WO2018035930A1 - System unlocking method and device - Google Patents

Abstract

A system unlocking method and device. The method comprises: a terminal device receives authentication information in a locked state of a system (101); the terminal device authenticates the authentication information by using preset system unlocking authentication information, again receives the authentication information if the authentication fails, and authenticates the again-received authentication information by using the preset system unlocking authentication information, until the authentication passes (102); and the terminal device counts the number of times of authentication failures, the terminal device enters a first system if the number of times of authentication failures is less than or equal to a first threshold, and the terminal device enters a second system if the number of times of authentication failures is greater than a second threshold, the second system not having a payment application in comparison with the first system, and the second threshold being greater than or equal to the first threshold (103). By means of the device and the method, the safety of personal property can be protected in a case in which an owner of a terminal device is forced to unlock the terminal device of the owner.

Description

System unlocking method and device

The present application claims priority to Chinese Patent Application No. 201610718935.2, entitled "System Unlocking Method and Apparatus", filed on August 24, 2016, the entire contents of .

Technical field

The present invention relates to the field of communications technologies, and in particular, to a method and device for unlocking a system.

Background technique

With the development of communication technologies, various terminal devices have become more and more popular, such as mobile phones and tablet computers, which have become an indispensable part of daily life. At the same time, more and more people like to use WeChat payment, mobile banking, Alipay and other applications on the communication terminal equipment for payment.

In order to protect the security and payment security of the information in use, many terminal devices are equipped with relevant lock screens and unlocking programs. The lock screen and the unlocking program are run on the terminal screen, and the related unlocking interface is displayed. The authentication information input by the user is passed. After the certification, the system can be successfully entered.

In the prior art, usually, the communication terminal device can only set one unlock interface and corresponding password. When the owner of the terminal device is restricted and threatened by personal safety, the terminal device may be forced to speak the password or perform the terminal device. Unlock. When the victim is forced to unlock the terminal device, the infringer can operate the terminal device of the victim to log in to the payment application to perform the transfer and other operations. At present, the unlocking methods adopted by the terminal device include: digital password, gesture pattern, sliding unlocking, etc., and these unlocking methods cannot effectively prevent the unscrupulous person from performing the transfer and the like when the owner of the terminal device is forced to unlock the terminal device.

Summary of the invention

The embodiment of the invention provides a method and a device for unlocking a system, so as to protect the security of the personal property of the terminal device owner when it is forced to unlock the terminal device.

An embodiment of the present invention provides a method for unlocking a system, including:

The terminal device receives the authentication information in a system locked state;

The terminal device uses the preset system unlocking authentication information to authenticate the authentication information. If the authentication fails, the authentication information is re-received, and the re-received authentication information is authenticated by using the preset system unlocking authentication information. Until the certification is passed;

The terminal device counts the number of authentication failures, and enters the first system if the number of authentication failures is less than the first threshold, and enters the second system if the number of authentication failures is greater than the second threshold; The first system lacks a payment class application, and the second threshold is greater than or equal to the first threshold.

In an optional implementation manner, before the terminal device receives the authentication information in the system locked state, the method further includes:

The terminal device displays an authentication interface after receiving the unlocking instruction.

In an optional implementation, if the number of authentication failures is greater than the second threshold, before the second system is entered, the method further includes:

The terminal device freezes and hides the payment application.

In an optional implementation manner, after the authentication fails, the method further includes:

Output a prompt message to prompt whether to replace the authentication method;

If the replacement command is received, the currently used authentication mode is replaced with the authentication mode specified by the replacement instruction, and then the re-receiving authentication information is executed.

In an optional implementation manner, after the terminal device enters the second system, the method further includes:

The terminal device sends the location information and the alarm information of the terminal device to the preset target terminal.

Correspondingly, the embodiment of the invention further discloses a terminal device, including:

The receiving unit is configured to receive the authentication information when the terminal device is in the system locked state; and re-receive the authentication information after the authentication fails;

An authentication unit configured to authenticate the authentication information by using preset system unlock authentication information;

The statistical unit is set to count the number of failed authentication attempts.

An execution unit, configured to enter the first system if the number of authentication failures is less than the first threshold, and enter the second system if the number of authentication failures is greater than the second threshold; The system lacks a payment application, and the second threshold is greater than or equal to the first threshold;

In an optional implementation, the receiving unit is further configured to receive an unlocking instruction; the device further includes:

And a display unit configured to display an authentication interface after the receiving unit receives the unlocking instruction.

In an optional implementation manner, the device further includes:

The application control unit is configured to freeze and hide the payment application in the terminal device before entering the second system if the number of authentication failures is greater than the second threshold.

In an optional implementation manner, the device further includes:

The output unit is configured to output a prompt message after the authentication fails, and prompt whether to replace the authentication mode;

The receiving unit is further configured to receive a replacement instruction;

The authentication control unit is configured to: if the receiving unit receives the replacement instruction, replace the currently used authentication mode with the authentication mode specified by the replacement instruction;

The receiving unit is further configured to re-receive the authentication information after the currently used authentication mode is replaced with the authentication mode specified by the replacement instruction.

In an optional implementation manner, the device further includes:

a positioning unit configured to locate location information of the terminal device.

The sending unit is configured to send the location information and the alarm information of the terminal device to the preset target terminal after the terminal device enters the second system.

It can be seen that the method of the embodiment provides an unlocking method that can freeze and hide the payment application. In the case where the terminal device owner is forced to unlock his terminal device, the payment application can be frozen and hidden by a simple operation to protect the security of his personal property.

DRAWINGS

In order to more clearly illustrate the technical method in the embodiments of the present invention, the drawings to be used in the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those skilled in the art can also obtain other drawings based on these drawings without any creative work.

1 is a schematic flowchart of a system unlocking method according to an embodiment of the present invention;

2 is a schematic structural diagram of a terminal device according to an embodiment of the present invention;

3 is a schematic structural diagram of a terminal device according to an embodiment of the present invention;

4 is a schematic structural diagram of a terminal device according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a terminal device according to an embodiment of the present invention;

6 is a schematic structural diagram of a terminal device according to an embodiment of the present invention;

FIG. 7 is a schematic structural diagram of a terminal device according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a terminal device according to an embodiment of the present invention.

detailed description

The present invention will be further described in detail with reference to the accompanying drawings, in which FIG. . All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The embodiment of the invention provides a system unlocking method, as shown in FIG. 1 , including:

101: The terminal device receives the authentication information in a system locked state;

The terminal device may be, for example, a mobile phone, a tablet computer, a notebook computer, a palmtop computer, or the like.

The system lock status is a state in which the terminal device is not unlocked, in which the terminal device is usually in a standby state. The authentication information is verification information required to release the locked state of the terminal device. The authentication information may be one or more of a string, a fingerprint, a voice, and the like, and corresponds to an authentication method in which the terminal device is unlocked. The authentication method may be, for example, sliding unlocking, fingerprint unlocking, voice unlocking, and the like. For example, if the authentication mode of the terminal device is fingerprint unlocking, the corresponding authentication information is a fingerprint. The authentication mode and the corresponding authentication information are not limited by the embodiment of the present invention.

The terminal device receives the authentication information in the system locked state. The authentication device may have no authentication interface, that is, the mobile phone is in a black screen state. The user can input authentication information for authentication when the terminal device is in a black screen state, for example, unlocking by fingerprint in a black screen state.

102: The terminal device authenticates the authentication information by using preset system unlocking authentication information, and if the authentication fails, re-receiving the authentication information, and authenticating the re-received authentication information by using the preset system unlocking authentication information, until Certification passed.

The preset system unlock authentication information is authentication information stored locally at the terminal device, and is used for authenticating the authentication information input by the user. The authentication information may be one or more of a string, a fingerprint, a voice, and the like, and corresponds to an authentication method in which the terminal device is unlocked. The embodiments of the present invention do not focus on how to perform authentication, and therefore will not be described in detail herein. If the authentication fails, the user needs to re-enter the authentication information, and the terminal device authenticates the re-accepted authentication information. Once the authentication fails, the user needs to re-enter the user once the authentication is passed. If the authentication information is not input before the authentication succeeds, the terminal device waits for a certain period of time and then enters the standby state.

103: The number of times the terminal device fails to be authenticated, and enters the first system if the number of the authentication failures is less than the first threshold, and enters the second system if the number of the authentication failures is greater than the second threshold; the second system is compared to the first system. In the absence of a payment application, the second threshold is greater than or equal to the first threshold.

The first system is a system after normal startup, and the payment application in the second system is in a frozen and hidden state, that is, the payment application in the terminal device system is frozen and cannot be found in the system.

The payment application refers to an application used on a communication terminal device such as Alipay, WeChat payment, and mobile banking.

The first threshold may be, for example, a positive integer of 2, 3, 4, 5, 6, etc., and the second threshold may be, for example, a positive integer such as 2, 3, 4, 5, 6, or 7. The second threshold is greater than or equal to the first threshold. If the second threshold is equal to the first threshold, for example, the first threshold and the second threshold are both 3. If the number of authentication failures is less than 3, the system enters the first system, and if the number of authentication failures is greater than 3, Entering the second system, if the number of authentication failures is equal to 3, it is not limited, and may enter the first system or the second system; if the second threshold is greater than the first threshold, for example, the first threshold is 3, and the second threshold is 4. If the number of authentication failures is less than 3, the system enters the first system. If the number of authentication failures is greater than 4, the system enters the second system. If the number of authentication failures is 3 or 4, the limitation is not limited, and the first system or the second system may be entered.

For example, when both the first threshold and the second threshold are 3, if the fourth authentication is successful, the second system is entered, in which all applications except the payment class can be seen and operated; if the second If the secondary authentication is successful, the system enters the first system, that is, the normal startup system.

It can be seen that the embodiment provides an unlocking method that can freeze and hide the payment application. In the case where the terminal device owner is forced to unlock his terminal device, the payment application can be frozen and hidden by a simple operation to protect the security of his personal property.

In order to further facilitate the user to unlock the terminal device and support multiple authentication modes, the embodiment of the present invention provides another method for receiving authentication information on the basis of the previous embodiment, which is specifically as follows: the terminal device receives the authentication in the system locked state. Before the information, the above methods also include:

After the terminal device receives the unlocking command, the authentication interface is displayed.

The method for receiving authentication information provided by the embodiment of the present invention is to facilitate the user to unlock the terminal device and support multiple authentication modes. The terminal device in the embodiment of the present invention displays the authentication interface after receiving the unlocking instruction. The authentication interface may be in various forms, such as fingerprint unlocking, pattern unlocking, voice unlocking, and the like.

For example, after the user displays the authentication interface on the display screen of the terminal device, the user inputs the corresponding authentication information according to the authentication interface, and if the authentication fails, the authentication information is re-entered. For example, after the user lights up the display screen of the terminal device, the terminal device can display the unlocking interface through the corresponding unlocking operation, and then the user can input the corresponding authentication information for authentication. If the authentication succeeds, enter the corresponding system; if the authentication is unsuccessful, re-enter the authentication information for authentication.

The method for receiving authentication information provided by the embodiment of the present invention is simpler and supports multiple authentication methods.

The method of the present invention provides a method for configuring a security system, which is as follows: Before the number of the authentication failures is greater than the second threshold, the method further includes:

The above terminal device freezes and hides the above payment type application.

The second system is the configured security system. The payment application in the second system is in a frozen and hidden state, and the payment application cannot be found in the second system. Therefore, even if the terminal device is successfully unlocked, the transfer cannot be performed. operating.

For example, if the number of authentication failures of the user is greater than the second threshold, the terminal device first freezes and hides the payment application, and then enters the second system after the authentication succeeds. In the actual authentication process, the configuration process of the second system, that is, the freezing and hiding process of the payment application in the terminal device is very fast, and the user does not notice the process. Taking the mobile phone as an example, after the authentication is successful, if the number of authentication failures of the mobile phone statistics is greater than the second threshold, the payment application such as Alipay, mobile banking, WeChat payment, etc. in the mobile phone is frozen and cannot be found in the mobile phone.

The method for configuring the security system provided by the embodiment of the present invention is very concealed and can effectively prevent operations such as illegal transfer after the user is forced to unlock the terminal device.

The method of the present invention further provides a method for replacing the authentication mode, as follows: After the authentication fails, the method further includes:

Output a prompt message to prompt whether to replace the authentication method;

If a replacement command is received, the currently used authentication method is replaced with the authentication method specified by the replacement instruction, and then the above re-accept authentication information is executed.

There are various authentication methods, such as fingerprint unlocking, pattern unlocking, and voice unlocking. A plurality of authentication modes can be set in the terminal device. On the other hand, if the user forgets the current authentication information of the terminal device, the user can also change another authentication mode. On the other hand, when the user is forced to unlock the terminal device, the user can select an authentication method that is easier to authenticate. . For the embodiment of the present invention, the authentication mode is crucial. If the terminal device has only one authentication mode and the authentication mode is difficult to deliberately fail authentication, the method of the embodiment of the present invention loses its meaning. For example, if the terminal device only has the authentication mode of fingerprint unlocking and the fingerprint authentication is very accurate, it is difficult for the user to make the number of authentication failures reach the second threshold when forced to unlock the terminal device.

For example, three authentication modes, such as pattern unlocking, fingerprint unlocking, and voice unlocking, can be set in the terminal device. The default authentication mode is fingerprint unlocking. If the user is in a safe situation, he can choose to use the fingerprint to unlock or select another authentication method after the authentication fails; if the user is forced to unlock, he can deliberately fail the authentication and then select the pattern that is easy to deliberately failed to be unlocked. the way.

In the embodiment of the present invention, the number of authentication failures is cumulative, and the number of authentication failures is the sum of the number of authentication failures in different authentication modes. This makes it easier to reach the second threshold described above, causing the terminal device to enter the second system.

The method for replacing the authentication method provided by the embodiment of the present invention not only enriches the authentication mode, but also improves the practical value of the method of the embodiment of the present invention.

An embodiment of the present invention provides an alarm method, which is as follows: After the terminal device enters the second system, the method further includes:

The terminal device sends the location information and the alarm information of the terminal device to the preset target terminal.

The preset target terminal may be a terminal device of a mechanism such as a police station preset by the user, or may be another terminal device. The alarm message is used to indicate that the user of the terminal device is in danger and needs help. The alarm information may include the user's identity information, physical information, appearance information, and the like. The location information accurately locates the location of the terminal device. The terminal device periodically sends location information to the preset target terminal device, and continuously notifies the location information of the preset target terminal device.

The terminal device sends the location information and the alarm information of the terminal device to the preset target terminal in a concealed manner, and the terminal device does not display the corresponding information.

The alarm method provided by the embodiment of the invention can covertly transmit the location information and the alarm information of the terminal device to the preset target terminal, thereby helping the victim to be rescued in time.

The embodiment of the invention further provides a terminal device, as shown in FIG. 2, comprising:

The receiving unit 201 is configured to receive the authentication information when the terminal device is in the system locked state, and re-receive the authentication information after the authentication fails;

The authentication unit 202 is configured to authenticate the foregoing authentication information by using preset system unlock authentication information;

The statistics unit 203 is configured to count the number of failed authentication attempts;

The executing unit 204 is configured to enter the first system if the number of authentication failures is less than the first threshold, and enter the second system if the number of authentication failures is greater than the second threshold; the second system lacks a payment class compared to the first system. The second threshold is greater than or equal to the first threshold.

The terminal device may be, for example, a mobile phone, a tablet computer, a notebook computer, a palmtop computer, a MID, or the like.

The system lock status is a state in which the terminal device is not unlocked, in which the terminal device is usually in a standby state. The authentication information is verification information required to release the locked state of the terminal device. The authentication information may be one or more of a string, a fingerprint, a voice, and the like, and corresponds to an authentication method in which the terminal device is unlocked. The authentication method may be, for example, sliding unlocking, fingerprint unlocking, voice unlocking, and the like. For example, if the authentication mode of the terminal device is fingerprint unlocking, the corresponding authentication information is a fingerprint. The authentication mode and the corresponding authentication information are not limited by the embodiment of the present invention. The receiving unit 201 is arranged to receive authentication information, which may be in various forms.

The terminal device receives the authentication information in the system locked state. The authentication device may have no authentication interface, that is, the mobile phone is in a black screen state. The user can input authentication information for authentication when the terminal device is in a black screen state, for example, unlocking by fingerprint in a black screen state.

The preset system unlock authentication information is authentication information stored locally at the terminal device, and is used for authentication with the authentication information input by the user. The authentication information may be one or more of a string, a fingerprint, a voice, and the like, and corresponds to an authentication method in which the terminal device is unlocked. The authentication unit 202 performs authentication using the preset system unlock authentication information and the above-described authentication information. The embodiments of the present invention do not focus on how to perform authentication, and therefore will not be described in detail herein. If the authentication fails, the user needs to re-enter the authentication information, and the terminal device authenticates the re-accepted authentication information. Once the authentication fails, the user needs to re-enter the user once the authentication is passed. If the authentication information is not input before the authentication succeeds, the terminal device waits for a certain period of time and then enters the standby state.

The first system is a system after normal startup, and the payment application in the second system is in a frozen and hidden state, that is, the payment application in the terminal device system is frozen and cannot be found in the system.

The payment application refers to an application used on a communication terminal such as Alipay, WeChat payment, and mobile banking.

The first threshold may be, for example, a positive integer of 2, 3, 4, 5, 6, etc., and the second threshold may be, for example, a positive integer such as 2, 3, 4, 5, 6, or 7. The second threshold is greater than or equal to the first threshold. If the second threshold is equal to the first threshold, for example, the first threshold and the second threshold are both 3. If the number of authentication failures is less than 3, the system enters the first system, and if the number of authentication failures is greater than 3, Entering the second system, if the number of authentication failures is equal to 3, it is not limited, and may enter the first system or the second system; if the second threshold is greater than the first threshold, for example, the first threshold is 3, and the second threshold is 4. If the number of authentication failures is less than 3, the system enters the first system. If the number of authentication failures is greater than 4, the system enters the second system. If the number of authentication failures is 3 or 4, the limitation is not limited, and the system may enter the first system or the second system.

For example, when both the first threshold and the second threshold are 3, if the fourth authentication is successful, the second system is entered, in which all applications except the payment class can be seen and operated; if the second If the secondary authentication is successful, the system enters the first system, that is, the normal startup system.

It can be seen that the method of the embodiment provides an unlocking method that can freeze and hide the payment application. In the case where the mobile terminal owner is forced to unlock his mobile terminal, the payment application can be frozen and hidden by a simple operation to protect the security of his personal property.

The embodiment of the present invention further provides another method for receiving the authentication information, which is specifically as follows. Further, as shown in FIG. 3, the device further includes:

The receiving unit is further configured to receive an unlocking instruction;

The display unit 301 is configured to display an authentication interface after the receiving unit receives the unlocking instruction.

The method for receiving authentication information provided by the embodiment of the present invention is to facilitate the user to unlock the terminal device and support multiple authentication modes. The terminal device in the embodiment of the present invention displays the authentication interface after receiving the instruction, and the authentication interface may be in various forms, such as fingerprint unlocking, pattern unlocking, voice unlocking, and the like.

For example, after the user displays the authentication interface on the display screen of the terminal device, the user inputs the corresponding authentication information according to the authentication interface, and if the authentication fails, the authentication information is re-entered. For example, after the user lights up the display screen of the terminal device, the terminal device can display the unlocking interface through the corresponding unlocking operation, and then the user can input the corresponding authentication information for authentication. If the authentication succeeds, enter the corresponding system; if the authentication is unsuccessful, re-enter the authentication information for authentication.

The method for receiving authentication information provided by the embodiment of the present invention is simpler and supports multiple authentication methods.

The embodiment of the present invention further provides a method for configuring a security system, which is specifically as follows. Further, as shown in FIG. 4, the terminal device further includes:

The freeze and hide unit unit 401 is configured to freeze and hide the payment application in the terminal device before entering the second system if the number of authentication failures is greater than the second threshold.

The second system is a configured security system. The payment application in the second system is in a frozen and hidden state, and the payment application cannot be found in the second system. Therefore, even if the terminal device is successfully unlocked, the transfer cannot be performed. .

For example, if the number of authentication failures of the user is greater than the second threshold, the terminal device first freezes and hides the payment application, and then enters the second system after the authentication succeeds. In the actual authentication process, the configuration process of the second system, that is, the freezing and hiding process of the payment application in the terminal device is very fast, and the user does not notice the process. Taking the mobile phone as an example, after the authentication is successful, if the number of authentication failures of the mobile phone statistics is greater than the second threshold, the payment application such as Alipay, mobile banking, and WeChat payment in the mobile phone cannot be found in the mobile phone.

The method for configuring the security system provided by the embodiment of the present invention is very concealed and can effectively prevent operations such as illegal transfer after the user is forced to unlock the terminal device.

The embodiment of the present invention further provides a method for replacing the authentication mode, which is specifically as follows. Further, as shown in FIG. 5, the device further includes:

The output unit 501 is configured to output a prompt message after the authentication fails, and prompt whether to replace the authentication mode;

The receiving unit 201 is further configured to receive a replacement instruction;

The replacing unit 502 is configured to replace the currently used authentication method with the authentication method specified by the replacement instruction, if the replacement command is received;

The receiving unit 201 is further configured to re-receive the authentication information after the current authentication mode is replaced with the authentication mode specified by the replacement command.

There are various authentication methods, such as fingerprint unlocking, pattern unlocking, and voice unlocking. A plurality of authentication modes can be set in the terminal device. On the other hand, if the user forgets the current authentication information of the terminal device, the user can also change another authentication mode. On the other hand, when the user is forced to unlock the terminal device, the user can select an authentication method that is easier to authenticate. . For the embodiment of the present invention, the authentication mode is crucial. If the terminal device has only one authentication mode and the authentication mode is difficult to deliberately fail authentication, the method of the embodiment of the present invention loses its meaning. For example, if the terminal device only has the authentication mode of fingerprint unlocking and the fingerprint authentication is very accurate, it is difficult for the user to make the number of authentication failures reach the second threshold when forced to unlock the terminal device.

For example, three authentication modes, such as pattern unlocking, fingerprint unlocking, and voice unlocking, can be set in the terminal device. The default authentication mode is fingerprint unlocking. If the user is in a safe situation, he can choose to use the fingerprint to unlock or select another authentication method after the authentication fails; if the user is forced to unlock, he can deliberately fail to select the pattern unlocking method that is easy to deliberately fail to authenticate. .

In the embodiment of the present invention, the number of authentication failures is cumulative, and the number of authentication failures is the sum of the number of authentication failures in different authentication modes. This makes it easier to reach the second threshold described above, causing the terminal device to enter the second system.

The method for replacing the authentication method provided by the embodiment of the present invention not only enriches the authentication mode, but also improves the practical value of the method of the embodiment of the present invention.

The embodiment of the present invention provides an alarm method based on the foregoing embodiment, and is specifically as follows. Further, as shown in FIG. 6, the device further includes:

The sending unit 601 is configured to send the location information and the alarm information of the terminal device to the preset target terminal after the terminal device enters the second system.

The positioning unit 602 is configured to locate the location information of the terminal device.

The preset target terminal may be a terminal device of a police station preset by the user or may be another terminal. The alarm information is used to indicate that the user of the terminal device is in danger and needs help, and may include the user's identity information, physical information, and appearance information. The location information accurately locates the location of the terminal device. The terminal device periodically sends the location information to the preset target terminal, and continuously notifies the location information of the preset target terminal terminal device.

The terminal device sends the location information and the alarm information of the terminal device to the preset target terminal in a concealed manner, and the terminal device does not display the corresponding information.

The alarm method provided by the embodiment of the invention can covertly transmit the location information and the alarm information of the terminal device to the preset target terminal, thereby helping the victim to get out of danger in time.

The embodiment of the present invention further provides a terminal device, as shown in FIG. 7, comprising: a processor 701 and a memory 702, an input device 703, and an output device 704; wherein the memory 702 can be used to provide the processor 701 for performing data processing. The cache and the local cache of the preset system unlock authentication information may also be used to provide a storage space for the processor 701 to execute the data processing call and the obtained result data; wherein the input device 703 is configured to be in the locked state of the terminal device Receiving the authentication information, and also for re-receiving the authentication information and receiving the change instruction after the authentication fails; the output device 704 is configured to output the prompt message and the authentication interface, and is further configured to send the location information and the alarm information of the terminal device to the preset target terminal. .

The processor 701 is configured to acquire authentication information when the terminal device is in a locked state, and use the preset system unlock authentication information to authenticate the authentication information, and if the authentication fails, re-receive the authentication information, and use the foregoing pre- The system unlocking authentication information is used to authenticate the re-accepted authentication information until the authentication is passed; if the number of authentication failures is less than the first threshold, the system enters the first system, and if the number of authentication failures is greater than the second threshold, the system enters The second system; the second system lacks a payment application compared to the first system, and the second threshold is greater than or equal to the first threshold.

The terminal device may be, for example, a mobile phone, a tablet computer, a notebook computer, a palmtop computer, a MID, or the like.

The system lock status is a state in which the terminal device is not unlocked, in which the terminal device is usually in a standby state. The authentication information is verification information required to release the locked state of the terminal device. The authentication information may be one or more of a string, a fingerprint, a voice, and the like, and corresponds to an authentication method in which the terminal device is unlocked. The authentication method may be, for example, sliding unlocking, fingerprint unlocking, voice unlocking, and the like. For example, if the authentication mode of the terminal device is fingerprint unlocking, the corresponding authentication information is a fingerprint. The authentication mode and the corresponding authentication information are not limited by the embodiment of the present invention.

The terminal device receives the authentication information in the system locked state. The authentication device may have no authentication interface, that is, the mobile phone is in a black screen state. The user can input authentication information for authentication when the terminal device is in a black screen state, for example, unlocking by fingerprint in a black screen state.

The preset system unlock authentication information is authentication information stored locally at the terminal device, and is used for authentication with the authentication information input by the user. The authentication information may be one or more of a string, a fingerprint, a voice, and the like, and corresponds to an authentication method in which the terminal device is unlocked. The embodiments of the present invention do not focus on how to perform authentication, and therefore will not be described in detail herein. If the authentication fails, the user needs to re-enter the authentication information, and the terminal device authenticates the re-accepted authentication information. Once the authentication fails, the user needs to re-enter the user once the authentication is passed. If the authentication information is not input before the authentication succeeds, the terminal device waits for a certain period of time and then enters the standby state.

The first system is a system after normal startup, and the payment application in the second system is in a frozen and hidden state, that is, the payment application in the terminal device system is frozen and cannot be seen in the system.

The payment application refers to an application used on a communication terminal such as Alipay, WeChat payment, and mobile banking.

The first threshold may be, for example, a positive integer of 2, 3, 4, 5, 6, etc., and the second threshold may be, for example, a positive integer such as 2, 3, 4, 5, 6, or 7. The second threshold is greater than or equal to the first threshold. If the second threshold is equal to the first threshold, for example, the first threshold and the second threshold are both 3. If the number of authentication failures is less than 3, the system enters the first system, and if the number of authentication failures is greater than 3, Entering the second system, if the number of authentication failures is equal to 3, it is not limited, and may enter the first system or the second system; if the second threshold is greater than the first threshold, for example, the first threshold is 3, and the second threshold is 4. If the number of authentication failures is less than 3, the system enters the first system. If the number of authentication failures is greater than 4, the system enters the second system. If the number of authentication failures is 3 or 4, the limitation is not limited, and the system may enter the first system or the second system.

For example, when both the first threshold and the second threshold are 3, if the fourth authentication is successful, the second system is entered, in which all applications except the payment class can be seen and operated; if the second If the secondary authentication is successful, the system enters the first system, that is, the normal startup system.

It can be seen that the method of the embodiment provides an unlocking method that can freeze and hide the payment application. In the case where the terminal device owner is forced to unlock his terminal device, the payment application can be frozen and hidden by a simple operation to protect the security of his personal property.

The embodiment of the present invention further provides an implementation method for receiving authentication information, which is specifically as follows: The processor 701 is further configured to display an authentication interface after the receiving unit receives the unlocking instruction.

The method for receiving authentication information provided by the embodiment of the present invention is to facilitate the user to unlock the terminal device and support multiple authentication modes. The terminal device in the embodiment of the present invention displays the authentication interface after receiving the instruction, and the authentication interface may be in various forms, such as fingerprint unlocking, pattern unlocking, voice unlocking, and the like.

For example, after the user displays the authentication interface on the display screen of the terminal device, the user inputs the corresponding authentication information according to the authentication interface, and if the authentication fails, the authentication information is re-entered. For example, after the user lights up the display screen of the terminal device, the terminal device can display the unlocking interface through the corresponding unlocking operation, and then the user can input the corresponding authentication information for authentication. If the authentication succeeds, enter the corresponding system; if the authentication is unsuccessful, re-enter the authentication information for authentication.

The method for receiving authentication information provided by the embodiment of the present invention is simpler and supports multiple authentication methods.

The embodiment of the present invention further provides a method for configuring a security system, where the processor 701 is further configured to freeze and hide the terminal device before entering the second system if the number of authentication failures is greater than the second threshold. Payment application.

The second system described above is the configured security system, and the payment application in the second system is in a frozen and hidden state. The payment type application cannot be found in the second system, so even if the terminal device is successfully unlocked, operations such as transfer cannot be performed.

For example, if the number of authentication failures of the user is greater than the second threshold, the terminal device first freezes and hides the payment application, and then enters the second system after the authentication succeeds. In the actual authentication process, the configuration process of the second system, that is, the freezing and hiding process of the payment application in the terminal device is very fast, and the user does not think that there is such a process. Taking the mobile phone as an example, after the authentication is successful, if the number of authentication failures of the mobile phone statistics is greater than the second threshold, the payment application such as Alipay, mobile banking, and WeChat payment in the mobile phone cannot be found in the mobile phone.

The method for configuring the security system provided by the embodiment of the present invention is very concealed and can effectively prevent operations such as illegal transfer after the user is forced to unlock the terminal device.

The embodiment of the present invention further provides a method for replacing the authentication mode, which is specifically as follows: the processor 701 is further configured to output a prompt message after the authentication fails, and prompt whether to replace the authentication mode and the current authentication mode after receiving the replacement command. Replace the authentication method specified by the above replacement command and re-accept the authentication information.

There are various authentication methods, such as fingerprint unlocking, pattern unlocking, and voice unlocking. A plurality of authentication modes can be set in the terminal device. On the other hand, if the user forgets the current authentication information of the terminal device, the user can also change another authentication mode. On the other hand, when the user is forced to unlock the terminal device, the user can select an authentication method that is easier to authenticate. . For the embodiment of the present invention, the authentication mode is crucial. If the terminal device has only one authentication mode and the authentication mode is difficult to deliberately fail authentication, the method of the embodiment of the present invention loses its meaning. For example, if the terminal device only has the authentication mode of fingerprint unlocking and the fingerprint authentication is very accurate, it is difficult for the user to make the number of authentication failures reach the second threshold when forced to unlock the terminal device.

For example, three authentication modes, such as pattern unlocking, fingerprint unlocking, and voice unlocking, can be set in the terminal device. The default authentication mode is fingerprint unlocking. If the user is in a safe situation, he can choose to use the fingerprint to unlock or deliberately fail to select another authentication method; if the user is forced to unlock, he can deliberately fail to select the pattern unlocking method that is easy to deliberately fail.

In the embodiment of the present invention, the number of authentication failures is cumulative, and the number of authentication failures is the sum of the number of authentication failures in different authentication modes. This makes it easier to reach the second threshold described above, causing the terminal device to enter the second system.

The method for replacing the authentication method provided by the embodiment of the invention not only enriches the authentication mode, but also improves the practical value of the method of the invention.

The embodiment of the present invention further provides an alarm method, which is specifically as follows: The processor 701 is further configured to: after the terminal device enters the second system, send the location information and the alarm information of the terminal device to the preset target terminal.

The preset target terminal may be a terminal device of a police station preset by the user or may be another terminal. The alarm information is used to indicate that the user of the terminal device is in danger and needs help, and may include the user's identity information, physical information, and appearance information. The location information accurately locates the location of the terminal device. The terminal device periodically sends the location information to the preset target terminal, and continuously notifies the location information of the preset target terminal terminal device.

The terminal device sends the location information and the alarm information of the terminal device to the preset target terminal in a concealed manner, and the terminal device does not display the corresponding information.

The alarm method provided by the embodiment of the invention can covertly the location information and the alarm information of the terminal device to the preset target terminal, which can help the victim to be rescued in time.

The embodiment of the present invention further provides another terminal device. As shown in FIG. 8 , for the convenience of description, only parts related to the embodiment of the present invention are shown. For details that are not disclosed, refer to the method of the embodiment of the present invention. section. The terminal device may be any terminal device including a mobile phone, a tablet computer, a vehicle-mounted computer, and the terminal device is used as a mobile phone as an example.

FIG. 8 is a block diagram showing a partial structure of a mobile phone related to a terminal device provided by an embodiment of the present invention. Referring to FIG. 8, the mobile phone includes: a radio frequency (RF) circuit 810, a memory 820, an input unit 830, a display unit 840, a sensor 850, an audio circuit 860, a wireless fidelity (WiFi) module 870, and a processor 880. And power supply 890 and other components. It will be understood by those skilled in the art that the structure of the handset shown in FIG. 8 does not constitute a limitation to the handset, and may include more or less components than those illustrated, or some components may be combined, or different component arrangements.

The following describes the components of the mobile phone in detail with reference to FIG. 8:

The RF circuit 810 can be used for receiving and transmitting signals during the transmission or reception of information or during a call. Specifically, after receiving the downlink information of the base station, it is processed by the processor 880. In addition, the uplink data is designed to be sent to the base station. Generally, RF circuit 810 includes, but is not limited to, an antenna, at least one amplifier, a transceiver, a coupler, a Low Noise Amplifier (LNA), a duplexer, and the like. In addition, RF circuitry 810 can also communicate with the network and other devices via wireless communication. The above wireless communication may use any communication standard or protocol, including but not limited to Global System of Mobile communication (GSM), General Packet Radio Service (GPRS), Code Division Multiple Access (Code Division). Multiple Access (CDMA), Wideband Code Division Multiple Access (WCDMA), Long Term Evolution (LTE), E-mail, Short Messaging Service (SMS), and the like.

The memory 820 can be used to store software programs and modules, and the processor 880 executes various functional applications and data processing of the mobile phone by running software programs and modules stored in the memory 820. The memory 820 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application required for at least one function (such as a sound playing function, an image playing function, etc.), and the like; the storage data area may be stored according to Data created by the use of the mobile phone (such as audio data, phone book, etc.). Moreover, memory 820 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device.

The input unit 830 can be configured to receive input numeric or character information and to generate key signal inputs related to user settings and function controls of the handset. Specifically, the input unit 830 may include a touch panel 831 and other input devices 832. Other input devices 832 can be used to receive input fingerprints, voice, and the like. The touch panel 831, also referred to as a touch screen, can collect touch operations on or near the user (such as the user using a finger, a stylus, or the like on the touch panel 831 or near the touch panel 831. Operation), and drive the corresponding connecting device according to a preset program. Optionally, the touch panel 831 can include two parts: a touch detection device and a touch controller. Wherein, the touch detection device detects the touch orientation of the user, and detects a signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts the touch information into contact coordinates, and sends the touch information. The processor 880 is provided and can receive commands from the processor 880 and execute them. In addition, the touch panel 831 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic waves. In addition to the touch panel 831, the input unit 830 may also include other input devices 832. In particular, other input devices 832 may include, but are not limited to, one or more of a physical keyboard, function keys (such as volume control buttons, switch buttons, etc.), trackballs, mice, joysticks, and the like.

The display unit 840 can be used to display information input by the user or information provided to the user as well as various menus of the mobile phone. The display unit 840 can include a display panel 841. Alternatively, the display panel 841 can be configured in the form of a liquid crystal display (LCD), an organic light-emitting diode (OLED), or the like. Further, the touch panel 831 can cover the display panel 841. When the touch panel 831 detects a touch operation thereon or nearby, the touch panel 831 transmits to the processor 880 to determine the type of the touch event, and then the processor 880 according to the touch event. The type provides a corresponding visual output on display panel 841. Although in FIG. 8, the touch panel 831 and the display panel 841 are two independent components to implement the input and output functions of the mobile phone, in some embodiments, the touch panel 831 can be integrated with the display panel 841. Realize the input and output functions of the phone.

The handset may also include at least one type of sensor 850, such as a light sensor, motion sensor, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel 841 according to the brightness of the ambient light, and the proximity sensor may close the display panel 841 and/or when the mobile phone moves to the ear. Or backlight. As a kind of motion sensor, the accelerometer sensor can detect the magnitude of acceleration in all directions (usually three axes). When it is stationary, it can detect the magnitude and direction of gravity. It can be used to identify the gesture of the mobile phone (such as horizontal and vertical screen switching, related Game, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, tapping), etc. As for the mobile phone can also be configured with gyroscopes, barometers, hygrometers, thermometers, infrared sensors and other sensors, no longer Narration.

Audio circuitry 860, speaker 861, and microphone 862 provide an audio interface between the user and the handset. The audio circuit 860 can transmit the converted electrical data of the received audio data to the speaker 861 for conversion to the sound signal output by the speaker 861; on the other hand, the microphone 862 converts the collected sound signal into an electrical signal by the audio circuit 860. After receiving, it is converted into audio data, and then the audio data is output to the processor 880 for processing, sent to the mobile phone 810 via the RF circuit 810, or the audio data is output to the memory 820 for further processing.

WiFi is a short-range wireless transmission technology, and the mobile phone can help users to send and receive emails, browse web pages, and access streaming media through the WiFi module 870, which provides users with wireless broadband Internet access. Although FIG. 8 shows the WiFi module 870, it can be understood that it does not belong to the essential configuration of the mobile phone, and can be omitted as needed within the scope of not changing the essence of the invention.

The processor 880 is the control center of the handset, and connects various portions of the entire handset using various interfaces and lines, by executing or executing software programs and/or modules stored in the memory 820, and invoking data stored in the memory 820, executing The phone's various functions and processing data, so that the overall monitoring of the phone. Optionally, the processor 880 may include one or more processing units; preferably, the processor 880 may integrate an application processor and a modem processor, where the application processor mainly processes an operating system, a user interface, an application, and the like. The modem processor primarily handles wireless communications. It will be appreciated that the above described modem processor may also not be integrated into the processor 880.

The handset also includes a power source 890 (such as a battery) that supplies power to the various components. Preferably, the power source can be logically coupled to the processor 880 through a power management system to manage functions such as charging, discharging, and power management through the power management system.

Although not shown, the mobile phone may further include a camera, a Bluetooth module, and the like, and details are not described herein again.

In the foregoing embodiment, each step method flow may be implemented based on the structure of the terminal device. The sensor 850 or the touch panel 831 can be used as a fingerprint collection device.

It should be noted that, in the foregoing embodiment of the fingerprint unlocking control device, each unit included is only divided according to functional logic, but is not limited to the above division, as long as the corresponding function can be implemented; The specific names are also for convenience of distinguishing from each other and are not intended to limit the scope of the present invention.

In addition, those skilled in the art can understand that all or part of the steps in implementing the foregoing method embodiments may be performed by a program to instruct related hardware, and the corresponding program may be stored in a computer readable storage medium. The storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

The above is only a preferred embodiment of the present invention, but the scope of the present invention is not limited thereto, and any one skilled in the art can easily think of changes within the technical scope disclosed by the embodiments of the present invention. Or, replacement, should be covered by the scope of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims (10)

A system unlocking method, comprising: The terminal device receives the authentication information in a system locked state; The terminal device uses the preset system unlocking authentication information to authenticate the authentication information. If the authentication fails, the authentication information is re-received, and the re-received authentication information is authenticated by using the preset system unlocking authentication information. Until the certification is passed; The terminal device counts the number of authentication failures, and enters the first system if the number of authentication failures is less than the first threshold, and enters the second system if the number of authentication failures is greater than the second threshold; The first system lacks a payment class application, and the second threshold is greater than or equal to the first threshold. The method according to claim 1, wherein before the terminal device receives the authentication information in the system locked state, the method further includes: The terminal device displays an authentication interface after receiving the unlocking instruction. The method according to claim 2, wherein, before the number of the authentication failures is greater than the second threshold, the method further comprises: The terminal device freezes and hides the payment application. The method according to any one of claims 1 to 3, after the authentication fails, the method further comprises: Output a prompt message to prompt whether to replace the authentication method; If the replacement command is received, the currently used authentication mode is replaced with the authentication mode specified by the replacement instruction, and then the re-receiving authentication information is executed. The method according to any one of claims 1 to 3, wherein after the terminal device enters the second system, the method further includes: The terminal device sends the location information and the alarm information of the terminal device to the preset target terminal. A terminal device, comprising: The receiving unit is configured to receive the authentication information when the terminal device is in the system locked state; and re-receive the authentication information after the authentication fails; An authentication unit configured to authenticate the authentication information by using preset system unlock authentication information; The statistical unit is set to count the number of failed authentication attempts. An execution unit, configured to enter the first system if the number of authentication failures is less than the first threshold, and enter the second system if the number of authentication failures is greater than the second threshold; The system lacks a payment class application, and the second threshold is greater than or equal to the first threshold. The device according to claim 6 wherein: The receiving unit is further configured to receive an unlocking instruction; the device further includes: a display unit configured to display an authentication interface after the receiving unit receives the unlocking instruction. The device according to claim 7, wherein the device further comprises: The application control unit is configured to freeze and hide the payment application in the terminal device before entering the second system if the number of authentication failures is greater than the second threshold. The device according to any one of claims 7 to 8, wherein the device further comprises: The output unit is configured to output a prompt message after the authentication fails, and prompt whether to replace the authentication mode; The receiving unit is further configured to receive a replacement instruction; The authentication control unit is configured to: if the receiving unit receives the replacement instruction, replace the currently used authentication mode with the authentication mode specified by the replacement instruction; The receiving unit is further configured to re-receive the authentication information after the currently used authentication mode is replaced with the authentication mode specified by the replacement instruction. The device according to any one of claims 7 to 8, wherein the device further comprises: a positioning unit configured to locate location information of the terminal device. The sending unit is configured to send the location information and the alarm information of the terminal device to the preset target terminal after the terminal device enters the second system.

Images