The random encrypting and deciphering system of intelligent mobile terminal based on fingerprint characteristic
Technical field
The present invention relates to encrypting fingerprint technical field, particularly relate to the random encrypting and deciphering system of a kind of intelligent mobile terminal based on fingerprint characteristic.
Background technology
Along with payment is to mobile terminal migration, security risk is also just constantly aggravated.Mobile phone is lost, Trojan software to be stolen etc. and all allowed the move medias such as mobile phone become mobile national treasury in the air.Namely fingerprint recognition refers to be differentiated by the details of more different fingerprint, due to fingerprint recognition have fast, convenient, safe, exclusive, the advantage such as can not to lose, the particularly inherent feature of user, fingerprint recognition will be allowed to condition at mobile terminal safety and mobile payment service aspect is widely used.But also there is security risk in fingerprint recognition, the restriction of mobile intelligent terminal size causes the contact area of fingerprint sensor little, the sampling of unique point is limited, algorithm based on fingerprint image coupling is by similarity Fuzzy comparisons, image matching algorithm is relied on large, so also can be cracked by some special means, the probability cracked is approximately 1/50000, brings hidden danger safely to mobile payment and information of mobile terminal.Traditional password is main flow in mobile payment now, convenient and practical, meets user habit, and the probability that 6 bit digital passwords are cracked is 1/1000000.Fingerprint recognition combined with password, using password as key, can realize the distinctive encryption of fingerprint characteristic, its probability cracked is 1/50000000000, greatly can increase the safety of mobile payment.
Summary of the invention
Technical matters to be solved by this invention is, provides a kind of intelligent mobile terminal based on fingerprint characteristic random encrypting and deciphering system, utilizes password to be combined with fingerprint and carries out encryption and decryption to intelligent mobile terminal.The present invention is achieved in that
The random encrypting and deciphering system of intelligent mobile terminal based on fingerprint characteristic, comprising:
Fingerprint identification module, for gathering the initial fingerprint of user's input;
Password Input module, for receiving the initial password of described user input;
Base-Band Processing and intelligent use processing module, it supports trust zone framework, for receiving described initial fingerprint and described initial password, and utilize described initial password to carry out symmetric encryption operation to described initial fingerprint under trust zone safe mode, obtain cryptographic fingerprint, and this cryptographic fingerprint is stored into together with described initial password its trust zone region, realize the encryption to described intelligent mobile terminal;
When to described intelligent mobile terminal deciphering:
Described fingerprint identification module is also for Gather and input fingerprint;
Described Password Input module is also for receiving input password;
Described Base-Band Processing and intelligent use processing module are also for comparing the initial password stored in described input password and trust zone region, and utilize cryptographic fingerprint described in described input codon pair to carry out symmetrical decrypt operation when comparison is consistent, obtain decrypt fingerprint, and by this decrypt fingerprint and described input fingerprint matching, and when the match is successful, described intelligent mobile terminal is unlocked.
Further, described Base-Band Processing and intelligent use processing module also have Modify password pattern; In Modify password pattern:
Described Password Input module is also for receiving the Old Password of described user input;
Described Base-Band Processing and intelligent use processing module are also for receiving described Old Password, and the initial password stored in described Old Password and trust zone region is compared, and utilize described Old Password to carry out symmetrical decrypt operation to described cryptographic fingerprint when comparison is consistent, obtain decrypt fingerprint, simultaneously, the new password of described user input is received by described Password Input module, and utilize this new password to re-start symmetric cryptography to this decrypt fingerprint, obtain new cryptographic fingerprint, and this new cryptographic fingerprint is stored into trust zone region together with this new password.
Further, described symmetric encryption operation is that XOR/invertible matrix is multiplied/ring shift or DES symmetric encipherment algorithm.
Further, described fingerprint identification module is capacitive fingerprint sensing device.
Further, described Password Input module is touch display screen.
Further, described Base-Band Processing and intelligent use processing module are connected with radio-frequency module; This radio-frequency module is connected with antenna.
Further, described Base-Band Processing and intelligent use processing module are connected with memory module.
Further, described Base-Band Processing and intelligent use processing module are connected with audio-frequency module; Described audio-frequency module is connected with microphone and loudspeaker, for driving described microphone and loudspeaker.
Further, described Base-Band Processing and intelligent use processing module are connected with camera.
Further, the kernel of described Base-Band Processing and intelligent use processing module is ARM Cortex A53 tetra-core 64 bit processor.
Compared with prior art, the present invention utilizes initial password to carry out symmetric cryptography to initial fingerprint and obtains cryptographic fingerprint, and utilizes initial password and cryptographic fingerprint to carry out double-encryption to intelligent mobile terminal.During deciphering, password need be inputted and mate with initial password to be decrypted cryptographic fingerprint and draw decrypt fingerprint, also need decrypt fingerprint just can complete the deciphering to intelligent mobile terminal with input fingerprint matching simultaneously.Meanwhile, because cryptographic fingerprint utilizes initial password to carry out symmetric cryptography to initial fingerprint to obtain, input different initial passwords and can obtain different cryptographic fingerprint, the accidental enciphering to initial fingerprint can be realized.Moreover, because encryption and decryption all performs under trust zone safe mode, non-authorised software cannot obtain enciphering and deciphering algorithm, even if obtain initial password and cryptographic fingerprint, also cannot show that correct decrypt fingerprint is to realize fingerprint matching, significantly improves the security of intelligent mobile terminal.
Accompanying drawing explanation
Fig. 1: the intelligent mobile terminal based on fingerprint characteristic that the embodiment of the present invention provides random encrypting and deciphering system composition schematic diagram.
Embodiment
In order to make object of the present invention, technical scheme and advantage clearly understand, below in conjunction with drawings and Examples, the present invention is further elaborated.
As shown in Figure 1, the random encrypting and deciphering system of the intelligent mobile terminal based on fingerprint characteristic that the embodiment of the present invention provides comprises fingerprint identification module 2, Password Input module 3 and Base-Band Processing and intelligent use processing module 1.
Fingerprint identification module 2 is for gathering the initial fingerprint of user's input.Fingerprint identification module 2 is made up of chip, sapphire, becket, soft board, support plate etc., adopts SPI high speed bus interface to be connected with between Base-Band Processing and intelligent use processing module 1.Fingerprint identification module 2 adopts capacitive fingerprint sensing device, can adopt the fingerprint sensor of scratching formula or push type.When finger finger tip scratching or pressing sense the capacitive fingerprint sensing device of fingerprint, this capacitive fingerprint sensing device just can produce capacitance signal change to provide fingerprint image according to the fingerprint ridge of fingerprint and fingerprint paddy.The fingerprint image obtained is the gray level image that a width contains more noise, by intelligent use processor, pre-service is carried out to improve the quality of fingerprint image to this fingerprint image, strengthen the contrast of fingerprint ridge and fingerprint paddy, fingerprint image is become width point and line chart clearly, so that carry out feature extraction.
Base-Band Processing and intelligent use processing module 1 support trust zone framework.TrustZone is the safety technique for mobile intelligent terminal of ARM company exploitation, TrustZone technology and Cortex
tM-A processor is closely integrated, and passes through
aXI bus and specific TrustZone system IP block are expanded in systems in which.This system can protect the peripheral hardwares such as secure memory, cryptographic block, keyboard and screen, thus can guarantee that they exempt from software attacks.Develop according to TrustZone Ready Program suggestion and utilize the equipment of TrustZone technology to provide can to support the platform of complete credible execution environment (TEE), safe aware application and security service, triplicity can be got up by high-performance arm processor platform.Endorse employing ARM Cortex A series polycaryon processor in Base-Band Processing and intelligent use processing module 1, this series processors supports TrustZone technology.As ARM Cortex A53 tetra-core 64 bit processor, there is the processing speed of 1.5GHz, can be used for the encryption and decryption computing etc. of Finger print characteristic abstract, password coupling, intelligent mobile terminal.The Finger print characteristic abstract time <20ms of this processor, fingerprint matching <200ms operation time, can meet and pay real-time demand.Base-Band Processing and intelligent use processing module 1 have general mode and Trust Zone safe mode, can switch between two kinds of patterns.The fingerprint image that Base-Band Processing and intelligent use processing module 1 can collect fingerprint identification module 2 under trust zone safe mode carries out pre-service to improve the security in processing procedure, and pre-service comprises normalization, Iamge Segmentation, enhancing, binaryzation and refinement etc.The information such as fingerprint feature point and texture is comprised in initial fingerprint.Base-Band Processing and intelligent use processing module 1 can be extracted these information such as fingerprint feature point and texture, for the follow-up computations to initial fingerprint.
Password Input module 3 is for receiving the initial password of user's input.Password Input module 3 adopts touch display screen, by the dummy keyboard input password on touch display screen.
Base-Band Processing and intelligent use processing module 1 receive initial fingerprint and initial password, and utilize initial password to carry out symmetric encryption operation to initial fingerprint under trust zone safe mode, obtain cryptographic fingerprint, and this cryptographic fingerprint is stored into together with initial password its trust zone region, realize the encryption to intelligent mobile terminal.Because cryptographic fingerprint utilizes initial password to carry out symmetric cryptography to initial fingerprint to obtain, input different initial passwords and can obtain different cryptographic fingerprint, the accidental enciphering to initial fingerprint can be realized, promote the security of intelligent mobile terminal.
When deciphering intelligent mobile terminal, fingerprint identification module 2 Gather and input fingerprint, Password Input module 3 receives input password.The initial password stored in input password and trust zone region is compared by Base-Band Processing and intelligent use processing module 1, password comparison is precise alignment, if comparison is inconsistent, then stop decryption process, if comparison is consistent, then utilize input codon pair cryptographic fingerprint to carry out symmetrical decrypt operation, obtain decrypt fingerprint.
Symmetric cryptography is a kind of encryption method adopting one-key cryptosystem, same key can be used as the encryption and decryption of information simultaneously, sending out collection of letters both sides all uses these double secret key data to encrypt and decrypt, after destination receives ciphertext, original text is understood if want, then need to use the key of encryption and the algorithm for inversion of identical algorithms to be decrypted ciphertext, it just can be made to revert to readable plaintext.This encryption method is also referred to as secret key cryptography.Symmetric encryption operation can adopt XOR/invertible matrix to be multiplied/ring shift or DES symmetric encipherment algorithm.
Based on the principle of symmetric cryptography, if input password is consistent with the initial password stored in trust zone region, then the decrypt fingerprint that symmetrical decrypt operation obtains is carried out to cryptographic fingerprint, by with initial fingerprint, there is identical fingerprint characteristic.Now, can by this decrypt fingerprint and input fingerprint matching.Fingerprint matching is fuzzy matching, specifically, is geometry territory fuzzy diagnosis coupling, the mainly coupling of fingerprint characteristic point location and texture type.If mate unsuccessful, then again stop decryption process, if the match is successful, then the password of input and fingerprint are described all by checking, now then intelligent mobile terminal are unlocked.
Base-Band Processing and intelligent use processing module 1 also have Modify password pattern, in Modify password pattern, Password Input module 3 receives the Old Password of user's input, Base-Band Processing and intelligent use processing module 1 receive Old Password, and the initial password stored in Old Password and trust zone region is compared, and utilize Old Password to carry out symmetrical decrypt operation to cryptographic fingerprint when comparison is consistent, obtain decrypt fingerprint, simultaneously, the new password of user's input is received by Password Input module 3, and utilize this new password to re-start symmetric cryptography to this decrypt fingerprint, obtain new cryptographic fingerprint, and this new cryptographic fingerprint is stored into trust zone region together with this new password.
Intelligent use processor is also connected with other functional modules, comprises radio-frequency module 8, audio-frequency module 5, camera 4 and power management module 7 etc.Radio-frequency module 8 is connected with antenna 9, for the transmitting-receiving of radiofrequency signal.Memory module 6 comprises EMMCP chip and TF card, supports high speed storing.Audio-frequency module 5 is connected with microphone and loudspeaker, for driving microphone and loudspeaker.
The foregoing is only preferred embodiment of the present invention, not in order to limit the present invention, all any amendments done within the spirit and principles in the present invention, equivalent replacement and improvement etc., all should be included within protection scope of the present invention.