Authentication method and apparatus thereof

• US 10,216,915 B2
• Filed: 07/20/2016
• Issued: 02/26/2019
• Est. Priority Date: 11/17/2014
• Status: Active Grant

• Current Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Inventors: Cui, Ziyi, Shen, Weijie, Luo, Yi, Huang, Yuhan, Zeng, Dekang, Zhao, Siqi, Qin, Jingyang
• Primary Examiner(s): Rahman, Shawnchoy
• Assistant Examiner(s): Lane, Gregory A
• Application Number:
  US15/215,299
• Publication Number:
  US 20160328549A1
• Time in Patent Office: 951 Days
• Field of Search: 726 7
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

A method and an authentication apparatus are provided by the embodiments of the present disclosure. In the embodiments of the present disclosure, data to be processed is obtained, a character sequence is generated based on the data, physiological feature information sequentially inputted by a user is received to obtain a feature information sequence and it is determined whether every piece of physiological feature information in the feature information sequence matches with the corresponding character in the character sequence.

Claims

1. An authentication method, comprising:

obtaining, by a processor, data received from a user to be processed;

generating, by the processor, a character sequence based on the received data, wherein each character in the character sequence corresponds to a specific physiological feature information of the user, and a location of each character in the generated character sequence corresponds to a specific order in the generated character sequence on how the specific physiological feature information of the user are to be received as prompted sequential inputs;

receiving by the processor, the specific physiological feature information sequentially inputted by the user as prompted response to the generated character sequence from the priorly received data; and

determining, by the processor, whether every piece of the specific physiological feature information according to the input sequence matches with each and every of the corresponding characters according to the specific order in the generated character sequence, such that unauthorized authentication due to misuse of biometric data is prevented.

2. The method according to claim 1, wherein the determining, by the processor, whether every piece of the specific physiological feature information according to the input sequence matches with each and every of the corresponding characters according to the specific order in the generated character sequence, comprises:

according to the order of appearance of the specific physiological feature information in the input sequence and the order of appearance of each and every of the corresponding characters according to the specific order in the generated character sequence, determining whether every pair of the specific physiological feature information and character matches in a same order.

3. The method according to claim 1, further comprising:

obtaining a user identifier of the user; and

determining whether the obtained user identifier matches with a preset user identifier.

4. The method according to claim 1, further comprising:

building a physiological feature information database, wherein the physiological feature information database is configured to store a correspondence between a plurality of characters and a plurality of pieces of physiological feature information, and the plurality of characters comprise the characters in the generated character sequence, and the plurality of pieces of physiological feature information comprise the specific physiological feature information in the obtained feature information sequence,

wherein the determining, by the processor, whether every piece of the specific physiological feature information according to the input sequence matches with the corresponding character in the generated character sequence comprises;

searching the physiological feature information database, and determining whether every piece of the specific physiological feature information in the input sequence matches with the corresponding character in the generated character sequence according to the correspondence.

5. The method according to claim 4, wherein the building a physiological feature information database comprises:

obtaining the plurality of pieces of physiological feature information from the user;

receiving a correspondence establishing request of the user, wherein the correspondence establishing request instructs the correspondence between the plurality of characters and the plurality of pieces of physiological feature information;

establishing the correspondence according to the correspondence establishing request; and

storing the correspondence in the physiological feature information database.

6. The method according to claim 4, wherein the building a physiological feature information database comprises:

displaying the plurality of characters;

receiving the plurality of pieces of physiological feature information sequentially inputted by a user according to the order of the plurality of characters;

establishing a correspondence between the plurality of characters and the plurality of pieces of physiological feature information; and

storing the correspondence in the physiological feature information database.

7. The method according to claim 1, wherein if it is determined that not every piece of the specific physiological feature information in the input sequence matches with the corresponding character in the generated character sequence, it is determined that authentication fails,

and the method further comprises:

determining whether a number of authentication failures exceeds a predetermined threshold, if not, receiving, again, physiological feature information sequentially inputted by the user.

8. The method according to claim 1, wherein the characters in the generated character sequence comprise a digit and a decimal point.

9. The method according to claim 1, wherein the receiving, by the processor, the specific physiological feature information sequentially inputted by a user, to obtain a feature information sequence comprises:

displaying the generated character sequence; and

receiving the specific physiological feature information sequentially inputted by the user according to the order of the characters in the generated character sequence, to obtain the feature information sequence.

10. The method according to claim 1, wherein,

the specific physiological feature information comprises at least one of:

fingerprint, iris, voiceprint and palmprint.

11. An authentication apparatus, comprising:

a memory; and

one or more processors,

wherein program instructions are stored in the memory, and the apparatus is configured to perform the following operations when the program instructions are executed by the one or processors;

obtaining data received from a user to be processed;

generating a character sequence based on the received data, wherein each character in the character sequence corresponds to a specific physiological feature information of the user, and a location of each character in the generated character sequence corresponds to a specific order in the generated character sequence on how the specific physiological feature information of the user are to be received as prompted sequential inputs;

receiving the specific physiological feature information sequentially inputted by the user as prompted response to the generated character sequence from the priorly received data; and

determining whether every piece of the specific physiological feature information according to the input sequence matches with each and every of the corresponding characters according to the specific order in the generated character sequence, such that unauthorized authentication due to misuse of biometric data is prevented.

12. The authentication apparatus according to claim 11, wherein the determining whether every piece of the specific physiological feature information according to the input sequence matches with each and every of the corresponding characters according to the specific order in the generated character sequence, comprises:

according to the order of appearance of the specific physiological feature information in the input sequence and the order of appearance of each and every of the corresponding characters according to the specific order in the generated character sequence, determining whether every pair of the specific physiological feature information and character matches in a same order.

13. The authentication apparatus according to claim 11, wherein the operations further comprise:

obtaining a user identifier of the user; and

determining whether the obtained user identifier matches with a preset user identifier.

14. The authentication apparatus according to claim 11, wherein the operations further comprise:

building a physiological feature information database, wherein the physiological feature information database is configured to store a correspondence between a plurality of characters and a plurality of pieces of physiological feature information, and the plurality of characters comprise the characters in the generated character sequence, and the plurality of pieces of physiological feature information comprise the specific physiological feature information in the obtained feature information sequence,

wherein the determining, by the processor, whether every piece of the specific physiological feature information according to the input sequence matches with the corresponding character in the generated character sequence comprises;

searching the physiological feature information database, and determining whether every piece of the specific physiological feature information in the input sequence matches with the corresponding character in the generated character sequence according to the correspondence.

15. The authentication apparatus according to claim 14, wherein the building a physiological feature information database comprises:

obtaining the plurality of pieces of physiological feature information from the user;

receiving a correspondence establishing request of the user, wherein the correspondence establishing request instructs the correspondence between the plurality of characters and the plurality of pieces of physiological feature information;

establishing the correspondence according to the correspondence establishing request; and

storing the correspondence in the physiological feature information database.

16. The authentication apparatus according to claim 14, wherein the building a physiological feature information database comprises:

displaying the plurality of characters;

receiving the plurality of pieces of physiological feature information sequentially inputted by a user according to the order of the plurality of characters;

establishing a correspondence between the plurality of characters and the plurality of pieces of physiological feature information; and

storing the correspondence in the physiological feature information database.

17. The authentication apparatus according to claim 11, wherein if it is determined that not every piece of the specific physiological feature information in the input sequence matches with the corresponding character in the generated character sequence, it is determined that authentication fails,

and the operations further comprise:

determining whether a number of authentication failures exceeds a predetermined threshold, if not, receiving, again, physiological feature information sequentially inputted by the user.

18. The authentication apparatus according to claim 11, wherein the characters in the generated character sequence comprise a digit and a decimal point.

19. The authentication apparatus according to claim 11, wherein the receiving of the specific physiological feature information sequentially inputted by a user, to obtain a feature information sequence comprises:

displaying the generated character sequence; and

receiving the specific physiological feature information sequentially inputted by the user according to the order of the characters in the generated character sequence, to obtain the feature information sequence.

20. A non-transitory computer-readable storage medium, the storage medium being stored with program instructions, wherein the program instructions, when executed by a processor, configure the processor to perform the following operations:

obtaining data received from a user to be processed;

generating a character sequence based on the received data, wherein each character in the character sequence corresponds to a specific physiological feature information of the user, and a location of each character in the generated character sequence corresponds to a specific order in the generated character sequence on how the specific physiological feature information of the user are to be received as prompted sequential inputs;

receiving the specific physiological feature information sequentially inputted by the user as prompted response to the generated character sequence from the priorly received data; and

determining whether every piece of the specific physiological feature information according to the input sequence matches with each and every of the corresponding characters according to the specific order in the generated character sequence, such that unauthorized authentication due to misuse of biometric data is prevented.