WO2020052383A1

WO2020052383A1 - Fingerprint processing system and method, and fingerprint device

Info

Publication number: WO2020052383A1
Application number: PCT/CN2019/099655
Authority: WO
Inventors: 陈柳章
Original assignee: 深圳市文鼎创数据科技有限公司
Priority date: 2018-09-11
Filing date: 2019-08-07
Publication date: 2020-03-19
Also published as: CN109324843A; CN109324843B

Abstract

The present application is applied to the technical field of data processing, and provided thereby are a fingerprint processing system and method, and a fingerprint device. The system comprises: a fingerprint collection module, an Applet module, and a fingerprint processing module; the fingerprint collection module is used to collect fingerprint data and send the fingerprint data to the fingerprint processing module; the fingerprint processing module is used to process the fingerprint data according to a fingerprint operation instruction of the Applet module, and send the processing result to the Applet module. The present application may solve the problem in existing technology wherein each Applet application respectively adding a function of a fingerprint operation inside of an Applet program leads to a large amount of repeated development and resource waste between different Applet developers.

Description

Fingerprint processing system, method and fingerprint device

Technical field

The present application belongs to the field of data processing technology, and particularly relates to a fingerprint processing system, method, and fingerprint device.

Background technique

With the development of technology, fingerprint devices are gradually applied in people's lives and work. The fingerprint device is mainly used to collect a user's fingerprint and verify the fingerprint to determine whether the user has the corresponding authority. For example, a Java smart card can determine whether the user has the authority to pay by verifying the user's fingerprint.

Currently, the fingerprint collection, storage, and verification of some fingerprint devices are processed by the fingerprint collection module, and then the fingerprint collection module returns the verification results to the processor of the fingerprint device, which makes the fingerprint device less secure. The module was maliciously replaced. When the replaced module returns the verification result to the processor of the fingerprint device, the intruder can bypass the fingerprint verification and directly operate the smart card.

In this case, the researchers proposed to separate fingerprint collection and fingerprint verification. The fingerprint collection module is only responsible for the collection of fingerprint information. Fingerprint verification is performed by each Applet application in the Java virtual machine of the fingerprint device that requires fingerprint verification.

Because there can be multiple Applet applications in a fingerprint device, although the fingerprint verification scheme by the Applet application can improve the security of the fingerprint device, each Applet developer needs to learn the knowledge of fingerprint verification and increase the fingerprint operation inside the Applet program. Functions, which cause a lot of repeated development and waste of resources between different Applet developers.

In summary, in the prior art, each applet application adds a fingerprint operation function inside the applet program, which results in a lot of repeated development and waste of resources between different applet developers.

technical problem

In view of this, the embodiments of the present application provide a fingerprint processing system, method, and fingerprint device to solve the problem that each Applet application in the prior art adds a fingerprint operation function inside the Applet program, which has led to differences among different Applet developers. The problem of a lot of repeated development and waste of resources.

Technical solutions

A first aspect of the embodiments of the present application provides a fingerprint processing system, including: a fingerprint collection module, an Applet module, and a fingerprint processing module;

The fingerprint collection module is configured to collect fingerprint data and send the fingerprint data to the fingerprint processing module;

The fingerprint processing module is configured to process the fingerprint data according to a fingerprint operation instruction of the Applet module, and send a processing result to the Applet module.

A second aspect of the embodiments of the present application provides a fingerprint processing method, including:

Send a fingerprint operation instruction to the fingerprint processing module;

Receive the processing result returned by the fingerprint processing module after processing the fingerprint data sent by the fingerprint collection module according to the fingerprint operation instruction.

A third aspect of the embodiments of the present application provides a fingerprint device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, Implement the steps of the method as described above.

A fourth aspect of the embodiments of the present application provides a computer-readable storage medium, where the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, implements steps of the foregoing method.

Beneficial effect

In the fingerprint processing system of the present application, a fingerprint processing module is provided in addition to the fingerprint collection module and the Applet module. The fingerprint processing module is responsible for processing fingerprint data according to the fingerprint operation instructions of the Applet module, separating fingerprint data collection and verification, and improving fingerprints. The security of the device. At the same time, the applet module can complete the required fingerprint operation by calling the fingerprint processing module during the fingerprint operation. The developer does not need to write the content of the fingerprint operation when developing the applet module, which solves the various applet applications in the prior art Adding fingerprint operation functions inside Applet programs, respectively, has caused a lot of repeated development and waste of resources between different Applet developers.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings used in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings in the following description are only for the present application. For some embodiments, for those of ordinary skill in the art, other drawings can be obtained according to these drawings without paying creative labor.

FIG. 1 is a schematic diagram of a system structure of a fingerprint processing system according to an embodiment of the present application; FIG.

FIG. 2 is a schematic flowchart of a fingerprint processing method provided by an embodiment of the present application; FIG.

FIG. 3 is a schematic diagram of a fingerprint device according to an embodiment of the present application.

Embodiments of the invention

In the following description, for the purpose of illustration rather than limitation, specific details such as a specific system structure and technology are provided in order to thoroughly understand the embodiments of the present application. However, it should be clear to a person skilled in the art that the present application can also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the present application with unnecessary details.

In order to explain the technical solution described in this application, specific examples are used for description below.

It should be understood that when used in this specification and the appended claims, the term "comprising" indicates the presence of described features, integers, steps, operations, elements and / or components, but does not exclude one or more other features , The whole, steps, operations, elements, components, and / or their presence or addition.

It should also be understood that the terminology used in the description of this application is for the purpose of describing particular embodiments only and is not intended to limit the application. As used in this specification and the appended claims, the singular forms "a", "an" and "the" are intended to include the plural forms unless the context clearly indicates otherwise.

It should be further understood that the term "and / or" used in the specification of the application and the appended claims refers to any combination of one or more of the items listed in association and all possible combinations, and includes these combinations .

As used in this specification and the appended claims, the term "if" can be construed as "when" or "once" or "in response to a determination" or "in response to a detection" depending on the context . Similarly, the phrase "if determined" or "if [the described condition or event] is detected" can be interpreted, depending on the context, to mean "once determined" or "in response to the determination" or "once [the condition or event described ] "Or" In response to [Description of condition or event] detected ".

In specific implementation, the mobile terminal described in the embodiments of the present application includes, but is not limited to, other portable devices such as a mobile phone, a laptop computer, or a tablet computer with a touch-sensitive surface (for example, a touch screen display and / or a touch pad). . It should also be understood that, in some embodiments, the aforementioned device is not a portable communication device, but a desktop computer with a touch-sensitive surface (eg, a touch screen display and / or a touch pad).

In the following discussion, a mobile terminal including a display and a touch-sensitive surface is described. However, it should be understood that the mobile terminal may include one or more other physical user interface devices such as a physical keyboard, mouse, and / or joystick.

The mobile terminal supports various applications, such as one or more of the following: drawing applications, presentation applications, word processing applications, website creation applications, disc burning applications, spreadsheet applications, gaming applications, phones Applications, video conferencing applications, email applications, instant messaging applications, exercise support applications, photo management applications, digital camera applications, digital camera applications, web browsing applications, digital music player applications And / or digital video player applications.

Various applications that can be executed on the mobile terminal may use at least one common physical user interface device such as a touch-sensitive surface. One or more functions of the touch-sensitive surface and corresponding information displayed on the terminal may be adjusted and / or changed between applications and / or within corresponding applications. In this way, the terminal's common physical architecture (eg, touch-sensitive surface) can support a variety of applications with user interfaces that are intuitive and transparent to the user.

In addition, in the description of the present application, the terms “first”, “second”, “third” and the like are only used to distinguish descriptions, and cannot be understood to indicate or imply relative importance.

Embodiment one:

FIG. 1 shows a structural diagram of a fingerprint processing system provided by a first embodiment of the present invention. For ease of description, only parts related to this embodiment are shown:

A first embodiment of the present invention provides a fingerprint processing system, including: a fingerprint collection module 101, an Applet module 103, and a fingerprint processing module 102;

The fingerprint collection module 101 is configured to collect fingerprint data and send the fingerprint data to the fingerprint processing module 102;

The fingerprint processing module 102 is configured to process the fingerprint data according to a fingerprint operation instruction of the Applet module 103, and send a processing result to the Applet module.

The fingerprint collection module 101 is used to collect the user's fingerprint data, and the fingerprint processing module 102 is used to process the fingerprint data to obtain the corresponding processing results. The Applet module 103 can implement various preset program functions. When fingerprint operation is needed, the fingerprint processing module 102 can be called through the communication interface. The fingerprint processing module 102 processes the fingerprint data collected by the fingerprint acquisition module 101 and sends the processed result to the Applet module 103. The Applet module 103 implements the function according to the processing result For example, when the Applet module 103 implements the payment function, it is necessary to determine the user's identity through fingerprint verification. At this time, the fingerprint processing module 102 can be called to perform fingerprint verification on the fingerprint data collected by the fingerprint acquisition module. If the fingerprint processing module 102 returns a verification result, If the result is processed, the Applet module 103 performs a payment operation. If the fingerprint processing module 102 returns a processing result that fails the verification, the Applet module 103 prohibits the payment operation.

Further, the Applet module 103 and the fingerprint collection module 101 are disposed in a fingerprint device;

The fingerprint processing module 102 is disposed in the fingerprint device or in an external device connected to the fingerprint device.

The fingerprint device may be a Java smart card, a fingerprint key, or another fingerprint device.

The fingerprint processing module 102 can be set in a fingerprint device or an external device connected to the fingerprint device. For example, when the fingerprint device is a Java smart card, the fingerprint processing module 102 is set in a Java smart card. It may be an application program running in a Java virtual machine, or the fingerprint processing module 102 may be set in other external devices (such as a card reader) that can communicate with the Java smart card.

In the fingerprint processing system of the first embodiment of the present application, a fingerprint processing module 102 is provided in addition to the fingerprint collection module 101 and the applet module 103. The fingerprint processing module 102 is responsible for processing fingerprint data according to the fingerprint operation instruction of the applet module 103, The collection and verification are separated to improve the security of the fingerprint device.

At the same time, the Applet module 103 calls the fingerprint processing module 102 to complete the required fingerprint operation during the fingerprint operation. The developer does not need to write the content of the fingerprint operation when developing the Applet module 103. Different developers call the same when developing different Applet modules. The fingerprint processing module can be used to avoid security vulnerabilities caused by uneven levels of developers, and to avoid repeated development by various Applet developers.

When the fingerprint collection module 101 is replaced and the fingerprint processing algorithm needs to be updated, only the fingerprint processing module 102 needs to be updated with the algorithm, and it is not necessary for each Applet module 103 to perform the algorithm update.

In summary, the fingerprint processing system of the first embodiment simplifies the development work, improves the development efficiency and the stability of the fingerprint verification function, and solves the problem that each applet application in the prior art adds a fingerprint operation function inside the applet program. This caused a lot of repeated development and waste of resources among different Applet developers.

Embodiment two:

The following describes a fingerprint processing method provided in Embodiment 2 of the present application. Please refer to FIG. 2. The fingerprint processing method in Embodiment 2 of the present application includes:

Step S201: Send a fingerprint operation instruction to the fingerprint processing module;

When the Applet module needs to perform fingerprint operation to realize the function, it can send fingerprint operation instructions to the fingerprint processing module, and the fingerprint processing module processes the fingerprint data collected by the fingerprint collection module.

The fingerprint operation instructions include: a fingerprint verification instruction, a fingerprint addition instruction, and a fingerprint deletion instruction. The fingerprint processing module executes the corresponding fingerprint verification operation, fingerprint addition operation, and fingerprint deletion operation according to the fingerprint operation instruction.

Step S202: Receive a processing result returned by the fingerprint processing module after processing the fingerprint data sent by the fingerprint collection module according to the fingerprint operation instruction.

The fingerprint processing module processes the fingerprint data according to the fingerprint operation instruction, obtains the corresponding processing result, and returns the processing result to the Applet module, and the Applet module implements its function according to the processing result.

Further, before sending the fingerprint operation instruction to the fingerprint processing module, the method further includes:

A1. Negotiate with the fingerprint processing module to generate a negotiation key.

The Applet module and the fingerprint processing module can obtain the negotiation key through pre-negotiation. During the process of generating the negotiation key through negotiation, the Applet module and the fingerprint processing module exchange information with each other. It is assumed that the Applet module carries information A and the fingerprint processing module carries information B. After the Applet module and the fingerprint processing module exchange information, both parties hold information A + B. The applet module and the fingerprint processing module respectively use the information A + B to call the secure interface to generate the negotiation key. Because the information entered into the secure interface is all information A + B, so the negotiation keys generated by the Applet module and the fingerprint processing module are the same key.

A2. Use the negotiation key to encrypt the authentication information sent by the fingerprint processing module, and send the encrypted authentication information to the fingerprint processing module for authentication;

When the Applet module requests to call the fingerprint processing module, the fingerprint processing module sends authentication information to the Applet module. The Applet module uses the negotiation key to encrypt the authentication information, and sends the encrypted authentication information to the fingerprint processing module for authentication. The fingerprint processing module The negotiated key is used to decrypt the encrypted authentication information to determine whether the decrypted authentication information is consistent with the authentication information sent by the fingerprint processing module. When the two are consistent, the authentication is successful, and the fingerprint processing module sends the authentication success information to the Applet module. And establish a session with the Applet module, otherwise authentication fails.

The authentication information may be a randomly generated random number.

The negotiation key can be stored in a persistent storage mode. The negotiation key is not lost when the fingerprint device is powered off. When the fingerprint device is powered on, there is no need to renegotiate to generate a negotiation key.

Further, after the sending the encrypted authentication information to the fingerprint processing module for authentication, the method further includes:

Negotiate with the fingerprint processing module to generate a session key.

To further ensure information security, after the Applet module establishes a session with the fingerprint processing module, a session key can be generated through negotiation. The method for generating the session key can be selected according to the actual situation. For example, the session key can be generated randomly.

The session key can be stored in a temporary storage mode. When the fingerprint device is powered off, the session key is lost. When the fingerprint device is powered on, it is necessary to negotiate to generate a new session key.

Further, the sending the fingerprint operation instruction to the fingerprint processing module specifically includes:

B1. Encrypt the fingerprint operation instruction by using the session key.

After the session key is generated through negotiation, the Applet module uses the session key to encrypt the fingerprint operation instruction.

B2. Send the encrypted fingerprint operation instruction to the fingerprint processing module.

After encryption, the fingerprint operation instruction is sent to the fingerprint processing module. The fingerprint processing module decrypts the fingerprint operation instruction, and then processes the fingerprint data according to the fingerprint operation instruction after decryption. The processing result is returned to the Applet module. The processing result may include: The operation instructions are invalid, the fingerprint data is invalid, the fingerprint verification succeeds, the fingerprint verification fails, the fingerprint addition succeeds, the fingerprint addition fails, the fingerprint deletion succeeds, and the fingerprint deletion fails.

In the fingerprint processing method provided in the second embodiment, the Applet module can call the fingerprint processing module to process the fingerprint data collected by the fingerprint collection module. The Applet module does not perform fingerprint operation itself, thereby simplifying development work, improving development efficiency and fingerprint verification. The stability of the function solves the problem that each applet application in the prior art adds a fingerprint operation function inside the applet program, which causes a lot of repeated development and resource waste between different applet developers.

At the same time, in order to ensure the communication security between the Applet module and the fingerprint processing module, a negotiation key and a session key can be set.

The identity of the Applet module can be identified through the negotiation key, and the Applet module is guaranteed to call the fingerprint processing module securely.

The session key can be used to encrypt the data sent by the Applet module to prevent malicious use of the data sent by the Applet module when the communication process between the Applet module and the fingerprint processing module is eavesdropped.

It should be understood that the size of the sequence numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

Embodiment three:

FIG. 3 is a schematic diagram of a fingerprint device provided in Embodiment 3 of the present application. As shown in FIG. 3, the fingerprint device 3 of this embodiment includes a processor 30, a memory 31, and a computer program 32 stored in the memory 31 and executable on the processor 30. When the processor 30 executes the computer program 32, the steps in the embodiment of the fingerprint processing method are implemented, for example, steps S201 to S202 shown in FIG. 2.

The fingerprint device 3 may be a computing device such as a desktop computer, a notebook, a palmtop computer, and a cloud server. The fingerprint device may include, but is not limited to, a processor 30 and a memory 31. Those skilled in the art can understand that FIG. 3 is only an example of the fingerprint device 3, and does not constitute a limitation on the fingerprint device 3. It may include more or less components than shown in the figure, or combine some components, or different components. For example, the fingerprint device may further include an input / output device, a network access device, a bus, and the like.

The processor 30 may be a central processing unit (Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), and application-specific integrated circuits (Applications) Specific Integrated Circuit (ASIC), off-the-shelf Programmable Gate Array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like.

The memory 31 may be an internal storage unit of the fingerprint device 3, such as a hard disk or a memory of the fingerprint device 3. The memory 31 may also be an external storage device of the fingerprint device 3, such as a plug-in hard disk, a smart media card (SMC), and a secure digital (SD) provided on the fingerprint device 3. 1. flash card Card) and so on. Further, the memory 31 may include both an internal storage unit of the fingerprint device 3 and an external storage device. The memory 31 is configured to store the computer program and other programs and data required by the fingerprint device. The memory 31 may also be used to temporarily store data that has been output or is to be output.

Those skilled in the art can clearly understand that, for the convenience and brevity of the description, only the above-mentioned division of functional units and modules is used as an example. In practical applications, the above functions can be allocated by different functional units according to needs. Module completion, that is, dividing the internal structure of the device into different functional units or modules to complete all or part of the functions described above. Each functional unit and module in the embodiment may be integrated into one processing unit, or each unit may exist separately physically, or two or more units may be integrated into one unit. The integrated unit may be hardware. It can be implemented in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing from each other, and are not used to limit the protection scope of the present application. For specific working processes of the units and modules in the foregoing system, reference may be made to corresponding processes in the foregoing method embodiments, and details are not described herein again.

In the above embodiments, the description of each embodiment has its own emphasis. For a part that is not detailed or recorded in an embodiment, reference may be made to related descriptions of other embodiments.

Those of ordinary skill in the art may realize that the units and algorithm steps of each example described in connection with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

In the embodiments provided in this application, it should be understood that the disclosed devices / fingerprint devices and methods may be implemented in other ways. For example, the device / fingerprint device embodiments described above are only schematic. For example, the division of the modules or units is only a logical function division. In actual implementation, there may be another division manner, such as multiple units Or components can be combined or integrated into another system, or some features can be ignored or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, which may be electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, may be located in one place, or may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the objective of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each of the units may exist separately physically, or two or more units may be integrated into one unit. The above integrated unit may be implemented in the form of hardware or in the form of software functional unit.

When the integrated module / unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, this application implements all or part of the processes in the method of the above embodiment, and can also be completed by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium. The computer When the program is executed by a processor, the steps of the foregoing method embodiments can be implemented. The computer program includes computer program code, and the computer program code may be in a source code form, an object code form, an executable file, or some intermediate form. The computer-readable medium may include: any entity or device capable of carrying the computer program code, a recording medium, a U disk, a mobile hard disk, a magnetic disk, an optical disk, a computer memory, a read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signals, telecommunication signals, and software distribution media. It should be noted that the content contained in the computer-readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdictions. For example, in some jurisdictions, the computer-readable medium Excludes electric carrier signals and telecommunication signals.

The above-mentioned embodiments are only used to describe the technical solution of the present application, but are not limited thereto. Although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still implement the foregoing implementations. The technical solutions described in the examples are modified, or some of the technical features are equivalently replaced; and these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the application, and should be included in Within the scope of this application.

Claims

A fingerprint processing system, comprising: a fingerprint collection module, an applet module, and a fingerprint processing module;

The fingerprint collection module is configured to collect fingerprint data and send the fingerprint data to the fingerprint processing module;

The fingerprint processing module is configured to process the fingerprint data according to a fingerprint operation instruction of the Applet module, and send a processing result to the Applet module.
The fingerprint processing system according to claim 1, wherein the Applet module and the fingerprint collection module are disposed in a fingerprint device;

The fingerprint processing module is disposed in the fingerprint device or in an external device connected to the fingerprint device.
The fingerprint processing system according to claim 2, wherein the fingerprint device is a Java smart card or a fingerprint key.
A fingerprint processing method, comprising:

Send a fingerprint operation instruction to the fingerprint processing module;

Receive the processing result returned by the fingerprint processing module after processing the fingerprint data sent by the fingerprint collection module according to the fingerprint operation instruction.
The fingerprint processing method according to claim 4, further comprising: before sending the fingerprint operation instruction to the fingerprint processing module:

Negotiate with the fingerprint processing module to generate a negotiation key;

Use the negotiation key to encrypt the authentication information sent by the fingerprint processing module, and send the encrypted authentication information to the fingerprint processing module for authentication.
The fingerprint processing method according to claim 5, further comprising: after generating the negotiation key through negotiation with the fingerprint processing module:

Storing the negotiation key in a persistent storage storage manner.
The fingerprint processing method according to claim 5, further comprising: after sending the encrypted authentication information to the fingerprint processing module for authentication:

Negotiate with the fingerprint processing module to generate a session key.
The fingerprint processing method according to claim 7, wherein the sending a fingerprint operation instruction to the fingerprint processing module comprises:

Encrypting the fingerprint operation instruction by using the session key;

Sending the encrypted fingerprint operation instruction to the fingerprint processing module.
The fingerprint processing method according to claim 7, further comprising: after generating a session key through negotiation with the fingerprint processing module:

The session key is stored in a temporarily stored storage manner.
The fingerprint processing method according to any one of claims 4 to 9, wherein the fingerprint operation instruction comprises a fingerprint verification instruction, a fingerprint addition instruction, and a fingerprint deletion instruction.
A fingerprint device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that the processor implements the computer program according to claims 4 to 4 when executing the computer program. 10 steps of the method of any of the ten.
A computer-readable storage medium storing a computer program, wherein when the computer program is executed by a processor, the steps of the method according to any one of claims 4 to 10 are implemented.