WO2017020449A1

WO2017020449A1 - Fingerprint reading method and user equipment

Info

Publication number: WO2017020449A1
Application number: PCT/CN2015/095617
Authority: WO
Inventors: 樊立; 柴玉东; 乔雁龙
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-07-31
Filing date: 2015-11-26
Publication date: 2017-02-09
Also published as: CN105550558B; CN105550558A

Abstract

Disclosed are a fingerprint reading method and user equipment. The method comprises: receiving a fingerprint reading request carrying an identifier of a target requestor; in response to the fingerprint reading request, determining, according to the identifier, whether the target requestor has a fingerprint reading permission; obtaining encrypted target fingerprint information from a preset fingerprint storage area when the target requestor has the fingerprint reading permission; and sending a sending request comprising the encrypted target fingerprint information and the identifier to a cloud, so that the cloud decrypts the encrypted target fingerprint information in response to the sending request, and send the decrypted target fingerprint information to the target requestor. It can be seen that, by means of the embodiments of the present invention, user equipment can authenticate a device or an application program that reads a fingerprint, and decrypt stored encrypted fingerprint information by using a cloud, thereby improving the security of a fingerprint stored in an intelligent device.

Description

Fingerprint reading method and user equipment

This application claims priority to Chinese Patent Application No. 201510470218.8, entitled "Fingerprint Reading Method and User Equipment" by the Chinese Patent Office on July 31, 2015, the entire contents of which are incorporated herein by reference. In the application.

Technical field

The present invention relates to the field of Internet technologies, and in particular, to a fingerprint reading method and user equipment.

Background technique

With the development of smart devices (such as smart phones, PADs, etc.), the security of smart devices has been valued by users. In order to improve the security of smart devices, more and more smart devices have fingerprint recognition capabilities. Although the fingerprint recognition function can improve the security of the smart device, in practical applications, the illegal molecule can easily obtain the fingerprint of the user stored in the smart device by using a malicious program or a malicious terminal. After an illegal molecule steals a user's fingerprint, the intelligent device can be illegally operated by the stolen user fingerprint, which causes a great security risk to the smart device. Therefore, how to improve the security of fingerprints stored by smart devices is an urgent problem to be solved.

Summary of the invention

The embodiment of the invention discloses a fingerprint reading method and a user equipment, which can authenticate a device or an application for reading a fingerprint, and decrypt the stored encrypted fingerprint information through the cloud, thereby improving the fingerprint stored by the smart device. safety.

The embodiment of the invention discloses a fingerprint reading method, and the method comprises:

Receiving a fingerprint reading request carrying an identifier of the target requester;

Responding to the fingerprint reading request, determining, according to the identifier, whether the target requester has fingerprint reading authority;

Obtaining the encrypted target fingerprint information from the preset fingerprint storage area when the target requester has the fingerprint reading authority;

Sending the encrypted target fingerprint information and the sent request to the cloud, so that the cloud decrypts the encrypted target fingerprint information in response to the sending request, and decrypts The target fingerprint information is sent to the target requester.

The embodiment of the invention further discloses a user equipment, where the user equipment comprises:

a first receiving module, configured to receive a fingerprint reading request that carries an identifier of the target requester;

a determining module, configured to determine, according to the identifier, whether the target requester has a fingerprint reading permission according to the fingerprint reading request;

An acquiring module, configured to: when the determining module determines that the target requester has the fingerprint reading permission, obtain the encrypted target fingerprint information from the preset fingerprint storage area;

a first sending module, configured to send, to the cloud, a sending request that includes the encrypted target fingerprint information and the identifier, so that the cloud decrypts the encrypted target fingerprint information in response to the sending request, and The decrypted target fingerprint information is sent to the target requester.

In the embodiment of the present invention, after receiving the fingerprint reading request carrying the identifier of the target requester, the user equipment responds to the fingerprint reading request, and determines whether the target requester has the fingerprint reading authority according to the identifier of the target requester; When the requester has the fingerprint reading permission, the user equipment obtains the encrypted target fingerprint information from the preset fingerprint storage area, and sends the encrypted target fingerprint information and the sending request of the identifier to the cloud, so that the cloud responds to the sending request. The encrypted target fingerprint information is decrypted, and the decrypted target fingerprint information is sent to the target requester. It can be seen that, by implementing the embodiment of the present invention, the user equipment can authenticate the device or application that reads the fingerprint, and decrypt the stored encrypted fingerprint information through the cloud, thereby improving the security of the fingerprint stored by the smart device.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the embodiments will be briefly described below. It is obvious that the drawings in the following description are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without paying any creative work.

1 is a schematic flow chart of a fingerprint reading method according to an embodiment of the present invention;

2 is a schematic flow chart of another fingerprint reading method according to an embodiment of the present invention;

3 is a schematic flow chart of another fingerprint reading method according to an embodiment of the present invention;

4 is a schematic structural diagram of a user equipment according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of another user equipment according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of another user equipment according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The embodiment of the invention discloses a fingerprint reading method and a user equipment, which can authenticate a device or an application for reading a fingerprint, and decrypt the stored encrypted fingerprint information through the cloud, thereby improving the fingerprint stored by the smart device. safety. The details are described below separately.

Please refer to FIG. 1. FIG. 1 is a schematic flowchart diagram of a fingerprint reading method according to an embodiment of the present invention. As shown in FIG. 1, the fingerprint reading method may include the following steps.

S101. Receive a fingerprint reading request carrying an identifier of a target requester.

In the embodiment of the present invention, the user equipment receives the fingerprint reading request carrying the identifier of the target requester. The user equipment may include, but is not limited to, user equipment such as a smart phone, a tablet computer, a notebook computer, a desktop computer, and a fingerprint lock. The operating system of the user equipment may include, but is not limited to, an Android operating system, an IOS operating system, a Symbian operating system, a Blackberry operating system, a Windows operating system, and the like, which are not limited in the embodiment of the present invention.

In this embodiment of the present invention, the target requester may be any device other than the user equipment or the target requester may be any application installed on the user equipment. The user equipment may receive a fingerprint reading request sent by a device other than the local end, or the user equipment may receive a fingerprint reading request sent by an application installed at the local end.

In the embodiment of the present invention, the identifier of the target requester is data capable of identifying the unique identity of the target requester. When the user equipment receives a device to send a fingerprint reading request, the fingerprint reading request will carry the identifier of the device. For example, the identity of the device can be the MAC address of the device. When the user equipment receives an application to send a fingerprint read request, the fingerprint read request will carry the identifier of the application.

S102. Respond to the fingerprint reading request, and determine, according to the identifier, whether the target requester has fingerprint reading authority.

In the embodiment of the present invention, after receiving the fingerprint reading request, the user equipment extracts the fingerprint reading request. The identifier of the target requester carried, and judges whether the target requester has the fingerprint reading authority according to the identifier of the target requester. When the user equipment determines that the target requester has the fingerprint reading authority, step S103 is performed. When the user equipment determines that the target requester does not have the fingerprint reading permission, the user equipment may output prompt information for prompting that the illegal requester requests to read the fingerprint, so that the user takes timely measures to prevent the stored fingerprint from being Pirates.

As an optional implementation manner, the specific implementation manner of the user equipment determining whether the target requester has the fingerprint reading authority according to the identifier of the target requester in response to the fingerprint reading request may include the following steps:

11) the user equipment responds to the fingerprint reading request, and outputs target prompt information according to the identifier of the target requester, where the target prompt information is used to prompt whether the target requester is allowed to read the fingerprint;

12) the user equipment receives the target response information input by the user for the target prompt information;

13) When the target response information is used to indicate that the target requester is allowed to read the fingerprint, the user equipment determines that the target requester has the fingerprint reading authority; when the target response information is used to indicate that the target requester is not allowed to read the fingerprint, the user The device determines that the target requester does not have fingerprint read permission.

In this embodiment, after receiving the fingerprint reading request, the user equipment responds to the fingerprint reading request and outputs the target prompt information according to the identifier of the target requester. The target prompt information is used to prompt whether the target requester is allowed to read the fingerprint. The user may input target response information for indicating that the target requester is allowed to read the fingerprint for the target prompt information, or the user may input target response information for indicating that the target requester is not allowed to read the fingerprint for the target prompt information.

For example, after the user equipment receives the fingerprint reading request sent by the e-commerce application, the user equipment acquires the name of the e-commerce application according to the identifier of the e-commerce application, and outputs an e-commerce application name for prompting whether the electric power is allowed. The merchant application reads the target prompt information of the fingerprint. When the user inputs target response information for instructing the e-commerce application to read the fingerprint for the target prompt information, the user equipment determines that the e-commerce application has fingerprint reading authority; when the user inputs the target prompt information for indicating no When the e-commerce application is allowed to read the target response information of the fingerprint, the user equipment determines that the e-commerce application does not have the fingerprint reading authority.

21) the user equipment responds to the fingerprint reading request, and determines whether the identifier of the target requester is consistent with the identifier of the authorization requester set in advance;

22) when the identifier of the target requester is consistent with the identifier of the authorization requester, the user equipment determines that the target requester has the fingerprint reading authority; when the identifier of the target requester is inconsistent with the identifier of the authorization requester, the user equipment determines the target requester Does not have fingerprint reading permission.

In this embodiment, the user equipment may pre-set an authorization requester with fingerprint reading authority. For a specific implementation manner of the user equipment that has the authorization of the fingerprint reader, please refer to the embodiment described in FIG. 2 , and details are not described herein.

S103. Acquire encrypted target fingerprint information from a preset fingerprint storage area.

In the embodiment of the present invention, when the user equipment determines that the target requester has the fingerprint reading authority, the user equipment obtains the encrypted target fingerprint information from the preset fingerprint storage area. The user equipment may acquire one or more encrypted target fingerprint information from the preset fingerprint storage area. Optionally, the user equipment may set multiple preset fingerprint storage areas, and store different fingerprint information in different preset fingerprint storage areas. By setting a plurality of preset fingerprint storage areas, it is possible to avoid storing the fingerprint information in one fingerprint storage area, which is beneficial to reducing the risk of fingerprint information being completely stolen.

In the embodiment of the present invention, the fingerprint information stored in the preset fingerprint storage area is encrypted fingerprint information, which can reduce the risk of the fingerprint information being stolen.

S104. Send a sending request that includes the encrypted target fingerprint information and the identifier to the cloud, so that the cloud decrypts the encrypted target fingerprint information in response to the sending request, and the decrypted Target fingerprint information is sent to the target requester.

In the embodiment of the present invention, after acquiring the target fingerprint information, the user equipment generates a sending request, and sends the sending request to the cloud, where the sending request includes the encrypted target fingerprint information and the identifier of the target requester. After receiving the sending request, the cloud will respond to the sending request, decrypt the encrypted target fingerprint information by using a preset decryption algorithm, and send the decrypted target fingerprint information to the target requester according to the identifier of the target requester.

In the embodiment of the present invention, by setting a decryption algorithm in the cloud without setting a decryption algorithm on the user equipment, the attacker can prevent the attacker from cracking the password of the target fingerprint information by decompilation, which is beneficial to improving the security of the fingerprint information stored by the user equipment. .

In the method depicted in FIG. 1, the user equipment receives a fingerprint read carrying the identity of the target requester After the request is fetched, the fingerprint reading request is responded to, according to the identifier of the target requester, whether the target requester has the fingerprint reading authority; when the target requester has the fingerprint reading permission, the user equipment obtains from the preset fingerprint storage area. Encrypting the target fingerprint information, and sending the encrypted target fingerprint information and the sending request of the identifier to the cloud, so that the cloud decrypts the encrypted target fingerprint information in response to the sending request, and sends the decrypted target fingerprint information to the Target requester. It can be seen that, by implementing the embodiment of the present invention, the user equipment can authenticate the device or application that reads the fingerprint, and decrypt the stored encrypted fingerprint information through the cloud, thereby improving the security of the fingerprint stored by the smart device.

Referring to FIG. 2, FIG. 2 is a schematic flowchart diagram of another fingerprint reading method according to an embodiment of the present invention. As shown in FIG. 2, the fingerprint reading method may include the following steps.

S201. The user equipment receives a permission setting instruction input by a user, where the permission setting instruction carries a requester identifier.

In the embodiment of the present invention, the requester is identified as data capable of identifying the unique identity of the requester. The requester identifier may be an identifier of any application installed on the user device, or the requester identifier may be an identifier of any device other than the user device.

S202. The user equipment sends a query instruction including the requester identifier to the cloud, so that the cloud queries whether the requester corresponding to the requester identifier is an illegal requester.

In the embodiment of the present invention, after receiving the permission setting instruction, the user equipment extracts the requester identifier in the permission setting instruction, and sends a query instruction including the requester identifier to the cloud.

In the embodiment of the present invention, optionally, the cloud may count the identifier of the illegal requester by the user of each user equipment. When the number of times a certain requester is marked as an illegal requester by the user exceeds a preset number of times, the cloud may request the request. Set as an illegal requester. After receiving the query instruction, the cloud responds to the query instruction to query whether the requester corresponding to the requester identifier is an illegal requester.

S203. The user equipment receives a response message sent by the cloud for the query instruction.

In the embodiment of the present invention, when the cloud query requester identifier is the same as the identifier of the illegal requester, the cloud determines that the requester corresponding to the requester identifier is an illegal requester, and the cloud sends the user equipment to indicate that the requester identifier corresponds to The requester is the response information of the illegal requester. When the cloud query requester identifier is different from the identifier of the illegal requester, the cloud determines that the requester corresponding to the requester identifier is a legal requester, and the cloud sends the requester corresponding to the requester identifier to the user equipment as a legitimate request. Response information.

S204. When the response message is used to indicate that the requester identifier is a legal requester, the user equipment responds to the permission setting instruction, and sets the requester corresponding to the requester identifier to have a fingerprint reading. The requester of the permission.

In practice, it is found that the cloud can collect a large number of user-marked information about a malicious program or a malicious device. When the user equipment receives the permission setting instruction, the embodiment sends a requester identifier to the cloud, so that the cloud queries the requester identifier. Whether the requester is an illegal requester marked by the user can prevent the user from granting fingerprint reading permission to the unknown illegal requester, thereby improving the security of the fingerprint stored by the user equipment.

S205. The user equipment receives a fingerprint reading request that carries an identifier of the target requester.

S206. The user equipment determines, according to the identifier, whether the target requester has fingerprint reading authority according to the fingerprint reading request.

In the embodiment of the present invention, after receiving the fingerprint reading request, the user equipment extracts the identifier of the target requester carried by the fingerprint reading request, and determines whether the target requester has the fingerprint reading authority according to the identifier of the target requester. When the user equipment determines that the target requester has the fingerprint reading authority, step S208 is performed. When the user equipment determines that the target requester does not have the fingerprint reading authority, step S207 is performed.

S207. The user equipment sends, to the preset terminal, prompt information for prompting that an illegal requester requests to read the fingerprint.

In the embodiment of the present invention, the user equipment may set a preset terminal. When the user equipment determines that the target requester does not have the fingerprint reading authority, the user equipment sends a prompt message for prompting the existence of the illegal requester to request the fingerprint reading. . Optionally, the user equipment may send, by using a short message or an email, a prompt message for prompting the presence of an illegal requester to read the fingerprint to the preset terminal.

In the embodiment of the present invention, when the user equipment determines that the target requester does not have the fingerprint reading permission, the user may promptly remind the user that the illegal requester exists by sending a prompt message for prompting the existence of the illegal requester to read the fingerprint to the preset terminal. The fingerprint is requested to be read so that the user can take countermeasures in time to improve the security of the fingerprint stored by the user equipment.

S208. The user equipment acquires the encrypted target fingerprint information from the preset fingerprint storage area.

S209. The user equipment sends the encrypted target fingerprint information and the sent request to the cloud, so that the cloud solves the encrypted target fingerprint information in response to the sending request. Densing, and transmitting the decrypted target fingerprint information to the target requester.

It can be seen that, by implementing the embodiment described in FIG. 2, the user can be prevented from granting the fingerprint reading authority to the unknown illegal requester, and when the user equipment determines that the target requester does not have the fingerprint reading permission, the user equipment sends the fingerprint to the preset terminal. The prompt information for indicating that an illegal requester requests to read a fingerprint enables the user to take countermeasures in time, thereby improving the security of the fingerprint stored by the user equipment.

Referring to FIG. 3, FIG. 3 is a schematic flowchart diagram of another fingerprint reading method according to an embodiment of the present invention. As shown in FIG. 3, the fingerprint reading method may include the following steps.

S301. The user equipment receives a fingerprint storage instruction input by a user, where the fingerprint storage instruction carries fingerprint information to be stored.

In the embodiment of the present invention, optionally, before the user equipment receives the fingerprint storage instruction input by the user, the user equipment receives the login request input by the user. After receiving the login request, the user equipment may send a login request to the cloud to enable the cloud to generate a random code to be sent to the designated device. The user inputs a random code received by the specified device at the user device to log in. When the login is successful, step S301 is performed. When the login is unsuccessful, the process ends. By using the random code to log in before performing fingerprint storage, fingerprint reading and fingerprint decryption, fingerprint storage, fingerprint reading and fingerprint decryption operations can be performed when the login is successful, which can greatly improve the security of the fingerprint stored by the user equipment.

S302. The user equipment, in response to the fingerprint storage instruction, writes the currently generated random code into the to-be-stored fingerprint information, to encrypt the to-be-stored fingerprint information.

In the embodiment of the present invention, after receiving the fingerprint storage instruction that is input by the user and carrying the fingerprint information to be stored, the user equipment responds to the fingerprint storage instruction, and writes the currently generated random code into the fingerprint information to be stored, so as to store the fingerprint information. Encrypt. Optionally, the random code written by the user equipment in the fingerprint information to be stored may be a random code used for the current login. Optionally, the random code written by the user equipment in the fingerprint information to be stored may be a random code generated by the user equipment in response to the fingerprint storage instruction.

In the embodiment of the present invention, the fingerprint information is stored in a binary form in the user equipment. Optionally, the user equipment may convert the random code into a binary form, and insert the random code in the binary form into a preset position in the binary of the fingerprint information to be stored, to encrypt the fingerprint information to be stored, wherein the preset position may be Any location in the binary of the fingerprint information to be stored. For example, if the random code includes four numbers of 4, 5, and 6, the binary of 4 is 0100, the binary of 5 is 0101, and the binary of 6 is 0110. If the binary of the fingerprint information to be stored is 1111 1111, the binary of 4, 5, and 6 can be inserted before the binary of the fingerprint information to be stored, such as 0100 0101 0110 1111 1111, or the binary of 4, 5, and 6 is inserted into the fingerprint to be stored. Any position in the binary of the information, such as 1111 0100 0101 0110 1111 and 1111 0100 0101 1111 0110, is not limited in the embodiment of the present invention. By encrypting in this way, the security of the fingerprint stored by the user equipment can be improved.

S303. The user equipment stores the encrypted fingerprint information to be stored in one preset fingerprint storage area of the plurality of preset fingerprint storage areas.

In the embodiment of the present invention, the user equipment is configured with multiple fingerprint storage areas. After the user equipment encrypts the stored fingerprint information, the fingerprint information to be stored may be stored in any preset fingerprint storage area of the plurality of preset fingerprint storage areas. The embodiment of the invention is not limited. By setting a plurality of preset fingerprint storage areas, it is possible to avoid storing the fingerprint information in one fingerprint storage area, which is beneficial to reducing the risk of fingerprint information being completely stolen.

S304. The user equipment receives a fingerprint reading request that carries an identifier of the target requester.

S305. The user equipment determines, according to the identifier, whether the target requester has a fingerprint reading authority according to the fingerprint reading request.

In the embodiment of the present invention, after receiving the fingerprint reading request, the user equipment extracts the identifier of the target requester carried by the fingerprint reading request, and determines whether the target requester has the fingerprint reading authority according to the identifier of the target requester. When the user equipment determines that the target requester has the fingerprint reading authority, step S306 is performed. When the user equipment determines that the target requester does not have the fingerprint reading permission, the user equipment may output prompt information for prompting that the illegal requester requests to read the fingerprint, so that the user takes timely measures to prevent the stored fingerprint from being Pirates.

S306. The user equipment acquires the encrypted target fingerprint information from the preset fingerprint storage area.

S307. The user equipment sends the encrypted target fingerprint information and the sending request of the identifier to the cloud, so that the cloud decrypts the encrypted target fingerprint information in response to the sending request, and decrypts the encrypted target information. The target fingerprint information is sent to the target requester.

In the method described in FIG. 3, the security of the fingerprint information to be stored is improved by encrypting the fingerprint information to be stored in the fingerprint information to be stored, and the user equipment can read the embodiment by implementing the embodiment of the present invention. The fingerprint device or application authenticates and decrypts the stored encrypted fingerprint information through the cloud, thereby improving the security of the fingerprint stored by the smart device.

Referring to FIG. 4, FIG. 4 is a schematic structural diagram of a user equipment according to an embodiment of the present invention. The user equipment shown in FIG. 4 may include a first receiving module 401, a determining module 402, an obtaining module 403, and a first sending module 404. among them:

The first receiving module 401 is configured to receive a fingerprint reading request that carries an identifier of the target requester.

In the embodiment of the present invention, the first receiving module 401 of the user equipment receives the fingerprint reading request carrying the identifier of the target requester. The user equipment may include, but is not limited to, user equipment such as a smart phone, a tablet computer, a notebook computer, a desktop computer, and a fingerprint lock. The operating system of the user equipment may include, but is not limited to, an Android operating system, an IOS operating system, a Symbian operating system, a Blackberry operating system, a Windows operating system, and the like, which are not limited in the embodiment of the present invention.

In this embodiment of the present invention, the target requester may be any device other than the user equipment or the target requester may be any application installed on the user equipment. The first receiving module 401 can receive the fingerprint reading request sent by the device other than the local end, or the first receiving module 401 can receive the fingerprint reading request sent by the application installed on the local end.

In the embodiment of the present invention, the identifier of the target requester is data capable of identifying the unique identity of the target requester. When the first receiving module 401 receives a device to send a fingerprint reading request, the fingerprint reading request will carry the identifier of the device. For example, the identity of the device can be the MAC address of the device. When the first receiving module 401 receives an application to send a fingerprint reading request, the fingerprint reading request will carry the identifier of the application.

The determining module 402 is configured to determine, according to the identifier, whether the target requester has fingerprint reading authority according to the identifier in response to the fingerprint reading request.

In the embodiment of the present invention, after the first receiving module 401 receives the fingerprint reading request, the determining module 402 extracts the identifier of the target requester carried by the fingerprint reading request, and determines whether the target requester has the fingerprint reading according to the identifier of the target requester. Take permission. When the determining module 402 determines that the target requester has the fingerprint reading authority, the trigger obtaining module 403 obtains the encrypted target fingerprint information from the preset fingerprint storage area. When the determining module 402 determines that the target requester does not have the fingerprint reading permission, the user equipment may output prompt information for prompting that the illegal requester requests to read the fingerprint, so that the user can take countermeasures in time to prevent the stored fingerprint. Stolen.

As an optional implementation manner, the determining module 402 can include an output unit and a receiving unit:

An output unit, configured to output a target prompt information according to the identifier of the target requester, where the target prompt information is used to prompt whether the target requester is allowed to read the fingerprint;

a receiving unit, configured to receive target response information input by the user for the target prompt information;

When the target response information is used to indicate that the target requester is allowed to read the fingerprint, the determining module 402 determines that the target requester has the fingerprint reading authority; and when the target response information is used to indicate that the target requester is not allowed to read the fingerprint, the determining module 402 determines that the target requester does not have fingerprint reading authority.

In this embodiment, after the first receiving module 401 receives the fingerprint reading request, the output unit responds to the fingerprint reading request, and outputs the target prompt information according to the identifier of the target requester. The target prompt information is used to prompt whether the target requester is allowed to read the fingerprint. The user may input target response information for indicating that the target requester is allowed to read the fingerprint for the target prompt information, or the user may input target response information for indicating that the target requester is not allowed to read the fingerprint for the target prompt information.

For example, after the first receiving module 401 receives the fingerprint reading request sent by the e-commerce application, the output unit obtains the name of the e-commerce application according to the identifier of the e-commerce application, and outputs the name including the e-commerce application name for prompting whether Allow the e-commerce application to read the target prompt information of the fingerprint. When the user inputs the target response information for instructing the e-commerce application to read the fingerprint for the target prompt information, the determining module 402 determines that the e-commerce application has the fingerprint reading authority; when the user inputs the indication information for the target prompt information When the e-commerce application is not allowed to read the target response information of the fingerprint, the determining module 402 determines that the e-commerce application does not have the fingerprint reading authority.

As an optional implementation manner, the determining module 402 can be specifically configured to:

The determining module 402 determines, according to the fingerprint reading request, whether the identifier of the target requester is consistent with the identifier of the authorization requester set in advance;

When the identifier of the target requester is consistent with the identifier of the authorized requester, the determining module 402 determines that the target requester has the fingerprint reading authority; when the identifier of the target requester is inconsistent with the identifier of the authorized requester, the determining module 402 determines the target requester. Does not have fingerprint reading permission.

In this embodiment, the user equipment may pre-set an authorization requester with fingerprint reading authority. For a specific implementation manner in which the user equipment pre-sets the authorization requester with the fingerprint reading authority, refer to the embodiment described in FIG. 5, and details are not described herein.

The obtaining module 403 is configured to obtain the encrypted target fingerprint information from the preset fingerprint storage area when the determining module determines that the target requester has the fingerprint reading authority.

In the embodiment of the present invention, when the determining module 402 determines that the target requester has the fingerprint reading authority, the obtaining module 403 obtains the encrypted target fingerprint information from the preset fingerprint storage area. The obtaining module 403 can acquire one or more encrypted target fingerprint information from the preset fingerprint storage area. Optionally, the user equipment may set multiple preset fingerprint storage areas, and store different fingerprint information in different preset fingerprint storage areas. By setting a plurality of preset fingerprint storage areas, it is possible to avoid storing the fingerprint information in one fingerprint storage area, which is beneficial to reducing the risk of fingerprint information being completely stolen.

The first sending module 404 is configured to send a sending request including the encrypted target fingerprint information and the identifier to the cloud, so that the cloud decrypts the encrypted target fingerprint information in response to the sending request, and The decrypted target fingerprint information is sent to the target requester.

In the embodiment of the present invention, after acquiring the target fingerprint information, the obtaining module 403 generates a sending request, and sends the sending request to the cloud, where the sending request includes the encrypted target fingerprint information and the identifier of the target requester. After receiving the sending request, the cloud will respond to the sending request, decrypt the encrypted target fingerprint information by using a preset decryption algorithm, and send the decrypted target fingerprint information to the target requester according to the identifier of the target requester.

Referring to FIG. 5, FIG. 5 is a schematic structural diagram of another user equipment according to an embodiment of the present invention. The user equipment shown in FIG. 5 is optimized by the user equipment shown in FIG. 4. Compared with the user equipment shown in FIG. 4, the user equipment shown in FIG. 5 may include a second receiving module 405 and a third sending module 406, in addition to all the modules and units of the user equipment shown in FIG. The three receiving module 407, the setting module 408, and the second sending module 409. among them:

The second receiving module 405 is configured to receive, after the first receiving module 401 receives the fingerprint reading request carrying the identifier of the target requester, the permission setting instruction input by the user, where the permission setting instruction carries the requester identifier.

The third sending module 406 is configured to: after the second receiving module 405 receives the permission setting instruction input by the user, send a query instruction including the requester identifier to the cloud, so that the cloud queries the request corresponding to the requester identifier Whether the person is an illegal requester.

In the embodiment of the present invention, after the second receiving module 405 receives the permission setting instruction, the third sending module 406 extracts the requester identifier in the permission setting instruction, and sends a query instruction including the requester identifier to the cloud.

The third receiving module 407 is configured to receive a response message sent by the cloud for the query instruction.

In the embodiment of the present invention, when the response message received by the third receiving module 407 is used to indicate that the requester identifies that the requester is a legal requester, the trigger setting module 408 responds to the permission setting instruction, and sets the requester corresponding to the requester identifier. Is an authorized requester with fingerprint read permission.

The setting module 408 is configured to, according to the permission setting instruction, set the requester corresponding to the requester identifier as an authorization requester with fingerprint reading authority.

It is found in practice that the cloud can collect a large number of user-marked information about a malicious program or a malicious device. In the embodiment of the present invention, when the second receiving module 405 receives the permission setting instruction, the third sending module 406 sends the requester identifier to the cloud. The cloud is queried whether the requester corresponding to the requester identifier is an illegal requester marked by the user, and the user can be prevented from granting fingerprint reading permission to the unknown illegal requester, thereby improving the security of the fingerprint stored by the user equipment.

The second sending module 409 is configured to: when the determining module 402 determines that the target requester does not have the fingerprint reading authority, send the prompt information for prompting the presence of the illegal requester to request to read the fingerprint.

In the embodiment of the present invention, the user equipment may set the preset terminal. When the determining module 402 determines that the target requester does not have the fingerprint reading authority, the second sending module 409 sends a prompt to the preset terminal to prompt the presence of the illegal requester to request the reading. Fingertip information. Optionally, the second sending module 409 may send the prompt information for prompting the presence of the illegal requester to request to read the fingerprint to the preset terminal by using a short message or an email.

In the embodiment of the present invention, when the determining module 402 determines that the target requester does not have the fingerprint reading authority, the second sending module 409 sends a prompt message for prompting the existence of the illegal requester to request the fingerprint to be read by the second sending module 409. The user is reminded that an illegal requester requests to read the fingerprint, so that the user can take countermeasures in time, and the security of the fingerprint stored by the user equipment is improved.

Please refer to FIG. 6. FIG. 6 is a schematic structural diagram of another user equipment according to an embodiment of the present invention. The user equipment shown in FIG. 6 is optimized by the user equipment shown in FIG. 4. Compared with the user equipment shown in FIG. 4, the user equipment shown in FIG. 6 may further include a fourth receiving module 410, an encryption module 411, and a storage module 412 in addition to all the modules and units of the user equipment shown in FIG. . among them:

The fourth receiving module 410 is configured to receive a fingerprint storage instruction input by the user before the first receiving module 401 receives the fingerprint reading request carrying the identifier of the target requester, where the fingerprint storage instruction carries the fingerprint information to be stored.

In the embodiment of the present invention, optionally, the user equipment further includes a fifth receiving module and a fourth sending module, configured to receive a login request input by the user before the fourth receiving module 410 receives the fingerprint storage instruction input by the user. The fourth sending module is configured to send a login request to the cloud after the fifth receiving module receives the login request, so that the cloud generates a random code and sends the random code to the designated device. The user inputs a random code received by the specified device at the user device to log in. After the login is successful, the fourth receiving module 410 may receive a fingerprint storage instruction input by the user. By using the random code to log in before performing fingerprint storage, fingerprint reading and fingerprint decryption, fingerprint storage, fingerprint reading and fingerprint decryption operations can be performed when the login is successful, which can greatly improve the security of the fingerprint stored by the user equipment.

The encryption module 411 is configured to write the currently generated random code into the to-be-stored fingerprint information to encrypt the fingerprint information to be stored in response to the fingerprint storage instruction.

In the embodiment of the present invention, after the fourth receiving module 410 receives the fingerprint storage instruction that is carried by the user and carries the fingerprint information to be stored, the encryption module 411 responds to the fingerprint storage instruction, and writes the currently generated random code into the fingerprint information to be stored. To encrypt the fingerprint information to be stored. Optionally, the random code written by the encryption module 411 into the fingerprint information to be stored may be a random code used for the current login. Optionally, the random code written by the encryption module 411 into the fingerprint information to be stored may be a random code generated by the encryption module 411 in response to the fingerprint storage instruction.

In the embodiment of the present invention, the fingerprint information is stored in a binary form in the user equipment. Optionally, the encryption module 411 can convert the random code into a binary form, and insert the random code in the binary form into a preset position in the binary of the fingerprint information to be stored, to encrypt the fingerprint information to be stored, wherein the preset position It can be any position in the binary of the fingerprint information to be stored. For example, if the random code includes 4, 5, and 6 digits, the binary of 4 is 0100, the binary of 5 is 0101, and the binary of 6 is 0110. If the binary of the fingerprint information to be stored is 1111 1111, then 4, The binary of 5 and 6 is inserted before the binary of the fingerprint information to be stored, such as 0100 0101 0110 1111 1111, or the binary of 4, 5 and 6 is inserted into any position in the binary of the fingerprint information to be stored, such as 1111 0100 0101 0110 1111 and 1111 0100 0101 1111 0110, the embodiment of the present invention is not limited. By encrypting in this way, the security of the fingerprint stored by the user equipment can be improved.

The storage module 412 is configured to store the encrypted fingerprint information to be stored into one preset fingerprint storage area of the plurality of preset fingerprint storage areas.

In the embodiment of the present invention, the user equipment is provided with a plurality of fingerprint storage areas. After the encryption module 411 encrypts the fingerprint information, the storage module 412 may store the fingerprint information to be stored in any one of the preset fingerprint storage areas. The embodiment of the present invention is not limited in the fingerprint storage area. By setting a plurality of preset fingerprint storage areas, it is possible to avoid storing the fingerprint information in one fingerprint storage area, which is beneficial to reducing the risk of fingerprint information being completely stolen.

In the user equipment described in FIG. 4 to FIG. 6, after the first receiving module receives the fingerprint reading request carrying the identifier of the target requester, the determining module responds to the fingerprint reading request, and determines the target according to the identifier of the target requester. Whether the requester has the fingerprint reading authority; when the target requester has the fingerprint reading permission, the obtaining module obtains the encrypted target fingerprint information from the preset fingerprint storage area, and the first sending The module sends the encrypted target fingerprint information and the sending request of the identifier to the cloud, so that the cloud decrypts the encrypted target fingerprint information in response to the sending request, and sends the decrypted target fingerprint information to the target requester. It can be seen that, by implementing the embodiment of the present invention, the user equipment can authenticate the device or application that reads the fingerprint, and decrypt the stored encrypted fingerprint information through the cloud, thereby improving the security of the fingerprint stored by the smart device.

It should be noted that, in the above embodiments, the descriptions of the various embodiments are different, and the parts that are not described in detail in a certain embodiment may be referred to the related descriptions of other embodiments. In addition, those skilled in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

The steps in the method of the embodiment of the present invention may be sequentially adjusted, merged, and deleted according to actual needs.

The modules or units in the user equipment in the embodiment of the present invention may be combined, divided, and deleted according to actual needs.

A person of ordinary skill in the art may understand that all or part of the steps of the foregoing embodiments may be completed by calling a terminal device related hardware, and the program may be stored in a readable and writable storage of an IT device such as a computer or a mobile phone. In the medium, the storage medium may be a hard disk, an emmc, or the like.

The fingerprint reading method and the user equipment disclosed in the embodiments of the present invention are described in detail above. The principles and implementation manners of the present invention are described in the specific examples. The description of the above embodiments is only used to help understand the present invention. The method of the invention and its core idea; at the same time, for the person of ordinary skill in the art, according to the idea of the present invention, there are some changes in the specific embodiment and the scope of application. In summary, the content of the specification should not be understood. To limit the invention.

Claims

A fingerprint reading method, the method comprising:

Receiving a fingerprint reading request carrying an identifier of the target requester;

Responding to the fingerprint reading request, determining, according to the identifier, whether the target requester has fingerprint reading authority;

Obtaining the encrypted target fingerprint information from the preset fingerprint storage area when the target requester has the fingerprint reading authority;

Sending the encrypted target fingerprint information and the sent request to the cloud, so that the cloud decrypts the encrypted target fingerprint information in response to the sending request, and decrypts the target fingerprint Information is sent to the target requester.
The method of claim 1 further comprising:

When the target requester does not have the fingerprint reading authority, the prompt information for prompting the presence of the illegal requester to read the fingerprint is sent to the preset terminal.
The method according to claim 1, wherein the method further comprises: before receiving the fingerprint reading request carrying the identifier of the target requester, the method further comprising:

Receiving a permission setting instruction input by a user, where the permission setting instruction carries a requester identifier;

In response to the permission setting instruction, the requester corresponding to the requester identifier is set as an authorization requester having fingerprint reading authority.
The method according to claim 3, wherein after the receiving the permission setting instruction input by the user, the method further comprises:

Sending, by the cloud, a query instruction including the requester identifier, so that the cloud queries whether the requester corresponding to the requester identifier is an illegal requester;

Receiving a response message sent by the cloud for the query instruction;

When the response message is used to indicate that the requester identifies that the corresponding requester is a legal requester, triggering execution of the response to the permission setting instruction, and setting the requester corresponding to the requester identifier to have fingerprint reading The steps to authorize the requester for the permission.
The method according to any one of claims 1 to 4, wherein before the receiving the fingerprint reading request carrying the identifier of the target requester, the method further comprises:

Receiving a fingerprint storage instruction input by a user, the fingerprint storage instruction carrying a fingerprint letter to be stored interest;

And responding to the fingerprint storage instruction, writing the currently generated random code into the to-be-stored fingerprint information, to encrypt the to-be-stored fingerprint information;

And storing the encrypted fingerprint information to be stored in one preset fingerprint storage area of the plurality of preset fingerprint storage areas.
A user equipment, where the user equipment includes:

a first receiving module, configured to receive a fingerprint reading request that carries an identifier of the target requester;

a determining module, configured to determine, according to the identifier, whether the target requester has a fingerprint reading permission according to the fingerprint reading request;

An acquiring module, configured to: when the determining module determines that the target requester has the fingerprint reading permission, obtain the encrypted target fingerprint information from the preset fingerprint storage area;

a first sending module, configured to send, to the cloud, a sending request that includes the encrypted target fingerprint information and the identifier, so that the cloud decrypts the encrypted target fingerprint information in response to the sending request, and The decrypted target fingerprint information is sent to the target requester.
The user equipment according to claim 6, wherein the user equipment further comprises:

The second sending module is configured to: when the determining module determines that the target requester does not have the fingerprint reading permission, send, to the preset terminal, prompt information for prompting that the illegal requester requests to read the fingerprint.
The user equipment according to claim 6, wherein the user equipment further comprises:

a second receiving module, configured to receive, after the first receiving module receives the fingerprint reading request carrying the identifier of the target requester, the permission setting instruction input by the user, where the permission setting instruction carries the requester identifier;

And a setting module, configured to set, according to the permission setting instruction, a requester corresponding to the requester identifier as an authorization requester having fingerprint reading authority.
The user equipment according to claim 8, wherein the user equipment further comprises:

a third sending module, configured to: after the second receiving module receives the permission setting instruction input by the user, send a query instruction including the requester identifier to the cloud, so that the cloud queries whether the requester corresponding to the requester identifier is Being an illegal requestor;

a third receiving module, configured to receive a response message sent by the cloud for the query instruction, and trigger the setting when the response message is used to indicate that the requester corresponding to the requester identifier is a legal requester The setting module responds to the permission setting instruction, and sets the requester corresponding to the requester identifier as an authorization requester with fingerprint reading authority.
The user equipment according to any one of claims 6 to 9, wherein the user equipment further comprises:

a fourth receiving module, configured to receive, after the first receiving module receives the fingerprint reading request that carries the identifier of the target requester, a fingerprint storage instruction input by the user, where the fingerprint storage instruction carries the fingerprint information to be stored;

The cryptographic module is configured to: in response to the fingerprint storage instruction, write the currently generated random code into the to-be-stored fingerprint information, to encrypt the fingerprint information to be stored;

And a storage module, configured to store the encrypted fingerprint information to be stored into one preset fingerprint storage area of the plurality of preset fingerprint storage areas.