WO2022237546A1

WO2022237546A1 - Method for offline authentication of variable biometric features, device, and system

Info

Publication number: WO2022237546A1
Application number: PCT/CN2022/089587
Authority: WO
Inventors: 李东声
Original assignee: 天地融科技股份有限公司
Priority date: 2021-05-11
Filing date: 2022-04-27
Publication date: 2022-11-17
Also published as: CN115329301A

Abstract

A method for offline authentication of variable biometric features, a device, and a system. The method comprises: prompting collection of first biometric information to be verified and collecting same (101); obtaining a self-defined collection instruction from a security device, and prompting collection of self-defined biometric information to be verified and collecting same (102); obtaining, from the security device, first user feature information obtained by calculating first user biometric information, and obtaining self-defined user feature information obtained by calculating self-defined user biometric information (103); determining a verification algorithm, performing calculation to obtain first feature information to be verified, and performing calculation to obtain self-defined feature information to be verified (104); locally comparing the first feature information to be verified and the first user feature information, comparing the self-defined feature information to be verified and the self-defined user feature information, and after the comparison results are consistent, determining that the authentication is successful; and (105) deleting locally stored first biometric information to be verified and second biometric information to be verified (106).

Description

A method, device and system for off-line authentication of variable biometric features

Cross References to Related Applications

[Corrected 19.05.2022 under Rule 91]
This disclosure claims the priority of the Chinese patent application with application number 202110513326.4 entitled "A method, device and system for offline authentication of variable biometric features" filed on May 13, 2021, the entire contents of which are incorporated by reference incorporated in this disclosure.

technical field

The present disclosure relates to the field of electronic technology, and in particular to an off-line authentication method, device and system for variable biometric features.

Background technique

The rapid development of the application of biometric identification has brought great convenience to people, but at the same time, because the device that completes the biometric identification needs to send the acquired biometric information to the server to complete the comparison calculation, and the server also needs to pre-store the user's Biometric information brings the possibility of data leakage during the process of transmitting acquired biometric information and during the process of pre-storing biometric information, which poses a security risk to users' privacy. How to avoid the above problems, improve the security of user privacy, and how to enable users to customize the content of biometric identification to further improve the convenience and privacy of biometric identification are technical problems to be solved urgently by those skilled in the art.

public content

The present disclosure aims to solve the above-mentioned problems.

The main purpose of the present disclosure is to provide an off-line authentication method, device and system for variable biometric features.

In order to achieve the above purpose, the technical solution of the present disclosure is specifically implemented as follows:

On the one hand, the present disclosure provides an offline authentication method with variable biometric features, including: the authentication device prompts to collect the first biometric information to be verified, and collects the first biometric information to be verified; Obtain a custom collection instruction from the security device, collect the custom biometric information to be verified according to the prompt of the custom collection instruction, and collect the custom biometric information to be verified; the authentication device obtains the biometric information of the first user from the security device to calculate The obtained first user characteristic information, and obtain the user-defined user characteristic information obtained by calculating the user-defined biometric information; the authentication device determines the verification algorithm, and uses the verification algorithm to calculate the first biometric information to be verified. The feature information to be verified is the custom feature information to be verified obtained by using the verification algorithm to calculate the custom biometric information to be verified; the authentication device compares the first feature information to be verified with the first user feature information locally, and compares the self-defined Define the characteristic information to be verified and the user-defined characteristic information, and determine that the authentication is passed after the comparison is consistent; after the authentication is passed, the authentication device deletes the first biometric information to be verified and the custom biometric information to be verified locally stored.

Another aspect of the present disclosure provides another offline authentication method with variable biometric features, including: the authentication device prompts to collect the first biometric information to be verified, and collects the first biometric information to be verified; the authentication device collects the first biometric information to be verified; Some security devices obtain custom collection instructions, collect custom biometric information to be verified according to the custom collection instruction prompts, and collect custom biometric information to be verified; authentication devices obtain user biometric information from security devices to calculate The obtained user characteristic information; the authentication device determines the verification algorithm, and uses the verification algorithm to calculate the first biometric information to be verified and the user-defined biometric information to be verified to obtain the characteristic information to be verified; the verification device locally compares the characteristic information to be verified with The first user characteristic information, and after the comparison is consistent, it is determined that the authentication is passed; after the authentication is passed, the authentication device deletes the locally stored first biometric information to be verified and the custom biometric information to be verified.

Another aspect of the present disclosure provides an offline authentication device with variable biometric features, including: a collection module, used to prompt to collect the first biometric information to be verified, and collect the first biometric information to be verified; Obtain custom collection instructions from the security device held by the user, and send the custom collection instructions to the collection module; the collection module is also used to collect custom biometric information to be verified according to the custom The biometric information to be verified; the characteristic information acquisition module is used to obtain the first user characteristic information obtained by calculating the biometric information of the first user from the security device, and obtain the customized user-defined information obtained by calculating the biometric information of the user-defined user. User characteristic information; a characteristic information calculation module, used to determine a verification algorithm, use the verification algorithm to calculate the first biometric information to be verified to obtain the first characteristic information to be verified, and use the verification algorithm to calculate the user-defined biometric information to be verified Obtained custom feature information to be verified; a comparison module for locally comparing the first feature information to be verified with the first user feature information, and comparing the custom feature information to be verified with the custom user feature information, and in After the comparison is consistent, it is determined that the authentication is passed; the deletion module is used to delete the locally stored first biometric information to be verified and the custom biometric information to be verified after the authentication is passed.

Another aspect of the present disclosure provides another off-line variable biometric authentication device, including: a collection module, used to prompt to collect the first biometric information to be verified, and collect the first biometric information to be verified; an acquisition module, It is used to obtain custom collection instructions from the security device held by the user, and send the custom collection instructions to the collection module; the collection module is also used to collect custom biometric information to be verified according to the custom Define the biometric information to be verified; the characteristic information acquisition module is used to obtain the user characteristic information obtained by calculating the user biometric information from the security device; the characteristic information calculation module is used to determine the verification algorithm, and use the verification algorithm to first Verified biometric information and custom biometric information to be verified are calculated to obtain the feature information to be verified; the comparison module is used to compare the feature information to be verified with the first user feature information locally, and determine the authentication after the comparison is consistent pass; delete module, configured to delete the locally stored first biometric information to be verified and the custom biometric information to be verified after the authentication is passed.

Another aspect of the present disclosure also provides an offline variable biometric authentication system, including a security device and any of the above-mentioned variable offline biometric authentication devices, wherein the security device pre-stores custom collection instructions , user feature information, and identification of the verification algorithm.

It can be seen from the above-mentioned technical solutions provided by this disclosure that this disclosure provides an off-line authentication method, device and system with variable biometric features, the authentication device collects the first biometric information to be verified, and customizes the biometrics to be verified. The identification information is calculated after determining the verification algorithm, and the first characteristic information to be verified and the custom characteristic information to be verified are respectively obtained, the first user characteristic information and the custom user characteristic information are obtained from the security device, and the first to-be-verified characteristic information is respectively obtained locally. Compare the verification feature information with the first user feature information, as well as the custom feature information to be verified and the custom user feature information. After the comparison is passed, the authentication is passed, and the locally stored first biometric information to be verified and the custom to-be-verified biometric information are deleted. biometric information. As a result, the authentication device can compare the characteristic information obtained from the collected biometric information with the characteristic information stored in the security device locally, and delete the above information after the comparison is completed, without the need to store the collected biometric information It is transmitted to other devices to complete the calculation, and other devices do not need to reserve the user's biometric information, which avoids information leakage and reserved information leakage during the transmission process, protects the security of the user's biometric information, and improves the user's biometric information. Privacy security. And the authentication device collects the user's custom information to be verified, and completes the comparison and authentication according to the characteristic information of the information. Since others cannot illegally obtain the biometric method selected by the user, the accuracy of the user's authentication through biometrics is further improved. and security.

Description of drawings

FIG. 1 is a flow chart of an offline authentication method for variable biometric features provided by Embodiment 1 of the present disclosure;

FIG. 2 is a flow chart of an offline authentication method for variable biometric features provided by Embodiment 2 of the present disclosure;

FIG. 3 is a schematic structural diagram of an offline authentication device with variable biometric features provided by Embodiment 3 of the present disclosure;

FIG. 4 is a schematic structural diagram of an offline authentication device with variable biometric features provided by Embodiment 4 of the present disclosure;

FIG. 5 is a schematic structural diagram of an offline authentication system with variable biometric features provided by Embodiment 5 of the present disclosure.

Detailed ways

Example 1

Fig. 1 shows a flow chart of an offline authentication method for variable biometric features provided by Embodiment 1 of the present disclosure. Referring to Fig. 1, the offline authentication method for variable biometric features provided by Embodiment 1 of the present disclosure, Include the following steps:

S101. The authentication device prompts to collect first biometric information to be verified, and collects the first biometric information to be verified.

In this embodiment, the authentication device can be a device used in payment, passing, check-in, commuting and other scenarios that require authentication or identification of the user, for example, it can be a face payment device, a fingerprint payment device, an attendance Punch card machines and other equipment; biometric information can be facial image information, fingerprint information, palmprint information, iris information and other biological information with identification functions.

S102. The authentication device acquires a custom collection instruction from the security device held by the user, collects the custom biometric information to be verified according to the prompt of the custom collection instruction, and collects the custom biometric information to be verified.

In this embodiment, the security device held by the user may be an electronic key device, a payment device, a mobile phone, and other devices that can safely store information. The information stored in the security device is information certified by an authority and is reliable.

After the authentication device completes the first collection of biometric information, it completes the second collection of biometric information according to the custom collection instruction sent by the security device held by the user. The custom collection instruction is stored in the security device The content of the instruction can be set according to the needs of the user. For example, the user can set the collection instruction to collect voiceprints, fingerprints, palmprints, irises or facial images with specific expressions. When an illegal user of a security device uses the security device for verification, since it is impossible to know what type of biometric information the user-defined user biometric information is, the possibility of illegally using the security device to pass the authentication is further reduced, and the security of authentication is improved. safety.

S103. The authentication device acquires first user characteristic information obtained by calculating the biometric information of the first user from the security device, and obtains user-defined characteristic information obtained by calculating the user-defined biometric information.

In this embodiment, the security device prestores the first user feature information calculated according to the first user biometric information, and the user-defined user feature information calculated based on the self-defined user biometric information. The characteristic information pre-stored in the security device is the information stored after being authenticated by the authority, for example, the information stored after the authentication is completed at the counter of the bank.

S104. The authentication device determines a verification algorithm, using the verification algorithm to calculate the first biometric information to be verified to obtain the first feature information to be verified, and using the verification algorithm to calculate the custom biometric information to be verified. User-defined features to be verified information.

In this embodiment, the verification algorithm may be a verification algorithm pre-stored locally in the authentication device.

In an optional implementation of this embodiment, S104 further includes: the authentication device obtains the identification of the verification algorithm from the security device; the authentication device determines the verification algorithm corresponding to the identification locally according to the identification; or, the authentication device obtains the verification algorithm from the background according to the identification Gets the authentication algorithm corresponding to the identity. When there are multiple verification algorithms for calculating the first biometric information to be verified, the verification device can determine the verification algorithm according to the identification of the verification algorithm obtained from the security device, so as to avoid verification errors caused by inconsistent verification algorithms. When the verification algorithm corresponding to the logo is not stored in the verification device, the verification device can obtain the verification algorithm corresponding to the logo from the background device after being connected to the Internet, thereby improving the verification speed and compatibility of the verification device.

In an optional implementation manner of this embodiment, the authentication device determining the verification algorithm includes: the authentication device obtains the verification algorithm from the security device. When the verification algorithm corresponding to the identification is not stored in the verification device, the verification device can obtain the verification algorithm from the security device, which improves the accuracy of the verification algorithm, and avoids problems caused when the verification algorithm is not pre-stored in the verification device or the verification device cannot be connected to the Internet. The problem that the verification algorithm cannot be obtained has improved the verification speed and compatibility of the verification device.

In an optional implementation of this embodiment, the verification algorithm includes: a first verification algorithm and a second verification algorithm; the verification device uses the verification algorithm to calculate the first biometric information to be verified. The self-defined characteristic information to be verified obtained by calculating the self-defined biometric information to be verified by the verification algorithm includes: the first characteristic information to be verified obtained by the authentication device using the first verification algorithm to calculate the first biometric information to be verified; The second verification algorithm calculates the user-defined characteristic information to be verified by calculating the user-defined biometric information to be verified. In this optional implementation mode, the verification algorithm for verifying the first biometric information to be verified and the verification algorithm for customizing the biometric information to be verified can be different verification algorithms, and different verification algorithms are used to complete the calculations respectively to improve the accuracy of authentication sex.

S105. The authentication device locally compares the first feature information to be verified with the first user feature information, and compares the custom feature information to be verified with the custom user feature information, and determines that the authentication is passed after the comparison is consistent.

In this embodiment, the authentication device locally compares the first feature information to be verified with the first user feature information, and compares the custom feature information to be verified with the custom user feature information, avoiding the transmission of user biometric information to The risk of information leakage caused by the transmission process of other devices for comparison, and the risk of information leakage caused by other devices pre-stored user biometric information. After the comparison is consistent, it is considered that the user currently holding the security device and the real owner of the security device are the same person, and it can be determined that the user himself is using the security device, and then follow-up operations can be completed after the authentication is passed, such as , unlock the access control, complete payment and other operations.

S106. After passing the authentication, the authentication device deletes the locally stored first biometric information to be verified and the customized biometric information to be verified.

In this embodiment, after the authentication is passed, the authentication device deletes the biometric information stored locally, which further avoids the leakage of the biometric information of the user and improves the security of the user's privacy.

In an optional implementation manner of this embodiment, the authentication device deletes the locally stored first feature information to be verified and the first user feature information, as well as the custom feature information to be verified and the custom user feature information. The authentication device deletes characteristic information, further improving the security of user privacy.

In an optional implementation manner of this embodiment, the authentication device judges whether the self-defined biometric information to be verified is preset information, and if it is preset information, performs a preset operation. When the authentication device judges whether the collected custom biometric information to be verified is preset information, it can judge that the user has a special situation. For example, the custom biometric information to be verified is rapid and frequent blinking, which can judge that the user is currently in a dangerous situation , you can choose to complete operations such as alarm or transaction failure, which improves the safety of users.

Through the offline authentication method with variable biometric features provided in this embodiment, the authentication device collects the first biometric information to be verified, and customizes the biometric information to be verified, and calculates after determining the verification algorithm to obtain the first biometric information to be verified. Feature information and custom feature information to be verified, obtain the first user feature information and user-defined feature information from the security device, and locally verify the first feature information to be verified, the first user feature information, and the custom feature information to be verified The information is compared with the custom user characteristic information, and after the comparison is passed, the authentication is passed, and the locally stored first biometric information to be verified and the custom biometric information to be verified are deleted. As a result, the authentication device can compare the characteristic information obtained from the collected biometric information with the characteristic information stored in the security device locally, and delete the above information after the comparison is completed, without the need to store the collected biometric information It is transmitted to other devices to complete the calculation, and other devices do not need to reserve the user's biometric information, which avoids information leakage and reserved information leakage during the transmission process, protects the security of the user's biometric information, and improves the user's biometric information. Privacy security. And the authentication device collects the user's custom information to be verified, and completes the comparison and authentication according to the characteristic information of the information. Since others cannot illegally obtain the biometric method selected by the user, the accuracy of the user's authentication through biometrics is further improved. and security.

Example 2

FIG. 2 shows a flow chart of an offline authentication method with variable biometric features provided by Embodiment 2 of the present disclosure. Embodiment 2 is only partially different from Embodiment 1, and the similarities will not be repeated here. Referring to Figure 2, the off-line authentication method for variable biometric features provided by Embodiment 2 of the present disclosure includes the following steps:

S201. The authentication device prompts to collect first biometric information to be verified, and collects the first biometric information to be verified.

S202. The authentication device acquires a custom collection instruction from the security device held by the user, collects the custom biometric information to be verified according to the prompt of the custom collection instruction, and collects the custom biometric information to be verified.

In this embodiment, the security device held by the user may be an electronic key device, a mobile phone, and other devices that can safely store information. The information stored in the security device is information certified by an authority and is reliable.

S203. The authentication device acquires user characteristic information obtained by calculating the user's biometric identification information from the security device.

In this embodiment, the security device pre-stores user characteristic information obtained by calculating the user's biometric identification information. The user biometric information includes the first user biometric information and the user-defined user biometric information, and the user characteristic information is obtained after calculating the above two biometric information. The characteristic information pre-stored in the security device is the information stored after being authenticated by the authority, for example, the information stored after the authentication is completed at the counter of the bank.

S204. The authentication device determines a verification algorithm, and uses the verification algorithm to calculate the characteristic information to be verified obtained by calculating the first biometric information to be verified and the custom biometric information to be verified.

In an optional implementation of this embodiment, S204 also includes: the authentication device obtains the identification of the verification algorithm from the security device; the authentication device determines the verification algorithm corresponding to the identification locally according to the identification; or, the authentication device obtains the verification algorithm from the background according to the identification Gets the authentication algorithm corresponding to the identity. When there are multiple verification algorithms for calculating the first biometric information to be verified, the verification device can determine the verification algorithm according to the identification of the verification algorithm obtained from the security device, so as to avoid verification errors caused by inconsistent verification algorithms. When the verification algorithm corresponding to the logo is not stored in the verification device, the verification device can obtain the verification algorithm corresponding to the logo from the background device after being connected to the Internet, thereby improving the verification speed and compatibility of the verification device.

S205. The authentication device locally compares the feature information to be verified with the first user feature information, and determines that the authentication is passed after the comparison is consistent.

In this embodiment, the authentication device locally compares the feature information to be verified with the first user feature information, avoiding the risk of information leakage caused by transmitting the user's biometric feature information to other devices for comparison, and other devices The risk of information leakage caused by pre-storing user biometric information. After the comparison is consistent, it is considered that the user currently holding the security device and the real owner of the security device are the same person, and it can be determined that the user himself is using the security device, and then follow-up operations can be completed after the authentication is passed, such as , unlock the access control, complete payment and other operations.

S206. After passing the authentication, the authentication device deletes the locally stored first biometric information to be verified and the custom biometric information to be verified.

In this embodiment, after the authentication is passed, the authentication device deletes the biometric information stored locally, which further avoids the leakage of the user's biometric information and improves the security of the user's privacy.

In an optional implementation manner of this embodiment, the authentication device deletes the locally stored first feature information to be verified and the first user feature information. The authentication device deletes characteristic information, further improving the security of user privacy.

Through the offline authentication method with variable biometric features provided in this embodiment, the authentication device collects the first biometric information to be verified, and customizes the biometric information to be verified, calculates after determining the verification algorithm, and obtains the characteristic information to be verified respectively, Obtain the characteristic information of the first user from the security device, compare the characteristic information to be verified locally with the characteristic information of the first user, pass the verification after the comparison is passed, and delete the locally stored first biometric information to be verified and the custom verification to be verified biometric information. As a result, the authentication device can compare the characteristic information obtained from the collected biometric information with the characteristic information stored in the security device locally, and delete the above information after the comparison is completed, without the need to store the collected biometric information It is transmitted to other devices to complete the calculation, and other devices do not need to reserve the user's biometric information, which avoids information leakage and reserved information leakage during the transmission process, protects the security of the user's biometric information, and improves the user's biometric information. Privacy security. And the authentication device collects the user's custom information to be verified, and completes the comparison and authentication according to the characteristic information of the information. Since others cannot illegally obtain the biometric method selected by the user, the accuracy of the user's authentication through biometrics is further improved. and security.

Example 3

FIG. 3 shows a schematic structural diagram of an offline authentication device with variable biometric features provided by Embodiment 3 of the present disclosure. The device can be used to implement the offline authentication method for variable biometric features provided in Embodiment 1. The following mainly describes the functions of each module of an off-line authentication device with variable biometric features provided by the embodiment of the present disclosure. For other related content, please refer to the description in Embodiment 1.

Referring to FIG. 3 , the variable biometric offline authentication device 300 provided by Embodiment 3 of the present disclosure includes:

The collection module 301 is used to prompt to collect the first biometric information to be verified, and collect the first biometric information to be verified;

The acquiring module 302 is configured to acquire a custom collection instruction from the security device held by the user, and send the custom collection instruction to the collection module 301;

The collection module 301 is also used to prompt and collect custom biometric information to be verified according to a custom collection instruction, and collect custom biometric information to be verified;

The feature information acquisition module 303 is configured to acquire the first user feature information obtained by calculating the first user biometric information from the security device, and obtain the user-defined user feature information calculated by calculating the user-defined biometric information;

The feature information calculation module 304 is used to determine the verification algorithm, the first feature information to be verified obtained by using the verification algorithm to calculate the first biometric information to be verified, and the self-defined biometric information to be verified by using the verification algorithm. Define the characteristic information to be verified;

The comparison module 305 is configured to locally compare the first feature information to be verified with the first user feature information, and compare the custom feature information to be verified with the custom user feature information, and determine that the authentication is passed after the comparison is consistent ;

The deletion module 306 is configured to delete the locally stored first biometric information to be verified and the custom biometric information to be verified after the authentication is passed.

In an optional embodiment of the present disclosure, the obtaining module 302 is further configured to obtain the identification of the verification algorithm from the security device; the feature information calculation module 304 is also configured to locally determine the verification algorithm corresponding to the identification according to the identification; or The characteristic information calculation module is also used to obtain the verification algorithm corresponding to the identification from the background according to the identification.

In an optional embodiment of the present disclosure, determining the verification algorithm includes: the obtaining module 302 obtains the verification algorithm from the security device.

In an optional embodiment of the present disclosure, the verification algorithm includes: a first verification algorithm and a second verification algorithm; a characteristic information calculation module, configured to use the verification algorithm to calculate the first biometric information to be verified to obtain the first biometric information to be verified The characteristic information, the custom-defined characteristic information to be verified obtained by using the verification algorithm to calculate the self-defined biometric information to be verified includes: a characteristic information calculation module, which is used to calculate the first biometric information to be verified by using the first verification algorithm The first feature information to be verified is used for the custom feature information to be verified obtained by calculating the custom biometric information to be verified by using the second verification algorithm.

In an optional embodiment of the present disclosure, the deletion module 306 is further configured to delete locally stored first feature information to be verified and first user feature information, as well as custom feature information to be verified and custom user feature information.

In an optional embodiment of the present disclosure, the comparison module 305 is further configured to determine whether the customized biometric information to be verified is preset information, and if it is preset information, perform a preset operation.

Through the offline authentication method with variable biometric features provided in this embodiment, the authentication device 300 collects the first biometric information to be verified, and customizes the biometric information to be verified, and calculates after determining the verification algorithm to obtain the first biometric information to be verified respectively. Verify feature information and custom feature information to be verified, obtain the first user feature information and custom user feature information from the security device, and locally verify the first feature information to be verified, the first user feature information, and the custom user feature information to be verified The feature information is compared with the custom user feature information, and after the comparison is passed, the authentication is passed, and the locally stored first biometric information to be verified and the custom biometric information to be verified are deleted. Therefore, the authentication device 300 can locally compare the characteristic information obtained from the collected biometric information with the characteristic information stored in the security device, and delete the above information after the comparison is completed, without the need to transfer the collected biometric The information is transmitted to other devices to complete the calculation, and other devices do not need to reserve the user's biometric information, which avoids information leakage and reserved information leakage during the transmission process, protects the security of the user's biometric information, and improves Security of user privacy. And the authentication device 300 collects user-defined information to be verified, and completes the comparison and authentication according to the characteristic information of the information. Since others cannot illegally obtain the biometric identification method selected by the user, the accuracy of the user's authentication through biometric identification is further improved. sex and safety.

Example 4

Fig. 4 shows a schematic structural diagram of a variable biometric offline authentication device 400 provided in Embodiment 4 of the present disclosure, which can be used to implement the variable biometric offline authentication method provided in Embodiment 2 . The following mainly describes the functions of each module of a variable biometric offline authentication device 400 provided by the embodiment of the present disclosure. For other related content, please refer to the description in Embodiment 2.

Referring to FIG. 4 , the variable biometric offline authentication device 400 provided by Embodiment 4 of the present disclosure includes:

The collection module 401 is used to prompt to collect the first biometric information to be verified, and collect the first biometric information to be verified;

An acquisition module 402, configured to acquire a custom collection instruction from the security device held by the user, and send the custom collection instruction to the collection module 401;

The collection module 401 is also used to prompt and collect custom biometric information to be verified according to a custom collection instruction, and collect custom biometric information to be verified;

A feature information acquisition module 403, configured to acquire user feature information obtained by calculating user biometric information from the security device;

The characteristic information calculation module 404 is used to determine the verification algorithm, and use the verification algorithm to calculate the characteristic information to be verified obtained by calculating the first biometric information to be verified and the custom biometric information to be verified;

The comparison module 405 is used to locally compare the feature information to be verified with the first user feature information, and after the comparison is consistent, determine that the authentication is passed;

The deletion module 406 is configured to delete the locally stored first biometric information to be verified and the custom biometric information to be verified after the authentication is passed.

In an optional implementation manner of the present disclosure, the obtaining module 402 is further configured to obtain the identification of the verification algorithm from the security device; the feature information calculation module 404 is also configured to locally determine the verification algorithm corresponding to the identification according to the identification; or The feature information calculation module 404 is further configured to obtain a verification algorithm corresponding to the ID from the background according to the ID.

In an optional implementation manner of the present disclosure, the verification algorithm includes: the obtaining module 402 obtains the verification algorithm from the security device.

In an optional implementation manner of the present disclosure, the deletion module 406 is further configured to delete the locally stored feature information to be verified and the first user feature information.

In an optional implementation manner of the present disclosure, the comparison module 405 is further configured to determine whether the customized biometric information to be verified is preset information, and if it is preset information, perform a preset operation.

Through the off-line authentication method with variable biometric features provided by this embodiment, the authentication device 400 collects the first biometric information to be verified, and customizes the biometric information to be verified, calculates after determining the verification algorithm, and obtains the characteristic information to be verified respectively , obtain the first user feature information from the security device, compare the feature information to be verified locally with the first user feature information, and after the comparison passes, the authentication passes, and delete the locally stored first biometric information to be verified and the user-defined biometric information to be verified. Verify biometric information. Therefore, the authentication device 400 can locally compare the characteristic information obtained from the collected biometric information with the characteristic information stored in the security device, and delete the above information after the comparison is completed, without the need to transfer the collected biometric The information is transmitted to other devices to complete the calculation, and other devices do not need to reserve the user's biometric information, which avoids information leakage and reserved information leakage during the transmission process, protects the security of the user's biometric information, and improves Security of user privacy. Moreover, the authentication device 400 collects user-defined information to be verified, and completes comparison and authentication according to the characteristic information of the information. Since others cannot illegally obtain the biometric identification method selected by the user, the accuracy of the user's authentication through biometric identification is further improved. sex and safety.

Example 5

FIG. 5 shows a schematic structural diagram of a variable biometric offline authentication system 500 provided by Embodiment 5 of the present disclosure, which includes implementing the variable biometric offline authentication provided by Embodiment 3 or 4. device 501 . The following mainly briefly describes a variable biometric offline authentication system 500 provided by the embodiment of the present disclosure. For other related content, please refer to the description in Embodiment 3 or 4.

An offline variable biometric authentication system 500 provided in this embodiment includes: a security device 502 and an offline variable biometric authentication device 501 in any one of Embodiments 3 and 4, wherein, The security device 502 pre-stores user-defined collection instructions, user characteristic information, and identification of verification algorithms.

It can be seen from the above-mentioned technical solution provided by this embodiment that the authentication device 501 can locally compare the feature information obtained from the collected biometric information with the feature information stored in the security device, and delete the The above information does not need to transmit the collected biometric information to other devices to complete the calculation, and other devices do not need to reserve the user’s biometric information, which avoids information leakage and reserved information leakage during the transmission process, and protects users. The security of biometric information improves the security of user privacy. And the authentication device 501 collects user-defined information to be verified, and completes the comparison and authentication according to the characteristic information of the information. Since others cannot illegally obtain the biometric identification method selected by the user, the accuracy of the user's authentication through biometric identification is further improved. sex and safety.

Claims

A variable biometric offline authentication method comprising:

The authentication device prompts to collect the first biometric information to be verified, and collects the first biometric information to be verified;

The authentication device obtains a custom collection instruction from a security device held by the user, prompts to collect custom biometric information to be verified according to the custom collection instruction, and collects the custom biometric information to be verified;

The authentication device obtains, from the security device, the first user characteristic information obtained by calculating the first user biometric information, and obtains the user-defined user characteristic information obtained by calculating the self-defined user biometric information;

The authentication device determines a verification algorithm, uses the verification algorithm to calculate the first to-be-verified characteristic information obtained by calculating the first to-be-verified biometric information, and uses the verification algorithm to perform the self-defined biometric information to be verified Calculated custom feature information to be verified;

The authentication device locally compares the first feature information to be verified with the first user feature information, and compares the self-defined feature information to be verified with the custom user feature information, and when the comparison is consistent After confirming that the authentication is passed;

After passing the authentication, the authentication device deletes the locally stored first biometric information to be verified and the user-defined biometric information to be verified.
An offline variable biometric authentication method comprising:

The authentication device prompts to collect the first biometric information to be verified, and collects the first biometric information to be verified;

The authentication device obtains a custom collection instruction from a security device held by the user, prompts to collect custom biometric information to be verified according to the custom collection instruction, and collects the custom biometric information to be verified;

The authentication device acquires user characteristic information obtained by calculating user biometric information from the security device;

The authentication device determines a verification algorithm, and uses the verification algorithm to calculate the characteristic information to be verified obtained by calculating the first biometric information to be verified and the self-defined biometric information to be verified;

The authentication device locally compares the characteristic information to be verified with the first user characteristic information, and determines that the authentication is passed after the comparison is consistent;

After passing the authentication, the authentication device deletes the locally stored first biometric information to be verified and the user-defined biometric information to be verified.
The method according to claim 1 or 2, further comprising:

The authentication device obtains the identification of the verification algorithm from the security device;

The verification algorithm determined by the authentication device includes:

The authentication device locally determines a verification algorithm corresponding to the identifier according to the identifier; or

The authentication device obtains a verification algorithm corresponding to the identifier from the background according to the identifier.
The method according to claim 1 or 2, wherein the authentication device determining a verification algorithm comprises:

The authentication device acquires the verification algorithm from the security device.
The method according to claim 1, 3 or 4, wherein the verification algorithm comprises: a first verification algorithm and a second verification algorithm;

The authentication device uses the verification algorithm to calculate the first to-be-verified feature information to be verified, and uses the verification algorithm to calculate the self-defined biometric information to be verified. Defining the characteristic information to be verified includes:

The authentication device uses the first verification algorithm to calculate the first to-be-verified characteristic information obtained by calculating the first to-be-verified biometric information, and uses the second verification algorithm to perform self-defined biometric information to be verified Calculated custom feature information to be verified.
The method according to claim 1, further comprising:

The authentication device deletes the locally stored first characteristic information to be verified and the first user characteristic information, as well as the user-defined characteristic information to be verified and the user-defined characteristic information.
The method according to claim 2, further comprising:

The authentication device deletes the locally stored feature information to be verified and the first user feature information.
The method according to claim 1 or 2, further comprising:

The authentication device judges whether the self-defined biometric information to be verified is preset information, and if it is preset information, performs a preset operation.
A variable biometric offline authentication device, comprising:

The collection module is used to prompt to collect the first biometric information to be verified, and collect the first biometric information to be verified;

An acquisition module, configured to acquire a custom collection instruction from a security device held by the user, and send the custom collection instruction to the collection module;

The collection module is also used to prompt and collect custom biometric information to be verified according to the custom collection instruction, and collect the custom biometric information to be verified;

A feature information acquisition module, configured to acquire, from the security device, first user feature information obtained by calculating the first user's biometric identification information, and obtain user-defined user feature information obtained by calculating the user-defined biometric information;

The feature information calculation module is used to determine a verification algorithm, use the verification algorithm to calculate the first to-be-verified feature information obtained by calculating the first to-be-verified biometric information, and use the verification algorithm to calculate the user-defined biometric information to be verified. The custom feature information to be verified obtained by calculating the identification information;

A comparison module, configured to locally compare the first feature information to be verified with the first user feature information, and compare the custom feature information to be verified with the custom user feature information, and compare After matching, it is determined that the authentication is passed;

A deletion module, configured to delete the locally stored first biometric information to be verified and the custom biometric information to be verified after the authentication is passed.
An off-line variable biometric authentication device comprising:

The collection module is used to prompt to collect the first biometric information to be verified, and collect the first biometric information to be verified;

An acquisition module, configured to acquire a custom collection instruction from a security device held by the user, and send the custom collection instruction to the collection module;

The collection module is also used to prompt and collect custom biometric information to be verified according to the custom collection instruction, and collect the custom biometric information to be verified;

A feature information acquisition module, configured to acquire user feature information obtained by calculating user biometric information from the security device;

A characteristic information calculation module, configured to determine a verification algorithm, and use the verification algorithm to calculate the characteristic information to be verified obtained by calculating the first biometric information to be verified and the self-defined biometric information to be verified;

A comparison module, configured to locally compare the feature information to be verified with the first user feature information, and determine that the authentication is passed after the comparison is consistent;

A deletion module, configured to delete the locally stored first biometric information to be verified and the custom biometric information to be verified after the authentication is passed.
Apparatus according to claim 9 or 10, wherein,

The obtaining module is further configured to obtain the identification of the verification algorithm from the security device;

The characteristic information calculation module is further configured to locally determine a verification algorithm corresponding to the identifier according to the identifier; or

The characteristic information calculation module is further configured to obtain a verification algorithm corresponding to the identifier from the background according to the identifier.
The device according to claim 9 or 10, wherein said determining the verification algorithm comprises:

The acquiring module acquires the verification algorithm from the security device.
Apparatus according to claim 9, 11 or 12, wherein said authentication algorithm comprises: a first authentication algorithm and a second authentication algorithm;

The feature information calculation module is used to calculate the first feature information to be verified by using the verification algorithm to calculate the first biometric information to be verified, and use the verification algorithm to calculate the self-defined biometric information to be verified The custom feature information to be verified obtained by calculation includes:

The feature information calculation module is used to use the first verification algorithm to calculate the first to-be-verified feature information obtained by calculating the first biometric information to be verified, and to use the second verification algorithm to calculate the self-identified Define the custom feature information to be verified obtained by calculating the biometric information to be verified.
The apparatus according to claim 9, wherein,

The deletion module is further configured to delete the locally stored first characteristic information to be verified and the first user characteristic information, as well as the user-defined characteristic information to be verified and the user-defined characteristic information.
The apparatus according to claim 10, wherein,

The deletion module is further configured to delete the locally stored feature information to be verified and the first user feature information.
Apparatus according to claim 9 or 10, wherein,

The comparison module is also used to judge whether the self-defined biometric information to be verified is preset information, and if it is preset information, perform a preset operation.
An offline variable biometric authentication system, which includes a security device and the offline variable biometric authentication device according to any one of claims 8-14, wherein,

The security device pre-stores user-defined collection instructions, user characteristic information, and identification of verification algorithms.