CN205656665U - Black eID of fingerprint removes transaction device - Google Patents

Abstract

The utility model aims at providing a black eID of fingerprint removes transaction device, black eID of fingerprint removes transaction device passes through fingerprint sensor and gathers fingerprint information, the drawing and compare and all accomplish in security chip of fingerprint information, security chip is according to fingerprint verification result control black eID of fingerprint removes transaction device's activation, after the black eID of fingerprint removes transaction device activation, the eID verification information of storage in security chip uses big dipper chip to carry out the information interaction as communication channel with eID service platform, accomplish user authentication, only this eID black eID of fingerprint removes transaction device's of ability normal use transaction is used after the user has passed through fingerprint verification and eID authentication.

Description

A kind of encrypting fingerprint eID Move transaction device

Technical field

Relate to mobile phone mobile payment technical field, it particularly relates to the eID move transaction device of a kind of encrypting fingerprint.

Background technology

Mobile phone has spread to the every nook and cranny of life, it is a lot of convenient that intelligentized mobile phone brings to us, such as Mobile banking, and on cellular network, office terminal etc. software can realize whenever and wherever possible, remotely operation, but the safety ease for use of these functions is worth us to consider.

Within 1998, Siemens first releases finger print mobile phones, finger print mobile phones is access fingerprint collecting chip on existing cell phone mainboard, fingerprint recognition processing module is increased in the primary control program of mobile phone, thus the fingerprint of user can be gathered, and identified, control with some reached mobile phone operation, or provide fingerprint identity validation function for some mobile service.

The most various smart mobile phones, various in style, application software is varied, and such as mobile value-added service, from the beginning of note is voted, has evolved to mobile payment, mobile security, movable police etc..The unidirectional complexity that constantly conforms to the principle of simplicity mobile value-added service develops, and also draws mobile phone terminal to intelligent, the direction evolution of safe simultaneously.Mobile service from less to more, from simple to complexity, from without safety requirements to high security demand, from without authentication to there being authentication, the safety of this numerous business will ensure with the safety of mobile phone terminal.As a example by Mobile business, polytype move transactions such as mobile stock, mobile security, mobile buying, mobile payment can be carried out.And the safety of these any transaction, especially when using the mode of doing business of mobile phone this " non-face-to-face ", " not face connection ", in addition to the safety of transaction itself, the identity reality of dealer seems with the non repudiation of transaction and is even more important.For another the business approval of the mobile office of mobile office, especially senior executive, such as silver card class business itself with the identity strong correlation of people, the problem that its safety examined is the most very important.These are all illustrating same problem: senior mobile service needs identity security, and identity security requires that mobile terminal possesses reliable authentication ability.Compared with the identity symbol of system this kind of with password distribution, fingerprint this inherent " password " makes mobile phone become a reliable certification terminal almost without obstacle.

For Mobile banking; traditional is, and banking software password adds digital certificate logs in; password easily leaks; there is hidden danger in its safety; for enterprise customer, manager's telecommuting of enterprise, however, to ensure that company information is the most compromised; safety is also required to ensure, this fingerprint identification technology adds digital certificate just can preferably protect the safety of user.The finger print mobile phones of the digital signature of prior art: digital certificate leaves in mobile phone；Mobile phone links PC by USB, then carries out digital certificate authentication by network；Fingerprint characteristic is stored to refer to, inside mobile phone, compare on mobile phone.This finger print mobile phones that can be digitally signed, in the existing circuit of mobile phone body, adds and is connected, by USB interface circuit, fingerprint sensor circuit, the circuit part formed；The part of interface that wherein fingerprint sensor circuit and USB interface circuit process chip with mobile phone CPU respectively is connected, and is connected with shielded computer by USB interface and carries out signal data transmission.Its shortcoming is: existing mobile phone uses limitation, it is impossible to use whenever and wherever possible.Existing mobile phone does not has security module, and safety is the highest.

EID is the English abbreviation of English " Electronic Identity ", Chinese entitled " electronic ID card " or " network electronic identity card ", the network electronic identity of citizen it is signed and issued to by " Ministry of Public Security citizen network identity identification system ", based on cryptographic technique, with intelligent and safe chip as carrier, for confirming individual's true identity at network remote.

EID system relies on the Ministry of Public Security to cover the national citizenship information bank of 1,300,000,000 populations, the various identity informations utilizing user actively to submit to set up different credit grades, generating one group of unique network identifier different from traditional folk houses identity card with digital certificate, electronic ID card is used in network.From design principle, electronic ID card is one section of network identifier, and itself does not contains any subscriber identity information；From idea in management, foundation and the management of electronic ID card Association Identity are carried out by unified mechanism.The most both ensure that the verity of personal identification, and subscriber identity information can be prevented effectively from again and be carried over into the exposure at various Virtual network operator and disclosure risk.

Summary of the invention

For the above-mentioned problems in the prior art, it is an object of the invention to provide the eID move transaction device of a kind of encrypting fingerprint, described eID move transaction device gathers finger print information by fingerprint sensor, the extraction of described finger print information all completes with comparison in encryption chip, described encryption chip controls the activation of move transaction device according to comparison information, when being traded after move transaction device activates, it is mutual that eID checking information and the eID unified certification service system being stored in intelligent card chip carries out information, carry out subscriber authentication, only could normally use the transaction application of this eID move transaction device after user has passed through fingerprint authentication and eID authentication certification, i.e. ensure that convenience and the safety of transaction, in turn ensure that the safety of user fingerprints information.

A kind of eID move transaction device of encrypting fingerprint, it is characterised in that: include

Mobile phone SoC chip, is integrated with Big Dipper chip；

Fingerprint sensor；

Safety chip, the initial fingerprint of storage user and eID verify information；

Described fingerprint sensor is connected with safety chip, is used for sensing user fingerprints；

Described safety chip is connected with fingerprint sensor and mobile phone SoC chip, for verifying user fingerprints and the checking of eID information；

Described Big Dipper chip is used as the authenticated channel of eID information.

While it is an advantage of the current invention that convenience and the safety being guaranteed move transaction by fingerprint recognition certification and eID certification, the safety of the user fingerprints information that guarantees to know clearly by finger print identifying in chip.

Accompanying drawing explanation

The present invention can employ same or analogous reference to represent same or like parts the most in all of the figs by with reference to being better understood below in association with the detailed description given by accompanying drawing.Described accompanying drawing comprises in this manual together with detailed description below and forms a part for description, is used for being further illustrated by the preferred embodiments of the present invention and explaining the principle and advantage of the present invention.In the accompanying drawings:

Fig. 1 shows the block diagram of encrypting fingerprint eID move transaction device according to an embodiment of the invention；

Fig. 2 shows the exemplary processes performed when carrying out fingerprint register according to the encrypting fingerprint eID move transaction device shown in embodiments of the invention Fig. 1；And

Fig. 3 shows the exemplary processes performed when carrying out fingerprint authentication according to the encrypting fingerprint eID move transaction device shown in embodiments of the invention Fig. 1.

Fig. 4 shows the exemplary processes performed when transaction according to the encrypting fingerprint eID move transaction device shown in embodiments of the invention Fig. 2.

Detailed description of the invention

Hereinafter in connection with accompanying drawing, the one exemplary embodiment of the present invention is described.For clarity and conciseness, all features of actual embodiment are not the most described.It should be understood, however, that must make during developing any this practical embodiments much specific to the decision of embodiment, in order to realize the objectives of developer.

Below as a example by the encrypting fingerprint eID move transaction device design being integrated with Big Dipper chip, structure and relevant processing procedure to encrypting fingerprint eID move transaction device according to embodiments of the present invention illustrate.

Fig. 1 shows the block diagram of encrypting fingerprint eID move transaction device according to an embodiment of the invention.After this encrypting fingerprint eID move transaction device has only carried out effective fingerprint pressing (that is, having passed through fingerprint authentication) on its integrated fingerprint sensor, just can be used for normal subsequent treatment.

As shown in Fig. 1, this encrypting fingerprint eID move transaction device is mainly by chip for cell phone, safety chip and fingerprint sensor are constituted, wherein chip for cell phone is integrated with Big Dipper chip, be used as eID Information Authentication channel, chip for cell phone also comprise general chip for cell phone general such as baseband chip, processor, coprocessor, RF chip, touch screen controller chip, Memory, wireless IC and power management IC etc..

This encrypting fingerprint eID move transaction device provides contactless communication mode such as NFC, Bluetooth, WiFi, Zigbee.

The sensitive data of the fingerprint feature information of user's registration is stored in safety chip, fingerprint authentication is performed by safety chip, i.e. safety chip will form user fingerprints characteristic information after the finger print information extraction of fingerprint sensor, this feature information is compared with the fingerprint feature information prestored, in order to determine that whether real user is the owner of this device.Safety chip comprises fingerprint driving, fingerprint engine, fingerprint template, ISO7816 driving.

Fingerprint drive, for sensor acquisition to fingerprint carry out feature information extraction.Fingerprint engine, is used for preserving fingerprint algorithm, and described fingerprint algorithm enters memory module by burning mode burning.Fingerprint template, for preserving the finger print information of institute user, the fingerprint feature information of described user registration is to enter fingerprint template by burning mode burning.

ISO7816 drives, and the object information after described processing module is carried out finger print information comparison is encrypted.

Described AES can include following one or more: AES, DES, 3DES, RSA, ECC data AES, Advanced Encryption Standard, the close SM1 of state, the close SM2 of state, the close SM3 of state and the close SM4 of state etc..

Described fingerprint sensor can be slidingtype, it can also be pressing type, wherein the collection area of pressing type can be 192*192, 160*160, 176*176 equidimension, intelligent card chip carries out fingerprint pretreatment by fingerprint algorithm to the finger print information of fingerprint sensor collection, including carrying out image block, linearity filters, image enhaucament, extract Block direction, ask for singular point block, extract the field of direction, the field of direction filters, obtain singular point, image binaryzation, binaryzation is modified, obtain frequency fields, obtain fingerprint density, obtain fingerprint pattern, fingerprint image refines, obtain fingerprint minutiae, integration templates etc. operate, fingerprint feature information burning after finally processing is in intelligent card chip.

Safety chip can be from following middle selection SLE77, SLE97, SLE4404, SLE4406, SLE4418, SLE4428, SLE4432/4442, SLE4436, NXP MF1 IC S20, NXP MF1 IC S50, NXP MF1 IC S70, AT88SC101, AT88SC102, AT88SC200, M68HC05SC, MF4406, MF4428, MF4442.

As shown in Fig. 2, processing procedure 200 starts in step S210, then in step S220, one display device of encrypting fingerprint chip controls is used for pointing out intelligent card subscriber to carry out fingerprint register.Here, any method well known in the prior art can be used to carry out prompting such as display lamp, display screen.In step S230, when its finger is placed on fingerprint sensor in response to prompting shown in display device by user, gathers the fingerprint image of user via fingerprint sensor, and provide it to encrypting fingerprint chip.Encrypting fingerprint chip is after receiving user fingerprint image, in step S240, carries out Finger print characteristic abstract process, in order to extract the fingerprint feature information of user.Here, encrypting fingerprint chip can use any feature extraction algorithm well known in the prior art to extract user fingerprints pattern.In step S250, the described fingerprint pattern information received is stored in the internal storage device (not shown in figure 1) of encrypting fingerprint chip by fingerprint register and checking application program, and sends " succeeding in registration " response message to instruction device.In step S260, instruction device is in response to described " succeeding in registration " response message, by updating instruction device information, in order to notice user fingerprints registration completes.Subsequently, processing procedure 200 terminates in step S270, this completes fingerprint register process on the card of user (that is, the card owner).

When user needs to use fiscard to carry out subsequent treatment, such as when completing once to conclude the business, he first has to complete on card after fingerprint recognition success (now, card is placed on hand), i.e. pass through on the card shown in Fig. 2 after fingerprint authentication process, just can Activate Phone chip and follow-up operated accordingly near card reader by this encrypting fingerprint eID move transaction device, and otherwise this encrypting fingerprint eID move transaction device will be unable to normally use.

Fig. 3 gives schematic diagram when user verifies.

In step S310, prompting user proceeds by fingerprint authentication.

In step S320, its finger is placed on fingerprint sensor by user, gathers the fingerprint image of user via fingerprint sensor, and provides it to safety chip.

In step S330, safety chip extracts user fingerprints characteristic information.

In step S340, fingerprint register and checking application program, the user fingerprints pattern information extracted in step S330 is compared with the registered fingerprint characteristic information being previously stored in safety chip, to determine whether the two mates.

If determining that in step S340 above-mentioned fingerprint feature information is mutually matched, then processing and proceed to step S350, safety chip decides whether to activate intelligent card chip according to the result.

In step S360, mobile phone display device displays to the user that fingerprint authentication is the most successful.Hereafter, on card, the process of fingerprint authentication terminates in step S370.

After the chip that Activates Phone, this encrypting fingerprint eID move transaction device is entered flow for authenticating ID, as shown in Figure 4 near corresponding application terminal.After experience S410 prepares, at S420 step this encrypting fingerprint eID move transaction device to application terminal proposition checking request.In step S430, application terminal sends real-name authentication request to eID service platform.In step S440, eID service system requires to provide eID information to carry out real name verification.In step S450, provide the eID information being stored in safety chip to eID service platform.In step S460, eID service platform is verified.If by entering step S470, if not passing through, prompting is wrong and returns to step S450.In step S470, eID service platform transmits authentication information to application terminal system.Terminate checking in step 480, complete authentication by above step.

Although combining accompanying drawing above to describe embodiments of the invention in detail, it is to be understood that embodiments described above is only intended to the present invention is described, and it is not intended that limitation of the present invention.For a person skilled in the art, above-mentioned embodiment can be made various modifications and changes without departing from the spirit and scope of the invention.Therefore, the scope of the present invention is only limited by appended claim and equivalents thereof.

Claims (5)

1. the eID move transaction device of an encrypting fingerprint, it is characterised in that: include

Mobile phone SoC chip, is integrated with Big Dipper chip；

Fingerprint sensor；

Safety chip, storage has the fingerprint template of user and eID to verify information；

Described fingerprint sensor is connected with safety chip, for sensing the fingerprint of user；

Described safety chip is connected with fingerprint sensor and mobile phone SoC chip, for checking and the activation of control mobile phone SoC chip of user fingerprints；

Described Big Dipper chip is used as the authenticated channel of eID information.

2. move transaction device as claimed in claim 1, it is characterised in that after being verified of user fingerprints, safety chip just Activates Phone SoC chip.

3. move transaction device as claimed in claim 1, it is characterized in that, described encryption chip can be from selected from SLE77, SLE97, SLE4404, SLE4406, SLE4418, SLE4428, SLE4432/4442, SLE4436, NXP MF1 IC S20, NXP MF1 IC S50, NXP MF1 IC S70, AT88SC101, AT88SC102, AT88SC200, M68HC05SC, MF4406, MF4428, MF4442.

4. move transaction device as claimed in claim 1, it is characterised in that described fingerprint sensor is the one in sweep fingerprint sensor, pressing type fingerprint sensor.

5. move transaction device as claimed in claim 1, it is characterised in that its communication mode is contactless communication mode, can select from NFC, Bluetooth, WiFi, Zigbee.