WO2018019298A1

WO2018019298A1 - Fingerprint generation method utilized in terminal, and device

Info

Publication number: WO2018019298A1
Application number: PCT/CN2017/094981
Authority: WO
Inventors: 李伟华
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-07-28
Filing date: 2017-07-28
Publication date: 2018-02-01
Also published as: CN107665299A

Abstract

A fingerprint generation method utilized in a terminal comprises: acquiring hardware identifier information of a terminal used to uniquely identify the terminal; generating a fingerprint image on the basis of an image display characteristic and the hardware identifier information of the terminal; and generating, according to pixels of the fingerprint image, a terminal fingerprint.

Description

Terminal fingerprint generating method and device

Technical field

The present disclosure relates to, but is not limited to, the field of communications, and in particular, to a terminal fingerprint generating method and apparatus.

Background technique

The terminal identifier is like a person's resident ID number, which can uniquely identify a terminal. For a mobile terminal, there is a corresponding terminal identifier. For example, the mobile phone has an IMEI (International Mobile Equipment Identity) code or a MAC (Media Access Control) address (physical address or hardware address). However, in the field of mobile communications, just as a person's identity card may be forged by criminals, these terminal identifiers are also easily counterfeited, posing a security risk to some mobile applications, such as mobile payments. Therefore, it is necessary to identify the terminal using an identifier that is not easy to counterfeit and is easily distinguishable. For people, you can use human biological attributes, such as fingerprints, irises, etc. to uniquely identify a person. The fingerprint of the individual is unique and not easy to counterfeit. Fingerprint recognition has been widely used, such as company attendance and public security tracking suspects. Like a person, a terminal can also have a terminal fingerprint.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The terminal fingerprint can be generated according to the hardware information of the terminal. For example, the IMEI code or the MAC address is a relatively simple terminal fingerprint generated according to the terminal hardware.

In addition, regarding the generation of the terminal fingerprint, Apple provides a UDID (Unique Device Identifier) code as the terminal identifier for each mobile terminal device sold, such as an iPhone, and only one mobile terminal. The only UDID code, and almost no counterfeiting, therefore, UDID is very popular with mobile advertisers and game network operators, because they can determine the user's preferences based on the UDID code of Apple's mobile terminal device, and accurately count certain The download amount of a product. However, the generation of UDID involves tracking users and invading the privacy of users. Therefore, the UDID has been disabled.

In addition, regarding the generation of terminal fingerprints, Apple also designed an alternative to the UDID code - OpenUDID code (open UDID code), which is the first one in the mobile phone with the OpenUDID SDK (Software Development Kit). The mobile phone application of the package is generated. If the mobile application with the OpenUDID SDK package (such as the recovery system) is completely deleted, the OpenUDID code of the mobile phone will be regenerated, and the generated OpenUDID code is different from the previous value because, After completely deleting the data related to the mobile phone application with the OpenUDID SDK package in the mobile phone, this mobile phone is equivalent to the new terminal. That is to say, this method of generating a terminal fingerprint completely based on the software information in the terminal is also infeasible because the application in the mobile terminal device may be removed at any time, and once the application is removed, again The generated terminal fingerprint will be different from the previous one, so that the terminal fingerprint cannot function to uniquely identify the mobile terminal device, that is, it cannot function as the device fingerprint.

Therefore, it is necessary to ensure that the generated terminal fingerprint can uniquely identify a mobile terminal device while effectively preventing the counterfeiting.

The method and device for generating and maintaining a terminal fingerprint according to an embodiment of the present disclosure are used to ensure that the generated terminal fingerprint can uniquely identify a terminal and can effectively prevent the risk of being counterfeited.

An embodiment of the present disclosure provides a terminal fingerprint generating method, including:

Obtaining hardware identification information of the terminal, where the hardware identification information is used to uniquely identify the terminal;

Generating a fingerprint image based on image display characteristics of the terminal and the hardware identification information;

A terminal fingerprint is generated according to pixels of the fingerprint image.

Embodiments of the present disclosure also provide a computer readable storage medium storing computer executable instructions that, when executed, implement the terminal fingerprint generation method.

The embodiment of the present disclosure further provides a terminal fingerprint generating apparatus, including:

The information obtaining module is configured to: obtain hardware identification information of the terminal, where the hardware identification information is used to uniquely identify the terminal;

An image generating module, configured to: generate a fingerprint image based on an image display characteristic of the terminal and the hardware identification information;

The fingerprint generating module is configured to: generate a terminal fingerprint according to the pixels of the fingerprint image.

The embodiment of the present disclosure further provides a computer storage medium having stored therein computer executable instructions for performing the terminal fingerprint generation method of any of the foregoing.

The beneficial effects of the embodiments of the present disclosure are:

According to the terminal fingerprint generating method and apparatus and the computer storage medium provided by the embodiments of the present disclosure, by acquiring hardware identification information capable of uniquely identifying the terminal, a fingerprint image is generated based on the image display characteristic of the terminal and the hardware identification information of the terminal, according to the pixel of the fingerprint image. The terminal fingerprint is generated; since the hardware identification information itself has the function of uniquely identifying the terminal, the fingerprint image generated based on the hardware identification information is less likely to be duplicated; meanwhile, when the fingerprint image is generated, the image is displayed due to different terminals. The characteristics are different, so the generated fingerprint image has a great difference in pixels, so the terminal fingerprint generated based on the pixel of the fingerprint image is also unique, and since the generation of the terminal fingerprint at least utilizes the unique identification function in the terminal hardware. The information and the software have unique identification information. It is difficult for other terminals to imitate the generated fake terminal fingerprints. While ensuring the unique fingerprint of the terminal fingerprint, the security of the terminal fingerprint is improved.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

BRIEF abstract

FIG. 1 is a flowchart of a method for generating a terminal fingerprint according to an embodiment of the present disclosure;

2 is a flow chart of generating a fingerprint of a terminal according to a fingerprint image;

FIG. 3 is a flowchart of another method for generating a terminal fingerprint according to an embodiment of the present disclosure;

4 is a flow chart of generating a fingerprint image;

FIG. 5 is a schematic structural diagram of a terminal fingerprint generating apparatus according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of another terminal fingerprint generating apparatus according to an embodiment of the present disclosure.

Preferred embodiment of the present disclosure

Embodiments of the present disclosure will be described below with reference to the accompanying drawings.

For convenience of description, the following examples are described.

Example 1:

The embodiment of the present disclosure provides a method for generating a fingerprint of a terminal, as shown in FIG. 1:

S102. Obtain hardware identification information of the terminal.

The hardware terminal identifier in this embodiment may be used to uniquely identify the terminal, and the hardware terminal identifier may be at least one of an IMEI code or a MAC address, that is, in this embodiment, the acquired hardware terminal identifier may be a separate one. The IMEI code is either a single MAC address or a combination of an IMEI code and a MAC address.

The Chinese definition of the IMEI code is the mobile terminal international identity code, which is also called the "serial number", which is a mark distinguishing the mobile terminal and stored in the EEPROM (Electrically Erasable Read Only Memory, commonly known as "chip") of the mobile terminal. Can be used to monitor stolen or invalid mobile terminals. The total length of the IMEI code is 15 digits: the first 6 digits are the TAC (Type Approval Code) code, which is generally representative of the model; the 2 digits of the TAC code is the FAC (Final Assembly Code). The origin of the mobile terminal device; the 6-digit number adjacent to the FAC code is the serial number, which generally represents the production sequence number of the terminal; the last 1 digit is the SP code (ie, the spare code), which is used as a backup as the name suggests, and its number is Manufacturers do the setup.

The MAC address, which can be translated into media access control, or physical address, hardware address, etc., is used to define the location of the network terminal. In the OSI (Open System Interconnection) model, the Layer 2 data link layer is responsible for the MAC address. Therefore, a host will have a MAC address, and the MAC address is determined by the network card and is fixed.

S104. Generate a fingerprint image based on image display characteristics and hardware identification information of the terminal.

When generating a fingerprint image, you can use the canvas fingerprint generation function in HTML (Hyper Text Mark-up Language) 5, that is, the Canvas (canvas) element to perform the drawing operation. Since the pixel resolutions of different terminals are different, at the same time, the Web browser of different terminals uses different graphics processing engines, different image export options, different default compression levels, etc., and from the pixel level, different operations The system uses different settings and algorithms for anti-aliasing and sub-pixel rendering operations, so even if the same drawing operation is done on different operating systems, the resulting fingerprints are displayed differently when displayed on the terminal. In this embodiment The difference between the pixel resolution of the terminal, the various setting options for image processing in the terminal browser, and the algorithms used by different terminal operating systems for anti-aliasing and sub-pixel rendering will eventually result in different fingerprint images. Therefore, these parameters can be summarized as the image display characteristics of the terminal.

When the fingerprint image is generated, the corresponding software and hardware in the terminal can be called. The hardware includes a GPU (Graphic Processing Unit), and the GPU is a concept relative to the CPU (Central Processing Unit). In modern computers (especially home systems), the processing of graphics becomes more and more important and requires a dedicated graphics core processor. The GPU is the "heart" of the graphics card, which is equivalent to the role of the CPU in the computer. It determines the grade and most of the performance of the graphics card, and is also the basis for the difference between 2D (two-dimensional) graphics cards and 3D (three-dimensional) graphics cards. The tools used in software can be a graphics library, which is a library for rendering computer graphics on a display. It typically provides a set of optimized functions to perform common rendering tasks. Common graphics libraries such as OpenGL (Open Graphics Library) are a powerful and easy-to-call underlying graphics library that provides a professional graphical program interface. It is a hardware-independent software interface and is the most widely used in the industry. use. OpenGL provides OpenGL ES (OpenGL for Embedded Systems) for embedded terminals such as mobile terminals, PDAs (Personal Digital Assistants) and game consoles, and is a subset of OpenGL. In this embodiment, the mobile terminal device may be controlled to input the acquired hardware identification information as an input of a graphic program interface provided by the OpenGL ES to generate a corresponding fingerprint image.

The display effect of the fingerprint image may be determined by the image display characteristic of the terminal device, wherein the resolution of the terminal, the anti-aliasing characteristic of the terminal web browser, the image rendering characteristic, and the like all determine the display effect of the fingerprint image on the terminal device.

In the present embodiment, the generated fingerprint image is an RGB (three primary color) image, but those skilled in the art can understand that the fingerprint image can also be a binary image or a grayscale image. The format of the generated fingerprint image may be BMP (extension of bitmap file), JPEG (Joint Photographic Experts Group, is an international image compression standard), TIFF (Tag Image File Format) ), RAW (unprocessed, uncompressed format), PNG (Portable Network Graphics), and the like.

S106. Generate a terminal fingerprint according to the pixels of the fingerprint image.

In this embodiment, the principle of generating a terminal fingerprint according to the fingerprint image is that the fingerprint images generated by different terminals according to the hardware identifier of the terminal and the image display characteristic of the terminal are different in pixels, and therefore, the pixels are converted into corresponding ones. The terminal fingerprint formed after the character or string should also be unique.

The embodiment can avoid that the terminal fingerprint is easily counterfeited or the unique identification function of the terminal fingerprint is insufficient according to the hardware information of the terminal or the terminal fingerprint generated by the software information of the terminal.

The flow of generating a terminal fingerprint according to a pixel of a fingerprint image provided in an example of the embodiment is described below. Please refer to FIG. 2:

S202. Extract pixel values of a plurality of pixels in the fingerprint image.

When extracting the pixel value of each pixel in a plurality of pixels (also referred to as pixel points), the position of the pixel in the fingerprint image is recorded together, similar to such a pixel expression - "{X offset , Y offset, RGB}" to record the pixel and the corresponding pixel value.

In the pixel expression, the X offset and the Y offset respectively express the distance of the pixel from the origin of the image, and the origin of the image may be preset by the user or determined according to the default value of the terminal system.

In this embodiment, since the generated fingerprint image is in the RGB color mode, RGB is changed by three color channels of red (Red, R), green (Green), blue (Blue, B), and The superposition of each other to obtain a variety of colors, therefore, the pixel value of each pixel is represented by three values together, for example, "forest green" color value through "34, 139, 34 "The three values are represented by the meaning of R=34, G=139, B=34. Since "RGB" has only one value in the above pixel expression, in the present embodiment, values representing three colors of red, green, and blue can be converted into one value, thereby facilitating participation in subsequent calculations, in this embodiment. Provides a conversion method based on the following formula when converting pixel values of RGB images:

Converted RGB value = Red + 256 * Green + 65536 * Blue;

E.g,

The RGB value of "Forest Green" after conversion = 34 + 256 * 139 + 65536 * 34 = 2263842.

S204. Arrange the pixel values of each pixel of the plurality of pixels and the pixel to form image pixel data.

Assuming that four fingerprint points are included in one fingerprint image, after extracting the four pixel points line by line, the obtained pixel expressions are {X1, Y1, RGB1}, {X2, Y2, RGB2}, {X3, respectively. Y3, RGB3} and {X4, Y4, RGB4}, it can be noted that the progressive extraction described in this embodiment may be extracted from left to right and top to bottom, or may be extracted in other orders. For example, extraction is performed sequentially from bottom to top and from left to left.

After obtaining the pixel expression of each pixel point of the plurality of pixel points, the pixel expression arrangement is spliced to form image pixel data. In the above example, the obtained image pixel data is “X1 Y1 RGB1 X2 Y2 RGB2 X3 Y3 RGB3 X4 Y4 RGB4".

S206. Perform hash conversion on image pixel data to generate a terminal fingerprint.

In the present embodiment, the reason why the hash algorithm is used for the conversion is roughly because the hash algorithm cannot inversely derive the data originally involved in the hash operation based on the operation result after the operation result of the operation on a set of data. Based on this feature of the hash algorithm, it is possible to prevent the criminals from deriving the details of the generated terminal fingerprint according to the obtained terminal fingerprint, and then forging the user's terminal fingerprint, thereby causing security risks to the user's property and the like.

After obtaining the fingerprint of the terminal, the fingerprint of the terminal can be saved locally in the terminal. At the same time, in terms of mobile payment, terminal authentication, etc., the terminal can interact with the server through its own terminal fingerprint to allow the server to confirm the identity of the terminal. Therefore, the terminal fingerprint of the latest version of the terminal can also be stored on the server side. Therefore, after the terminal fingerprint is generated, the terminal fingerprint can be synchronized to the server side, and the server side can store the terminal fingerprint. When the server needs to identify the identity of the terminal, the terminal fingerprint can be directly extracted from the server and the terminal provides the terminal fingerprint. The terminal fingerprint performs matching verification to determine the identity information of the terminal.

The terminal fingerprint generating method provided by the embodiment uses the unique hardware identification information and the terminal image display characteristic in the terminal hardware information to generate a fingerprint image. Since the fingerprint image is unique at the pixel level, according to the fingerprint image, The terminal fingerprint generated by the pixel is also unique. While ensuring the uniqueness of the terminal fingerprint, because different terminals have different image display characteristics, the security of the terminal fingerprint can be ensured, and the fingerprint of the terminal can be effectively prevented from being forged or counterfeited. In addition, in some optional implementation manners of this embodiment, the fingerprint of the terminal is generated according to the fingerprint image. At that time, the hash algorithm is used, and the hash algorithm can prevent the criminals from deriving the details of the generated terminal fingerprint according to the obtained terminal fingerprint, and can ensure the security of the terminal fingerprint.

Example 2:

The embodiment of the present disclosure further provides another terminal fingerprint generating method, which is basically the same as the terminal fingerprint generating method in the first example, but is adjusted in some details, and the terminal fingerprint generating method is performed in the following. For instructions, please refer to Figure 3:

S302. Acquire a fingerprint generation parameter input by a user.

The fingerprint generation parameter is input by the user, and this parameter may be data randomly input by the user. In order to ensure the security of the subsequent generation of the fingerprint of the terminal, in this embodiment, some limited conditions may be set for the fingerprint generation parameter, and then the input of the user is checked according to the qualification condition. For example, the length of the fingerprint generation parameter may be mandatory to be greater than the preset. The value, or the data required by the user, contains both numbers and letters. Of course, the fingerprint generation parameters input by the user may not be simple data, such as "lazy password" of "123456". When it is detected that the fingerprint generation parameter input by the user does not meet the requirement of the qualification condition, the user may be alerted, for example, outputting text or image information indicating the input error through the display screen of the terminal, or outputting the corresponding audio output interface according to the terminal. A prompt tone, so that the user can re-enter the input according to the alarm information until the input fingerprint generation parameter meets the requirements.

S304. Obtain hardware identification information of the terminal.

The hardware identification information obtained in this embodiment is at least one of information that can uniquely identify the terminal, such as an IMEI code and a MAC address. The description of the IMEI code and MAC address is not described here. Please refer to the previous introduction.

It can be understood that, in this embodiment, there is no strict time limit between the process of acquiring the hardware identification information of the terminal and the process of generating the parameter by the user, and the fingerprint generation parameter input by the user may be obtained first, or may be acquired first. Hardware identification information of the terminal.

S306. Generate a fingerprint image according to image display characteristics and hardware identification information of the terminal and fingerprint generation parameters.

The process of generating a fingerprint image in this embodiment will be described below with reference to FIG. 4:

S402. Generate a check code according to the hardware identification information and the fingerprint generation parameter.

The process of generating the check code may refer to the process of generating image pixel data in the first example, and sorting the hardware identification information and the fingerprint generation parameter according to a certain order, and then splicing the two sets of data to form a corresponding check code. Certainly, those skilled in the art can understand that the manner of generating the check code in the embodiment further includes multiple types, for example, the hardware identification information and the fingerprint generation parameter are calculated according to an algorithm, and the value is used as a check. code.

S404. Generate an image generation parameter according to the hardware identification information, the fingerprint generation parameter, and the check code.

The process of generating image generation parameters is similar to the process of generating a check code. The method of splicing the data after arranging may be used, or other algorithms may be used, but when generating image generation parameters, the input parameters are three. Not two.

In this embodiment, the fingerprint image is not directly generated according to the fingerprint generation parameter and the hardware identification information input by the user, but the verification code is first calculated according to the fingerprint generation parameter and the hardware identification information, and then the image is generated based on the calculation result. The parameter, that is, the image generation parameter is determined according to the fingerprint generation parameter, the hardware identification information, and the calculated verification code, and the generation of the fingerprint image is performed according to the image generation parameter, and such an approach generally hopes to strengthen the fingerprint through multiple calculations in the middle. Image security.

S406. Calling the canvas fingerprint generation function generates and displays the fingerprint image according to the image generation parameter based on the image display characteristic of the terminal.

This process can directly call the Canvas function in HTML5, which is the core language of the World Wide Web, an application hypertext markup language under the standard universal markup language, including many SVG (Scalable Vector Graphics), Canvas, The 3D functions of WebGL (Web Graphics Library) and CSS (Cascading Style Sheet) 3 can be realized by directly calling the related functions when using Canvas.

The fingerprint generation image is generated based on the hardware identification information, the fingerprint generation parameter, and the check code generation image generation parameter as an input of the canvas fingerprint generation function, and then the fingerprint image is displayed based on the image display characteristic of the terminal. Since different image display characteristics will determine different image display effects, that is, even if the same image is displayed on a terminal with different image display characteristics, different displays will be presented at the pixel level. effect.

S308. Generate a terminal fingerprint according to the pixels of the fingerprint image.

The process of generating a terminal fingerprint according to the pixels of the fingerprint image has been described in detail in the first example, and will not be described again here.

S310: Monitor the terminal, and when determining that the terminal meets the preset condition, re-generate the terminal fingerprint for the terminal.

Generally speaking, when a person is an adult, if the fingerprint does not suffer special damage, it generally does not change, that is, the human physiological fingerprint has a very high stability. However, the fingerprint of the terminal is different, because the terminal fingerprint is generated according to the hardware information and software information of the terminal, and the hardware will gradually age over time, and the software will be gradually updated and upgraded, so the terminal fingerprint will be in a period of time. It is relatively stable, but from a long time, the fingerprint of the terminal will change. Therefore, there may be a corresponding terminal fingerprint update mechanism to complete the replacement of the fingerprint of the new and old terminals. In this regard, the present embodiment provides an update mechanism for the terminal fingerprint—monitoring the terminal, and when determining that the terminal meets the preset condition, Generate a terminal fingerprint for the terminal.

In this embodiment, there are at least two cases in which the fingerprint of the terminal is regenerated.

First, it is monitored that the software related to the image display characteristics of the terminal, or the hardware related to the image display characteristics, or the software related to the image display characteristics and the hardware related to the image display characteristics are updated. The software related to the image display characteristics includes a web browser in the terminal, etc., and the hardware related to the image display characteristics includes a terminal display screen and the like. When the display screen of the terminal is replaced, the resolution rate of the display changes, or the version of the web browser used by the terminal changes. For example, if the browser is upgraded, a new terminal fingerprint can be re-created for the terminal. To replace the old version of the terminal fingerprint.

Second, it is monitored that the user inputs a terminal fingerprint update request to the terminal. The longer the terminal fingerprint is used, the more likely it is to be impersonated. Therefore, after using the fingerprint of a terminal for a period of time, the user may take the initiative to propose a fingerprint that needs to be updated. Therefore, after receiving the fingerprint. In the case of a user request, the terminal fingerprint can also be regenerated.

It can be understood that, in this embodiment, after the terminal fingerprint is regenerated, it can be synchronized to the server side.

Another terminal fingerprint generating method provided by an embodiment of the present disclosure is based on the first example, When the terminal fingerprint is generated, the fingerprint generation parameters input by the user are combined. Since the fingerprint generation parameters input by the user are random, the uniqueness and security of the terminal fingerprint can be ensured. At the same time, the terminal fingerprint generation method provided by the present example also monitors the update of the software and hardware information related to the terminal fingerprint generation in the terminal and the user's requirement for updating the terminal fingerprint in real time, and re-executes the generation work when the terminal fingerprint needs to be regenerated. , can effectively ensure the security of the terminal fingerprint.

Example three:

This embodiment also provides a terminal fingerprint generating device. Please refer to FIG. 5:

The terminal fingerprint generating device 50 includes an information acquiring module 502, an image generating module 504, and a fingerprint generating module 506.

The information obtaining module 502 is configured to: acquire hardware identification information of the terminal. The hardware terminal identifier obtained by the information acquiring module 502 in this embodiment may be used to uniquely identify the terminal, and the hardware terminal identifier may be at least one of an IMEI code or a MAC address, that is, the hardware terminal acquired in this embodiment. The identifier may be a single IMEI code or one of a separate MAC address, or a combination of an IMEI code and a MAC address.

The Chinese definition of the IMEI code is the mobile terminal international identity code, which is also called the “serial number”. It is a symbol for distinguishing the mobile terminal and stored in the EEPROM (commonly known as “chip”) of the mobile terminal, which can be used to monitor the theft or invalid. Mobile terminal. The total length of the IMEI code is 15 digits: the first 6 digits are the TAC (Type Approval Code) code, which is generally representative of the model; the 2 digits of the TAC code is the FAC (Final Assembly Code). The origin of the mobile terminal device; the 6-digit number adjacent to the FAC code is the serial number, which generally represents the production sequence number of the terminal; the last 1 digit is the SP code (ie, the spare code), which is used as a backup as the name suggests, and its number is Manufacturers do the setup.

The image generation module 504 is configured to generate a fingerprint image based on the image display characteristics of the terminal and the hardware identification information. When the image generation module 504 generates the fingerprint image, the canvas fingerprint generation function in HTML5, that is, the Canvas element, can be used for the drawing operation. Due to the different pixel resolutions of different terminals, at the same time, different browsers use different graphics processing engines and different browsers in different terminals. Image export options, different default compression levels, etc.; at the pixel level, different operating systems use different settings and algorithms for anti-aliasing and sub-pixel rendering operations, so even on different operating systems The drawing operation, when the fingerprint image generated by the image generating module 504 is displayed on the terminal, the pixels presented are different. In this embodiment, the difference in pixel resolution of the terminal, various setting options regarding image processing in the terminal browser, and algorithms used by different terminal operating systems for anti-aliasing and sub-pixel rendering ultimately leads to generation. The fingerprint images are different, so these parameters can be summarized into the image display characteristics of the terminal.

When the image generation module 504 generates the fingerprint image, the corresponding software and hardware in the terminal may be invoked, and the hardware includes the GPU. The GPU is a concept relative to the CPU, and the graphics are processed in a modern computer (especially a home system). It is becoming more and more important to have a dedicated graphics core processor. The GPU is the "heart" of the graphics card, which is equivalent to the role of the CPU in the computer. It determines the grade and most of the performance of the graphics card, and is also the basis for the difference between the 2D graphics card and the 3D graphics card. The tool used by the image generation module 504 in software can be a graphics library, which is a library for rendering computer graphics on a display, which typically provides a set of optimized functions to perform common rendering tasks. A common graphics library, such as OpenGL, is a powerful, easy-to-call underlying graphics library that provides a professional graphical program interface. It is a hardware-independent software interface and is the most widely used in the industry. OpenGL provides OpenGL ES for embedded terminals such as mobile terminals, PDAs and game consoles, and is a subset of OpenGL. In this embodiment, the image generation module 504 may input the acquired hardware identification information as an input to a graphics program interface provided by the OpenGL ES to generate a corresponding fingerprint image.

The display effect of the fingerprint image will be determined by the image display characteristics of the terminal device, wherein the resolution of the terminal, the anti-aliasing property of the terminal web browser, the image rendering characteristics, and the like all determine the display effect of the fingerprint image on the terminal device.

In this embodiment, the fingerprint image generated by the image generation module 504 is an RGB image, but those skilled in the art can understand that the fingerprint image can also be a binary image or a grayscale image. The format of the fingerprint image generated by the image generation module 504 may be any one of BMP, JPEG, TIFF, RAW, PNG, and the like.

The fingerprint generation module 506 is configured to generate a terminal fingerprint according to pixels of the fingerprint image. In this embodiment, the principle of generating a terminal fingerprint according to the fingerprint image is based on the hardware identifier and the terminal of the terminal. The image display characteristics of the fingerprint images generated by different terminals are different in pixels. Therefore, the terminal fingerprint formed by converting these pixels into corresponding characters or character strings should also be unique.

The fingerprint generating module 506 is configured to: extract pixel values of a plurality of pixels in the fingerprint image, and align each pixel of the plurality of pixels and pixel values of the pixel to form image pixel data, and perform hash conversion on the image pixel data. Terminal fingerprint.

The fingerprint generation module 506 records the position of the pixel in the fingerprint image together when extracting the pixel value of each pixel of the plurality of pixels, similar to such a pixel expression - "{X offset, Y offset , RGB}" to record the pixel point and the pixel value corresponding to the pixel.

In this embodiment, since the generated fingerprint image is in the RGB color mode, RGB is changed by the three color channels of red (R), green (G), and blue (B) and their superposition with each other. A variety of colors are obtained. Therefore, the pixel value of each pixel is represented by three values. For example, "forest green" has a color value of three values of "34, 139, 34". The meaning of the representation is R=34, G=139, B=34. Since "RGB" has only one value in the above pixel expression, in the present embodiment, the fingerprint generation module 506 can convert values representing three colors of red, green, and blue into one value, thereby facilitating participation in subsequent calculations. In this embodiment, a conversion mode is provided. When the fingerprint generation module 506 converts the pixel values of the RGB image, the following formula is performed:

Converted RGB value = Red + 256 * Green + 65536 * Blue;

E.g,

Assuming that four fingerprint points are included in one fingerprint image, the fingerprint generation module 506 extracts the four pixel points row by row, and the obtained pixel expressions are {X1, Y1, RGB1}, {X2, Y2, RGB2}. , {X3, Y3, RGB3} and {X4, Y4, RGB4}, it can be noted that the progressive extraction described in this embodiment may be extracted from left to right and from top to bottom, or may be Other sequences are extracted, for example, from bottom to top and from left to left.

After obtaining the pixel expression of each of the plurality of pixel points, the fingerprint generation module 506 splicing the pixel expression arrangement to form image pixel data. In the above example, the obtained image pixel data is “X1 Y1 RGB1 X2 Y2 RGB2 X3 Y3 RGB3 X4 Y4 RGB4”.

After obtaining the fingerprint of the terminal, the fingerprint generating module 506 can save the fingerprint of the terminal locally in the terminal. At the same time, in terms of mobile payment, terminal authentication, etc., the terminal can interact with the server through its own terminal fingerprint to allow the server to confirm the identity of the terminal. Therefore, the terminal fingerprint of the latest version of the terminal can also be stored on the server side. Therefore, after the terminal fingerprint is generated, the fingerprint generating module 506 can also synchronize the fingerprint of the terminal to the server side, and let the server side store the fingerprint of the terminal. When the server needs to identify the identity of the terminal, the terminal can be directly extracted from the server. The fingerprint is matched and verified with the terminal fingerprint provided by the terminal, thereby determining the identity information of the terminal.

The terminal fingerprint generating apparatus 50 provided by the embodiment generates the fingerprint image by using the unique hardware identification information and the terminal image display characteristic in the terminal hardware information. Since the fingerprint image is unique at the pixel level, the fingerprint image is based on the fingerprint image. The terminal fingerprint generated by the pixel is also unique. While ensuring the uniqueness of the terminal fingerprint, because different terminals have different image display characteristics, the security of the terminal fingerprint can be ensured, and the fingerprint of the terminal can be effectively prevented from being forged or counterfeited. In addition, in some examples of the embodiment, when the fingerprint of the terminal is generated according to the fingerprint image, the hash algorithm is used, and the hash algorithm can prevent the illegal molecule from deriving the generated fingerprint of the terminal according to the obtained terminal fingerprint, and can Ensure the security of the terminal fingerprint.

Example four:

The embodiment further provides another terminal fingerprint generating device, which also includes an information acquiring module, an image generating module and a fingerprint generating module. However, in addition to setting the hardware identification information for uniquely identifying the terminal, the information acquisition module in the device is further configured to: acquire the fingerprint generation parameter input by the user. When the image generation module generates the fingerprint image, in addition to the image display characteristic and the hardware identification information of the terminal, the image acquisition module may be combined with the information acquisition module. The obtained fingerprint input parameters of the user input are performed.

The fingerprint generation parameter is input by the user, and this parameter may be data randomly input by the user. In order to ensure the security of the subsequent generation of the fingerprint of the terminal, in this embodiment, some limited conditions may be set for the fingerprint generation parameter, and then the input of the user is checked according to the qualification condition. For example, the length of the fingerprint generation parameter may be mandatory to be greater than the preset. The value, or the data required by the user, must contain both numbers and letters. Of course, the fingerprint generation parameters input by the user may not be simple data, such as "lazy password" of "123456". When it is detected that the fingerprint generation parameter input by the user does not meet the requirement of the qualification condition, the user may be alerted, for example, outputting text or image information indicating the input error through the display screen of the terminal, or outputting the corresponding audio output interface according to the terminal. A prompt tone, so that the user can re-enter the input according to the alarm information until the input fingerprint generation parameter meets the requirements.

When the image generation module generates the fingerprint image, the fingerprint image is not directly generated according to the fingerprint generation parameter and the hardware identification information input by the user, but the verification code is first calculated according to the fingerprint generation parameter and the hardware identification information, and then the image is obtained based on the calculation result. The parameter is generated, that is, the image generation parameter is determined according to the fingerprint generation parameter, the hardware identification information, and the calculated verification code, and the fingerprint image is generated according to the image generation parameter, which is generally expected to be strengthened by multiple calculations in the middle. The security of the fingerprint image.

Generally speaking, when a person is an adult, if the fingerprint does not suffer special damage, it generally does not change, that is, the human physiological fingerprint has a very high stability. However, the fingerprint of the terminal is different, because the terminal fingerprint is generated according to the hardware information and software information of the terminal, and the hardware will gradually age over time, and the software will be gradually updated and upgraded, so the terminal fingerprint will be in a period of time. It is relatively stable, but from a long time, the fingerprint of the terminal will change. Therefore, there may be a corresponding terminal fingerprint update mechanism to complete the replacement of the fingerprint of the new and old terminals. In this regard, the present embodiment provides an update mechanism for the terminal fingerprint—monitoring the terminal, and when determining that the terminal meets the preset condition, Generate a terminal fingerprint for the terminal. Therefore, as shown in FIG. 6, in another terminal fingerprint generating apparatus proposed in an example of the embodiment, the terminal fingerprint generating apparatus 50 may include an information acquiring module 502, an image generating module 504, and a fingerprint generating module 506, and may also A monitoring update module 508 is included. The monitoring update module 508 monitors that there are two situations in which it is necessary to regenerate the fingerprint of the terminal:

First, the monitoring update module 508 monitors software related to the image display characteristics of the terminal, or hardware related to image display characteristics, software related to image display characteristics, and hardware update related to image display characteristics. The software related to the image display characteristics includes a web browser in the terminal, etc., and the hardware related to the image display characteristics includes a terminal display screen and the like. When the display screen of the terminal is replaced, the resolution rate of the display changes, or the version of the web browser used by the terminal changes. For example, if the browser is upgraded, a new terminal fingerprint can be re-created for the terminal. To replace the old version of the terminal fingerprint.

Second, the monitoring update module 508 monitors that the user inputs a terminal fingerprint update request to the terminal. The longer the terminal fingerprint is used, the more likely it is to be impersonated. Therefore, after using the fingerprint of a terminal for a period of time, the user may take the initiative to propose a fingerprint that needs to be updated. Therefore, after receiving the fingerprint. In the case of a user request, the terminal fingerprint can also be regenerated.

The terminal fingerprint generating apparatus 50 provided in this example and the third embodiment may be deployed on the terminal. The terminal here may be a mobile phone, a tablet computer, a PDA, or the like. The function of the information acquisition module can be implemented by the controller; when the fingerprint generation parameter input by the user needs to be acquired, the input unit of the terminal and the controller can jointly implement the function of the information acquisition module. The work of generating the fingerprint image and generating the fingerprint of the terminal can also be implemented by the controller, and the controller can also be configured to: implement the function of monitoring the update module.

In addition, in the embodiment, the terminal fingerprint generating device 50 can synchronize the generated terminal fingerprint to the server side, where the terminal, such as the communication unit of the mobile phone, can communicate with the server, and the terminal fingerprint is transmitted to the server.

The other terminal fingerprint generating device, based on the third example, combines the fingerprint generating parameters input by the user when generating the terminal fingerprint, and the fingerprint generating parameter input by the user has randomness, so that the fingerprint of the terminal can be guaranteed. Uniqueness and security. At the same time, the other terminal fingerprint generating device also monitors the update of the software and hardware information related to the terminal fingerprint generation in the terminal and the user's demand for updating the terminal fingerprint in real time, and re-executes the generating work when the terminal fingerprint needs to be regenerated. , can effectively ensure the security of the terminal fingerprint.

Embodiments of the present disclosure also provide a computer readable storage medium storing a computer executable The instruction, when the computer executable instructions are executed, implement the terminal fingerprint generation method.

Those skilled in the art will appreciate that the above-described modules or steps of the embodiments of the present disclosure may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices. Alternatively, they may be implemented by program code executable by a computing device such that they may be stored by a computing device in a computer storage medium (ROM/RAM, diskette, optical disk) and, in some cases, The steps shown or described may be performed in a different order than that herein, or they may be separately fabricated into different integrated circuit modules, or a plurality of the modules or steps may be implemented as a single integrated circuit module. Therefore, the present disclosure is not limited to any specific combination of hardware and software.

Those of ordinary skill in the art will appreciate that all or some of the steps, systems, and functional blocks/units of the methods disclosed above may be implemented as software, firmware, hardware, and suitable combinations thereof. In a hardware implementation, the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may be composed of several physical The components work together. Some or all of the components may be implemented as software executed by a processor, such as a digital signal processor or microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit. Such software may be distributed on a computer readable medium, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As is well known to those of ordinary skill in the art, the term computer storage medium includes volatile and nonvolatile, implemented in any method or technology for storing information, such as computer readable instructions, data structures, program modules or other data. Sex, removable and non-removable media. Computer storage media include, but are not limited to, Random Access Memory (RAM), Read-Only Memory (ROM), and Electrically Erasable Programmable Read-only Memory (EEPROM). Flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical disc storage, magnetic cassette, magnetic tape, disk storage or other magnetic storage device, or Any other medium used to store the desired information and that can be accessed by the computer. Moreover, it is well known to those skilled in the art that communication media typically includes computer readable instructions, data structures, program modules, or other data in a modulated data signal, such as a carrier wave or other transport mechanism, and can include any information delivery media. .

A person skilled in the art can understand that the technical solutions of the present disclosure may be modified or equivalent, without departing from the spirit and scope of the present disclosure, and should be included in the scope of the claims of the present disclosure.

Industrial applicability

Claims

A terminal fingerprint generating method includes:

Obtaining hardware identification information of the terminal, where the hardware identification information is used to uniquely identify the terminal;

Generating a fingerprint image based on image display characteristics of the terminal and the hardware identification information;

A terminal fingerprint is generated according to pixels of the fingerprint image.
The terminal fingerprint generating method according to claim 1, wherein the hardware identification information comprises at least one of an international mobile terminal identification code or a medium access control address of the terminal.
The terminal fingerprint generating method according to claim 1, after the generating the fingerprint of the terminal according to the fingerprint image, the method further comprises:

The terminal is monitored, and when it is determined that the terminal meets the preset condition, the terminal fingerprint is re-generated for the terminal.
The terminal fingerprint generating method according to claim 3, wherein the preset condition comprises at least one of the following two types:

Monitoring, by the terminal, software related to image display characteristics, or hardware related to image display characteristics, or software related to image display characteristics, and hardware related to image display characteristics are updated;

It is monitored that the user inputs a terminal fingerprint update request to the terminal.
The terminal fingerprint generating method according to any one of claims 1 to 4, wherein the generating a terminal fingerprint according to the pixel of the fingerprint image comprises:

Extracting pixel values of a plurality of pixels in the fingerprint image;

Aligning each pixel of the plurality of pixels and pixel values of the pixel to form image pixel data;

Performing hash conversion on the image pixel data to generate a terminal fingerprint.
The terminal fingerprint generating method according to any one of claims 1 to 4, wherein the controlling the terminal before generating the fingerprint image based on the hardware identification information further comprises:

Obtaining fingerprint generation parameters input by the user;

The generating the fingerprint image based on the image display characteristic of the terminal and the hardware identification information includes:

Generating an image generation parameter based on the hardware identification information and the fingerprint generation parameter;

The image generation parameter is used as an input of a canvas fingerprint generation function to generate a fingerprint image, and a display effect of the fingerprint image on a pixel level is determined by the image display characteristic.
The terminal fingerprint generating method according to claim 6, wherein the generating the image generating parameter based on the hardware identification information and the fingerprint generating parameter comprises:

Generating a check code according to the hardware identification information and the fingerprint generation parameter;

An image generation parameter is generated according to the hardware identification information and the fingerprint generation parameter and the check code.
A terminal fingerprint generating device includes:

The information obtaining module is configured to: obtain hardware identification information of the terminal, where the hardware identification information is used to uniquely identify the terminal;

An image generating module, configured to: generate a fingerprint image based on an image display characteristic of the terminal and the hardware identification information;

The fingerprint generating module is configured to: generate a terminal fingerprint according to the pixels of the fingerprint image.
The terminal fingerprint generating apparatus according to claim 8, wherein the fingerprint generating module is configured to: extract pixel values of a plurality of pixels in the fingerprint image, and each pixel of the plurality of pixels and the pixel Pixel values are arranged to form image pixel data, and are set to: perform hash conversion on the image pixel data to generate a terminal fingerprint.
The terminal fingerprint generating device according to claim 8 or 9, wherein

The information acquiring module is further configured to: acquire a fingerprint generating parameter input by the user;

The image generation module is configured to: generate an image generation parameter based on the hardware identification information and the fingerprint generation parameter; and generate the fingerprint image as an input of a canvas fingerprint generation function, where the fingerprint image is in a pixel The display effect on the level is determined by the image display characteristics.