CN103646202A - Fingerprint information coding encryption and application method - Google Patents

Abstract

An encoding encryption and application method of fingerprint information relates to an information security system, in particular, the combination of the fixed biological feature information of human fingerprints and the password information constructed by ten human fingerprints in decimal code can not only exert the relatively high security of human biological feature identification Security, reliability, convenience, and the dynamic characteristics of the password can be used to avoid security problems caused by the theft of biometric information. At the same time, because the complexity of the password can be reduced, it can also reduce the burden of the authenticator’s password memory, which is helpful. It is used to improve information security and promote the further promotion and application of identity verification technology.

Description

Encoding and Encryption of Fingerprint Information and Its Application Method

technical field

The present invention relates to an encoding and encryption method of fingerprint information and an application method, in particular, the fingerprints of 10 different fingers of a person are encoded in decimal to construct a password, so as to realize the combination of fixed biological characteristics of fingerprints and variable passwords and improve the quality based on biological characteristics. Security of feature identification or authentication.

Background technique

Entering the 21st century, the progress of science and technology has made the society quickly enter the information age. The rapid development of information technology has made people's information exchange more convenient and faster, and the work efficiency has been greatly improved, reshaping our society from all aspects. . However, the ensuing information security issues such as information theft, fraudulent use or tampering have also brought severe challenges to the development of our society. According to the estimates of the US Federal Trade Commission, in recent years, the personal information of about 10 million Americans has been stolen or misused every year, causing losses of US$5 billion to consumers and US$48 billion to commercial organizations. The implementation of personal identity verification is an important way to ensure information security. How to quickly and accurately identify personal identities to ensure information security and maintain social order has become an important issue to be solved in modern society.

There are two main traditional identification methods: knowledge-based methods and token-based methods. Knowledge-based methods determine personal identity by checking "what you know", that is, the person to be verified uses the knowledge he has mastered, such as passwords, personal identification numbers (PINs) or passwords, to prove his identity. The token-based method determines personal identity by checking "what do you have", that is, the person to be verified uses tokens such as certificates, seals or keys to prove his identity. Obviously, the above two methods have obvious defects. "Knowledge" has problems such as being easily forgotten or confused, and being stolen or cracked by others. Therefore, the defects of the traditional identification method make it less and less suitable for the development of science and technology and the progress of society, so people turn their attention to the biometric technology with non-reproducible characteristics of human biological characteristics. The so-called biometrics, that is, according to the characteristics of the human body to determine personal identity. Compared with the "knowledge" and "token" used in traditional technology, the human body characteristics used in biometric technology have outstanding advantages such as not afraid of forgetting, not being lost, difficult to forge, irreplaceable, and no need to carry additionally. Therefore, biometric identification is not only safe and reliable, but also easy to operate, which has significant advantages.

The characteristics of the human body for biometric identification can be divided into two categories: physiological characteristics and behavioral characteristics. Physiological characteristics mainly include: fingerprint, palm shape, iris, retina, face, facial thermal image, etc.; behavioral characteristics mainly include: signature, voice, gait, keystroke, etc. Research and experiments have shown that the above-mentioned characteristics of the human body meet the requirements of the four basic properties of universality, uniqueness, stability and collectability to varying degrees. Based on these characteristics, people have developed a variety of biometric technologies, among which are widely used or deeply researched: fingerprint recognition, palm recognition, iris recognition, retina recognition, face recognition, facial thermal image recognition, signature recognition, voice identification etc. Among various biometric technologies, fingerprint recognition and palm shape recognition are the most widely used, among which fingerprint recognition occupies an absolute advantage. The main biometric products in the domestic and foreign markets are basically based on fingerprint recognition technology.

In fact, fingerprints are an ideal biometric feature. Fingerprints are texture images distributed on the skin of human fingers, consisting of a variety of ridges. Studies have shown that the fingerprints of the fetus are fully formed after about seven months of development in the mother's body, and will not change throughout life, unless accidental physical damage occurs to the fingers. Generally, biological tissues, including observable features on the body surface, are determined and influenced by both genes and the environment. Fingerprints are one of the observable features on the body surface. For fingerprints, genes determine its overall pattern characteristics. When the skin cells on the fingertips begin to differentiate, the overall characteristics of fingerprints begin to form gradually. During the process of cell differentiation, the position of the fetus in the uterus will constantly change, and the amniotic fluid around it will also have different flow conditions. In this way, the microenvironment of different fingers is different. The fine structure of fingerprints is determined by the microenvironment in which they live, and slight changes in the environment will make the differentiation process of cells very different. Humans are so rich in genes and the environments in which fingerprints are formed are so diverse that no two fingerprints are the same. Even identical twins with the same DNA (which is currently indistinguishable) will not have the same fingerprints, and their fingerprints can be distinguished based on detailed features.

In addition, among various biometric systems, the fingerprint recognition system has the most outstanding comprehensive performance in terms of security, ease of use and cost, so it has been widely used in the field of criminal investigation and justice as soon as it appeared. With the advancement of computer technology, personal computers and other microprocessors such as DSP, ARM, etc. have sufficient ability to independently complete fingerprint recognition operations. At the same time, with the advancement of sensor technology, the volume, power consumption and price of fingerprint collection equipment have been greatly reduced. This enables the automatic fingerprint identification system to develop into the civilian field, and can be widely used in various needs such as information access, electronic transactions, access control, attendance management, and card management in government, banks, medical care, social security, schools, and companies. In case of personal authentication. The wide application of automatic fingerprint identification system will also help to reduce fraud, curb crime, avoid unnecessary social economy or personal property loss, and also help people to complete identity authentication conveniently and quickly, and improve work efficiency. Judging from the market situation, the market size of biometric technology is growing at an extremely fast rate every year, and the proportion of fingerprint recognition has always maintained an absolute advantage. According to the International Biometrics Group (IBG) estimates, fingerprint recognition in 2006 accounted for more than 40% of the entire biometric technology market. It can be seen that the automatic fingerprint identification system has broad application and market prospects, and the social and economic benefits it can bring cannot be ignored.

However, in the actual application process, the security problems caused by the theft of fixed biometrics limit the large-scale promotion and application of biometric technology. For example, on the one hand, there are frequent reports on the Internet of committing crimes by stealing other people’s fingerprints and face information through Trojan horse viruses, and there are even vicious cases where prison inmates kill prison guards and then use the prison guard’s fingerprints to open the prison gate and escape. The occurrence of these problems makes people question the reliability and security of biometric identification technology. Therefore, there is an urgent need to develop new methods and systems that can effectively overcome the problems in biometric identification technology to better promote the development of social economy and the improvement of people's living standards.

For this reason, this application proposes for the first time in the world that the fingerprints of 10 different fingers of a person are coded in decimal to construct a password, so as to realize the combination of fixed biometrics and variable passwords to improve the security of identification or verification based on biometrics In order to contribute to the further development of information security and social civilization.

Contents of the invention

Technical problem: The object of the present invention is to provide a method for encoding and encrypting fingerprint information and its application. The fingerprints of 10 different fingers of a person are encoded in decimal to construct a password, so as to realize the combination of fixed biometric features and variable passwords. Take advantage of the convenience and effectiveness of biometric information in identity verification and the dynamic advantages of encoding and encryption to ensure the safety, convenience and reliability of identity verification.

Technical solution: This invention is the first in the world to encode the fingerprints of 10 different fingers in decimal to construct a password, so as to realize the combination of fixed fingerprint biometrics and variable passwords and combine fixed fingerprint biometric information with variable The password information constructed by different fingerprint codes is combined for identity verification, so as to give full play to the advantages of biometric information recognition and coded information recognition, so as to promote the further development and application of identity verification technology.

In the encoding and encryption method of fingerprint information of the present invention, firstly, the arrangement sequence of ten fingers of a person is set and encoded according to 0-9, and then the finger is stretched to obtain the password fragment based on the fingerprint code. Repeating the finger stretching process can construct the The decimal cipher constructed from the cipher fragments formed by each extension.

The finger stretching refers to stretching out the selected finger and collecting the fingerprint image of the stretching finger through the fingerprint collection device to obtain relevant fingerprint information, coded information and further extracting code fragments based on the coded information; Afterwards, extend the selected finger for another stretch and collect the stretched fingerprint image through the fingerprint collection device to obtain relevant fingerprint information, coded information, and further extract password fragments based on the coded information.

The fingerprint image is obtained by a fingerprint acquisition device including an imaging device, a capacitive sensor, an inductive sensor, and an ultrasonic sensor.

The fingerprint image obtains fingerprint information that can be used for information comparison through feature extraction and template extraction;

An application method of fingerprint information in the present invention is as follows: the password is used in an identity verification system; The fingerprint information based on the fingerprint image and the information extraction system that further obtains the fingerprint information through feature extraction and template extraction; the server side includes an application server and a database, and the database stores the fingerprints of ten fingers of the authenticator that can be compared for information Information, sorting and encoding information and passwords of ten fingerprints, and the application server is responsible for connecting the client and the database and performing calculation services. The application server and the client realize the user login and identity verification of the authenticator through ciphertext communication; The operation service function of the application server means that the operation server searches and compares the fingerprint information obtained by finger extension with the fingerprint information in the database to preliminarily determine the authenticator. Fingerprint coded information and further combined with more than one finger stretched fingerprint information and coded information to extract the password fragments based on the coded information The authenticator enters the authentication password, and then the application server combines the identity verification password entered by the authenticator with the database The identity verification password is searched for information comparison to determine the identity of the authenticator; when the client cannot perform feature extraction and template extraction of the acquired fingerprint image, the application server on the server side undertakes feature extraction and template extraction of the acquired fingerprint image.

The identity verification process of the identity verification system includes that after the authenticator submits an identity verification request to the application server through the client, the identity verification system starts, and the application server sends a request for obtaining verification information to the client authenticator, and then the identity verifier passes the client information. The extraction system sequentially extracts the fingerprint information obtained by more than one finger stretching and transmits it to the application server. The application server compares the fingerprint information with the fingerprint information in the database to initially determine the identity of the authenticator. After success, the application server calls from the database. The coded information of ten fingerprints of the authenticator is further combined with the fingerprint information and coded information of more than one finger extension to extract the coded information. The authenticator enters the authentication password, and then the application server enters the password of the authenticator. The authentication password in the database is compared with the authentication password in the database to determine the identity of the authenticator. When the information is compared and confirmed to be consistent, the application server will report back to the client that the authentication of the authenticator is successful, and when the information comparison is continuous After three failures, the application server will report the authentication failure of the client authenticator.

After the identity verification of the authenticator is successful, the password is changed from the client to the application server; the password can be set multiple for the same identity authenticator, including identity verification password, alarm password, backup password; the identity The verification password is used for identity verification; the alarm password is used for identity verification when the identity verifier is threatened by others, and at this time the application server can terminate the identity verification and contact the police for assistance by notifying the system failure; the backup password is used for Prevent the authenticator from being able to retrieve or reset the authentication password when the authenticator forgets the authentication password.

The database of the identity verification system server collects the fingerprint information of ten fingers, the coded information of the ten finger prints and the password set by the identity verifier when the identity of the identity verifier is determined.

The information comparison performed by the identity verification system refers to the feature extraction and template extraction of the collected fingerprint images and the fingerprint information in the database to conduct information verification through searching to determine the information comparison results, and call its The fingerprint code information of the set ten fingers is combined with the fingerprint information and code information of the authenticator who stretched more than one finger to extract the password fragments based on the code information. The authenticator enters the authentication password and authenticates with the database again. The user's identity verification password is searched to determine the information comparison result.

The client of the identity verification system communicates with the application server through cipher text; the cipher text is realized through an encryption algorithm, and the encryption algorithm includes a symmetric algorithm and an asymmetric algorithm;

The client and the server can be combined together;

Beneficial effects: There are still many problems in the security, accuracy, convenience, quickness and cheapness of identity verification requirements in the ID card and password technology of traditional identity verification and the existing human body biometric identification technology. The combination of fixed biometric information and password information constructed by human fingerprint coding can not only give full play to the relatively high security, reliability, and convenience of human biometric identification, but also can take advantage of the dynamic characteristics of passwords to reduce or even avoid damage caused by theft of biometric information. At the same time, because the complexity of the password can be reduced, it can also reduce the burden of the authenticator's password memory, which helps to improve information security and promote the further expansion of the application field of identity verification.

Description of drawings

Fig. 1 is the structure of the authentication system of human fingerprint information encoding and encryption combination.

Figure 2 is the identity verification process of the human fingerprint information encoding and encryption combination identity verification system.

Detailed ways

The present invention will be further described below in conjunction with embodiment.

Embodiment one:

User Zhang San first sets up an account in the bank and submits the fingerprint information of 10 fingers and the 0-9 sorting and coding method of his choice from left thumb to left little finger to right little finger to right thumb and 23,789,09 three times The identity verification password formed by finger extension code, the alarm password formed by 123, 123 finger extension twice and the backup password formed by 08, 08, 08, 08, 08, 08 six finger extensions are included in the database of the bank server. Then Zhang San needs to pay for online shopping through the client installed on the mobile phone. After logging into the bank account, he first captures the fingerprint images of three finger extensions through the camera of the mobile phone and sends the ciphertext obtained through the symmetric encryption algorithm to the bank server. The bank server stretches his fingers three times. After feature extraction and template extraction, the fingerprint image of the fingerprint image obtained the fingerprint information of its three finger extensions. The bank server compares these fingerprint information with the fingerprint information in the database to preliminarily determine that Zhang San is Zhang San. After success, the bank server calls In the database, Zhang San pre-sets the coding information of ten fingerprints combined with the fingerprint information of his three finger extensions to determine that the identity verification password entered by Zhang San is 23,789,09, and the bank server combines the identity verification password with the one in the database The identity verification passwords are compared, and after the comparison and matching, the bank server notifies Zhang San that the identity verification is successful through cipher text, and Zhang San can enter his account to realize online payment.

If Zhang San feels that there is a problem with his personal information including the set password information, he can modify it through successful identity verification.

If the fingerprint information of Zhang San's 10 fingers is stolen by a hacker through a network Trojan horse, and when he tries to log in to Zhang San's bank account, since he can only provide fixed information and cannot provide password information constructed by fingerprint encoding, his theft will not be possible. success. When the hacker fails to log in, the system can record the relevant image of the registrant for later use in solving the case, and at the same time, the system can notify Zhang San himself through a short message to avoid risks.

If Zhang San is hijacked, then Zhang San can use the fingerprint information obtained by stretching his fingers twice and the alarm password formed to call the police through the bank account identity verification system, such as nearby 110, and the system will prompt system failure to protect Zhang San .

Embodiment two:

After setting up the access control system network in a prison system, first collect the fingerprint information of the 10 fingers submitted by the prison guards and the sorting and coding method of 0 to 9 from the left little finger to the left thumb to the right little finger to the right thumb selected by oneself, and Its selected 78, 23, 56789 identity verification passwords, 5678, 123 two finger extension alarm passwords are included in the database of the access control system server. Prison guard A usually goes to work by using the client terminal with fingerprint capacitive sensors installed on each prison door to use the fingerprint information selected by him for three times and the identity verification password formed by it to perform identity verification through the ciphertext obtained by the asymmetric encryption algorithm. When entering and exiting the prison access control system, if the prison guard is threatened by criminals, an alarm will be prompted through the fingerprint information of two fingers and the alarm password formed to inform other prison guards to provide support, while the access control system will prompt the system to fail to protect the prison guard.

Embodiment three:

Li Si installs an authentication system with an ultrasonic fingerprint sensor on the safe so that the safe can only be opened after successful authentication. Then Li Si submitted the fingerprint information of his 10 fingers and the 0-9 sorting and coding method he selected from the left thumb to the left little finger to the right little finger to the right thumb and the 23, 56, 79 identity verification formed by three finger extensions Password, the 678 alarm password formed by one finger stretching and the 12, 58, 89 backup passwords formed by three finger stretching are recorded in the database of the safe server. At this point the client and server are merged together. When Li Si needs to open the safe behind, he can log in and verify his identity through the fingerprint information of his selected finger and the password information formed therein.

When Li Si forgot his identity verification password, he could log in with the fingerprint of the selected finger and the backup password formed by it and retrieve or reset the identity verification password. When Li Si was coerced to open the safe, he could log in through the fingerprint information of his selected finger and the alarm password formed. At that time, the identity verification system contacted the police to call the police, and at the same time reminded that the safe had a mechanical failure to protect Li Si.

Embodiment four

Wang Wu installs an identity verification system on the security door of his residence and enters the fingerprint information of his family's ten fingers in the system database and the 0-9 sorting and coding method he selected from left thumb to left little finger to right little finger to right thumb And the identity authentication password that the selected extensor fingerprint coding constitutes, the alarm password. Later, his family can enter and exit the security door through the identity verification system, which is safe and convenient.

Embodiment five

User Zhang San first sets up an account in the bank and submits the fingerprint information of 10 fingers and the 0-9 sorting and coding method of his choice from left thumb to left little finger to right little finger to right thumb, and is formed by 789 finger extension codes The identity verification password, 123, 123 the alarm password formed by stretching fingers twice, and the backup password formed by stretching fingers six times at 08, 08, 08, 08, 08 are included in the database of the bank server. Then Zhang San needs to pay for online shopping through the client installed on the mobile phone. After logging into the bank account, he first captures an image of the extended fingerprint through the camera of the mobile phone, and uses the image processing software loaded in the mobile phone to log in to the account to obtain the extended fingerprint through feature extraction and template extraction. The fingerprint information of the finger, and send the ciphertext obtained through the asymmetric encryption algorithm to the bank server, and the bank server will compare the fingerprint information with the fingerprint information in the database to preliminarily determine Zhang San. After the success, the bank server Call Zhang San’s pre-set ten fingerprint encoding information in the database and combine the fingerprint information of his first finger extension to determine that the identity verification password entered by Zhang San is 789, and the bank server compares the identity verification password with the identity verification password in the database After the comparison, the bank server notifies Zhang San through ciphertext that the identity verification is successful, and Zhang San can enter his account to realize online payment.

Claims (9)

1. the coding encrypting method of a finger print information, it is characterized in that first setting putting in order and encoding according to 0-9 of ten fingers of people, then stretch and refer to take obtain finger-print codes as basic password segment, repeat to stretch finger process and can build the decimal system password of being stretched the password segment structure of finger-type one-tenth by each time.

2. the coding encrypting method of a kind of finger print information according to claim 1, stretches described in it is characterized in that and refers to refer to and stretch out selected finger and stretched and referred to that fingerprint image is to obtain relevant finger print information, coded message and further to extract the password segment based on coded message by the collection of fingerprint collecting equipment; And repeat to stretch, refer to refer to after once stretching and having referred to, by once stretching in addition, refer to that selected finger stretches out and stretch and refer to that fingerprint image is to obtain relevant finger print information, coded message the further password segment of extraction based on coded message by the collection of fingerprint collecting equipment.

3. the coding encrypting method of a kind of finger print information according to claim 1, is characterized in that described fingerprint image is obtained equipment at interior fingerprint and obtained by picture pick-up device, capacitive transducer, inductance sensor, ultrasonic sensor.

4. the coding encrypting method of a kind of finger print information according to claim 1, is characterized in that described fingerprint image obtains the finger print information that can compare for information by feature extraction and template extraction.

5. an application process for a kind of finger print information as claimed in claim 1, is characterized in that described password is for authentication system, described authentication system comprises client and server, and client is except allowing authentication person also have logging in can to obtain the finger print information of authentication person based on fingerprint image and further obtain the information extracting system of finger print information by feature extraction and template extraction, server end comprises application server and database, the finger print information that has ten fingers that can carry out information comparison of authentication person in database, the sequence of ten finger prints and coded message and password, application server is born the function that connects client and database and carry out computing service, and application server and client realize by ciphertext communication that authentication person user logs in, authentication, the computing service function of application server refers to that calculation server refers to that by stretching the finger print information and the finger print information in database that obtain pass through search, information comparison is with the verifier that tentatively determines one's identity, after success, application server calls ten finger print coded messages of authentication person and once stretches the finger print information of finger and coded message and extract the authentication person that the password segment based on coded message is combined to form and input authentication password further combined with surpassing from database, subsequently application server by the authentication password of authentication person input and the authentication password in database by the search information of the carrying out verifier's identity of comparing to determine one's identity, when client can not be carried out the feature extraction of obtained fingerprint image and template extraction, the application server of server end is born feature extraction and the template extraction of obtained fingerprint image.

6. the application process of a kind of finger print information according to claim 5, the authentication flow process that it is characterized in that authentication system comprises that authentication person proposes after authentication request to application server by client, authentication system starts, application server sends and obtains authorization information requirement to client identity verifier, then authentication person extracts successively to surpass once to stretch by client-side information extraction system and refers to the finger print information obtaining and be passed to application server, application server compares by search the verifier's identity that tentatively determines one's identity by the finger print information in finger print information and database, after success application server from database, call authentication person ten finger prints coded message and further combined with surpassing, once stretch the finger print information of finger and coded message and extract the authentication person that the password segment based on coded message is combined to form and input authentication password, subsequently application server by the authentication password of authentication person input and the authentication password in database by the search information of the carrying out verifier's identity of comparing to determine one's identity, when information comparison is confirmed to coincide, application server feedback client identity verifier authentication success, when information compare continuous three times when failed by application server feedback client identity verifier authentication failure.

7. the application process of a kind of finger print information according to claim 5, is characterized in that described password, after authentication person's authentication success, changes from client and application server contacts; Described password can arrange a plurality of to same authentication person, comprise authentication password, alarm password, backup password; Described authentication password is for authentication; Authentication when described alarm password is subject to other people and coerces for authentication person, now application server can stop authentication by apprizing system fault and contact the police seeking to assist; Described backup password is used for preventing when authentication person from forgetting authentication password again giving or to reset authentication password for change.

8. the application process of a kind of finger print information according to claim 5, it is characterized in that, the database that it is characterized in that described authentication system server is collected the finger print information that comprises ten fingers in verifier's identity situation that determines one's identity, the password that the coded message of ten finger prints and authentication person set.

9. the application process of a kind of finger print information according to claim 5, it is characterized in that information comparison that described authentication system carries out refer to by the fingerprint image of collection carry out after feature extraction and template extraction with database in fingerprint information exchange cross search and carry out information verification with discriminative information comparison result, verify ten fingers that call its setting after the verifier that tentatively determines one's identity finger-print codes information and in conjunction with once stretch surpassing of authentication person the finger print information of finger and coded message extract authentication person that the password segment based on coded message is combined to form input authentication password and again with database in authentication person's authentication password by search with discriminative information comparison result.

Images