Fingerprint authentication method, fingerprint authentication device and computer readable storage medium

Abstract

The present disclosure provides a fingerprint authentication method, a fingerprint authentication device and a computer-readable storage medium. The fingerprint authentication method includes: a terminal application module sends a fingerprint authentication request message to a security application module in a SIM card; after receiving the fingerprint authentication request message, the security application module calls a fingerprint authentication interface in the SIM card to request fingerprint authentication; the fingerprint authentication interface triggers a fingerprint acquisition module on the terminal side to acquire user fingerprint data; the fingerprint acquisition module transmits the acquired user fingerprint data to the fingerprint authentication module in the SIM card; the fingerprint authentication module compares the user fingerprint data with the pre-stored user fingerprint features, and returns the authentication result to the fingerprint authentication interface; the fingerprint authentication interface forwards the authentication result to the security application module; and the security application module forwards the authentication result to the terminal application module. The present disclosure can reduce security risks and improve user experience.

Description

Technical Field

[0001] The present disclosure relates to the field of terminal technology, and in particular to a fingerprint authentication method, a fingerprint authentication device, and a computer-readable storage medium. Background Art

[0002] Fingerprint authentication technology can be applied to high-security services based on SIM-JAVA cards, such as digital currency SIM (Subscriber Identity Module) card hard wallets, SIM card identity authentication card applications, SIM card U shield card applications and SIM card financial card applications, etc. It can also be applied to high-security business scenarios running on mobile terminals such as cloud phones.

[0003] Currently, SIM card high-security applications are used in conjunction with mobile phone APP (application module) clients. The APP client provides UI (User Interface) and friendly user interaction, and the card application stores core data and executes core business logic. When the card application executes core business logic (such as payment confirmation), if the fingerprint authentication function is needed, it is necessary to return to the mobile phone operating system layer (such as Android system) to call the fingerprint authentication interface. After completing the fingerprint authentication on the mobile phone side and obtaining the authentication result, it is returned to the SIM card application through the machine-card interface. The transmission links and chains are relatively long, and the security risks are relatively large. Summary of the invention

[0004] The inventors of the present disclosure have discovered that, in the related art, the secure transmission link and path of fingerprint authentication applied by SIM cards are relatively long, and the security risks are relatively high.

[0005] In view of this, the present disclosure provides a fingerprint authentication method to shorten the secure transmission link and path of fingerprint authentication and reduce security risks.

[0006] According to one aspect of the present disclosure, a fingerprint authentication method is provided, comprising: a terminal application module sends a fingerprint authentication request message to a security application module in a user identity module SIM card; after receiving the fingerprint authentication request message, the security application module calls a fingerprint authentication interface in the SIM card to request fingerprint authentication; the fingerprint authentication interface triggers a fingerprint acquisition module on the terminal side to acquire user fingerprint data; the fingerprint acquisition module transmits the acquired user fingerprint data to the fingerprint authentication module in the SIM card; the fingerprint authentication module compares the user fingerprint data with a pre-stored user fingerprint feature, and returns an authentication result to the fingerprint authentication interface, wherein if the user fingerprint data matches the user fingerprint feature, the authentication result is authentication success, otherwise the authentication result is authentication failure; the fingerprint authentication interface forwards the authentication result to the security application module; and the security application module forwards the authentication result to the terminal application module.

[0007] In some embodiments, the terminal application module is a terminal wallet application module, the security application module is a SIM wallet card application module, and the fingerprint authentication request message is a payment operation request message; the step of the security application module forwarding the authentication result to the terminal application module includes: the SIM wallet card application module performs a payment operation when the authentication result is successful authentication, and returns the result of successful payment to the terminal wallet application module; and the SIM wallet card application module does not perform a payment operation when the authentication result is failed authentication, and returns the result of failed payment to the terminal wallet application module.

[0008] In some embodiments, the fingerprint authentication method further includes: before the terminal application module sends a fingerprint authentication request message, binding the terminal application module with the user fingerprint feature.

[0009] In some embodiments, the step of binding the terminal application module with the user fingerprint feature includes: the terminal application module sends a fingerprint binding request message to the security application module; the security application module forwards the fingerprint binding request message to the fingerprint authentication interface; after receiving the fingerprint binding request message, the fingerprint authentication interface triggers the fingerprint collection module to collect user fingerprint data; the fingerprint collection module transmits the user fingerprint data collected multiple times to the fingerprint authentication module; the fingerprint authentication module extracts and stores the user fingerprint feature from the user fingerprint data collected multiple times, sets an index value for the user fingerprint feature, and returns the index value to the security application module through the fingerprint authentication interface; and the security application module binds the index value to the terminal application module and returns the binding result to the terminal application module.

[0010] In some embodiments, the process of the fingerprint collection module collecting the user's fingerprint data includes: the fingerprint collection module sends a prompt message to prompt the user to press the fingerprint after being triggered by the fingerprint authentication interface; and after the user presses the fingerprint according to the prompt message, the fingerprint collection module receives the user's fingerprint data.

[0011] According to another aspect of the present disclosure, a fingerprint authentication device is provided, comprising: a terminal application module, configured to send a fingerprint authentication request message to a security application module in a user identity recognition module SIM card; the security application module, configured to, after receiving the fingerprint authentication request message, call a fingerprint authentication interface in the SIM card to request fingerprint authentication, and forward the authentication result to the terminal application module; the fingerprint authentication interface, configured to trigger a fingerprint acquisition module on a terminal side to acquire user fingerprint data, and forward the authentication result to the security application module; the fingerprint acquisition module, configured to transmit the acquired user fingerprint data to the fingerprint authentication module in the SIM card; and the fingerprint authentication module, configured to compare the user fingerprint data with a pre-stored user fingerprint feature, and return the authentication result to the fingerprint authentication interface, wherein if the user fingerprint data matches the user fingerprint feature, the authentication result is a successful authentication, otherwise the authentication result is a failed authentication.

[0012] In some embodiments, the terminal application module is a terminal wallet application module, the security application module is a SIM wallet card application module, and the fingerprint authentication request message is a payment operation request message; the SIM wallet card application module is used to perform a payment operation when the authentication result is a successful authentication, and return the result of the successful payment to the terminal wallet application module, and not perform a payment operation when the authentication result is a failed authentication, and return the result of the failed payment to the terminal wallet application module.

[0013] In some embodiments, the terminal application module is also used to send a fingerprint binding request message to the security application module; the security application module is also used to forward the fingerprint binding request message to the fingerprint authentication interface, and bind the index value with the terminal application module, and return the binding result to the terminal application module; the fingerprint authentication interface is also used to trigger the fingerprint collection module to collect user fingerprint data after receiving the fingerprint binding request message; the fingerprint collection module is also used to transmit the user fingerprint data collected multiple times to the fingerprint authentication module; the fingerprint authentication module is also used to extract and store user fingerprint features from the user fingerprint data collected multiple times, set an index value for the user fingerprint feature, and return the index value to the security application module through the fingerprint authentication interface.

[0014] In some embodiments, the fingerprint collection module is used to send a prompt message to prompt the user to press the fingerprint after being triggered by the fingerprint authentication interface, and receive the user fingerprint data after the user presses the fingerprint according to the prompt message.

[0015] According to another aspect of the present disclosure, a fingerprint authentication device is provided, including: a memory; and a processor coupled to the memory, wherein the processor is configured to execute the aforementioned method based on instructions stored in the memory.

[0016] According to another aspect of the present disclosure, a computer-readable storage medium is provided, on which computer program instructions are stored. When the instructions are executed by a processor, the method described above is implemented.

[0017] In the above fingerprint authentication method, by implementing the fingerprint authentication interface and fingerprint authentication module functions in the SIM card and storing the fingerprint acquisition module on the terminal side, it is possible to support high-security applications of the SIM card to call the fingerprint authentication function in the SIM card, thereby shortening the security transmission link and path of the fingerprint authentication, reducing security risks and improving user experience.

[0018] Other features and advantages of the present disclosure will become apparent from the following detailed description of exemplary embodiments of the present disclosure with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] The accompanying drawings, which constitute a part of the specification, illustrate embodiments of the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0020] The present disclosure can be more clearly understood from the following detailed description with reference to the accompanying drawings.

[0021] in:

[0022] Figure 1 is a flow chart illustrating a fingerprint authentication method according to some embodiments of the present disclosure;

[0023] Figure 2 is a flow chart showing a fingerprint authentication method according to some other embodiments of the present disclosure;

[0024] Figure 3 is a flow chart illustrating a fingerprint binding method according to some embodiments of the present disclosure;

[0025] Figure 4 is a flow chart showing a fingerprint binding method according to other embodiments of the present disclosure;

[0026] Figure 5 is a schematic diagram showing the structure of a fingerprint authentication device according to some embodiments of the present disclosure;

[0027] Figure 6 is a schematic structural diagram showing a fingerprint authentication device according to other embodiments of the present disclosure;

[0028] Figure 7 It is a schematic diagram showing the structure of a fingerprint authentication device according to some other embodiments of the present disclosure. DETAILED DESCRIPTION

[0029] Various exemplary embodiments of the present disclosure will now be described in detail with reference to the accompanying drawings. It should be noted that the relative arrangement of components and steps, numerical expressions and numerical values ​​set forth in these embodiments do not limit the scope of the present disclosure unless otherwise specifically stated.

[0030] At the same time, it should be understood that for the convenience of description, the sizes of the various parts shown in the drawings are not drawn according to the actual proportional relationship.

[0031] The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the present disclosure, its application, or uses.

[0032] Technologies, methods, and equipment known to ordinary technicians in the relevant art may not be discussed in detail, but where appropriate, the technologies, methods, and equipment should be considered as part of the specification.

[0033] In all examples shown and discussed herein, any specific values ​​should be interpreted as merely exemplary and not as limiting. Therefore, other examples of the exemplary embodiments may have different values.

[0034] It should be noted that like reference numerals and letters refer to similar items in the following figures, and therefore, once an item is defined in one figure, it need not be further discussed in subsequent figures.

[0035] The inventors of the present disclosure have discovered that, in the related art, the secure transmission link and path of fingerprint authentication applied by SIM cards are relatively long, and the security risks are relatively high.

[0036] In view of this, the present disclosure provides a fingerprint authentication method to shorten the secure transmission link and path of fingerprint authentication and reduce security risks. The fingerprint authentication method according to some embodiments of the present disclosure is described in detail below with reference to the accompanying drawings.

[0037] Figure 1 FIG. 1 is a flow chart showing a fingerprint authentication method according to some embodiments of the present disclosure. Figure 1 As shown, the method includes steps S102 to S114.

[0038] In step S102, the terminal application module sends a fingerprint authentication request message to the security application module in the SIM card.

[0039] In step S104, after receiving the fingerprint authentication request message, the security application module calls the fingerprint authentication interface in the SIM card to request fingerprint authentication.

[0040] In step S106, the fingerprint authentication interface triggers the fingerprint collection module on the terminal side to collect user fingerprint data.

[0041] In some embodiments, the process of the fingerprint collection module collecting user fingerprint data includes: the fingerprint collection module sends a prompt message to prompt the user to press the fingerprint after being triggered by the fingerprint authentication interface; and after the user presses the fingerprint according to the prompt message, the fingerprint collection module receives the user fingerprint data.

[0042] In step S108, the fingerprint collection module transmits the collected user fingerprint data to the fingerprint authentication module in the SIM card.

[0043] In step S110, the fingerprint authentication module compares the user fingerprint data with the pre-stored user fingerprint features and returns the authentication result to the fingerprint authentication interface.

[0044] Here, if the user fingerprint data is consistent with the user fingerprint feature, the authentication result is authentication success, otherwise the authentication result is authentication failure. For example, if the collected user fingerprint data contains features that are exactly the same as the stored user fingerprint features (that is, the two are consistent), the authentication result is authentication success; if at least a part of the fingerprint features in the stored user fingerprint features are inconsistent with the collected user fingerprint data (that is, the two are inconsistent), the authentication result is authentication failure.

[0045] In step S112, the fingerprint authentication interface forwards the authentication result to the security application module.

[0046] In step S114, the security application module forwards the authentication result to the terminal application module.

[0047] So far, a fingerprint authentication method according to some embodiments of the present disclosure is provided. The fingerprint authentication method includes: the terminal application module sends a fingerprint authentication request message to the security application module in the SIM card; after receiving the fingerprint authentication request message, the security application module calls the fingerprint authentication interface in the SIM card to request fingerprint authentication; the fingerprint authentication interface triggers the fingerprint acquisition module on the terminal side to collect user fingerprint data; the fingerprint acquisition module transmits the collected user fingerprint data to the fingerprint authentication module in the SIM card; the fingerprint authentication module compares the user fingerprint data with the pre-stored user fingerprint features, and returns the authentication result to the fingerprint authentication interface, wherein if the user fingerprint data is consistent with the user fingerprint features, the authentication result is authentication success, otherwise the authentication result is authentication failure; the fingerprint authentication interface forwards the authentication result to the security application module; and the security application module forwards the authentication result to the terminal application module.

[0048] In the above fingerprint authentication method, the fingerprint authentication interface and the fingerprint authentication module are in the SIM card, the security application module calls the fingerprint authentication interface in the SIM card, and completes the fingerprint security authentication in the SIM card. By implementing the fingerprint authentication interface and fingerprint authentication module functions in the SIM card, and storing the fingerprint acquisition module on the terminal side, it can support SIM card high-security applications (such as digital currency applications, identity authentication applications, U shield applications, etc.) to directly call the fingerprint authentication function in the SIM card, thereby shortening the security transmission link and path of fingerprint authentication, reducing security risks and improving user experience.

[0049] In some embodiments, the terminal application module is a terminal wallet application module, the security application module is a SIM wallet card application module, and the fingerprint authentication request message is a payment operation request message. In some embodiments, the step of the security application module forwarding the authentication result to the terminal application module may include: the SIM wallet card application module performs the payment operation when the authentication result is successful authentication, and returns the payment success result to the terminal wallet application module; and the SIM wallet card application module does not perform the payment operation when the authentication result is failed authentication, and returns the payment failure result to the terminal wallet application module. In this way, the payment function of the terminal is realized.

[0050] Combine the following Figure 2 , taking the terminal wallet application module (such as the mobile phone wallet application module) and the SIM wallet card application module as examples, and describing the fingerprint authentication process according to the payment function.

[0051] Figure 2 FIG. 1 is a flow chart showing a fingerprint authentication method according to other embodiments of the present disclosure. Figure 2 As shown, the method includes steps S202 to S220.

[0052] In step S202, the terminal wallet application module sends a payment operation request message to the SIM wallet card application module through the SDK (Software Development Kit) machine card interface to request a payment operation.

[0053] In step S204, the SIM wallet card application module starts to perform the payment operation and requires user fingerprint authentication. The SIM wallet card application module calls the fingerprint authentication interface in the SIM card to request fingerprint authentication.

[0054] In step S206, the fingerprint authentication interface triggers the fingerprint collection module on the terminal side (e.g., the mobile phone side) through the machine-card transmission interface (or machine-card communication interface). That is, the fingerprint authentication interface can safely trigger the fingerprint collection module to collect fingerprints through the machine-card transmission interface.

[0055] In step S208, the fingerprint collection module on the terminal side is awakened and prompts the user to press the fingerprint to collect the user's fingerprint image data. The user presses the fingerprint according to the prompt to complete the fingerprint data collection.

[0056] In step S210, the fingerprint collection module interacts with the fingerprint authentication module to transmit fingerprint data through the machine-card transmission interface. For example, the fingerprint collection module on the terminal side transmits the user's fingerprint image data to the fingerprint authentication module in the SIM card through the machine-card transmission interface.

[0057] In step S212, the fingerprint authentication module in the SIM card performs fingerprint comparison. If the user's fingerprint data matches the stored user's fingerprint features, the authentication is successful, otherwise the authentication fails.

[0058] In step S214, the fingerprint authentication module in the SIM card returns the authentication result (eg, a successful authentication result) to the fingerprint authentication interface.

[0059] In step S216, the fingerprint authentication interface in the SIM card returns the authentication result (eg, a successful authentication result) to the SIM wallet card application module.

[0060] In step S218, the SIM wallet card application module completes the payment operation according to the result of successful authentication.

[0061] In step S220, the SIM wallet card application module returns the operation result to the terminal wallet application module through the SDK machine card interface.

[0062] So far, a fingerprint authentication method according to other embodiments of the present disclosure is provided. After the fingerprint authentication is successful, the method also completes the payment operation function. The method can support SIM card high-security applications (such as digital currency applications, identity authentication applications, U shield applications, etc.) to directly call the fingerprint authentication function in the SIM card, thereby effectively shortening the secure transmission link and path of fingerprint authentication, effectively reducing security risks and improving user experience.

[0063] The above fingerprint authentication method can make full use of the user interaction convenience of the mobile phone and the high security of the SIM card, and implement the fingerprint authentication interface and fingerprint authentication module in the SIM card software, which can effectively reduce the hardware complexity of the mobile terminal, facilitate business promotion, enhance the value of the SIM card and avoid the marginalization of operators.

[0064] In some embodiments, the fingerprint authentication method may further include: before the terminal application module sends the fingerprint authentication request message, binding the terminal application module with the user's fingerprint feature.

[0065] Combine the following Figure 3 Describe in detail the process of binding the terminal application module with the user's fingerprint feature.

[0066] Figure 3 FIG. 1 is a flow chart showing a fingerprint binding method according to some embodiments of the present disclosure. The fingerprint binding method describes the process of binding a terminal application module with a user fingerprint feature. Figure 3 As shown, the fingerprint binding method includes steps S302 to S312.

[0067] In step S302, the terminal application module sends a fingerprint binding request message to the security application module.

[0068] In step S304, the security application module forwards the fingerprint binding request message to the fingerprint authentication interface.

[0069] In step S306, after receiving the fingerprint binding request message, the fingerprint authentication interface triggers the fingerprint collection module to collect user fingerprint data.

[0070] In step S308, the fingerprint collection module transmits the user fingerprint data collected multiple times to the fingerprint authentication module.

[0071] In step S310, the fingerprint authentication module extracts and stores the user fingerprint feature from the multiple collected user fingerprint data, sets an index value for the user fingerprint feature, and returns the index value to the security application module through the fingerprint authentication interface. For example, the index value may be an identifier corresponding to the user fingerprint feature.

[0072] In step S312, the security application module binds the index value to the terminal application module and returns the binding result to the terminal application module.

[0073] So far, a fingerprint binding method according to some embodiments of the present disclosure is provided. By binding the terminal application module with the user's fingerprint feature, the subsequent fingerprint authentication process can be conveniently performed.

[0074] Combine the following Figure 4 , the fingerprint binding process is described by taking the terminal wallet application module (as the terminal application module) and the SIM wallet card application module (as the security application module) as examples.

[0075] Figure 4 FIG. 1 is a flow chart showing a fingerprint binding method according to other embodiments of the present disclosure. Figure 4 As shown, the fingerprint binding method includes steps S402 to S420.

[0076] In step S402, the user activates the wallet service fingerprint authentication function, and the terminal wallet application module (such as the mobile wallet application module) sends a fingerprint binding request message to the SIM card (such as the SIM wallet card application module in the SIM card) through the SDK machine-card interface.

[0077] In step S404, the SIM wallet card application module forwards the fingerprint binding request message to the fingerprint authentication interface in the SIM card.

[0078] In step S406, the fingerprint authentication interface triggers the fingerprint collection module on the terminal side (eg, mobile phone side) through the machine card transmission interface.

[0079] In step S408, the fingerprint collection module on the terminal side is awakened and prompts the user to press the fingerprint to collect the user's fingerprint image data. The user presses the fingerprint according to the prompt to complete the fingerprint data collection.

[0080] In step S410, the fingerprint collection module transmits the fingerprint data to the fingerprint authentication module in the SIM card through the machine-card transmission interface. For example, the fingerprint collection module on the terminal side and the fingerprint authentication module in the SIM card can interact multiple times to complete the fingerprint sample collection, that is, the user's fingerprint data can be collected multiple times to ensure that the user's fingerprint data is clear and correct.

[0081] In step S412, the fingerprint authentication module extracts user fingerprint features from the user fingerprint data collected multiple times and stores the user fingerprint features, and sets a corresponding index value for the user fingerprint features.

[0082] In step S414, the fingerprint authentication module in the SIM card returns the index value corresponding to the user's fingerprint feature to the fingerprint authentication interface.

[0083] In step S416, the fingerprint authentication interface returns the index value to the SIM wallet card application module.

[0084] In step S418, the SIM wallet card application module performs a binding operation, that is, binds the index value to the terminal application module.

[0085] In step S420, the SIM wallet card application module returns a binding result (eg, information indicating successful binding of the terminal application module with the index value corresponding to the user's fingerprint feature) to the terminal wallet application module, prompting the user that the fingerprint authentication function has been successfully activated.

[0086] So far, a fingerprint binding method according to some other embodiments of the present disclosure is provided. By binding the terminal application module with the user's fingerprint feature, the subsequent fingerprint authentication process can be conveniently performed.

[0087] Figure 5 FIG. 1 is a schematic diagram showing the structure of a fingerprint authentication device according to some embodiments of the present disclosure. Figure 5 As shown, the fingerprint authentication device may include a terminal (e.g., a mobile phone) 510 and a SIM card 520. For example, the SIM card 520 may be disposed inside the terminal 510. In this case, it should be noted that the "terminal side" mentioned in the present disclosure refers to other parts of the terminal except the SIM card.

[0088] like Figure 5 As shown, the terminal 510 includes a terminal application module 511 and a fingerprint collection module 512, and the SIM card 520 includes a security application module 521, a fingerprint authentication interface 522, and a fingerprint authentication module 523. Therefore, the fingerprint authentication device includes an application module 511, a fingerprint collection module 512, a security application module 521, a fingerprint authentication interface 522, and a fingerprint authentication module 523.

[0089] The terminal application module 511 is used to send a fingerprint authentication request message to the security application module 521 in the SIM card 520. The terminal application module can implement user UI and business logic, and can request the security application module to perform business operations.

[0090] The security application module 521 is used to call the fingerprint authentication interface 522 in the SIM card 520 to request fingerprint authentication after receiving the fingerprint authentication request message, and forward the authentication result to the terminal application module 511. For example, the security application module can save user core data and keys, and perform key core services, such as digital currency payment operations.

[0091] The fingerprint authentication interface 522 is used to trigger the fingerprint collection module 512 on the terminal 510 side to collect user fingerprint data and forward the authentication result to the security application module 521. The fingerprint authentication interface can be securely opened to the business card application (such as a digital currency card application call) through the card interface.

[0092] The fingerprint collection module 512 is used to transmit the collected user fingerprint data to the fingerprint authentication module 523 in the SIM card 520. For example, the fingerprint collection module 512 can communicate with the fingerprint authentication interface 522 and the fingerprint authentication module 523 through the secure machine-card channel protocol.

[0093] For example, the fingerprint collection module 512 is used to send a prompt message to prompt the user to press the fingerprint after being triggered by the fingerprint authentication interface 522, and receive the user's fingerprint data after the user presses the fingerprint according to the prompt message.

[0094] The fingerprint authentication module 523 is used to compare the user fingerprint data with the pre-stored user fingerprint features, and return the authentication result to the fingerprint authentication interface 522, wherein if the user fingerprint data is consistent with the user fingerprint features, the authentication result is authentication success, otherwise the authentication result is authentication failure. For example, the fingerprint authentication module may include a fingerprint library, which stores user fingerprint feature information. For another example, the fingerprint authentication module may also store information such as fingerprint binding relationships.

[0095] So far, a fingerprint authentication device according to some embodiments of the present disclosure is provided. In the above fingerprint authentication device, by implementing a fingerprint authentication interface and a fingerprint authentication module in a SIM card, and storing the fingerprint acquisition module on the terminal side, it is possible to support SIM card high-security applications (such as digital currency applications, identity authentication applications, U shield applications, etc.) to directly call the fingerprint authentication function in the SIM card, thereby shortening the secure transmission link and path of fingerprint authentication, reducing security risks and improving user experience.

[0096] In some embodiments, the terminal application module 511 is a terminal wallet application module, the security application module 521 is a SIM wallet card application module, and the fingerprint authentication request message is a payment operation request message. The SIM wallet card application module is used to perform the payment operation when the authentication result is successful authentication, and return the payment success result to the terminal wallet application module, and not perform the payment operation when the authentication result is failed authentication, and return the payment failure result to the terminal wallet application module.

[0097] In some embodiments, the terminal application module 511 is also used to send a fingerprint binding request message to the security application module 521. The security application module 521 is also used to forward the fingerprint binding request message to the fingerprint authentication interface 522, and bind the index value with the terminal application module 511, and return the binding result to the terminal application module 511. The fingerprint authentication interface 522 is also used to trigger the fingerprint collection module 512 to collect user fingerprint data after receiving the fingerprint binding request message. The fingerprint collection module 512 is also used to transmit the user fingerprint data collected multiple times to the fingerprint authentication module 522. The fingerprint authentication module 523 is also used to extract and store user fingerprint features from the user fingerprint data collected multiple times, set an index value for the user fingerprint feature, and return the index value to the security application module 521 through the fingerprint authentication interface 522. In this way, the fingerprint binding function of the fingerprint authentication device is realized.

[0098] The fingerprint authentication device adopts terminal-side fingerprint collection and SIM card-side fingerprint authentication, integrating the advantages of terminal and SIM card, and providing a safe and efficient way of fingerprint authentication call in SIM card for SIM card high-security applications.

[0099] Figure 6 6 is a schematic diagram showing the structure of a fingerprint authentication device according to some other embodiments of the present disclosure. The fingerprint authentication device includes a memory 610 and a processor 620. Among them:

[0100] The memory 610 can be a disk, a flash memory, or any other non-volatile storage medium. The memory is used to store Figures 1 to 4 At least one of the corresponding embodiments of the instructions.

[0101] The processor 620 is coupled to the memory 610 and can be implemented as one or more integrated circuits, such as a microprocessor or a microcontroller. The processor 620 is used to execute instructions stored in the memory, thereby shortening the secure transmission link and path of fingerprint authentication, reducing security risks and improving user experience.

[0102] In some embodiments, it is also possible to Figure 7 As shown, the fingerprint authentication device 700 includes a memory 710 and a processor 720. The processor 720 is coupled to the memory 710 via a BUS bus 730. The fingerprint authentication device 700 can also be connected to an external storage device 750 via a storage interface 740 to call external data, and can also be connected to a network or another computer system (not shown) via a network interface 760, which will not be described in detail here.

[0103] In this embodiment, data instructions are stored in a memory and then processed by a processor, thereby shortening the secure transmission link and path of fingerprint authentication, reducing security risks and improving user experience.

[0104] In some other embodiments, the present disclosure further provides a computer-readable storage medium having computer program instructions stored thereon, which are executed by a processor to implement Figures 1 to 4 The present invention is a method for performing a method of performing a computer program product in at least one of the embodiments of the present invention. It should be understood by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable non-transient storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0105] The present disclosure is described with reference to flowcharts and / or block diagrams of methods, devices (systems) and computer program products according to embodiments of the present disclosure. It should be understood that each process and / or block in the flowchart and / or block diagram and the combination of processes and / or blocks in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0106] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0107] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0108] So far, the present disclosure has been described in detail. In order to avoid obscuring the concept of the present disclosure, some details known in the art are not described. Based on the above description, those skilled in the art can fully understand how to implement the technical solution disclosed here.

[0109] Although some specific embodiments of the present disclosure have been described in detail by way of example, it should be understood by those skilled in the art that the above examples are for illustration only and are not intended to limit the scope of the present disclosure. It should be understood by those skilled in the art that the above embodiments may be modified without departing from the scope and spirit of the present disclosure. The scope of the present disclosure is defined by the appended claims.

Claims

1. A fingerprint authentication method, comprising: The terminal application module sends a fingerprint authentication request message to the security application module in the user identity module SIM card; After receiving the fingerprint authentication request message, the security application module calls the fingerprint authentication interface in the SIM card to request fingerprint authentication; The fingerprint authentication interface triggers the fingerprint collection module on the terminal side to collect user fingerprint data; The fingerprint collection module transmits the collected user fingerprint data to the fingerprint authentication module in the SIM card; The fingerprint authentication module compares the user fingerprint data with the pre-stored user fingerprint features, and returns the authentication result to the fingerprint authentication interface, wherein if the user fingerprint data matches the user fingerprint features, the authentication result is authentication success, otherwise the authentication result is authentication failure; The fingerprint authentication interface forwards the authentication result to the security application module; and The security application module forwards the authentication result to the terminal application module; Wherein, the fingerprint authentication method further comprises: before the terminal application module sends a fingerprint authentication request message, binding the terminal application module with the user fingerprint feature; Among them, the step of binding the terminal application module with the user fingerprint feature includes: the terminal application module sends a fingerprint binding request message to the security application module; the security application module forwards the fingerprint binding request message to the fingerprint authentication interface; after receiving the fingerprint binding request message, the fingerprint authentication interface triggers the fingerprint collection module to collect user fingerprint data; the fingerprint collection module transmits the user fingerprint data collected multiple times to the fingerprint authentication module; the fingerprint authentication module extracts and stores the user fingerprint feature from the user fingerprint data collected multiple times, sets an index value for the user fingerprint feature, and returns the index value to the security application module through the fingerprint authentication interface; and the security application module binds the index value to the terminal application module and returns the binding result to the terminal application module.

2. The fingerprint authentication method according to claim 1, wherein: The terminal application module is a terminal wallet application module, the security application module is a SIM wallet card application module, and the fingerprint authentication request message is a payment operation request message; The step of the security application module forwarding the authentication result to the terminal application module comprises: The SIM wallet card application module performs a payment operation if the authentication result is successful, and returns a payment success result to the terminal wallet application module; and The SIM wallet card application module does not perform the payment operation if the authentication result is authentication failure, and returns the payment failure result to the terminal wallet application module.

3. The fingerprint authentication method according to claim 1, wherein: The process of the fingerprint collection module collecting the user's fingerprint data includes: The fingerprint collection module sends a prompt message to prompt the user to press the fingerprint after being triggered by the fingerprint authentication interface; and After the user presses the fingerprint according to the prompt information, the fingerprint collection module receives the user fingerprint data.

4. A fingerprint authentication device, comprising: The terminal application module is used to send a fingerprint authentication request message to the security application module in the user identity module SIM card; The security application module is used to call the fingerprint authentication interface in the SIM card to request fingerprint authentication after receiving the fingerprint authentication request message, and forward the authentication result to the terminal application module; The fingerprint authentication interface is used to trigger the fingerprint acquisition module on the terminal side to collect user fingerprint data, and forward the authentication result to the security application module; The fingerprint collection module is used to transmit the collected user fingerprint data to the fingerprint authentication module in the SIM card; and The fingerprint authentication module is used to compare the user fingerprint data with the pre-stored user fingerprint features, and return the authentication result to the fingerprint authentication interface, wherein if the user fingerprint data is consistent with the user fingerprint features, the authentication result is authentication success, otherwise the authentication result is authentication failure; Wherein, the terminal application module is also used to send a fingerprint binding request message to the security application module; The security application module is further used to forward the fingerprint binding request message to the fingerprint authentication interface, bind the index value with the terminal application module, and return the binding result to the terminal application module; The fingerprint authentication interface is also used to trigger the fingerprint collection module to collect user fingerprint data after receiving the fingerprint binding request message; The fingerprint collection module is also used to transmit the user fingerprint data collected multiple times to the fingerprint authentication module; The fingerprint authentication module is also used to extract and store user fingerprint features from the user fingerprint data collected multiple times, set index values ​​for the user fingerprint features, and return the index values ​​to the security application module through the fingerprint authentication interface.

5. The fingerprint authentication device according to claim 4, wherein: The terminal application module is a terminal wallet application module, the security application module is a SIM wallet card application module, and the fingerprint authentication request message is a payment operation request message; The SIM wallet card application module is used to perform a payment operation if the authentication result is successful authentication, and return the result of successful payment to the terminal wallet application module; and not perform a payment operation if the authentication result is failed authentication, and return the result of failed payment to the terminal wallet application module.

6. The fingerprint authentication device according to claim 4, wherein: The fingerprint collection module is used to send a prompt message to prompt the user to press the fingerprint after being triggered by the fingerprint authentication interface, and receive the user fingerprint data after the user presses the fingerprint according to the prompt message.

7. A fingerprint authentication device, comprising: Memory; as well as A processor coupled to the memory, wherein the processor is configured to execute the method according to any one of claims 1 to 3 based on instructions stored in the memory.

8. A computer-readable storage medium having computer program instructions stored thereon, which, when executed by a processor, implement the method according to any one of claims 1 to 3.

Images