This application can achieve the effects of reducing the amount of calculation and ensuring safety.

Description

An identity authentication method

Technical Field

The present application relates to the technical field of identity authentication, and in particular to an identity authentication method.

Background Art

Identity verification, also known as identity authentication or authorization, refers to the confirmation of user identity through certain means. There are many methods of identity verification, which can basically be divided into: identity verification based on shared keys, identity verification based on biometrics, and identity verification based on public key encryption algorithms. Different identity verification methods have different levels of security, and identity verification based on biometrics is being used more and more widely due to the uniqueness of biometrics. However, in the process of identity verification, it is often necessary to send the user's identity information to the server for verification. In order to ensure the security of user information, it is necessary to encrypt the transmitted information. However, the current identity verification method often introduces external parameters to encrypt the transmitted information, which not only requires a large amount of calculation, but also endangers the security of user information once the introduced parameters are cracked. It can be seen that the existing technology has the problems of large amount of calculation and insufficient security.

Summary of the invention

The present application provides an identity authentication method that can reduce the amount of calculation and ensure authentication security.

The present invention provides an identity authentication method, which includes:

The server obtains the identity ID _i , password PW _i and biometric information BIO _i input by user U _i , and obtains the original parameter information set {E _i , F _i , G _i , Ccb (X, Y), r _i } stored in the smart card of user U _i ; wherein E _i , F _i and G _i are encryption parameters, r _i is the random number written into the smart card by user U _i ; Ccb (X, Y) is the operation rule of the cross-combination bit algorithm, and the cross-combination bit algorithm is an algorithm for bit operation based on the Hamming weight of the encrypted information;

The server calculates the verification parameter F`i by the cross-combination bit algorithm according to the identity ID <sub>i</sub> , password PW <sub>i</sub> , biometric information BIO <sub>i</sub> and the original parameter information set {E <sub>i</sub> , F <sub>i</sub> , G <sub>i</sub> , Ccb(X, Y), r <sub>i</sub> }, and compares whether the verification parameter <sub>F`i</sub> is consistent with the encryption parameter F _i ; when _{the verification parameter F`i is} consistent with the encryption parameter F _i , it is determined that the user U _i has successfully logged in;

When user U _i logs in successfully, the smart card generates a random number x, obtains encryption parameters I ₁ , H _i and I ₂ through a cross-combination bit algorithm according to a first preset rule, and generates a first parameter information set {I ₁ , H _i , I ₂ , G _i } and sends it to the server; the server stores the server identity ID _j and the server key K _{RC_S} ;

The server calculates the verification parameter I` <sub>2</sub> by a cross-combination bit algorithm based on the server key K <sub>RC_S</sub> and the first parameter information set {I <sub>1</sub> , H <sub>i</sub> , I <sub>2</sub> , G <sub>i</sub> }, and compares whether the verification parameter I` ₂ is consistent with the encryption parameter I ₂ ; when the verification parameter I` ₂ is consistent with the encryption parameter I ₂ , it is determined that the user U _i has passed the first verification;

When user U _i passes the first verification, the server generates a random number y, obtains the first interactive key K _{S_U} , encryption parameter I ₃ and encryption parameter I ₄ through a cross-combination bit algorithm according to a second preset rule, and generates a second parameter information set {ID _j , I ₃ , I ₄ } and sends it to the smart card;

The smart card calculates the verification parameter I` <sub>4</sub> according to the random number x, the identity ID <sub>i</sub> and the second parameter information set {ID <sub>j</sub> , I <sub>3</sub> , I <sub>4</sub> } through the cross-combination bit algorithm, and compares whether the verification parameter I` ₄ is consistent with the encryption parameter I ₄ ; when the verification parameter I` ₄ is consistent with the encryption parameter I ₄ , it is determined that the user U _i has passed the second verification;

When user U _i passes the second verification, the smart card obtains the encryption parameter N through the cross-combination bit algorithm according to the third preset rule, and sends the encryption parameter N to the server;

The server calculates the verification parameter N` based on the first interactive key K <sub>S_U</sub> and the random number y through the cross-combination bit algorithm, and compares whether the verification parameter N` is consistent with the encryption parameter N; when the verification parameter N` is consistent with the encryption parameter N, it is determined that the user U _i has passed the identity authentication.

In one embodiment, the server calculates the verification parameter _F`i according to the identity IDi, the password _PWi , the biometric information _BIOi and the original parameter information set {Ei _{, Fi} , _Gi , Ccb(X, Y), r _{i }} through a cross-combination bit algorithm, including:

The server calculates the verification parameter A` <sub>i</sub> =Ccb(ID <sub>i</sub> , r <sub>i</sub> ) based on the random number r <sub>i</sub> and the identity ID <sub>i</sub> , and calculates the verification parameter B` _i =Ccb(PW _i , BIO _i ) based on the password PW _i and the biometric information BIO _i ;

The verification parameter is calculated based on the verification parameter _B`i and the encryption parameter _Ei

The verification parameters are calculated based on the verification parameters <sub>A`i</sub> and D`i _.

In one embodiment, the server calculates the verification parameter _I'2 according to the server key _{KRC_S} and the first parameter information set { _I1 , _H1 , _I2 , _G1 } by a cross-combination bit algorithm, including:

The server calculates the verification parameter based on the encryption parameter _Gi and the server key _{KRC_S}

Divide the verification parameter C` <sub>i</sub> into a left part C` _{i_L} and a right part C` <sub>i_R</sub> , and calculate the verification parameter D`` <sub>i</sub> =Ccb(C` _{i_L} , C` _{i_R} );

The verification random number is calculated based on the verification parameter D`` _i and the encryption parameter I ₁

The verification identity is calculated based on the verification random number x`, verification parameter D`` _i and encryption parameter _Hi

The verification parameter is calculated based on the verification identity ID` <sub>i</sub> , the verification random number x` and the encryption parameter _Gi

In one embodiment, the smart card calculates the verification parameter I' ₄ according to the random number x, the identity ID _i and the second parameter information set {ID _j , I ₃ , I ₄ } through a cross-combination bit algorithm, including:

The smart card calculates the verification random number based on the random number x, identity ID _i and encryption parameter I ₃

The verification parameter I' ₄ =Ccb(ID _j ,y') is calculated based on the verification random number y' and the server identity ID _j .

In one embodiment, the first preset rule includes:

及

and

Where D` <sub>i_L</sub> and D` _{i_R} are the left and right parts of the verification parameter D` _i respectively;

The second preset rule includes:

及I₄＝Ccb(ID_j，y)；

and I ₄ =Ccb(ID _j ,y);

The third preset rule includes:

Second interactive key

Among them, y _L is the left part of the random number y, and y _R is the right part of the random number y.

In one embodiment, before the server obtains the identity ID _i , password PW _i and biometric information BIO _i input by the user U _i , the method further includes:

The server sends a registration request to the registration center, and when the registration is successful, receives the server key K _{RC_S} sent by the registration center;

And, user U _i inputs the set identity ID _i , password PW _i and biometric information BIO _i in the terminal, and writes the random number r _i , the terminal calculates the identity ID _i , password PW _i , biometric information BIO _i and random number r _i by the cross combination bit algorithm according to the fourth preset rule, obtains encryption parameter A _i and encryption parameter B _i , and generates a registration parameter information set {ID _i , A _i , B _i } and sends it to the registration center;

The registration center verifies whether the identity ID _i is unique; and when the identity ID _i is unique, determines that the user U _i is successfully registered, calculates the master key K of the registration center, the server key K _{RC_S} , the identity ID _i , the encryption parameter A _i and the encryption parameter B _i by the cross-combination bit algorithm according to the fifth preset rule, obtains the encryption parameter E _i , the encryption parameter F _i and the encryption parameter G _i , and writes the encryption parameter E _i , the encryption parameter F _i , the encryption parameter G _i and the operation rule of the cross-combination bit algorithm into the smart card;

The smart card also receives the random number _ri written by the user _Ui , so that the smart card stores the original parameter information set {Ei _{, Fi} , _Gi , Ccb(X, Y), _ri }.

In one embodiment, the fourth preset rule includes: A _i =Ccb(ID _i , r _i ) and B _i =Ccb(PW _i , BIO _i );

及

其中，C_i和D_i均为加密参数，K为注册中心的主密钥，C_{i_L}为加密参数C_i的左部分，C_{i_R}为加密参数C_i的右部分。The fifth preset rule includes: _Ci = Ccb ( _IDi , K), _Di = Ccb ( _{Ci_L} , _{Ci_R} ),

and

Wherein, _Ci and _Di are encryption parameters, K is the master key of the registration center, _{Ci_L} is the left part of the encryption parameter _Ci , and _{Ci_R} is the right part of the encryption parameter _Ci .

In one embodiment, the method further comprises:

When the verification parameter _F`i is inconsistent with the encryption parameter F _i , the server determines that the login of user U _i has failed and notifies user U _i to log in for the second time; and

When the number of consecutive login failures of user U _i reaches a threshold, the smart card of user U _i is locked so that the smart card can no longer be used for login operations.

In one embodiment, after the user U _i successfully logs in, the method further includes:

The server receives the new password PW _new input by the user U _i , and updates the encryption parameter E _i stored in the smart card based on the new password PW _new ;

Among them, the encryption parameters

In one embodiment, the formula of the cross-combination bit algorithm is: Z=Ccb(X, Y);

Where X, Y, and Z are all binary strings of length L bits, H(X) represents the Hamming weight of binary string X, and H(Y) represents the Hamming weight of binary string Y;

The operation rules of the cross-combination bit algorithm include:

When H(X)≥H(Y), take the H(Y) bits on the right side of the binary string X and the H(X) bits on the left side of the binary string Y and combine them in sequence to obtain a binary string; if H(X)+H(Y)≥L, then truncate the (H(X)+H(Y)-L) bits on the right side of the binary string to obtain a binary string Z with a length of L bits; if H(X)+H(Y)＜L, then add (L-(H(X)+H(Y)) zeros to the left side of the binary string to obtain a binary string Z with a length of L bits;

When H(X)＜H(Y), take the H(Y) bits on the left side of the binary string X and the H(X) bits on the right side of the binary string Y and combine them in reverse order to obtain a binary string; if H(X)+H(Y)≥L, then truncate the left side of the binary string (H(X)+H(Y)-L) bits to obtain a binary string Z with a length of L bits; if H(X)+H(Y)＜L, then add (L-(H(X)+H(Y)) zeros to the right side of the binary string to obtain a binary string Z with a length of L bits.

In summary, compared with the prior art, the technical solution provided in the embodiment of the present application has at least the following beneficial effects:

The present application provides an identity authentication method that can be used in a single-server environment or in a multi-server environment, and has a wider range of applications. The method uses a cross-combination bit algorithm for bitwise operations to implement encryption processing of transmitted information, which can reduce the amount of calculation. And because the cross-combination bit algorithm is an algorithm for bitwise operations based on the Hamming weight of the encrypted information, the inherent Hamming weight of the encrypted information itself can be used in the encryption process, which can reduce the introduction of parameters while increasing the difficulty of cracking by a third party. The method can ensure authentication security and reduce the amount of calculation in the identity authentication process.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a flow chart of an identity authentication method provided by an exemplary embodiment of the present application.

FIG. 2 is an example diagram of a cross-combination bit arithmetic operation provided by an exemplary embodiment of the present application.

FIG. 3 is another example diagram of a cross-combination bit arithmetic operation provided by an exemplary embodiment of the present application.

DETAILED DESCRIPTION

The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

The embodiment of the present application provides an identity authentication method, see Figure 1, the method can be applied in a single server environment or in a multi-server environment, and has a wider application range. The method specifically includes the following steps:

Step S1, the server obtains the identity ID _i , password PW _i and biometric information BIO _i input by user U _i , and obtains the original parameter information set {E _i , F _i , G _i , Ccb (X, Y), r _i } stored in the smart card of user U _i .

Among them, user U _i is the user numbered i, and i is a positive integer value; E _i , F _i and _Gi are multiple encryption parameters pre-stored in the smart card, and r _i is the random number written into the smart card by user U _i ; Ccb (X, Y) is a cross-combination bit operator, which refers to the operation rules of the cross-combination bit algorithm, and the cross-combination bit algorithm is an algorithm for bit operations based on the Hamming weight of the encrypted information; the biometric information BIO _i can be the user's retina, fingerprint, DNA and other information.

Specifically, user U _i inserts the smart card into the card reader corresponding to the server. The server obtains the identity ID _i , password PW _i and biometric information BIO _i input by user U i through the card reader, and obtains the original parameter information set {E _i , F _i , G _i , Ccb(X, Y), r _i } stored in the smart card of user _{U i} through the card reader.

Step S2, the server calculates the verification parameter F`i according to the identity ID <sub>i</sub> , password PW <sub>i</sub> , biometric information BIO <sub>i</sub> and the original parameter information set {E <sub>i</sub> , F <sub>i</sub> , G <sub>i</sub> , Ccb(X, Y), r <sub>i</sub> } through the cross-combination bit algorithm, and compares whether the verification parameter <sub>F`i</sub> is consistent with the encryption parameter F _i ; when _{the verification parameter F`i is} consistent with the encryption parameter F _i , it is determined that the user U _i has logged in successfully.

Specifically, the verification parameter F` <sub>i</sub> is compared with the encryption parameter F <sub>i</sub> . If F` _i = F _i , the user U _i passes the login verification, that is, the user U _i logs in successfully.

In some implementations of this embodiment, the server calculates the verification parameter _F`i according to the identity IDi, the password _PWi , the biometric information _BIOi and the original parameter information set {Ei _{, Fi} , _Gi , Ccb(X, Y), r _{i }} through a cross-combination bit algorithm, specifically including the following steps:

The server calculates the verification parameter A` <sub>i</sub> =Ccb(ID <sub>i</sub> , r <sub>i</sub> ) based on the random number r <sub>i</sub> and the identity ID <sub>i</sub> , and calculates the verification parameter B` _i =Ccb(PW _i , BIO _i ) based on the password PW _i and the biometric information BIO _i ;

The verification parameter is calculated based on the verification parameter _B`i and the encryption parameter _Ei

The verification parameters are calculated based on the verification parameters <sub>A`i</sub> and D`i _.

为异或运算符；Ccb(X，Y)为交叉组合位运算符。in,

is the exclusive OR operator; Ccb(X, Y) is the cross combination bit operator.

Step S3, when user U _i logs in successfully, the smart card generates a random number x, obtains encryption parameters I ₁ , H _i and I ₂ through a cross-combination bit algorithm according to a first preset rule, and generates a first parameter information set {I ₁ , H _i , I ₂ , G _i } and sends it to the server; the server stores the server identity ID _j and the server key K _{RC_S} .

及

其中，D`<sub>i_L</sub>和D`_{i_R}分别为验证参数D`_i的左部分和右部分。In some implementations of this embodiment, the first preset rule includes:

and

Among them, _{D`i_L</sub> and <sub>D`i_R} are the left and right parts of the verification parameter _D`i respectively.

Step S4: The server calculates the verification parameter I` <sub>2</sub> according to the server key K <sub>RC_S</sub> and the first parameter information set {I <sub>1</sub> , H <sub>i</sub> , I <sub>2</sub> , G <sub>i</sub> } through a cross-combination bit algorithm, and compares whether the verification parameter I` ₂ is consistent with the encryption parameter I ₂ ; when the verification parameter I` ₂ is consistent with the encryption parameter I ₂ , it is determined that the user U _i has passed the first verification.

Specifically, the sizes of verification parameter _I`2 and encryption parameter _I2 are compared.

If I` ₂ ≠I ₂ , it indicates that user U _i cannot pass the first verification of the server, and the authentication process terminates.

If I' ₂ =I ₂ , it indicates that user U _i passes the first verification of the server, and the authentication process continues.

In some implementations of this embodiment, the server calculates the verification parameter _I'2 according to the server key _{KRC_S} and the first parameter information set { _I1 , _H1 , _I2 , _G1 } by a cross-combination bit algorithm, including:

The server calculates the verification parameter based on the encryption parameter _Gi and the server key _{KRC_S}

Divide the verification parameter C` <sub>i</sub> into a left part C` _{i_L} and a right part C` <sub>i_R</sub> , and calculate the verification parameter D`` <sub>i</sub> =Ccb(C` _{i_L} , C` _{i_R} );

The verification random number is calculated based on the verification parameter D`` _i and the encryption parameter I ₁

The verification identity is calculated based on the verification random number x`, verification parameter D`` _i and encryption parameter _Hi

The verification parameter is calculated based on the verification identity ID` <sub>i</sub> , the verification random number x` and the encryption parameter _Gi

Step S5, when user U _i passes the first verification, the server generates a random number y, obtains the first interactive key K _{S_U} , encryption parameter I ₃ and encryption parameter I ₄ through a cross-combination bit algorithm according to a second preset rule, and generates a second parameter information set {ID _j , I ₃ , I ₄ } and sends it to the smart card.

及I₄＝Ccb(ID_j，y)；In some implementations of this embodiment, the second preset rule includes:

and I ₄ =Ccb(ID _j ,y);

Step S6: The smart card calculates the verification parameter I` <sub>4</sub> based on the random number x, the identity identifier ID <sub>i</sub> and the second parameter information set {ID <sub>j</sub> , I <sub>3</sub> , I <sub>4</sub> } through a cross-combination bit algorithm, and compares whether the verification parameter I` ₄ is consistent with the encryption parameter I ₄ ; when the verification parameter I` ₄ is consistent with the encryption parameter I ₄ , it is determined that the user U _i has passed the second verification.

Specifically, the sizes of verification parameter _I'4 and encryption parameter _I'4 are compared.

If I` ₄ ≠I ₄ , the server cannot pass the second verification of user U _i and the authentication process terminates.

If I' ₄ =I ₄ , the server passes the second verification of user U _i and the authentication process continues.

In some implementations of this embodiment, the smart card calculates the verification parameter I' ₄ according to the random number x, the identity ID _i and the second parameter information set {ID _j , I ₃ , I ₄ } through a cross-combination bit algorithm, including:

The smart card calculates the verification random number based on the random number x, identity ID _i and encryption parameter I ₃

The verification parameter I' ₄ =Ccb(ID _j ,y') is calculated based on the verification random number y' and the server identity ID _j .

Step S7: When the user U _i passes the second verification, the smart card obtains the encryption parameter N through the cross-combination bit algorithm according to the third preset rule, and sends the encryption parameter N to the server.

In some implementations of this embodiment, the third preset rule includes:

Second interactive key

Among them, y _L is the left part of the random number y, and y _R is the right part of the random number y.

Step S8, the server calculates the verification parameter N` according to the first interactive key K <sub>S_U</sub> and the random number y through the cross-combination bit algorithm, and compares whether the verification parameter N` is consistent with the encryption parameter N; when the verification parameter N` is consistent with the encryption parameter N, it is determined that the user U _i has passed the identity authentication.

Specifically, the sizes of the verification parameter N' and the received encryption parameter N are compared.

If N`≠N, user U _i fails to pass the verification of server S _j and the protocol stops.

If N`=N, user U _i passes the authentication of server S _j , indicating that user U _i is a legitimate user and can freely use the resources on server S _j .

An identity authentication method provided in this embodiment can be used in a single-server environment or in a multi-server environment, and has a wider range of applications; the above method uses a cross-combination bit algorithm of bitwise operation to implement encryption processing of transmitted information, which can reduce the amount of calculation; and because the cross-combination bit algorithm is an algorithm that performs bit operations based on the Hamming weight of the encrypted information, the inherent Hamming weight of the encrypted information itself can be used in the encryption process, which can not only reduce the introduction of parameters, but also increase the difficulty of cracking by a third party; the above method can reduce the amount of calculation in the identity authentication process and improve the authentication security.

Based on the above embodiment, the formula of the cross-combination bit algorithm is: Z=Ccb(X, Y);

Where X, Y, and Z are all binary strings of length L bits, H(X) represents the Hamming weight of binary string X, and H(Y) represents the Hamming weight of binary string Y;

The operation rules of the cross-combination bit algorithm include:

When H(X)≥H(Y), take the H(Y) bits on the right side of the binary string X and the H(X) bits on the left side of the binary string Y and combine them in sequence to obtain a binary string; if H(X)+H(Y)≥L, then truncate the (H(X)+H(Y)-L) bits on the right side of the binary string to obtain a binary string Z with a length of L bits; if H(X)+H(Y)＜L, then add (L-(H(X)+H(Y)) zeros to the left side of the binary string to obtain a binary string Z with a length of L bits;

When H(X)＜H(Y), take the H(Y) bits on the left side of the binary string X and the H(X) bits on the right side of the binary string Y and combine them in reverse order to obtain a binary string; if H(X)+H(Y)≥L, then truncate the left side of the binary string (H(X)+H(Y)-L) bits to obtain a binary string Z with a length of L bits; if H(X)+H(Y)＜L, then add (L-(H(X)+H(Y)) zeros to the right side of the binary string to obtain a binary string Z with a length of L bits.

To deepen your understanding of the crossover algorithm, see the following example:

As shown in Figure 2, if L=12, X=101101111101, and Y=010110000110, we can get H(X)=9, H(Y)=5, which satisfies H(X)≥H(Y), so we can get Z ₀ =11101010110000. Since H(X)+H(Y)=14 is greater than L=12, H(X)+H(Y)≥L is satisfied. According to the definition of the cross-combination bit algorithm, the right 2 bits of the binary string Z ₀ need to be truncated, and finally the binary string Z=Ccb(X,Y)=111010101100 is obtained.

As shown in FIG3 , if L=12, X=010110000110, and Y=101101111100, H(X)=5 and H(Y)=8 can be obtained, and H(X)<H(Y) is satisfied, so Z ₀ =1110001011000. Since H(X)+H(Y)=13 is greater than L=12, H(X)+H(Y)≥L is satisfied. According to the definition of the cross-combination bit algorithm, the left 1 bit of the binary string Z ₀ needs to be truncated, and finally the binary string Z=Ccb(X,Y)=110001011000 is obtained.

The above embodiment provides an identity authentication method, which uses a cross-combination bit algorithm for bit operations based on the Hamming weight of encrypted information. In addition to the advantages of small amount of computation and high computational efficiency of bit operations, the encrypted information itself can also be encrypted using the inherent Hamming weight, which not only reduces the introduction of parameters but also increases the difficulty of cracking by a third party, thereby achieving the effect of reducing the amount of computation and improving security.

In some embodiments, before step S1, the server and the user may be registered separately before identity authentication. The method further includes:

Server registration steps:

The server sends a registration request to the registration center, and when the registration is successful, receives the server key K _{RC_S} sent by the registration center;

The server key K _{RC_S} is the key between the registration center and the server.

Specifically, the server sends a registration request to the registration center, and the registration request includes registration information input by the server;

The registration information may include a server identity ID _j ;

The registration center checks whether the registration information is unique;

If the registration information is unique, the registration center sends the server key K _{RC_S} to the server;

If the registration information is not unique, the server is notified to re-enter the registration information until the registration information entered by the server is unique.

Since the above method can be used in a single server or in multiple servers, the registration center can receive registration requests from one or more servers and register them respectively.

And, the user registration steps specifically include the following steps:

User U _i inputs the set identity ID _i , password PW _i and biometric information BIO _i in the terminal, and writes a random number r _i . The terminal calculates the identity ID _i , password PW _i , biometric information BIO _i and random number r _i through a cross-combination bit algorithm according to a fourth preset rule, obtains encryption parameters A _i and B _i , and generates a registration parameter information set {ID _i , A _i , B _i } and sends it to the registration center.

The random number _ri may be a random number selected during user registration. In specific implementation, the random number _ri may be a password set by the user. The fourth preset rule includes: A _i =Ccb(ID _i , _ri ) and B _i =Ccb(PW _i , BIO _i );

The registration center verifies whether the identity identifier ID _i is unique; and when the identity identifier ID _i is unique, it determines that the registration of user U _i is successful, and calculates the master key K of the registration center, the server key K _{RC_S} , the identity identifier ID _i , the encryption parameter A _i and the encryption parameter B _i through the cross-combination bit algorithm according to the fifth preset rule to obtain the encryption parameter E _i , the encryption parameter F _i and the encryption parameter G _i , and writes the encryption parameter E _i , the encryption parameter F _i , the encryption parameter G _i and the operation rules of the cross-combination bit algorithm into the smart card.

及

其中，C_i和D_i均为加密参数，K为注册中心的主密钥，C_{i_L}为加密参数C_i的左部分，C_{i_R}为加密参数C_i的右部分。In some implementations of this embodiment, the fifth preset rule includes: _Ci = Ccb ( _IDi , K), _Di = Ccb ( _{Ci_L} , _{Ci_R} ),

and

Wherein, _Ci and _Di are encryption parameters, K is the master key of the registration center, _{Ci_L} is the left part of the encryption parameter _Ci , and _{Ci_R} is the right part of the encryption parameter _Ci .

Among them, the terminal is generally the terminal equipment required for authentication, such as a registration host, a bank teller, etc.

The smart card also receives the random number _ri written by the user _Ui , so that the smart card stores the original parameter information set {Ei _{, Fi} , _Gi , Ccb(X, Y), _ri }.

The above embodiment can use the cross-combination bit algorithm to encrypt the transmitted information during the user registration process, so that except for processing the user identity, other user information is encrypted when interacting with the registration center, further ensuring the security of user information.

In some embodiments, the method further comprises:

When the verification parameter _F`i is inconsistent with the encryption parameter F _i , the server determines that the login of user U _i has failed and notifies user U _i to log in for the second time; and when the number of consecutive login failures of user U _i reaches a threshold, the smart card of user U _i is locked so that the smart card can no longer be used for login operations.

The threshold value may be 3-5 times and may be preset according to actual needs; when the smart card is locked, the user needs to go to the registration center with the smart card to unlock it.

The above embodiment can remind the user to log in again when the user fails to log in, and lock the smart card when the number of consecutive login failures exceeds a threshold, so that the user can no longer log in, thereby preventing the smart card from being stolen.

In some embodiments, in order to modify the password, after the user U _i successfully logs in, the method further includes:

The server receives the new password PW _new input by the user U _i , and updates the encryption parameter E _i stored in the smart card based on the new password PW _new ;

Wherein, encryption parameter E _i =E _new ,

Specifically, after the password modification is completed, the user can take out the smart card.

In the above embodiment, the user can modify the password after logging in, and the modified password is immediately encrypted and stored to ensure the security of the password modification process.

Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and/or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

The above-mentioned embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the patent of the present application shall be subject to the attached claims.

Claims (7)

1. An identity authentication method, characterized in that the method comprises: The server obtains the identity ID _i , password PW _i and biometric information BIO _i input by user U _i , and obtains the original parameter information set {E _i , F _i , G _i , Ccb(X,Y), r _i } stored in the smart card of user U _i ; wherein E _i , F _i and G _i are encryption parameters, r _i is the random number written into the smart card by the user U _i ; Ccb(X,Y) is the operation rule of the cross-combination bit algorithm, X and Y are both binary strings with a length of L bits, and the cross-combination bit algorithm is an algorithm for bit operation based on the Hamming weight of the encrypted information; The server calculates the verification parameter F`i according to the identity ID <sub>i</sub> , the password PW <sub>i</sub> , the biometric information BIO <sub>i</sub> and the original parameter information set {E <sub>i</sub> , F <sub>i</sub> , G <sub>i</sub> , Ccb(X,Y), r <sub>i</sub> } through the cross-combination bit algorithm, and compares whether the verification parameter <sub>F`i</sub> is consistent with the encryption parameter F _i ; when the verification _{parameter F`i is</sub> consistent with the encryption parameter F <sub>i</sub> , it is determined that the user U <sub>i</sub> has successfully logged in; The server calculates the verification parameter F`i by a cross-combination bit algorithm according to the identity _IDi , the password _PWi , the _biometric information _BIOi and the original parameter information set {Ei _{, Fi} , _Gi , Ccb(X,Y), r _i }, which specifically includes the following steps: The server calculates the verification parameter A` <sub>i</sub> =Ccb(ID <sub>i</sub> , <sub>ri</sub> ) based on the random number r <sub>i</sub> and the identity ID <sub>i</sub> , and calculates the verification parameter B` _i =Ccb(PW _i ,BIO _i ) based on the password PW _i and the biometric information BIO _i ; The verification parameter D` <sub>i</sub> = <sub>i</sub> ⊕ B` _i is calculated based on the verification parameter B` <sub>i</sub> and the encryption parameter E <sub>i</sub> ; Calculate the verification parameter F` _i = D` <sub>i</sub> ⊕ A` _i based on the verification parameter A` <sub>i</sub> and the verification parameter D` _i ; When the user U _i logs in successfully, the smart card generates a random number x, obtains encryption parameters I ₁ , H i and I ₂ through the cross- _combination bit algorithm according to a first preset rule, and generates a first parameter information set {I ₁ , H _i , I ₂ , G _i } and sends it to the server; the server stores a server identity ID _j and a server key K _{RC_S} , and the first preset rule includes: I ₁ =Ccb(D` <sub>i_L</sub> ,D` _{i_R} )⊕x, H _i =Ccb(D` <sub>i</sub> ,x)⊕ID <sub>i</sub> and I <sub>2</sub> =Ccb(ID <sub>i</sub> ⊕x,G <sub>i</sub> ); wherein D` _{i_L} and D` <sub>i_R</sub> are the left and right parts of the verification parameter D` _i respectively; The server calculates the verification parameter I` <sub>2</sub> according to the server key K <sub>RC_S</sub> and the first parameter information set {I <sub>1</sub> ,H <sub>i</sub> ,I <sub>2</sub> ,G <sub>i</sub> } through the cross-combination bit algorithm, and compares whether the verification parameter I` ₂ is consistent with the encryption parameter I ₂ ; when the verification parameter I` <sub>2</sub> is consistent with the encryption parameter I <sub>2</sub> , it is determined that the user U <sub>i</sub> passes the first verification; When the user U <sub>i</sub> passes the first verification, the server generates a random number y, obtains a first interactive key K <sub>S_U</sub> , encryption parameter I <sub>3</sub> and encryption parameter I <sub>4</sub> through the cross-combination bit algorithm according to a second preset rule, and generates a second parameter information set {ID <sub>j</sub> , I <sub>3</sub> , I <sub>4</sub> } and sends it to the smart card, wherein the second preset rule includes: K <sub>S_U</sub> =Ccb(ID <sub>i</sub> ⊕y, ID <sub>j</sub> ⊕x), I <sub>3</sub> =Ccb(ID <sub>i</sub> ,x)⊕y and I <sub>4</sub> =Ccb(ID <sub>j</sub> ,y); The smart card calculates the verification parameter I` ₄ according to the random number x, the identity identifier ID _i and the second parameter information set {ID _j , I ₃ , I ₄ } through the cross-combination bit algorithm, and compares whether the verification parameter I` <sub>4</sub> is consistent with the encryption parameter I <sub>4</sub> ; when the verification parameter I` ₄ is consistent with the encryption parameter I ₄ , it is determined that the user U _i has passed the second verification; When the user U _i passes the second verification, the smart card obtains an encryption parameter N through the cross-combination bit algorithm according to a third preset rule, and sends the encryption parameter N to the server, wherein the third preset rule includes: a second interactive key K _{U_S} = Ccb(ID _i ⊕y, ID _j ⊕x), N = Ccb(y _L , y _R )⊕K _{U_S} , wherein y _L is the left part of the random number y, and y _R is the right part of the random number y; The server calculates the verification parameter N` according to the first interactive key K <sub>S_U</sub> and the random number y through the cross-combination bit algorithm, and compares whether the verification parameter N` is consistent with the encryption parameter N; when the verification parameter N` is consistent with the encryption parameter N, it is determined that the user U <sub>i</sub> has passed the identity authentication. 2. The method according to claim 1, characterized in that the server calculates the verification parameter I` 2 according to the server key K _{RC_S} and the first parameter information set {I ₁ ,H _i ,I ₂ ,G _i } by the cross-combination _bit algorithm, comprising: The server calculates the verification parameter C` <sub>i</sub> =K <sub>RC_S</sub> ⊕G <sub>i</sub> according to the encryption parameter G <sub>i</sub> and the server key K <sub>RC_S</sub> ; The verification parameter C` _i is divided into a left part C` <sub>i_L</sub> and a right part C` _{i_R} , and the verification parameter D`` <sub>i</sub> =Ccb(C` <sub>i_L</sub> ,C` <sub>i_R</sub> ) is calculated; The verification random number x`=Ccb(D`` _{i_L} ,D`` <sub>i_R</sub> )⊕I <sub>1</sub> is calculated according to the verification parameter D`` _i and the encryption parameter I ₁ ; Calculate the verification identity ID` <sub>i</sub> =Ccb(D`` <sub>i</sub> ,`)⊕H _i according to the verification random number x`, the verification parameter D`` <sub>i</sub> and the encryption parameter H <sub>i</sub> ; The verification parameter I` ₂ =Ccb(ID` <sub>i</sub> ⊕x`,G _i ) is calculated according to the verification identity ID` <sub>i</sub> , the verification random number x` and the encryption parameter G _i . 3. The method according to claim 2, characterized in that the smart card calculates the verification parameter I' 4 by the cross-combination bit algorithm according to the random number _x , the identity identifier ID _i and the second parameter information set {ID _j , I ₃ , I ₄ }, comprising: The smart card calculates the verification random number y`=Ccb(ID <sub>i</sub> ,x)⊕I <sub>3</sub> according to the random number x, the identity ID <sub>i</sub> and the encryption parameter I <sub>3</sub> ; The verification parameter I' <sub>4</sub> =Ccb(ID <sub>j</sub> ,y') is calculated according to the verification random number y' and the server identity ID <sub>j</sub> . 4. The method according to claim 1, characterized in that before the server obtains the identity ID <sub>i</sub> , password PW <sub>i</sub> and biometric information BIO <sub>i</sub> input by the user U <sub>i</sub> , the method further comprises: The server sends a registration request to the registration center, and when the registration is successful, receives the server key K <sub>RC_S</sub> sent by the registration center; And, the user U <sub>i</sub> inputs the set identity ID <sub>i</sub> , password PW <sub>i</sub> and biometric information BIO <sub>i</sub> in the terminal, and writes a random number r <sub>i</sub> , and the terminal calculates the identity ID <sub>i</sub> , the password PE <sub>i</sub> , the biometric information BIO <sub>i</sub> and the random number r <sub>i</sub> by the cross-combination bit algorithm according to the fourth preset rule to obtain encryption parameters A <sub>i</sub> and B <sub>i</sub> , and generates a registration parameter information set {ID <sub>i</sub> ,A <sub>i</sub> ,B <sub>i</sub> } and sends it to the registration center, and the fourth preset rule includes: A <sub>i</sub> =Ccb(ID <sub>i</sub> ,r <sub>i</sub> ) and B <sub>i</sub> =Ccb(PW <sub>i</sub> ,BIO <sub>i</sub> ); The registration center verifies whether the identity ID <sub>i</sub> is unique; and when the identity ID <sub>i</sub> is unique, determines that the user U <sub>i</sub> is successfully registered, calculates the master key K of the registration center, the server key K <sub>RC_S</sub> , the identity ID <sub>i</sub> , the encryption parameter A <sub>i</sub> and the encryption parameter B <sub>i</sub> by the cross-combination bit algorithm according to the fifth preset rule to obtain encryption parameter E <sub>i</sub> , encryption parameter F <sub>i</sub> and encryption parameter G <sub>i</sub> , and writes the encryption parameter E <sub>i</sub> , the encryption parameter F <sub>i</sub> , the encryption parameter G <sub>i</sub> and the operation rule of the cross-combination bit algorithm into the smart card, the fifth preset rule includes: C <sub>i</sub> =Ccb(ID <sub>i</sub> ,K), D <sub>i</sub> =Ccb(C <sub>i_L</sub> ,C <sub>i_R</sub> ), E <sub>i</sub> =D <sub>i</sub> ⊕B <sub>i</sub> , F <sub>i</sub> =D <sub>i</sub> ⊕A <sub>i</sub> and G <sub>i</sub> =K <sub>RC_S</sub> ⊕C <sub>i</sub> ; wherein C <sub>i</sub> and D <sub>i</sub> are both encryption parameters, K is the master key of the registration center, and C <sub>i_L</sub> is the encryption parameter C The left part of <sub>i</sub> , <sub>Ci_R</sub> is the right part of the encryption parameter <sub>Ci</sub> ; The smart card also receives the random number r <sub>i</sub> written by the user U <sub>i</sub> , so that the smart card stores the original parameter information set {E <sub>i</sub> , F <sub>i</sub> , G <sub>i</sub> , Ccb(X,Y), r <sub>i</sub> }. 5. The method according to claim 1, characterized in that the method further comprises: When the verification parameter <sub>F`i} is inconsistent with the encryption parameter F _i , the server determines that the login of the user U _i has failed, and notifies the user U _i to log in for the second time; and When the number of consecutive login failures of the user U _i reaches a threshold, the smart card of the user U _i is locked so that the smart card can no longer perform a login operation. 6. The method according to claim 1, characterized in that after the user U _i successfully logs in, the method further comprises: The server receives a new password PW _new input by the user U _i , and updates the encryption parameter E _i stored in the smart card based on the new password PW _new ; Wherein, encryption parameters E _i =E _new , E _new =E _i ⊕Ccb(PW _i ,BIO _i )⊕Ccb(PW _new ,BIO _i ). 7. The method according to any one of claims 1 to 6, characterized in that the formula of the cross-combination bit algorithm is: Z = Ccb (X, Y); Where Z is a binary string of length L bits, H(X) represents the Hamming weight of binary string X, and H(Y) represents the Hamming weight of binary string Y; The operation rules of the cross-combination bit algorithm include: When H(X)≥H(), take H(Y) bits on the right side of binary string X and H(X) bits on the left side of binary string Y and combine them in sequence to obtain a binary string; if H(X)+H()≥L, then truncate (()+H(Y)-L) bits on the right side of the binary string to obtain a binary string Z with a length of L bits; if H(X)+H()<L, then add (-(H(X)+H()) zeros to the left side of the binary string to obtain a binary string Z with a length of L bits; When H(X)<H(), take the H(Y) bits on the left side of the binary string X and the H(X) bits on the right side of the binary string Y and combine them in reverse order to obtain a binary string; if H(X)+H()≥L, then truncate the left side of the binary string (()+H(Y)-L) bits to obtain a binary string Z with a length of L bits; if H(X)+H()<L, then add (-(H(X)+H()) zeros to the right side of the binary string to obtain a binary string Z with a length of L bits.

Images