WO2017024628A1 - 加密信息的存储方法、加密信息的存储装置和终端 - Google Patents

加密信息的存储方法、加密信息的存储装置和终端 Download PDF

Info

Publication number
WO2017024628A1
WO2017024628A1 PCT/CN2015/088476 CN2015088476W WO2017024628A1 WO 2017024628 A1 WO2017024628 A1 WO 2017024628A1 CN 2015088476 W CN2015088476 W CN 2015088476W WO 2017024628 A1 WO2017024628 A1 WO 2017024628A1
Authority
WO
WIPO (PCT)
Prior art keywords
encrypted information
password
random address
target random
address
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2015/088476
Other languages
English (en)
French (fr)
Inventor
钟焰涛
牛溢华
黄庆军
谭杨
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Yulong Computer Telecommunication Scientific Shenzhen Co Ltd
Original Assignee
Yulong Computer Telecommunication Scientific Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Yulong Computer Telecommunication Scientific Shenzhen Co Ltd filed Critical Yulong Computer Telecommunication Scientific Shenzhen Co Ltd
Publication of WO2017024628A1 publication Critical patent/WO2017024628A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/602—Providing cryptographic facilities or services
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2107—File encryption

Definitions

  • the present invention relates to the field of terminal technologies, and in particular, to a method for storing encrypted information, a storage device for encrypted information, and a terminal.
  • biometric identification functions In order to ensure the security of biometric templates stored in the terminal, various storage solutions are currently available, such as encrypting or storing biometric templates in biometric templates. The safe area of the system, etc.
  • the biometric template when using encrypted storage, when the user uses the key to decrypt, or the criminals attack the storage area, the biometric template may be leaked, and if the hacker obtains the system authority of the terminal, the biometric template stored in the secure area is also the same. Will leak.
  • the encrypted information can be randomly stored in the target random address to further improve the security of the encrypted information.
  • the invention is based on the above problems, and proposes a new technical solution, which can randomly store the encrypted information into the target random address, thereby further improving the security of the encrypted information.
  • the first aspect of the present invention provides a method for storing encrypted information, for a terminal, comprising: prompting a user to input a password when storing encrypted information; generating and storing a random number; the password and the password The random number generates a target random address according to a predetermined function; and stores the encrypted information to the target random address and marks the target random address as occupied.
  • the target random address for storing the encrypted information can be generated by the predetermined function by using the user input password and the randomly obtained random number, wherein the encrypted information is stored in the user data partition in the terminal, and the user data partition is The storage unit within the block unit, the target random address storing the encrypted information is the offset address in the user data partition, for example, predetermined
  • the function is a hash function, and the calculation formula of the target random address is:
  • A is the target random address
  • hash is the hash function
  • password is the password
  • s is the random number
  • mod is the modulo operation
  • b is the number of user data partition blocks.
  • the encrypted information includes, but is not limited to, one or a combination of the following: a biometric template, character information, gesture information, and the like.
  • the encrypted information can be randomly stored in the target random address, thereby preventing the criminals from acquiring the storage location for storing the encrypted information, thereby stealing the encrypted information of the user, and improving the security of the encrypted information.
  • the method before the storing the encrypted information to the target random address, the method further includes: determining whether the target random address is already occupied; if the target random address is already occupied, Regenerating the random number, and repeating the step of generating the target random address according to the predetermined function according to the password and the random number, otherwise, directly performing the step of storing the encrypted information to the target random address .
  • the target random address when the target random address is already occupied, the encrypted information is forcibly stored to the target random address, and the original information stored at the target random address is lost. Therefore, in order to avoid such a situation, When the obtained target random address is already occupied, the target random address is re-acquired until the acquired target is randomly occupied, and then the encrypted information is stored in the target random address; if the target is randomly occupied, the target may be directly The encrypted information is stored in the target random address. In this way, the problem of the loss of the original information stored in the target random address is avoided, and the user experience is improved.
  • the method further includes: prompting a user to input the password when reading the encrypted information; acquiring the random number according to the password; and according to the password and the random number, according to The predetermined function acquires the target random address storing the encrypted information; and reads the encrypted information from the target random address.
  • the user when the user wants to read the encrypted information, the user can input the corresponding password according to the prompt, so that the terminal can determine whether the corresponding password is consistent with the stored password, and if they are consistent, the target random address can be obtained. Read the encrypted information in it, otherwise the encrypted information cannot be read. With this technical solution, the user can read and store the target with the correct password.
  • the encrypted information in the random address provides convenience for the user's reading process.
  • the method further includes: after marking the target random address as occupied, creating a mapping relationship between the password and the target random address, and storing the mapping relationship;
  • the user is prompted to input a read password; whether the read password matches the password; and when the read password and the password are determined, a mapping relationship corresponding to the password is obtained to pass
  • the mapping relationship acquires the target random address; and reads the encrypted information from the target random address.
  • the mapping relationship between the password and the target random address can be created, so that when the user wants to read the encrypted information, the password can be input and matched.
  • the password is read, and the mapping relationship is directly used to obtain the target random address, thereby reading the encrypted information stored in the target random address.
  • the target random address can be directly obtained through the mapping relationship by using the password, and the encrypted information therein is read, thereby further improving the speed of reading the encrypted information.
  • the user wants to change the password, he can enter a new password, so that the new target random address can be regenerated, so that the encrypted information can be stored in the new target random address, thus preventing the biometric template from being stolen due to password leakage. Further, the security of the encrypted information is further ensured, and in order to save storage space, the encrypted information in the original target random address is also deleted.
  • deletion method may overwrite the encrypted information stored in the target random address with a random value, or mark the target random address as idle.
  • the target random address can be replaced again, thereby avoiding the problem that the illegal elements steal the encrypted information.
  • a second aspect of the present invention provides a storage device for encrypting information, comprising: a prompt input unit, configured to prompt a user to input a password when storing encrypted information; and a generating unit configured to generate and save a random number
  • the generating unit is further configured to: generate the target random address according to a predetermined function by the password and the random number; and the storage device for encrypting the information further includes: a storage unit, configured to store the encrypted information to the target random Address and mark the target random address as occupied.
  • the target random address for storing the encrypted information can be generated by the predetermined function by using the user input password and the randomly obtained random number, wherein the encrypted information is stored in the user data partition in the terminal, and the user data partition is The storage unit in the block is in units of blocks, and the target random address for storing the encrypted information is the offset address in the user data partition.
  • the predetermined function is a hash function
  • the calculation formula of the target random address is:
  • A is the target random address
  • hash is the hash function
  • password is the password
  • s is the random number
  • mod is the modulo operation
  • b is the number of user data partition blocks.
  • the encrypted information includes, but is not limited to, one or a combination of the following: a biometric template, character information, gesture information, and the like.
  • the encrypted information can be randomly stored in the target random address, thereby preventing the criminals from acquiring the storage location for storing the encrypted information, thereby stealing the encrypted information of the user, and improving the security of the encrypted information.
  • the method further includes: a determining unit, configured to determine whether the target random address is already occupied; and the generating unit is further configured to: if the target random address is already occupied, regenerate the Deriving a random number, and repeating the step of generating the target random address according to the predetermined function according to the password and the random number; the storage unit is further configured to: if the target random address is not occupied, directly proceed to the The step of storing the encrypted information to the target random address.
  • the target random address when the target random address is already occupied, the encrypted information is forcibly stored. If the target random address is stored, the original information stored in the target random address is lost. Therefore, in order to avoid this situation, the target random address needs to be re-acquired when the acquired target random address is already occupied.
  • the acquired target is randomly occupied, and the encrypted information is stored in the target random address; if the target is randomly occupied, the encrypted information can be directly stored in the target random address. In this way, the problem of the loss of the original information stored in the target random address is avoided, and the user experience is improved.
  • the prompt input unit is further configured to: when reading the encrypted information, prompting a user to input the password;
  • the storage device for encrypting information further includes: an acquiring unit, according to the And obtaining, by the password, the random number;
  • the obtaining unit is further configured to: acquire, according to the password and the random number, the target random address storing the encrypted information according to the predetermined function; and storage device for encrypting information
  • the method further includes: a reading unit, configured to read the encrypted information from the target random address.
  • the user when the user wants to read the encrypted information, the user can input the corresponding password according to the prompt, so that the terminal can determine whether the corresponding password is consistent with the stored password, and if they are consistent, the target random address can be obtained. Read the encrypted information in it, otherwise the encrypted information cannot be read.
  • the user can read the encrypted information stored in the target random address through the correct password, which provides convenience for the user's reading process.
  • a creating unit is configured to create a mapping relationship between the password and the target random address after marking the target random address as occupied, and store the mapping relationship; prompting input
  • the unit is further configured to: when reading the encrypted information, prompting the user to input a read password; the determining unit is further configured to: determine whether the read password matches the password; and the storage device of the encrypted information is further
  • the acquiring unit is further configured to: when determining the read password and the password, acquire a mapping relationship corresponding to the password, to acquire the target random address by using the mapping relationship; and the acquiring The unit is further configured to: read the encrypted information from the target random address.
  • the mapping relationship between the password and the target random address can be created, so that when the user wants to read the encrypted information, the password can be input and matched.
  • the password is read, and the mapping relationship is directly used to obtain the target random address, thereby reading the encrypted information stored in the target random address.
  • the solution can directly obtain the target random address through the mapping relationship by using the password, and read the encrypted information therein, thereby further improving the speed of reading the encrypted information.
  • the generating unit is further configured to: regenerate and save a new random number after the encrypted information is read, or when receiving a new password input by the user; And a method for: generating, according to the new password and the new random number, a new target random address according to the predetermined function; the storage unit is further configured to: store the encrypted information to the new target random address, and Marking the new target random address as occupied while deleting the encrypted information stored at the target random address.
  • the user wants to change the password, he can enter a new password, so that the new target random address can be regenerated, so that the encrypted information can be stored in the new target random address, thus preventing the biometric template from being stolen due to password leakage. Further, the security of the encrypted information is further ensured, and in order to save storage space, the encrypted information in the original target random address is also deleted.
  • deletion method may overwrite the encrypted information stored in the target random address with a random value, or mark the target random address as idle.
  • the target random address can be replaced again, thereby avoiding the problem that the illegal elements steal the encrypted information.
  • a third aspect of the present invention provides a terminal, comprising: the encrypted information access device according to any one of the above second aspect, and thus having the encrypted information access according to any one of the above second aspects The same technical effects of the device will not be described here.
  • the encrypted information can be randomly stored in the target random address, which avoids the illegal molecular acquisition location for storing the encrypted information, thereby stealing the encrypted information of the user, and improving the security of the encrypted information.
  • FIG. 1 shows a flow chart of a method of storing encrypted information in accordance with one embodiment of the present invention
  • FIG. 2 shows a block diagram of a storage device for encrypting information in accordance with one embodiment of the present invention
  • Figure 3 shows a block diagram of a terminal in accordance with one embodiment of the present invention
  • FIG. 4 is a block diagram showing a storage device for encrypting information according to another embodiment of the present invention.
  • Figure 5 is a flow chart showing the biometric template registration shown in Figure 4.
  • Figure 6 is a flow chart showing the modification of the user password shown in Figure 4.
  • Figure 7 shows a flow chart of the use of the biometric template shown in Figure 4.
  • FIG. 1 shows a flow chart of a method of storing encrypted information in accordance with one embodiment of the present invention.
  • a method for storing encrypted information is used for a terminal, including: step 102, prompting a user to input a password when performing encrypted information storage; and step 104, generating and saving a random number; Step 106, the password and the random number generate a target random address according to a predetermined function; in step 108, the encrypted information is stored to the target random address, and the target random address is marked as occupied.
  • the target random address for storing the encrypted information can be generated by the predetermined function by using the user input password and the randomly obtained random number, wherein the encrypted information is stored in the user data partition in the terminal, and the user data partition is
  • the internal storage unit is in block units, and the target random address for storing the encrypted information is the offset address in the user data partition.
  • the calculation formula of the target random address is:
  • A is the target random address
  • hash is the hash function
  • password is the password
  • s is the random number
  • mod is the modulo operation
  • b is the number of user data partition blocks.
  • the encrypted information includes, but is not limited to, one or a combination of the following: a biometric template, character information, gesture information, and the like.
  • the encrypted information can be randomly stored in the target random address, thereby preventing the criminals from acquiring the storage location for storing the encrypted information, thereby stealing the encrypted information of the user, and improving the security of the encrypted information.
  • the method further includes: determining whether the target random address is already occupied; if the target random address is already occupied, regenerating the random number, and repeating the predetermined function according to the password and the random number
  • the step of generating a target random address otherwise, directly proceeds to the step of storing the encrypted information to the target random address.
  • the target random address when the target random address is already occupied, the encrypted information is forcibly stored to the target random address, and the original information stored at the target random address is lost. Therefore, in order to avoid such a situation, When the obtained target random address is already occupied, the target random address is re-acquired until the acquired target is randomly occupied, and then the encrypted information is stored in the target random address; if the target is randomly occupied, the target may be directly The encrypted information is stored in the target random address. In this way, the problem of the loss of the original information stored in the target random address is avoided, and the user experience is improved.
  • the method further includes: prompting the user to input a password when reading the encrypted information; acquiring a random number according to the password; and acquiring a target random address storing the encrypted information according to the predetermined function according to the password and the random number; The encrypted information is read from the target random address.
  • the user when the user wants to read the encrypted information, the user can input the corresponding password according to the prompt, so that the terminal can determine whether the corresponding password is consistent with the stored password, and if they are consistent, the target random address can be obtained. Read the encrypted information in it, otherwise the encrypted information cannot be read.
  • the user can read the encrypted information stored in the target random address through the correct password, which provides convenience for the user's reading process.
  • the method further includes: after step 108, creating a password and Mapping the target random address and storing the mapping relationship; prompting the user to input the read password when reading the encrypted information; determining whether the read password matches the password; and obtaining the mapping corresponding to the password when determining the read password and the password Relationship to obtain the target random address through the mapping relationship; and read the encrypted information from the target random address.
  • the mapping relationship between the password and the target random address can be created, so that when the user wants to read the encrypted information, the password can be input and matched.
  • the password is read, and the mapping relationship is directly used to obtain the target random address, thereby reading the encrypted information stored in the target random address.
  • the target random address can be directly obtained through the mapping relationship by using the password, and the encrypted information therein is read, thereby further improving the speed of reading the encrypted information.
  • the method further comprises: regenerating and saving a new random number after the encrypted information is read, or when receiving a new password input by the user; according to the new password and the new random number, according to a predetermined function Generate a new target random address; store the encrypted information to the new target random address, mark the new target random address as occupied, and delete the encrypted information stored in the target random address.
  • the user wants to change the password, he can enter a new password, so that the new target random address can be regenerated, so that the encrypted information can be stored in the new target random address, thus preventing the biometric template from being stolen due to password leakage. Further, the security of the encrypted information is further ensured, and in order to save storage space, the encrypted information in the original target random address is also deleted.
  • deletion method may overwrite the encrypted information stored in the target random address with a random value, or mark the target random address as idle.
  • the target random address can be replaced again, thereby avoiding the problem that the illegal elements steal the encrypted information.
  • FIG. 2 shows a block diagram of a storage device for encrypting information in accordance with one embodiment of the present invention.
  • the storage device 200 for encrypting information is used for a terminal, comprising: a prompt input unit 202, for prompting a user to input a password when performing encryption information storage; and a generating unit 204, For generating and saving a random number; the generating unit 204 is further configured to: generate a target random address according to a predetermined function by using a password and a random number; and the storage device 200 for encrypting the information further includes: a storage unit 206, configured to store the encrypted information to the target random Address and mark the target random address as occupied.
  • the target random address for storing the encrypted information can be generated by the predetermined function by using the user input password and the randomly obtained random number, wherein the encrypted information is stored in the user data partition in the terminal, and the user data partition is
  • the storage unit 206 is in block units, and the target random address storing the encrypted information is the offset address in the user data partition.
  • the predetermined function is a hash function
  • the calculation formula of the target random address is:
  • A is the target random address
  • hash is the hash function
  • password is the password
  • s is the random number
  • mod is the modulo operation
  • b is the number of user data partition blocks.
  • the encrypted information includes, but is not limited to, one or a combination of the following: a biometric template, character information, gesture information, and the like.
  • the encrypted information can be randomly stored in the target random address, thereby preventing the criminals from acquiring the storage location for storing the encrypted information, thereby stealing the encrypted information of the user, and improving the security of the encrypted information.
  • the method further includes: a determining unit 208, configured to determine whether the target random address is already occupied; the generating unit 204 is further configured to: if the target random address is already occupied, regenerate the random number, and repeat The step of generating the target random address according to the predetermined function according to the password and the random number; the storage unit 206 is further configured to: directly perform the step of storing the encrypted information to the target random address if the target random address is not occupied.
  • the target random address when the target random address is already occupied, the encrypted information is forcibly stored to the target random address, and the original information stored at the target random address is lost. Therefore, in order to avoid such a situation, When the obtained target random address is already occupied, the target random address needs to be re-acquired until the acquired target is randomly occupied, and then the encrypted letter is obtained.
  • the information is stored in the target random address; if the target is randomly occupied, the encrypted information can be directly stored in the target random address. In this way, the problem of the loss of the original information stored in the target random address is avoided, and the user experience is improved.
  • the prompt input unit 202 is further configured to: when the encrypted information is read, prompt the user to input a password;
  • the storage device 200 for encrypting the information further includes: an obtaining unit 210, configured to acquire the random number according to the password
  • the obtaining unit 210 is further configured to: acquire a target random address storing the encrypted information according to a predetermined function according to the password and the random number; and the storage device 200 for encrypting the information further includes: a reading unit 212, configured to read from the target random address Encrypt information.
  • the user when the user wants to read the encrypted information, the user can input the corresponding password according to the prompt, so that the terminal can determine whether the corresponding password is consistent with the stored password, and if they are consistent, the target random address can be obtained. Read the encrypted information in it, otherwise the encrypted information cannot be read.
  • the user can read the encrypted information stored in the target random address through the correct password, which provides convenience for the user's reading process.
  • the creating unit 214 is configured to: after the target random address is marked as occupied, create a mapping relationship between the password and the target random address, and store the mapping relationship; the prompt input unit 202 is further configured to: When the encrypted information is read, the user is prompted to input the read password.
  • the determining unit 208 is further configured to: determine whether the read password matches the password;
  • the storage device 200 for encrypting the information further includes: an obtaining unit 210, configured to determine the read password and In the case of the password, the mapping relationship corresponding to the password is obtained to obtain the target random address through the mapping relationship; and the obtaining unit 210 is further configured to: read the encrypted information from the target random address.
  • the mapping relationship between the password and the target random address can be created, so that when the user wants to read the encrypted information, the password can be input and matched.
  • the password is read, and the mapping relationship is directly used to obtain the target random address, thereby reading the encrypted information stored in the target random address.
  • the target random address can be directly obtained through the mapping relationship by using the password, and the encrypted information therein is read, thereby further improving the speed of reading the encrypted information.
  • the generating unit 204 is further configured to: regenerate and save a new random number after the encrypted information is read, or when receiving a new password input by the user;
  • the unit 204 is further configured to: generate a new target random address according to a predetermined function according to the new password and the new random number;
  • the storage unit 206 is further configured to: store the encrypted information to the new target random address, and mark the new target random address as Occupy, while deleting the encrypted information stored in the target random address.
  • the user wants to change the password, he can enter a new password, so that the new target random address can be regenerated, so that the encrypted information can be stored in the new target random address, thus preventing the biometric template from being stolen due to password leakage. Further, the security of the encrypted information is further ensured, and in order to save storage space, the encrypted information in the original target random address is also deleted.
  • deletion method may overwrite the encrypted information stored in the target random address with a random value, or mark the target random address as idle.
  • the target random address can be replaced again, thereby avoiding the problem that the illegal elements steal the encrypted information.
  • Figure 3 shows a block diagram of a terminal in accordance with one embodiment of the present invention.
  • the terminal 300 includes the encrypted information access device 200 shown in FIG. 2, and therefore has the same technical effect as the encrypted information access device 200 shown in FIG. I will not repeat them here.
  • FIG. 4 shows a block diagram of a storage device for encrypting information according to another embodiment of the present invention.
  • the storage device for encrypting information is composed of a biometric template registration unit 402, a biometric template using unit 404, and a modified user password unit 406.
  • the above three units correspond to the flow of three functional operations, and each process triggers a corresponding addressing operation.
  • FIG. 5 shows a flow chart of the biometric template registration shown in FIG.
  • the biometric template registration includes: step 502, the user inputs the biometric, extracts the biometric template; step 504, prompts the user to input the user password; step 506, after receiving the user password, generates a random number; step 508 Calculating the target random address according to the user password and the random number; in step 510, determining whether the target random address is idle, if the determination result is yes, proceeding to step 512, if the determination result is otherwise, proceeding to step 506; and step 512, storing the biometric template to Target random address; step 514, saving the random number.
  • the random number cannot be stored together with the biometric template and should be saved to a storage address that can be directly read; in step 516, the target random address is marked as occupied.
  • FIG. 6 shows a flow chart of modifying the user password shown in FIG.
  • the method includes: Step 602: determining that the input password input by the user is consistent with the user password; and step 604, prompting the user to input a new one. a password; step 606, repeating the confirmation of the user's new password; step 608, generating a new random number, and generating a new target random address based on the new password and the new random number; step 610, storing the biometric template to the new target random address, saving the new The random number marks the new target random address as occupied; in step 612, the biometric template stored in the target random address is deleted. Specifically, the deletion method may overwrite the biometric template stored in the target random address with a random value, or may be the target. Random addresses are marked as free.
  • Figure 7 shows a flow chart of the use of the biometric template shown in Figure 4.
  • the biometric template uses the principles that must be followed:
  • the new target random address is recalculated, and the biometric template is stored in the new target random address;
  • the process includes: step 702, prompting the user to input the user password; step 704, reading the last stored random number; step 706, calculating the target random address according to the user password and the random number; step 708, reading the biometric template; 710, using a biometric template; step 712, generating a new random number; step 714, calculating a new target random address according to the user password and the new random number; step 716, determining whether the target random address is idle, and if the determination result is yes, proceeding to the step 718, if the judgment result is otherwise, proceed to step 712; step 718, will be born
  • the feature template is stored to the new target random address; in step 720, the new random number is saved; in step 722, the new target random address is marked as occupied; in step 724, the biometric template stored in the target random address is deleted, specifically, deleted.
  • the method may overwrite the biometric template stored in the target random address with a random value, or mark the target random address as idle.
  • the encrypted information can be randomly stored in the target random address, thereby preventing the criminals from acquiring the storage location for storing the encrypted information, thereby stealing the encrypted information of the user. Improves the security of encrypted information.
  • the description of the terms “one embodiment”, “another embodiment” or the like means that a specific feature, structure, material or characteristic described in connection with the embodiment or example is included in at least one implementation of the present invention. In the example or example. In the present specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Health & Medical Sciences (AREA)
  • Health & Medical Sciences (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Bioethics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Storage Device Security (AREA)

Abstract

本发明提出了一种加密信息的存储方法、加密信息的存储装置和终端，其中，加密信息的存储方法包括：在进行加密信息存储时，提示用户输入口令；生成并保存随机数；口令和随机数按照预定函数生成目标随机地址；以及将加密信息存储至目标随机地址，并将目标随机地址标记为已占用。通过该技术方案，能够将加密信息随机存储至目标随机地址中，避免了不法分子获取存储加密信息的存储位置，进而窃取用户的加密信息，提升了加密信息的安全性。

Description

加密信息的存储方法、加密信息的存储装置和终端 技术领域
本发明涉及终端技术领域，具体而言，涉及一种加密信息的存储方法、一种加密信息的存储装置和一种终端。
背景技术
目前，越来越多的智能终端具有生物特征识别功能，为了保证生物特征模板在终端中存储的安全性，目前有多种存储方案，例如将生物特征模板采用加密存储或将生物特征模板存储于系统的安全区域等。
但是，采用加密存储时，当用户使用密钥进行解密，或者不法分子攻击存储区域时，可能会导致生物特征模板的泄露，并且，如果黑客取得终端的系统权限存储在安全区域的生物特征模板同样会泄露。
因此，需要一种新的技术方案，可以将加密信息随机存储至目标随机地址中，进一步提升加密信息的安全性。
发明内容
本发明正是基于上述问题，提出了一种新的技术方案，可以将加密信息随机存储至目标随机地址中，进一步提升加密信息的安全性。
有鉴于此，本发明的第一方面提出了一种加密信息的存储方法，用于终端，包括：在进行加密信息存储时，提示用户输入口令；生成并保存随机数；所述口令和所述随机数按照预定函数生成目标随机地址；以及将所述加密信息存储至所述目标随机地址，并将所述目标随机地址标记为已占用。
在该技术方案中，能够利用用户输入口令和随机获取的随机数，通过预定函数来生成用于存储加密信息的目标随机地址，其中，加密信息存储于终端中的用户数据分区内，用户数据分区内的存储单元以块为单位，存储加密信息的目标随机地址就是用户数据分区内的偏移地址，例如，预定 函数是哈希函数，则目标随机地址的计算公式为：
A＝[hash(password，s)mod]b，
其中，A是目标随机地址，hash是哈希函数，password是口令，s是随机数，mod是取模运算，b是用户数据分区块数。
另外，该加密信息包括但不限于下列之一或其组合：生物特征模板、字符信息、手势信息等。
通过该技术方案，能够将加密信息随机存储至目标随机地址中，避免了不法分子获取存储加密信息的存储位置，进而窃取用户的加密信息，提升了加密信息的安全性。
在上述技术方案中，优选地，在所述将所述加密信息存储至所述目标随机地址之前，还包括：判断所述目标随机地址是否已经被占用；如果所述目标随机地址已经被占用，则重新生成所述随机数，并重复根据所述口令和所述随机数按照预定函数生成所述目标随机地址的步骤，否则，直接进行到将所述加密信息存储至所述目标随机地址的步骤。
在该技术方案中，在目标随机地址已经被占用时，强行将加密信息存储至该目标随机地址，则存储在该目标随机地址的原始信息就会丢失，因此，为了避免这种情况的出现，需要在获取的目标随机地址已经被占用时，重新获取目标随机地址，直至获取的目标随机未被占用，再将加密信息存储到该目标随机地址中；如果目标随机未被占用，就可以直接将加密信息存储到该目标随机地址中。这样，避免了存储在目标随机地址中的原始信息丢失的问题，提高了用户体验。
在上述技术方案中，优选地，还包括：在读取所述加密信息时，提示用户输入所述口令；根据所述口令，获取所述随机数；根据所述口令和所述随机数，按照所述预定函数获取存储所述加密信息的所述目标随机地址；以及从所述目标随机地址中读取所述加密信息。
在该技术方案中，当用户想要读取加密信息时，就可以根据提示输入相应口令，这样，终端就可以判断该相应口令与存储的口令是否一致，如果一致，就可以获取目标随机地址并读取其中的加密信息，否则，无法读取加密信息。通过该技术方案，用户能够通过正确的口令读取存储于目标 随机地址中的加密信息，为用户的读取过程提供了便利性。
在上述技术方案中，优选地，还包括：在将所述目标随机地址标记为已占用后，创建所述口令与所述目标随机地址的映射关系，并存储所述映射关系；在读取所述加密信息时，提示用户输入读取口令；判断所述读取口令与所述口令是否匹配；在判定所述读取口令与所述口令时，获取与所述口令对应的映射关系，以通过所述映射关系获取所述目标随机地址；以及从所述目标随机地址中读取所述加密信息。
在该技术方案中，由于口令与目标随机地址是一一对应的，因此，可以创建口令与目标随机地址的映射关系，这样在用户想要读取加密信息时，就可以输入与该口令相匹配的读取口令，并直接利用该映射关系获取目标随机地址，进而读取存储在目标随机地址中的加密信息。通过该技术方案，利用口令通过该映射关系能够直接获取目标随机地址，并读取其中的加密信息，进一步提高了读取加密信息的快捷性。
在上述技术方案中，优选地，还包括：在所述加密信息被读取之后，或在接收到用户输入的新口令时，重新生成并保存新随机数；根据所述新口令和所述新随机数，按照所述预定函数生成新目标随机地址；将所述加密信息存储至所述新目标随机地址，并将所述新目标随机地址标记为已占用，同时删除保存在所述目标随机地址的所述加密信息。
在该技术方案中，如果目标随机地址中的加密信息已经被读取，则需要重新获取新随机数，并重新生成新目标随机地址将加密信息存储至其中，为了节省存储空间，还需要将原来的目标随机地址中的加密信息删除；
如果用户想要修改口令，就可以输入新口令，这样就可以重新生成新目标随机地址，以便加密信息能够存储到新目标随机地址中，这样防止了因口令泄露而导致生物特征模板被窃取的问题，进一步保证了加密信息的安全，并且为了节省存储空间，还将原来的目标随机地址中的加密信息删除。
另外，删除方式可以用随机值覆盖目标随机地址中存储的加密信息，也可以将目标随机地址标记为空闲。
通过上述技术方案，在用户每次读取完存储至目标随机地址中的加密信息，以及用户需要更改口令之后，都能重新更换目标随机地址，避免了被不法分子窃取加密信息的问题。
本发明的第二方面提出了一种加密信息的存储装置，用于终端，包括：提示输入单元，用于在进行加密信息存储时，提示用户输入口令；生成单元，用于生成并保存随机数；所述生成单元还用于：所述口令和所述随机数按照预定函数生成目标随机地址；以及加密信息的存储装置还包括：存储单元，用于将所述加密信息存储至所述目标随机地址，并将所述目标随机地址标记为已占用。
在该技术方案中，能够利用用户输入口令和随机获取的随机数，通过预定函数来生成用于存储加密信息的目标随机地址，其中，加密信息存储于终端中的用户数据分区内，用户数据分区内的存储单元以块为单位，存储加密信息的目标随机地址就是用户数据分区内的偏移地址，例如，预定函数是哈希函数，则目标随机地址的计算公式为：
A＝[hash(password，s)mod]b，
其中，A是目标随机地址，hash是哈希函数，password是口令，s是随机数，mod是取模运算，b是用户数据分区块数。
另外，该加密信息包括但不限于下列之一或其组合：生物特征模板、字符信息、手势信息等。
通过该技术方案，能够将加密信息随机存储至目标随机地址中，避免了不法分子获取存储加密信息的存储位置，进而窃取用户的加密信息，提升了加密信息的安全性。
在上述技术方案中，优选地，还包括：判断单元，用于判断所述目标随机地址是否已经被占用；所述生成单元还用于：如果所述目标随机地址已经被占用，则重新生成所述随机数，并重复根据所述口令和所述随机数按照预定函数生成所述目标随机地址的步骤；所述存储单元还用于：如果所述目标随机地址未被占用，直接进行到将所述加密信息存储至所述目标随机地址的步骤。
在该技术方案中，在目标随机地址已经被占用时，强行将加密信息存 储至该目标随机地址，则存储在该目标随机地址的原始信息就会丢失，因此，为了避免这种情况的出现，需要在获取的目标随机地址已经被占用时，重新获取目标随机地址，直至获取的目标随机未被占用，再将加密信息存储到该目标随机地址中；如果目标随机未被占用，就可以直接将加密信息存储到该目标随机地址中。这样，避免了存储在目标随机地址中的原始信息丢失的问题，提高了用户体验。
在上述技术方案中，优选地，所述提示输入单元还用于：在读取所述加密信息时，提示用户输入所述口令；加密信息的存储装置还包括：获取单元，用于根据所述口令，获取所述随机数；所述获取单元还用于：根据所述口令和所述随机数，按照所述预定函数获取存储所述加密信息的所述目标随机地址；以及加密信息的存储装置还包括：读取单元，用于从所述目标随机地址中读取所述加密信息。
在该技术方案中，当用户想要读取加密信息时，就可以根据提示输入相应口令，这样，终端就可以判断该相应口令与存储的口令是否一致，如果一致，就可以获取目标随机地址并读取其中的加密信息，否则，无法读取加密信息。通过该技术方案，用户能够通过正确的口令读取存储于目标随机地址中的加密信息，为用户的读取过程提供了便利性。
在上述技术方案中，优选地，创建单元，用于在将所述目标随机地址标记为已占用后，创建所述口令与所述目标随机地址的映射关系，并存储所述映射关系；提示输入单元还用于：在读取所述加密信息时，提示用户输入读取口令；所述判断单元还用于：判断所述读取口令与所述口令是否匹配；所述加密信息的存储装置还包括：所述获取单元还用于：在判定所述读取口令与所述口令时，获取与所述口令对应的映射关系，以通过所述映射关系获取所述目标随机地址；以及所述获取单元还用于：从所述目标随机地址中读取所述加密信息。
在该技术方案中，由于口令与目标随机地址是一一对应的，因此，可以创建口令与目标随机地址的映射关系，这样在用户想要读取加密信息时，就可以输入与该口令相匹配的读取口令，并直接利用该映射关系获取目标随机地址，进而读取存储在目标随机地址中的加密信息。通过该技术 方案，利用口令通过该映射关系能够直接获取目标随机地址，并读取其中的加密信息，进一步提高了读取加密信息的快捷性。
在上述技术方案中，优选地，所述生成单元还用于：在所述加密信息被读取之后，或在接收到用户输入的新口令时，重新生成并保存新随机数；所述生成单元还用于：根据所述新口令和所述新随机数，按照所述预定函数生成新目标随机地址；所述存储单元还用于：将所述加密信息存储至所述新目标随机地址，并将所述新目标随机地址标记为已占用，同时删除保存在所述目标随机地址的所述加密信息。
在该技术方案中，如果目标随机地址中的加密信息已经被读取，则需要重新获取新随机数，并重新生成新目标随机地址将加密信息存储至其中，为了节省存储空间，还需要将原来的目标随机地址中的加密信息删除；
如果用户想要修改口令，就可以输入新口令，这样就可以重新生成新目标随机地址，以便加密信息能够存储到新目标随机地址中，这样防止了因口令泄露而导致生物特征模板被窃取的问题，进一步保证了加密信息的安全，并且为了节省存储空间，还将原来的目标随机地址中的加密信息删除。
另外，删除方式可以用随机值覆盖目标随机地址中存储的加密信息，也可以将目标随机地址标记为空闲。
通过上述技术方案，在用户每次读取完存储至目标随机地址中的加密信息，以及用户需要更改口令之后，都能重新更换目标随机地址，避免了被不法分子窃取加密信息的问题。
本发明的第三方面提出了一种终端，包括：上述第二方面中任一项所述的加密信息存取装置，因此，具有和上述第二方面中任一项所述的加密信息存取装置相同的技术效果，在此不再赘述。
通过本发明的技术方案，能够将加密信息随机存储至目标随机地址中，避免了不法分子获取存储加密信息的存储位置，进而窃取用户的加密信息，提升了加密信息的安全性。
附图说明
图1示出了根据本发明的一个实施例的加密信息的存储方法的流程图；
图2示出了根据本发明的一个实施例的加密信息的存储装置的框图；
图3示出了根据本发明的一个实施例的终端的框图；
图4示出了根据本发明的另一个实施例的加密信息的存储装置的框图；
图5示出了图4示出的生物特征模板注册的流程图；
图6示出了图4示出的修改用户口令的流程图；
图7示出了图4示出的生物特征模板使用的流程图。
具体实施方式
为了能够更清楚地理解本发明的上述目的、特征和优点，下面结合附图和具体实施方式对本发明进行进一步的详细描述。需要说明的是，在不冲突的情况下，本申请的实施例及实施例中的特征可以相互组合。
在下面的描述中阐述了很多具体细节以便于充分理解本发明，但是，本发明还可以采用其他不同于在此描述的其他方式来实施，因此，本发明的保护范围并不受下面公开的具体实施例的限制。
图1示出了根据本发明的一个实施例的加密信息的存储方法的流程图。
如图1所示，根据本发明的一个实施例的加密信息的存储方法，用于终端，包括：步骤102，在进行加密信息存储时，提示用户输入口令；步骤104，生成并保存随机数；步骤106，口令和随机数按照预定函数生成目标随机地址；步骤108，将加密信息存储至目标随机地址，并将目标随机地址标记为已占用。
在该技术方案中，能够利用用户输入口令和随机获取的随机数，通过预定函数来生成用于存储加密信息的目标随机地址，其中，加密信息存储于终端中的用户数据分区内，用户数据分区内的存储单元以块为单位，存储加密信息的目标随机地址就是用户数据分区内的偏移地址。
例如，预定函数是哈希函数，则目标随机地址的计算公式为：
A＝[hash(password，s)mod]b，
其中，A是目标随机地址，hash是哈希函数，password是口令，s是随机数，mod是取模运算，b是用户数据分区块数。
另外，该加密信息包括但不限于下列之一或其组合：生物特征模板、字符信息、手势信息等。
通过该技术方案，能够将加密信息随机存储至目标随机地址中，避免了不法分子获取存储加密信息的存储位置，进而窃取用户的加密信息，提升了加密信息的安全性。
在上述技术方案中，优选地，在步骤108之前，还包括：判断目标随机地址是否已经被占用；如果目标随机地址已经被占用，则重新生成随机数，并重复根据口令和随机数按照预定函数生成目标随机地址的步骤，否则，直接进行到将加密信息存储至目标随机地址的步骤。
在该技术方案中，在目标随机地址已经被占用时，强行将加密信息存储至该目标随机地址，则存储在该目标随机地址的原始信息就会丢失，因此，为了避免这种情况的出现，需要在获取的目标随机地址已经被占用时，重新获取目标随机地址，直至获取的目标随机未被占用，再将加密信息存储到该目标随机地址中；如果目标随机未被占用，就可以直接将加密信息存储到该目标随机地址中。这样，避免了存储在目标随机地址中的原始信息丢失的问题，提高了用户体验。
在上述技术方案中，优选地，还包括：在读取加密信息时，提示用户输入口令；根据口令，获取随机数；根据口令和随机数，按照预定函数获取存储加密信息的目标随机地址；以及从目标随机地址中读取加密信息。
在该技术方案中，当用户想要读取加密信息时，就可以根据提示输入相应口令，这样，终端就可以判断该相应口令与存储的口令是否一致，如果一致，就可以获取目标随机地址并读取其中的加密信息，否则，无法读取加密信息。通过该技术方案，用户能够通过正确的口令读取存储于目标随机地址中的加密信息，为用户的读取过程提供了便利性。
在上述技术方案中，优选地，还包括：在步骤108之后，创建口令与 目标随机地址的映射关系，并存储映射关系；在读取加密信息时，提示用户输入读取口令；判断读取口令与口令是否匹配；在判定读取口令与口令时，获取与口令对应的映射关系，以通过映射关系获取目标随机地址；以及从目标随机地址中读取加密信息。
在该技术方案中，由于口令与目标随机地址是一一对应的，因此，可以创建口令与目标随机地址的映射关系，这样在用户想要读取加密信息时，就可以输入与该口令相匹配的读取口令，并直接利用该映射关系获取目标随机地址，进而读取存储在目标随机地址中的加密信息。通过该技术方案，利用口令通过该映射关系能够直接获取目标随机地址，并读取其中的加密信息，进一步提高了读取加密信息的快捷性。
在上述技术方案中，优选地，还包括：在加密信息被读取之后，或在接收到用户输入的新口令时，重新生成并保存新随机数；根据新口令和新随机数，按照预定函数生成新目标随机地址；将加密信息存储至新目标随机地址，并将新目标随机地址标记为已占用，同时删除保存在目标随机地址的加密信息。
在该技术方案中，如果目标随机地址中的加密信息已经被读取，则需要重新获取新随机数，并重新生成新目标随机地址将加密信息存储至其中，为了节省存储空间，还需要将原来的目标随机地址中的加密信息删除；
如果用户想要修改口令，就可以输入新口令，这样就可以重新生成新目标随机地址，以便加密信息能够存储到新目标随机地址中，这样防止了因口令泄露而导致生物特征模板被窃取的问题，进一步保证了加密信息的安全，并且为了节省存储空间，还将原来的目标随机地址中的加密信息删除。
另外，删除方式可以用随机值覆盖目标随机地址中存储的加密信息，也可以将目标随机地址标记为空闲。
通过上述技术方案，在用户每次读取完存储至目标随机地址中的加密信息，以及用户需要更改口令之后，都能重新更换目标随机地址，避免了被不法分子窃取加密信息的问题。
图2示出了根据本发明的一个实施例的加密信息的存储装置的框图。
如图2所示，根据本发明的一个实施例的加密信息的存储装置200，用于终端，包括：提示输入单元202，用于在进行加密信息存储时，提示用户输入口令；生成单元204，用于生成并保存随机数；生成单元204还用于：口令和随机数按照预定函数生成目标随机地址；以及加密信息的存储装置200还包括：存储单元206，用于将加密信息存储至目标随机地址，并将目标随机地址标记为已占用。
在该技术方案中，能够利用用户输入口令和随机获取的随机数，通过预定函数来生成用于存储加密信息的目标随机地址，其中，加密信息存储于终端中的用户数据分区内，用户数据分区内的存储单元206以块为单位，存储加密信息的目标随机地址就是用户数据分区内的偏移地址，例如，预定函数是哈希函数，则目标随机地址的计算公式为：
A＝[hash(password，s)mod]b，
其中，A是目标随机地址，hash是哈希函数，password是口令，s是随机数，mod是取模运算，b是用户数据分区块数。
另外，该加密信息包括但不限于下列之一或其组合：生物特征模板、字符信息、手势信息等。
通过该技术方案，能够将加密信息随机存储至目标随机地址中，避免了不法分子获取存储加密信息的存储位置，进而窃取用户的加密信息，提升了加密信息的安全性。
在上述技术方案中，优选地，还包括：判断单元208，用于判断目标随机地址是否已经被占用；生成单元204还用于：如果目标随机地址已经被占用，则重新生成随机数，并重复根据口令和随机数按照预定函数生成目标随机地址的步骤；存储单元206还用于：如果目标随机地址未被占用，直接进行到将加密信息存储至目标随机地址的步骤。
在该技术方案中，在目标随机地址已经被占用时，强行将加密信息存储至该目标随机地址，则存储在该目标随机地址的原始信息就会丢失，因此，为了避免这种情况的出现，需要在获取的目标随机地址已经被占用时，重新获取目标随机地址，直至获取的目标随机未被占用，再将加密信 息存储到该目标随机地址中；如果目标随机未被占用，就可以直接将加密信息存储到该目标随机地址中。这样，避免了存储在目标随机地址中的原始信息丢失的问题，提高了用户体验。
在上述技术方案中，优选地，提示输入单元202还用于：在读取加密信息时，提示用户输入口令；加密信息的存储装置200还包括：获取单元210，用于根据口令，获取随机数；获取单元210还用于：根据口令和随机数，按照预定函数获取存储加密信息的目标随机地址；以及加密信息的存储装置200还包括：读取单元212，用于从目标随机地址中读取加密信息。
在该技术方案中，当用户想要读取加密信息时，就可以根据提示输入相应口令，这样，终端就可以判断该相应口令与存储的口令是否一致，如果一致，就可以获取目标随机地址并读取其中的加密信息，否则，无法读取加密信息。通过该技术方案，用户能够通过正确的口令读取存储于目标随机地址中的加密信息，为用户的读取过程提供了便利性。
在上述技术方案中，优选地，创建单元214，用于在将目标随机地址标记为已占用后，创建口令与目标随机地址的映射关系，并存储映射关系；提示输入单元202还用于：在读取加密信息时，提示用户输入读取口令；判断单元208还用于：判断读取口令与口令是否匹配；加密信息的存储装置200还包括：获取单元210，用于在判定读取口令与口令时，获取与口令对应的映射关系，以通过映射关系获取目标随机地址；以及获取单元210还用于：从目标随机地址中读取加密信息。
在该技术方案中，由于口令与目标随机地址是一一对应的，因此，可以创建口令与目标随机地址的映射关系，这样在用户想要读取加密信息时，就可以输入与该口令相匹配的读取口令，并直接利用该映射关系获取目标随机地址，进而读取存储在目标随机地址中的加密信息。通过该技术方案，利用口令通过该映射关系能够直接获取目标随机地址，并读取其中的加密信息，进一步提高了读取加密信息的快捷性。
在上述技术方案中，优选地，生成单元204还用于：在加密信息被读取之后，或在接收到用户输入的新口令时，重新生成并保存新随机数；生 成单元204还用于：根据新口令和新随机数，按照预定函数生成新目标随机地址；存储单元206还用于：将加密信息存储至新目标随机地址，并将新目标随机地址标记为已占用，同时删除保存在目标随机地址的加密信息。
在该技术方案中，如果目标随机地址中的加密信息已经被读取，则需要重新获取新随机数，并重新生成新目标随机地址将加密信息存储至其中，为了节省存储空间，还需要将原来的目标随机地址中的加密信息删除；
如果用户想要修改口令，就可以输入新口令，这样就可以重新生成新目标随机地址，以便加密信息能够存储到新目标随机地址中，这样防止了因口令泄露而导致生物特征模板被窃取的问题，进一步保证了加密信息的安全，并且为了节省存储空间，还将原来的目标随机地址中的加密信息删除。
另外，删除方式可以用随机值覆盖目标随机地址中存储的加密信息，也可以将目标随机地址标记为空闲。
通过上述技术方案，在用户每次读取完存储至目标随机地址中的加密信息，以及用户需要更改口令之后，都能重新更换目标随机地址，避免了被不法分子窃取加密信息的问题。
图3示出了根据本发明的一个实施例的终端的框图。
如图3所示，根据本发明的一个实施例的终端300，包括图2示出的加密信息存取装置200，因此，具有和图2示出的加密信息存取装置200相同的技术效果，在此不再赘述。
图4示出了根据本发明的另一个实施例的加密信息的存储装置的框图。
如图4所示，加密信息的存储装置由生物特征模板注册单元402、生物特征模板使用单元404和修改用户口令单元406组成。
其中，上述三个单元对应三个功能操作的流程，每个流程都会触发相应的寻址操作。
图5示出了图4示出的生物特征模板注册的流程图。
如图5所示，生物特征模板注册包括：步骤502，用户输入生物特征，提取生物特征模板；步骤504，提示用户输入用户口令；步骤506，收到用户口令后，生成一个随机数；步骤508，根据用户口令和随机数计算目标随机地址；步骤510，判断目标随机地址是否空闲，如果判断结果为是则进入步骤512，如果判断结果为否则进入步骤506；步骤512，将生物特征模板存储至目标随机地址；步骤514，保存上述随机数。其中，随机数不能和生物特征模板一起存储，应该保存至可以直接读取的存储地址中；步骤516，将目标随机地址标记为已占用。
图6示出了图4示出的修改用户口令的流程图。
如图6所示，为了防止口令泄露后导致生物特征模板被窃取的问题，允许用户修改用户口令，具体包括：步骤602，确定用户输入的输入口令与用户口令一致；步骤604，提示用户输入新口令；步骤606，重复确认用户的新口令；步骤608，生成新随机数，并根据新口令和新随机数生成新目标随机地址；步骤610，将生物特征模板存储至新目标随机地址，保存新随机数将新目标随机地址标记为已占用；步骤612，删除目标随机地址中存储的生物特征模板，具体地，删除方式可以用随机值覆盖目标随机地址中存储的生物特征模板，也可以将目标随机地址标记为空闲。
图7示出了图4示出的生物特征模板使用的流程图。
如图7所示，生物特征模板使用必须遵循的原则：
(1)先寻址、后使用；
(2)使用后要重新计算新目标随机地址，将生物特征模板存入新目标随机地址中；
(3)需要将原目标随机地址中的生物特征模板删除。
具体地流程包括：步骤702，提示用户输入用户口令；步骤704，读取上一次存储的随机数；步骤706，根据用户口令和随机数计算目标随机地址；步骤708，读取生物特征模板；步骤710，使用生物特征模板；步骤712，生成一个新随机数；步骤714，根据用户口令和新随机数计算新目标随机地址；步骤716，判断目标随机地址是否空闲，如果判断结果为是则进入步骤718，如果判断结果为否则进入步骤712；步骤718，将生 物特征模板存储至新目标随机地址；步骤720，保存上述新随机数；步骤722，将新目标随机地址标记为已占用；步骤724，删除目标随机地址中存储的生物特征模板，具体地，删除方式可以用随机值覆盖目标随机地址中存储的生物特征模板，也可以将目标随机地址标记为空闲。
以上结合附图详细说明了本发明的技术方案，通过本发明的技术方案，能够将加密信息随机存储至目标随机地址中，避免了不法分子获取存储加密信息的存储位置，进而窃取用户的加密信息，提升了加密信息的安全性。
在本发明中，术语“第一”、“第二”、“第三”仅用于描述的目的，而不能理解为指示或暗示相对重要性。对于本领域的普通技术人员而言，可以根据具体情况理解上述术语在本发明中的具体含义。
在本说明书的描述中，术语“一个实施例”、“另一个实施例”等的描述意指结合该实施例或示例描述的具体特征、结构、材料或特点包含于本实用新型的至少一个实施例或示例中。在本说明书中，对上述术语的示意性表述不一定指的是相同的实施例或实例。而且，描述的具体特征、结构、材料或特点可以在任何的一个或多个实施例或示例中以合适的方式结合。
以上所述仅为本发明的优选实施例而已，并不用于限制本发明，对于本领域的技术人员来说，本发明可以有各种更改和变化。凡在本发明的精神和原则之内，所作的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。

Claims (11)

  1. 一种加密信息的存储方法，用于终端，其特征在于，包括：
    在进行加密信息存储时，提示用户输入口令；
    生成并保存随机数；
    所述口令和所述随机数按照预定函数生成目标随机地址；以及
    将所述加密信息存储至所述目标随机地址，并将所述目标随机地址标记为已占用。
  2. 根据权利要求1所述的加密信息的存储方法，其特征在于，在所述将所述加密信息存储至所述目标随机地址之前，还包括：
    判断所述目标随机地址是否已经被占用；
    如果所述目标随机地址已经被占用，则重新生成所述随机数，并重复根据所述口令和所述随机数按照预定函数生成所述目标随机地址的步骤，否则，直接进行到将所述加密信息存储至所述目标随机地址的步骤。
  3. 根据权利要求2所述的加密信息的存储方法，其特征在于，还包括：
    在读取所述加密信息时，提示用户输入所述口令；
    根据所述口令，获取所述随机数；
    根据所述口令和所述随机数，按照所述预定函数获取存储所述加密信息的所述目标随机地址；以及
    从所述目标随机地址中读取所述加密信息。
  4. 根据权利要求3所述的加密信息的存储方法，其特征在于，还包括：
    在将所述目标随机地址标记为已占用后，创建所述口令与所述目标随机地址的映射关系，并存储所述映射关系；
    在读取所述加密信息时，提示用户输入读取口令；
    判断所述读取口令与所述口令是否匹配；
    在判定所述读取口令与所述口令时，获取与所述口令对应的映射关系，以通过所述映射关系获取所述目标随机地址；以及
    从所述目标随机地址中读取所述加密信息。
  5. 根据权利要求3或4所述的加密信息的存储方法，其特征在于，还包括：
    在所述加密信息被读取之后，或在接收到用户输入的新口令时，重新生成并保存新随机数；
    根据所述新口令和所述新随机数，按照所述预定函数生成新目标随机地址；
    将所述加密信息存储至所述新目标随机地址，并将所述新目标随机地址标记为已占用，同时删除保存在所述目标随机地址的所述加密信息。
  6. 一种加密信息的存储装置，用于终端，其特征在于，包括：
    提示输入单元，用于在进行加密信息存储时，提示用户输入口令；
    生成单元，用于生成并保存随机数；
    所述生成单元还用于：所述口令和所述随机数按照预定函数生成目标随机地址；以及
    加密信息的存储装置还包括：
    存储单元，用于将所述加密信息存储至所述目标随机地址，并将所述目标随机地址标记为已占用。
  7. 根据权利要求6所述的加密信息的存储装置，其特征在于，还包括：
    判断单元，用于判断所述目标随机地址是否已经被占用；
    所述生成单元还用于：如果所述目标随机地址已经被占用，则重新生成所述随机数，并重复根据所述口令和所述随机数按照预定函数生成所述目标随机地址的步骤；
    所述存储单元还用于：如果所述目标随机地址未被占用，直接进行到将所述加密信息存储至所述目标随机地址的步骤。
  8. 根据权利要求7所述的加密信息的存储装置，其特征在于，所述提示输入单元还用于：在读取所述加密信息时，提示用户输入所述口令；
    加密信息的存储装置还包括：
    获取单元，用于根据所述口令，获取所述随机数；
    所述获取单元还用于：根据所述口令和所述随机数，按照所述预定函数获取存储所述加密信息的所述目标随机地址；以及
    加密信息的存储装置还包括：
    读取单元，用于从所述目标随机地址中读取所述加密信息。
  9. 根据权利要求8所述的加密信息的存储装置，其特征在于，还包括：
    创建单元，用于在将所述目标随机地址标记为已占用后，创建所述口令与所述目标随机地址的映射关系，并存储所述映射关系；
    提示输入单元还用于：在读取所述加密信息时，提示用户输入读取口令；
    所述判断单元还用于：判断所述读取口令与所述口令是否匹配；
    所述获取单元还用于：在判定所述读取口令与所述口令时，获取与所述口令对应的映射关系，以通过所述映射关系获取所述目标随机地址；以及
    所述获取单元还用于：从所述目标随机地址中读取所述加密信息。
  10. 根据权利要求8或9所述的加密信息的存储装置，其特征在于，所述生成单元还用于：在所述加密信息被读取之后，或在接收到用户输入的新口令时，重新生成并保存新随机数；
    所述生成单元还用于：根据所述新口令和所述新随机数，按照所述预定函数生成新目标随机地址；
    所述存储单元还用于：将所述加密信息存储至所述新目标随机地址，并将所述新目标随机地址标记为已占用，同时删除保存在所述目标随机地址的所述加密信息。
  11. 一种终端，其特征在于，包括如权利要求6至10中任一项所述的加密信息存取装置。
PCT/CN2015/088476 2015-08-11 2015-08-30 加密信息的存储方法、加密信息的存储装置和终端 Ceased WO2017024628A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510489174.3A CN105631353A (zh) 2015-08-11 2015-08-11 加密信息的存储方法、加密信息的存储装置和终端
CN201510489174.3 2015-08-11

Publications (1)

Publication Number Publication Date
WO2017024628A1 true WO2017024628A1 (zh) 2017-02-16

Family

ID=56046274

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/088476 Ceased WO2017024628A1 (zh) 2015-08-11 2015-08-30 加密信息的存储方法、加密信息的存储装置和终端

Country Status (2)

Country Link
CN (1) CN105631353A (zh)
WO (1) WO2017024628A1 (zh)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110247760A (zh) * 2019-06-18 2019-09-17 徐州徐工挖掘机械有限公司 一种can总线数据的加密、解密方法及装置
CN111079167A (zh) * 2019-12-22 2020-04-28 哈尔滨新中新电子股份有限公司 一种通过cpld实现的硬件电路加密装置
CN111090893A (zh) * 2019-12-22 2020-05-01 哈尔滨新中新电子股份有限公司 一种硬件电路加密方法

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110175441A (zh) * 2019-04-12 2019-08-27 平安普惠企业管理有限公司 基于生物识别的数据管理方法、装置、设备及存储介质
CN110210259B (zh) * 2019-06-05 2021-03-05 深圳忆联信息系统有限公司 一种固态硬盘的数据保护方法及其系统
CN112738082B (zh) * 2020-12-28 2023-05-12 广州辰创科技发展有限公司 基于云存储的保密信息存储验证方法、设备及存储介质
CN114117463A (zh) * 2021-10-14 2022-03-01 深圳供电局有限公司 一种网络信息的安全保护方法及系统
CN115330500A (zh) * 2022-10-14 2022-11-11 国网天津市电力公司营销服务中心 一种电动汽车电力双向交易方法及系统

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2000214944A (ja) * 1999-01-26 2000-08-04 Toshiba Corp コンピュ―タシステム及びそのパスワ―ド管理方法
CN1527208A (zh) * 2003-09-25 2004-09-08 联想(北京)有限公司 基于身份认证的计算机安全及加密的实现方法和装置
US8751804B1 (en) * 2011-06-30 2014-06-10 Decho Corporation Controlling access to data within encrypted copies of files using salt parameters
CN104573438A (zh) * 2013-10-29 2015-04-29 江苏华御信息技术有限公司 一种基于文件生物标识的文件管理系统及方法

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4036838B2 (ja) * 2004-03-12 2008-01-23 インターナショナル・ビジネス・マシーンズ・コーポレーション セキュリティ装置、情報処理装置、セキュリティ装置が実行する方法、情報処理装置が実行する方法、該方法を実行させるための装置実行可能なプログラムおよびチケット・システム
GB0611128D0 (en) * 2006-06-06 2006-07-19 Sony Uk Ltd Encoding and detecting apparatus
CN102004675A (zh) * 2010-11-11 2011-04-06 福建星网锐捷网络有限公司 跨进程数据传输方法、装置及网络设备
CN103596173B (zh) * 2013-09-30 2018-04-06 北京智谷睿拓技术服务有限公司 无线网络认证方法、客户端及服务端无线网络认证装置
CN104506506B (zh) * 2014-12-15 2017-12-29 齐宇庆 一种电子信息安全存储系统及存储方法
CN104484615B (zh) * 2014-12-31 2017-08-08 清华大学无锡应用技术研究院 适用于可重构阵列架构的基于空间随机化抗故障攻击方法

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2000214944A (ja) * 1999-01-26 2000-08-04 Toshiba Corp コンピュ―タシステム及びそのパスワ―ド管理方法
CN1527208A (zh) * 2003-09-25 2004-09-08 联想(北京)有限公司 基于身份认证的计算机安全及加密的实现方法和装置
US8751804B1 (en) * 2011-06-30 2014-06-10 Decho Corporation Controlling access to data within encrypted copies of files using salt parameters
CN104573438A (zh) * 2013-10-29 2015-04-29 江苏华御信息技术有限公司 一种基于文件生物标识的文件管理系统及方法

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110247760A (zh) * 2019-06-18 2019-09-17 徐州徐工挖掘机械有限公司 一种can总线数据的加密、解密方法及装置
CN110247760B (zh) * 2019-06-18 2022-06-10 徐州徐工挖掘机械有限公司 一种can总线数据的加密、解密方法及装置
CN111079167A (zh) * 2019-12-22 2020-04-28 哈尔滨新中新电子股份有限公司 一种通过cpld实现的硬件电路加密装置
CN111090893A (zh) * 2019-12-22 2020-05-01 哈尔滨新中新电子股份有限公司 一种硬件电路加密方法
CN111079167B (zh) * 2019-12-22 2023-06-16 哈尔滨新中新电子股份有限公司 一种通过cpld实现的硬件电路加密装置

Also Published As

Publication number Publication date
CN105631353A (zh) 2016-06-01

Similar Documents

Publication Publication Date Title
WO2017024628A1 (zh) 加密信息的存储方法、加密信息的存储装置和终端
CN111367834B (zh) 自加密驱动器
US11469885B2 (en) Remote grant of access to locked data storage device
CN102915263B (zh) 一种数据备份方法、系统和设备
US9996480B2 (en) Resilient device authentication system with metadata binding
US11831752B2 (en) Initializing a data storage device with a manager device
US11606206B2 (en) Recovery key for unlocking a data storage device
TW202036347A (zh) 資料儲存、驗證方法及裝置
US11334677B2 (en) Multi-role unlocking of a data storage device
CN104268458B (zh) 一种车辆程序加密验证方法及加密、验证装置
CN107563207B (zh) 加密方法、装置及解密方法、装置
WO2019109968A1 (zh) 一种解锁sim卡的方法及移动终端
US10089439B2 (en) Medical device with cryptosystem and method of implementing the same
CN110659522B (zh) 存储介质安全认证方法、装置、计算机设备和存储介质
CN115859267A (zh) 一种应用程序安全启动的方法、存储控制芯片和电子设备
CN109064596B (zh) 密码管理方法、装置及电子设备
CN108199827B (zh) 客户端代码完整性校验方法、存储介质、电子设备及系统
CN115001813B (zh) 一种信息安全保密方法、系统、设备及介质
US9805186B2 (en) Hardware protection for encrypted strings and protection of security parameters
JP4965512B2 (ja) 認証システム、情報処理装置、記憶装置、認証方法及びそのプログラム
CN100495421C (zh) 一种基于usb设备的认证保护方法
CN103177224A (zh) 用于终端的外接存储卡数据保护的方法及装置
WO2016173267A1 (zh) 一种完整性校验方法和装置
CN105468999A (zh) 数据保密方法和移动硬盘
CN111030819A (zh) 一种基于加解密算法的验真方法、系统、终端及存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15900825

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 15900825

Country of ref document: EP

Kind code of ref document: A1