Control methods of decryption key storage server, biometric information storage server, and matching server in authentication system

A control method of a biometric information storage server in an authentication system including the biometric information storage server a target client included in the at least one client, a decryption key storage server, the control method comprising:

• acquiring an identifier of the target client and the encrypted biometric information for authentication encrypted based on a biometric information for authentication of a user and a unique encryption key by the target client according to a user authentication request of the target client, wherein the biometric information for authentication is acquired by the target client;
• extracting biometric information for registration corresponding to the identifier of the target client among pieces of the biometric information for registration having been encrypted by each of the at least one client transmitting the biometric information for registration;
• acquiring a matching result of the biometric information for registration corresponding to the identifier and the biometric information for authentication decrypted based on at least a portion of the at least one decryption key stored in the decryption key storage server;
• and
• providing the matching result or information according to the matching result to the target client,
• wherein the at least one decryption key is stored in the decryption key storage server separated from the at least one client and the biometric information storage server and the decryption key is not stored with the at least one biometric information for registration in the biometric information server,
• wherein the biometric information for registration is stored in the biometric information storage server separated from the at least one client and the decryption key storage server where the at least one decryption key is stored,
• wherein the decryption key storage server decrypt the encrypted biometric information for registration when the encrypted biometric information for registration is transmitted to the decryption key storage server by the biometric information storage server,
• wherein the biometric information for authentication is acquired and encrypted in the target client of the at least one client separated from the biometric information storage server and the decryption key storage server;
• wherein the decryption key, which is corresponding to the unique encryption key of the at least one client, respectively, is transmitted by the at least one client to the decryption key storage server without passing through the biometric information storage server, and wherein the biometric information for registration, which is encrypted through the unique encryption key, is transmitted by the at least one client to the biometric information storage server without passing through the decryption key storage server, and
• wherein the decryption key and the biometric information for registration are not stored in the decryption key storage server or the biometric information storage server together.

A control method of a matching server in an authentication system including a biometric information storage server at least one sub-matching server, and the matching server, the control method comprising:

• acquiring the encrypted biometric information for authentication, wherein the biometric information for authentication is acquired by the target client and encrypted based on a biometric information for authentication of a user and a unique encryption key by the target client;
• each of the at least one client providing the biometric information for registration to the biometric information storage server;
• acquiring biometric information for registration corresponding to an identifier of the target client among pieces of the biometric information for registration having been encrypted by each of the at least one client transmitting the biometric information for registration;
• providing the encrypted biometric information for authentication and the biometric information for registration corresponding to the identifier to the at least one sub-matching server to decrypt the encrypted biometric information for authentication and the biometric information for registration corresponding to the identifier, wherein the at least one sub-matching server decrypt the biometric information for authentication and the biometric information for registration using a decryption key;
• acquiring the decrypted biometric information for authentication and the decrypted biometric information for registration corresponding to the identifier;
• determining whether or not the decrypted biometric information for authentication and the decrypted biometric information for registration corresponding to the identifier match, wherein the matching server matches a piece of the biometric information for registration to the biometric information for authentication;
• and
• providing a matching result to the biometric information storage server or the target client,
• wherein the at least one decryption key is stored in the at least one sub-matching server or the matching server separated from the at least one client and the biometric information storage server and the decryption key is not stored with the at least one biometric information for registration in the biometric information server,
• wherein the biometric information for registration is stored in the biometric information storage server separated from the at least one client and the at least one sub-matching server or the matching server where the at least one decryption key is stored and the at least one of sub-matching server or the matching server decrypt the encrypted biometric information for registration when the encrypted biometric information for registration is transmitted to the at least one of sub-matching server or the matching server by the biometric information storage server, and
• wherein the biometric information for authentication is acquired and encrypted in the target client of the at least one client separated from the biometric information storage server and the at least one sub-matching server or the matching server,
• wherein the decryption key, which is corresponding to the unique encryption key of the at least one client, respectively, is transmitted by the at least one client to the matching server or the sub-matching server without passing through the biometric information storage server, and wherein the biometric information for registration, which is encrypted through the unique encryption key, is transmitted by the at least one client to the biometric information storage server without passing through the matching server or the sub-matching server, and
• wherein the decryption key and the biometric information for registration are not stored in the matching server, the sub-matching server or the biometric information storage server together.

A non-transitory computer-readable recording medium in which a program for carrying out a control method, the control method comprising:

• acquiring an identifier of the target client and the encrypted biometric information for authentication encrypted based on a biometric information for authentication of a user and a unique encryption key by the target client, wherein the biometric information for authentication is acquired by the target client;
• acquiring biometric information for registration corresponding to the identifier among at least one biometric information for registration stored in the biometric information storage server, wherein the biometric information for registration is encrypted by the target client, each of the at least one client providing the biometric information for registration to the biometric information storage server;
• extracting a decryption key corresponding to the identifier from the at least one decryption key in the decryption storage server;
• decrypting the encrypted biometric information for authentication and the biometric information for registration corresponding to the identifier using the decryption key corresponding to the identifier;
• determining whether or not the decrypted biometric information for authentication and the decrypted biometric information for registration corresponding to the identifier match;
• and
• providing a matching result to the biometric information storage server or the target client,
• wherein the at least one decryption key is stored in the decryption key storage server separated from the at least one client and the biometric information storage server, and the decryption key is not stored with the at least one biometric information for registration in the biometric information server,
• wherein the biometric information for registration is stored in the biometric information storage server separated from the at least one client and the decryption key storage server where the at least one decryption key is stored and the decryption key storage server decrypt the encrypted biometric information for registration when the encrypted biometric information for registration is transmitted to the decryption key storage server by the biometric information storage server,
• wherein the biometric information for authentication is acquired and encrypted in the target client of the at least one client separated from the biometric information storage server and the decryption key storage server,
• wherein the decryption key, which is corresponding to the unique encryption key of the at least one client, respectively, is transmitted by the at least one client to the decryption key storage server without passing through the biometric information storage server, and wherein the biometric information for registration, which is encrypted through the unique encryption key, is transmitted by the at least one client to the biometric information storage server without passing through the decryption key storage server, and
• wherein the decryption key and the biometric information for registration are not stored in the decryption key storage server or the biometric information storage server together.