WO2020133500A1

WO2020133500A1 - Method and device for unlocking terminal device, and storage medium

Info

Publication number: WO2020133500A1
Application number: PCT/CN2018/125820
Authority: WO
Inventors: 彭敏; 李卓斐
Original assignee: 华为技术有限公司
Priority date: 2018-12-29
Filing date: 2018-12-29
Publication date: 2020-07-02
Also published as: CN112334896A; CN112334896B

Abstract

Provided are a method and device for unlocking a terminal device, and a storage medium. The method comprises: a terminal device acquiring identity card information of a physical identity card of a user; performing comparison to determine whether the identity card information is consistent with identity card information stored in a secure region; and if so, unlocking the terminal device. The invention provides a securer and more reliable unlocking solution. Moreover, the identity card information in the secure region cannot be erased during a firmware replacement, thereby ensuring security of data stored in the terminal device, and accordingly ensuring property safety of the user.

Description

Unlocking method, device and storage medium of terminal equipment

Technical field

The present application relates to smart technology, and in particular to an unlocking method, device and storage medium of a terminal device.

Background technique

With the popularization of smart terminal devices, various application programs in the terminal device have emerged at the historic moment, and users store more and more information in the terminal device during use, so the security of the terminal device is particularly important.

At present, in order to ensure where the terminal devices go, in the process of using the terminal devices, the terminal devices may be locked. Common locking scenarios include the following two types: the user enters the password incorrectly multiple times, or the user loses the device After that, log in to the designated website and lock the terminal device remotely through the retrieval function. At present, the common way is to unlock the terminal device by entering a specific unlock code, because the unlock interface can only enter numbers, that is to say, the unlock code is generally composed of several digits, the password is easier to crack, and the password is stored in the terminal device In the data area of the operating system, the password will be erased after the flashing operation.

In summary, the unlock code of the terminal device is easy to be erased or cracked, and it is also easy for a hacker to set a specific unlock code, which causes the user to be unable to use it normally and poses a threat to the safety of the user's data and property.

Summary of the invention

This application provides a method, device and storage medium for unlocking a terminal device, which is used to solve the problem that the unlock code of the terminal device is easy to be erased or cracked, and it is also easy for the hacker to set a specific unlock code that causes the user to not use it normally. Data and property security pose a threat.

In a first aspect, the present application provides a method for unlocking a terminal device, including:

Obtain the user's ID card information;

Compare whether the identity card information is consistent with the identity card information stored in the secure area of the terminal device;

If they match, the terminal device is unlocked.

In a specific implementation of the above solution, the acquiring ID information of the user includes:

Identify the user's physical ID card through NFC to obtain the user's ID card information.

Optionally, an image of a physical ID card can also be obtained through a camera, and the image can be identified and processed to obtain ID card information.

In another specific implementation, the comparing whether the ID card information is consistent with the ID card information stored in the secure area of the terminal device includes:

Start a watchdog program set in the secure area, and read the ID card information stored in the secure area;

Through the guard program, compare whether the identity card information read in the security area is consistent with the identity card information obtained through NFC.

In the specific implementation of this solution, it is not limited to the comparison of ID card information through a watchdog program, but can also be compared with the system application of the terminal device or other application programs, and this solution is not limited.

Further, the method further includes:

Receiving a first operation instruction input by a user, where the first operation instruction is used to instruct to activate an electronic ID card function;

Pushing first prompt information according to the first operation instruction, the first prompt information is used to prompt the user whether to use the ID card information to unlock the terminal device urgently;

Receiving a second operation instruction input by the user according to the first prompt information;

If the second operation instruction instructs to use the ID card information for emergency unlocking of the terminal device, store the ID card information in the secure area, and install a guard program for identity authentication in the secure area .

The setting process may be a setting process that is triggered during the process of opening an electronic ID card using an application program that requires an electronic ID card, or a setting that is directly triggered by a user in the operating system without restriction.

Optionally, the method further includes:

If the second operation instruction also indicates that the user must be unlocked, acquire the user's biometric feature information, the biometric feature information includes: at least one of facial images, fingerprints, voiceprint information, and iris information;

The biometric feature information is stored in the secure area.

Further, the unlocking of the terminal device includes:

Obtain the biometric feature information of the user who performs the unlock operation;

If the biometric feature information of the user performing the unlocking operation matches the biometric feature information of the user stored in the secure area, the terminal device is unlocked.

Optionally, the acquiring biometric feature information of the user who performs the unlocking operation includes:

Start the camera to capture the face image of the user who performs the unlock operation;

and / or,

Collecting voice information of the user who performs the unlocking operation, and analyzing the voice information to obtain voiceprint information;

and / or,

Start the camera to capture and obtain the iris image of the user who performs the unlocking operation, and process the iris image to obtain iris information;

and / or,

The fingerprint of the user who performs the unlocking operation is acquired through a fingerprint sensor.

Optionally, the method further includes:

If the second operation instruction indicates that the ID card information is not used for emergency unlocking of the terminal device, the ID card information is stored in the safe area.

Optionally, the method further includes:

If it is detected that the number of input unlock password errors reaches a preset number of times, the terminal device is locked.

Optionally, the method further includes:

Lock the terminal device according to the lock instruction sent by the server.

Optionally, the locking of the terminal device also includes a scenario in which the terminal device is not operated for locking beyond the preset duration in daily application scenarios.

In a second aspect, this application provides a terminal device, including:

The first obtaining module is used to obtain the user's ID card information;

The processing module is used to compare whether the identity card information is consistent with the identity card information stored in the safe area of the terminal device;

If they are consistent, the processing module is also used to unlock the terminal device.

Optionally, the first obtaining module specifically includes:

The NFC module is used to identify the user's physical ID card through NFC and obtain the user's ID card information.

Optionally, the processing module is specifically used to:

Optionally, the terminal device further includes:

A receiving module, configured to receive a first operation instruction input by a user, and the first operation instruction is used to instruct to activate an electronic ID card function;

The processing module is further configured to push first prompt information according to the first operation instruction, and the first prompt information is used to prompt the user whether to use the ID card information to unlock the terminal device urgently;

The receiving module is further configured to receive a second operation instruction input by the user according to the first prompt information;

If the second operation instruction instructs to use the ID card information for emergency unlocking of the terminal device, the processing module is also used to store the ID card information in the secure area and install it in the secure area Watchdog for identity authentication.

Optionally, the terminal device further includes: a second acquisition module, configured to acquire biometric feature information of the user if the second operation instruction also indicates that the user must be unlocked, the biometric feature information includes: At least one of facial images, fingerprints, voiceprint information, and iris information;

The processing module is also used to store the biometric feature information in the secure area.

Optionally, the second obtaining module is also used to obtain biometric feature information of the user who performs the unlocking operation;

The processing module is specifically configured to unlock the terminal device if the biometric feature information of the user performing the unlocking operation matches the biometric feature information of the user stored in the secure area.

Optionally, the second obtaining module is specifically used to:

and / or,

Optionally, the processing module is also used to:

Lock the terminal device according to the lock instruction sent by the server.

In a third aspect, this application provides a terminal device, including:

A processor, a memory, and a security area, where the security area includes SE or TEE;

The memory is used to store a computer program, ID card information is stored in the secure area, and the processor executes the computer program to enable the terminal device to implement the terminal device unlocking method of any one of the first aspects .

The security area includes the security chip SE or TEE.

Optionally, the terminal device further includes:

NFC module of short-range wireless communication technology. The NFC module is used to identify a user's ID card in the house and obtain ID information of the user.

Optionally, the terminal device further includes at least one biological information acquisition device:

Camera, fingerprint sensor, voice acquisition module.

In a fourth aspect, the present application provides a storage medium, including: a readable storage medium and a computer program, where the computer program is stored in the readable storage medium, and the computer program is used to implement any one of the first aspect The unlocking method of the terminal device described above.

According to a fifth aspect, the present application provides a program product, the program product includes a computer program, the computer program is stored in a readable storage medium, and at least one processor of a terminal device reads the computer from the readable storage medium Program, at least one processor executing the computer program to cause the terminal device to implement the method for unlocking the terminal device according to any one of the first aspect.

According to a sixth aspect, the present application provides a chip that is applied to a terminal device. The chip includes: at least one communication interface, at least one processor, the processor is coupled to a memory via the communication interface, and the processing The device calls the computer program stored in the memory to execute the unlocking method of the terminal device according to any one of the first aspect.

The unlocking method, device and storage medium of the terminal device provided in this application, the terminal device obtains the ID card information of the user's physical ID card, and compares it with the ID card information stored in the secure area to determine whether they are consistent. The terminal device is unlocked to provide a more secure and reliable unlocking solution, and the ID card information in the safe area cannot be erased by flashing, ensuring the safety of the data stored in the terminal device and further ensuring the safety of the user's property.

BRIEF DESCRIPTION

1 is a schematic structural diagram of a terminal device provided by this application;

2 is a schematic diagram of an unlocking function module of a terminal device provided by this application;

3 is a flowchart of Embodiment 1 of a method for unlocking a terminal device provided by this application;

4 is a flowchart of Embodiment 2 of a method for unlocking a terminal device provided by this application;

FIG. 5 is a schematic diagram of the process of setting ID card information to unlock when opening an electronic ID card provided by the application;

FIG. 6 is a flowchart of separately enabling the ID unlocking function provided by the application;

7 is a schematic diagram of the process of using the ID card information to unlock the application provided;

8 is a schematic structural diagram of Embodiment 1 of a terminal device provided by this application;

9 is a schematic structural diagram of Embodiment 2 of a terminal device provided by this application;

10 is a schematic structural diagram of Embodiment 3 of a terminal device provided by this application;

11 is a schematic structural diagram of Embodiment 4 of a terminal device provided in this application.

detailed description

It can be seen from the content of the background art that after the terminal device is locked, the current main method is to enter a specific unlock code to unlock the terminal device, and the current terminal device can only input numbers, which is easy to be cracked, and the terminal device is flashed After that, the password will be cleared, and the terminal device can be automatically unlocked, posing a threat to the user's data and property security.

With the popularization and development of smart devices such as smart phones, electronic ID cards are the latest application. The electronic ID card is realized by storing the personal information authenticated and authorized by the public security organ on the mobile phone side or the network side. In certain occasions, the use of the electronic ID card and the physical ID card when using it has the same equivalent.

There are two ways to realize the electronic ID card:

One is based on Alipay, WeChat and other Internet service providers. The ID card information is stored in the cloud and is bound to Alipay and WeChat accounts. When using it, the information is obtained from the cloud through Alipay and WeChat. The premise of this method is the terminal device It can be used normally, and applications such as WeChat or Alipay are installed. Therefore, it can only be used for identity verification when the terminal device is normally used, and cannot be used on a locked device, nor can it be used for unlocking.

One is a solution mainly based on terminal equipment manufacturers (mainly mobile phone manufacturers). The ID card information is stored in a safe area in the terminal device such as a mobile phone, and the ID card information can be obtained locally when used. This solution is based on near field communication technology (Near Field Communication, NFC) and secure chip (SE), which reads physical ID information through NFC and stores the identity information in a separate SE security chip. The contents of the SE security chip will not be cleared when the machine is flashed, and the security level is financial.

Based on the above, the present application provides a method for unlocking a terminal device, which is applied in a terminal device and uses ID card information to unlock or emergency unlock the terminal device.

The terminal equipment involved in this solution includes the user's mobile phone, tablet computer and other user equipment, which can be a wireless terminal or a wired terminal, or any other security chip (secure element), or a trusted in the system Execution environment (Trusted Execution Environment, TEE), and set the terminal form of the NFC module.

FIG. 1 is a schematic structural diagram of a terminal device provided by this application. As shown in FIG. 1, the terminal device includes at least: a processor, a memory, a security chip (SE), or a TEE divided by a system. SE and TEE can be collectively called a safe area, and the content stored in the safe area cannot be cleared by operations such as flashing.

The memory is used to store computer programs, and can also be used to store data of terminal devices, etc. The security chip belongs to a separate chip, where the stored content cannot be cleared by operations such as flashing, so in this solution it is used to store the user's ID card information, The processor executes the computer program in the memory to implement the technical solution of the unlocking method of the terminal device provided by the present application, compares the user's ID card information, and performs emergency unlocking on the terminal device.

In a specific implementation of the terminal device, in order to be able to obtain the physical ID card information, the NFC module can be configured in the terminal device to read the ID card near the terminal device to obtain the ID card information, so that the follow-up can be followed Compare the ID card information stored in the security chip.

If the user sets the unlocking of the terminal device and the cardholder himself needs to unlock the identity card information stored in the security chip, the security chip can also store the user's biometric information, which is used to unlock the user For identification, the biometric information may be at least one of the user's facial image, the user's iris information, fingerprint information, voiceprint information, etc. Therefore, the terminal device may further include one or more biometric information acquisition devices, the The biometric information acquisition device may be a voice acquisition module such as a camera, fingerprint sensor, or microphone.

FIG. 2 is a schematic diagram of an unlocking function module of a terminal device provided by the present application. As shown in FIG. 2, in the technical solution provided by the present application, in order to enable the terminal device to be quickly or urgently identified by the identity card information stored in the security chip Unlocking requires the cooperation of the operating system (OS), interface layer, business layer, device management layer, and hardware of the terminal device.

The unlocking priority processing module of the interface layer is used to raise the priority of unlocking the ID card information to the highest level when unlocking using the ID card information, and place the priority of unlocking the password or unlocking with a special PIN code after the ID card information. Or ignore the password to unlock or special PIN code to unlock. Taking a mobile phone as an example, the unlocking priority processing module is connected to the mobile phone OS interface. When the ID card unlocking function takes effect, the original PIN unlocking mechanism becomes invalid; after the ID card unlocking function is turned off, the original PIN unlocking mechanism is restored.

The unlocking logic discrimination module of the interface layer calls the various modules of the service layer of the terminal device to compare the ID card information or the biometric information, and then notifies the result of the comparison to the operating system of the terminal device. Taking a mobile phone as an example, by calling various internal service modules to realize information comparison, the unlocked result is notified to the upper mobile phone OS.

The ID card information comparison module of the business layer compares the user's physical ID card information obtained through the NFC driver module with the electronic ID card information stored in the SE to determine whether the two match; if necessary, it can also be called The biometric comparison module determines whether the operator is the same as the owner of the terminal device.

The biometrics comparison module of the service layer determines whether the biometrics of the user currently performing the unlocking operation match the biometrics information previously stored in the security chip (also referred to as the security area).

The NFC driver module of the device management layer mainly has two functions. After the ID card is configured to unlock and the terminal device lock is triggered, the NFC driver module turns on the NFC switch of the mobile phone, and at the same time ensures that only NFC reads are processed in the locked state ID card information.

The information storage module of the device management layer is mainly responsible for reading electronic ID card information or biometric information from TEE/SE.

The hardware involved is mainly the NFC module, security chip, etc. of the terminal device. In this solution, it should be understood that TEE represents a safe area in this solution, similar to SE. In the following, the storage area of information cannot be erased by brushing This is called a safe area.

Based on the above, the unlocking method of the terminal device provided by the present application will be described in detail below through several specific embodiments.

FIG. 3 is a flowchart of Embodiment 1 of a method for unlocking a terminal device provided by the present application. As shown in FIG. 3, based on the structure and function modules of the terminal device, the method for unlocking the terminal device specifically includes the following steps:

S101: Obtain the user's ID card information.

In this step, when the terminal device is locked and needs to be unlocked, the user's ID card information can be obtained so that the terminal device can be subsequently unlocked through the ID card information. In this solution, it should be understood that the locking here generally refers to the terminal device being locked due to the incorrect unlock password entered multiple times, or the user loses or cannot find the system on the terminal device by operating on the designated website After the server sends a lock instruction to the terminal device, the terminal device is locked. However, in the actual application process, the terminal device can also be locked in the process of daily use, without using fingerprints, passwords, etc. to unlock, and directly using the ID card information to lock, this solution is not limited.

Obtaining the user's ID card information in this solution refers to obtaining the information of the user's physical ID card that is performing an unlocking operation on the terminal device or triggering the unlocking operation. The user's physical ID card needs to be identified, and the specific identification to obtain the identity The certification information includes at least the following two methods:

The first way is to identify the user's physical ID card through NFC at a short distance to obtain the user's ID card information.

Generally speaking, there are tags or tag chips or other types of chips in the physical ID card. The terminal device needs to be installed with an NFC module and the NFC technology is used to identify the physical ID card to obtain the user's ID card information.

In the second way, the image of the physical ID card is acquired through the camera, and the image of the physical ID card is identified and processed to obtain the ID card information. In general, the main information in the physical ID card includes the name, ID card number, etc., so you can get the user's name, date of birth, ID card number and other information in the image, this plan does not limit.

S102: Compare whether the identity card information is consistent with the identity card information stored in the secure area of the terminal device.

In this step, the terminal device is preset with the function of unlocking using the ID card information. After acquiring the ID card information of the user who triggered the unlock operation, the terminal device needs to read the ID card information stored in the secure area, and then Compare the ID card information stored in the security area with the obtained ID card information to determine whether the two ID card information match, for example, determine whether the name is consistent, determine whether the ID card number is consistent, etc. If it is determined that the two ID card information are consistent , It is considered to be an unlock operation triggered by the owner of the terminal device. If they are inconsistent, the user is considered to be illegal, and the unlocking operation can be refused to continue to lock the terminal device. Optionally, when the ID card information is inconsistent, positioning may be performed to obtain location information and report the location information to the server. Optionally, when the ID card information is inconsistent, an alarm can be issued, an alarm prompt can be played, or the alarm information can be sent to other terminal devices.

Optionally, in a specific implementation of the solution, the terminal device needs to first read the ID card information from the secure area, and then compare it. When the system is locked, the process can be performed by the guard program set in the secure area To achieve that, after the terminal device obtains the identity card information of the user’s physical ID card that performs the unlocking operation, it can start the watchdog program set in the secure area to read the ID card information stored in the secure area; The guard program compares whether the identity card information read in the secure area is consistent with the identity card information obtained through NFC.

In this solution, the watchdog program cannot be cleared by flashing, etc., to ensure that when the terminal device is rooted and other applications and data are cleared, the data in the secure area (that is, SE/TEE) can still be read. And carry out the information comparison process to avoid the problem that the data in the safe area cannot be applied due to operations such as flashing.

S103: If they are consistent, unlock the terminal device.

In this step, when the terminal device determines that the identity card information of the user in the unlocking operation is consistent with the identity card information stored in the security area, the terminal device is unlocked to realize the function of unlocking using the identity card information.

In the unlocking method of the terminal device provided in this embodiment, the terminal device obtains the identity card information of the user's physical ID card and compares it with the ID card information stored in the secure area to determine whether they are consistent. If they are consistent, the terminal device is unlocked , Provide a safer and more reliable unlocking scheme, and the ID card information in the safe area can not be erased by flashing, to ensure the safety of the data stored in the terminal device, and to further ensure the safety of the user’s property.

FIG. 4 is a flowchart of Embodiment 2 of the method for unlocking a terminal device provided by the present application. As shown in FIG. 4, on the basis of the foregoing embodiment, the terminal device needs to implement the function of unlocking using ID card information in addition to setting it to The default function may also be an optional function set according to the user's choice, and an interface for setting the function may be provided in the operating system of the terminal device, and the user may set according to actual needs. The specific setting process includes:

S201: Receive a first operation instruction input by a user, where the first operation instruction is used to instruct the activation of an electronic ID card function.

In this step, the user can choose through the system settings, that is, the first operation instruction, to set the electronic ID function, or to open the electronic ID function in applications such as WeChat and Alipay.

S202: Push the first prompt information according to the first operation instruction.

The terminal device pushes the first prompt information to the user while enabling the electronic ID function according to the user's first operation instruction, for example, to display on the interface, the first prompt information is used to prompt the user whether to use the ID card information to the terminal The device can be unlocked in an emergency, and the terminal device can also be unlocked by an ordinary system. This solution is not limited. The first prompt information can be pushed to the user through display or voice playback, sending information, etc. The solution is not limited.

S203: Receive a second operation instruction input by the user according to the first prompt information.

In this step, after the terminal device pushes the first prompt message, the user can determine whether to use the electronic ID card information to unlock the terminal device according to his own choice, click to select on the operation interface of the terminal device, or use voice A second operation instruction is input, and the second operation instruction is used to instruct the user that the user chooses to use the electronic identity card information for unlocking, or does not use the electronic identity card information for unlocking.

S204: If the second operation instruction instructs to use the identity card information for emergency unlocking of the terminal device, store the identity card information in the secure area, and install a guard program for identity authentication in the secure area.

In this step, if the user chooses to use the electronic ID card information for emergency unlock, the terminal device stores the ID card information in a secure area, that is, a security chip, optionally, you can also install a guard program in the secure area, The guard program is used to read the information in the secure area and compare the ID card information. Optionally, if the second operation instruction indicates that the ID card information is not used for emergency unlocking of the terminal device, the ID card information is stored in the secure area without installing a guard program.

Figure 5 is a schematic diagram of the process of setting ID card information unlocking when opening an electronic ID card provided by this application. As shown in Fig. 5, when a user opens an ID card, the user is prompted whether to enable ID card unlocking, that is, whether to unlock the electronic ID card information Used for emergency unlocking. If the customer chooses yes, in the normal activation process, in addition to storing the ID card information in the SE, the daemon will be installed in a safe area that will not be cleared when the machine is flashed, which is the SE in the figure. /TEE, at the same time, the unlocking priority processing module in the terminal device also disables PIN unlocking, that is, ignoring PIN unlocking when using ID card information for unlocking, the meaning of this function is that after the emergency unlocking of the electronic ID card is activated, the original The PIN unlocking mechanism will be disabled, which can prevent the above-mentioned hacker from extorting the owner by controlling the PIN lock machine.

If the user selects No, the process ends.

Optionally, in another implementation of the solution, after the user chooses to enable ID card information unlocking, the user may be further prompted whether it must unlock itself, and if the user selects the option that must be unlocked by himself (ie Y), At the same time, when the user opens the ID card, other biometric information such as the face or fingerprints, iris information, voiceprint information, etc. entered are also stored in a safe area that will not be cleared, that is, stored in the SE/TEE in the figure. If it is selected that no personal unlocking is required, the process ends.

Later, only when the user deletes the local electronic ID card information or explicitly disables the electronic ID card unlock function, the above-mentioned daemon and biometric information stored in the safe area will be cleared.

FIG. 6 is a flowchart of separately opening the ID card unlocking function provided by this application. If shown in 6, the process shown in the figure is different from that shown in FIG. 5 above, the terminal device is not in applications such as WeChat or Alipay. The settings and selections made when the electronic ID card is opened are independent of the application process, and the electronic ID card unlocking function is enabled separately for the terminal device. Specifically, the selection operation is enabled through the system setting of the terminal device to enable the ID card To unlock, you need to determine whether the electronic ID card has been opened. If not, the ID card unlock function fails. If the electronic ID card has been opened, the electronic ID card unlock function is enabled. At the same time, the guards are installed and saved in SE/TEE The procedure is the same as the process shown in FIG. 5 described above. Specifically, after the electronic ID card is activated, the following actions are required:

The purpose of disabling PIN unlock is to ensure that after the phone is locked, it can only be unlocked by ID card to ensure security.

Load the ID card unlocking care program into a safe area, the purpose is to ensure that the care program will not be cleared after the subsequent flashing, and the ID card can still be operated to unlock.

If you choose to unlock when you open the electronic ID card, you need to load the biometric information such as face images and fingerprints entered when you open the electronic ID card into a safe area for storage.

If you choose to unlock when the ID card is unlocked separately, you need to enter a face, and the electronic ID program verifies that the face is the ID card holder, and then loads the face you entered this time to a safe area.

After the terminal device has unlocked the ID card information unlocking function according to the above methods, the terminal device can be unlocked using the ID card information in multiple scenarios. The application of the terminal device unlocking scheme includes at least the following Scenes:

Scenario 1. Unlock after locking the screen of the terminal device in the daily application process.

Scenario 2: The user locks the terminal device remotely. Taking a mobile phone as an example, after a user loses his mobile phone, he can log in to the mobile phone manufacturer's website and turn on the mobile phone retrieval function. In the mobile phone retrieval interface, you can set a locked mobile phone. If the user has previously opened the electronic ID card according to the previous plan and set to use the ID card to unlock, the mobile phone will be locked remotely. In the future, even if the mobile phone is maliciously flashed, the key information such as electronic ID card information and guards will not be cleared during the flashing process. After the flashing, the mobile phone will still be locked.

Scenario 3: The user's misoperation causes the terminal device to lock. Taking a mobile phone as an example, when a user uses a mobile phone, if a password, gesture, or fingerprint is used to unlock, the mobile phone will be locked after multiple consecutive input errors. If the user has previously opened the electronic ID card according to the foregoing scheme and is set to use the ID card to unlock, the lock interface prompts the user to unlock the ID card instead of entering the PIN code.

Based on the above scenarios, after the terminal device is locked and the electronic ID information unlocking function has been enabled, the ID card can be used for unlocking. Figure 7 is a schematic diagram of the process of unlocking using ID card information provided by this application. As shown in Figure 7, the terminal device is a mobile phone and the security area is SE as an example. If unlocking by ID card is set, the NFC switch of the mobile phone will default Open, after the user uses the physical ID card to approach the NFC card reading area of the mobile phone, the ID card unlock daemon in the secure area will be activated. The daemon will read the information of the physical ID card and compare it with the electronic ID card information stored in the SE Yes, if the information of the two ID cards is the same, the ID card will pass the verification. If the user has not set it and needs to unlock it, he can directly unlock the mobile phone at this time.

If the user has previously set a security enhancement option that must be unlocked by himself, the phone will start the biometric recognition process, for example, you can start the camera, take the user's facial image, compare it with the user image stored in the SE through the guard program, or start the fingerprint The sensor obtains the user's fingerprint and compares it with the fingerprint stored in the SE, or collects the user's voice analysis to obtain the user's voiceprint information and compare it with the voiceprint information stored in the SE. To match the biometric information, if the match is successful, then complete the unlock.

Before comparing the biometric information of the user, the user can also perform a live detection on the user through the camera, to avoid other people taking pictures of the user, etc., to further improve the security of the terminal device.

The following uses a mobile phone as an example to illustrate the specific process of unlocking with an ID card.

(1) ID card unlock

After the phone is locked, the phone interface will prompt that the ID card needs to be unlocked, and the system will turn on the NFC switch by default. The user brings the physical ID card close to the NFC sensing area of the mobile phone. After reading the card, the NFC determines that the card type is the ID card, and obtains the ID card information of the physical ID card to activate the guard program for unlocking the ID card.

The caretaker program reads the electronic ID card information from the SE and compares it with the physical ID card information read by NFC. If the two ID card information are the same, different treatments will be done according to whether you need the option of unlocking yourself:

If you do not need to unlock it, you will directly notify the upper OS to unlock successfully;

If you need to unlock yourself, use the means supported by the system for live detection, and then read the previously saved ID cardholder photo from the secure area and compare it with the face collected this time, and confirm that they are consistent before notifying the upper OS to unlock successfully.

(2) Disabling the ID unlock function

After the user deletes the electronic ID card on the mobile phone, the ID card unlock function will be automatically turned off; the user can also automatically turn off the ID card unlock function in the setting interface. Corresponding to when the ID unlock function is turned on, the closing action will trigger the following actions:

Enable PIN unlock;

Optionally, you can also uninstall the ID card unlock daemon in a safe area and delete user biometric information;

The unlocking solution of the terminal device provided in this application, the unlocking comparison information is stored in a separate security chip, and the comparison information is encrypted ID card information approved by the Ministry of Public Security. It is extremely safe, and it also introduces photos when handling ID cards ( Or other biometric information) as the basis for the identification of the owner, to ensure that the mobile phone data is not leaked in a chain due to the leakage of the ID card. The main comparison information in this solution is stored in the non-erasable area of the mobile phone, which can ensure that it continues to work normally after extreme operations such as flashing. At the same time, the solution does not rely on the network, users can complete the unlocking behavior by themselves, without relying on the assistance of the business hall, it is simple and convenient. Compared with the existing PIN unlocking mechanism, the ciphertext of this solution is more secure and will not be affected by operations such as flashing. And also has a user identity verification function, which can prevent others from booting after obtaining the password. At the same time, because the unlock uses a physical medium, it can also prevent the current PIN unlock mechanism from being ransomed by hackers and then extorting users.

The method of unlocking the terminal device provided in this application, the method of verifying the identity of the cardholder of the user's ID card is to compare the face. In fact, the purpose of this verification is to verify whether the cardholder himself operates, so the verification method is in addition to the face In addition, other biological characteristics, such as infrared face, iris, fingerprint, voiceprint, etc., or a combination of several biological characteristics can also be used. Through various biometric identification schemes, it is guaranteed that only the ID card holder can unlock.

The main application scenario provided by the above embodiments is unlocking. In fact, the premise of the implementation of the solution is as long as it can perform the security verification of the ID card information and assist the identification of the ID card holder. It is not limited to a mobile phone terminal, nor It is limited to unlocking this kind of operation scenario, and can be widely used in various scenarios that require authentication. By using ID information stored in a secure area in advance and comparing it with a physical ID, various devices and various authentications can be realized For applications in scenarios, this solution is not limited.

FIG. 8 is a schematic structural diagram of Embodiment 1 of a terminal device provided by this application. As shown in FIG. 8, the terminal device 10 provided by this embodiment includes:

The first obtaining module 11 is used to obtain the ID card information of the user;

The processing module 12 is used to compare whether the identity card information is consistent with the identity card information stored in the safe area of the terminal device;

If they are consistent, the processing module 12 is also used to unlock the terminal device.

The terminal device provided in this embodiment is used to execute the technical solution in any of the foregoing method embodiments, and its implementation principle and technical effect are similar. The terminal device obtains the ID information of the user’s physical ID card and stores it in a secure area. Compare the ID card information to determine whether they are consistent. If they are consistent, unlock the terminal device to provide a safer and more reliable unlocking solution, and the ID card information in the safe area cannot be erased by flashing to ensure the data stored in the terminal device Security, and further guarantee the safety of the user’s property.

Based on the foregoing embodiments, FIG. 9 is a schematic structural diagram of Embodiment 2 of a terminal device provided by this application. As shown in FIG. 9, the first acquiring module 11 specifically includes:

The NFC module 111 is used to identify the user's physical ID card through NFC and obtain the ID card information of the user.

Optionally, the processing module 12 is specifically used to:

10 is a schematic structural diagram of Embodiment 3 of a terminal device provided by this application. As shown in FIG. 10, the terminal device 10 further includes:

The receiving module 13 is configured to receive a first operation instruction input by a user, and the first operation instruction is used to instruct to activate an electronic ID card function;

The processing module 12 is further configured to push first prompt information according to the first operation instruction, and the first prompt information is used to prompt the user whether to use the ID card information to unlock the terminal device urgently;

The receiving module 13 is further configured to receive a second operation instruction input by the user according to the first prompt information;

If the second operation instruction indicates that the ID card information is used for emergency unlocking of the terminal device, the processing module 12 is further configured to store the ID card information in the safe area and in the safe area Install a watchdog for authentication.

FIG. 11 is a schematic structural diagram of Embodiment 4 of a terminal device provided by the present application. As shown in FIG. 11, the terminal device 10 further includes: a second obtaining module 14 for indicating that the second operation instruction must also be unlocked by himself , Then acquire the user's biometric feature information, the biometric feature information includes: at least one of facial images, fingerprints, voiceprint information and iris information;

The processing module 12 is also used to store the biometric feature information in the secure area.

Optionally, the second obtaining module 14 is further used to obtain biometric feature information of the user who performs the unlocking operation;

The processing module 12 is specifically configured to unlock the terminal device if the biometric feature information of the user performing the unlocking operation matches the biometric feature information of the user stored in the secure area.

Optionally, the second obtaining module 14 is specifically used to:

and / or,

Optionally, the processing module 12 is also used to:

Lock the terminal device according to the lock instruction sent by the server.

The terminal device provided in any one of the foregoing implementation manners is used to execute any technical solution in the foregoing method embodiments, and its implementation principles and technical effects are similar, and are not described herein again.

This application also provides a storage medium, including:

A readable storage medium and a computer program, and the computer program is stored in the readable storage medium, and the computer program is used to implement the unlocking method of the terminal device provided by any of the foregoing method embodiments.

The application also provides a program product, the program product includes a computer program, the computer program is stored in a readable storage medium, and at least one processor of the terminal device reads the computer program from the readable storage medium, at least A processor executes the computer program to cause the terminal device to implement the unlocking method of the terminal device provided in any of the foregoing method embodiments.

The present application also provides a chip applied to a terminal device, the chip includes: at least one communication interface, at least one processor, the processor is coupled to a memory via the communication interface, and the processor calls The computer program stored in the memory implements the unlocking method of the terminal device provided by any of the foregoing method embodiments.

In this solution, the memory may be provided outside the chip or integrated in the chip. The communication interface may be various interfaces that enable the processor to access the memory, such as an input interface, a processing device, and an output interface, and may also be a universal flash memory (UFS) interface, fast peripheral component interconnection (peripheral component interconnection express, PCIe) interface etc.

In the specific implementation of the terminal device, it should be understood that the processor may be a central processing unit (English: Central Processing Unit, referred to as: CPU), or other general-purpose processors, digital signal processors (English: Digital Signal Processor, referred to as : DSP), Application Specific Integrated Circuit (English: Application Specific Integrated Circuit, ASIC for short), etc. The general-purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of the method disclosed in this application may be directly implemented and completed by a hardware processor, or may be implemented and completed by a combination of hardware and software modules in the processor.

All or part of the steps for implementing the above method embodiments can be completed by the program instructing relevant hardware. The aforementioned program can be stored in a readable memory. When the program is executed, the steps including the above method embodiments are executed; and the aforementioned memory (storage medium) includes: read-only memory (English: read-only memory, abbreviation: ROM), RAM, flash memory, hard disk, Solid state hard disk, magnetic tape (English: magnetic), floppy disk (English: floppy disk), optical disk (English: optical) and any combination thereof.

Claims

A method for unlocking a terminal device, characterized in that it includes:

Obtain the user's ID card information;

Compare whether the identity card information is consistent with the identity card information stored in the secure area of the terminal device;

If they match, the terminal device is unlocked.
The method according to claim 1, wherein the acquiring ID information of the user includes:

The near-field wireless communication technology NFC identifies the user's physical ID card and obtains the user's ID card information.
The method according to claim 2, wherein the comparing whether the ID card information is consistent with the ID card information stored in the secure area of the terminal device includes:

Start a watchdog program set in the secure area, and read the ID card information stored in the secure area;

Through the guard program, compare whether the identity card information read in the security area is consistent with the identity card information obtained through NFC.
The method according to any one of claims 1 to 3, wherein the method further comprises:

Receiving a first operation instruction input by a user, where the first operation instruction is used to instruct to activate an electronic ID card function;

Pushing first prompt information according to the first operation instruction, the first prompt information is used to prompt the user whether to use the ID card information to unlock the terminal device urgently;

Receiving a second operation instruction input by the user according to the first prompt information;

If the second operation instruction instructs to use the ID card information for emergency unlocking of the terminal device, store the ID card information in the secure area, and install a guard program for identity authentication in the secure area .
The method according to claim 4, wherein the method further comprises:

If the second operation instruction also indicates that the user must be unlocked, acquire the user's biometric feature information, the biometric feature information includes: at least one of facial images, fingerprints, voiceprint information, and iris information;

The biometric feature information is stored in the secure area.
The method according to claim 5, wherein the unlocking of the terminal device comprises:

Obtain the biometric feature information of the user who performs the unlock operation;

If the biometric feature information of the user performing the unlocking operation matches the biometric feature information of the user stored in the secure area, the terminal device is unlocked.
The method according to claim 6, wherein the acquiring biometric feature information of the user who performs the unlocking operation includes:

Start the camera to capture the face image of the user who performs the unlock operation;

and / or,

Collecting voice information of the user who performs the unlocking operation, and analyzing the voice information to obtain voiceprint information;

and / or,

Start the camera to capture and obtain the iris image of the user who performs the unlocking operation, and process the iris image to obtain iris information;

and / or,

The fingerprint of the user who performs the unlocking operation is acquired through a fingerprint sensor.
The method according to claim 4, wherein the method further comprises:

If the second operation instruction indicates that the ID card information is not used for emergency unlocking of the terminal device, the ID card information is stored in the safe area.
The method according to any one of claims 1 to 8, wherein the method further comprises:

If it is detected that the number of input unlock password errors reaches a preset number of times, the terminal device is locked.
The method according to any one of claims 1 to 8, wherein the method further comprises:

Lock the terminal device according to the lock instruction sent by the server.
A terminal device is characterized by comprising:

The first obtaining module is used to obtain the user's ID card information;

The processing module is used to compare whether the identity card information is consistent with the identity card information stored in the safe area of the terminal device;

If they are consistent, the processing module is also used to unlock the terminal device.
The terminal device according to claim 11, wherein the first acquisition module specifically includes:

The short-range wireless communication NFC module is used to identify the user's physical ID card through NFC and obtain the user's ID card information.
The terminal device according to claim 12, wherein the processing module is specifically configured to:

Start a watchdog program set in the secure area, and read the ID card information stored in the secure area;

Through the guard program, compare whether the identity card information read in the security area is consistent with the identity card information obtained through NFC.
The terminal device according to any one of claims 11 to 13, wherein the terminal device further comprises:

A receiving module, configured to receive a first operation instruction input by a user, and the first operation instruction is used to instruct to activate an electronic ID card function;

The processing module is further configured to push first prompt information according to the first operation instruction, and the first prompt information is used to prompt the user whether to use the ID card information to unlock the terminal device urgently;

The receiving module is further configured to receive a second operation instruction input by the user according to the first prompt information;

If the second operation instruction instructs to use the ID card information for emergency unlocking of the terminal device, the processing module is also used to store the ID card information in the secure area and install it in the secure area Watchdog for identity authentication.
The terminal device according to claim 14, wherein the terminal device further comprises: a second acquisition module, configured to acquire the user's biometrics if the second operation instruction also indicates that the user must be unlocked Information, the biometric feature information includes: at least one of facial images, fingerprints, voiceprint information, and iris information;

The processing module is also used to store the biometric feature information in the secure area.
The terminal device according to claim 15, wherein the second acquiring module is further configured to acquire biometric feature information of a user who performs an unlocking operation;

The processing module is specifically configured to unlock the terminal device if the biometric feature information of the user performing the unlocking operation matches the biometric feature information of the user stored in the secure area.
The terminal device according to claim 16, wherein the second acquisition module is specifically configured to:

Start the camera to capture the face image of the user who performs the unlock operation;

and / or,

Collecting voice information of the user who performs the unlocking operation, and analyzing the voice information to obtain voiceprint information;

and / or,

Start the camera to capture and obtain the iris image of the user who performs the unlocking operation, and process the iris image to obtain iris information;

and / or,

The fingerprint of the user who performs the unlocking operation is acquired through a fingerprint sensor.
The terminal device according to claim 14, wherein the processing module is further configured to:

If the second operation instruction indicates that the ID card information is not used for emergency unlocking of the terminal device, the ID card information is stored in the safe area.
The terminal device according to any one of claims 11 to 18, wherein the processing module is further configured to:

If it is detected that the number of input unlock password errors reaches a preset number of times, the terminal device is locked.
The terminal device according to any one of claims 11 to 18, wherein the processing module is further configured to:

Lock the terminal device according to the lock instruction sent by the server.
A terminal device is characterized by comprising:

A processor, a memory, and a security area, where the security area includes a security chip SE or a trusted execution environment TEE;

The memory is used to store a computer program, ID card information is stored in the secure area, and the processor executes the computer program to enable the terminal device to implement the terminal device according to any one of claims 1 to 10. Unlock method.
The terminal device according to claim 21, wherein the terminal device further comprises:

NFC module of short-range wireless communication technology. The NFC module is used to identify a user's ID card in the house and obtain ID information of the user.
The terminal device according to claim 21 or 22, wherein the terminal device further comprises at least one of the following biological information acquisition devices:

Camera, fingerprint sensor, voice acquisition module.
A storage medium, characterized in that it includes:

A readable storage medium and a computer program stored in the readable storage medium, the computer program used to implement the unlocking method of the terminal device according to any one of claims 1 to 10.
A program product, characterized in that the program product includes a computer program, the computer program is stored in a readable storage medium, and at least one processor of a terminal device reads the computer program from the readable storage medium, at least A processor executes the computer program to cause the terminal device to implement the unlocking method of the terminal device according to any one of claims 1 to 10.
A chip, characterized in that the chip is applied to a terminal device, the chip includes: at least one communication interface, at least one processor, the processor is coupled to a memory via the communication interface, and the processor calls A computer program stored in the memory to execute the unlocking method of the terminal device according to any one of claims 1 to 10.