CN107818248A - Authentication module and authentication method - Google Patents

Abstract

An authentication module and an authentication method are suitable for an electronic device; the authentication module comprises a data acquisition unit and a control unit; the control unit is coupled with the data acquisition unit; the data acquisition unit is used for acquiring one or more physiological data and generating authentication data according to the physiological data; the control unit is used for receiving the authentication data, judging whether the authentication data conforms to preset data or not, and generating a starting signal when the authentication data conforms to the preset data; the data acquisition unit and the control unit receive standby power to operate in a power-off state of the electronic device, and the electronic device is powered on according to the starting signal. The invention can directly judge whether the electronic device is started or not through the biological characteristic authentication of the user before the electronic device is started, saves the power consumption, provides good user experience and ensures the data security.

Description

Authentication modules and authentication methods

technical field

The invention relates to an authentication module and an authentication method, in particular to an authentication module and an authentication method for booting up by using physiological data and control data access rights.

Background technique

In the current booting process using the fingerprint identification technology, the electronic device needs to be powered on first, and then the related fingerprint identification module will be driven subsequently, so as to authenticate the identity of the user. Therefore, when the fingerprint authentication has not been successfully passed, it needs to spend extra power to start the machine, resulting in a waste of energy. In addition, the user needs to perform two operations of "booting on" and "fingerprint identification" respectively, and this process also lacks a good user experience.

Furthermore, the sensing data captured by the existing fingerprint identification module often needs to be transmitted to the other end through standard specifications. Therefore, on the transmission path of the sensing data or at the other end of the transmission path, it is possible for interested parties to intercept the signal midway through this standard specification, and then crack it, which becomes a major security loophole.

In addition, the sampling standard of the current identification module is easy to imitate. For example, interested people may further produce fake fingerprints through fingerprint collection technology. Therefore, existing methods cannot effectively and correctly judge whether the identification body itself is an effective life body.

Contents of the invention

The technical problem to be solved by the present invention is to provide an authentication module and an authentication method to solve the above problems.

The technical problem to be solved by the present invention is achieved through the following technical solutions:

The invention proposes an authentication module suitable for an electronic device, and the authentication module includes a data acquisition unit and a control unit. The control unit is coupled to the data acquisition unit. The data acquisition unit is used for acquiring a physiological data, and generating authentication data according to the physiological data. The control unit is used for receiving the authentication data, and judging whether the authentication data conforms to a preset data, and generates an activation signal when the authentication data conforms to the preset data. Wherein, the data acquisition unit and the control unit receive a standby power to operate when the electronic device is in a shutdown state, and the electronic device is powered on according to the start signal.

In an embodiment of the present invention, the data acquisition unit further encrypts the physiological data through an encryption algorithm to generate authentication data, and transmits the authentication data to the control unit through a serial peripheral interface.

In another embodiment of the present invention, the control unit further decrypts the received authentication data through a decryption algorithm, and then judges whether the decrypted authentication data conforms to the preset data.

In another embodiment of the present invention, the authentication module further includes an input unit. The input unit is coupled to the data acquisition unit. The input unit is used to generate an input signal when changing from a first state to a second state through an input operation. The data acquisition unit further generates authentication data according to the input signal and physiological data, the input unit is a button, the input operation is a pressing action, and the physiological data is acquired by the data acquisition unit during the pressing action.

In another embodiment of the present invention, the physiological data is associated with a group selected from a fingerprint characteristic, a heartbeat characteristic and a skin texture characteristic.

The invention proposes an authentication method suitable for an electronic device, and the authentication method includes the following steps. When the electronic device is in a power-off state, a piece of physiological data is captured. An authentication data is generated according to the physiological data. It is judged whether the authentication data conforms to a preset data. When the authentication data matches the preset data, an activation signal is generated, so that the electronic device is started according to the activation signal.

Further, the authentication method further includes: encrypting the physiological data through an encryption algorithm to generate the authentication data; and transmitting the authentication data through a first end of a serial peripheral interface bus.

Further, the authentication method further includes: receiving the authentication data through a second end of the serial peripheral interface bus; decrypting the received authentication data through a decryption algorithm; and judging whether the decrypted authentication data conforms to the preset data.

Further, the authentication method further includes: when an input unit changes from a first state to a second state through an input operation, receiving an input signal correspondingly generated; and according to the input signal and the physiological data The authentication data is generated; wherein the input unit is a button, the input operation is a pressing action, and the physiological data is captured during the pressing action.

Further, the physiological data is associated with a group selected from a fingerprint feature, a heartbeat feature and a skin quality feature.

As mentioned above, the present invention encrypts the captured physiological data to generate authentication data when the electronic device is turned off, and transmits the authentication data to the control unit through the serial peripheral interface. The unit generates an activation signal to power on the electronic device. In this way, before the electronic device is turned on, it can directly determine whether to turn it on through the user's biometric authentication, which saves power consumption, provides a good user experience, and ensures data security.

The above descriptions about the content of the present invention and the following descriptions of the embodiments are used to demonstrate and explain the spirit and principle of the present invention, and provide further explanations for the protection scope of the present invention.

Description of drawings

FIG. 1 is a schematic block diagram of an authentication module according to an embodiment of the present invention;

2 is a schematic block diagram of an authentication module according to another embodiment of the present invention;

3 is a schematic diagram of an input unit according to an embodiment of the present invention;

Fig. 4 is a flowchart of an authentication method according to an embodiment of the present invention.

[Description of Reference Signs]

100, 200 authentication modules

110, 210 data acquisition unit

120, 220 control unit

230 input unit

240 communication unit

250 image sensors

300 electronic devices

Steps of S410～S440 authentication method

Detailed ways

The detailed features and advantages of the present invention are described in detail below in the embodiments, the content of which is sufficient for those skilled in the art to understand the technical content of the present invention and implement it accordingly, and according to the content disclosed in this specification, the protection scope and the accompanying drawings, The related objects and advantages of the present invention can be easily understood by those skilled in the art. The following examples are to further describe the present invention in detail, but not to limit the protection scope of the present invention in any way.

FIG. 1 is a schematic block diagram of an authentication module 100 according to an embodiment of the present invention. The authentication module 100 is suitable for the electronic device 300 . As shown in FIG. 1 , the authentication module 100 includes a data acquisition unit 110 and a control unit 120 . The control unit 120 is coupled to the data capture unit 110 . The data acquisition unit 110 may be, for example, a fingerprint sensor, a heartbeat sensor, a skin texture sensor, or other types of biological data sensors, or a sensor that combines at least the functions of the above two sensors, which is not limited here. The control unit 120 may be, for example, a microcontroller (Micro Controller Unit, MCU), a keyboard controller (keyboard controller, KBC), an embedded controller (Embed Controller, EC) or other microprocessors, which is not limited here.

It should be noted that the data acquisition unit 110 and the control unit 120 can receive the standby power supplied by the electronic device 300 , for example, the standby power of 5 volts (V) and 0.7 ampere (A). Therefore, when the electronic device 300 is turned off, the data capture unit 110 and the control unit 120 can still operate normally. For example, when the user intends to boot the electronic device 300, in the boot and authentication mechanism of the present invention, the actions of the data capture unit 110 and the control unit 120 are as follows:

The data capturing unit 110 is used for capturing a piece of physiological data, and generating authentication data according to the physiological data. In the embodiment of the present invention, the physiological data is selected from the group consisting of fingerprint features, heartbeat features and skin texture features. The physiological data may also be other reference features extracted from the living body, which is not limited here. In the embodiment of the present invention, the data acquisition unit 110 can further encrypt the physiological data through an encryption algorithm to generate authentication data, and transmit the authentication data to the control unit 120 through a serial peripheral interface (Serial Peripheral Interface, SPI) . That is, the authentication data is transmitted from a first end of a serial peripheral interface bus (such as an output end of the data acquisition unit 110 ) to a second end (such as an input end of the control unit 120 ). The encryption algorithm may be implemented, for example, by executing a specific software module, or by using specific hardware, which is not limited here.

In another embodiment of the present invention, the physiological data may be complex. For example, the fingerprint feature can be extracted in the first stage, and the heartbeat feature can be further extracted in the second stage, and then the fingerprint feature and the heartbeat feature can be synthesized and encrypted to generate authentication data. In this way, the heartbeat characteristics can be used to determine whether the object received and sensed is a valid living body, so as to avoid the use of fake fingerprints for authentication by interested people, and it can also solve the possible errors caused by the traditional detection of only the conductivity of the object. sentenced.

The control unit 120 is used for receiving the authentication data, and judging whether the authentication data conforms to a preset data, and generates an activation signal when the authentication data conforms to the preset data. In the embodiment of the present invention, the control unit 120 further decrypts the received authentication data through a decryption algorithm, and then judges whether the decrypted authentication data conforms to the preset data. The preset data, for example, may be, but not limited to, the fingerprint sensed by the data capture unit 110 when the user uses the electronic device 300 for the first time, so as to be used for comparison when the user turns on the device again later. . The decryption algorithm may be implemented, for example, by executing a specific software module, or by using specific hardware, which is not limited here. The start signal may be a pulse signal used to start the electronic device 300 .

In this way, the electronic device 300 can be powered on according to the activation signal. In addition, since the authentication data transmitted on the serial peripheral interface bus has been encrypted, even if the electronic device 300 is stolen, the thief cannot identify the physical identity of the owner of the electronic device 300 by intercepting the authentication data through the serial peripheral interface bus. data. Even at this end of the control unit 120, thieves cannot decipher the authentication data through common interfaces such as LPC (Low pin count) bus and integrated circuit bus (Inter-Integrated Circuit, I ² C) bus, thereby avoiding embezzlement.

FIG. 2 is a schematic block diagram of an authentication module 200 according to another embodiment of the present invention. The authentication module 200 is suitable for the electronic device 300 . As shown in FIG. 2 , the authentication module 200 includes a data acquisition unit 210 and a control unit 220 , an input unit 230 , a communication unit 240 and an image sensor 250 . The control unit 220 is coupled to the data acquisition unit 210 , the communication unit 240 and the image sensor 250 . The input unit 230 is coupled to the data capture unit 210 .

The input unit 230 is used to generate an input signal when changing from a first state to a second state through an input operation. The data acquisition unit 210 further generates authentication data according to the input signal and the physiological data. In the embodiment of the present invention, the input unit 230 is a button, and the input operation is a pressing action, and the physiological data is captured by the data acquisition unit 210 during the pressing action.

FIG. 3 is a schematic diagram of an input unit according to an embodiment of the present invention. As shown in FIG. 3 , the input unit 230 may be one of preset keys on a computer keyboard. The data capture unit 210 is disposed on the upper surface of the key, and the electronic device 300 may be a computer connected to the key. When the user wants to start the computer, he can directly press the preset button with his finger. When the default key is depressed from the original position to another position, a corresponding input signal is generated. For example, it is a character signal corresponding to a key. During the process of pressing the button with the finger, the features of the fingerprint of the finger will also be captured by the data capture unit 210 . After subsequent encryption together with the input signal, authentication data is generated and transmitted to the control unit 220 . If it is decrypted by the control unit 220 and judged to be consistent with the preset data, it means that the original computer owner triggers the computer to start up, thereby sending an activation signal to the computer. The above-mentioned configuration of the input unit 230 can also be applied to portable electronic devices or other types of devices, and is not limited here.

It should be noted that the above-mentioned booting generally refers to allowing the computer to enter the operating system. In this way, the keys of the above-mentioned keyboard can replace the traditional power switch button arranged on the chassis, thus saving the installation cost of the traditional power switch button. However, the input unit 230 of the present invention can have various changes, which are not limited here.

In the embodiment of the present invention, if the fingerprint feature intercepted by the data acquisition unit 210 does not meet the preset value in the subsequent judgment, the communication unit 240 can send the fingerprint feature to the notification system of the police station via the network as a report basis. In the embodiment of the present invention, whenever the above-mentioned input signal is generated, the image sensor 250 can also be used to capture the user's facial image, and when the captured fingerprint features do not meet the preset values, the suspected thief's facial image can be sent to to another remote device. Likewise, both the communication unit 240 and the image sensor 250 can receive standby power to operate when the electronic device is in a power-off state. The communication unit 240 may be, for example, a processor with a communication function, and the image sensor 250 may be, for example, a CMOS sensor (CMOS Image Sensor, CIS) or a charge-coupled device (Charge-coupled Device, CCD).

The above boot-up and authentication mechanism proposed by the present invention can be applied to common personal computers and portable electronic devices, and can also be applied to small cards, such as electronic anti-theft door lock induction cards, small payment cards, and leisure cards. , online payment card or other types of identification cards, etc. For example, the electronic device may be a card provided with a Near Field Communication (NFC) chip. When the card is used, the data capture unit installed on the card can capture the user's fingerprint, and after encryption to generate authentication data, let the control unit on the card judge whether it can meet the preset data corresponding to the original card user. After the authentication is successful, the NFC chip will start to work, or allow the related NFC module to operate. In this way, the card can be prevented from being stolen.

Fig. 4 is a flowchart of an authentication method according to an embodiment of the present invention. The authentication method includes the following steps.

In step S410, the data capture unit captures a piece of physiological data in a power-off state of the electronic device.

In step S420, the data acquisition unit generates authentication data according to the physiological data.

In step S430, the control unit determines whether the authentication data conforms to a preset data.

In step S440, when the authentication data matches the preset data, the control unit generates an activation signal, so that the electronic device is powered on according to the activation signal.

Details about the steps of this embodiment are detailed in the above embodiment, and will not be repeated here.

Since the above-mentioned authentication program of the present invention can be completed before booting, network hackers cannot use software such as Trojan horse programs in the shutdown state of the electronic device to steal relevant user information for booting, thereby increasing the difficulty of stealing and improving the security of the device. safety.

To sum up, the present invention encrypts the captured physiological data to generate authentication data when the electronic device is turned off, and transmits the authentication data to the control unit through the serial peripheral interface. If it is judged to meet the preset data, then The control unit generates a start signal to start the electronic device. In this way, before the electronic device is turned on, it can directly determine whether to turn it on through the user's biometric authentication, which saves power consumption, provides a good user experience, and ensures data security.

Claims (10)

1. A kind of 1. authentication module, suitable for an electronic installation, it is characterised in that including：

   One data acquisition unit, for capturing a physiological data, and an authentication data is produced according to the physiological data；And

   One control unit, the data acquisition unit is coupled, for receiving the authentication data, and judge whether the authentication data meets One preset data, when the authentication data meets the preset data, then produce an enabling signal；

   Wherein, the data acquisition unit and the control unit received under an off-mode of the electronic installation one await orders electric power and Running, the electronic installation are started shooting according to the enabling signal.
2. 2. authentication module as claimed in claim 1, it is characterised in that the data acquisition unit is further calculated by an encryption Method encrypts the physiological data, to produce the authentication data, and extremely should by a serial peripheral interface to transmit the authentication data Control unit.
3. 3. authentication module as claimed in claim 2, it is characterised in that the control unit further will by a decipherment algorithm The authentication data decryption received, then judge whether the authentication data after decryption meets the preset data.
4. 4. authentication module as claimed in claim 2, it is characterised in that further include：

   One input block, the data acquisition unit is coupled, for changing via an input operation from a first state to one During two-state, then an input signal is produced；

   Wherein the data acquisition unit produces the authentication data according still further to the input signal and the physiological data, the input Unit is a button, and the input operation is a push action, and the physiological data during the push action performs by this Data acquisition unit captures.
5. 5. authentication module as claimed in claim 1, it is characterised in that the physiological data is associated with selected from a fingerprint characteristic, one The group that heartbeat feature and a skin quality feature are formed.
6. A kind of 6. authentication method, suitable for an electronic installation, it is characterised in that including：

   Under an off-mode of the electronic installation, a physiological data is captured；

   One authentication data is produced according to the physiological data；

   Judge whether the authentication data meets a preset data；And

   When the authentication data meets the preset data, then an enabling signal is produced, make the electronic installation whereby according to the startup Signal and start shooting.
7. 7. authentication method as claimed in claim 6, it is characterised in that further include：

   The physiological data is encrypted by an AES, to produce the authentication data；And

   The authentication data is transmitted by a first end of a serial peripheral interface bus.
8. 8. authentication method as claimed in claim 7, it is characterised in that further include：

   The authentication data is received by one second end of the serial peripheral interface bus；

   The authentication data received is decrypted by a decipherment algorithm；And

   Judge whether the authentication data after decryption meets the preset data.
9. 9. authentication method as claimed in claim 7, it is characterised in that further include：

   When an input block changes to second state via an input operation from a first state, receive produced by corresponding to An input signal；And

   The authentication data is produced according to the input signal and the physiological data；

   Wherein the input block is a button, and the input operation is a push action, and the physiological data is held in the push action It is subtracted in capable process.
10. 10. authentication method as claimed in claim 6, it is characterised in that the physiological data is associated with selected from a fingerprint characteristic, one The group that heartbeat feature and a skin quality feature are formed.