CN102419805B - Terminal equipment and method for encrypting user information - Google Patents

Abstract

The invention discloses terminal equipment and a method for encrypting user information. The terminal equipment comprises an encryption chip and a terminal main body, wherein the terminal main body is used for acquiring the biological information and private information of a user; and the encryption chip is used for encrypting the private information of the user by using biological identification information as a key and using an encryption algorithm, sending encrypted information to the terminal main body, and storing the encrypted information. By adoption of the technical scheme, a mobile internet device (MID) can change a display policy according to different external lighting environments, so that the satisfaction of visual sensory of the user is improved, and the performance of products is improved. A hardware solution of the encryption chip is superior to a software method in terms of both speed and performance. By adoption of a biological identification technology, the user does not need to memorize any password; and operation processes of encryption, decryption, display and input are finished inside the encryption chip without adoption of a mobile phone, so that information leakage caused by a virus or Trojan in the mobile phone is avoided.

Description

A terminal device and user information encryption method thereof

technical field

The present invention relates to the technical field of communication, and more specifically, to a terminal device and a user information encryption method thereof.

Background technique

People live in modern society and deal with different types of passwords every day, such as power-on passwords of work computers, passwords of bank credit cards, login passwords of personal e-mails, passwords of various registration websites, passwords of online banking, securities trading passwords, etc. , it can be said that we live in an environment surrounded by passwords. Although the length, number of digits, and types of each password are different. But any kind of password disclosure or loss will cause huge losses to users.

At present, most users use some numbers or names that are special to themselves as passwords, such as birthdays, phone numbers, ID numbers, names, etc. Moreover, in order to make the password simple and easy to remember, many people use the same password to deal with different applications, for example, multiple bank cards share one password and so on. From the perspective of cryptography, the above methods of establishing passwords will bring huge hidden dangers. People with ulterior motives can easily crack weaker passwords through exhaustive and dictionary attacks, obtain the user's confidential information, and steal the user's property and personal privacy. Therefore, it is best to use a number or name that is not easy to be cracked and guessed for the user password, and it is best not to have the same or similar passwords, so that the user password can be more effectively protected, but this brings another problem, that That is, users may often forget such complex and numerous passwords.

Contents of the invention

In order to make up for the above deficiencies, the present invention proposes a terminal device, which includes an encryption chip and a terminal body;

The terminal body collects user biometric information and user private information;

The encryption chip encrypts the user's private information using the biometric information as a key through an encryption algorithm, and sends the encrypted information to the terminal body for storage.

Further, when the user needs to decrypt the user's private information, he can input the same user's biological information again, and the encryption chip uses the user's biological information as a key to decrypt the encrypted information and decrypt the user's private information.

Further, the encryption chip includes a terminal screen control module, an encryption algorithm module, a module communicating with the terminal main chip, an input control module, and a biometric information input module;

The terminal screen control module is used to output private information to the terminal display screen;

The encryption algorithm module is used to encrypt user private information;

The module communicating with the terminal main chip is used to communicate with the terminal main chip;

The input control module is used to control information input and receive information input;

The biometric information input module is used for collecting biometric information and identifying biometric information.

Further, the encryption algorithm is one or a combination of AES, DES, RSA, and MD5.

Further, the user biometric information is one or a combination of fingerprint information, iris information, facial information, vein information, and earprint information.

The present invention proposes a user information encryption method, the encryption method comprising: the user terminal body collects user biological information and user private information; uses an encryption chip to encrypt the user private information with the biometric information as a key using an encryption algorithm , and send the encrypted information to the terminal subject for storage.

Further, when the user needs to decrypt the user's private information, he can input the same user's biological information again, and the encryption chip uses the user's biological information as a key to decrypt the encrypted information and decrypt the user's private information.

Further, the encryption chip includes a terminal screen control module, an encryption algorithm module, a module communicating with the terminal main chip, an input control module, and a biometric information input module;

The terminal screen control module is used to output private information to the terminal display screen;

The encryption algorithm module is used to encrypt user private information;

The communication module with the terminal chip is used to communicate with the terminal main chip;

The input control module is used to control information input and accept information input;

The biometric information input module is used for collecting biometric information and identifying biometric information.

Further, the encryption algorithm is one or a combination of AES, DES, RSA, and MD5.

Further, the user biometric information is one or a combination of fingerprint information, iris information, facial information, vein information, and earprint information.

In summary, adopting the present invention has the following beneficial effects:

The hardware solution using encryption chips is superior to software methods in speed and performance; using biometric technology, users do not need to memorize any passwords; all encryption, decryption, display, input and other operations are completed inside the encryption chip, no need Through the mobile phone, information leakage caused by viruses or Trojan horses in the mobile phone is avoided.

Description of drawings

FIG. 1 is a schematic structural diagram of a terminal device according to an embodiment of the present invention;

Fig. 2 is a flowchart of a method for encrypting user information according to an embodiment of the present invention;

Fig. 3 is a flowchart of a method for decrypting user information according to an embodiment of the present invention.

Detailed ways

The present invention overcomes that the encryption and decryption processes existing in the prior art all depend on the software operation in the mobile phone. If the user's mobile phone is implanted with viruses and Trojan horse programs, it can monitor the information in the user's mobile phone memory and steal the password input by the user ( key) or the password output after decryption, causing significant property and economic losses to the user.

The invention includes two parts, an encryption chip and a terminal body. The encryption algorithm built into the encryption chip can be one or a combination of various encryption methods such as AES (Advanced Encryption Standard), DES (Data Encryption Standard), RSA (Rivest Shamir and Adleman), MD5 (Message Digest Algorithm), and the present invention only The AES128 algorithm is used as an example for illustration.

The key of the AES encryption algorithm is extracted by the biometric information identification module, and constitutes a unique identification code with the user's identity. It should be noted that the biological information identification method adopted by the biological information identification module can be one or a combination of various methods such as fingerprint identification, iris identification, face identification, vein identification, and earprint identification. The present invention only takes fingerprint identification as an example. illustrate.

The encryption chip is currently implemented through FPGA and includes five modules: a mobile phone screen control module, an AES encryption algorithm module, a module communicating with the main chip of the mobile phone, a keyboard control module, and a biometric information input module.

The AES encryption algorithm is realized by the hardware circuit programmed inside the FPGA, and the key of the AES encryption algorithm is the unique biometric information input by the user. In order not to go through the mobile phone part, the user enters the biometric information into the encryption chip. Also for security reasons, the decrypted password does not need to go through the mobile phone main control program, and is directly output to the mobile phone screen control module in the encryption chip. on the phone display.

The technical solutions of the present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. In the following embodiments, the terminal device of the present invention is described by taking a mobile phone as an example.

As shown in Figure 1, the schematic diagram of the structure of the terminal device according to the embodiment of the present invention, the terminal device is composed of two parts: the main body of the mobile phone and the encryption chip. The signal line of the mobile phone is connected to the main chip of the mobile phone through the encryption chip. During normal operation, the encryption chip acts as a channel and will not affect the normal input and display of the mobile phone. The main chip of the mobile phone exchanges information with the encryption chip through the communication interface.

The encryption chip is currently implemented through FPGA and includes five modules: mobile phone screen control module, AES encryption algorithm module, communication module with the main chip of the mobile phone, keyboard control module and biometric information input module.

The mobile phone screen control module is used to output the output password to the mobile phone display screen.

The AES encryption algorithm module is used to encrypt user information.

The communication module with the main chip of the mobile phone is used for communicating with the main chip of the mobile phone.

The keyboard control module is used for controlling keyboard input and accepting keyboard input.

The biometric information input module is used for collecting biometric information and identifying biometric information.

Please refer to Fig. 2, which is a flowchart of a user information encryption method according to an embodiment of the present invention, which includes the following steps:

S201: first prompting the user to input detailed information for establishing a password;

For example, the user needs to create a password information of a China Merchants Bank card, and enter "China Merchants Bank Card".

S202: The mobile phone notifies the encryption chip to enter the encryption state through the communication interface, and prompts the user to input a unique password (key);

S203: The encryption chip disconnects the connection between the mobile phone and the keyboard;

S204: The user inputs biometric information, such as fingerprint information;

S205: the encryption chip sends a message to the main chip of the mobile phone, notifying the display screen of the mobile phone to prompt the user to enter the password;

S206: The encryption chip encrypts the password input by the user;

S207: The encrypted information is sent to the mobile phone chip and stored in one-to-one correspondence with the detailed information.

In the above steps, the mobile phone prompts the user to input fingerprint identification information, and at the same time, the encryption chip cuts off the connection between the keyboard and other input devices and the mobile phone. Usually, the keyboard communicates with the main chip. At this time, the user can enter the corresponding password, usually the password of the bank card. is a 6-digit number. Each number occupies a space of one byte (8 bits). After the input is completed, the 6 numbers are stored in the encryption chip, and the user needs to input twice to confirm that the password is entered correctly. 6 numbers occupy 48 bits of space, and the AES encryption algorithm needs to input at least 128 bits of data, so if you want to encrypt 48 bits of data, you need to fill the password data. The padding method can be all zeros or other specified methods. Usually all kinds of passwords occupy less than 16 bytes (128 bits), so the present invention only needs to perform the AES algorithm once to complete the encryption process of a password. The encryption chip sends the encrypted data to the mobile phone through the communication interface, and stores them in one-to-one correspondence with the password information "China Merchants Bank Card" entered by the user. What needs to be explained is that if the user needs to input a mixed alphanumeric password, the first thing to explain is that the default input mode of the mobile phone is digital. At this time, the mobile phone needs to notify the encryption chip through the communication interface. If a key on the keyboard is pressed, Then the input mode is switched to the letter mode; then the encryption chip judges the information input by the keyboard, if the switch key is typed, the encryption chip does not intercept the keyboard input to ensure that the input mode is switched to the letter mode, and if other keys are input, the encryption chip intercepts Enter the information accordingly and save it. By identifying the switch key, the encryption chip can be controlled to identify whether the user input is a letter or a number, and the corresponding information is stored in the encryption chip. After each successful input of a password, the encryption chip will prompt the mobile phone to display the corresponding information through the communication interface. How many digits of the password have been entered. After the user completes the password input, it is encrypted by the AES algorithm and sent to the mobile phone.

Please refer to Fig. 3, which is a flowchart of a method for decrypting user information according to an embodiment of the present invention, which includes the following steps:

S301: The mobile phone prompts the user to select the detailed information for which the password needs to be inquired;

S302: The mobile phone sends the encrypted information corresponding to the detailed information to the encryption chip through the communication interface, and notifies it to enter the decryption state, and prompts the user to input a unique password (key);

S303: The user inputs biometric information;

S304: The encryption chip uses the key input by the user and the encrypted information sent by the mobile phone to perform a decryption operation;

S305: The encryption chip disconnects the mobile phone from the screen;

S306: The encryption chip displays the decrypted password on the screen of the mobile phone.

In the above process, the user first needs to select the detailed information that needs to output the password, and then sends the encrypted information corresponding to the detailed information selected by the user to the encryption chip through the communication interface, and at the same time prompts the user to enter the fingerprint identification information through the mobile phone display screen. After the fingerprint identification information input by the user, the encryption chip decrypts the encrypted information input from the mobile phone (the key is the fingerprint identification information input by the user). And interrupt the electrical signal connection between the display screen of the mobile phone and the mobile phone, the encryption chip takes over the control of the display screen of the mobile phone, and displays the decrypted password on the display screen of the mobile phone. The display time can be set, for example, after displaying for 1 minute, the encryption chip exits the control of the display screen, clears the corresponding memory for storing password plaintext, and returns to the state of receiving encrypted information sent by the mobile phone again. When displaying the plaintext of the password, because the original password may be filled due to insufficient digits, the user needs to judge that if there are consecutive zeros and part of the plaintext password ending with a zero, it is not the password information entered by the user.

It should be noted that the preceding examples all take mobile phones with full keyboard input as examples. If the user is using a touch screen mobile phone, the connection between the touch screen and the mobile phone is similar to the connection between the keyboard and the mobile phone, and the implementation principle is also similar. It’s just that the encryption chip is needed to analyze the data of the touch screen. If a certain area of the touch screen is pressed, the input mode will switch to the letter mode; the encryption chip judges the input touch screen area information. When the area is triggered, the encryption chip does not intercept the keyboard input, and ensures that the input mode is switched to the letter mode. If other keys are input, the encryption chip intercepts the corresponding input information and saves it. By identifying the trigger area of the switch key, the encryption chip can be controlled to identify whether the user input is a letter or a number, and the corresponding information is stored in the encryption chip. After completing the password input, it is encrypted by the AES algorithm and sent to the mobile phone.

The design scheme comprehensively uses fingerprint identification technology, and the AES encryption algorithm provides a high security standard. The encryption and decryption process depends on the hardware encryption chip, and is not carried out through mobile phone software, which ensures that all password information in plain text does not enter the mobile phone memory or related external memory. , will not be stolen by Trojan horse programs or viruses implanted in mobile phones.

The present invention also can have multiple embodiments, without departing from the spirit and essence of the present invention, those skilled in the art can of course make various corresponding changes or changes according to the present invention, as long as the spirit and essence of the present invention Any modification, equivalent replacement, and improvement made within the principles shall be included in the protection scope of the present invention.

Claims (10)

1. a terminal device, is characterized in that, described terminal device comprises encryption chip and terminal body;

Described terminal body prompting user inputs managing detailed catalogue corresponding to the user's private information that need encrypt, and wherein, described terminal body comprises terminal master chip and keyboard;

Described terminal body notifies that described encryption chip enters encrypted state, and points out user to input user biological information;

The connection of described encryption chip disconnected end master chip and keyboard;

Described encryption chip gathers the user biological information of user's input;

Described terminal body prompting user inputs the user's private information that need encrypt, and described encryption chip gathers described user's private information of user's input;

Described encryption chip to described user's private information with user biological information for key is encrypted by cryptographic algorithm, and by encryption after information send to terminal body to store.

2. terminal device as claimed in claim 1, it is characterized in that, when user needs to decipher its user's private information, again input identical user biological information, encryption chip with this user biological information for described in secret key decryption encryption after information and decrypt user's private information.

3. terminal device as claimed in claim 1, it is characterized in that, described encryption chip comprises terminal screen control module, enciphering algorithm module, the module communicated with terminal master chip, input control module and biometric information load module;

Described terminal screen control module is for outputting to terminal display screen by user's private information;

Described enciphering algorithm module is used for encrypting user's private information;

The described module communicated with terminal master chip is for communicating with terminal master chip;

Described input control module is used for control information input and the input of the information of reception;

Described biometric information load module is for gathering user biological information and identifying user biological information.

4. terminal device as claimed in claim 1, is characterized in that, described cryptographic algorithm is one or the combination of AES, DES, RSA, MD5.

5. terminal device as claimed in claim 1, is characterized in that, described user biological information is finger print information, one of iris information, facial information, venous information, ear line information or combine.

6. a user profile encryption method, is characterized in that, described encryption method comprises:

Terminal body prompting user inputs managing detailed catalogue corresponding to the user's private information that need encrypt, and wherein, described terminal body comprises terminal master chip and keyboard;

Described terminal body notice encryption chip enters encrypted state, and points out user to input user biological information;

The connection of described encryption chip disconnected end master chip and keyboard;

Described encryption chip gathers the user biological information of user's input;

Described terminal body prompting user inputs the user's private information that need encrypt, and described encryption chip gathers described user's private information of user's input;

By encryption chip to described user's private information with user biological information for key adopt cryptographic algorithm encryption, and by encryption after information send to terminal body to store.

7. method as claimed in claim 6, it is characterized in that, when user needs to decipher its user's private information, again input identical user biological information, encryption chip using this user biological information as described in secret key decryption encryption after information and decrypt user's private information.

8. method as claimed in claim 6, it is characterized in that, described encryption chip comprises terminal screen control module, enciphering algorithm module, the module communicated with terminal master chip, input control module and biometric information load module;

Described terminal screen control module is for outputting to terminal display screen by user's private information;

Described enciphering algorithm module is used for encrypting user's private information;

The described module communicated with terminal master chip is for communicating with terminal master chip;

Described input control module is used for control information input and input of receiving information;

Described biometric information load module is for gathering user biological information and identifying user biological information.

9. method as claimed in claim 6, is characterized in that, described cryptographic algorithm is one or the combination of AES, DES, RSA, MD5.

10. method as claimed in claim 6, is characterized in that, described user biological information is finger print information, one of iris information, facial information, venous information, ear line information or combine.