WO2015117333A1

WO2015117333A1 - Information processing method and apparatus, encryption device and computer storage medium

Info

Publication number: WO2015117333A1
Application number: PCT/CN2014/087166
Authority: WO
Inventors: 任鹏
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-07-16
Filing date: 2014-09-23
Publication date: 2015-08-13
Also published as: CN104158657A

Abstract

Disclosed is an information processing method, comprising: determining a device which is accessed via a peripheral interface of a terminal to be an encryption device which is matched with the terminal; and conducting encryption related processing on information about the terminal. Also disclosed at the same time are an information processing apparatus, an electronic device and a computer storage medium.

Description

Information processing method and device, encryption device and computer storage medium

Technical field

The present invention relates to encryption technologies, and in particular, to an information processing method and apparatus, an encryption device, and a computer storage medium.

Background technique

In today's society, the large-scale popularization of smartphones has also brought many problems, among which mobile phone security issues are the most important. The main security threats currently include three aspects:

1. Destroy the system security mechanism and provide convenience for other malicious code attacks;

2. The management software steals sensitive information due to its own authority;

3, the software itself has artificial or unintentional loopholes, used by other software to launch attacks; for mobile phone enthusiasts, especially after the Root mobile phone, the application itself can enhance their own permissions without the user confirmation, An attack that cannot be completed before the upgrade is completed.

When the security of the mobile phone is threatened, the mobile device international identity code (IMEI, International Mobile Equipment Identity), International Mobile Subscriber Identification Number (IMSI), telephone number, short message, contact information Personal information such as the location of the Global Positioning System (GPS) can be stolen by malicious software. In addition, mobile terminals are usually equipped with a variety of sensor devices, such as GPS, microphone (MIC), camera, etc., which can be used by attackers to steal private information such as user's location, sound, and images in real time.

Therefore, how to effectively ensure the security of personal information in a mobile terminal is an urgent problem to be solved.

Summary of the invention

In order to solve the existing technical problems, embodiments of the present invention provide an information processing method and apparatus, an encryption device, and a computer storage medium.

To achieve the above objective, the technical solution of the embodiment of the present invention is implemented as follows:

An embodiment of the present invention provides an information processing method, including:

Determining that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal;

Encryption related processing is performed on the information on the terminal.

In the above solution, the device that is determined to be connected to the peripheral interface of the terminal is an encryption device that matches the terminal, and includes:

Detecting that a device is accessed by the peripheral interface through the peripheral interface;

Determining that the accessed device is an encrypted device;

It is determined that the hardware identifier of the encryption device matches the encrypted information identifier saved on the terminal.

In the above solution, the encrypting related processing on the information on the terminal includes at least one of the following:

Performing corresponding operations on the encrypted information on the terminal;

Encrypting the unencrypted information on the terminal by using the encryption device matched with the terminal;

Encryption-related functional settings are performed on the terminal.

In the above solution, when the security time limit function is set on the terminal, the encrypting related information on the information on the terminal includes:

Recording each use situation of the encryption device matched with the terminal, and starting timing;

When the duration of the timing reaches the preset security time limit, the user is prompted to perform the corresponding operation;

After the user has not received the instruction to perform the operation within the preset duration, all the terminals on the terminal are deleted. Encrypted information.

In the above solution, during the call, when the transmitted audio data needs to be encrypted, the encrypting and processing the information on the terminal includes:

Turn off the microphone that is provided by the terminal, and disable all recording and collection functions of the terminal;

Acquiring audio data of the user by using the encryption device matched with the terminal, and performing encryption processing on the collected audio data;

The encrypted audio data is sent through the radio unit of the terminal.

In the above solution, when the information is encrypted by the voiceprint cipher, the encrypting and processing the information on the terminal includes:

The voiceprint information of the user is collected by using the encryption device matched with the terminal, and the information to be encrypted is encrypted by using the collected voiceprint information.

The embodiment of the invention also discloses an information processing method, including:

After the encryption device accesses the terminal through the peripheral interface of the terminal, the encryption device collects the voiceprint information of the user;

The encryption device encrypts the information that needs to be encrypted on the terminal that matches the user by using the collected voiceprint information of the user, or encrypts the collected voiceprint information of the user.

The embodiment of the invention further provides an information processing device, comprising: a determining unit and a processing unit; wherein

The determining unit is configured to determine that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal, and determines that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal. Triggering the processing unit;

The processing unit is configured to perform encryption related processing on the information on the terminal after receiving the trigger of the determining unit.

In the above solution, the determining unit includes: a detecting module, a first determining module, and a second determining Fixed module; among them,

The detecting module is configured to trigger the first determining module when a device that accesses the terminal through the peripheral interface is detected;

The first determining module is configured to trigger the second determining module when determining that the accessed device is an encryption device;

The second determining module is configured to trigger the processing unit when the hardware identifier of the encryption device matches the encrypted information identifier saved on the terminal, after receiving the trigger of the first determining module.

In the above solution, the processing unit includes: a recording module, a prompting module, and a deleting module; wherein

The recording module is configured to: when the security time limit function is set on the terminal, record each use situation of the encryption device that matches the terminal, and start timing;

The prompting module is configured to prompt the user to perform a corresponding operation when the duration of the timing reaches a preset security time limit;

The deleting module is configured to delete all the encrypted information on the terminal after receiving the indication that the user performs the operation within the preset duration.

In the above solution, the processing unit includes: a first shutdown module and a first control module; wherein

The first shutdown module is configured to close the microphone that is provided by the terminal when the encrypted audio data needs to be encrypted, and disable all recording and collection functions of the terminal;

The first control module is configured to collect audio data of the user by using the encryption device matched with the terminal, and perform encryption processing on the collected audio data; and pass the encrypted audio data to the radio unit of the terminal. issue.

In the above solution, the processing unit includes: a second shutdown module and a second control module; wherein

The second shutdown module is configured to close the microphone that is provided by the terminal, and disable all recording and collection functions of the terminal;

The second control module is configured to collect the voiceprint information of the user by using the encryption device matched with the terminal, and perform encryption processing on the information that needs to be encrypted by using the collected voiceprint information.

An embodiment of the present invention further provides an encryption device, including: an acquisition unit and an encryption unit;

The collecting unit is configured to collect the voiceprint information of the user after the encryption device accesses the terminal through the peripheral interface of the terminal;

The encryption unit is configured to perform encryption processing on the information that needs to be encrypted on the terminal by using the collected voiceprint information of the user, or configured to perform encryption processing on the collected voiceprint information of the user.

In the above solution, the encryption device further includes: a storage unit configured to store important feature data of the user.

In the above solution, the encryption device further includes: a control unit configured to control work between the collection unit and the encryption unit.

In the above solution, the control unit is further configured to control power of the encryption device.

An embodiment of the present invention further provides a computer storage medium, the computer storage medium comprising a set of instructions that, when executed, cause at least one processor to perform an information processing method as described above.

The information processing method and device, the encryption device, and the computer storage medium of the embodiment of the present invention encrypt the information on the terminal when the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal. Correlation processing, the encryption device is connected to the terminal through a terminal peripheral interface access form such as a headphone interface, a data interface, a near field communication (NFC, Near Field Communication) interface, a WIFI interface, or a Bluetooth interface. To encrypt the device, the information on the terminal can be encrypted and processed, that is, the form of hard encryption and software encryption is adopted, and the encryption reliability is higher. Thus, the security of the personal information in the terminal can be effectively ensured.

DRAWINGS

In the drawings, which are not necessarily to scale, the Like reference numerals with different letter suffixes may indicate different examples of similar components. The drawings generally illustrate the various embodiments discussed herein by way of example and not limitation.

1 is a schematic flow chart of an information processing method according to an embodiment of the present invention;

2 is a schematic flowchart of a method for processing information in a terminal according to Embodiment 3 of the present invention;

3 is a schematic flowchart of a method for processing information in a terminal after the terminal is lost according to Embodiment 4 of the present invention;

4 is a schematic flowchart of a method for implementing a call process security protection according to Embodiment 5 of the present invention;

FIG. 5 is a schematic flowchart of a method for encrypting and processing data according to a voiceprint password according to Embodiment 6 of the present invention; FIG.

6 is a schematic structural diagram of an information processing apparatus according to Embodiment 7 of the present invention;

7 is a schematic structural diagram of an eighth encryption device according to an embodiment of the present invention;

8a is a schematic diagram showing the appearance of an encryption device in an actual application according to Embodiment 8 of the present invention;

FIG. 8b is a schematic diagram of an internal integration module of an encryption device in an actual application according to Embodiment 8 of the present invention.

detailed description

Generally, the way to encrypt a terminal can be divided into two modes: hard encryption and soft encryption. Among them, hard encryption refers to the software to be protected and the hardware encryption lock, some important information, such as encryption key, sensitive data, Authorization files, custom algorithms, etc. are stored in the encryption lock. Hard encryption has the incomparable advantages of soft encryption, such as high encryption strength, good encryption performance, and encryption mode. Live and so on. Soft encryption means: before the mobile terminal sends the information, first calls the information security module to encrypt the information to be sent, and then sends the encrypted information; after receiving the encrypted information, the receiver decrypts using the corresponding decryption software, thereby obtaining Received information. The implementation of soft encryption has the advantages of existing standard security application programming interface (API, Application Programming Interface) products, convenient implementation, good compatibility, etc., but also has some shortcomings, such as: the key management is very complicated. This is also a problem in the implementation of security API products. From the perspective of several existing security API products, the key distribution protocol has defects; in addition, since the implementation of using software encryption is encrypted inside the user's computer, It is easy to provide an attacker with an opportunity to use an analysis program to track, decompile, etc. to attack.

Based on this, in various embodiments of the present invention: when it is determined that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal, the information on the terminal is subjected to encryption related processing.

Embodiment 1

The information processing method of the embodiment of the present invention, as shown in FIG. 1 , includes the following steps:

Step 101: Determine that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal.

Specifically, detecting that a device accesses the terminal through the peripheral interface;

Determining that the accessed device is an encrypted device;

Wherein, when it is determined that the accessed device is not an encrypted device, no operation is performed.

When it is determined that the hardware identifier of the encryption device does not match the encrypted information identifier stored on the terminal, it indicates that the accessed encryption device is not an encryption device that matches the terminal. At this time, no operation is performed.

Step 102: Perform encryption related processing on the information on the terminal.

Here, the specific implementation of this step may include at least one of the following:

Encryption-related functional settings are performed on the terminal.

The corresponding operations on the encrypted information on the terminal may be: copying, migrating, deleting, decrypting, storing, etc.; all the encrypted information may be randomly transferred, and the original can still be replaced after the terminal is replaced. The encrypted information is read, modified, and the like; for the existing encryption method, such as the T-card soft encryption mode, the solution of the embodiment of the present invention, the encrypted information is not restricted by the terminal, and can be migrated at any time, and the user replaces the terminal. After the encrypted information could not be read.

The function setting related to encryption on the terminal may be: setting a security time limit, whether to start an information security processing flow, and the like.

Here, when the security time limit function is set on the terminal, the encrypting related processing on the information on the terminal includes:

After receiving the indication that the user performs the operation within the preset duration, all the encrypted information on the terminal is deleted.

If the user does not receive the indication that the operation is performed within the preset duration, it indicates that the terminal has been lost. After the encrypted information on the terminal is deleted, when the terminal is lost, the other party cannot obtain the encrypted information in the terminal. .

During the process of the call, when the audio data to be transmitted needs to be encrypted, the information about the information on the terminal is encrypted, and specifically includes:

Turning off the MIC that is provided by the terminal, and disabling all recording and collecting functions of the terminal;

Acquiring user audio data by using the encryption device matched with the terminal, and collecting The set of audio data is encrypted;

The encrypted audio data is sent through the radio unit of the terminal.

Correspondingly, the receiving end needs to access an encryption device that matches the encryption device of the sending end. In this way, after receiving the encrypted audio data, the receiving end can decrypt the received audio data by using an encryption device connected to the receiving end. So that the receiving end can recognize the received audio data.

When the information is encrypted by the voiceprint cipher, the encrypting and processing the information on the terminal, specifically:

Among them, the information encrypted by the collected voiceprint information can be arbitrarily transmitted, and the user only needs to decrypt by voiceprint information when using.

When the encrypted information on the terminal needs to be sent, the encrypted information may be sent by the radio unit of the terminal; correspondingly, the receiving end needs to access an encryption device matching the encryption device of the sending end, so that when receiving After receiving the encrypted information, the terminal may use the encryption device accessing the receiving end to decrypt the received information, so that the receiving end can recognize the received information.

The information processing method of the embodiment of the present invention, when determining that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal, performs encryption related processing on the information on the terminal, and the encryption device passes the terminal peripheral interface. With terminal access, because the encryption device needs to be used together, the information on the terminal can be encrypted and processed, that is, the form of hard encryption and software encryption is adopted, and the encryption reliability is higher, so that the individual in the terminal can be effectively guaranteed. Information security.

In addition, when it is determined that the encryption device that matches the terminal has accessed the terminal, The encrypted information is operated accordingly; thus, all the encrypted information can be freely migrated, and the original encrypted information can still be read and modified after the terminal is replaced; the encryption related functional setting is performed on the terminal, when the terminal After the loss, the terminal needs to cooperate with the encryption device to obtain the encrypted information, and also deletes the encrypted information on the terminal, so that others cannot obtain the encrypted data in the terminal.

The encryption device and the terminal are separately arranged, so that even if the terminal is attacked, since the information on the terminal has been encrypted, the encrypted information on the terminal cannot be accessed; and the encryption device is separately set from the terminal, so that the encryption device can simultaneously The use of multiple terminals solves the shortcomings of many users currently using multiple terminals, and only one terminal has an encryption function; in addition, when the user has multiple terminals, as long as the encryption device is not lost, the terminal will be deleted if the terminal is lost. The encrypted information on the lost terminal ensures the secure processing of the encrypted information after the terminal is lost.

The separate arrangement of the encryption device and the terminal makes the cost lower than the existing hard encryption terminal.

When the transmitted audio data needs to be encrypted, the MIC of the terminal is turned off, and all recording and collecting functions of the terminal are disabled, and the audio data is collected by using the encryption device, that is, all the audio data to be transmitted can only be The encryption device collects and encrypts the data, and transmits it through the radio unit of the terminal. When the receiving end does not have a corresponding encryption device, the receiving end cannot recognize the encrypted audio data; the encryption device can be paired or used one-to-many. The receiving end only needs to use the encryption device with the same identification code, so that the encrypted audio data can be clearly restored, and the content of the conversation between the two parties is ensured. Currently, there are already encryption products on the market, which are mostly integrated in the terminal. Although the content of the call can be secure, it is limited to the fixed paired terminal. The solution of the embodiment of the present invention can be used as long as the encryption device is successfully paired. A secure call is not restricted by the terminal being used.

When the information is encrypted by the voiceprint password, the MIC of the terminal is turned off, and all recording and collection functions of the terminal are disabled, and the voiceprint information, that is, all voiceprint information is collected by using the encryption device. It can only be collected by an encryption device, thus ensuring the voiceprint recognition The uniformity of the preparation ensures the minimum difference of the voiceprint information collected each time, and also ensures the safety during the collection of the voiceprint information.

Embodiment 2

The information processing method of the embodiment of the present invention includes: after the encryption device accesses the terminal through the peripheral interface of the terminal, the encryption device collects the voiceprint information of the user; and the encryption device uses the collected voiceprint information of the user to encrypt the terminal. The information is encrypted; or the collected voiceprint information of the user is encrypted.

The voiceprint information may be audio information of the user.

The manner in which the encryption device encrypts the information that needs to be encrypted on the terminal by using the voiceprint information of the collected user may be referred to as a voiceprint encryption method;

Because the encryption device encrypts the collected voiceprint information, the encryption algorithm of the encryption device encrypts the collected voiceprint information, so this method can be called hard encryption.

Embodiment 3

This embodiment uses a mobile phone as an example to describe a method for processing information in a terminal. As shown in FIG. 2, the method includes the following steps:

Step 201: Detect whether a device is connected to the mobile phone, if yes, go to step 202, otherwise, go to step 205;

Here, when it is detected that there is device access, the identification process is started.

Step 202: Determine whether the accessed device is an encryption device, if yes, proceed to step 203, otherwise, perform step 205;

Here, each encryption device has a unique identification code, such as the IMEI as the unique identification code of each encryption device, and determines whether the accessed device encrypts the device by acquiring the unique identification code of the encryption device.

Step 203: Determine whether the hardware identifier of the encryption device matches the saved encrypted information identifier. If yes, go to step 204, otherwise, go to step 205;

Here, when it is determined that the accessed device is an encryption device, the supporting software matched with the encryption device on the mobile phone is started, and the supporting software determines whether the hardware identifier of the encryption device matches the saved encrypted information identifier.

If the hardware identifier of the encryption device matches the saved encryption information identifier, it indicates that the encrypted device that is accessed is an encryption device that matches the mobile phone, and the encryption device can be used to process related information on the mobile phone, if the hardware identifier of the encryption device is If the stored encrypted information identifier does not match, it indicates that the encrypted device that is accessed is not an encrypted device that matches the mobile phone, and cannot process related information on the mobile phone.

Step 204: Perform encryption-related processing on the information on the mobile phone;

Here, when the hardware identifier of the encryption device matches the saved encryption information identifier, the information may be fed back to the user interface (UI, User Interface) of the mobile phone to prompt the user.

After the user sees the prompt information, the information on the mobile phone may be subjected to encryption related processing; wherein the processing related to encrypting the information on the mobile phone may include: performing any operation on the encrypted information in the mobile phone, The encrypted information is encrypted, and the supporting software is functionally set;

Here, any operation is performed on the encrypted information in the mobile phone, such as copying, migrating, deleting, decrypting, storing, etc.

Perform functional settings on the supporting software, such as setting the security time limit, whether to start the information security processing process, etc.

The operations involving information encryption and decryption are performed by an encryption device.

The information that needs to be encrypted and decrypted may include: text information, picture information, and the like.

Step 205: No operation is performed.

Here, in the actual application, during the process of using the mobile phone, the supporting software monitors the encrypted device in real time, and once it detects that the encrypted device is pulled out, immediately stops all operations and closes Closed mobile phone LCD (Liquid Crystal Display), all encrypted information will not be able to be read and operated.

In actual application, the supporting software can be installed on one or more mobile phones at the same time; the user only needs to pair with the encryption device when using the first time, so that a device can encrypt the information of multiple mobile phones. Related operations.

Embodiment 4

In this embodiment, a mobile phone is taken as an example to describe a method for processing information in a terminal after the terminal is lost. As shown in FIG. 3, the method includes the following steps:

Step 300: Set a security time limit function on the supporting software matched with the encryption device.

Here, the user can set the security time limit on the supporting software, and set the security time limit function after setting the security time limit; wherein, the security time limit can be set as needed, for example, setting the security time limit to one week.

Step 301: After setting the security time limit function on the supporting software matched with the encryption device, the supporting software records the usage of each encryption device, and starts timing;

Here, the usage of the recorded encryption device mainly includes: the usage time of the device is encrypted each time.

Step 302: When the duration of the timing reaches the set security time duration, the UI prompts the user that the security time limit has arrived, and prompts the user to perform the corresponding operation, and then proceeds to step 303;

Here, when the time when the encryption device is currently used is longer than the time when the encryption device is used last time, the supporting software restarts timing.

When the duration of the timing reaches the set security time limit, the security mechanism is activated, so that the user security time limit has been reached through the UI, prompting the user to perform the corresponding operation.

In actual application, the prompt operation may be preset in the supporting software, for example, the short message notifies the preset security mobile phone, or uploads the encrypted information to a preset security email.

Step 303: After receiving the instruction that the user performs the operation within the preset time period, the supporting software Delete all encrypted information on your phone.

Here, after the user is prompted, if the user does not receive an instruction to perform the operation within the preset time period, the user has not performed any operation. In this case, the mobile phone may be considered to be lost, and the user is unable to use the mobile phone. The companion software will delete all encrypted information on the phone.

Embodiment 5

In this embodiment, a mobile phone is taken as an example to describe a method for implementing security protection of a call process by encrypting voiceprint information. As shown in FIG. 4, the method includes the following steps:

Step 401: Detect whether a device is connected to the mobile phone, if yes, proceed to step 402, otherwise, perform step 409;

Step 402: Determine whether the accessed device is an encryption device, if yes, proceed to step 403, otherwise, perform step 409;

Step 403: Determine whether the hardware identifier of the encryption device matches the saved encryption information identifier, if yes, go to step 404, otherwise, go to step 409;

In this embodiment, the performing related processing of the information on the mobile phone means: when the user initiates a voice call, encrypting the voice information.

Step 404: When the user initiates a voice call, it is determined whether to activate the call protection function, and if so, step 405 is performed, otherwise step 408 is performed;

Here, when the user initiates a voice call, the UI prompts the user whether to activate the call protection function, and after receiving the user's instruction to start the call protection function, step 405 is performed, and after receiving the instruction that the user does not activate the call protection function, step 408 is performed.

The call protection function can only be performed between two encrypted devices that have already been paired, that is, two mobile devices that have been paired are connected to the mobile phone as the sender and the mobile phone as the recipient.

Step 405: The supporting software turns off the MIC of the mobile phone, and disables all recording and collecting functions of the mobile phone, and then performs step 406;

Here, when receiving the indication that the user initiates the call protection function, the accessory software enters the call protection mode.

Step 406: After the call is established, the encryption device collects audio data of the user, and performs encryption processing on the collected audio data.

Here, the encrypted audio data has no content to be recognized, and must be decrypted to be recognized.

There are many ways to perform the encryption process, and the embodiment of the present invention does not limit the algorithm used for encryption.

Step 407: Send the encrypted audio data to the radio unit of the mobile phone;

Here, after the encrypted audio data received by the receiver, the hardware identifier of the encryption device corresponding to the encrypted audio data is read, and it is determined whether the read hardware identifier matches the hardware identifier of the local encryption device, and the matching is determined. Decrypting the received audio data by using a local encryption device, that is, restoring the received audio data, thereby identifying the audio data; determining When there is no match, the received audio data cannot be restored, and the received audio data cannot be recognized.

Both the calling party and the called party process the audio data in the above manner, so that the two communicating mobile phones establish an environment for encrypted calls.

Step 408: The mobile phone performs a normal voice call.

Step 409: No operation is performed.

It should be noted that, by adopting the solution of the embodiment of the present invention, not only one-to-one secure communication but also one-to-many secure communication can be realized, thereby establishing different encrypted voice or encrypted data transmission, and one-to-many The encrypted data in the secure communication process has a one-to-one correspondence and is not recognized by other mobile phones. When implementing one-to-many secure communication, the unique identification code of the encryption device can be sent to the pair to be matched by using the supporting software or generating a two-dimensional code. The other is connected to the mobile phone with the encryption device, so that the two mobile phones with access to the encryption device are matched. Since the unique identification code of the encryption device needs to be used together with the encryption device, even if the unique identification code is intercepted by a third party, or the unique identification code is leaked, it cannot be used.

When one-to-many secure communication is implemented, the supporting software can mark the corresponding names and permissions of the paired mobile phones with the encrypted device, and in this way, one-to-one or one-to-many pairing can be quickly realized.

Similarly, the two mobile phones that have been paired with the encryption device can also send all the information except the audio data, such as picture information, short message information, and the like.

Embodiment 6

In this embodiment, a mobile phone is taken as an example to describe a method for performing encryption related processing on data by a voiceprint password. As shown in FIG. 5, the method includes the following steps:

Step 501: Detect whether a device is connected to the mobile phone, if yes, go to step 502, otherwise, go to step 506;

Step 502: Determine whether the accessed device is an encryption device, if yes, go to step 503, otherwise, go to step 506;

Step 503: Determine whether the hardware identifier of the encryption device matches the saved encryption information identifier, if yes, go to step 504, otherwise, go to step 506;

In this embodiment, the performing related processing of the information on the mobile phone refers to: performing encryption processing on the information.

Step 504: When it is determined that the voiceprint encryption mode is adopted, the supporting software turns off the MIC of the mobile phone, and disables all the recording and collecting functions of the mobile phone, and then performs step 505;

Here, the encryption device may be in two encryption modes, namely a hard encryption mode and a voiceprint encryption mode; wherein, the hard encryption mode refers to: directly using an encryption algorithm of the encryption device to perform encryption processing; the voiceprint encryption method refers to: using acquisition The voiceprint information is encrypted.

Step 505: The encryption device collects the voiceprint information of the user, and encrypts the information that needs to be encrypted by using the collected voiceprint information.

Here, the encrypted information has no way to identify the content, and must be decrypted before it can be recognized. do not.

After the information that needs to be encrypted is successfully encrypted by voiceprint information, it can be transmitted between the mobile phone and the mobile phone, or between the mobile phone and the computer. Users only need to decrypt the voiceprint information.

Step 506: No operation is performed.

Example 7

To implement the method of the first embodiment, the present embodiment provides an information processing apparatus. As shown in FIG. 6, the apparatus includes: a determining unit 61 and a processing unit 62;

The determining unit 61 is configured to determine that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal, and when determining that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal , trigger processing unit 62;

The processing unit 62 is configured to perform encryption related processing on the information on the terminal after receiving the trigger of the determining unit 61.

The determining unit 61 further includes: a detecting module, a first determining module, and a second determining module; wherein

a detecting module, configured to trigger the first determining module when a device that accesses the terminal through the peripheral interface is detected;

a first determining module, configured to: when determining that the accessed device is an encrypted device, triggering a second determining module;

The second determining module is configured to trigger the processing unit 62 when it is determined that the hardware identifier of the encryption device matches the encrypted information identifier saved on the terminal after receiving the trigger of the first determining module.

Here, when it is determined that the accessed device is not an encrypted device, the first determining module does not perform any operation.

When it is determined that the hardware identifier of the encryption device does not match the encrypted information identifier stored on the terminal, the encrypted device that is accessed is not the encryption device that matches the terminal. At this time, the second determining module does not perform any operation.

The specific implementation of the encryption related processing on the information on the terminal may include at least one of the following:

Encryption-related functional settings are performed on the terminal.

Here, when the security time limit function is set on the terminal, the processing unit 62 includes: a recording module, a prompting module, and a deleting module;

a recording module, configured to record each use situation of the encryption device that matches the terminal, and start timing;

The prompting module is configured to prompt the user to perform corresponding operations when the duration of the timing reaches a preset security time limit;

The module is deleted, and all the encrypted information on the terminal is deleted after the user does not receive the instruction to perform the operation within the preset duration.

If the terminal does not receive the indication that the user performs the operation within the preset duration, it indicates that the terminal has been lost. After the deletion module deletes the encrypted information on the terminal, when the terminal is lost, the other party cannot obtain the already Encrypt information.

During the call, when it is required to encrypt the transmitted audio data, the processing unit 62 may include: a first shutdown module and a first control module; wherein

a first shutdown module configured to turn off the MIC that is provided by the terminal, and disable all recording and collection functions of the terminal;

The first control module is configured to collect the audio data of the user by using the encryption device matched with the terminal, and perform encryption processing on the collected audio data; and send the encrypted audio data to the radio unit of the terminal.

When the information is encrypted by the voiceprint password, the processing unit 62 may include: a second shutdown module and a second control module; wherein

a second shutdown module configured to turn off the MIC that is provided by the terminal, and disable all recording and collection functions of the terminal;

In actual application, the detecting module, the first determining module, the second determining module, the recording module, the deleting module, the first closing module, the first control module, the second closing module, and the second control module It can be implemented by a processor (CPU, Central Processing Unit), a digital signal processor (DSP) or a Field-Programmable Gate Array (FPGA) in the information processing device; the prompting module can be used in the information processing device Display implementation.

In the information processing apparatus of the embodiment of the present invention, when the determining unit determines that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal, the processing unit performs encryption related processing on the information on the terminal, and the encryption device Through the peripheral interface of the terminal and the terminal access, because the encryption device needs to be used together, the information on the terminal can be encrypted and processed, that is, the form of hard encryption and software encryption is adopted, and the encryption reliability is higher, so that the information can be effectively Ensure the security of personal information in the terminal.

In addition, when it is determined that the encryption device matched with the terminal has accessed the terminal, the processing unit performs corresponding operations on the encrypted information on the terminal; thus, all the encrypted information can be freely migrated, and the original encryption can still be performed after the terminal is replaced. The information is read and modified; the functional setting related to encryption is performed on the terminal. After the terminal is lost, the encrypted information can be obtained because the terminal needs to cooperate with the encryption device, and the encrypted information is also deleted. Encrypted information, so that others cannot obtain encrypted data in the terminal.

When the transmitted audio data needs to be encrypted, the first shutdown module turns off the MIC that is provided by the terminal, and disables all recording and collection functions of the terminal, and the first control module utilizes The secret device collects audio data, that is, all audio data to be transmitted can only be collected and encrypted by the encryption device, and transmitted through the radio unit of the terminal. When the receiving end does not have a corresponding encryption device, the receiving end cannot The encrypted audio data is identified; the encryption device can be paired or used one-to-many, and the receiving end only needs to use the encryption device with the same identification code, so that the encrypted audio data can be clearly restored, and the content of the conversation between the two parties is ensured. Currently, there are already encryption products on the market, which are mostly integrated in the terminal. Although the content of the call can be secure, it is limited to the fixed paired terminal. The solution of the embodiment of the present invention can be used as long as the encryption device is successfully paired. A secure call is not restricted by the terminal being used.

When the information is encrypted by the voiceprint password, the second shutdown module turns off the MIC that is provided by the terminal, and disables all recording and collection functions of the terminal, and the second control module uses the encryption device to collect the voiceprint. Information, that is, all voiceprint information can only be collected by the encryption device, thus ensuring the uniformity of the voiceprint recognition device, ensuring the minimum difference of the voiceprint information collected each time, and also ensuring the security during the voiceprint information collection process. .

Example eight

To implement the method of the second embodiment, the embodiment provides an encryption device. As shown in FIG. 7, the encryption device includes: an acquisition unit 71 and an encryption unit 72;

The collecting unit 71 is configured to collect the voiceprint information of the user after the encryption device accesses the terminal through the peripheral interface of the terminal;

The encryption unit 72 is configured to perform encryption processing on the information that needs to be encrypted on the terminal by using the collected voiceprint information of the user, or configured to perform encryption processing on the collected voiceprint information of the user.

The voiceprint information may be audio information of the user.

The encryption unit 72 uses the collected voiceprint information of the user to encrypt the information that needs to be encrypted on the terminal, which may be referred to as a voiceprint encryption method. The encryption unit 72 encrypts the collected voiceprint information by using an encryption device. The encryption algorithm of the own encrypts the collected voiceprint information, so this method can be called hard encryption.

The encryption device may further include: a storage unit configured to store important feature data of the user; the storage unit may serve as an extended data storage of the user; wherein the important feature data is determined according to a user's needs.

The encryption device may further include: a control unit configured to control operations between the units including the acquisition unit 71 and the encryption unit 72; and may be further configured to control power of the encryption device to supply power to the encryption device.

In practical applications, the acquisition unit 71 can be implemented by an MIC in an encryption device, and the encryption unit 72 and the control unit can be implemented by a CPU, a DSP or an FPGA in the encryption device, and the storage unit can be implemented by a memory in the encryption device.

In practical application, as shown in Figure 8a, the specifications of the encryption device conform to the standards of the peripheral interface of the mobile phone, such as a headphone interface, a USB interface, a WIFI interface, a Bluetooth interface, an NFC interface, etc., accordingly, the encryption device can be wired and wireless. When connecting to a terminal, when a different interface is used, in order to implement the function of the voice device to collect voiceprint information, the terminal needs to support the related audio protocol corresponding to the adopted interface; for example, the selected interface is a USB interface. In order to implement the function of the voice device to collect voiceprint information, the terminal itself needs to support the function of audio transmission through the USB interface. If the selected interface is a WIFI interface, in order to implement the function of the voice device to collect voiceprint information, the terminal needs to support the terminal itself. The function of transmitting audio on the WIFI interface. The shape of the encryption device can be made into various accessories, such as earrings and other wearing jewelry, or can be hung in the storage sleeve of the key chain, which is convenient for the user to carry around, and can also be stored separately from the terminal when the user does not use it, Security.

In actual application, as shown in FIG. 8b, the encryption device is internally integrated with an audio module, a hardware encryption module, a storage module, and an integrated control module; respectively corresponding to the acquisition unit, the encryption unit, the storage unit, and the control unit in FIG.

The audio module collects audio information by using the MIC itself, and simultaneously distinguishes the voiceprint information;

The hardware encryption module is the core component of the encryption device, and has built-in Ukey hard encryption information for users. The main encryption algorithm can be placed inside the hardware encryption module to ensure the security of the user information, and all data is encrypted and decrypted by the hardware encryption module;

The storage module has a built-in memory for storing user information and information on the terminal, and the internal memory can be used as a user extended data storage to store important feature data;

An integrated control module that controls the power of the encryption device while controlling the operation between the modules.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) including computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. Instructions are provided for implementation The steps of a function specified in a block or blocks of a flow or a flow and/or a block diagram of a flow chart.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

An information processing method, the method comprising:

Determining that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal;

Encryption related processing is performed on the information on the terminal.
The method of claim 1, wherein the determining that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal comprises:

Detecting that a device is accessed by the peripheral interface through the peripheral interface;

Determining that the accessed device is an encrypted device;

It is determined that the hardware identifier of the encryption device matches the encrypted information identifier saved on the terminal.
The method according to claim 1, wherein said encrypting related information on said terminal comprises at least one of:

Performing corresponding operations on the encrypted information on the terminal;

Encrypting the unencrypted information on the terminal by using the encryption device matched with the terminal;

Encryption-related functional settings are performed on the terminal.
The method according to claim 1, wherein when the security time limit function is set on the terminal, the encrypting related information on the information on the terminal includes:

Recording each use situation of the encryption device matched with the terminal, and starting timing;

When the duration of the timing reaches the preset security time limit, the user is prompted to perform the corresponding operation;

After receiving the indication that the user performs the operation within the preset duration, all the encrypted information on the terminal is deleted.
The method according to claim 1, wherein during the call, when the transmitted audio data needs to be encrypted, the encrypting related information on the information on the terminal includes:

Turn off the microphone that is provided by the terminal, and disable all recording and collection functions of the terminal;

Acquiring audio data of the user by using the encryption device matched with the terminal, and performing encryption processing on the collected audio data;

The encrypted audio data is sent through the radio unit of the terminal.
The method of claim 1, wherein the encrypting the information on the terminal when the information is encrypted by the voiceprint cipher comprises:

Turn off the microphone that is provided by the terminal, and disable all recording and collection functions of the terminal;

The voiceprint information of the user is collected by using the encryption device matched with the terminal, and the information to be encrypted is encrypted by using the collected voiceprint information.
An information processing method, the method comprising:

After the encryption device accesses the terminal through the peripheral interface of the terminal, the encryption device collects the voiceprint information of the user;

The encryption device encrypts the information that needs to be encrypted on the terminal that matches the user by using the collected voiceprint information of the user, or encrypts the collected voiceprint information of the user.
An information processing apparatus, the apparatus comprising: a determining unit and a processing unit; wherein

The determining unit is configured to determine that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal, and determines that the device accessed through the peripheral interface of the terminal is an encryption device that matches the terminal. Triggering the processing unit;

The processing unit is configured to perform encryption related processing on the information on the terminal after receiving the trigger of the determining unit.
The apparatus according to claim 8, wherein the determining unit comprises: a detecting module, a first determining module, and a second determining module; wherein

The detecting module is configured to trigger the first determining module when a device that accesses the terminal through the peripheral interface is detected;

The first determining module is configured to: when the determined access device is an encrypted device, trigger the Second determining module;

The second determining module is configured to trigger the processing unit when the hardware identifier of the encryption device matches the encrypted information identifier saved on the terminal, after receiving the trigger of the first determining module.
The device according to claim 8, wherein the processing unit comprises: a recording module, a prompting module, and a deleting module; wherein

The recording module is configured to: when the security time limit function is set on the terminal, record each use situation of the encryption device that matches the terminal, and start timing;

The prompting module is configured to prompt the user to perform a corresponding operation when the duration of the timing reaches a preset security time limit;

The deleting module is configured to delete all the encrypted information on the terminal after receiving the indication that the user performs the operation within the preset duration.
The apparatus according to claim 8, wherein the processing unit comprises: a first shutdown module and a first control module; wherein

The first shutdown module is configured to close the microphone that is provided by the terminal when the encrypted audio data needs to be encrypted, and disable all recording and collection functions of the terminal;

The first control module is configured to collect audio data of the user by using the encryption device matched with the terminal, and perform encryption processing on the collected audio data; and pass the encrypted audio data to the radio unit of the terminal. issue.
The apparatus according to claim 8, wherein the processing unit comprises: a second shutdown module and a second control module; wherein

The second shutdown module is configured to close the microphone that is provided by the terminal, and disable all recording and collection functions of the terminal;

The second control module is configured to collect the voiceprint information of the user by using the encryption device matched with the terminal, and encrypt the information that needs to be encrypted by using the collected voiceprint information. Reason.
An encryption device, the encryption device includes: an acquisition unit and an encryption unit;

The collecting unit is configured to collect the voiceprint information of the user after the encryption device accesses the terminal through the peripheral interface of the terminal;

The encryption unit is configured to perform encryption processing on the information that needs to be encrypted on the terminal by using the collected voiceprint information of the user, or configured to perform encryption processing on the collected voiceprint information of the user.
The encryption device according to claim 13, wherein the encryption device further comprises: a storage unit configured to store important feature data of the user.
The encryption device according to claim 13, wherein the encryption device further comprises: a control unit configured to control an operation between the collection unit and the encryption unit.
The encryption device according to claim 15, wherein said control unit is further configured to control a power source of said encryption device.
A computer storage medium comprising a set of instructions that, when executed, cause at least one processor to perform the information processing method of any one of claims 1 to 6 or perform the method of claim 7 The information processing method described.