CN111966416A - Fingerprint module identification method based on UEFI and system supporting fingerprint identification - Google Patents

Abstract

The invention discloses a fingerprint module identification method based on UEFI and a system supporting fingerprint identification, belonging to the technical field of automatic identification of fingerprint modules, and the technical problem to be solved is how to automatically identify the fingerprint module based on UEFI to overcome the problems of the existing computer security encryption function. insufficient. The method includes the following steps: establishing communication between a host computer and a fingerprint module driver; loading a startup service in a computer operating system during a boot process, and judging whether to load a fingerprint module driver through the startup service, and the fingerprint module driver is a UEFI mode driver; After the fingerprint module is detected, the fingerprint identification function of the BIOS is turned on; the fingerprint identification and verification of the fingerprint entered by the fingerprint module are carried out through the fingerprint identification function of the BIOS. The system includes a host computer and a fingerprint module, and the fingerprint module and the host computer are identified by the above-mentioned method.

Description

UEFI-based fingerprint module identification method and system supporting fingerprint identification

technical field

The invention relates to the technical field of automatic identification of fingerprint modules, in particular to a fingerprint module identification method based on UEFI and a system supporting fingerprint identification.

Background technique

With the rapid development of computer technology and Internet communication technology in today's society, while bringing many conveniences to people, the freedom, openness, real-time nature of information and other characteristics make people pay more and more attention to information security issues. Information security issues brought about by computer systems such as information exposure, privacy leakage, and hacker intrusion have become the focus of attention of the majority of computer Internet users. At the personal level, the widely used password encryption can be easily cracked by various software, and private files such as personal photos and data can be easily obtained by others; at the national level, information security is directly related to the entire national security issue. security and confidentiality are more important. As the most important data processing and storage device, the computer security encryption function should be proposed. In computing security, the safest and most effective way is to perform identity authentication before the computer has entered the upper operating system.

As a kind of biometric authentication encryption technology, fingerprint recognition technology has the incomparable advantages of other feature recognition, its maturity and application in identity authentication technology are becoming more and more popular. Automatic fingerprint identification is a method of fingerprint identification using computers, and fingerprint identification has achieved a century revolution in the field of identification. Everyone's fingerprints are unique and unchanged for life. Relying on this uniqueness and stability, we can match a person with his fingerprint to verify his true identity, which is fingerprint recognition technology. Use your fingerprint to automatically log in at system startup. Only users who are allowed in advance and have completed the fingerprint registration can log in and use the computer. At the same time, the system will automatically log in to different users according to the fingerprint information read.

UEFI (Unified Extensible Firmware Interface, Unified Extensible Firmware Interface) defines the interface between the operating system and the platform firmware, which is a standard released by the UEFI Forum. As a substitute for BIOS, encryption under the UEFI system has become the main research direction of IT manufacturers in the world today.

Based on the advantages of encryption under the UEFI system, how to automatically identify the fingerprint module based on UEFI to overcome the insufficiency of the existing computer security encryption function, in order to achieve an encryption method with high accuracy, good encryption performance, and automatic identification of the fingerprint module.

SUMMARY OF THE INVENTION

The technical task of the present invention is to address the above shortcomings, provide a UEFI-based fingerprint module identification method and a system supporting fingerprint identification, and solve the problem of how to automatically identify the fingerprint module based on UEFI to overcome the deficiencies of the existing computer security encryption function.

In a first aspect, the present invention provides a UEFI-based fingerprint module identification method, comprising the following steps:

According to the communication protocol of the fingerprint module, establish the communication between the upper computer and the fingerprint module driver;

The computer operating system configured on the host computer loads the startup service during the booting process, and judges whether to load the fingerprint module driver through the startup service, and the fingerprint module driver is a UEFI mode driver;

Control the fingerprint identification function in the BIOS according to the judgment result, and turn on the fingerprint identification function of the BIOS when the fingerprint module is detected;

The fingerprint module and the host computer send and receive information based on the communication protocol, and the fingerprints entered by the fingerprint module are identified and verified through the fingerprint identification function of the BIOS.

Preferably, whether the fingerprint module driver is loaded is judged by the GUID corresponding to the OpenProtocol that starts the service, and if the judgment result is that the fingerprint module driver corresponds to the fingerprint module, the fingerprint module driver is loaded and installed.

Preferably, according to the judgment result, the fingerprint identification function in the BIOS is controlled, including the following method: in the BIOS configuration interface, it is determined whether the fingerprint identification function of the BIOS is enabled according to the judgment result. If the judgment result is that the fingerprint module driver corresponds to the fingerprint module, the fingerprint in the BISO The recognition function is normally turned on.

Preferably, the fingerprint module is an R301 fingerprint module, and the fingerprint module communicates with the upper computer through half-duplex asynchronous serial communication.

Preferably, the data packets between the R301 fingerprint module and the host computer are divided into three categories, namely command packets, data packets and end packets, and all data packets are added with headers;

The data packet needs to have an instruction packet before it or a response packet after it;

The response packet is used to transmit the execution status and results of the relevant commands to the upper computer, the response contains parameters, and the response packet can be followed by subsequent data packets, and the upper computer receives the response packet from the fingerprint module. Afterwards, confirm the package receiving and instruction status of the fingerprint module.

In the second aspect, the present invention provides a system for supporting fingerprint identification, including a host computer and a fingerprint module, the host computer is configured with an operating system and a BIOS, the BIOS has a fingerprint identification function, and the host computer and the fingerprint module are configured through the following steps: The UEFI-based fingerprint module identification method described in any one of the first aspect performs fingerprint identification.

Preferably, the operating system judges whether the fingerprint module driver is loaded through the GUID corresponding to the OpenProtocol that starts the service, and if the judgment result is that the fingerprint module driver corresponds to the fingerprint module, the fingerprint module driver is loaded and installed.

Preferably, the operating system controls the fingerprint identification function in the BIOS according to the judgment result, including the following method: in the BIOS configuration interface, it is determined whether the fingerprint identification function of the BIOS is enabled according to the judgment result. If the judgment result is that the fingerprint module driver corresponds to the fingerprint module, the BISO The fingerprint recognition function is turned on normally.

Preferably, the fingerprint module is an R301 fingerprint module, and the fingerprint module communicates with the upper computer through half-duplex asynchronous serial communication.

Preferably, the data packets between the R301 fingerprint module and the host computer are divided into three categories, namely command packets, data packets and end packets, and all data packets are added with headers;

The data packet needs to have an instruction packet before it or a response packet after it;

The response packet is used to transmit the execution status and results of the relevant commands to the upper computer, the response contains parameters, and the response packet can be followed by subsequent data packets, and the upper computer receives the response packet from the fingerprint module. Afterwards, confirm the package receiving and instruction status of the fingerprint module.

The UEFI-based fingerprint module identification method and the system supporting fingerprint identification of the present invention have the following advantages:

1. The fingerprint module driver is implemented by UEFI driver, using the OpenProtocol of the system startup service to judge the fingerprint module according to the GUID corresponding to the Protocol, and control the fingerprint recognition function in the BIOS according to the judgment result, which is convenient for computer security encryption;

2. Compared with the traditional computer encryption method, it is more intuitive and simple, and can automatically identify the fingerprint module according to the judgment result, which is convenient for the use of the fingerprint encryption function.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present invention more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only for the present invention. In some embodiments, for those of ordinary skill in the art, other drawings can also be obtained according to these drawings without any creative effort.

The present invention will be further described below in conjunction with the accompanying drawings.

FIG. 1 is a flowchart of a method for identifying a fingerprint module based on UEFI according to Embodiment 1.

Detailed ways

The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments, so that those skilled in the art can better understand the present invention and implement it, but the embodiments are not intended to limit the present invention, and in the case of no conflict Hereinafter, the embodiments of the present invention and the technical features in the embodiments may be combined with each other.

Embodiments of the present invention provide a UEFI-based fingerprint module identification method and a system supporting fingerprint identification, which are used to solve the technical problem of how to automatically identify the fingerprint module based on UEFI to overcome the insufficiency of the existing computer security encryption function.

Example 1:

A UEFI-based fingerprint module identification method of the present invention includes the following steps:

S100, according to the communication protocol of the fingerprint module, establish the communication between the upper computer and the fingerprint module driver;

S200, the computer operating system configured on the host computer loads a startup service during the boot process, and judges whether to load a fingerprint module driver through the startup service, and the fingerprint module driver is a UEFI mode driver;

S300, controlling the fingerprint identification function in the BIOS according to the judgment result, and after detecting the fingerprint module, enable the fingerprint identification function of the BIOS;

S400, the fingerprint module and the host computer send and receive information based on a communication protocol, and perform fingerprint identification and verification on the fingerprint entered by the fingerprint module through the fingerprint identification function of the BIOS.

Among them, the fingerprint module driver follows the UEFI driver model, and its core is to manage the driver through the Driver Binding Protocol. The fingerprint module driver consists of two core parts: EFI Driver Binding Protocol and the driver service itself. In the entry function of the UEFI driver of the fingerprint module, the EFI Driver Binding Protocol will be installed on its own Handle, and the EBDP will reside in memory for Driver installation and uninstallation.

Whether the fingerprint module driver is loaded is judged by the GUID corresponding to the OpenProtocol that starts the service. If the judgment result is that the fingerprint module driver corresponds to the fingerprint module, the fingerprint module driver is loaded and installed.

Controlling the fingerprint identification function in the BIOS according to the judgment result includes the following methods: in the BIOS configuration interface, it is determined whether the fingerprint identification function of the BIOS is enabled according to the judgment result. If the judgment result is that the fingerprint module driver corresponds to the fingerprint module, the fingerprint identification function in the BISO is normal. on.

The fingerprint module is the R301 fingerprint module. R301 adopts the most advanced fingerprint sensor and high-performance DSP processor, and has embedded complete fingerprint identification algorithms and protocols. It is an intelligent type with functions such as fingerprint collection, fingerprint comparison, search and storage. module. The fingerprint module communicates with the host computer through half-duplex asynchronous serial communication. The default baud rate is 57600bps, which can be set to 9600-115200bps through commands. The transmitted frame format is 10 bits, 1 0 level start bit, 8 data bits and 1 stop bit, no parity bit.

The data packets between the R301 fingerprint module and the host computer are divided into three categories, namely command packets, data packets and end packets, and all data packets are added with a packet header; the data packet needs to have an instruction packet before it or after it. There is a response packet; the response packet is used to transmit the execution status and results of the relevant commands to the upper computer. The response contains parameters, and the subsequent data packets can be received after the response packet. The upper computer confirms the fingerprint after receiving the response packet from the fingerprint module. The package receiving and command status of the module.

A UEFI-based fingerprint module identification method of the present invention mainly involves three processes: fingerprint module UEFI driver loading and installation, fingerprint module information sending and receiving, and fingerprint module automatic identification. First, the computer system will load the startup service during the boot process, and use the OpenProtocol of the system startup service to judge whether the UEFI driver of the fingerprint module is loaded according to the GUID corresponding to the Protocol, and control the fingerprint recognition function in the BIOS according to the judgment result. After the fingerprint module, the fingerprint identification function will be automatically turned on, and the information will be sent and received through the communication between the fingerprint module and the host computer, so as to achieve the purpose of automatic identification and verification of the fingerprint module. The method overcomes the shortcomings of the existing computer security encryption function, and provides an encryption method based on UEFI with high accuracy, good encryption performance and automatic identification of fingerprint modules.

Example 2:

A system for supporting fingerprint identification of the present invention includes a host computer and a fingerprint module. The host computer is configured with an operating system and a BIOS, and the BIOS has a fingerprint identification function. The host computer and the fingerprint module are identified by the UEFI-based fingerprint module disclosed in Embodiment 1. method for fingerprint identification.

The operating system judges whether the fingerprint module driver is loaded through the GUID corresponding to the OpenProtocol that starts the service, and if the judgment result is that the fingerprint module driver corresponds to the fingerprint module, the fingerprint module driver is loaded and installed.

The operating system controls the fingerprint identification function in the BIOS according to the judgment result, including the following methods: in the BIOS configuration interface, it is determined whether the fingerprint identification function of the BIOS is enabled according to the judgment result. If the judgment result is that the fingerprint module driver corresponds to the fingerprint module, the fingerprint identification in the BISO The function is turned on normally.

The fingerprint module is the R301 fingerprint module. R301 adopts the most advanced fingerprint sensor and high-performance DSP processor, and has embedded complete fingerprint identification algorithms and protocols. It is an intelligent type with functions such as fingerprint collection, fingerprint comparison, search and storage. module. The fingerprint module communicates with the host computer through half-duplex asynchronous serial communication. The default baud rate is 57600bps, which can be set to 9600-115200bps through commands. The transmitted frame format is 10 bits, 1 0 level start bit, 8 data bits and 1 stop bit, no parity bit.

The data packets between the R301 fingerprint module and the host computer are divided into three categories, namely command packets, data packets and end packets, and all data packets are added with a packet header; the data packet needs to have an instruction packet before it or after it. There is a response packet; the response packet is used to transmit the execution status and results of the relevant commands to the upper computer. The response contains parameters, and the subsequent data packets can be received after the response packet. The upper computer confirms the fingerprint after receiving the response packet from the fingerprint module. The package receiving and command status of the module.

The present invention is shown and described in detail above through the accompanying drawings and preferred embodiments. However, the present invention is not limited to these disclosed embodiments. Those skilled in the art can know that the above-mentioned different embodiments can be combined based on the above-mentioned multiple embodiments. More embodiments of the present invention can be obtained by the means in the present invention, and these embodiments are also within the protection scope of the present invention.

Claims (10)

1. the fingerprint module identification method based on UEFI is characterized in that comprising the steps: According to the communication protocol of the fingerprint module, establish the communication between the upper computer and the fingerprint module driver; The computer operating system configured on the host computer loads the startup service during the booting process, and judges whether to load the fingerprint module driver through the startup service, and the fingerprint module driver is a UEFI mode driver; Control the fingerprint identification function in the BIOS according to the judgment result, and turn on the fingerprint identification function of the BIOS when the fingerprint module is detected; The fingerprint module and the host computer send and receive information based on the communication protocol, and the fingerprints entered by the fingerprint module are identified and verified through the fingerprint identification function of the BIOS. 2. the fingerprint module identification method based on UEFI according to claim 1 is characterized in that whether the fingerprint module driver is loaded is judged by the corresponding GUID of the OpenProtocol of the startup service, if the judgment result is that the fingerprint module driver is corresponding to the fingerprint module, loading And install the fingerprint module driver. 3. the fingerprint module identification method based on UEFI according to claim 2 is characterized in that according to the result of judgment, the fingerprint identification function in BIOS is controlled, comprising the following methods: in the BIOS configuration interface, the fingerprint identification function of BIOS is determined according to the result of judgment in the BIOS configuration interface Whether to enable, if the judgment result is that the fingerprint module driver corresponds to the fingerprint module, the fingerprint recognition function in BISO is normally enabled. 4. the fingerprint module identification method based on UEFI according to claim 1,2 or 3, is characterized in that described fingerprint module is R301 fingerprint module, and described fingerprint module communicates with host computer by half-duplex asynchronous serial communication mode . 5. the fingerprint module identification method based on UEFI according to claim 4, is characterized in that the data packet between described R301 fingerprint module and upper computer is divided into three categories, is respectively command packet, data packet and end packet, and All data packets are added with headers; The data packet needs to have an instruction packet before it or a response packet after it; The response packet is used to transmit the execution status and results of the relevant commands to the upper computer, the response contains parameters, and the response packet can be followed by subsequent data packets, and the upper computer receives the response packet from the fingerprint module. Afterwards, confirm the package receiving and instruction status of the fingerprint module. 6. the system that supports fingerprint identification, comprises host computer and fingerprint module, described host computer is configured with operating system and BIOS, it is characterized in that described BIOS has fingerprint identification function, and described host computer and fingerprint module pass through as claim 1- 5 any one of the UEFI-based fingerprint module identification methods for fingerprint identification. 7. the system based on fingerprint identification according to claim 6, it is characterized in that described operating system judges whether fingerprint module driver is loaded by the corresponding GUID of the OpenProtocol of starting service, if the result of judgment is that fingerprint module is driven and corresponding to fingerprint module , load and install the fingerprint module driver. 8. the system based on fingerprint identification according to claim 6, it is characterized in that operating system controls fingerprint identification function in BIOS according to judgment result, comprises the following method: whether the fingerprint identification function of BIOS is decided according to judgment result in BIOS configuration interface If it is turned on, if the judgment result is that the fingerprint module driver corresponds to the fingerprint module, the fingerprint recognition function in the BISO is normally turned on. 9 . The fingerprint recognition-based system according to claim 7 , wherein the fingerprint module is an R301 fingerprint module, and the fingerprint module communicates with the host computer through a half-duplex asynchronous serial communication mode. 10 . 10. the system based on fingerprint identification according to claim 9, is characterized in that the data packet between described R301 fingerprint module and upper computer is divided into three categories, is respectively command packet, data packet and end packet, and all Data packets are added with headers; The data packet needs to have an instruction packet before it or a response packet after it; The response packet is used to transmit the execution status and results of the relevant commands to the upper computer, the response contains parameters, and the response packet can be followed by subsequent data packets, and the upper computer receives the response packet from the fingerprint module. Afterwards, confirm the package receiving and instruction status of the fingerprint module.

Images