IDENTITY REGISTRATION METHOD AND DEVICE

• US 20200136828A1
• Filed: 12/20/2019
• Published: 04/30/2020
• Est. Priority Date: 03/25/2016
• Status: Active Grant

• Current Assignee: Advanced New Technologies Company Limited (Ant Group Co., Ltd.)
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: MENG, Fei
• Granted Patent: US 11,012,238 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

The present application provides identity registration and authorization methods using biometric feature information of user. In one example method, a terminal device receives biometric feature information of a user that is to be verified in association with a service processing request. The terminal device can then match the received biometric feature information to be verified with a pre-stored biometric feature of the user, where the pre-stored biometric feature of the user is associated with a corresponding identifier. In response to matching the received biometric feature information to be verified to a particular pre-stored biometric feature of the user, a private key store is searched for a private key associated with the identified of the particular pre-stored biometric feature of the user. In response to determining that no private is associated with the identifier, a user identity of the user is registered with a server.

Claims

1. A computer-implemented method, comprising:

receiving, by a terminal device, biometric feature information of a user that is to be verified in association with a service processing request;

matching, by the terminal device, the received biometric feature information to be verified with a particular pre-stored biometric feature of the user, wherein the particular pre-stored biometric feature of the user is stored at the terminal device, and wherein the particular pre-stored biometric feature of the user is associated with a corresponding identifier;

in response to matching the received biometric feature information to be verified to a particular pre-stored biometric feature of the user, searching a private key store for a private key associated with the identifier of the particular pre-stored biometric feature of the user; and

in response to determining that no private key in the private key store is associated with the identifier of the particular pre-stored biometric feature of the user, registering a user identity of the user with a server at which the service processing request is to be sent.

2. The computer-implemented method of claim 1, wherein registering the user identity of the user with the server at which the service processing request is to be sent comprises:

generating a private key and a public key corresponding to the identifier of the particular pre-stored biometric feature of the user;

storing a mapping relationship between the identifier and the generated private key in the terminal device; and

transmitting a mapping relationship between the identifier and the generated public key to the server for storage.

3. The computer-implemented method of claim 2, wherein, after registering the user identity with the server, the method further comprises:

sending the service processing request and the identifier of the particular pre-stored biometric feature of the user to the server, wherein the terminal device signs the service processing request with a digital signature using the generated private key associated with the identifier of the particular pre-stored biometric feature of the user, and wherein the server performs the service processing associated with the service processing request after verifying the digital signature of the terminal device using the generated public key corresponding to the identifier of the particular pre-stored biometric feature of the user.

4. The computer-implemented method of claim 1, wherein, before registering the user identity with the server at which the service processing request is to be sent, the method further comprises:

prompting the user, at the terminal device, for a password to be entered by the user, the password associated with the service request;

in response to receiving the password, verifying that the password is valid; and

allowing registration of the user identity with the server at which the service processing request is to be sent.

5. The computer-implemented method of claim 1, the method further comprising:

in response to determining that a private key in the private key store is associated with the identifier of the particular pre-stored biometric feature of the user, determining that the user identity of the user is already registered at the server, wherein the determined private key corresponds to a public key stored at the server and associated with the identifier of the particular pre-stored biometric feature of the user.

6. The computer-implemented method of claim 5, the method further comprising:

sending the service processing request and the identifier of the particular pre-stored biometric feature of the user to the server, wherein the terminal device signs the service processing request with a digital signature using the determined private key associated with the identifier of the particular pre-stored biometric feature of the user, and wherein the server performs the service processing associated with the service processing request after verifying the digital signature of the terminal device using the public key corresponding to the identifier of the particular pre-stored biometric feature of the user.

7. The computer-implemented method of claim 1, wherein the service processing request comprises a payment request.

8. The computer-implemented method of claim 1, wherein the received biometric feature information of the user that is to be verified comprises a fingerprint.

9. The computer-implemented method of claim 1, wherein the pre-stored biometric feature of the user is one of a plurality of pre-stored biometric features of the user stored at the terminal device, wherein the plurality of pre-stored biometric features of the user include a plurality of different biometric feature information of the user, including at least one of a stored fingerprint, an iris pattern or visualization, a hand geometry, a retina scan, or a voice pattern.

10. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

receiving, by a terminal device, biometric feature information of a user that is to be verified in association with a service processing request;

matching, by the terminal device, the received biometric feature information to be verified with a particular pre-stored biometric feature of the user, wherein the particular pre-stored biometric feature of the user is stored at the terminal device, and wherein the particular pre-stored biometric feature of the user is associated with a corresponding identifier;

in response to matching the received biometric feature information to be verified to a particular pre-stored biometric feature of the user, searching a private key store for a private key associated with the identifier of the particular pre-stored biometric feature of the user; and

in response to determining that no private key in the private key store is associated with the identifier of the particular pre-stored biometric feature of the user, registering a user identity of the user with a server at which the service processing request is to be sent.

11. The non-transitory, computer-readable medium of claim 10, wherein registering the user identity of the user with the server at which the service processing request is to be sent comprises:

generating a private key and a public key corresponding to the identifier of the particular pre-stored biometric feature of the user;

storing a mapping relationship between the identifier and the generated private key in the terminal device; and

transmitting a mapping relationship between the identifier and the generated public key to the server for storage.

12. The non-transitory, computer-readable medium of claim 11, wherein, after registering the user identity with the server, the operations further comprising:

sending the service processing request and the identifier of the particular pre-stored biometric feature of the user to the server, wherein the terminal device signs the service processing request with a digital signature using the generated private key associated with the identifier of the particular pre-stored biometric feature of the user, and wherein the server performs the service processing associated with the service processing request after verifying the digital signature of the terminal device using the generated public key corresponding to the identifier of the particular pre-stored biometric feature of the user.

13. The non-transitory, computer-readable medium of claim 10, wherein, before registering the user identity with the server at which the service processing request is to be sent, the operations further comprising:

prompting the user, at the terminal device, for a password to be entered by the user, the password associated with the service request;

in response to receiving the password, verifying that the password is valid; and

allowing registration of the user identity with the server at which the service processing request is to be sent.

14. The non-transitory, computer-readable medium of claim 10, the operations further comprising:

in response to determining that a private key in the private key store is associated with the identifier of the particular pre-stored biometric feature of the user, determining that the user identity of the user is already registered at the server, wherein the determined private key corresponds to a public key stored at the server and associated with the identifier of the particular pre-stored biometric feature of the user.

15. The non-transitory, computer-readable medium of claim 14, the operations further comprising:

sending the service processing request and the identifier of the particular pre-stored biometric feature of the user to the server, wherein the terminal device signs the service processing request with a digital signature using the determined private key associated with the identifier of the particular pre-stored biometric feature of the user, and wherein the server performs the service processing associated with the service processing request after verifying the digital signature of the terminal device using the public key corresponding to the identifier of the particular pre-stored biometric feature of the user.

16. The non-transitory, computer-readable medium of claim 10, wherein the service processing request comprises a payment request.

17. The non-transitory, computer-readable medium of claim 10, wherein the received biometric feature information of the user that is to be verified comprises a fingerprint.

18. The non-transitory, computer-readable medium of claim 10, wherein the pre-stored biometric feature of the user is one of a plurality of pre-stored biometric features of the user stored at the terminal device, wherein the plurality of pre-stored biometric features of the user include a plurality of different biometric feature information of the user, including at least one of a stored fingerprint, an iris pattern or visualization, a hand geometry, a retina scan, or a voice pattern.

19. A computer-implemented system, comprising:

one or more computers; and

one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising;

receiving, by a terminal device, biometric feature information of a user that is to be verified in association with a service processing request;

matching, by the terminal device, the received biometric feature information to be verified with a particular pre-stored biometric feature of the user, wherein the particular pre-stored biometric feature of the user is stored at the terminal device, and wherein the particular pre-stored biometric feature of the user is associated with a corresponding identifier;

in response to matching the received biometric feature information to be verified to a particular pre-stored biometric feature of the user, searching a private key store for a private key associated with the identifier of the particular pre-stored biometric feature of the user; and

in response to determining that no private key in the private key store is associated with the identifier of the particular pre-stored biometric feature of the user, registering a user identity of the user with a server at which the service processing request is to be sent.

20. The computer-implemented system of claim 19, wherein registering the user identity of the user with the server at which the service processing request is to be sent comprises:

generating a private key and a public key corresponding to the identifier of the particular pre-stored biometric feature of the user;

storing a mapping relationship between the identifier and the generated private key in the terminal device; and

transmitting a mapping relationship between the identifier and the generated public key to the server for storage.