基于区块链的生物特征信息共享方案研究与实现  

Research and Implementation of a Blockchain-based Biometric Information Sharing Scheme

作　　者：曲爱妍 符天枢 张宏军 Qu Aiyan;Fu Tianshu;Zhang Hongjun(College of Command and Control Engineering,Army Engineering University of PLA,Nanjing 210001;Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093;School of Cyber Security,University of Chinese Academy of Science,Beijing 100049;School of Network Security,Jinling Institute of Technology,Nanjing 211169)

机构地区：[1]中国人民解放军陆军工程大学指挥控制工程学院,南京210001 [2]中国科学院信息工程研究所,北京100093 [3]中国科学院大学网络空间安全学院,北京100049 [4]金陵科技学院网络安全学院,南京211169

出　　处：《信息安全研究》2025年第5期402-411,共10页Journal of Information Security Research

基　　金：国家自然科学基金项目(11601202);江苏省高校自然科学基金项目(20KJB110004);南京市科技计划项目(202403022)。

摘　　要：传统的信息共享方案通常依赖数据中心服务器进行数据存储和验证,但这种集中化模式易在遭受攻击时出现数据篡改、隐私泄露以及操作不规范等问题,难以满足对数据可信性的要求.针对这些挑战,提出了一种结合区块链技术与生物特征信息认证的解决方案.通过指纹、面部识别等生物特征信息生成唯一的认证密钥,并将其安全地存储在区块链上,充分利用区块链的去中心化、不可篡改及可追溯特性,实现数据的安全存储和可信共享,从而有效保障信息验证过程中的隐私性与安全性.以教育领域为应用场景,该方案能够有效解决考试作弊和资源侵权等问题,为数据安全与共享提供了一种兼顾隐私保护的新思路.Traditional information-sharing solutions typically rely on data center servers for data storage and verification.However,this centralized model is vulnerable to issues such as data tampering,privacy breaches,and operational irregularities when under attack,making it difficult to meet the requirements for data trustworthiness.To address these challenges,this paper proposes a solution that combines blockchain technology with biometric information authentication.By using biometric features such as fingerprints and facial recognition to generate a unique authentication key,which is securely stored on the blockchain,the solution leverages the decentralized,tamper-proof,and traceable characteristics of blockchain to ensure secure data storage and trusted sharing,thereby effectively safeguarding privacy and security during the information verification process.Taking the education sector as an example,this solution can effectively address issues like exam cheating and resource infringement,providing a new approach to data security and sharing that also ensures privacy protection.

关 键 词：区块链 生物特征认证 授权管理 智能合约 身份认证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]