TW202145036A - Method of identity verification based on biometrics which is implemented by a verification server - Google Patents

Abstract

A method of identity verification based on biometrics is implemented by a verification server. The method includes the following steps of (A) receiving a user's biometrics from a verification device; (B) when the verification server receives encrypted verification data of the user from a user carrier, determining whether the encrypted verification data can be decrypted with private keys; (C) in response to determining that the encrypted verification data can be decrypted with one of the private keys, decrypting the encrypted verification data; (D) determining whether verification biometrics in the decrypted verification data matches the user's biometrics; and (E) in response to determining there is a match, generating and transmitting a verification success message to the verification device.

Description

Biometric-based authentication methods

The present invention relates to an identity verification method, in particular to an identity verification method based on biometrics.

Biometric identification technology mainly refers to a technology that uses human biometrics for identity authentication. Through biometric identification, users can realize identity authentication without entering a password, which is convenient and fast.

Most of the existing biometric identification technologies use a specific algorithm to extract biometric data and store it in an authentication server for identity authentication.

Biometrics are mainly fingerprints, faces, iris, veins, voiceprints, etc. Biometrics have the characteristics of uniqueness, invariance, and measurability. However, due to the above characteristics of biometrics, if biometrics are stolen, it may cause The user's privacy is leaked, and the biometrics cannot be reported or changed. Once the verification server is hacked and the biometric data stored in the verification server is stolen, the consequences will be immeasurable.

Therefore, the purpose of the present invention is to provide a biometric-based authentication method without storing biometric data in the authentication server.

Therefore, the biometric-based identity verification method of the present invention is used to verify a user carrying a user carrier, and is implemented by a verification system. The verification system includes a verification device and a verification server. The user carrier The device and the verification device are connected to the verification server via a communication network, the verification server stores a plurality of private keys, the user vehicle stores a public key and a verification data, the verification data includes a The method comprises a step (A), a step (B), a step (C), a step (D), and a step (E).

In the step (A), the authentication server receives a user biometric feature generated by the authentication device capturing the user's biometric feature from the authentication device.

In the step (B), when the authentication server receives from the user vehicle an encrypted authentication data encrypted by the user vehicle using the public key, the authentication server determines that the authentication data is encrypted by the user vehicle. Whether the encrypted verification data can be decrypted with the private keys.

In the step (C), when the authentication server determines that the encrypted authentication data can be decrypted with one of the private keys, the authentication server decrypts the encrypted authentication data.

In step (D), the verification server determines whether the verification biometric feature of the decrypted encrypted verification data matches the user biometric feature.

In the step (E), when the verification server determines that the verification biometrics of the decrypted encrypted verification data match the user's biometrics, the verification server generates and transmits a verification success message to the verification server. Verify the device.

The effect of the present invention is: after the verification server receives the encrypted verification data from the user, and determines that the encrypted verification data can be decrypted with one of the private keys, the verification The server authenticates the identity of the user with the biometric feature based on the verification of the encrypted authentication data without storing any biometric data.

Before the present invention is described in detail, it should be noted that in the following description, similar elements are designated by the same reference numerals.

1 and 2, an authentication system 1 for implementing an embodiment of the biometric-based identity authentication method of the present invention is described. The authentication system 1 is used to authenticate a user carrying a user carrier 2, and includes a The verification device 11 and a verification server 12 are provided.

The user vehicle 2 is connected to the verification server 12 via a communication network 100, and stores a public key and verification data, the verification data includes a verification biometric feature related to the user, a verification data related to the user The hardware information of the vehicle 2, and a personal information about the user. The user vehicle 2 is, for example, a smart phone, the communication network 100 is, for example, the Internet, and the hardware information is a unique identification code representing the user vehicle 2, such as an international mobile device identification code (International Mobile Device Identification Code). Mobile Equipment Identity (IMEI), Mobile Equipment Identifier (MEID), Electronic Serial Number (ESN), or Media Access Control Address (MAC Address), in this implementation In an example, the verification biometric feature is, for example, a face feature. In other embodiments, the verification biometric feature can also be a fingerprint feature, an iris feature, a vein feature, or a voiceprint feature, but not limited thereto.

The authentication device 11 includes a biometrics capture module 111 for capturing biometrics, a communication module 112 connected to the authentication server 12 via the communication network 100 , and an electrical connection to the biometrics capture module 111 and the processing module 113 of the communication module 112 . In this embodiment, the biometric feature capture module 111 is, for example, a camera, which is used to capture face images. In other embodiments, the biometric feature capture module 111 can also be a fingerprint reader or an iris reader. , vein identifier, or voiceprint identifier, but not limited to this.

The verification server 12 is connected to the communication network 100 and stores multiple private keys, multiple pieces of legal hardware information corresponding to the corresponding private keys, and multiple pieces of legal personal information corresponding to the corresponding private keys.

Referring to FIG. 1 and FIG. 3 , it is described how the authentication system 1 implements the embodiment of the biometric-based authentication method of the present invention. The steps involved in this embodiment are described in detail below.

In step 301 , the biometric feature capture module 111 of the verification device 11 captures the biometric feature of the user, the processing module 113 of the verification device 11 generates a user biometric feature, and passes the verification device 11 The communication module 112 transmits the user biometrics to the authentication server 12 .

In step 302 , the user vehicle 2 encrypts the authentication data into an encrypted authentication data by using the public key, and transmits the encrypted authentication data to the authentication server 12 via the communication network 100 .

In step 303, the authentication server 12 determines whether the encrypted authentication data can be decrypted with the private keys. When the verification server 12 determines that the encrypted verification data cannot be decrypted with the private keys, the process proceeds to step 304; and when the verification server 12 determines that the encrypted verification data can be decrypted with one of the private keys When the data is verified, the flow goes to step 305 .

In step 304 , the verification server 12 generates and transmits a verification failure message to the verification device 11 via the communication network 100 .

In step 305, the authentication server 12 decrypts the encrypted authentication data using the one of the private keys.

In step 306 , the verification server 12 determines whether the decrypted hardware information of the encrypted verification data matches the legal hardware information corresponding to the private key used for decryption in step 305 . When the verification server 12 determines that the decrypted hardware information of the encrypted verification data does not match the legal hardware information, the process proceeds to step 304; and when the verification server 12 determines that the decrypted encrypted verification data does not match the legal hardware information When the hardware information of the verification data matches the legal hardware information, the flow goes to step 307 .

In step 307 , the verification server 12 determines whether the decrypted personal information of the encrypted verification data matches the legal personal information corresponding to the private key used for decryption in step 305 . When the verification server 12 determines that the decrypted personal information of the encrypted verification data does not match the legal personal information, the process proceeds to step 304; and when the verification server 12 determines that the decrypted encrypted verification data does not match When the personal information matches the legal personal information, the process proceeds to step 308 .

In step 308, the authentication server 12 determines whether the authentication biometrics of the decrypted encrypted authentication data match the user biometrics. When the verification server 12 determines that the verification biometric feature of the decrypted encrypted verification data does not match the user's biometric feature, the process proceeds to step 304; and when the verification server 12 determines that the decrypted encrypted verification data does not match the user's biometric feature When the verification biometrics of the post-verification data match the user's biometrics, the flow goes to step 309 .

In step 309 , the verification server 12 generates and transmits a verification success message to the verification device 11 via the communication network 100 .

It should be particularly noted that, in this embodiment, step 301 is before step 303, and in other embodiments, step 301 may be performed between steps 303 and 308, which is not limited thereto.

It should be further noted that, in this embodiment, after step 303: the verification server 12 determines whether the encrypted verification data can be decrypted with the private keys, it is necessary to perform step 306: the verification server 12 determines Whether the decrypted hardware information of the encrypted verification data matches the legal hardware information, and proceed to step 307: the verification server 12 determines whether the decrypted personal information of the encrypted verification data matches the legal personal information , to confirm whether the encrypted verification data is legal data, and after confirming that the encrypted verification data is legal data, then proceed to step 308: the verification server 12 determines the decrypted biometric feature for verification of the encrypted verification data Whether it matches the user's biometric feature to confirm whether the user is the user related to the encrypted verification data, in other embodiments, after step 303, only one of step 306 or step 307 can be performed , and then proceed to step 308, or directly proceed to step 308 after step 303, which is not limited thereto.

To sum up, in the biometric-based authentication method of the present invention, the authentication server 12 receives the encrypted authentication data from the user vehicle 2, and determines that one of the private keys can be used for After the user decrypts the encrypted verification data, and determines that the decrypted hardware information of the encrypted verification data matches the legal hardware information, and the decrypted personal information of the encrypted verification data matches the legal personal information Afterwards, the authentication server 12 verifies the identity of the user by using the biometric feature for authentication of the encrypted authentication data without storing any biometric data, so the object of the present invention can be achieved.

However, the above are only examples of the present invention, and should not limit the scope of implementation of the present invention. Any simple equivalent changes and modifications made according to the scope of the patent application of the present invention and the contents of the patent specification are still included in the scope of the present invention. within the scope of the invention patent.

1: Verify the system 11: Verification device 111: Biometric Capture Module 112: Communication module 113: Processing modules 12: Verify the server 100: Communication Network 2: User Vehicle 301~309: Steps

Other features and effects of the present invention will be clearly presented in the embodiments with reference to the drawings, wherein: 1 is a block diagram illustrating an authentication system for implementing an embodiment of the biometric-based authentication method of the present invention; Figure 2 is a schematic diagram illustrating the verification system; and 3 is a flow-through diagram illustrating this embodiment of the biometric-based authentication method of the present invention.

301~309: Steps

Claims (5)

A biometric-based identity verification method for verifying a user carrying a user carrier is implemented by a verification system, the verification system includes a verification device and a verification server, the user carrier and the The verification device is connected with the verification server via a communication network, the verification server stores a plurality of private keys, the user carrier stores a public key and a verification data, the verification data includes a verification related to the user Using biometrics, the method consists of the following steps: (A) the authentication server receives from the authentication device a user biometric feature generated by the authentication device capturing the user's biometric feature; (B) When the authentication server receives from the user vehicle an encrypted authentication data encrypted by the user vehicle using the public key, the authentication server determines whether the authentication data can be The private key decrypts the encrypted verification data; (C) when the authentication server determines that the encrypted authentication data can be decrypted with one of the private keys, the authentication server decrypts the encrypted authentication data; (D) the authentication server determines whether the authentication biometrics of the decrypted encrypted authentication data match the user's biometrics; and (E) When the verification server determines that the verification biometrics of the decrypted encrypted verification data match the user's biometrics, the verification server generates and transmits a verification success message to the verification device. According to the biometric-based identity verification method described in claim 1, the verification server further stores a plurality of pieces of legal hardware information corresponding to the corresponding private keys, and the verification data further includes an information related to the user vehicle. The hardware information also includes the following steps between step (C) and step (D): (F) the verification server determines whether the decrypted hardware information of the encrypted verification data matches the legal hardware information corresponding to the private key used for decryption in step (C); and (G) When the verification server determines that the decrypted hardware information of the encrypted verification data does not match the legal hardware information, the verification server generates and transmits a verification failure message to the verification device; When the verification server determines that the decrypted hardware information of the encrypted verification data matches the legal hardware information, step (D) is performed. According to the biometric-based identity verification method described in claim 1, the verification server further stores a plurality of pieces of legal personal information corresponding to the corresponding private keys, and the verification data also includes a piece of personal information related to the user, The following steps are also included between step (C) and step (D): (H) the verification server determines whether the decrypted personal information of the encrypted verification data matches the legitimate personal information corresponding to the private key used for decryption in step (C); and (1) when the verification server determines that the decrypted personal information of the encrypted verification data does not match the legitimate personal information, the verification server generates and transmits a verification failure message to the verification device; When the verification server determines that the decrypted personal information of the encrypted verification data matches the legal personal information, step (D) is performed. The biometric-based authentication method according to claim 1, further comprising the following steps after step (B): (J) When the verification server determines that the encrypted verification data cannot be decrypted with the private keys, the verification server generates and transmits a verification failure message to the verification device. The biometric-based authentication method according to claim 1, further comprising the following steps after step (D): (K) When the verification server determines that the verification biometrics of the decrypted encrypted verification data do not match the user's biometrics, the verification server generates and transmits a verification failure message to the verification device.

Images