Biometric identity registration and authentication

A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

• receiving, at an authentication server and from a service server, a first registration information request packet of a user equipment, wherein the first registration information request packet includes an identity of a service account;
• generating, by the authentication server, a virtual account identity corresponding to the identity of the service account;
• encapsulating, by the authentication server, the virtual account identity into a registration information response packet;
• signing, by the authentication server, the registration information response packet using an authentication server private key;
• forwarding, by the authentication server through the service server, the registration information response packet to the user equipment;
• performing, by the user equipment, a first signature verification on the registration information response packet using a registered authentication server public key, wherein the registered authentication server public key corresponds to the authentication server private key;
• determining that the first signature verification is successful;
• in response to determining that the first signature verification is successful, receiving, by the authentication server, from the user equipment through the service server, a second registration request packet signed by the user equipment using a user equipment private key, wherein the second registration request packet includes a device identity of the user equipment, the virtual account identity, a biometric authentication type, a biometric feature token, and a service public key, wherein the service public key and a corresponding service private key are generated by the user equipment and are used to perform identity authentication of the user equipment;
• obtaining, a registered user equipment public key based on the device identity of the user equipment, wherein the registered user equipment public key corresponds to the user equipment private key;
• performing a second signature verification on the second registration request packet using the registered user equipment public key;
• performing, by the authentication server, a verification of the second registration request packet based on a registration verification code and a time interval between a transmission of the registration information response packet and a receiving the second registration request packet;
• determining that the second signature verification is successful and the verification of the second registration request packet is successful;
• and
• in response to determining that the second signature verification is successful and the verification of the second registration request packet is successful, saving, by the authentication server, a mapping relationship among the device identity of the user equipment, the virtual account identity, the biometric authentication type, the biometric feature token, and the service public key, to perform an identity authentication on the service account.

A computer-implemented system, comprising:

• one or more computers;
• and
• one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising:
• receiving, at an authentication server and from a service server, a first registration information request packet of a user equipment, wherein the first registration information request packet includes an identity of a service account;
• generating, by the authentication server, a virtual account identity corresponding to the identity of the service account;
• encapsulating, by the authentication server, the virtual account identity into a registration information response packet;
• signing, by the authentication server, the registration information response packet using an authentication server private key;
• forwarding, by the authentication server through the service server, the registration information response packet to the user equipment;
• performing, by the user equipment, a first signature verification on the registration information response packet using a registered authentication server public key, wherein the registered authentication server public key corresponds to the authentication server private key;
• determining that the first signature verification is successful;
• in response to determining that the first signature verification is successful, receiving, by the authentication server, from the user equipment through the service server, a second registration request packet signed by the user equipment using a user equipment private key, wherein the second registration request packet includes a device identity of the user equipment, the virtual account identity, a biometric authentication type, a biometric feature token, and a service public key, wherein the service public key and a corresponding service private key are generated by the user equipment and are used to perform identity authentication of the user equipment;
• obtaining, a registered user equipment public key based on the device identity of the user equipment, wherein the registered user equipment public key corresponds to the user equipment private key;
• performing a second signature verification on the second registration request packet using the registered user equipment public key;
• performing, by the authentication server, a verification of the second registration request packet based on a registration verification code and a time interval between a transmission of the registration information response packet and a receiving the second registration request packet;
• determining that the second signature verification is successful and the verification of the second registration request packet is successful;
• and
• in response to determining that the second signature verification is successful and the verification of the second registration request packet is successful, saving, by the authentication server, a mapping relationship among the device identity of the user equipment, the virtual account identity, the biometric authentication type, the biometric feature token, and the service public key, to perform an identity authentication on the service account.