CN1284090C - Memory storage device with fingerprint sensor and protection method for stored data - Google Patents

Abstract

The invention discloses a memory storage device with a fingerprint sensor, which basically comprises a host interface connected to a terminal host, a controller connected to the host interface, a fingerprint sensor connected to the controller and a memory module. The controller is connected with the terminal host and enables the terminal host to load and install the driver and the application program suitable for the terminal host from the memory module into the terminal host. The terminal host receives an instruction from the user through the two programs so as to inform the controller to control the fingerprint sensor to read fingerprint data to be identified of the user. The terminal host processes the fingerprint data to be identified and the template fingerprint data stored in the memory module by using the application program, judges whether the fingerprint data and the template fingerprint data are substantially matched, and enables the terminal host to access a specific block of the memory module according to the matching result.

Description

Memory storage device with fingerprint sensor and protection method for stored data

technical field

The invention relates to a memory storage device and a protection method for storing data thereof, in particular to a memory storage device containing a fingerprint sensor and a protection method for storing data thereof.

Background technique

Traditionally, the most common way to protect the confidentiality of personal data is to use password protection. However, using passwords to protect personal data not only has the trouble of users easily forgetting passwords, but also has the danger of passwords being cracked. Therefore, with respect to personal biological data, such as fingerprints, voiceprints, handwriting, eye iris and other biometric methods, have been gradually developed to provide a relatively complete and effective data protection method. Its advantage is that the biometric feature is portable and does not need to be stored, and it cannot be stolen. In particular, the biometric feature protection method combined with fingerprints is not only strict, but also very convenient to use.

In recent years, thanks to the invention of the chip-type fingerprint sensor, it is no longer an unfeasible technology to integrate a fingerprint recognition device into thin, light and small electronic products. For related technical content, please refer to the following patents of Zhou Zhengsan, one of the inventors in this case: 1. Chinese invention Patent application serial number 02105960.8, the application date is April 10, 2002, and the name of the invention is [capacitive fingerprint reading chip]; 2. The Chinese invention patent application number is 02123058.7, the application date is June 13, 2002, and the name It is [Pressure-type fingerprint reading chip and its manufacturing method]; 3. The serial number of the Chinese invention patent application is 02124906.7, the application date is July 12, 2002, and the name of the invention is [The temperature difference sensor and its application to fingerprint thermal image reading Take]; and 4. Chinese invention patent application serial number 02132054.3, the application date is September 10, 2002, and the invention name is [capacitive pressure micro-sensing element and fingerprint reading chip structure for its application]. This has also opened up a brand-new personal application, that is, the personal electronic product has the function of fingerprint identification.

Especially in the protection of storage media, it is an important development project combined with biometric methods. For example, as early as 20 years ago, U.S. Patent No. 4,582,985 has disclosed a storage media protection method, which uses fingerprint authentication. means to protect personal data stored in personal ID card devices. After the fingerprint identification procedure is passed, the protected data stored in the card device can be output for subsequent processing or authentication procedures. The horizontal size of this kind of device is the same as that of the current universal credit card, which mainly includes a fingerprint sensor, image processing and identification module and storage memory, and is a completely independent fingerprint identification device (that is, fingerprint capture and identification are all in the same device) executed within). Even if its application target is to prevent the counterfeiting of personal credit cards, etc., however, this device is expensive. For example, in addition to the fingerprint sensor, the image processing and identification modules require high-end microprocessors such as 32-bit RISC processors. Or DSP chips, making this kind of independent identification device difficult to popularize.

U.S. Patent No. 6,213,403 discloses a storage device with a fingerprint sensor, which uses a PCMCIA interface to connect to a computer. Similarly, the concept of this device is almost the same as that disclosed in U.S. Patent No. 4,582,985. An independent fingerprint identification device (that is, fingerprint capture and identification are performed in the same device), and the data in the storage device can only be opened through fingerprint authentication. Different pointing is implemented using a standard PCMCIA interface. At the same time, the PCMCIA device inserts the entire card into the computer slot, so the invention must be designed through a complex mechanism to expose the fingerprint sensing device to the outside for easy use, which will increase the instability and cost of the mechanism.

European Patent EP124079A1 also discloses the same data protection concept as the aforementioned US Patent No. 4,582,985 and US Patent No. 6,213,403. The difference is that its communication interface is a relatively uncommon gold finger design, and the same is an independent fingerprint Identification module.

The world patent WO 02/42887A2 discloses a data protection concept similar to the aforementioned US Patent No. 4,582,985, US Patent No. 6,213,403, and European Patent EP124079A1. The difference is that the communication with the terminal system is performed through the USB interface. , this device is similar to the popular flash memory hard disk currently on the market, the difference is that it contains an independent fingerprint processing and identification module.

U.S. Patent Publication No. 2003/005337 discloses the same data protection concept as the aforementioned U.S. Patent No. 4,582,985, U.S. Patent No. 6,213,403, and European Patent EP124079A1. It is also the same as the world patent WO 02/42887A2. Utilize USB as the communication interface. The same is an independent fingerprint identification device.

British Patent No. GB2387933 also discloses the concept and device design almost identical to WO 02/42887A2 and U.S. Patent Publication No. 2003/005337, which is an independent fingerprint recognition device (that is, fingerprint capture and recognition are both executed within the same device).

So far, the aforementioned conventional technologies have a common feature, that is, to provide an independent fingerprint identification device, which includes a fingerprint sensor, fingerprint image processing and identification IC. The advantage of this design is that it may not need to install the fingerprint application program on the terminal system, which provides the convenience of hot plugging, but it leads to another important problem, that is, it is expensive, because a fingerprint image processing and identification IC must be added. And the cost of its supporting design, usually the IC is a 32-bit Reduced Instruction Set Computer (Reduced InstructionSet Computer, RISC) or Digital Signal Processor (Digital Signal Processor, DSP), in order to quickly perform fingerprint identification. The cost of a processor usually increases with the increase of its computing speed and processing capability, and the minimum cost of the above-mentioned RISC and/or DSP is also more than US$10. Therefore, the conventional portable storage device with a fingerprint sensor has the disadvantage of high cost.

In order to solve the problem of high cost, the best way is to use the microprocessor of the terminal system to perform fingerprint image processing and identification, which can effectively reduce the cost. However, the current prior art does not clearly disclose and propose a solution to this method.

Because if the work of fingerprint image processing and identification is to be transferred from the storage device to the microprocessor of the terminal system, the inventive device must have automatic downloading of fingerprint application programs (comprising fingerprint image processing, identification and encryption and decryption functions, etc.) etc.) in the function of the terminal system, in order to achieve the hot-swappable function and the convenience that can be used in any terminal system. Such a solution is also not provided by the prior art mentioned above.

Alternatively, as disclosed in US Patent Publication No. 2003/005337, the fingerprint processing and identification software can be installed on the terminal system. Such a design prevents users from using it on different terminal systems, or requires time-consuming and laborious installation of the software. The traditional method is to provide a CD for the user to install the driver program of the memory in the storage device and the driver program of the fingerprint sensor respectively, so that the entire storage device can be used. In this case, in the first setting of each computer system, in addition to carrying the portable storage device, the user also needs to carry a CD to use the storage device in other computer systems. While it's possible to download drivers over the Internet, it's not perfect because not all computers are connected to the Internet.

Therefore, the present invention provides a storage device including a fingerprint sensing device and a protection method for storing data, which has two characteristics. One is to use the processor of the terminal system for fingerprint processing and identification, which can greatly reduce the hardware cost of the device and achieve the purpose of popularization. The second is to provide a function of fully automatic downloading of fingerprint application programs. By integrating the firmware of the USB controller, fingerprint identification and processing software, and related AP (application program), the device of the present invention does not need to be used at all. It is necessary to install any driver or identification software on the terminal system, so that it can be completely hot-swapped and used in terminal systems of various operating systems, especially computer devices, and supports various language operating systems.

At the same time, the personal data stored in the memory of the device is recorded in an encrypted manner, and the correct format and content cannot be retrieved even if the memory is removed.

Contents of the invention

In view of this, the main purpose of the present invention is to provide a memory storage device containing a fingerprint sensor. A memory storage device including a fingerprint sensor is provided at the cost of the device.

Another object of the present invention is to provide a memory storage device with a fingerprint sensor, which can hide the fingerprint sensor and memory from a terminal host, so as to simplify the control method of the terminal host.

To achieve the above object, the present invention provides a memory storage device containing a fingerprint sensor for connecting with a terminal host, the memory storage device includes: a host interface for connecting with the terminal host; a controller connected to The host interface; a fingerprint sensor connected to the controller for sensing a user's fingerprint data to be identified; and a memory module connected to the controller.

The controller partitions the memory module into a plurality of disks. This method is done by the controller, not the host. To the host, each of the above multiple disks is a real disk to the host, not a logical disk. Moreover, a disk can be divided into multiple areas. Some areas can be freely accessed by all end users, while others can only be accessed by designated users after identification. Accordingly, a data protection or confidentiality function can be realized. The controller divides the memory module into three areas including: a public block for storing multiple application programs; a confidential block for storing data to be protected; and a hidden block for storing a template Fingerprint data and encryption key. Once the memory storage device is inserted into the host slot, the controller reads the block of information into the controller's SRAM after initial power-on. Based on the block data loaded into the SRAM, the controller responds to requests from the host to configure the memory modules and treat them as logical disks. The host will read the application program in the common block of the memory module and execute the program in the host. The controller transmits the template fingerprint data to the host. The host receives an instruction from the user through the logical disk data access and the application program to notify the controller to control the fingerprint sensor to read the user's fingerprint data to be identified, and the fingerprint data to be identified sent to the host. The terminal host utilizes the application program to process the fingerprint data to be identified and the template fingerprint data, and judge whether the two are substantially identical, and enable the security block for the terminal host to access when they are substantially identical, otherwise The secure block is disabled to prevent access by the end host.

The template fingerprint data is established in the following manner. The controller communicates with the terminal host through the host interface, and enables the terminal host to load and install one of the driver programs and one of the application programs suitable for the terminal host into the terminal host. The terminal host receives an instruction from an authorized user through the driver program and the application program to notify the controller to control the fingerprint sensor to read the template fingerprint data of the authorized user, and transmit the template fingerprint data to in the end host. The terminal host utilizes the application program to process the template fingerprint data, and transmits the processed template fingerprint data to the hidden block for storage.

The feature of the present invention is to solve the two major problems of the above-mentioned prior art.

One is that the device of the present invention uses the microprocessor of the terminal system to perform fingerprint image processing and identification, replacing the independent fingerprint identification microprocessor contained in the prior art device, so as to greatly reduce the cost.

The second is that although the device of the present invention does not have an independent fingerprint recognition microprocessor, it can automatically download the fingerprint application program for use in the terminal system, and does not need to be installed in the terminal system artificially, so that the device of the present invention can be carried around, and it is convenient to use in different applications. terminal system.

In order to make the above and other objects, features, and advantages of the present invention more comprehensible, a preferred embodiment will be described in detail below with accompanying drawings.

Description of drawings

FIG. 1 is a schematic diagram showing a connection state between a memory storage device with a fingerprint sensor and a terminal host according to a first embodiment of the present invention.

FIG. 2 shows an application system flow of a memory storage device with a fingerprint sensor.

FIG. 3 shows a schematic diagram of cutting the memory module of the device of the present invention into different independent regions.

FIG. 4 is a schematic diagram showing a connection state between a memory storage device with a fingerprint sensor and a terminal host according to a second embodiment of the present invention.

FIG. 5 shows the physical appearance of the present invention applied to a thumb tray.

Figure 6 shows a physical exploded view of the present invention applied to a thumb tray.

Detailed ways

As shown in FIG. 1 , it is a functional block diagram of a memory storage device 10 including a fingerprint sensor according to an embodiment of the present invention. The device 10 basically includes a controller 102 , a memory module 104 , a fingerprint sensor 106 and a host interface 108 . In this embodiment, the host interface is a universal serial bus (USB) interface, but it can also be a PCMCIA interface, a PCI high-speed (PCI EXPRESS) interface or an IEEE1394 interface or other standard interfaces. The USB interface 108 is connected to the terminal host 100 , and the controller 102 is connected to the host interface, so that the controller 102 is connected to the terminal host 100 through the host interface 108 and connected to the memory module 104 through the memory interface 110 . The task of the controller 102 is to communicate with the terminal host 100 and manage the memory module 104 and the fingerprint sensor 106 at the same time. The memory module 104 must include at least one storage chip or memory for storing data, such as flash memory, programmable read-only memory (PROM), read-only memory (ROM) or electrically erasable programmable read-only memory (EEPROM). The memory module 104 is divided into: a public block 104A for storing at least one application program including a fingerprint application program; a security block 104B for storing a data to be protected; and a hidden block 104C, It is used to store at least one template fingerprint data, and can be used to store an encryption/decryption key, and the controller 102 can transmit the encryption/decryption key to the terminal host 100, so that the application program of the terminal host 100 is The data to be protected accessed from the security block 104B is encrypted/decrypted by the encryption/decryption key.

The fingerprint sensor 106 is especially a capacitive, temperature difference sensing or pressure fingerprint sensor mentioned in the patent application of one of the above-mentioned inventors, Zhou Zhengsan. An area-type fingerprint sensor for sensing a fingerprint of a finger resting thereon or a swipe-type fingerprint sensor for sensing a fingerprint of a finger slid across it is included. The fingerprint sensor 106 is controlled by the controller 102 to access and capture real-time fingerprint data. The terminal host 100 performs a template comparison between the captured real-time fingerprint data and the previous template fingerprint data. The so-called template fingerprint data is the first fingerprint data left by the owner of the memory storage device 10 when using the device for the first time. This fingerprint data is used as a comparison with subsequent fingerprint data. benchmark. Therefore, the fingerprint sensor 106 is connected to the controller 102 for sensing template fingerprint data of an authorized user, and can also be used for sensing a fingerprint data of a user to be identified for comparison with the template fingerprint data.

As shown in FIG. 2 , the storage data protection method of the memory storage device 10 of the present invention after being connected to the terminal host 100 is as follows. First, the controller 102 communicates with the terminal host 100 through the host interface 108, and instructs the terminal host 100 to load and install the driver program and fingerprint application program suitable for the operating system of the terminal host 100 into the terminal host 100, as shown in step 210. Show. Then, in step 220, a window is displayed on the terminal host 100 for the user to select or automatically determine to enter a fingerprint login mode (step 225) or a fingerprint authentication mode (step 230).

To enter the fingerprint login mode, the terminal host 100 notifies the controller 102 to control the fingerprint sensor 106 to read the template fingerprint data of the authorized user, and transmits the template fingerprint data to the terminal host 100 (steps 235, 245). At this time, the terminal host 100 uses the fingerprint application program to process the template fingerprint data, and transmits the processed template fingerprint data to the hidden block 104C for storage. Alternatively, the fingerprint application can use the key to encrypt the fingerprint template data (step 255), and then transmit the encrypted template fingerprint data to the hidden block 104C for storage (step 265).

To enter the fingerprint authentication mode, the controller 102 reads the template fingerprint data from the hidden block 104C (step 230), so that the template fingerprint data can be transmitted to the terminal host 100, and then decrypts the fingerprint template data with the key (step 240 ). Next, the terminal host 100 notifies the controller 102 to control the fingerprint sensor 106 to read the fingerprint data to be identified of the user, and transmit the fingerprint data to be identified to the terminal host 100 (step 250 ). Then, the terminal host 100 uses the application program to process the fingerprint data to be identified and the template fingerprint data, and judges whether the two are substantially consistent, and when they are substantially identical, unlock the security block to enable the security block 104B for the terminal host 100 to access (step 280), otherwise disable the security block 104B to prevent the terminal host 100 from accessing, or ask the user whether to continue the comparison for authentication (step 270).

In order to explain more clearly how the device of the present invention automatically downloads the fingerprint application program and executes it on the terminal system, the 3S patent of the inventor of the present invention clearly describes how the controller 102 in the device of the present invention manages the memory module 104 and the data or programs located in the memory module , the 3S patent case is listed here as reference data (attachment) for inquiry.

In short, the method used by the controller 102 in the device of the present invention to manage the memory module 104 is that the memory module can be divided into different independent blocks to store different data respectively. In the embodiment of the present invention, the The memory module 104 is divided into a public block 104A, a secret block 104B and a hidden block 104C. Please refer to FIG. 3 , which is an illustration of cutting the memory module 104 of the device of the present invention into different independent regions for applying the memory management method invented by the 3S patent.

As shown in FIG. 3 , the controller 102 in the memory storage device 10 of the present invention divides the logical space 200 of the memory module 104 into three completely independent blocks, including the public block 104A of the 0th to P logical blocks , the secret block 104B of the Qth to M-1 logical blocks, and the hidden block 104C of the M logical block. Partition information is stored in specific information blocks. The logical space 200 is mapped to the physical space 202, and the physical space 202 includes information blocks and 1st to Nth physical blocks.

When the device of the present invention is connected to the terminal system, the terminal system will regard the device as an independent disk 600, and automatically connect the independent public block 104A in the memory module 104 to display the fingerprint application on the display device of the terminal system The file option of the program is selected by the user to execute the fingerprint application program, for example, a fingerprint login screen appears.

After the user finishes executing the fingerprint application program of the public block 104A, the controller 102 will automatically switch blocks from the public block 104A to the confidential block 104B. Correspondingly, there will be a screen switch on the display device of the terminal system, that is, switch to the protected security block 104B to display the protected data in this block, so that the user can freely access it.

In short, when using the device of the present invention, the controller 102 will first switch to the public block to automatically download the fingerprint application program, and then switch to the private block after the fingerprint application program is executed. And the function of such automatic downloading and screen switching is also because the 3S patent proprietary controller 102 of the applicant of the present invention is designed with the function of memory independent cutting and management, so that the device of the present invention can be different from the prior art. Use the microprocessor of the terminal system to process and identify fingerprints, and also take into account the automatic download of various applications including fingerprint applications.

It is worth noting that any application program of the public block of the present invention is a read-only file and cannot be changed in any way.

In the present invention, there is another hidden block 104C. This block needs to communicate directly with the controller 102 through a special program. The system cannot detect this block. The size of the hidden block 104C can be adjusted according to the design. The hidden block stores private data such as template fingerprint data, encryption key, electronic certificate, etc. According to needs, the size of the hidden block can also be set to zero. At this time, facing the disk 600 mapped by the device, the terminal system only shows the confidential block 104B and the public block 104A in the disk.

In another embodiment of the present invention, as shown in FIG. 4 , in addition to the controller 102, memory module 104, fingerprint sensor 106 and host interface 108 similar to FIG. 1, the memory storage device 10 may further include a memory expansion plug. Slot 103, the memory expansion slot 103 is substantially used to expand the capacity of the memory of the device of the present invention, or by treating the device as a reader (memory reader) of an external memory 105, the external memory such as smart Type media (smart media) or memory card (memory stick) or other external memory with standard interface. The expansion slot 103 is electrically connected to the controller 102 through the memory interface 110 for electrically connecting with an external memory 105 to increase the memory capacity of the memory storage device. After the external memory 105 is inserted into the expansion slot 103, the controller 102 plans the external memory 105 into a single extended security block for storing additional data to be protected. In this way, the device can provide any data protection method for the external memory 105 .

Referring to FIG. 1 and FIG. 2 again below, the application system flow of the present invention will be described.

First, the memory storage device 10 is inserted into the slot of the host 100. After the controller 102 is initially powered on, the controller 102 communicates with the host 100 through the host interface 108, and the controller 102 reads the information block into the SRAM of the controller. Based on the information block data loaded into the SRAM, the controller will respond to the request from the host to configure the memory module 104 and treat it as a logical disk. The host 100 will read and execute the application program in the common block 104A of the memory module 104 . This action is automatically executed under the control of the controller 102, and the user does not need to manually install the driver program and application program.

Then, the host 100 directly executes the application program and receives an instruction from the authorized user through the application program (the user may be guided by a pop-up window), so as to notify the controller 102 to control the fingerprint sensor 106 to read the authorized user's template fingerprint data, and transmit the template fingerprint data to the host 100.

Next, the host 100 uses the application program to process the template fingerprint data, and transmits the processed template fingerprint data to the hidden block 104C for storage. Then, the user can store the private data in the security block 104B.

When the user carries the memory storage device 10 to another host 100 for use, the controller 102 communicates handshake with the host 100 through the host interface 108, and the controller 102 will respond to the request sent by the host 100, and the memory The module 104 performs configuration, treats it as a logical disk, and loads and installs one of the application programs to the host computer 100 for execution. Then, the application program of the host 100 determines that the template fingerprint data has been stored in the hidden block 104C of the memory module 104, or the controller 102 notifies the host 100 of the status that the template fingerprint data has been stored in the hidden block 104C. In this case, the controller 102 transmits the template fingerprint data to the host 100 . The host 100 directly executes the application program and receives an instruction from the user through the application program to notify the controller 102 to control the fingerprint sensor 106 to read the user's fingerprint data to be identified and transmit the fingerprint data to be identified to the host 100 . The host 100 uses the application program to process the fingerprint data to be identified and the template fingerprint data, and judges whether the two are substantially identical, and enables the security block 104B to be accessed by the host 100 if they are substantially identical, otherwise the security block 104B is enabled Disable to prevent the host 100 from accessing.

In order to further protect the private data in the security block 104B of the memory module 104, the encryption key in the hidden block 104C will store and encrypt/decrypt the private data in the security block 104B (processed by the application program). Under the control of the controller 102 , the encryption/decryption key can be transmitted to the host 100 . In this way, the application program of the host 100 can encrypt/decrypt the data to be protected accessed from the security block 104B through the encryption/decryption key.

In order to show the practicability of the present invention, a physical appearance diagram ( FIG. 5 ) and a physical exploded view ( FIG. 6 ) of applying the present invention to a thumb tray are provided below to prove it.

With the above-mentioned structure of the present invention, the online device seen from the computer system no longer includes a non-volatile memory and a fingerprint sensor, so there is no need to install drivers suitable for the non-volatile memory and the fingerprint sensor at the same time , so the computer system does not need to multitask to control the operation of the two devices. Instead, the connected device seen from the computer system has only one portable storage device, so the computer system only needs to control the operation of one device. As for the operation of the non-volatile memory and the fingerprint sensor in the portable storage device, it can be controlled by the controller. It should be noted that the controller referred to in the present invention can broadly include other components that control the operation of the non-volatile memory and the fingerprint sensor, such as read-only memory (ROM), random access memory (RAM), and so on.

The specific embodiments proposed in the detailed description of the preferred embodiments are only used to facilitate the description of the technical content of the present invention, rather than restricting the present invention to the above-mentioned embodiments in a narrow sense, without exceeding the spirit of the present invention and applying for a patent below The circumstances of the range, the implementation of various changes, all belong to the scope of the present invention.

Claims (17)

1, a kind of memorizer memory devices that contains fingerprint sensor in order to be connected with an end host, is characterized in that comprising:

One host interface is in order to be connected with described end host;

One controller is connected to described host interface, be connected with described end host by described host interface so that with a template fingerprint data transmission to the described end host;

One fingerprint sensor is connected to described controller, in order to sensing one user's a finger print data to be identified; And

One memory module is connected to described controller, and described memory module is split into:

One public block is in order to store a plurality of application programs;

One secret block is in order to store data to be protected; And

One hidden blocks, in order to store described template fingerprint data, wherein:

Described end host is carried out one of them described application program, and by the instruction of described application program reception from described user, notifying described controller to control the finger print data described to be identified that described fingerprint sensor reads described user, and described finger print data to be identified is sent in the described end host; And utilize described application program to handle described finger print data to be identified and described template fingerprint data, and judge whether both are identical in fact, and when coincideing in fact, make described secret block can supply described end host access, otherwise described secret block is forbidden to prevent described end host access.

2, the memorizer memory devices that contains fingerprint sensor according to claim 1 is characterized in that: described hidden blocks also stores enciphering/deciphering gold key, and transfers in the described end host by described controller.

3, the memorizer memory devices that contains fingerprint sensor according to claim 2 is characterized in that: the described application program of described end host gives encrypt/decrypt by described enciphering/deciphering gold key with the data described to be protected from the block access of described closed security zone.

4, the memorizer memory devices that contains fingerprint sensor according to claim 1 is characterized in that: described host interface is a USB (universal serial bus), a pcmcia interface, a PCI high-speed interface or an IEEE1394 interface.

5, the memorizer memory devices that contains fingerprint sensor according to claim 1 is characterized in that: described fingerprint sensor is area-type fingerprint sensor or sweep fingerprint sensor.

6, the memorizer memory devices that contains fingerprint sensor according to claim 1 is characterized in that: also comprise:

One expansion slot is electrically connected with described controller, in order to be electrically connected with an external memorizer, uses the memory span that increases described memorizer memory devices.

7, the memorizer memory devices that contains fingerprint sensor according to claim 6 is characterized in that: described external memorizer is the secret block of single expansion, in order to store extra data to be protected.

8, a kind of memorizer memory devices that contains fingerprint sensor in order to be connected with an end host, is characterized in that comprising:

One host interface is in order to be connected with described end host;

One controller is connected to described host interface, links to each other with described end host by described host interface;

One fingerprint sensor is connected to described controller, in order to sensing one authorized user's template fingerprint data; And

One memory module is connected to described controller, and described memory module is split into:

One public block is in order to store a plurality of application programs;

One secret block is in order to store data to be protected; And

One hidden blocks, in order to store template fingerprint data, wherein:

Described end host is carried out one of them described application program, and by the instruction of described application program reception from described authorized user, notifying described controller to control the described template fingerprint data that described fingerprint sensor reads described authorized user, and described template fingerprint data are sent in the described end host; And utilize described application program to handle described template fingerprint data, and the described template fingerprint data transmission that will handle stores to described hidden blocks.

9, the memorizer memory devices that contains fingerprint sensor according to claim 8 is characterized in that: described hidden blocks also stores enciphering/deciphering gold key, and transfers in the described end host by described controller.

10, the memorizer memory devices that contains fingerprint sensor according to claim 9 is characterized in that: the described application program of described end host gives encrypt/decrypt by described enciphering/deciphering gold key with the data described to be protected from the block access of described closed security zone.

11, the memorizer memory devices that contains fingerprint sensor according to claim 8 is characterized in that: described host interface is a USB (universal serial bus), a pcmcia interface, a PCI high-speed interface or an IEEE 1394 interfaces.

12, the memorizer memory devices that contains fingerprint sensor according to claim 8 is characterized in that: described fingerprint sensor is area-type fingerprint sensor or sweep fingerprint sensor.

13, the memorizer memory devices that contains fingerprint sensor according to claim 8 is characterized in that: also comprise:

One expansion slot is electrically connected with described controller, in order to be electrically connected with an external memorizer, uses the memory span that increases described memorizer memory devices.

14, the memorizer memory devices that contains fingerprint sensor according to claim 13 is characterized in that: described external memorizer is the secret block of single expansion, in order to store extra data to be protected.

15, a kind of guard method of storage data of the memorizer memory devices that contains fingerprint sensor, described memorizer memory devices comprises a host interface, in order to be connected with an end host; One controller is connected to described host interface; One fingerprint sensor is connected to described controller, in order to sensing one authorized user's template fingerprint data; And a memory module, being connected to described controller, described memory module is split into: a public block, in order to store a plurality of application programs; One secret block is in order to store data to be protected; And a hidden blocks, wherein, with described memorizer memory devices with after an end host is electrically connected, the feature of described guard method is to comprise following steps:

Described controller links to each other with described end host by described host interface, and makes described end host carry out one of them the described application program that is suitable for described end host; And

Enter a fingerprint and login a pattern or a finger print identifying pattern,

Login in the pattern in described fingerprint:

Described end host notifies described controller to control the described template fingerprint data that described fingerprint sensor reads described authorized user, and described template fingerprint data are sent in the described end host; And

Described end host utilizes described application program to handle described template fingerprint data, and the described template fingerprint data transmission that will handle stores to described hidden blocks; And

In described finger print identifying pattern:

Described controller with described template fingerprint data transmission to the described end host;

Described end host notifies described controller to control the finger print data to be identified that described fingerprint sensor reads a user, and described finger print data to be identified is sent in the described end host; And

Described end host utilizes described application program to handle described finger print data to be identified and described template fingerprint data, and judge whether both are identical in fact, and when coincideing in fact, make described secret block can supply described end host access, otherwise described secret block is forbidden to prevent described end host access.

16, the guard method of the storage data of the memorizer memory devices that contains fingerprint sensor according to claim 15; it is characterized in that: described hidden blocks is more in order to store enciphering/deciphering gold key; and described controller transfers to described enciphering/deciphering gold key in the described end host, and the described application program of described end host is by described enciphering/deciphering gold key the data described to be protected from the block access of described closed security zone to be given encrypt/decrypt.

17, the guard method of the storage data of the memorizer memory devices that contains fingerprint sensor according to claim 15; wherein; described memorizer memory devices also comprises an expansion slot; be electrically connected with described controller; in order to be electrically connected with an external memorizer; use the memory span that increases described memorizer memory devices, it is characterized in that described guard method also comprises following steps:

After described external memorizer was inserted into described expansion slot, described controller was planned to the secret block of single expansion with described external memorizer, in order to store extra data to be protected.

Images