Cross-terminal fingerprint authentication method, system, electronic device, medium and program product

Abstract

The application discloses a cross-terminal fingerprint authentication method, system, electronic equipment, medium and program product, relates to the field of network security, and discloses a cross-terminal fingerprint authentication method, which comprises the following steps: when an application instruction of cross-terminal fingerprint authentication is detected, the application instruction is encrypted and signed, and the encrypted and signed application instruction is sent to an operator server; first fingerprint template ciphertext data fed back by the operator server is received; the first fingerprint template ciphertext data is decrypted and verified to obtain first fingerprint template data; actual fingerprint data of a user is acquired, and the actual fingerprint data is compared with the first fingerprint template data; if the comparison is successful, a fingerprint verification credential is generated, and the fingerprint verification credential is sent to the operator server. The application can realize fingerprint authentication through other terminals when a SIM card is lost or damaged, thereby improving the fingerprint authentication effect.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of network security, and in particular to a cross-terminal fingerprint authentication method and system, an electronic device, and a computer storage medium. BACKGROUND

[0002] Fingerprint authentication technology can be applied to mobile device unlocking, financial and payment fields, access control systems of enterprises and organizations, computer login, and sensitive information access control, etc. At present, fingerprint data is stored in a SIM (Subscriber Identity Module) card, and fingerprint comparison is performed by the SIM card in the fingerprint recognition process, so that users can use their SIM cards on different devices and still enjoy the convenience and security of fingerprint recognition without relying on specific fingerprint sensor hardware. However, this approach has certain defects, such as only the user can complete fingerprint verification on the local machine, if the SIM card is lost or lost, the fingerprint template needs to be written to a new SIM card again, and fingerprint collection needs to be performed again to perform fingerprint authentication, thereby affecting the fingerprint authentication effect. SUMMARY

[0003] The main purpose of the present application is to provide a front-end application access method and system, an electronic device, and a computer storage medium, which aims to solve the technical problem of how to quickly perform fingerprint authentication through other terminals when the SIM card is lost or lost, thereby improving the fingerprint authentication effect.

[0004] To achieve the above-mentioned purpose, the present application provides a cross-terminal fingerprint authentication method applied to a second mobile terminal of a plurality of mobile terminals, wherein the plurality of mobile terminals comprises a first mobile terminal, and the method comprises:

[0005] When detecting an application instruction of cross-terminal fingerprint authentication, the application instruction is encrypted and signed, and the encrypted and signed application instruction is sent to an operator server, wherein the application instruction comprises a first SIM card identifier of the first mobile terminal and a second SIM card identifier of the second mobile terminal; the operator server decrypts and verifies the encrypted and signed application instruction, and performs secondary encryption and signing on matching fingerprint template ciphertext data in the blockchain that matches the first SIM card identifier, to obtain first fingerprint template ciphertext data sent to the second mobile terminal;

[0006] Receiving the first fingerprint template ciphertext data fed back by the operator server, decrypting and verifying the first fingerprint template ciphertext data to obtain first fingerprint template data, wherein the first fingerprint template ciphertext data comprises first fingerprint template data encrypted according to a first key of the first mobile terminal;

[0007] acquiring actual fingerprint data of the user and comparing the actual fingerprint data with the first fingerprint template data;

[0008] if the comparison is successful, generating a fingerprint verification credential, and sending the fingerprint verification credential to the operator server, wherein the operator server uploads the fingerprint verification credential to a blockchain.

[0009] In an embodiment, before the step of encrypting and signing the application instruction, the method comprises:

[0010] receiving a key exchange request sent by the operator server, wherein the first mobile terminal sends a key exchange request containing a second SIM card identifier of a second mobile terminal and a first public key of the first mobile terminal to the operator server, and the operator server sends a key exchange request to the second mobile terminal according to the second SIM card identifier;

[0011] encrypting a second public key in the second mobile terminal according to the first public key in the key exchange request to obtain a first encryption result, and feeding back the first encryption result to the operator server, wherein the operator server sends the first encryption result to the first mobile terminal, the first mobile terminal decrypts the first encryption result to obtain the second public key, and performs key exchange with the second mobile terminal according to the second public key.

[0012] In an embodiment, the method further comprises:

[0013] determining digital identity information corresponding to the second SIM card in the second mobile terminal, and collecting a user fingerprint image corresponding to the digital identity information;

[0014] extracting fingerprint features from the user fingerprint image to obtain second fingerprint template data;

[0015] determining a fingerprint template hosting service instruction according to the second fingerprint template data, wherein the fingerprint template hosting service instruction comprises a second SIM card identifier, a hosting key identifier and the second fingerprint template data;

[0016] sending the fingerprint template hosting service instruction to the operator server, wherein the operator server determines a hosting key according to the second SIM card identifier and the hosting key identifier, encrypts the second fingerprint template data according to the hosting key, and uploads the encrypted second fingerprint template data to a blockchain.

[0017] In addition, to achieve the above-mentioned purposes, the application also provides a cross-terminal fingerprint authentication method applied to an operator server, and the method comprises:

[0018] receive the encrypted and signed application instruction sent by the second mobile terminal, and perform decryption verification to obtain the application instruction, wherein the application instruction comprises a first SIM card identifier of the first mobile terminal and a second SIM card identifier of the second mobile terminal;

[0019] obtain matching fingerprint template ciphertext data in the blockchain that matches the first SIM card identifier, and perform secondary encryption and signing on the matching fingerprint template ciphertext data to obtain first fingerprint template ciphertext data;

[0020] send the first fingerprint template ciphertext data to the second mobile terminal, wherein the second mobile terminal performs decryption verification on the first fingerprint template ciphertext data to obtain first fingerprint template data, and sends the generated fingerprint verification credential to the operator server when the actual fingerprint data of the user is successfully compared with the first fingerprint template data;

[0021] receive the fingerprint verification credential fed back by the second mobile terminal, and upload the fingerprint verification credential to the blockchain.

[0022] In an embodiment, before the step of receiving the encrypted and signed application instruction sent by the second mobile terminal, the method comprises:

[0023] If the key exchange request containing the second SIM card identifier of the second mobile terminal and the first public key of the first mobile terminal sent by the first mobile terminal is received, then send a key exchange request to the second mobile terminal according to the second SIM card identifier; wherein the second mobile terminal encrypts the second public key in the second mobile terminal according to the first public key in the key exchange request to obtain a first encryption result, and sends the first encryption result to the operator server;

[0024] receive the first encryption result sent by the second mobile terminal, and feed back the first encryption result to the first mobile terminal, wherein the first mobile terminal decrypts the first encryption result to obtain the second public key, and performs key exchange with the second mobile terminal according to the second public key.

[0025] In an embodiment, the method comprises:

[0026] If the second mobile terminal sends a fingerprint template hosting service instruction, a hosting key is determined according to the second SIM card identifier and the hosting key identifier in the fingerprint template hosting service instruction; wherein the second mobile terminal determines the digital identity information corresponding to the second SIM card, collects the user fingerprint image corresponding to the digital identity information, extracts the fingerprint features of the user fingerprint image to obtain the second fingerprint template data, determines the fingerprint template hosting service instruction according to the fingerprint template data, and sends the fingerprint template hosting service instruction to the operator server;

[0027] The second fingerprint template data in the fingerprint template hosting service instruction is encrypted according to the hosting key, and the encrypted second fingerprint template data is uploaded to the block chain.

[0028] In addition, to achieve the above-mentioned purpose, the application also provides a cross-terminal fingerprint authentication system, comprising a plurality of mobile terminals and an operator server, the plurality of mobile terminals comprising a first mobile terminal and a second mobile terminal,

[0029] The second mobile terminal is configured to encrypt and sign the application instruction when detecting the application instruction of cross-terminal fingerprint authentication, and send the encrypted and signed application instruction to the operator server, wherein the application instruction comprises a first SIM card identifier of the first mobile terminal and a second SIM card identifier of the second mobile terminal.

[0030] The operator server is configured to receive the encrypted and signed application instruction sent by the second mobile terminal, and perform decryption verification to obtain the application instruction, obtain the matching fingerprint template ciphertext data matching the first SIM card identifier in the block chain, perform secondary encryption and signing on the matching fingerprint template ciphertext data to obtain the first fingerprint template ciphertext data, and send the first fingerprint template ciphertext data to the second mobile terminal.

[0031] The second mobile terminal is configured to receive the first fingerprint template ciphertext data fed back by the operator server, perform decryption verification on the first fingerprint template ciphertext data to obtain the first fingerprint template data, obtain the actual fingerprint data of the user, and compare the actual fingerprint data with the first fingerprint template data; if the comparison is successful, a fingerprint verification credential is generated, and the fingerprint verification credential is sent to the operator server.

[0032] The operator server is configured to receive the fingerprint verification credential fed back by the second mobile terminal, and upload the fingerprint verification credential to the block chain.

[0033] In addition, to achieve the above object, the present application also provides an electronic device, comprising a memory, a processor, and a cross-terminal fingerprint authentication program stored in the memory and executable on the processor, wherein the cross-terminal fingerprint authentication program implements the steps of the cross-terminal fingerprint authentication method as described above when executed by the processor.

[0034] In addition, to achieve the above object, the present application also provides a medium, which is a computer readable storage medium, wherein the computer storage medium stores a cross-terminal fingerprint authentication program, and the cross-terminal fingerprint authentication program implements the steps of the cross-terminal fingerprint authentication method as described above when executed by a processor.

[0035] In addition, to achieve the above object, the present application also provides a program product, which comprises a computer program product, wherein the computer program product comprises a cross-terminal fingerprint authentication program, and the cross-terminal fingerprint authentication program implements the steps of the cross-terminal fingerprint authentication method as described above when executed by a processor.

[0036] In the embodiment of the present application, the second mobile terminal encrypts and signs the application instruction when detecting the application instruction of cross-terminal fingerprint authentication, and sends the encrypted and signed application instruction to the operator server. Since the application instruction includes the first SIM card identifier of the first mobile terminal and the second SIM card identifier of the second mobile terminal, the user can perform subsequent fingerprint authentication operation with the help of the second mobile terminal and the operator server when the SIM card of the first mobile terminal is lost. The operator server decrypts and verifies the encrypted and signed application instruction, re-encrypts the matching fingerprint template ciphertext data in the blockchain that matches the first SIM card identifier to obtain the first fingerprint template ciphertext data and sends it to the second mobile terminal, thereby realizing the management of the first fingerprint template ciphertext data of the first mobile terminal through the operator server and the blockchain. After detecting that the second mobile terminal obtains the authorization of the corresponding user, the first fingerprint template ciphertext data is sent to the second mobile terminal, so that the user can perform cross-terminal fingerprint authentication on the second mobile terminal. The actual fingerprint data of the user is compared with the first fingerprint template data, and if the comparison is successful, a fingerprint verification credential is generated and uploaded to the blockchain for storage through the operator server. Thus, the fingerprint of the first mobile terminal can be authenticated through the second mobile terminal, and the fingerprint authentication can be quickly performed through other terminals when the SIM card is lost or damaged, thereby improving the fingerprint authentication effect. BRIEF DESCRIPTION OF DRAWINGS

[0037] Figure 1 Flowchart of the first embodiment of the cross-terminal fingerprint authentication method of the present application;

[0038] Figure 2Flowchart of the second embodiment of the cross-terminal fingerprint authentication method of the present application;

[0039] Figure 3 Flowchart of the key exchange between mobile terminals in the cross-terminal fingerprint authentication method of the present application;

[0040] Figure 4 Flowchart of the third embodiment of the cross-terminal fingerprint authentication method of the present application;

[0041] Figure 5 Flowchart of the process in which the operator server stores the fingerprint data into the blockchain network in the cross-terminal fingerprint authentication method of the present application;

[0042] Figure 6 Flowchart of the overall process in the cross-terminal fingerprint authentication method of the present application;

[0043] Figure 7 Device structure diagram of the hardware operating environment involved in the cross-terminal fingerprint authentication method of the present application.

[0044] The object implementation, functional features and advantages of the present application will be further described with reference to the embodiments and the accompanying drawings. DETAILED DESCRIPTION

[0045] It should be understood that the specific embodiments described herein are merely intended to explain the present application and not to limit the present application.

[0046] The embodiments of the present application are to avoid the defects that only the user on the local machine can complete the fingerprint verification, or due to the risk of SIM card loss or damage, after loss or damage, the fingerprint template must be written to the new SIM card again, and the fingerprint collection must be performed again to perform the fingerprint authentication, which affects the authentication experience of the user. Therefore, a cross-terminal fingerprint authentication method is provided, which involves a user's mobile terminal, an operator server (such as a server where an operator TSM (Trusted Service Manager) is located), a blockchain network, and a smart contract model. The users register the blockchain network through their respective mobile terminals, the fingerprint template data is stored in the respective blockchain card application, and the respective fingerprint data is uploaded to the blockchain node server. When the SIM card of a certain user is unavailable, according to the fingerprint authentication sharing operation of the user, the operator server will generate a credential using a smart contract service to allow the user to authorize other users registered in the blockchain network to access the blockchain to obtain the fingerprint data of the user, complete the fingerprint authentication of the user, and realize the cross-terminal SIM card fingerprint authentication.

[0047] Optionally, the embodiments of the present application also provide a cross-terminal fingerprint authentication system, and the system architecture of the system can include a mobile terminal of a user 2 (an authorized user), a mobile terminal (i.e., a target mobile terminal) of a user 1 (an authorized user), an operator server (hereinafter referred to as an operator TSM for example), a blockchain network, and a smart contract service.

[0048] Optionally, the mobile terminal of the user (including the mobile terminal of the user 1 and the mobile terminal of the user 2) is used to access the blockchain, load the SIM card or access the user SIM card fingerprint template data, and the fingerprint template data of the user is stored in the blockchain.

[0049] The fingerprint authentication card application is a blockchain card application, which can be used to manage user fingerprint data, fingerprint identification, fingerprint authentication business authorization and the like, and the fingerprint authentication card application needs to be installed into the SIM card of the mobile terminal, including the SIM card of the mobile terminal of the user 1 and the SIM card of the mobile terminal of the user 2.

[0050] The operator TSM is used to assist the user in managing the user SIM card, provide the smart contract service, assist the user in fingerprint data on-chain and security management and the like, and assist the fingerprint authentication capability authorization of the SIM card of the mobile terminal of the user 1 and the SIM card of the mobile terminal of the user 2 through organization special instructions.

[0051] The smart contract service is controlled by the operator TSM, can generate authorized other data, can host the user sharing key index, saves the verification credential on-chain through the operator TSM, and the smart contract is published on the blockchain network through the operator.

[0052] Optionally, the user 1 and the user 2 register the blockchain network through the respective mobile terminals, the fingerprint template data is stored in the respective SIM card applications, and the respective fingerprint template ciphertext data is uploaded to the operator TSM blockchain server, so as to complete the smart contract signing (i.e., fingerprint template hosting). When the SIM card of the user 1 is unavailable, according to the fingerprint authentication sharing operation of the user 1, the operator TSM generates the fingerprint template ciphertext authentication data by means of the smart contract service, allows the user 1 to authorize the user 2 to complete the fingerprint authentication of the user 1, and at the same time stores the fingerprint verification credential on-chain, so as to achieve the cross-terminal completion of the user 1 fingerprint comparison function on the business side.

[0053] Optionally, in this embodiment, the mobile terminals of different users can be used as blockchain nodes, and the fingerprint authentication SIM card application is designed to obtain the fingerprint information of others and complete authentication in combination with a smart contract. In this embodiment, the SIM card in the mobile terminal can send a fingerprint template hosting service application to the operator TSM in a remote manner, and cross-terminal fingerprint authorization authentication is completed through a smart contract. The user's SIM card core resource SEID (Security Environment ID, security environment identifier) or mobile phone number can also be used as a dynamic application factor, and by means of dynamic key exchange, it is ensured that cross-terminal fingerprint authentication can be safely and reliably completed in any operator network environment, and the authentication information is saved as a transaction voucher and saved on the chain, ensuring that the verification transaction is traceable.

[0054] Optionally, in this embodiment, the cross-terminal SIM card fingerprint authentication provides that when the user faces the loss or damage of the SIM card, it is not necessary to go to a designated place to write a new fingerprint template for the SIM card and collect fingerprints again to perform fingerprint authentication, thereby improving the user's authentication experience. Since the blockchain is a decentralized distributed ledger technology, data is stored on multiple nodes in the network rather than being centralized on a single centralized server. This means that the user's fingerprint template ciphertext data will not be stored on a single agency or service provider's server, but in a decentralized manner on multiple nodes in the blockchain network. This improves the security and attack resistance of data, as there is no single point of failure or single attack target. The characteristics of the blockchain make all data transactions and operations recordable and traceable. This means that users can track and verify the use of their own fingerprint data on the blockchain, ensuring that data is used legally and transparently. It can also be used on a variety of terminal devices, such as smartphones, tablets, laptops, etc. Users only need to register once on a device that supports fingerprint authentication, and fingerprint authentication can be achieved on multiple devices without the need to register and manage multiple identity verification credentials. Storing fingerprint data on the blockchain allows users to better exercise their data sovereignty. Users can choose to authorize fingerprint data to specific applications or services without storing data on centralized servers. This increases user control over personal data and privacy protection.

[0055] Optionally, the present embodiment can be applied to the field of secure payment and financial services. By combining digital identity and fingerprint authentication in the SIM card, secure offline payment and financial transactions can be realized, the security of transactions can be improved, and fraud can be prevented. It can also be applied to access control systems, that is, digital identity and fingerprint features in the SIM card can be used for identity verification to ensure that only authorized users can enter a specific area or use a specific device. And since the digital identity and fingerprint authentication are combined in the SIM card, it can be used for unlocking and application authorization of mobile devices. Users can use fingerprint authentication to unlock their phones or authorize access to specific applications, providing a more convenient and secure user experience.

[0056] Reference Figure 1 The present application provides a cross-terminal fingerprint authentication method applied to a key management system. In the first embodiment of the cross-terminal fingerprint authentication method, the cross-terminal fingerprint authentication method is applied to a second mobile terminal of a plurality of mobile terminals, the plurality of mobile terminals further comprising a first mobile terminal, and the cross-terminal fingerprint authentication method comprises steps S10-S40.

[0057] Step S10, when detecting an application instruction of cross-terminal fingerprint authentication, encrypting and signing the application instruction, and sending the encrypted and signed application instruction to an operator server;

[0058] It should be noted that the application instruction includes a first SIM identifier of the first mobile terminal and a second SIM identifier of the second mobile terminal. Optionally, the first SIM identifier can include a SIM card number or SEID of the first mobile terminal. The second SIM identifier can include a SIM card number or SEID of the second mobile terminal. The SIM card number can be a mobile phone number.

[0059] Optionally, the operator server decrypts and verifies the encrypted and signed application instruction, and re-encrypts and signs the matching fingerprint template ciphertext data in the blockchain that matches the first SIM card identifier, to obtain the first fingerprint template ciphertext data sent to the second mobile terminal.

[0060] Optionally, the present embodiment can be applied to any of a plurality of mobile terminals, and only at least one of the mobile terminals is exemplified herein.

[0061] Optionally, the user corresponding to the first mobile terminal is user 1, and the user corresponding to the second mobile terminal is user 2. Optionally, the first mobile terminal can be a mobile phone, a tablet computer, etc. The second mobile terminal can be a mobile phone, a tablet computer, etc. And the first mobile terminal and the second mobile terminal belong to two different mobile terminals. Optionally, the operator server can be a server held by an operator.

[0062] Optionally, before performing cross-terminal fingerprint authentication, each mobile terminal stores the fingerprint template data of the corresponding user through the operator server to the blockchain in an encrypted manner. Optionally, each mobile terminal can authorize which mobile terminals can perform cross-terminal fingerprint tasks and perform corresponding public-private key exchange.

[0063] Optionally, when the SIM card in the mobile terminal of a certain user is unavailable, the operator TSM will generate a credential using a smart contract service to allow the user to authorize other users registered with the blockchain network to access the blockchain to obtain the fingerprint data of the user for fingerprint authentication. For example, if there is a mobile terminal of user 1 and a mobile terminal of user 2, if the SIM card in the mobile terminal of user 1 is unavailable, user 1 can use the mobile terminal of user 2 to perform cross-terminal fingerprint authentication.

[0064] Optionally, the mobile terminal of user 1 can perform cross-terminal fingerprint authorization authentication application through a smart contract.

[0065] Optionally, a secure channel can be established between the mobile terminal of user 2 and the operator server, and user 1 can touch the corresponding cross-terminal fingerprint authentication instruction on the mobile terminal of user 2 to trigger the generation of a cross-terminal fingerprint authentication application instruction, encrypt the application instruction through the secure channel, sign the encrypted application instruction through the private key of SIM card 2 in the mobile terminal of user 2, obtain the encrypted and signed application instruction, and send the encrypted and signed application instruction to the operator server.

[0066] Optionally, the application instruction can include a first SIM identifier of the target mobile terminal and a second SIM identifier of the mobile terminal, as well as current timestamp and other parameters. The first SIM identifier can be identifier information representing the SIM card in the target mobile terminal, such as the identifier information of the SIM card in the mobile terminal of user 1, for example, the phone number or SEID of the SIM card in the target mobile terminal. The second SIM identifier can be identifier information representing the SIM card in the mobile terminal, such as the identifier information of the SIM card in the mobile terminal of user 2, for example, the phone number or SEID of the SIM card in the mobile terminal.

[0067] Optionally, after determining the application instruction, the application instruction of the mobile terminal can be encrypted through the secure channel key to obtain the encrypted application instruction, and then signed through the private key of SIM card 2 to obtain the encrypted and signed application instruction, and the application instruction is sent to the operator server.

[0068] The operator server needs to decrypt and verify the application instruction after receiving the encrypted and signed application instruction to obtain the application instruction containing the first SIM identifier of the first mobile terminal and the second SIM identifier of the second mobile terminal. According to the first SIM identifier, the matching fingerprint template ciphertext data matched with the first SIM identifier is queried in the node of the block chain, and the first fingerprint template ciphertext data is obtained by encrypting the matching fingerprint template ciphertext data twice and sent to the second mobile terminal.

[0069] In step S20, the first fingerprint template ciphertext data fed back by the operator server is received, and the first fingerprint template ciphertext data is decrypted and verified to obtain the first fingerprint template data.

[0070] It should be noted that the first fingerprint template ciphertext data includes the first fingerprint template data encrypted according to the first key of the target mobile terminal.

[0071] Optionally, after receiving the first fingerprint template ciphertext data fed back by the operator server, the second mobile terminal decrypts and verifies the first fingerprint template ciphertext data to obtain the first fingerprint template data. The first fingerprint template data contains the fingerprint features of the user stored in the first SIM card in the first mobile terminal.

[0072] In step S30, the actual fingerprint data of the user is obtained, and the actual fingerprint data is compared with the first fingerprint template data.

[0073] Optionally, the second mobile terminal obtains the actual fingerprint data of the user and compares the actual fingerprint data with the first fingerprint template data. Optionally, the actual fingerprint data can be subjected to fingerprint feature extraction, the extracted actual fingerprint features are compared with the fingerprint features in the first fingerprint template data, if the similarity is greater than a preset similarity threshold, it is determined that the actual fingerprint data and the first fingerprint template data are compared successfully, if the similarity is less than or equal to the preset similarity threshold, it is determined that the actual fingerprint data and the first fingerprint template data are compared unsuccessfully, and the fingerprint verification operation is stopped.

[0074] Optionally, in one scenario, after obtaining the actual fingerprint data of the user, the actual fingerprint data can be compared with the second fingerprint template data stored in the second SIM card in the second mobile terminal, if the comparison fails, the operation step of comparing the actual fingerprint data with the first fingerprint template data is performed again.

[0075] In step S40, if the comparison is successful, a fingerprint verification credential is generated, and the fingerprint verification credential is sent to the operator server.

[0076] It should be noted that the operator server uploads the fingerprint verification credential to the block chain.

[0077] Optionally, if the comparison is successful, it is determined that the cross-terminal fingerprint verification is successful. At this time, a fingerprint verification credential is generated, and the fingerprint verification credential is sent to the operator server. The operator server uploads the fingerprint verification credential to the blockchain node for on-chain storage. The fingerprint verification credential is used to represent the information related to the cross-terminal fingerprint verification of the user using the second mobile terminal.

[0078] Optionally, the second mobile terminal can use the second private key in the second mobile terminal to sign the first SIM card identifier + timestamp + second SIM card identifier + service information and other related information to generate a fingerprint verification credential, and send the fingerprint verification credential to the operator server. When the operator server checks that the integrity of the fingerprint verification credential meets the requirements, it is stored on the chain.

[0079] Optionally, after completing the cross-terminal fingerprint verification operation, the second mobile terminal will periodically or in real time delete the first fingerprint template data and the actual fingerprint data.

[0080] In this embodiment, the second mobile terminal encrypts and signs the application instruction when detecting the cross-terminal fingerprint authentication application instruction, and sends the encrypted and signed application instruction to the operator server. Since the application instruction includes the first SIM card identifier of the first mobile terminal and the second SIM card identifier of the second mobile terminal, the user can use the second mobile terminal and the operator server to perform subsequent fingerprint authentication operations when the SIM card of the first mobile terminal is lost. The operator server decrypts and verifies the encrypted and signed application instruction, re-encrypts the matching fingerprint template ciphertext data in the blockchain that matches the first SIM card identifier, obtains the first fingerprint template ciphertext data, and sends it to the second mobile terminal. In this way, the first fingerprint template ciphertext data of the first mobile terminal can be managed by the operator server and the blockchain. After detecting that the second mobile terminal obtains the authorization of the corresponding user, the first fingerprint template ciphertext data is sent to the second mobile terminal, so that the user can perform cross-terminal fingerprint authentication on the second mobile terminal. The actual fingerprint data of the user is compared with the first fingerprint template data. If the comparison is successful, a fingerprint verification credential is generated, which is uploaded to the blockchain by the operator server for storage. In this way, the fingerprint of the first mobile terminal can be authenticated by the second mobile terminal, and the fingerprint authentication effect is improved when the SIM card is lost or lost.

[0081] Further, based on the first embodiment of the present application, a second embodiment of the cross-terminal fingerprint authentication method of the present application is proposed. In this embodiment, referring to Figure 2 Before the step S10 of encrypting and signing the application instruction, the steps a10-a20 are included.

[0082] Step a10, receiving the key exchange request sent by the operator server;

[0083] It should be noted that the first mobile terminal sends the key exchange request containing the second SIM card identifier of the second mobile terminal and the first public key of the first mobile terminal to the operator server, and the operator server sends the key exchange request to the second mobile terminal according to the second SIM card identifier.

[0084] Optionally, when performing cross-terminal fingerprint verification, the first mobile terminal can share fingerprint authentication with the second mobile terminal through the operator server, that is, perform cross-terminal fingerprint authentication.

[0085] Optionally, before performing cross-terminal fingerprint verification, the first mobile terminal checks that the second mobile terminal has enabled fingerprint authentication capability and has signed a smart contract through the operator server.

[0086] Optionally, the first mobile terminal can send a key exchange request to the operator server through a short message channel or the like. It should be noted that the key exchange request can contain the SIM card identifier of the other mobile terminal trusted by the first mobile terminal, such as the second SIM card identifier of the second mobile terminal. The key exchange request includes the second SIM card identifier of the second mobile terminal and the first public key of the first mobile terminal. Optionally, the key exchange request can also include the SIM card identifier of the other mobile terminal, which is not limited here. Optionally, the operator server sends the key exchange request to the mobile terminal corresponding to each SIM card identifier in the key exchange request according to each SIM card identifier, such as the second mobile terminal. The second mobile terminal receives the key exchange request, and the mobile terminal corresponding to the other SIM card identifier will also receive the key exchange request. After receiving the key exchange request, the other mobile terminal performs the same steps as the second mobile terminal to perform key exchange (including public-private key exchange), and here only the second mobile terminal is taken as an example for illustration.

[0087] Step a20, encrypting the second public key in the second mobile terminal according to the first public key in the key exchange request to obtain a first encryption result, and feeding back the first encryption result to the operator server.

[0088] It should be noted that the operator server sends the first encryption result to the first mobile terminal, and the first mobile terminal decrypts the first encryption result to obtain the second public key and performs key exchange with the second mobile terminal according to the second public key.

[0089] Optionally, the public key generated in the second mobile terminal can be determined to be the second public key, and the private key in the second mobile terminal can be determined to be the second private key. The second public key is encrypted using the first public key in the key exchange request to obtain a first encryption result, and the first encryption result is sent to the first mobile terminal via the operator server. The first mobile terminal decrypts the first encryption result using its own first private key to obtain the second public key, and then performs a key exchange with the second mobile terminal based on the second public key, including exchanging the first private key and key index. The key exchange can be performed using a key envelope.

[0090] Alternatively, the second mobile terminal may also use the operator server to send its public key to a mobile terminal it trusts, such as the first mobile terminal. In this case, the second mobile terminal in steps a10-a20 above may be replaced with the first mobile terminal, and the first mobile terminal may be replaced with the second mobile terminal, and the same steps and processes may be performed to achieve key exchange between the terminals.

[0091] For example, Figure 3 As shown, SIM card 1 initiates a secure channel establishment request, and multiple other SIM cards perform identity authentication. Multiple SIM cards respond to the request, key negotiation is initialized, and both parties negotiate a key agreement, generate their own public keys, and encrypt them using SIM card 1's public key. The encrypted public key and other necessary information are sent back to SIM card 1 as a key negotiation response message. After receiving the key negotiation responses from the other SIM cards, SIM card 1 uses its own public key to decrypt the corresponding public key. SIM card 1 can be the first SIM card in the first mobile terminal, and the multiple other SIM cards can include the second SIM card in the second mobile terminal. When the SIM card is the SIM card in the second mobile terminal, the multiple other SIM cards do not include the second SIM card, but can be SIM cards of other mobile terminals, such as the first SIM card in the first mobile terminal.

[0092] In this embodiment, the second mobile terminal receives a key exchange request sent by the operator server, encrypts the second public key according to the first public key to obtain a first encryption result, and sends the first encryption result to the operator server so that the operator server sends it to the first mobile terminal, thereby realizing the key exchange between the first mobile terminal and the second mobile terminal, facilitating the subsequent cross-terminal fingerprint authentication.

[0093] Furthermore, in a feasible embodiment, the cross-terminal fingerprint authentication method further includes steps b10-b40.

[0094] Step b10: determining the digital identity information corresponding to the second SIM card in the second mobile terminal, and collecting a user fingerprint image corresponding to the digital identity information;

[0095] Optionally, each mobile terminal can perform the same fingerprint input and hosting process, and the following will only take the second mobile terminal to perform the fingerprint input and hosting process (including steps b10-b40) as an example.

[0096] Optionally, the second mobile terminal can complete digital identity real person verification according to the information input by user 2 to determine the digital identity information corresponding to the second SIM card. Then, fingerprint collection and input are performed, such as displaying a fingerprint input window on the display interface of the second mobile terminal, and after detecting that the user presses on the fingerprint input window, a user fingerprint image is collected to obtain a user fingerprint image corresponding to the digital identity information.

[0097] Step b20, fingerprint feature extraction is performed on the user fingerprint image to obtain second fingerprint template data;

[0098] Optionally, the user fingerprint image is subjected to fingerprint identification to obtain corresponding fingerprint features, and the corresponding fingerprint features are filled into the preset fingerprint template data to obtain the second fingerprint template data. The second fingerprint template data is stored in the second SIM card application.

[0099] Step b30, a fingerprint template hosting service instruction is determined according to the second fingerprint template data;

[0100] It should be noted that the fingerprint template hosting service instruction includes the second SIM card identifier, the hosting key identifier, and the second fingerprint template data.

[0101] Step b40, the fingerprint template hosting service instruction is sent to the operator server.

[0102] It should be noted that the operator server determines a hosting key according to the second SIM card identifier and the hosting key identifier, encrypts the second fingerprint template data according to the hosting key, and uploads the encrypted second fingerprint template data to the blockchain.

[0103] Optionally, the fingerprint input and hosting process includes fingerprint template input and fingerprint template hosting.

[0104] Optionally, in the fingerprint template input link, the user (such as user 1 or user 2) can complete digital identity real person verification on the mobile terminal (the first mobile terminal or the second mobile terminal), and then perform fingerprint collection and input, send the collected user fingerprint image to the fingerprint identification SDK for fingerprint processing to obtain related fingerprint template data (such as the second fingerprint template data), and use the digital identity application management key to encrypt and store the related fingerprint template data in the SIM card. The SIM card application decrypts the related fingerprint template data. Through fingerprint collection based on digital identity information, it can be ensured that the fingerprint can be input only after completing real person authentication, so as to prevent the fingerprint template from being misused, and it is more secure and reliable.

[0105] Optionally, in the fingerprint template hosting link, the mobile terminal (such as the first mobile terminal or the second mobile terminal) applies for a fingerprint template hosting service to the operator server, uploads the encrypted fingerprint data to the blockchain through the operator server, and completes the smart contract signing.

[0106] In the embodiment, by collecting the user fingerprint image corresponding to the digital identity information corresponding to the second SIM card in the second mobile terminal, the fingerprint feature of the user fingerprint image is extracted to obtain the second fingerprint template data, the fingerprint template hosting service instruction is determined according to the second fingerprint template data, and it is sent to the operator server, so that the operator server uploads the second fingerprint template data to the blockchain, completes the fingerprint hosting, and further provides a basis for subsequent cross-terminal fingerprint authentication. When the SIM card of the second mobile terminal is lost or lost, the fingerprint authentication can be quickly performed through other terminals, thereby improving the fingerprint authentication effect.

[0107] In addition, with reference to Figure 4 The third embodiment of the cross-terminal fingerprint authentication method provided by the present application can be based on any one of the first embodiment or the second embodiment. In this embodiment, the cross-terminal fingerprint authentication method is applied to the operator server, and includes steps S100-S400.

[0108] Step S100, receiving the encrypted and signed application instruction sent by the second mobile terminal, and performing decryption verification to obtain the application instruction;

[0109] It should be noted that the application instruction includes the first SIM card identifier of the first mobile terminal and the second SIM card identifier of the second mobile terminal.

[0110] Optionally, the first mobile terminal, the second mobile terminal and the operator server in the embodiment can be the same as the first mobile terminal, the second mobile terminal and the operator server in the first embodiment or the second embodiment.

[0111] Optionally, the operator server can first create a secure channel with the mobile terminal (such as the first mobile terminal or the second mobile terminal), and then perform the cross-terminal fingerprint authentication operation.

[0112] Optionally, if the SIM card in the first mobile terminal is damaged and cannot be used, the user can perform a cross-terminal fingerprint authentication operation through the second mobile terminal, that is, the user sends an encrypted and signed cross-terminal fingerprint authentication application instruction through the second mobile terminal, obtains a second public key in the second mobile terminal through the second SIM card identifier, and performs signature verification on the encrypted and signed application instruction according to the second public key. After successful verification, the application instruction is obtained by decryption through the secure channel key. Optionally, the validity of the application instruction can also be detected, and if it is valid, the subsequent steps are executed.

[0113] In step S200, the matching fingerprint template ciphertext data matching the first SIM card identifier in the blockchain is obtained, and the matching fingerprint template ciphertext data is encrypted and signed again to obtain the first fingerprint template ciphertext data.

[0114] Optionally, the operator server can check the subscription authorization validity of user 1 and user 2 through the smart contract (that is, the subscription authorization information of user 1 and user 2 can be determined according to the application instruction). The fingerprint template ciphertext matching the first SIM card identifier is obtained from the blockchain according to the smart contract, and is taken as the matching fingerprint template ciphertext, such as the fingerprint template ciphertext corresponding to the mobile terminal of user 1.

[0115] Optionally, the second encryption can be performed using the escrow key KeyA according to the smart contract, and the private key can be used for signature to obtain the first fingerprint template ciphertext data. Optionally, the signature data can include the smart contract escrow key index of the first mobile terminal + the first SIM card hardware identifier in the first mobile terminal + the ciphertext + the timestamp + the valid time.

[0116] In step S300, the first fingerprint template ciphertext data is sent to the second mobile terminal.

[0117] It should be noted that the second mobile terminal decrypts and verifies the first fingerprint template ciphertext data to obtain the first fingerprint template data, and sends the generated fingerprint verification voucher to the operator server when the actual fingerprint data of the user is successfully compared with the first fingerprint template data.

[0118] Optionally, the operator server can send the first fingerprint template ciphertext data obtained from the blockchain to the second mobile terminal. Optionally, the fingerprint authentication SIM2 card application of the second mobile terminal receives the one-time ciphertext sent by the smart contract, decrypts the first fingerprint template ciphertext data using the escrow key KeyA of the first SIM card, and performs data signature verification using the first public key. The second SIM card application checks the validity of the timestamp, and the second SIM card application compares the decrypted first fingerprint template data with the actual fingerprint data of the user transmitted on the terminal side. If the comparison is successful, the subsequent steps are performed, otherwise the service is ended.

[0119] The first SIM card hosting key KeyA and the first public key are sent by the first mobile terminal to the second mobile terminal when the first mobile terminal and the second mobile terminal perform key exchange before performing cross-terminal fingerprint authentication.

[0120] In step S400, the fingerprint verification voucher fed back by the second mobile terminal is received, and the fingerprint verification voucher is uploaded to the blockchain.

[0121] Optionally, the operator server receives the fingerprint verification voucher fed back by the second mobile terminal, and uploads the fingerprint verification voucher to the blockchain for storage through the smart contract.

[0122] In the embodiment, the second mobile terminal sends the encrypted and signed application instruction to the operator server when detecting the application instruction of cross-terminal fingerprint authentication. Since the application instruction includes the first SIM card identifier of the first mobile terminal and the second SIM card identifier of the second mobile terminal, the user can perform subsequent fingerprint authentication operation with the help of the second mobile terminal and the operator server when the SIM card of the first mobile terminal is lost and unavailable. The operator server decrypts and verifies the encrypted and signed application instruction, re-encrypts the matching fingerprint template ciphertext data in the blockchain that matches the first SIM card identifier to obtain the first fingerprint template ciphertext data and sends the first fingerprint template ciphertext data to the second mobile terminal, so that the first fingerprint template ciphertext data of the first mobile terminal can be managed through the operator server and the blockchain. After detecting that the second mobile terminal obtains the authorization of the corresponding user, the first fingerprint template ciphertext data is sent to the second mobile terminal, so that the user can perform cross-terminal fingerprint authentication on the second mobile terminal. The actual fingerprint data of the user is compared with the first fingerprint template data, and if the comparison is successful, the fingerprint verification voucher is generated and uploaded to the blockchain through the operator server for storage. Thus, the fingerprint of the first mobile terminal can be authenticated through the second mobile terminal, and the fingerprint authentication effect is improved when the SIM card is lost or lost.

[0123] Further, based on the third embodiment of the present application, a fourth embodiment of the cross-terminal fingerprint authentication method of the present application is proposed. In the embodiment, before the step S100 of receiving the encrypted and signed application instruction sent by the second mobile terminal, steps a100-a200 are included.

[0124] In step a100, if the key exchange request containing the second SIM card identifier of the second mobile terminal and the first public key of the first mobile terminal is received, the key exchange request is sent to the second mobile terminal according to the second SIM card identifier.

[0125] It should be noted that the second mobile terminal encrypts the second public key in the second mobile terminal according to the first public key in the key exchange request to obtain a first encryption result, and sends the first encryption result to the operator server;

[0126] Optionally, each mobile terminal can perform key exchange through the operator server. The following only takes the process of key exchange between the first mobile terminal and the second mobile terminal as an example, which is not limited herein.

[0127] Optionally, when the operator server receives the key exchange request sent by the first mobile terminal and containing the second SIM card identifier of the second mobile terminal and the first public key of the first mobile terminal, the operator server forwards the key exchange request to the second mobile terminal. The second mobile terminal generates a second public key and a second private key, encrypts the second public key according to the first public key to obtain a first encryption result, and sends the first encryption result to the operator server. The operator server feeds back the first encryption result to the first mobile terminal.

[0128] Step a200, receiving the first encryption result sent by the second mobile terminal, and feeding back the first encryption result to the first mobile terminal.

[0129] It should be noted that the first mobile terminal decrypts the first encryption result to obtain the second public key, and performs key exchange with the second mobile terminal according to the second public key.

[0130] Optionally, the first mobile terminal decrypts the first encryption result according to the first private key to obtain the second public key. Then, the key exchange is performed in the manner of key envelope, including sending the hosting key KeyA and the key index of the first mobile terminal to the second mobile terminal. Optionally, the hosting key KeyA and the key index of the second mobile terminal can also be sent to the first mobile terminal.

[0131] In the embodiment, when the operator server receives the key exchange request sent by the first mobile terminal and containing the second SIM card identifier of the second mobile terminal and the first public key of the first mobile terminal, the operator server forwards the key exchange request to the second mobile terminal, and receives the first encryption result fed back by the second mobile terminal, and sends the first encryption result to the first mobile terminal, so as to complete the key exchange between the first mobile terminal and the second mobile terminal.

[0132] Further, in a feasible embodiment, the cross-terminal fingerprint authentication method further includes steps b100-b200.

[0133] Step b100, if the fingerprint template hosting service instruction sent by the second mobile terminal is received, the hosting key is determined according to the second SIM card identifier and the hosting key identifier in the fingerprint template hosting service instruction;

[0134] It should be noted that the second mobile terminal determines the digital identity information corresponding to the second SIM card, collects the user fingerprint image corresponding to the digital identity information, extracts the fingerprint features of the user fingerprint image, obtains the second fingerprint template data, determines the fingerprint template hosting service instruction according to the fingerprint template data, and sends the fingerprint template hosting service instruction to the operator server;

[0135] Optionally, each mobile terminal can store the user's fingerprint template and perform fingerprint template hosting service. Here, only the second mobile terminal is taken as an example.

[0136] Optionally, when the operator server receives the fingerprint template hosting service instruction sent by the second mobile terminal, the hosting key can be determined first, that is, the hosting key is determined according to the second SIM card identifier and the hosting key identifier (such as hosting key ID), and the hosting key is synchronized and issued to the second SIM card application of the second mobile terminal for storage.

[0137] Step b200, encrypt the second fingerprint template data in the fingerprint template hosting service instruction according to the hosting key, and upload the encrypted second fingerprint template data to the block chain.

[0138] Optionally, the second fingerprint template data can be encrypted by the hosting key and signed using the operator server public key, and a transaction request containing the encrypted and signed second fingerprint template data is sent to the nodes in the selected block chain network. After receiving the transaction request, the nodes in the block chain network use the block chain consensus algorithm to calculate whether the transaction request sent by the operator server is valid. If the verification is passed, the node adds the transaction to the transaction to be packaged to complete the on-chain operation; after the on-chain operation is successful, the operator server enables the user smart contract service for the user corresponding to the mobile terminal (SEID+hosting key index ID), and the smart contract completes the user subscription information (SEID+hosting key index ID+subscription type) and the subscription state management, and is published in the block chain node.

[0139] For example, as shown in Figure 5 The operator server creates a transaction, signs the transaction, and sends it to the block chain network. The block chain network broadcasts the transaction, performs block chain verification, records the block chain, and completes the on-chain operation of the fingerprint data.

[0140] In the embodiment, the operator server determines the hosting key when receiving the fingerprint template hosting service instruction sent by the second mobile terminal, encrypts the second fingerprint template data according to the hosting key, and uploads the encrypted second fingerprint template data to the block chain. The fingerprint hosting of the second mobile terminal is completed, thereby providing a basis for subsequent cross-terminal fingerprint authentication. When the SIM card of the second mobile terminal is lost or lost, fingerprint authentication can be quickly performed through other terminals, thereby improving the fingerprint authentication effect.

[0141] In addition, in order to assist in understanding the cross-terminal fingerprint authentication process in the embodiments of the present application, the following is exemplified.

[0142] For example, as shown in Figure 6 , including a mobile terminal, a SIM card, an SEI-TSM and a smart contract. Each mobile terminal is installed with a SIM card. The SEI-TSM is included in the operator server. The smart contract is controlled by the operator server. 1.1, the mobile terminal performs fingerprint input and hosting. 1.2, the SIM card in the mobile terminal performs fingerprint template input. 1.3, the SIM card in the mobile terminal performs hosting service. 1.4, the SEI-TSM generates a SIM card hosting key, encrypts the fingerprint template data, and stores the encrypted data on the chain. 1.5, the SEI-TSM records the user hosting state. 1.6, according to the smart contract, the user information and the hosting state are associated. 1.7, return the subscription result to the mobile terminal, so that the user knows the specific result of fingerprint data input and hosting. In the user identification authentication sharing link, 2.1, the mobile terminal performs fingerprint authentication sharing. 2.2, fingerprint authentication sharing request. 2.3, the smart contract is used to process fingerprint sharing, and the authorization credential is generated: (1) query the subscription state of both users, (2) organize hosting authorization data (including both SEIDs, time stamp, effective number of times, etc.), (3) the smart contract signs the hosting authorization data. 2.4, package the security data through the SEI-TSM, issue the credential, and organize the authorization instruction, including: (1) obtain the fingerprint template data of user 1, (2) combine the fingerprint template + smart contract authorization data, (3) send the user 2 authorization instruction. 2.5, the SEI-TSM issues the authorization instruction to the SIM card. 2.6, authorization processing: (1) analyze the data to obtain the template data, (2) compare with the input template, (3) save the template data if they are consistent, (4) return the authentication result.

[0143] Furthermore, the whole process of the embodiment is exemplified. Step 1, collect the fingerprint image of user 1, extract the fingerprint feature information, associate with the digital identity information of the user, and store to the fingerprint authentication card application of user 1. Step 2, the mobile terminal of user 1 applies for fingerprint template hosting service to SEI-TSM, uploads the encrypted fingerprint template data to the block chain through SEI-TSM, and completes the signing of the smart contract. Step 3, the mobile terminal of user 1 shares the fingerprint authentication with the mobile terminal of other users (such as the mobile terminal of user 2) through SEI-TSM. Step 4, user 1 applies for cross-terminal fingerprint authorization authentication through the smart contract. Step 5, the smart contract generates SIM1 fingerprint template ciphertext data. Step 6, the fingerprint authentication card application in the mobile terminal of user 2 generates fingerprint verification voucher and sends it to SEI-TSM for on-chain storage. Step 7, the fingerprint authentication card application in the mobile terminal of user 2 stores the fingerprint data of user 1, decrypts the encrypted fingerprint data based on the authorization list using the corresponding key, and automatically deletes the stored fingerprint data of user 1 (including the fingerprint template data of user 1) after the authentication is completed.

[0144] Furthermore, the present application also provides a cross-terminal fingerprint authentication system, comprising a plurality of mobile terminals and an operator server, the plurality of mobile terminals comprising a first mobile terminal and a second mobile terminal,

[0145] The second mobile terminal is configured to encrypt and sign the application instruction when detecting the application instruction of the cross-terminal fingerprint authentication, and send the encrypted and signed application instruction to the operator server, wherein the application instruction comprises a first SIM card identifier of the first mobile terminal and a second SIM card identifier of the second mobile terminal.

[0146] The operator server is configured to receive the encrypted and signed application instruction sent by the second mobile terminal, and perform decryption verification to obtain the application instruction, acquire matching fingerprint template ciphertext data in the block chain that matches the first SIM card identifier, perform secondary encryption and signing on the matching fingerprint template ciphertext data to obtain first fingerprint template ciphertext data, and send the first fingerprint template ciphertext data to the second mobile terminal.

[0147] The second mobile terminal is configured to receive the first fingerprint template ciphertext data fed back by the operator server, perform decryption verification on the first fingerprint template ciphertext data to obtain first fingerprint template data, acquire actual fingerprint data of the user, and compare the actual fingerprint data with the first fingerprint template data; if the comparison is successful, a fingerprint verification voucher is generated and sent to the operator server.

[0148] The operator server is configured to receive the fingerprint verification voucher fed back by the second mobile terminal, and upload the fingerprint verification voucher to the block chain.

[0149] The terminal-crossing fingerprint authentication system embodiment of the present application is basically the same as each embodiment of the terminal-crossing fingerprint authentication method described above, and thus will not be described again here.

[0150] In addition, the present application also provides an electronic device, which comprises a memory, a processor, and a terminal-crossing fingerprint authentication program stored in the memory and executable on the processor. When the terminal-crossing fingerprint authentication program is executed by the processor, the steps of the terminal-crossing fingerprint authentication method described above are implemented.

[0151] In addition, in an embodiment, Figure 7 The structure schematic diagram of the electronic device of an embodiment of the present application is shown in FIG. 1. Figure 7 As shown in the figure, at the hardware level, the electronic device comprises a processor, and optionally further comprises an internal bus, a network interface, and a memory. The memory can contain a memory, such as a high-speed random-access memory (RAM), and can also comprise a non-volatile memory, such as at least one disk memory, etc. Of course, the electronic device can also comprise other hardware required by the business. The processor, the network interface, and the memory can be connected to each other through the internal bus, which can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus, or an EISA (Extended Industry Standard Architecture) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For the convenience of representation, only one bidirectional arrow is used in the figure, but it does not mean that there is only one bus or only one type of bus. The memory is used to store programs. Specifically, the program can comprise program code, and the program code comprises computer operation instructions. The processor reads the corresponding computer program from the non-volatile memory into the memory and then runs, and forms a shared resource access control device at the logical level. The processor executes the program stored in the memory, and is specifically used to execute the steps of the terminal-crossing fingerprint authentication method described above.

[0152] The electronic device embodiment of the present application is basically the same as each embodiment of the terminal-crossing fingerprint authentication method described above, and thus will not be described again here.

[0153] In addition, to achieve the above-mentioned purpose, the present application also provides a medium, which comprises a computer readable storage medium, and the terminal-crossing fingerprint authentication program is stored on the computer readable storage medium. When the terminal-crossing fingerprint authentication program is executed by the processor, the steps of the terminal-crossing fingerprint authentication method described above are implemented.

[0154] The computer readable storage medium embodiment of the present application is basically the same as the above-mentioned cross-terminal fingerprint authentication method embodiments, and will not be repeated here.

[0155] In addition, to achieve the above-mentioned purpose, the present application also provides a program product, which comprises a computer program product, and the computer program product comprises a cross-terminal fingerprint authentication program, which realizes the steps of the above-mentioned cross-terminal fingerprint authentication method when executed by a processor.

[0156] The computer program product embodiment of the present application is basically the same as the above-mentioned cross-terminal fingerprint authentication method embodiments, and will not be repeated here.

[0157] Those skilled in the art can understand that all or some steps in the above-mentioned method, the functional modules / units in the system and the device can be implemented as software, firmware, hardware and appropriate combinations thereof. In the hardware implementation, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component can have multiple functions, or one function or step can be executed by several physical components in cooperation. Some or all physical components can be implemented as software executed by a processor, such as a central processor, a digital signal processor or a microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit. Such software can be distributed on a computer readable medium, which can include computer storage media (or non-transitory media) and communication media (or transitory media). As known to those skilled in the art, the term computer readable storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer readable instructions, data structures, program modules or other data). Computer readable storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and can be accessed by a computer. In addition, as known to those skilled in the art, communication media generally includes computer readable instructions, data structures, program modules or other data in modulated data signals such as carriers or other transmission mechanisms, and can include any information delivery medium.

[0158] The above is only the preferred embodiment of the present application, and does not limit the patent scope of the present application, and any equivalent structure or equivalent process transformation using the content of the specification and drawings of the present application, or direct or indirect application in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A cross-terminal fingerprint authentication method, characterized by, A second mobile terminal applied to a plurality of mobile terminals, the plurality of mobile terminals comprising a first mobile terminal, the method comprising: Upon detecting an application instruction of cross-terminal fingerprint authentication, the application instruction is encrypted and signed, and the encrypted and signed application instruction is sent to an operator server, wherein the application instruction comprises a first SIM card identifier of the first mobile terminal and a second SIM card identifier of the second mobile terminal; the operator server decrypts and verifies the encrypted and signed application instruction, and performs secondary encryption and signing on matching fingerprint template ciphertext data in the blockchain that matches the first SIM card identifier to obtain first fingerprint template ciphertext data which is sent to the second mobile terminal; wherein, before cross-terminal fingerprint authentication, users register a blockchain network through their respective mobile terminals, and fingerprint template data is stored in the respective blockchain card applications and uploaded to a blockchain node server; when a SIM card of a user is unavailable, the operator server generates a credential using a smart contract service to allow the user to authorize other users registered in the blockchain network to access the blockchain to obtain the fingerprint data of the user and complete the fingerprint authentication of the user according to the fingerprint authentication sharing operation of the user; Receiving the first fingerprint template ciphertext data fed back by the operator server, decrypting and verifying the first fingerprint template ciphertext data to obtain first fingerprint template data, wherein the first fingerprint template ciphertext data comprises first fingerprint template data encrypted according to a first key of the first mobile terminal; Obtaining actual fingerprint data of the user and comparing the actual fingerprint data with the first fingerprint template data; If the comparison is successful, a fingerprint verification credential is generated and sent to the operator server, wherein the operator server uploads the fingerprint verification credential to the blockchain; wherein the fingerprint verification credential is used to represent information related to cross-terminal fingerprint verification of the user using the second mobile terminal, the second mobile terminal signs the related information using a second private key in the second mobile terminal to generate the fingerprint verification credential, and the related information comprises a first SIM card identifier, a timestamp, a second SIM card identifier, and service information.

2. The method of claim 1, wherein, Before the step of encrypting and signing the application instruction, the method comprises: Receiving a key exchange request sent by the operator server, wherein the first mobile terminal sends a key exchange request containing a second SIM card identifier of the second mobile terminal and a first public key of the first mobile terminal to the operator server, and the operator server sends a key exchange request to the second mobile terminal according to the second SIM card identifier; Encrypting a second public key in the second mobile terminal according to the first public key in the key exchange request to obtain a first encryption result, and feeding back the first encryption result to the operator server, wherein the operator server sends the first encryption result to the first mobile terminal, the first mobile terminal decrypts the first encryption result to obtain the second public key, and performs key exchange with the second mobile terminal according to the second public key.

3. The method of claim 1, wherein, The method further comprises: determining the digital identity information corresponding to the second SIM card in the second mobile terminal, and collecting the user fingerprint image corresponding to the digital identity information; extracting the fingerprint features of the user fingerprint image to obtain the second fingerprint template data; determining the fingerprint template hosting service instruction according to the second fingerprint template data, wherein the fingerprint template hosting service instruction includes the second SIM card identifier, the hosting key identifier, and the second fingerprint template data; sending the fingerprint template hosting service instruction to the operator server, wherein the operator server determines the hosting key according to the second SIM card identifier and the hosting key identifier, encrypts the second fingerprint template data according to the hosting key, and uploads the encrypted second fingerprint template data to the blockchain.

4. A cross-terminal fingerprint authentication method, characterized by, The method applied to the operator server comprises: receiving the encrypted and signed application instruction sent by the second mobile terminal, and decrypting and verifying to obtain the application instruction, wherein the application instruction includes the first SIM card identifier of the first mobile terminal and the second SIM card identifier of the second mobile terminal; wherein, before cross-terminal fingerprint authentication, users register the blockchain network through their respective mobile terminals, the fingerprint template data is stored in the respective blockchain card application, and the respective fingerprint data is uploaded to the blockchain node server; when the SIM card of a user is unavailable, according to the fingerprint authentication sharing operation of the user, the operator server will generate a credential using a smart contract service to allow the user to authorize other users registered in the blockchain network to access the blockchain to obtain the fingerprint data of the user, and complete the fingerprint authentication of the user; obtaining the matching fingerprint template ciphertext data matching the first SIM card identifier in the blockchain, and performing secondary encryption and signature on the matching fingerprint template ciphertext data to obtain the first fingerprint template ciphertext data; sending the first fingerprint template ciphertext data to the second mobile terminal, wherein the second mobile terminal decrypts and verifies the first fingerprint template ciphertext data to obtain the first fingerprint template data, and sends the generated fingerprint verification credential to the operator server when the actual fingerprint data of the user is successfully compared with the first fingerprint template data; the fingerprint verification credential is used to represent the related information of the cross-terminal fingerprint verification of the user using the second mobile terminal, the second mobile terminal signs the related information using the second private key in the second mobile terminal to generate the fingerprint verification credential, and the related information includes the first SIM card identifier, the timestamp, the second SIM card identifier, and the service information; receiving the fingerprint verification credential fed back by the second mobile terminal, and uploading the fingerprint verification credential to the blockchain.

5. The method of claim 4, wherein, The step of receiving the encrypted and signed application instruction sent by the second mobile terminal comprises: If the first mobile terminal receives the key exchange request sent by the second mobile terminal, the second SIM card identifier and the first public key of the first mobile terminal are included in the key exchange request, and the key exchange request is sent to the second mobile terminal according to the second SIM card identifier; wherein the second mobile terminal encrypts the second public key in the second mobile terminal according to the first public key in the key exchange request to obtain a first encryption result, and sends the first encryption result to the operator server; The first encryption result sent by the second mobile terminal is received, and the first encryption result is fed back to the first mobile terminal, wherein the first mobile terminal decrypts the first encryption result to obtain a second public key, and performs key exchange with the second mobile terminal according to the second public key.

6. The method of claim 4, wherein, The method comprises: If the second mobile terminal receives the fingerprint template hosting service instruction, the second SIM card identifier and the hosting key identifier in the fingerprint template hosting service instruction are determined to determine the hosting key; wherein the second mobile terminal determines the digital identity information corresponding to the second SIM card, collects the user fingerprint image corresponding to the digital identity information, extracts the fingerprint features of the user fingerprint image to obtain the second fingerprint template data, determines the fingerprint template hosting service instruction according to the fingerprint template data, and sends the fingerprint template hosting service instruction to the operator server; The second fingerprint template data in the fingerprint template hosting service instruction is encrypted according to the hosting key, and the encrypted second fingerprint template data is uploaded to the blockchain.

7. A cross-terminal fingerprint authentication system, comprising: The method comprises: The second mobile terminal is configured to encrypt and sign the application instruction when detecting the application instruction of cross-terminal fingerprint authentication, and send the encrypted and signed application instruction to the operator server, wherein the application instruction comprises the first SIM card identifier of the first mobile terminal and the second SIM card identifier of the second mobile terminal; wherein before cross-terminal fingerprint authentication, users register the blockchain network through their respective mobile terminals, the fingerprint template data is stored in the respective blockchain card application, and the respective fingerprint data is uploaded to the blockchain node server; when the SIM card of a certain user is unavailable, according to the fingerprint authentication sharing operation of the user, the operator server generates a credential using a smart contract service to allow the user to authorize other users registered in the blockchain network to access the blockchain to obtain the fingerprint data of the user and complete the fingerprint authentication of the user; The operator server is configured to receive the encrypted and signed application instruction sent by the second mobile terminal, and perform decryption and verification to obtain the application instruction, obtain the matching fingerprint template ciphertext data matching the first SIM card identifier in the blockchain, perform secondary encryption and signature on the matching fingerprint template ciphertext data to obtain the first fingerprint template ciphertext data, and send the first fingerprint template ciphertext data to the second mobile terminal. The second mobile terminal is configured to receive the first fingerprint template ciphertext data fed back by the operator server, decrypt and verify the first fingerprint template ciphertext data, obtain first fingerprint template data, acquire actual fingerprint data of a user, and compare the actual fingerprint data with the first fingerprint template data; if the comparison is successful, a fingerprint verification credential is generated, and the fingerprint verification credential is sent to the operator server; the fingerprint verification credential is used to represent information related to cross-terminal fingerprint verification of the user using the second mobile terminal, the second mobile terminal uses a second private key in the second mobile terminal to sign the related information to generate the fingerprint verification credential, and the related information includes a first SIM card identifier, a timestamp, a second SIM card identifier, and service information. The operator server is configured to receive the fingerprint verification credential fed back by the second mobile terminal and upload the fingerprint verification credential to the blockchain.

8. An electronic device, comprising: The electronic device includes a memory, a processor, and a computer program stored on the memory and executable on the processor, and the computer program is configured to implement the steps of the cross-terminal fingerprint authentication method according to any one of claims 1 to 6.

9. A medium characterized by, The medium is a computer-readable storage medium, and the computer-readable storage medium stores a computer program, and the computer program is executed by a processor to implement the steps of the cross-terminal fingerprint authentication method according to any one of claims 1 to 6.

10. A program product, characterized by The program product is a computer program product, and the computer program product includes a computer program, and the computer program is executed by a processor to implement the steps of the cross-terminal fingerprint authentication method according to any one of claims 1 to 6.

Images