A biometric-based security verification method and client and server

Abstract

The invention discloses a biometric-based security check method, a client and a server. The client sends an authentication request, and after receiving the authentication request, the server returns an authentication request response message. The client receives user-input data for verification. Verify the fingerprint image, obtain the corresponding biometric template ID, compare it with the biometric template ID in the activation record stored locally, generate an authentication response message including the obtained biometric template ID, and send the authentication response message to the server. The server side receives the authentication response message and compares it with the biometric template ID in the corresponding user record stored locally on the server side. If they match, the verification passes, otherwise an error is reported. The present invention also proposes a client and a server corresponding to the above method. The invention can prevent the transmission of personal biometrics on the network, prevent the risk of leakage, reduce the network flow of network transmission, and have higher security.

Description

technical field [0001] The invention belongs to the technical field of identity authentication, and in particular relates to a biometric-based security verification method, a client and a server in the identity authentication process. Background technique [0002] In the traditional password verification process, a password needs to be entered, and every time the password is entered, there is a risk of leakage, such as a keylogging Trojan horse, physical peeping, etc. Due to the characteristics of strong stability, personal uniqueness, and high algorithm accuracy of fingerprints, many devices have begun to use the fingerprint verification function in recent years. For example, online payment can be realized through fingerprint verification, which can improve user experience and increase payment security. [0003] In the prior art, during the online fingerprint verification process, the client sends the user's fingerprint data (fingerprint image or fingerprint feature data) t...

AI Technical Summary

Problems solved by technology

Because the fingerprint data needs to be transmitted to the server, there is a risk of fingerprint data leakage during the upload process. The fingerprint data is personal privacy data, and the user does not necessarily agree to upload it. At the same time, leakage will cause reputational risks.

Even if the user agrees to upload the fingerprint data, network traffic will be consumed during the fingerprint data upload process, and the server will also need to compare the fingerprint data, which will consume additional computing resources and storage resources

Images