Digital Signature Technology of Mobile Phone Verification Code based on Biometrics

Baozhu Li, Ping Wang, Xia Zhang, Zhen Wang

Abstract: As the most common way of mobile phone identity authentication, verification code has many security risks. In order to enhance its security, this paper proposes a technology which uses biometrics to sign the verification code digitally. Specifically, the user’s biometric value is taken as the private key, by which the verification code from the remote server is signed digitally. Then, the verification code signed is returned to the remote server. In addition, this technology involves biometric extraction, hash function, elliptic curve signature algorithm, and identity based cryptography. Biometrics are unique and irreproducible, and do not require network transmission and key management. Signing the verification code makes it authentic, complete, and undeniable. Analysis results are presented to demonstrate our technology can improve the security and practicality of the verification code.