A method for registering identity based on biometric features, the method comprising: receiving a registration information request packet of user equipment on an authentication server from a service server, wherein the registration information request packet comprises a service account identity, wherein the service server is separate from the user equipment; generating, on the authentication server, a virtual account identity corresponding to the service account identity; encapsulating, on the authentication server, the virtual account identity and a server public key into a registration information response packet; sending, on the authentication server, the registration information response packet to the service server after signing the registration information response packet by using a server private key corresponding to the server public key, so the service server forwards the registration information response packet to the user equipment; receiving, on the authentication server, a registration request packet of the user equipment from the service server, signed by the user equipment using a device private key of the user equipment, wherein the registration request packet comprises a device identity of the user equipment, the virtual account identity, a biometric authentication type, a biometric feature token, and a service public key; sending, on the authentication server, the registration request packet to a biometric authentication center server; receiving, on the authentication server, a signature verification result returned by the biometric authentication center server after performing signature verification on the registration request packet by using a device public key corresponding to the device identity; and saving, on the authentication server, a correspondence among the device identity, the virtual account identity, the biometric authentication type, the biometric feature token, and the service public key after signature verification on the registration request packet succeeds, to perform identity authentication on the account, whereby a biometric identity is registered with the authentication server for subsequent identity authentication. receiving a registration information request packet of user equipment on an authentication server from a service server, wherein the registration information request packet comprises a service account identity, wherein the service server is separate from the user equipment; generating, on the authentication server, a virtual account identity corresponding to the service account identity; encapsulating, on the authentication server, the virtual account identity and a server public key into a registration information response packet; sending, on the authentication server, the registration information response packet to the service server after signing the registration information response packet by using a server private key corresponding to the server public key, so the service server forwards the registration information response packet to the user equipment; receiving, on the authentication server, a registration request packet of the user equipment from the service server, signed by the user equipment using a device private key of the user equipment, wherein the registration request packet comprises a device identity of the user equipment, the virtual account identity, a biometric authentication type, a biometric feature token, and a service public key; sending, on the authentication server, the registration request packet to a biometric authentication center server; receiving, on the authentication server, a signature verification result returned by the biometric authentication center server after performing signature verification on the registration request packet by using a device public key corresponding to the device identity; and saving, on the authentication server, a correspondence among the device identity, the virtual account identity, the biometric authentication type, the biometric feature token, and the service public key after signature verification on the registration request packet succeeds, to perform identity authentication on the account, whereby a biometric identity is registered with the authentication server for subsequent identity authentication.