WO2016180234A1

WO2016180234A1 - Method and apparatus for building secure environment

Info

Publication number: WO2016180234A1
Application number: PCT/CN2016/080355
Authority: WO
Inventors: 张伟; 李磊; 张春
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-10-21
Filing date: 2016-04-27
Publication date: 2016-11-17
Also published as: CN106611113A

Abstract

Disclosed are a method and an apparatus for building a secure environment. The method comprises: when a terminal screen is in an unlocked state, detecting a touch event of a user on the terminal screen; during a touch of the user, collecting fingerprint information of the user now and then by using the terminal screen; when the collected fingerprint information matches prestored fingerprint information, making a response to the touch event. By means of the solution of the present invention, during a touch operation of a user, a fingerprint of the user is acquired, and authentication of the fingerprint is completed in the background. When the fingerprint is authenticated, a system may correctly respond to an operation of the user, so that it is implemented that without the perception by a user, a full-time lock of an application environment of a terminal is built, thereby eliminating a secure void of the terminal, and ensuring information security of the terminal to the greatest extent.

Description

Safety environment construction method and device

Technical field

The present invention relates to the field of mobile communications, and in particular, to a method and apparatus for constructing a security environment.

Background technique

Most smartphone terminal users currently use character passwords or pattern passwords to ensure the security of the mobile phone system, but there is a risk of leakage of the mobile phone pattern password or digital password.

The user can set the fingerprint password to prevent the password from leaking. However, the fingerprint collection device integrated on the mobile phone needs to collect the fingerprint, which is cumbersome.

Moreover, all of these password security services (including pattern passwords, character passwords, and fingerprint passwords) provide "one-time" security services when unlocked. As for the unlocked users, there is no guarantee that they will be permanent users. You may encounter such a situation: after the phone is unlocked, suddenly there is a rush to put down the phone to handle the matter. At this time, the phone will be in a safe vacuum period before the phone reaches the automatic lock screen time, which is highly likely to be illegal. The user obtains the right to use the mobile phone.

This requires a method to ensure the security of the mobile phone. This method can not only provide the mobile phone lock screen service, but also remove the security vacuum period of the mobile phone to ensure the absolute security of the mobile phone application environment. In order to achieve this goal, the existing solution is to use the pattern password, the digital password or the specific fingerprint device to perform irregular verification on the user when the user uses the mobile phone, but the verification method makes the user feel very disgusted.

It can be seen that the application environment security protection scheme in the related art is a “one-time” security verification based on a pattern password, a character password, and a specific device fingerprint password, that is, once the verification is passed, the user's security policy is not identified twice or from time to time; Even if there is a secondary verification strategy, the pattern password, the character password, and the specific device fingerprint password are used to interact with the user. This method does not detect in time whether the user after the verification passes changes, and thus cannot guarantee the mobile application environment. And absolute privacy of personal privacy.

Summary of the invention

The invention provides a method and a device for constructing a security environment, which are used to solve the problem that a security scheme in the related art has a security vulnerability and thus has a security risk.

According to an aspect of the present invention, a security environment construction method is provided, including:

When the terminal screen is in the unlocked state, the touch event of the user to the terminal screen is detected;

When the user touches, the fingerprint information of the user is collected from time to time through the terminal screen;

When the collected fingerprint information matches the pre-stored fingerprint information, the touch event is responded to.

Optionally, in the method of the present invention, when the terminal is in the security mode, if the terminal screen is in the unlocked state, when the user touches the touch event of the terminal screen, when the user touches, the terminal screen is used. The fingerprint information of the user is collected from time to time, and when the collected fingerprint information matches the pre-stored fingerprint information, the touch event is responded.

Optionally, in the method of the present invention, the user touches the touch event of the terminal screen, and when the user touches, collects the fingerprint information of the user from the terminal screen, including:

A touch event of the user to the terminal screen is detected;

Detecting whether the touch event is a touch event for a protection item pre-selected by the user. In the case of the user, when the user touches, the fingerprint information of the user is collected through the terminal screen.

Optionally, in the method of the present invention, the types of the protection items include: system software, third-party software installed by a user, and user files.

Optionally, in the method of the present invention, when the collected fingerprint information does not match the pre-stored fingerprint information, the touch event is not responded, and the lock screen processing is performed.

According to another aspect of the present invention, a security environment construction apparatus is provided, including:

The detecting module is configured to detect a touch event of the user to the terminal screen when the terminal screen is in an unlocked state, and trigger a fingerprint collection and verification module;

The fingerprint collection and verification module is configured to collect the fingerprint information of the user from time to time through the terminal screen when the user touches, and trigger the execution module when the collected fingerprint information matches the pre-stored fingerprint information;

An execution module configured to respond to the touch event.

Optionally, in the device of the present invention, the detecting module is configured to: when the terminal is in the safe mode, if the terminal screen is in the unlocked state, when the touch event of the user to the terminal screen is detected, the detecting device is triggered. The fingerprint acquisition and verification module.

Optionally, in the device of the present invention, the detecting module is configured to detect a touch event of the user on the screen of the terminal when the screen of the terminal is in an unlocked state, and detect whether the touch event is pre-selected for the user. The touch event of the fixed protection item, in the case of YES, triggers the fingerprint collection and verification module.

Optionally, in the device of the present invention, the types of the protection items include: system software, third-party software installed by a user, and user files.

Optionally, in the device of the present invention, the execution module is further configured to not respond to the touch event when the collected fingerprint information does not match the pre-stored fingerprint information, and perform a lock screen process.

Another embodiment of the present invention provides a computer storage medium, where the computer storage medium stores execution instructions. The execution instructions are used to perform the method in the above embodiments.

The beneficial effects of the present invention are as follows:

According to the solution of the present invention, in the user touch operation, the user fingerprint is obtained, and the verification is completed in the background, and the verification is correct, and the system can correctly respond to the user operation, thereby realizing the terminal application environment without the user's perception. The full-time lock removes the terminal security vacuum period and ensures the security of the terminal information to the greatest extent.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or related art, the drawings used in the embodiments or the related art description will be briefly described below. Obviously, the drawings in the following description are merely Some embodiments of the present invention may also be used to obtain other drawings based on these drawings without departing from the prior art.

FIG. 1 is a flowchart of a method for constructing a security environment according to Embodiment 1 of the present invention;

2 is a flowchart of a method for constructing a security environment according to an application example 1 of the present invention;

3 is a flowchart of a security environment construction method provided by application example 2 of the present invention;

FIG. 4 is a structural block diagram of a security environment construction apparatus according to Embodiment 2 of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

Embodiment 1

An embodiment of the present invention provides a security environment construction method, which is applied to a terminal. As shown in FIG. 1 , the method may include:

Step S101: When the terminal screen is in an unlocked state, detecting a touch event of the user on the terminal screen;

Step S102, when the user touches, collect the fingerprint information of the user from time to time through the terminal screen;

Step S103: When the collected fingerprint information matches the pre-stored fingerprint information, respond to the touch event.

In summary, in the process of using the terminal, the user obtains the fingerprint of the user through the touch operation of the user, and performs verification in the background, and the verification is correct, and the system can correctly respond to the user operation, thereby realizing that the user is not aware. In this case, a full-time lock of the terminal application environment is constructed to ensure the security of the terminal information to the greatest extent.

In order to clarify the objects, technical solutions and advantages of the present invention, several specific and preferred embodiments are presented below to refine and optimize the function of the method of the present invention. It should be noted that, in the case of no conflict, the following features can be arbitrarily combined with each other.

In order to make the solution of the present invention more controllable, two triggering modes that can trigger the execution of the method in this embodiment are listed below. Of course, the following triggering modes are merely enumerated, not exhaustive, and those skilled in the art can according to their own needs. Make flexible settings.

Manner 1: The method described in this embodiment is used as a function item that can be turned off and on. The user can flexibly enable or disable the function corresponding to the method in this embodiment.

Manner 2: The method described in this embodiment is implemented in a security system environment; for example, in the process of starting the user, whether the user enters the normal system environment or the security system environment, when entering the security system environment (ie, the terminal) Running in safe mode), then the method described in this embodiment is automatically enabled.

In a preferred embodiment of the present invention, the user may also implement the method described in this embodiment for some applications or content that need to be protected according to his own needs. At this time, step S101 is implemented as follows: when the terminal screen is in the unlocked state, the touch event of the user to the terminal screen is detected, and it is detected whether the touch event is a touch event for the protection item selected by the user in advance. In the case of YES, steps S102 and S103 are performed.

The touch event for the protection item pre-selected by the user includes clicking to open the protection item and all touch events during the operation after the protection item is turned on. That is, the protection item is locked in full time. Among them, the types of protection items include: system software, third-party software installed by users, and user files.

In the embodiment of the present invention, when the user touches, the user fingerprint is collected through the screen to increase the fingerprint matching success rate. As long as one fingerprint information matches the pre-stored fingerprint information, it is determined that the matching is successful, and the touch operation is performed. Respond.

Optionally, in the embodiment of the present invention, when the collected fingerprint information does not match the pre-stored fingerprint information, the touch event is not responded, and the lock screen processing is performed.

In order to explain the present invention more clearly, the present invention will be described in detail below with reference to the flowchart of the method and the specific application examples.

Application example one:

This application example describes a process of time-checking a user's touch operation using a method of time-finding fingerprint verification.

Before implementing the method of the present invention, fingerprint information of a legitimate user needs to be collected in advance. Because the user has different habits and which finger touches the screen, the fingerprint information of all the fingers of the user is preferably collected to increase the matching success rate.

As shown in FIG. 2, the security environment construction method provided by this application example includes:

S201: The mobile phone enters the security system environment opened up.

S202: Start the fingerprint collection and verification module and run in the background; wherein the fingerprint collection and verification module initiates two synchronized concurrent threads, one acquires a fingerprint and one matches a fingerprint.

S203: Monitor user touch operation.

S204: When the user touches the screen and has a touch operation, the user fingerprint information is collected and matched at the same time, and when the user's finger leaves the screen, the fingerprint collection and matching are stopped.

S205: When the fingerprint information in S204 has at least one match, step S206 is performed; otherwise, step S207 is performed.

In step S206, the system normally responds to the user touch operation, and then continues to loop S203, S204, and S205.

In step S207, when the information does not match, the user is not responded to and the screen is locked.

Application example two:

This application example describes the process of verifying the touch operation of each individual application that needs to be protected by using the method of time fingerprint verification. This process is different from the time verification of the entire system. This process is only used when the user clicks the application with a finger. Icon, collection and verification when launching a single app or content for security protection.

As shown in FIG. 3, the security environment construction method provided by this application example includes:

S301: The mobile phone enters the security system environment opened up.

S302: Start the fingerprint collection and verification module and run in the background; wherein the fingerprint collection and verification module initiates two synchronized concurrent threads, one acquires a fingerprint and one matches a fingerprint.

S303: Monitor user touch operation.

S304: When the user clicks the application icon, the user fingerprint information is collected and matched at the same time, and the fingerprint is stopped and captured when the user's finger leaves the screen.

S305: When the fingerprint information in S304 has at least one match, step S306 is performed; otherwise, step S307 is performed.

In step S306, the system normally responds to the user operation and starts the application. Preferably, after the application is started, the loops S303, S304, and S305 are continued to protect the scene after the application is started.

Step S307, when the information does not match, the user is not allowed to start the operation of the application and locks the screen.

In summary, it can be seen that after the normal operation of the mobile phone (after the wake-up of the mobile phone without the traditional password or after the mobile phone with the traditional password is unlocked), when the user is in the security system environment mode, the fingerprint acquisition and verification module is realized. It is through the verification system running in the background, without interacting with the user (that is, in the case that the user is not aware of it), using the touch screen of the mobile phone when the user operates, when the finger touches the screen to start to leave the screen So far, collect the user's fingerprint from time to time, and compare the collected result with the pre-stored standard data. If the two match, the user is a legitimate user and can use the mobile phone system normally; if the two do not match, the user is determined to have changed. For illegal users, the mobile phone system will not respond The user requests and locks the screen.

Embodiment 2

An embodiment of the present invention provides a security environment construction apparatus, which is applied to a terminal, as shown in FIG. 4, and includes:

The detecting module 410 is configured to detect a touch event of the user to the terminal screen when the terminal screen is in the unlocked state, and trigger a fingerprint collection and verification module;

The fingerprint collection and verification module 420 is configured to collect the fingerprint information of the user from time to time through the terminal screen when the user touches, and trigger the execution module when the collected fingerprint information matches the pre-stored fingerprint information;

The execution module 430 is configured to respond to the touch event.

Based on the above structural framework and implementation principle, several specific and preferred embodiments under the above structure are given below to refine and optimize the functions of the device of the present invention, so that the implementation of the solution of the present invention is more convenient and accurate. Specifically related to the following:

In an embodiment of the present invention, the detecting module 410 is configured to trigger the fingerprint collection and calibration when the terminal touches the terminal screen when the terminal is in the unlocked state when the terminal is in the safe mode. Module 420.

In another embodiment of the present invention, the detecting module 410 is configured to detect a touch event of the user to the terminal screen when the terminal screen is in the unlocked state, and detect whether the touch event is pre-selected for the user. The touch event of the protection item, in the case of YES, triggers the fingerprint acquisition and verification module 420.

Among them, the types of protection items include: system software, third-party software installed by users, and user files.

Optionally, in the embodiment of the present invention, the executing module 430 is further configured to: when the collected fingerprint information does not match the pre-stored fingerprint information, does not respond to the touch event, and performs a lock screen process.

Embodiments of the present invention also provide a storage medium. Optionally, in this embodiment, an execution instruction is stored in the storage medium, and the execution instruction is used to execute the foregoing method.

Optionally, in the embodiment, the foregoing storage medium may include, but is not limited to, a USB flash drive, a Read-Only Memory (ROM), and a Random Access Memory (RAM). A variety of media that can store program code, such as a hard disk, a disk, or an optical disk.

In summary, the present invention collects the fingerprint of the current user based on the touch operation of the user during the user's use of the terminal, and verifies the fingerprint, verifies the correctness, and responds correctly to the user operation, thereby realizing that the user is not aware. In this case, a full-time lock of the terminal application environment is constructed to ensure the security of the terminal information to the greatest extent.

The various embodiments in the specification are described in a progressive manner, and the same or similar parts between the various embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. Especially for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts are referred to the part of the method embodiment. It can be explained.

While the present invention has been described by the embodiments of the invention, it will be understood that Thus, it is intended that the present invention cover the modifications and modifications of the invention

Industrial applicability

As described above, the security environment construction method and apparatus provided by the embodiments of the present invention have the following beneficial effects: in the user touch operation, the user fingerprint is obtained, and the verification is completed in the background, the verification is correct, and the system can correctly respond to the user. The operation realizes the full-time lock of the terminal application environment without the user's perception, and removes the terminal security vacuum period, thereby ensuring the security of the terminal information to the greatest extent.

Claims

A security environment construction method is applied to a terminal, including:

When the terminal screen is in the unlocked state, the touch event of the user to the terminal screen is detected;

When the user touches, the fingerprint information of the user is collected from time to time through the terminal screen;

When the collected fingerprint information matches the pre-stored fingerprint information, the touch event is responded to.
The method of claim 1 wherein said method comprises:

When the terminal is in the safe mode, if the terminal screen is in the unlocked state, when the user touches the touch event of the terminal screen, when the user touches, the fingerprint information of the user is collected through the terminal screen, and the fingerprint is collected. When the information matches the pre-stored fingerprint information, the information is responded to by the touch event.
The method of claim 1 or 2, wherein the detecting a touch event of the user on the screen of the terminal, when the user touches, collecting the fingerprint information of the user from the terminal screen, including:

A touch event of the user to the terminal screen is detected;

Detecting whether the touch event is a touch event for a protection item pre-selected by the user. In the case of the user, when the user touches, the fingerprint information of the user is collected through the terminal screen.
The method of claim 3, wherein the type of protection item comprises: system software, user-installed third party software, and user files.
The method according to claim 1 or 2 or 4, wherein when the collected fingerprint information does not match the pre-stored fingerprint information, the touch event is not responded, and the screen lock processing is performed.
A security environment construction device is applied to a terminal, including:

The detecting module is configured to detect a touch event of the user to the terminal screen when the terminal screen is in an unlocked state, and trigger a fingerprint collection and verification module;

The fingerprint collection and verification module is configured to collect the fingerprint information of the user from time to time through the terminal screen when the user touches, and trigger the execution module when the collected fingerprint information matches the pre-stored fingerprint information;

An execution module configured to respond to the touch event.
The device of claim 6, wherein the detecting module is configured to: when the terminal is in the unlocked state when the terminal is operating in the safe mode, triggering the touch event when the user touches the terminal screen The fingerprint acquisition and verification module.
The device of claim 6 or 7, wherein the detecting module is configured to detect a touch event of the user on the screen of the terminal when the screen of the terminal is in an unlocked state, and detect whether the touch event is for the user The touch event of the pre-selected protection item, if yes, triggers the fingerprint acquisition and verification module.
The apparatus of claim 8, wherein the type of the protection item comprises: system software, user-installed third Party software and user files.
The device of claim 6 or 7 or 9, wherein the execution module is further configured to not respond to the touch event when the collected fingerprint information does not match the pre-stored fingerprint information, and Lock screen processing.
A computer storage medium storing execution instructions for performing the method of any one of claims 1 to 5.