Fingerprint security login method and terminal for cloud computers

Abstract

This invention provides a fingerprint-secure login method and terminal for cloud computers. The method includes: repeatedly collecting fingerprint data from the same finger of a user and encrypting the fingerprint data to obtain encrypted fingerprint data; sending a first storage request to a cloud server, the first storage request including the encrypted fingerprint data; when logging into the cloud computer corresponding to the cloud server, collecting the user's current fingerprint data, encrypting the current fingerprint data, and sending a login request to the cloud server, the login request including the current encrypted fingerprint data; and unlocking the cloud computer corresponding to the cloud computer account upon receiving a verification success message from the cloud server. This invention effectively solves the problems of inconvenience and low security level of requiring account and password input during login in existing technologies.

Description

Technical Field

[0001] This invention relates to the field of fingerprint security login technology for cloud computers, and more particularly to a fingerprint security login method and terminal for cloud computers. Background Technology

[0002] The 21st century is known as the information age. Like many technologies, cloud computing technology, while bringing great convenience to people's lives, also brings security risks such as privacy leaks. In recent years, with the rapid development of cloud computing, people have placed greater demands on security and convenience. However, current cloud computing generally requires users to enter an account and password to log in. Some users, for security reasons, set complicated account and password settings, which undoubtedly wastes time and effort each time they log in. In addition, some users set simple account and password settings and rarely change them unless a problem occurs. This practice greatly increases the risk of cloud computing systems.

[0003] Therefore, regardless of whether the password is complex or simple, as long as the account and password are known by others or obtained by hackers, there will be a risk of information leakage, which may also cause irreparable damage to production and life. Summary of the Invention

[0004] This invention provides a fingerprint-secure login method and terminal for cloud computers to solve the problems of inconvenience and low security level of requiring account and password input during login in the prior art.

[0005] In a first aspect, embodiments of the present invention provide a fingerprint-secure login method for a cloud computer, applied to a local terminal, comprising:

[0006] Fingerprint data of the same finger of a user is collected multiple times and then encrypted to obtain encrypted fingerprint data;

[0007] Send a first storage request to the cloud server, the first storage request including the fingerprint encryption data;

[0008] When logging into the cloud computer corresponding to the cloud server, the user's current fingerprint data is collected, the current fingerprint data is encrypted, and a login request is sent to the cloud server. The login request includes the encrypted current fingerprint data.

[0009] Upon receiving a successful verification message from the cloud server, the cloud computer corresponding to the cloud computer account is unlocked.

[0010] In one possible implementation, encrypting the fingerprint data to obtain encrypted fingerprint data includes:

[0011] Obtain the salt value and the key, and generate a target byte array based on the salt value and the key;

[0012] The fingerprint data is then processed according to preset rules to obtain initial fingerprint encryption data.

[0013] The target byte array and the initial fingerprint encryption data are subjected to a preset operation to obtain fingerprint encryption data.

[0014] In one possible implementation, obtaining the salt value and the key, and generating a target byte array based on the salt value and the key, includes:

[0015] Obtain the salt value consisting of irregular characters, and obtain the key of a randomly generated integer array;

[0016] Obtain the current byte of the salt value, and obtain the current byte of the key;

[0017] Perform an XOR operation on the two current bytes to obtain the first data;

[0018] The next byte of the current byte of the salt value is taken as the current byte, and the next byte of the current byte in the key is taken as the current byte. The process jumps to the step of "performing an XOR operation on the two current bytes to obtain the first data" until all bytes of the salt value and all bytes of the key have completed the XOR operation.

[0019] Generate the target byte array based on all the first data.

[0020] In one possible implementation, processing the fingerprint data according to preset rules to obtain initial fingerprint encryption data includes:

[0021] The fingerprint data is permuted according to a pre-constructed mapping rule between letters, numbers, and characters to obtain the initial fingerprint encryption data;

[0022] Alternatively, the fingerprint data can be encrypted using an asymmetric encryption algorithm to obtain initial encrypted fingerprint data;

[0023] Alternatively, the fingerprint data can be encrypted using a symmetric encryption algorithm to obtain initial encrypted fingerprint data.

[0024] In one possible implementation, performing a preset operation on the target byte array and the initial fingerprint encryption data to obtain fingerprint encryption data includes:

[0025] The target byte array is XORed with the initial fingerprint encryption data to obtain the fingerprint encryption data.

[0026] Alternatively, the target byte array can be merged with the initial fingerprint encryption data to obtain the fingerprint encryption data;

[0027] Alternatively, the target byte array can be combined with the initial fingerprint encryption data and then reversed to obtain the fingerprint encryption data.

[0028] Another embodiment of the present invention provides a fingerprint-secure login method for cloud computers, applied to a cloud server, comprising:

[0029] Receive the first storage request sent by the local terminal, and decrypt the fingerprint encryption data according to the first storage request to obtain the fingerprint data;

[0030] The fingerprint data is verified. If the fingerprint data is successfully verified, the login account corresponding to the current user is obtained, and the fingerprint data and the login account are saved to the cloud server database.

[0031] The system receives a login request sent by the local terminal, decrypts the current fingerprint encryption data in the login request to obtain the current fingerprint data, and compares the current fingerprint data with the fingerprint data in the cloud server database.

[0032] If the current fingerprint data matches the fingerprint data, a verification success message is sent to the local terminal.

[0033] In one possible implementation, if the fingerprint data verification is successful, obtaining the login account corresponding to the current user, and saving the fingerprint data and the login account to the cloud server database, includes:

[0034] If the fingerprint data is in a preset header data format and the XOR verification of the fingerprint data is successful, obtain the login account corresponding to the current user, and save the fingerprint data and the login account to the cloud server database.

[0035] In one possible implementation, if the fingerprint data verification is successful, obtaining the login account corresponding to the current user, and saving the fingerprint data and the login account to the cloud server database, includes:

[0036] If the first and last bytes of the fingerprint data are in a preset header data format, and the XOR checksum of the preset bytes in the fingerprint data is the same as the XOR checksum of the fingerprint data, obtain the login account corresponding to the current user, and save the fingerprint data and the login account to the cloud server database.

[0037] In one possible implementation, if the first and last bytes of the fingerprint data are in a preset header data format, and the XOR checksum of the preset bytes in the fingerprint data is the same as the XOR checksum of the fingerprint data, then obtaining the login account corresponding to the current user, and saving the fingerprint data and the login account to the cloud server database, includes:

[0038] If the first byte and the last byte of the fingerprint data are in a preset header data format, and the XOR checksum of the second byte to the (N-2)th byte of the fingerprint data is the same as the data corresponding to the (N-1)th byte of the fingerprint data, obtain the login account corresponding to the current user, and save the fingerprint data and the login account to the cloud server database.

[0039] Where N is a positive integer not less than 5.

[0040] In a second aspect, embodiments of the present invention provide a terminal, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the method described in the first aspect or any possible implementation thereof.

[0041] This invention provides a fingerprint-secure login method and terminal for cloud computers. The method involves repeatedly collecting fingerprint data from the same finger of a user and encrypting this data to obtain encrypted fingerprint data. A first storage request, including the encrypted fingerprint data, is sent to a cloud server. When logging into the cloud computer corresponding to the cloud server, the user's current fingerprint data is collected, encrypted, and a login request, including the encrypted fingerprint data, is sent to the cloud server. Upon receiving a successful verification message from the cloud server, the cloud computer corresponding to the user's account is unlocked. This fingerprint-secure login method for cloud computers, through interaction between the local terminal and the cloud server, enables the user's fingerprint to unlock the cloud computer desktop. This solves the inconvenience and low security level of prior art requiring account and password input during login, shortens login time, and improves user security by ensuring that the fingerprint can only unlock the cloud computer corresponding to the user's account, allowing for faster and more secure login. Attached Figure Description

[0042] To more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0043] Figure 1 A flowchart illustrating the implementation of a fingerprint-secure login method for a cloud computer according to an embodiment of the present invention;

[0044] Figure 2 This is a flowchart illustrating the implementation of a fingerprint-secure login method for a cloud computer according to another embodiment of the present invention.

[0045] Figure 3 This is a schematic diagram of the structure of a fingerprint security login device for a cloud computer provided in an embodiment of the present invention;

[0046] Figure 4 This is a schematic diagram of the structure of a fingerprint security login device for a cloud computer provided in another embodiment of the present invention;

[0047] Figure 5 This is a schematic diagram of the terminal provided in an embodiment of the present invention. Detailed Implementation

[0048] In the following description, specific details such as particular system architectures and techniques are set forth for illustrative purposes and not for limitation, in order to provide a thorough understanding of the embodiments of the invention. However, those skilled in the art will understand that the invention can be implemented in other embodiments without these specific details. In other instances, detailed descriptions of well-known systems, apparatuses, circuits, and methods are omitted so as not to obscure the description of the invention with unnecessary detail.

[0049] To make the objectives, technical solutions, and advantages of the present invention clearer, specific embodiments will be described below in conjunction with the accompanying drawings.

[0050] Figure 1 The following is a flowchart illustrating the implementation of a fingerprint-secure login method for a cloud computer according to an embodiment of the present invention. The execution entity is a local terminal, and the details are as follows:

[0051] Step 101: Collect fingerprint data of the same finger of the user multiple times, and encrypt the fingerprint data to obtain encrypted fingerprint data.

[0052] The local terminal will use the local fingerprint module to collect fingerprint data of the same finger of the user multiple times. The fingerprint data can be a fingerprint image or fingerprint feature points.

[0053] To ensure the integrity of fingerprint data, fingerprint images from various angles need to be collected. If the overlap rate of the fingerprint images is detected to be greater than a first preset value, the user is notified to re-collect the fingerprints.

[0054] Optionally, the present invention does not limit the value of the first preset value. For example, the first preset value can be 95%, 96%, or 97%. Collecting fingerprint data with low overlap can better obtain fingerprint data from 360 degrees, thereby improving the fingerprint unlocking rate of the algorithm.

[0055] In one possible implementation, the fingerprint data is encrypted to obtain encrypted fingerprint data, including:

[0056] Obtain the salt value and key, and generate the target byte array based on the salt value and key;

[0057] Optionally, obtain a salt value consisting of irregular characters, and obtain a randomly generated integer array key.

[0058] Salt is a random value. During user registration, the system generates a random value by combining it with the user's password. This value can include random uppercase and lowercase letters, numbers, and characters, and the length can vary depending on requirements. Adding a salt to a user's password makes the encrypted ciphertext more obscure and difficult to crack. Even if a hacker obtains the value from the ciphertext, it's a salted password, not the password set by the user.

[0059] Optionally, generate a random number, and shift the random number to the left and right by the required number of bits to generate a key, which is an array of integers.

[0060] Because the salt value consists of irregular characters and the password is an array of integers, both can only generate byte arrays. In a byte array, using ASCII as an example, one English letter (case-insensitive) occupies one byte, and one Chinese character occupies two bytes. Symbols: English punctuation occupies one byte, and Chinese punctuation occupies two bytes. For example, the English period "." occupies one byte, and the Chinese period "." occupies two bytes.

[0061] Obtain the current byte of the salt value, and obtain the current byte of the key;

[0062] Perform an XOR operation on the two current bytes to obtain the first data;

[0063] The next byte of the current byte of the salt value is taken as the current byte, and the next byte of the current byte in the key is taken as the current byte. The process jumps to the step of "performing an XOR operation on the two current bytes to obtain the first data" until all bytes of the salt value and all bytes of the key have completed the XOR operation.

[0064] Generate the target byte array based on all the first data.

[0065] XOR the bytes in the salt value with the data in the key, and keep looping until all the data corresponding to the bytes in the salt value have been XORed, obtaining multiple first data. Combine the first data in sequence to obtain the target byte array used to encrypt the fingerprint data.

[0066] The number of bytes in the salt value is the same as the number of bytes in the key.

[0067] Optionally, process the fingerprint data according to a preset rule to obtain the initial fingerprint encrypted data, including:

[0068] Optionally, permute the fingerprint data according to a preset mapping rule among pre-constructed letters, numbers, and characters to obtain the initial fingerprint encrypted data. Here, the preset mapping rule is not limited in this invention and can be set according to specific requirements. For example, letter a corresponds to A, b corresponds to B, ……, 1 corresponds to!, 2 corresponds to #, 6 corresponds to * and so on. Permuting the fingerprint data can encrypt the fingerprint data once, effectively ensuring the security of the fingerprint data.

[0069] Optionally, encrypt the fingerprint data according to an asymmetric encryption algorithm to obtain the initial fingerprint encrypted data;

[0070] A commonly used asymmetric encryption algorithm is the RSA encryption algorithm. The encryption steps of the RSA encryption algorithm include:

[0071] (1) Select two large prime numbers p and q;

[0072] (2) Calculate the product of these two large prime numbers through n = p * q, where n represents the product, and p and q respectively represent two different large prime numbers;

[0073] (3) Calculate the Euler's totient function of n through z = (p - 1) * (q - 1), where z represents the value of the Euler's totient function of n;

[0074] (4) Select a number relatively prime to z in the interval (1, z) and define the selected number as e, where e represents the encryption key;

[0075] (5) Regard the fingerprint data as plaintext and divide it into data blocks P of k bits, where k represents the largest integer satisfying z

[0073] ,

[0078] , e ,

[0077] ,

[0076] ,

[0075] ,

[0074] , , k , , , , < n;

[0076] Encrypt the plaintext according to C = P e (mod n), where P represents the data block of the plaintext and C represents the ciphertext of P.

[0077] Implement the encryption of the fingerprint data through the above steps (1) to step (5), and replace the obtained ciphertext with the plaintext.

[0078] Optionally, the fingerprint data can be encrypted using a symmetric encryption algorithm to obtain the initial encrypted fingerprint data.

[0079] The commonly used symmetric encryption algorithm is the Advanced Encryption Standard (AES) algorithm. The AES encryption steps include:

[0080] The fingerprint data is subjected to byte substitution, row shifting, column obfuscation, and round key addition to obtain the initial encrypted fingerprint data.

[0081] The target byte array is subjected to a preset operation with the initial fingerprint encryption data to obtain the fingerprint encryption data.

[0082] Optionally, the preset operation is not limited in this invention and can be set according to actual needs. For example, the present invention can use XOR operation, merge operation or merge and invert operation.

[0083] When using the XOR operation, the fingerprint encryption data is obtained by using cipherText = test^key, where key represents the target byte array, test represents the initial fingerprint encryption data, and cipherText represents the encrypted data.

[0084] When using a merge operation, a programming algorithm can be used to merge two byte arrays. Similarly, when using a merge and reverse operation, a programming algorithm is still used to merge two byte arrays and then reverse the merged byte array.

[0085] The ultimate goal of the operations described above is to encrypt fingerprint data, ensuring that it is not leaked and guaranteeing its integrity and security during transmission.

[0086] Optionally, before step 101, the local terminal must first log in to the user's cloud computer account, receive the fingerprint collection command sent by the cloud server, and then collect fingerprint data of the same finger of the user multiple times, and encrypt the fingerprint data to obtain encrypted fingerprint data.

[0087] Step 102: Send a first storage request to the cloud server. The first storage request includes fingerprint encrypted data.

[0088] Optionally, in addition to the fingerprint encryption data, the first storage request may also include other bytes corresponding to the transmission channel to ensure the smooth transmission of the fingerprint encryption data.

[0089] After receiving the first storage request from the local terminal, the cloud server will decrypt the encrypted fingerprint data according to the first storage request to obtain the fingerprint data. Then, it will verify the fingerprint data. When the fingerprint data verification is successful, it will obtain the login account corresponding to the current user and save the fingerprint data and login account to the cloud server database.

[0090] Step 103: When logging into the cloud computer corresponding to the cloud server, collect the user's current fingerprint data, encrypt the current fingerprint data, and send a login request to the cloud server. The login request includes the current encrypted fingerprint data.

[0091] When a user wants to log in to the cloud computer, the fingerprint acquisition module first collects the user's current fingerprint data and encrypts the current fingerprint data using the encryption algorithm described in step 101 to obtain the current encrypted fingerprint data.

[0092] Optionally, in addition to the current fingerprint encryption data, the login request may also contain other bytes corresponding to the transmission channel to ensure the smooth transmission of the current fingerprint encryption data.

[0093] After receiving a login request from a local terminal, the cloud server decrypts the encrypted fingerprint data in the login request to obtain the current fingerprint data. It then compares the current fingerprint data with the fingerprint data in the cloud server's database. If the current fingerprint data matches the fingerprint data, it sends a verification success message to the local terminal.

[0094] Step 104: When a successful verification message is received from the cloud server, unlock the cloud computer corresponding to the cloud computer account.

[0095] If the current fingerprint data verification is successful, the cloud computer desktop corresponding to the cloud computer account associated with the current fingerprint data will be unlocked, thus enabling fingerprint data to unlock the cloud computer. This avoids the need to enter a cumbersome account and password every time you log in, which improves the convenience of logging in.

[0096] One embodiment of the present invention provides a fingerprint-secure login method for cloud computers. The method involves repeatedly collecting fingerprint data from the same finger of a user and encrypting the fingerprint data to obtain encrypted fingerprint data. A first storage request, including the encrypted fingerprint data, is sent to the cloud server. When logging into the cloud computer corresponding to the cloud server, the user's current fingerprint data is collected, encrypted, and a login request, including the encrypted fingerprint data, is sent to the cloud server. Upon receiving a verification success message from the cloud server, the cloud computer corresponding to the user's account is unlocked. This fingerprint-secure login method for cloud computers, through interaction between the local terminal and the cloud server, enables the user's fingerprint to unlock the cloud computer desktop. This solves the inconvenience and low security level of prior art requiring account and password input for login, shortens login time, and, by associating fingerprints with user accounts, ensures that the user's fingerprint can only unlock the cloud computer corresponding to the user's cloud computer account, improving user security and enabling faster and more secure login.

[0097] Figure 2 This is a flowchart illustrating the implementation of a fingerprint-secure login method for a cloud computer according to another embodiment of the present invention. The execution entity is the cloud server, as detailed below:

[0098] Step 201: Receive the first storage request sent by the local terminal, and decrypt the fingerprint encryption data according to the first storage request to obtain the fingerprint data.

[0099] The local terminal sends a first storage request to the cloud server, which includes fingerprint encrypted data.

[0100] In one possible implementation, the received encrypted fingerprint data is decrypted to obtain fingerprint data. First, a reverse preset operation is performed on the encrypted fingerprint data to obtain initial encrypted fingerprint data and a target byte array.

[0101] For example, if the preset operation is an XOR operation, then the fingerprint encryption data is XORed again. For example, the fingerprint data can be obtained by using test = cipherText^key, where key represents the target byte array, test represents the initial fingerprint encryption data, and cipherText represents the fingerprint encryption data.

[0102] The principle of the XOR operation is: cipherText^key = (test^key)^key = test^(key^key) = test.

[0103] If the default operation is to merge, then the fingerprint encrypted data will be split.

[0104] If the preset operation is a merge and reverse operation, then the fingerprint encrypted data will be reversed first and then split.

[0105] Secondly, the initial fingerprint encryption data is decrypted. For example, if the preset rule is to replace the fingerprint data according to the preset mapping rule between letters, numbers and characters to obtain the initial fingerprint encryption data, then the initial fingerprint encryption data is replaced in reverse according to the preset mapping rule to obtain the fingerprint data.

[0106] If the preset rule is an asymmetric encryption algorithm, taking RSA as an example, then a d is selected that satisfies e*d=1 (mod z), where d represents the decryption key; through P=C d The fingerprint data is calculated using the modulo n method.

[0107] If the preset rule is a symmetric encryption algorithm, taking AES as an example, then the initial fingerprint encryption data is processed by round key addition, byte substitution inversion, row bit inversion, column obfuscation inversion, and key obfuscation inversion addition to obtain the fingerprint data.

[0108] Step 202: Verify the fingerprint data. If the fingerprint data verification is successful, obtain the login account corresponding to the current user and save the fingerprint data and login account to the cloud server database.

[0109] Optionally, fingerprint data verification can be performed by verifying the first and last bytes of the fingerprint data, as well as comparing the XOR checksum and XOR checksum of the fingerprint data.

[0110] In one possible implementation, if fingerprint data verification is successful, the login account corresponding to the current user is obtained, and the fingerprint data and the login account are saved to the cloud server database, including:

[0111] If the first and last bytes of the fingerprint data are in a preset header data format, and the XOR checksum of the preset bytes in the fingerprint data is the same as the XOR checksum of the fingerprint data, obtain the login account corresponding to the current user, and save the fingerprint data and the login account to the cloud server database.

[0112] Among them, when the XOR checksum of the preset byte is the same as the XOR checksum of the fingerprint data, it can be when the XOR checksum of the second byte to the (N-2)th byte of the fingerprint data is the same as the data corresponding to the (N-1)th byte of the fingerprint data, where N is a positive integer not less than 5.

[0113] Optionally, the XOR checksum is obtained by XORing the second byte to the (N-2)th byte, and the XOR checksum is the bit after the last byte in the XOR checksum. Therefore, the XOR checksum is the data corresponding to the (N-1)th byte.

[0114] For example, the second byte to the (N-2)th byte in the fingerprint data are F3, E2, 42 and 3A, where the above bytes are in hexadecimal and are 8 bits of data.

[0115] Starting from the first byte of data, perform an XOR operation on the remaining second byte of data to obtain the result; that is, perform an XOR operation on F3 (1111 0011) and E2 (1110 0010) to obtain the result 11 (0001 0001);

[0116] The previous calculation result is XORed with the third byte of data to obtain the result again; that is, 11 (00010001) and 42 (0100 0010) are XORed to obtain the result 53 (0101 0011).

[0117] Next, perform an XOR operation on the previous calculation result and the subsequent data in sequence to obtain the XOR checksum; that is, perform an XOR operation on 53 (0101 0011) and 3A (0011 1010) to obtain the XOR checksum 69 (0110 1001).

[0118] If the data corresponding to the (N-1)th byte is 69 (0110 1001), then the XOR checksum and the XOR check word are the same, and the XOR check is successful.

[0119] In one possible implementation, if the verification is successful, the current user's login account is obtained, the fingerprint data is bound to the login account, and the successfully bound fingerprint data and login account are saved to the cloud server database.

[0120] Saving the successfully bound fingerprint data and login account to the cloud server database allows you to store the user's fingerprint information in the database and bind the user's fingerprint information with the account information, so that the user can directly log in using their fingerprint in the future.

[0121] Optionally, the stability of the network environment and equipment must be ensured during transmission. Successful verification means that the fingerprint data is considered complete and that no data loss occurs during transmission.

[0122] In one possible implementation, when verification fails, the server starts recording the number of transmission failures and sends a retransmission fingerprint command to the local terminal.

[0123] If the received fingerprint data still fails to be verified, the transmission failure count is incremented by one, and a retransmission fingerprint command is sent to the local terminal again, until the transmission failure count reaches the maximum number, at which point a re-collect fingerprint command or a transmission channel detection command is sent to the local terminal.

[0124] Among the possible reasons for verification failure are lost fingerprint data, abnormal fingerprint data, or blocked transmission channels.

[0125] Step 203: Receive the login request sent by the local terminal, decrypt the current fingerprint encryption data in the login request to obtain the current fingerprint data, and compare the current fingerprint data with the fingerprint data in the cloud server database.

[0126] The local terminal collects the user's current fingerprint data, encrypts the current fingerprint data, and sends a login request to the cloud server. The login request includes the current encrypted fingerprint data.

[0127] Optionally, if the user wants to log in using fingerprint, the decryption algorithm described in step 201 is used to decrypt the current fingerprint encryption data to obtain the current fingerprint data.

[0128] The current fingerprint data is compared with the fingerprint data in the cloud server database, including:

[0129] The fingerprint image or fingerprint feature points of the current fingerprint data are compared with the fingerprint image or fingerprint feature points of the fingerprint data in the cloud server database to obtain the matching rate of the current fingerprint data and the fingerprint data. When the matching rate is greater than the second preset value, it means that the comparison is successful.

[0130] The present invention does not limit the value of the second preset value. For example, the value of the second preset value can be 85%, 90%, or 95%.

[0131] Step 204: If the current fingerprint data matches the fingerprint data, send a verification success message to the local terminal.

[0132] When the local terminal receives a successful verification message from the cloud server, it unlocks the cloud computer corresponding to the cloud computer account, thus enabling the user to log in to the cloud computer using their fingerprint.

[0133] Optionally, if the current fingerprint data is inconsistent with the original fingerprint data, a verification failure message is sent to the local terminal. When the local terminal receives the verification failure message sent by the cloud server, it re-collects the user's current fingerprint data or logs in using the account and password.

[0134] In one possible implementation, users can freely choose their login method, such as using fingerprint or account password. In this invention, using account password for login is not limited to after fingerprint login fails.

[0135] Another embodiment of the present invention provides a fingerprint secure login method for a cloud computer. The method receives a first storage request sent by a local terminal, decrypts the encrypted fingerprint data according to the first storage request to obtain fingerprint data, verifies the fingerprint data, and if the fingerprint data verification is successful, obtains the login account corresponding to the current user, and saves the fingerprint data and login account to a cloud server database. The method also receives a login request sent by the local terminal, decrypts the current encrypted fingerprint data in the login request to obtain the current fingerprint data, compares the current fingerprint data with the fingerprint data in the cloud server database, and if the current fingerprint data matches the existing fingerprint data, sends a verification success message to the local terminal. This other embodiment of the present invention provides a fingerprint secure login method for a cloud computer by decrypting the encrypted fingerprint data sent by the local terminal to obtain fingerprint data, binding the fingerprint data with the user's login account, storing the fingerprint data and the login account, and finally comparing the current fingerprint data with the existing fingerprint data to achieve correct login to the cloud computer account.

[0136] It should be understood that the sequence number of each step in the above embodiments does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0137] The following are device embodiments of the present invention. For details not described in detail, please refer to the corresponding method embodiments described above.

[0138] Figure 3 A schematic diagram of a fingerprint security login device for a cloud computer according to an embodiment of the present invention is shown. This fingerprint security login device for the cloud computer can be a local terminal. For ease of explanation, only the parts related to the embodiment of the present invention are shown, and are described in detail below:

[0139] like Figure 3 As shown, the fingerprint security login device 3 for the cloud computer includes: a collection module 31, a sending module 32, and a processing module 33; wherein,

[0140] The acquisition module 31 is used to acquire fingerprint data of the same finger of the user multiple times and encrypt the fingerprint data to obtain encrypted fingerprint data;

[0141] Sending module 32 is used to send a first storage request to the cloud server, the first storage request including fingerprint encrypted data;

[0142] The acquisition module 31 is also used to acquire the user's current fingerprint data, encrypt the current fingerprint data, and send a login request to the cloud server when the user is about to log in to the corresponding cloud computer on the cloud server. The login request includes the current encrypted fingerprint data.

[0143] The processing module 33 is used to unlock the cloud computer corresponding to the cloud computer account when it receives a successful verification message sent by the cloud server.

[0144] In one possible implementation, the acquisition module 31 encrypts the fingerprint data to obtain encrypted fingerprint data, which is used for:

[0145] Obtain the salt value and key, and generate the target byte array based on the salt value and key;

[0146] The fingerprint data is processed according to preset rules to obtain the initial encrypted fingerprint data;

[0147] The target byte array is subjected to a preset operation with the initial fingerprint encryption data to obtain the fingerprint encryption data.

[0148] In one possible implementation, the acquisition module 31 obtains the salt value and the key, and generates a target byte array based on the salt value and the key, for:

[0149] Obtain the salt value consisting of irregular characters, and obtain the key of a randomly generated integer array;

[0150] Obtain the current byte of the salt value, and obtain the current byte of the key;

[0151] Perform an XOR operation on the two current bytes to obtain the first data;

[0152] The next byte of the current byte of the salt value is taken as the current byte, and the next byte of the current byte in the key is taken as the current byte. The process jumps to the step of "performing an XOR operation on the two current bytes to obtain the first data" until all bytes of the salt value and all bytes of the key have completed the XOR operation.

[0153] Generate the target byte array based on all the first data.

[0154] In one possible implementation, the acquisition module 31 processes the fingerprint data according to preset rules to obtain initial fingerprint encryption data, which is used for:

[0155] The fingerprint data is replaced according to the pre-built mapping rules between letters, numbers and characters to obtain the initial fingerprint encryption data;

[0156] Alternatively, the fingerprint data can be encrypted using an asymmetric encryption algorithm to obtain the initial encrypted fingerprint data.

[0157] Alternatively, the fingerprint data can be encrypted using a symmetric encryption algorithm to obtain the initial encrypted fingerprint data.

[0158] In one possible implementation, the acquisition module 31 performs a preset operation on the target byte array and the initial fingerprint encryption data to obtain fingerprint encryption data, which is used for:

[0159] Perform an XOR operation between the target byte array and the initial fingerprint encryption data to obtain the fingerprint encryption data;

[0160] Alternatively, the target byte array can be merged with the initial fingerprint encryption data to obtain the fingerprint encryption data;

[0161] Alternatively, the target byte array can be combined with the initial fingerprint encryption data and then reversed to obtain the fingerprint encryption data.

[0162] One embodiment of the present invention provides a fingerprint secure login device for cloud computers. The device collects fingerprint data from the same finger of a user multiple times, encrypts the fingerprint data to obtain encrypted fingerprint data, and sends a first storage request to the cloud server, the first storage request including the encrypted fingerprint data. When logging into the cloud computer corresponding to the cloud server, the device collects the user's current fingerprint data, encrypts the current fingerprint data, and sends a login request to the cloud server, the login request including the current encrypted fingerprint data. Upon receiving a verification success message from the cloud server, the device unlocks the cloud computer corresponding to the user's account. The fingerprint secure login method for cloud computers provided by the present invention achieves the unlocking of the cloud computer desktop by the user's fingerprint through the interaction between the local terminal and the cloud server. This solves the inconvenience and low security level of existing technologies that require entering an account and password during login, shortens the login time, and improves user security by ensuring that the user's fingerprint can only unlock the cloud computer corresponding to the user's cloud computer account, thus enabling faster and more secure user login.

[0163] Figure 4 A schematic diagram of a fingerprint security login device for a cloud computer according to another embodiment of the present invention is shown. This fingerprint security login device for a cloud computer can be a cloud server. For ease of explanation, only the parts related to the embodiment of the present invention are shown, and are described in detail below:

[0164] like Figure 4 As shown, the fingerprint security login device 4 for the cloud computer includes: a receiving module 41, a verification and storage module 42, and a sending module 43; wherein,

[0165] The receiving module 41 is used to receive a first storage request sent by the local terminal, and decrypt the fingerprint encryption data according to the first storage request to obtain fingerprint data;

[0166] The verification and storage module 42 is used to verify the fingerprint data. If the fingerprint data verification is successful, the login account corresponding to the current user is obtained, and the fingerprint data and the login account are saved to the cloud server database.

[0167] The receiving module 41 is also used to receive a login request sent by a local terminal, decrypt the current fingerprint encryption data in the login request to obtain the current fingerprint data, and compare the current fingerprint data with the fingerprint data in the cloud server database.

[0168] The sending module 43 is used to send a verification success message to the local terminal if the current fingerprint data matches the fingerprint data.

[0169] In one possible implementation, if the fingerprint data verification is successful, the verification and storage module 42 obtains the login account corresponding to the current user and saves the fingerprint data and the login account to the cloud server database for:

[0170] If the fingerprint data is in a preset header data format and the XOR verification of the fingerprint data is successful, obtain the login account corresponding to the current user, and save the fingerprint data and the login account to the cloud server database.

[0171] In one possible implementation, if the fingerprint data verification is successful, the verification and storage module 42 obtains the login account corresponding to the current user and saves the fingerprint data and the login account to the cloud server database for:

[0172] If the first and last bytes of the fingerprint data are in a preset header data format, and the XOR checksum of the preset bytes in the fingerprint data is the same as the XOR checksum of the fingerprint data, obtain the login account corresponding to the current user, and save the fingerprint data and the login account to the cloud server database.

[0173] In one possible implementation, if the first and last bytes of the fingerprint data are in a preset header data format, and the XOR checksum of the preset bytes in the fingerprint data is the same as the XOR checksum of the fingerprint data, the verification and storage module 42 obtains the login account corresponding to the current user, and saves the fingerprint data and the login account to the cloud server database for:

[0174] If the first and last bytes of the fingerprint data are in a preset header data format, and the XOR checksum of the second to N-2 bytes of the fingerprint data is the same as the data corresponding to the N-1 byte of the fingerprint data, obtain the login account corresponding to the current user, and save the fingerprint data and the login account to the cloud server database.

[0175] Where N is a positive integer not less than 5.

[0176] Another embodiment of the present invention provides a fingerprint secure login device for a cloud computer. It receives a first storage request sent by a local terminal, decrypts the encrypted fingerprint data according to the first storage request to obtain fingerprint data, verifies the fingerprint data, and if the fingerprint data verification is successful, obtains the login account corresponding to the current user, and saves the fingerprint data and login account to the cloud server database. It also receives a login request sent by the local terminal, decrypts the current encrypted fingerprint data in the login request to obtain the current fingerprint data, compares the current fingerprint data with the fingerprint data in the cloud server database, and if the current fingerprint data matches the current fingerprint data, sends a verification success message to the local terminal. Another embodiment of the present invention provides a fingerprint secure login method for a cloud computer by decrypting the encrypted fingerprint data sent by the local terminal to obtain fingerprint data, binding the fingerprint data with the user's login account, storing the fingerprint data and the login account, and finally comparing the current fingerprint data with the current fingerprint data to achieve correct login to the cloud computer account.

[0177] Figure 5 This is a schematic diagram of a terminal provided in an embodiment of the present invention. Figure 5 As shown, the terminal 5 in this embodiment includes: a processor 50, a memory 51, and a computer program 52 stored in the memory 51 and executable on the processor 50. When the processor 50 executes the computer program 52, it implements the steps in the fingerprint security login method embodiments of the various cloud computers described above, for example... Figure 1 Steps 101 to 104 shown or Figure 2 Steps 201 to 204 are shown. Alternatively, when processor 50 executes computer program 52, it implements the functions of each module / unit in the above-described device embodiments, for example... Figure 3 Modules / units 31 to 33 shown or Figure 4 The functions of modules / units 41 to 43 shown.

[0178] For example, computer program 52 can be divided into one or more modules / units, one or more of which are stored in memory 51 and executed by processor 50 to complete the present invention. One or more modules / units can be a series of computer program instruction segments capable of performing a specific function, which describe the execution process of computer program 52 in terminal 5. For example, computer program 52 can be divided into... Figure 3 Modules / units 31 to 33 shown or Figure 4 Modules / units 41 to 43 are shown.

[0179] Terminal 5 may include, but is not limited to, a processor 50 and a memory 51. Those skilled in the art will understand that... Figure 5This is merely an example of terminal 5 and does not constitute a limitation on terminal 5. It may include more or fewer components than shown, or combine certain components, or different components. For example, the terminal may also include input / output devices, network access devices, buses, etc.

[0180] The processor 50 may be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor.

[0181] The memory 51 can be an internal storage unit of the terminal 5, such as the hard disk or RAM of the terminal 5. The memory 51 can also be an external storage device of the terminal 5, such as a plug-in hard disk, Smart Media Card (SMC), Secure Digital (SD) card, or Flash Card equipped on the terminal 5. Furthermore, the memory 51 can include both internal and external storage units of the terminal 5. The memory 51 is used to store computer programs and other programs and data required by the terminal. The memory 51 can also be used to temporarily store data that has been output or will be output.

[0182] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the above-described division of functional units and modules is merely an example. In practical applications, the above functions can be assigned to different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiments can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit. Furthermore, the specific names of the functional units and modules are only for easy differentiation and are not intended to limit the scope of protection of this application. The specific working process of the units and modules in the above system can be referred to the corresponding process in the foregoing method embodiments, and will not be repeated here.

[0183] In the above embodiments, the descriptions of each embodiment have different focuses. For parts that are not described in detail or recorded in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0184] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this invention.

[0185] In the embodiments provided by this invention, it should be understood that the disclosed devices / terminals and methods can be implemented in other ways. For example, the device / terminal embodiments described above are merely illustrative. For instance, the division of modules or units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between devices or units may be electrical, mechanical, or other forms.

[0186] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0187] Furthermore, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0188] If integrated modules / units are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the methods of the above embodiments of the present invention can also be implemented by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium. When executed by a processor, the computer program can implement the steps of the fingerprint security login method embodiments of the various cloud computers described above. The computer program includes computer program code, which can be in the form of source code, object code, executable files, or certain intermediate forms. The computer-readable medium can include: any entity or device capable of carrying computer program code, recording media, USB flash drives, portable hard drives, magnetic disks, optical disks, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signals, telecommunication signals, and software distribution media, etc.

[0189] The above embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to limit it. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be included within the protection scope of the present invention.

Claims

1. A fingerprint-secure login method for cloud computers, applied to a local terminal, characterized in that, include: Fingerprint data of the same finger of a user is collected multiple times and then encrypted to obtain encrypted fingerprint data; The step of encrypting the fingerprint data to obtain encrypted fingerprint data includes: obtaining a salt value and a key; generating a target byte array based on the salt value and the key; processing the fingerprint data according to a preset rule to obtain initial encrypted fingerprint data; and performing a preset operation on the target byte array and the initial encrypted fingerprint data to obtain encrypted fingerprint data. The steps of obtaining the salt value and key, and generating a target byte array based on the salt value and key, include: obtaining a salt value composed of irregular characters, and obtaining a randomly generated integer array key; performing an XOR operation on the bytes in the salt value and the bytes in the key until all the data corresponding to the bytes in the salt value are XORed to obtain multiple first data, and combining the first data in order to obtain a target byte array used to encrypt fingerprint data; Send a first storage request to the cloud server, the first storage request including the fingerprint encryption data; When logging into the cloud computer corresponding to the cloud server, the user's current fingerprint data is collected, the current fingerprint data is encrypted, and a login request is sent to the cloud server. The login request includes the encrypted current fingerprint data. Upon receiving a successful verification message from the cloud server, the cloud computer corresponding to the cloud computer account is unlocked.

2. The fingerprint security login method for cloud computers according to claim 1, characterized in that, The process of processing the fingerprint data according to preset rules to obtain initial fingerprint encryption data includes: The fingerprint data is permuted according to a pre-constructed mapping rule between letters, numbers, and characters to obtain the initial fingerprint encryption data; Alternatively, the fingerprint data can be encrypted using an asymmetric encryption algorithm to obtain initial encrypted fingerprint data; Alternatively, the fingerprint data can be encrypted using a symmetric encryption algorithm to obtain initial encrypted fingerprint data.

3. The fingerprint security login method for cloud computers according to claim 1, characterized in that, The step of performing a preset operation on the target byte array and the initial fingerprint encryption data to obtain fingerprint encryption data includes: The target byte array is XORed with the initial fingerprint encryption data to obtain the fingerprint encryption data. Alternatively, the target byte array can be merged with the initial fingerprint encryption data to obtain the fingerprint encryption data; Alternatively, the target byte array can be combined with the initial fingerprint encryption data and then reversed to obtain the fingerprint encryption data.

4. A fingerprint-secure login method for cloud computers, applied to a cloud server, characterized in that, include: Receive a first storage request sent by a local terminal, and decrypt the fingerprint encryption data according to the first storage request to obtain fingerprint data; The fingerprint encryption data specifically includes: obtaining a salt value and a key; generating a target byte array based on the salt value and the key; processing the fingerprint data according to a preset rule to obtain initial fingerprint encryption data; and performing a preset operation on the target byte array and the initial fingerprint encryption data to obtain fingerprint encryption data. The steps of obtaining the salt value and key, and generating a target byte array based on the salt value and key, include: obtaining a salt value composed of irregular characters, and obtaining a randomly generated integer array key; performing an XOR operation on the bytes in the salt value and the bytes in the key until all the data corresponding to the bytes in the salt value are XORed to obtain multiple first data, and combining the first data in order to obtain a target byte array used to encrypt fingerprint data; The fingerprint data is verified. If the fingerprint data is successfully verified, the login account corresponding to the current user is obtained, and the fingerprint data and the login account are saved to the cloud server database. The system receives a login request sent by the local terminal, decrypts the current fingerprint encryption data in the login request to obtain the current fingerprint data, and compares the current fingerprint data with the fingerprint data in the cloud server database. If the current fingerprint data matches the fingerprint data, a verification success message is sent to the local terminal.

5. The fingerprint security login method for cloud computers according to claim 4, characterized in that, If the fingerprint data verification is successful, the login account corresponding to the current user is obtained, and the fingerprint data and the login account are saved to the cloud server database, including: If the fingerprint data is in a preset header data format and the XOR verification of the fingerprint data is successful, obtain the login account corresponding to the current user, and save the fingerprint data and the login account to the cloud server database.

6. The fingerprint security login method for cloud computers according to claim 5, characterized in that, If the fingerprint data verification is successful, the login account corresponding to the current user is obtained, and the fingerprint data and the login account are saved to the cloud server database, including: If the first and last bytes of the fingerprint data are in a preset header data format, and the XOR checksum of the preset bytes in the fingerprint data is the same as the XOR checksum of the fingerprint data, obtain the login account corresponding to the current user, and save the fingerprint data and the login account to the cloud server database.

7. The fingerprint security login method for cloud computers according to claim 6, characterized in that, If the first and last bytes of the fingerprint data are in a preset header data format, and the XOR checksum of the preset bytes in the fingerprint data is the same as the XOR checksum of the fingerprint data, the login account corresponding to the current user is obtained, and the fingerprint data and the login account are saved to the cloud server database, including: If the first byte and the last byte of the fingerprint data are in a preset header data format, and the XOR checksum of the second byte to the (N-2)th byte of the fingerprint data is the same as the data corresponding to the (N-1)th byte of the fingerprint data, obtain the login account corresponding to the current user, and save the fingerprint data and the login account to the cloud server database. Where N is a positive integer not less than 5.

8. A terminal, comprising a memory and a processor, the memory for storing a computer program, the processor for calling and running the computer program stored in the memory, characterized in that, When the processor executes the computer program, it implements the steps of the method as described in any one of claims 1 to 3 or any one of claims 4 to 7.

Images