METHOD AND DEVICE FOR IDENTITY AUTHENTICATION

• US 20200134153A1
• Filed: 12/23/2019
• Published: 04/30/2020
• Est. Priority Date: 06/07/2016
• Status: Active Grant

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: Liu, Jiayin, WANG, Lei
• Granted Patent: US 11,256,793 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The present disclosure discloses a method and device for identity authentication. One example method includes retrieving stored fingerprint information for a user including a plurality of recorded fingerprints for the user, each recorded fingerprint associated with a different finger of the user; selecting a subset of the recorded fingerprints to be used to authenticate the user; prompting the user to provide fingerprint information corresponding to each finger associated with a recorded fingerprint in the selected subset; in response to prompting the user, receiving user-provided fingerprint information from the user; matching the user-provided fingerprint information against the selected subset of the recorded fingerprints; and determining that an identity authentication of the user succeeds when the user-provided fingerprint information matches the selected subset of the recorded fingerprints.

Claims

1. A computer-implemented method, comprising:

retrieving stored fingerprint information for a user including a plurality of recorded fingerprints for the user, each recorded fingerprint associated with a different finger of the user;

selecting a subset of the recorded fingerprints to be used to authenticate the user;

prompting the user to provide fingerprint information corresponding to each finger associated with a recorded fingerprint in the selected subset;

in response to prompting the user, receiving user-provided fingerprint information from the user;

matching the user-provided fingerprint information against the selected subset of the recorded fingerprints; and

determining that an identity authentication of the user succeeds when the user-provided fingerprint information matches the selected subset of the recorded fingerprints.

2. The method of claim 1, wherein matching the user-provided fingerprint information against the selected subset of the recorded fingerprints comprises matching each fingerprint of user-provided fingerprint information against each fingerprint of the selected subset of the recorded fingerprints for the selected fingers of the user.

3. The method of claim 2, further comprising:

detecting whether user-provided fingerprint information is received within a predetermined time period for each prompt for the fingerprint information; and

when the predetermined time period is exceeded, determining that the identity authentication of the user fails and outputting alarm information indicating a time out occurred during user entry.

4. The method of claim 1, further comprising:

when the user-provided fingerprint information does not match the selected subset of the recorded fingerprints, determining that the identity authentication of the user fails and outputting alarm information indicating that the identity authentication of the user has failed.

5. The method of claim 1, further comprising:

before retrieving the stored fingerprint information, detecting whether the user is currently logging in;

when a determination is made that the user is not currently logging in, prompting the user to log in by using an account of the user;

obtaining login account information of the user that includes login fingerprint information; and

using the login fingerprint information as the user-provided fingerprint information.

6. The method of claim 1, further comprising:

receiving fingerprint information entered by the user and fingerprint identification information corresponding to the fingerprint information;

recording and storing the fingerprint information for use in subsequent authentication of the user;

detecting whether the fingerprint information entered by the user already exists among stored fingerprint information for the user; and

upon determining that that the fingerprint information entered by the user already exists among the stored fingerprint information for the user, suspending receipt of fingerprint information for the user, and outputting alarm information indicating that an attempt to repeat entry of fingerprint information has occurred.

7. The method of claim 1, wherein prompting the user to provide fingerprint information corresponding to each finger associated with a recorded fingerprint in the selected subset includes prompting in a predetermined finger order or in a random order.

8. A non-transitory computer-readable storage medium coupled to one or more computers and configured with instructions executable by the one or more computers to:

retrieve stored fingerprint information for a user including a plurality of recorded fingerprints for the user, each recorded fingerprint associated with a different finger of the user;

select a subset of the recorded fingerprints to be used to authenticate the user;

prompt the user to provide fingerprint information corresponding to each finger associated with a recorded fingerprint in the selected subset;

in response to prompting the user, receive user-provided fingerprint information from the user;

match the user-provided fingerprint information against the selected subset of the recorded fingerprints; and

determine that an identity authentication of the user succeeds when the user-provided fingerprint information matches the selected subset of the recorded fingerprints.

9. The non-transitory computer-readable storage medium of claim 8, wherein matching the user-provided fingerprint information against the selected subset of the recorded fingerprints comprises matching each fingerprint of user-provided fingerprint information against each fingerprint of the selected subset of the recorded fingerprints for the selected fingers of the user.

10. The non-transitory computer-readable storage medium of claim 9, further configured with instructions executable by the one or more computers to:

detect whether user-provided fingerprint information is received within a predetermined time period for each prompt for the fingerprint information; and

when the predetermined time period is exceeded, determine that the identity authentication of the user fails and outputting alarm information indicating a time out occurred during user entry.

11. The non-transitory computer-readable storage medium of claim 8, further configured with instructions executable by the one or more computers to:

when the user-provided fingerprint information does not match the selected subset of the recorded fingerprints, determine that the identity authentication of the user fails and outputting alarm information indicating that the identity authentication of the user has failed.

12. The non-transitory computer-readable storage medium of claim 8, further configured with instructions executable by the one or more computers to:

before retrieving the stored fingerprint information, detect whether the user is currently logging in;

when a determination is made that the user is not currently logging in, prompt the user to log in by using an account of the user;

obtain login account information of the user that includes login fingerprint information; and

use the login fingerprint information as the user-provided fingerprint information.

13. The non-transitory computer-readable storage medium of claim 8, further configured with instructions executable by the one or more computers to:

receive fingerprint information entered by the user and fingerprint identification information corresponding to the fingerprint information;

record and storing the fingerprint information for use in subsequent authentication of the user;

detect whether the fingerprint information entered by the user already exists among stored fingerprint information for the user; and

upon determining that that the fingerprint information entered by the user already exists among the stored fingerprint information for the user, suspend receipt of fingerprint information for the user, and outputting alarm information indicating that an attempt to repeat entry of fingerprint information has occurred.

14. The non-transitory computer-readable storage medium of claim 8, wherein prompting the user to provide fingerprint information corresponding to each finger associated with a recorded fingerprint in the selected subset includes prompting in a predetermined finger order or in a random order.

15. A system, comprising:

one or more computers; and

one or more computer-readable memories coupled to the one or more computers and configured with instructions executable by the one or more computers to;

retrieve stored fingerprint information for a user including a plurality of recorded fingerprints for the user, each recorded fingerprint associated with a different finger of the user;

select a subset of the recorded fingerprints to be used to authenticate the user;

prompt the user to provide fingerprint information corresponding to each finger associated with a recorded fingerprint in the selected subset;

in response to prompting the user, receive user-provided fingerprint information from the user;

match the user-provided fingerprint information against the selected subset of the recorded fingerprints; and

determine that an identity authentication of the user succeeds when the user-provided fingerprint information matches the selected subset of the recorded fingerprints.

16. The system of claim 15, wherein matching the user-provided fingerprint information against the selected subset of the recorded fingerprints comprises matching each fingerprint of user-provided fingerprint information against each fingerprint of the selected subset of the recorded fingerprints for the selected fingers of the user.

17. The system of claim 16, further configured with instructions executable by the one or more computers to:

detect whether user-provided fingerprint information is received within a predetermined time period for each prompt for the fingerprint information; and

when the predetermined time period is exceeded, determine that the identity authentication of the user fails and outputting alarm information indicating a time out occurred during user entry.

18. The system of claim 15, further configured with instructions executable by the one or more computers to:

when the user-provided fingerprint information does not match the selected subset of the recorded fingerprints, determine that the identity authentication of the user fails and outputting alarm information indicating that the identity authentication of the user has failed.

19. The system of claim 15, further configured with instructions executable by the one or more computers to:

before retrieving the stored fingerprint information, detect whether the user is currently logging in;

when a determination is made that the user is not currently logging in, prompt the user to log in by using an account of the user;

obtain login account information of the user that includes login fingerprint information; and

use the login fingerprint information as the user-provided fingerprint information.

20. The system of claim 15, further configured with instructions executable by the one or more computers to:

receive fingerprint information entered by the user and fingerprint identification information corresponding to the fingerprint information;

record and storing the fingerprint information for use in subsequent authentication of the user;

detect whether the fingerprint information entered by the user already exists among stored fingerprint information for the user; and

upon determining that that the fingerprint information entered by the user already exists among the stored fingerprint information for the user, suspend receipt of fingerprint information for the user, and outputting alarm information indicating that an attempt to repeat entry of fingerprint information has occurred.