TWI709875B - Data security maintenance method of display screen and information processing device using it - Google Patents

Abstract

A method for maintaining data security of a display screen includes the following steps: a display screen and an application processor jointly execute a key initialization program to generate an initial key; The key performs an authentication procedure, and after the authentication procedure is successful, the display screen and the application processor jointly execute a time-varying key generation procedure to generate a time-varying key; and make the display screen at least An encryption operation is performed on a sensitive data.

Description

Data safety maintenance method of display screen and information processing device using it

The present invention relates to a safety maintenance method for data of a display screen, in particular to a safety maintenance method for biometric sensor data of a display screen.

With the development of various smart terminals, the screen has become the center of human-computer interaction, and the display screen has integrated more and more functions, for example, from the most basic display and touch control to pressure sensing, fingerprint sensing, and voiceprint sensing. Measurement and iris acquisition sensing, etc. Some of these sensed information are not related to security, and some are related to personal privacy security, and even related to payment security. If the collection, transmission, processing, and storage of information are not well protected, there will be very big security risks. In other words, when the screen gradually becomes the collection or interaction center of information input and output, the screen is equivalent to a large integrated sensor, so its under-screen integrated circuit needs to provide high-level information for these input and output information. Quality, stable and safe information management and control provide basic guarantee for the safe collection and safe transmission of information.

Please refer to FIG. 1, which is a system block diagram of a conventional smart terminal. As shown in FIG. 1, the conventional smart terminal has a display module 10 and an application processor (AP) 20. The display module 10 has a panel 11 and a control circuit 12, and The application processor 20 has a data classification unit 21, a non-sensitive data processing unit 22 and a private data processing unit 23. In addition, the panel 11 has a display unit 11a, a touch unit 11b, a pressure sensor 11c, a fingerprint sensor 11d, a voiceprint sensor 11e, and an iris/portrait camera unit 11f; and the control circuit 12 has a non-sensitive data receiver Unit 12a, a private data receiving unit 12b, and a data centralized management unit 12c.

During operation, the panel 11 transmits the data sensed by the touch unit 11b and the pressure sensor 11c to the non-sensitive data receiving unit 12a of the control circuit 12; the fingerprint sensor 11d, the voiceprint sensor 11e and the iris/portrait camera unit The data sensed by 11f is transmitted to the private data receiving unit 12b of the control circuit 12; and the data is transmitted to the application processor 20 through the data centralized management unit 12c. In the application processor 20, the data classification unit 21 will send the data to the non-sensitive data processing unit 22 or the privacy data processing unit 23 according to the sensitivity (non-sensitive or privacy) of the data, so as to be used in the non-sensitive data processing unit. The non-sensitive sensing data is processed in a normal operating environment of 22, and the private sensing data is processed in a trusted operating environment of the privacy data processing unit 23.

However, since the solution in FIG. 1 is to directly transmit the non-sensitive data such as touch and pressure output by the display module 10, as well as the privacy data such as fingerprints, voiceprints, and iris, to the application processor 20 for processing, during the data transmission process There is no information security processing for private or sensitive data. That is to say, private or sensitive data is not protected during the transmission process, so that it may be stolen or tampered with before entering the trusted operating environment risk.

In order to solve the above-mentioned problems, there is an urgent need in the art for a safe maintenance method for the biometric sensor data of the display screen.

One purpose of the present invention is to disclose a data security maintenance method for a display screen, which can perform an encryption process on various biometric data collected by the human-machine interface of the display screen in a display screen to prevent the data from being transmitted. It is stolen or tampered by hackers in the process to an application processor, thereby ensuring the security of the various biometric data in an open application environment.

Another object of the present invention is to disclose an information processing device, which prevents various biometric data from being hacked during the transmission from the display to an application processor by enabling a display to have a data security maintenance mechanism Stealing or tampering to ensure the security of the various biometric data in an open application environment.

In order to achieve the aforementioned purpose, a data security maintenance method for display screens is proposed, which includes the following steps:

Enabling a display screen and an application processor to jointly execute a key initialization program to generate an initial key;

Enabling the display screen and the application processor to perform an authentication procedure based on the initial key, and after the authentication procedure is successful, causing the display screen and the application processor to jointly execute a time-varying key generation procedure to generate a time-varying key; as well as

The display screen performs an encryption operation on at least one sensitive data according to the time-varying key.

In one embodiment, the time-varying key generation program is a random key generation program.

In one embodiment, the data security maintenance method of the display screen further includes a sensitive data identification process to determine whether a sensed data is the sensitive data in the display screen.

In one embodiment, the data security maintenance method of the display screen further includes a data output program for performing a packaging operation on the sensitive data processed by the encryption operation in the display screen for output to The application processor.

In order to achieve the foregoing objective, the present invention further provides an information processing device, which utilizes the aforementioned display data security maintenance method to prevent the sensitive information contained in it from being stolen.

In order to enable your reviewer to further understand the structure, features and purpose of the present invention, drawings and detailed descriptions of preferred specific embodiments are attached as follows.

Please refer to FIG. 2, which is a block diagram of an information processing device applying the method of the present invention, wherein the information processing device may be a smart phone. As shown in FIG. 2, the information processing device includes a display module 100 and an application processor 200. The display module 100 has a panel 110 and a control circuit 120, and the application processor 200 has a non- The sensitive data processing unit 210, a security module 220 and a private data processing unit 230. In addition, the panel 110 has a display unit 110a, a touch unit 110b, a pressure sensor 110c, a fingerprint sensor 110d, a voiceprint sensor 110e, and an iris/portrait camera unit 110f; and the control circuit 120 has a non-sensitive data receiver Unit 120a, a private data receiving unit 120b, a security module 120c, and a data centralized management unit 120d.

During operation, the panel 110 transmits the data sensed by the touch unit 110b and the pressure sensor 110c to the non-sensitive data receiving unit 120a of the control circuit 120; the fingerprint sensor 110d, the voiceprint sensor 110e and the iris/portrait camera unit The data sensed by 110f is transmitted to the privacy data receiving unit 120b of the control circuit 120. The output data of the non-sensitive data receiving unit 120a is directly transmitted to the data centralized management unit 120d, and the private data receiving unit 120b is encrypted by the security module 120c and then transmitted to the data centralized management unit 120d. The data centralized management unit 120d is responsible for transmitting the data to the application processor 200. The application processor 200 transmits the non-sensitive data to the non-sensitive data processing unit 210 so that the non-sensitive data is processed in a normal operating environment; and transmits the private data to the security module 220 for a decryption operation, and The decrypted data is sent to the private data processing unit 230 so that the private data can be processed in a trusted operating environment.

The method of the present invention establishes a set of encryption and decryption rules between the display screen 100 and the application processor 200, and performs an encryption operation on the sensitive data sensed by the display screen 100 according to the set of encryption and decryption rules. Prevent interested persons from stealing the sensitive data, thereby ensuring the information security of the information processing device.

Please refer to FIG. 3, which is a flowchart of an embodiment of a method for maintaining data security of a display screen of the present invention. As shown in Figure 3, the data security maintenance method of the display screen mainly includes: making a display screen and an application processor jointly execute a key initialization program to generate an initial key (step a); The application processor performs an authentication procedure according to the initial key, and after the authentication procedure is successful, causes the display screen and the application processor to jointly execute a time-varying key generation procedure to generate a time-varying key (step b); The display screen performs an encryption operation on at least one type of sensitive data according to the time-varying key (step c); and executes a data output process in the display screen to perform a packaging operation on the sensitive data processed by the encryption operation For output to the application processor (step d).

In addition, the data security maintenance method of the display screen may further include: executing a sensitive data identification process in the display screen to determine whether a sensed data is the sensitive data.

In a possible embodiment, the key initialization procedure may be to set a common key according to a brand type, production batch, and platform type, and then to fill in a hash value based on the common key and a product ID serial number Perform an encryption operation, where the padded hash value is generated after the ID serial number is processed by a padding function and a hash function, and the encryption operation can include any symmetric password Algorithm.

In addition, the shared key can be written into a flash memory (Flash) of the integrated circuit under the display screen.

In addition, in a possible embodiment, the time-varying key generation process may be a random key generation process to generate a random key for the security module 120c and the security module 220 to complete the secure exchange of data.

Based on the above-mentioned principle, the present invention can apply the method flow of FIG. 3 to an information processing device, thereby providing an information processing device that can strictly ensure the security of sensitive information.

With the design disclosed above, the present invention can provide the following advantages:

1. The data security maintenance method of the display screen of the present invention can perform an encryption processing on various biometric data collected by the human-machine interface of the display screen in a display screen to prevent the data from being transmitted to an application processor During the process of being stolen or tampered with by hackers, the security of the various biometric data in an open application environment is ensured.

2. The information processing device of the present invention can prevent various biometric data from being stolen or tampered by hackers in the process of transmitting from the display to an application processor by enabling a display to have a data security maintenance mechanism, thereby ensuring The security of the various biometric data in an open application environment.

The disclosure in this case is a preferred embodiment, and any partial changes or modifications that are derived from the technical ideas of the case and can be easily inferred by those who are familiar with the art do not deviate from the scope of the patent right of the case.

In summary, regardless of the purpose, means, and effects of this case, it is showing its technical characteristics that are very different from conventional knowledge, and its first invention is suitable for practical use, and it is also in line with the patent requirements of the invention. I urge your examiner to observe and pray. Granting patents as soon as possible will benefit the society and feel the virtues.

10, 100‧‧‧Display module 11.110‧‧‧Panel 11a, 110a‧‧‧display unit 11b, 110b‧‧‧touch unit 11c、110c‧‧‧Pressure sensor 11d、110d‧‧‧Fingerprint sensor 11e、110e‧‧‧Voiceprint sensor 11f、110f‧‧‧iris/portrait camera unit 12.120‧‧‧Control circuit 12a, 120a‧‧‧Insensitive data receiving unit 12b, 120b‧‧‧Privacy data receiving unit 12c, 120d‧‧‧Data centralized management unit 20, 200‧‧‧application processor 21‧‧‧Data Classification Unit 22, 210‧‧‧Non-sensitive data processing unit 23, 230‧‧‧Privacy data processing unit 120c、220‧‧‧Security module Step a‧‧‧A display screen and an application processor jointly execute a key initialization procedure to generate an initial key Step b‧‧‧ Make the display screen and the application processor perform an authentication procedure based on the initial key, and after the authentication procedure is successful, make the display screen and the application processor execute a time-varying key generation procedure together to generate Temporary Key Step c‧‧‧The display screen performs an encryption operation on at least one sensitive data according to the time-varying key Step d‧‧‧Execute a data output program in the display to perform a packaging operation on the sensitive data processed by the encryption operation for output to the application processor

Figure 1 is a system block diagram of a conventional smart terminal. Fig. 2 is a block diagram of an information processing device applying the method of the present invention. 3 is a flowchart of an embodiment of a method for maintaining data security of a display screen of the present invention.

Step a‧‧‧A display screen and an application processor jointly execute a key initialization procedure to generate an initial key

Step b‧‧‧ Make the display screen and the application processor perform an authentication procedure based on the initial key, and after the authentication procedure is successful, make the display screen and the application processor jointly execute a time-varying key generation procedure to generate Temporary Key

Step c‧‧‧The display screen performs an encryption operation on at least one sensitive data according to the time-varying key

Step d‧‧‧Execute a data output program in the display screen to perform a packaging operation on the sensitive data processed by the encryption operation for output to the application processor

Claims (5)

A method for maintaining data security of a display screen includes the following steps: a display screen and an application processor jointly execute a key initialization program to generate an initial key; The key performs an authentication procedure, and after the authentication procedure is successful, the display screen and the application processor jointly execute a time-varying key generation procedure to generate a time-varying key; and make the display screen at least An encryption operation for sensitive data; wherein the key initialization program has the following steps: set a common key according to a product type, a product production batch, and/or an operating platform type; and a product ID serial number Is converted into a stuffed hash value, and an encryption operation is performed on the stuffed hash value and the shared key; wherein, the stuffed hash value is the product ID serial number through a padding function and a hash The hash function is processed and generated, and the encryption operation includes any symmetric cryptographic algorithm. For example, in the data security maintenance method of the display screen described in item 1 of the scope of patent application, the time-varying key generation program is a random key generation program. For example, the data security maintenance method of the display screen described in the scope of the patent application further includes a sensitive data identification program to determine whether a sensed data is the sensitive data in the display screen. For example, the data security maintenance method of the display screen described in item 1 of the scope of patent application further includes a data output program for performing a packaging operation on the sensitive data processed by the encryption operation in the display screen. For output to the application processor. An information processing device uses the data security maintenance method of the display screen as described in any one of items 1-4 in the scope of patent application to prevent the sensitive information contained in it from being stolen.

Images