Solid state hard disk data query security verification method and device

Abstract

The present invention relates to the technical field of solid-state hard disks, and provides a method and device for verifying the security of data query of a solid-state hard disk, the method comprising: responding to a data query request initiated by a target user for a target solid-state hard disk, collecting the second biometric information of the target user based on a biometric collection module; matching the second biometric information with the first biometric information stored in a key storage module to obtain a target security key; encrypting the data query request based on the target security key, and sending the encrypted query request to a data management system of the solid-state hard disk, so that the data management system decrypts the encrypted query request and returns a decryption result; if the decryption result is that the encrypted query request is successfully decrypted, then displaying a data query interface of the solid-state hard disk, so that the target user can query the data in the solid-state hard disk based on the data query interface. The present invention improves the security of data query verification of the solid-state hard disk.

Description

Technical Field

[0001] The present invention relates to the technical field of solid state hard disks, and in particular to a solid state hard disk data query security verification method and device thereof. Background Art

[0002] With the development of information technology, solid-state drives (SSDs) have been widely used in the field of data storage, such as enterprise data centers, financial institutions, medical information systems, etc., which have extremely high security requirements for data stored in SSDs. Security verification during data query has become a key link in ensuring data security.

[0003] At present, common SSD data query security verification methods mainly include password-based verification methods and digital certificate-based verification methods. The password-based verification method is that the user enters a pre-set password when querying data, and the password is used for security verification. The digital certificate-based verification method is that a special certificate authority (CA) issues a digital certificate, and the digital certificate is used for security verification. Whether it is password verification or digital certificate verification, there is a certain vulnerability when facing malware attacks. Attackers may obtain data access rights by intercepting verification information, making the security of SSD data query verification low when querying data on the SSD. Summary of the invention

[0004] The present invention provides a solid state hard disk data query security verification method and device thereof, which are used to improve the security of solid state hard disk data query verification.

[0005] In a first aspect, the present invention provides a solid-state hard disk data query security verification method, which is applied to a solid-state hard disk data query security verification device, wherein the solid-state hard disk data query security verification device includes a biometric feature collection module and a key storage module, wherein the key storage module stores first biometric feature information and its corresponding security key, and the solid-state hard disk data query security verification method includes:

[0006] In response to a data query request initiated by a target user for a target solid-state drive, the second biometric information of the target user is collected based on the biometric collection module; the second biometric information includes fingerprint information and face information;

[0007] Matching the second biometric information with the first biometric information stored in the key storage module to obtain a target security key corresponding to the second biometric information;

[0008] Encrypting the data query request based on the target security key, and sending the encrypted query request to the data management system of the solid state drive, so that the data management system decrypts the encrypted query request and returns the decryption result to the solid state drive;

[0009] If the decryption result received from the data management system indicates that the encrypted query request is successfully decrypted, a data query interface of the solid state drive is displayed, so that the target user can query the data in the solid state drive based on the data query interface.

[0010] According to the solid-state hard disk data query security verification method provided by an embodiment of the present invention, the biometric feature acquisition module includes a fingerprint acquisition module and a face acquisition module; the second biometric feature information of the target user is collected based on the biometric feature acquisition module, including:

[0011] Collecting fingerprint pattern features, fingerprint ridge features, and fingerprint valley features of the target user based on the fingerprint collection module;

[0012] Generating fingerprint information of the target user based on the fingerprint pattern features, the fingerprint ridge features, and the fingerprint valley features;

[0013] Collecting facial contour features, eye features, nose features and mouth features of the target user based on the face collection module;

[0014] Based on the facial contour features, the eye features, the nose features and the mouth features, the facial information of the target user is generated.

[0015] According to the solid state drive data query security verification method provided by an embodiment of the present invention, the fingerprint information of the target user is generated based on the fingerprint pattern feature, the fingerprint ridge feature and the fingerprint valley feature, including:

[0016] According to the directional characteristics of the fingerprint pattern features, the neighborhood of each coordinate point is obtained and the gradient vector of the optical path difference in the neighborhood is calculated, and the directional value of the fingerprint pattern feature at each coordinate point is determined based on the gradient vector; the coordinate point is obtained based on the position of each point of the finger in the fingerprint acquisition module;

[0017] Calculating the second-order derivative information at each coordinate point according to the curvature feature of the fingerprint pattern feature, and determining the curvature value of each coordinate point based on the second-order derivative information;

[0018] Constructing a topological graph using the fingerprint ridge features as edges and the fingerprint valley features as vertices;

[0019] Determine the direction value and curvature value of each fingerprint ridge feature as the attribute of each edge in the topological graph, and determine the connectivity value of each vertex in the topological graph;

[0020] The fingerprint information is determined based on the topological map, the direction value, the curvature value, and the connectivity value.

[0021] According to the solid state drive data query security verification method provided by an embodiment of the present invention, the generating of the target user's face information based on the face contour feature, the eye feature, the nose feature and the mouth feature includes:

[0022] Based on the face acquisition module projecting a preset light pattern, and calculating the depth information of the face surface according to the deformation of the light pattern, a three-dimensional model of the facial contour features is constructed;

[0023] Determine the boundary of the eye socket according to the depth information in the three-dimensional model, and determine the coordinates of the center of the eyeball based on the local curvature in the eye socket;

[0024] In the three-dimensional model, along the central axis of the human face, the area with the largest depth value is taken as the bridge of the nose, and the coordinates of the nose wings are determined based on the symmetry and curvature change of both sides of the bridge of the nose;

[0025] Determining the lip contour coordinate points of the lips by analyzing the depth value and curvature change of the lower part of the face in the three-dimensional model;

[0026] The facial information is determined based on the eyeball center coordinates, the nose wing coordinates and the lip contour coordinate points.

[0027] According to the solid state drive data query security verification method provided by an embodiment of the present invention, the data query request is encrypted based on the target security key, and the specific process of obtaining the encrypted query request includes:

[0028] Obtaining a shared encryption mode agreed upon between the solid state drive and the data management system;

[0029] Dividing the target security key into a first target binary sequence of a first sequence length based on the shared encryption mode, and converting each character in the data query request into a corresponding binary value to obtain a second target binary sequence of a second sequence length;

[0030] Performing key expansion on the first target binary sequence based on the second sequence length to obtain an expanded key sequence;

[0031] The second target binary sequence is encrypted based on the extended key sequence, and the shared encryption mode is used as a data prefix to obtain the encrypted query request.

[0032] According to the SSD data query security verification method provided by the embodiment of the present invention, the specific steps of the decryption result verification process are as follows:

[0033] Calculating a verification value of the decryption result based on a preset verification formula;

[0034] If the verification value is greater than or equal to a preset threshold, determining that the decryption result is that the encrypted query request is successfully decrypted;

[0035] If the verification value is less than the preset threshold, determining that the decryption result is that the encrypted query request decryption is unsuccessful;

[0036] The verification formula is expressed as:

[0037] ;

[0038] in, Represents the verification value, Indicates the encrypted query request. represents the target security key, represents the length of the second sequence, represents the i-th encrypted binary value, represents the i-th extended key, mod represents the modulus operation, Represents the weight factor.

[0039] In a second aspect, the present invention further provides a solid state hard disk data query security verification device, comprising a biometric feature collection module, a key storage module, a matching module, an encryption transmission module and a data query module, wherein the key storage module stores first biometric feature information and its corresponding security key;

[0040] A biometric feature collection module, configured to respond to a data query request initiated by a target user for a target solid-state drive, and collect second biometric feature information of the target user based on the biometric feature collection module; the second biometric feature information includes fingerprint information and face information;

[0041] a matching module, configured to match the second biometric information with the first biometric information stored in the key storage module to obtain a target security key corresponding to the second biometric information;

[0042] An encryption transmission module, used for encrypting the data query request based on the target security key, and sending the encrypted query request to the data management system of the solid state drive, so that the data management system decrypts the encrypted query request and returns the decryption result to the solid state drive;

[0043] The data query module is used to display the data query interface of the solid state drive if the decryption result returned by the data management system is that the encrypted query request is successfully decrypted, so that the target user can query the data in the solid state drive based on the data query interface.

[0044] In a third aspect, the present invention further provides an electronic device, comprising: a memory for storing a computer software program; a processor for reading and executing the computer software program, thereby implementing any of the solid-state hard disk data query security verification methods described above.

[0045] In a fourth aspect, the present invention further provides a non-transitory computer-readable storage medium, wherein the storage medium stores a computer software program, and when the computer software program is executed by a processor, the solid-state hard disk data query security verification method as described in any one of the above-mentioned methods.

[0046] In a fifth aspect, the present invention further provides a computer program product, including a computer program, which, when executed by a processor, implements any of the solid-state hard disk data query security verification methods described above.

[0047] The solid-state hard disk data query security verification method provided by the embodiment of the present invention performs security query verification through biometrics. Since each person's biometrics are unique and difficult to replicate, the risk of being cracked or stolen is greatly reduced compared to traditional passwords and digital certificates. At the same time, due to the close combination of the first biometric information and the key, even if malware obtains part of the encrypted information, it cannot decrypt the query request without the correct biometrics, thereby improving resistance to malware attacks. Therefore, the method of the embodiment of the present invention improves the security of solid-state hard disk data query verification. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Figure 1 is a flow chart of a solid state drive data query security verification method provided by an embodiment of the present invention;

[0049] Figure 2 It is a structural diagram of a solid state hard disk data query security verification device provided by an embodiment of the present invention;

[0050] Figure 3 An embodiment diagram of an electronic device provided by an embodiment of the present invention;

[0051] Figure 4 An embodiment diagram of a computer-readable storage medium provided for an embodiment of the present invention. DETAILED DESCRIPTION

[0052] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0053] In the description of the present invention, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. In the description of the present invention, the meaning of "plurality" is two or more, unless otherwise clearly and specifically defined.

[0054] In the description of the present invention, the term "for example" is used to mean "used as an example, illustration or explanation". Any embodiment described as "for example" in the present invention is not necessarily to be construed as being more preferred or advantageous than other embodiments. The following description is given to enable any technician in the field to implement and use the present invention. In the following description, details are listed for the purpose of explanation. It should be understood that a person of ordinary skill in the art can recognize that the present invention can be implemented without using these specific details. In other examples, well-known structures and processes will not be elaborated in detail to avoid obscuring the description of the present invention with unnecessary details. Therefore, the present invention is not intended to be limited to the embodiments shown, but is consistent with the widest scope consistent with the principles and features disclosed in the present invention.

[0055] Optional, see Figure 1 As shown, Figure 1 It is a flow chart of the solid-state hard disk data query security verification method provided by the present invention. The execution subject of the solid-state hard disk data query security verification method in the embodiment of the present invention is a solid-state hard disk data query security verification device, and the solid-state hard disk data query security verification device can be understood as an intelligent solid-state hard disk. The solid-state hard disk in the embodiment of the present invention includes a key storage module. At the same time, the solid-state hard disk is connected to a biometric acquisition module that assists in verification. The biometric acquisition module can communicate with the solid-state hard disk via a wired or wireless method. The key storage module stores the first biometric information and its corresponding security key. The first biometric information includes a fingerprint template and a face template. Therefore, the solid-state hard disk data query security verification method includes:

[0056] Step 10: In response to a data query request initiated by the target user for the target solid state drive, the second biometric information of the target user is collected based on the biometric collection module.

[0057] The biometric acquisition module in the embodiment of the present invention includes a fingerprint acquisition module and a face recognition module. After the target user initiates a data query request for the target solid-state hard disk, the indicator lights of the fingerprint acquisition module and the face recognition module are started, and the target user is prompted to place his finger in the fingerprint acquisition module, and at the same time, the target user is prompted to align his face with the face recognition module, so that the second biometric information of the target user including fingerprint information and face information is collected, as described in steps 101 to 104.

[0058] Step 20: Match the second biometric information with the first biometric information stored in the key storage module to obtain a target security key corresponding to the second biometric information.

[0059] Further, the solid state drive matches the collected second biometric information with the first biometric information stored in the key storage module, wherein the matching method is such as a similarity matching method, a distance matching method, etc., to obtain the target biometric information in the first biometric information that matches the second biometric information, and the target biometric information in the key storage module is stored as the target security key corresponding to the second biometric information. The specific analysis is as follows:

[0060] In an embodiment of the present invention, the pre-stored first biometric information is retrieved from the security key storage area, and the first biometric information is a standard biometric template corresponding to the user. Further, the currently collected second biometric information (fingerprint information and face information) is matched with the corresponding first biometric information (fingerprint template and face template) respectively. The matching process involves calculating the similarity between the two. For fingerprint matching, such as comparing the matching degree of the detail feature points of the fingerprint pattern, such as calculating the difference in the direction, spacing and other features of the pattern. For face matching, the similarity of the position, shape and facial contour of the key feature points is compared. According to the set similarity threshold, if the similarity reaches or exceeds the threshold, it is considered that the match is successful, and then the target security key corresponding to the user is obtained.

[0061] For fingerprint matching, the fingerprint similarity calculation function is ,in, Indicates the fingerprint information in the second biometric information currently collected, Represents the fingerprint template in the first biometric information. The fingerprint similarity value of the two is calculated by the fingerprint similarity calculation function .

[0062] ;

[0063] in, Indicates fingerprint information The elements, Indicates fingerprint template The elements, n represents the number of elements.

[0064] For face matching, the face similarity calculation function is ,in, Indicates the face information in the second biometric information currently collected, Represents the face template in the first biometric information. The face similarity calculation function is used to calculate the face similarity value of the two faces. ;

[0065] ;

[0066] in, Represents face information The elements, Represents a face template The elements, and m represents the number of elements.

[0067] Further, the solid state drive determines target biometric information in the first biometric information, wherein a fingerprint similarity value between the fingerprint template in the target biometric information and the fingerprint information in the second biometric information is greater than or equal to a fingerprint similarity threshold, and a face similarity value between the face template in the target biometric information and the face information in the second biometric information is greater than or equal to the face similarity threshold.

[0068] Further, the solid state drive determines the security key mapped by the target biometric information in the key storage module as the target security key.

[0069] Step 30, encrypt the data query request based on the target security key, and send the encrypted query request to the data management system of the solid state drive, so that the data management system decrypts the encrypted query request and returns the decryption result to the solid state drive.

[0070] It should be noted that the data management system and the solid state drive store a shared encryption mode and shared key information corresponding to the shared encryption mode, namely a shared encryption key and a shared decryption key. Therefore, the solid state drive encrypts the data query request through the shared encryption mode and the target security key to obtain an encrypted query request, as described in steps 301 to 304, wherein the encryption method is such as hash encryption, symmetric encryption, asymmetric encryption, etc.

[0071] Further, the solid state drive sends the encrypted query request to the data management system of the solid state drive. After receiving the encrypted query request, the data management system obtains the shared encryption mode in the encrypted query request and obtains the shared decryption key according to the shared encryption mode. Further, the data management system decrypts the encrypted query request using the shared decryption key to obtain a decryption result. The specific decryption process is the reverse process of the encryption process. For details, please refer to the encryption process and will not be repeated here.

[0072] Furthermore, the data management system returns the decryption result to the solid state drive.

[0073] Step 40: If the decryption result returned by the data management system indicates that the encrypted query request is successfully decrypted, a data query interface of the solid state drive is displayed, so that the target user can query the data in the solid state drive based on the data query interface.

[0074] Furthermore, the solid state drive verifies the received decryption result to obtain a verification result, as specifically described in step 401 to step 403, wherein the verification method is, for example, hash verification.

[0075] If the verification result is verification passed, that is, the decryption result returned by the data management system is that the encrypted query request is successfully decrypted, the solid state drive sends a query permission instruction to the data management system. The data management system displays the data query interface of the solid state drive according to the query permission instruction. Therefore, the target user can query the data in the solid state drive through the data query interface.

[0076] If the verification result is verification failure, that is, the decryption result returned by the data management system is that the encrypted query request decryption failed, the solid state drive sends a query not allowed instruction to the data management system, and the data management system displays a query failure prompt message on the display interface according to the query not allowed instruction.

[0077] The embodiment of the present invention performs security query and verification through biometrics. Since each person's biometrics are unique and difficult to replicate, the risk of being cracked or stolen is greatly reduced compared to traditional passwords and digital certificates. At the same time, due to the close combination of the first biometric information and the key, even if malware obtains part of the encrypted information, it cannot decrypt the query request without the correct biometrics, thereby improving resistance to malware attacks and, therefore, improving the security of solid-state hard drive data query and verification.

[0078] In one embodiment, the description of steps 101 to 104 is as follows:

[0079] Step 101, collecting fingerprint pattern features, fingerprint ridge features and fingerprint valley features of a target user based on a fingerprint collection module;

[0080] Step 102: Generate fingerprint information of the target user based on the fingerprint pattern features, fingerprint ridge features, and fingerprint valley features.

[0081] Optionally, the biometric feature acquisition module includes a fingerprint acquisition module, which includes a capacitive fingerprint sensor and an optical fingerprint sensor. When the user's finger touches the sensor surface, the sensor acquires the fingerprint texture features, fingerprint ridge features, and fingerprint valley features of the target user. Further, the solid-state hard disk generates corresponding electrical signals or image data based on the fingerprint texture features, fingerprint ridge features, and fingerprint valley features of the fingerprint, and generates the fingerprint information of the target user, as described in steps 1021 to 1025.

[0082] In one embodiment, the fingerprint information collection function is: , where t represents the collection time, and the collected fingerprint information can be expressed as , fingerprint information Contains a collection of fingerprint detail features, such as fingerprint pattern features, fingerprint ridge features, and fingerprint valley features.

[0083] Therefore, in one embodiment, , n represents the number of fingerprint details, Represents a fingerprint detail feature, such as Indicates fingerprint pattern characteristics, represents the fingerprint ridge feature, Indicates fingerprint valley features, etc.

[0084] Step 103, collecting facial contour features, eye features, nose features and mouth features of the target user based on the face collection module;

[0085] Step 104, generating face information of the target user based on the face contour features, eye features, nose features and mouth features.

[0086] Optionally, the biometric feature acquisition module includes a face acquisition module, and the face recognition module includes a camera, so that the camera captures an image of the user's face, and extracts key feature points of the face, such as eye features, nose features, mouth features, and the overall contour of the face through image processing technology to form facial features.

[0087] Furthermore, the solid state drive generates facial information of the target user based on facial contour features, eye features, nose features, and mouth features, as specifically described in steps 1041 to 1043 .

[0088] In one embodiment, the face image acquisition function is: , where t represents the acquisition time. The face information obtained after feature extraction from the collected face image information can be expressed as ,in, Represents the face feature extraction function, face information A collection of facial features including face outline features, eye features, nose features, and mouth features.

[0089] Therefore, in one embodiment, , where m represents the number of facial features, Represents a facial feature in a face, such as Indicates facial contour features, Indicates eye features. Indicates the characteristics of the nose, Indicates mouth features.

[0090] The embodiment of the present invention accurately extracts fingerprint information and face information, provides a data basis for subsequent security query and verification through biometrics, and improves the security of solid state hard disk data query and verification.

[0091] In one embodiment, the description of steps 1021 to 1025 is as follows:

[0092] Step 1021, according to the directional characteristics of the fingerprint pattern characteristics, obtain the neighborhood of each coordinate point and calculate the gradient vector of the optical path difference in the neighborhood, and determine the directional value of the fingerprint pattern characteristics at each coordinate point based on the gradient vector;

[0093] Step 1022, calculating the second-order derivative information at each coordinate point according to the curvature characteristics of the fingerprint pattern characteristics, and determining the curvature value of each coordinate point based on the second-order derivative information;

[0094] Step 1023, constructing a topological graph using the fingerprint ridge features as edges and the fingerprint valley features as vertices;

[0095] Step 1024, determining the direction value and curvature value of each fingerprint ridge feature as the attribute of each edge in the topological graph, and determining the connectivity value of each vertex in the topological graph;

[0096] Step 1025 , determining fingerprint information based on the topological map, the direction value, the curvature value, and the connectivity value.

[0097] The fingerprint acquisition module in the embodiment of the present invention includes an optical fingerprint sensor. Therefore, when the user's finger touches the sensor surface, the optical fingerprint sensor uses high-resolution optical interference technology. When light is irradiated to the finger surface, the fingerprint ridge features and the fingerprint valley features will produce different optical path differences. In one embodiment, the optical path difference is ,in, Represents the coordinates of the finger surface. The optical path difference can be calculated by detecting the interference fringes of the reflected light. For the fingerprint ridges, the optical path difference is larger, while the optical path difference is smaller in the valleys.

[0098] In one embodiment, the feature extraction function is , the position of the fingerprint ridge feature and the fingerprint valley feature is determined according to the rate of change of the optical path difference, that is, when or The change exceeds a certain threshold When , it is determined to be the boundary of the ridge or valley. By scanning the entire finger surface, the coordinate point set of the fingerprint ridge feature and the fingerprint valley feature is obtained {( .

[0099] According to the directional characteristics of the fingerprint pattern, at each coordinate point Small neighborhood around , calculate the gradient vector of the optical path difference in the neighborhood In one embodiment, the direction calculation function is , determine the direction value of the fingerprint pattern at each coordinate point according to the direction of the gradient vector, and obtain the direction value set of each coordinate point According to the curvature characteristics of the fingerprint pattern, the second-order derivative information is calculated at the coordinate points of the fingerprint ridge features and the fingerprint valley features. Therefore, the second-order derivative tensor can be expressed as , by analyzing the direction and magnitude of its principal curvature, the curvature value is obtained. In one embodiment, the curvature calculation function is: , get the curvature value set of each coordinate point ={ }.

[0100] Furthermore, each fingerprint ridge feature is used as an edge in the topological graph, and the fingerprint valley feature is used as a vertex in the topological graph. In one embodiment, the topological construction function is expressed as , construct a topological map based on the coordinate points of the fingerprint ridge features and fingerprint valley features ,in, represents a vertex set (fingerprint valley feature), Represents a collection of edges (fingerprint ridge features).

[0101] For each edge, its direction characteristics and curvature characteristics are set as the attributes of the edge. Therefore, the attribute assignment function can be expressed as , assign direction values ​​and curvature values ​​to the corresponding edges.

[0102] At the same time, the connectivity of each vertex is calculated, that is, the number of edges connected to the vertex. In one embodiment, the connectivity calculation function , get the connectivity value set of each vertex .

[0103] Final fingerprint information It not only includes the coordinates, direction, and curvature of fingerprint ridge features and fingerprint valley features, but also includes topological graph structure, edge attributes, and vertex connectivity information, i.e. .

[0104] The embodiment of the present invention accurately extracts fingerprint information, provides a data basis for subsequent security query and verification through biometric features, and improves the security of solid state hard disk data query and verification.

[0105] In one embodiment, the description of step 1041 to step 1043 includes:

[0106] Step 1041, projecting a preset light pattern based on the face acquisition module, and calculating the depth information of the face surface according to the deformation of the light pattern, so as to construct a three-dimensional model of the facial contour features;

[0107] Step 1042, determining the boundary of the eye socket according to the depth information in the three-dimensional model, and determining the coordinates of the center of the eyeball based on the local curvature in the eye socket;

[0108] Step 1043, along the central axis of the face in the three-dimensional model, the area with the largest depth value is taken as the bridge of the nose, and the coordinates of the nose wing are determined based on the symmetry and curvature change of both sides of the bridge of the nose;

[0109] Step 1044, determining the lip contour coordinate points of the lips by analyzing the depth value and curvature change of the lower part of the face in the three-dimensional model;

[0110] Step 1045, determining the facial information based on the eyeball center coordinates, nose wing coordinates and lip contour coordinate points.

[0111] The face acquisition module in the embodiment of the present invention is a camera for three-dimensional structured light scanning. Therefore, the camera projects a specific light pattern (such as stripe light) onto the face surface through three-dimensional structured light scanning technology. In one embodiment, the light pattern projection function is ,in, Represents the three-dimensional spatial coordinates. The different heights and shapes of the face surface will modulate the light pattern.

[0112] The reflected light pattern is received by the camera. In one embodiment, the receiving function is: , and get an image with modulation information.

[0113] Furthermore, the depth information of the face surface is calculated according to the deformation of the light pattern. In one embodiment, the depth calculation function is: , get the depth value set of each point on the face surface , construct a three-dimensional model of facial contour features.

[0114] Furthermore, for the eye feature, the eye socket is located in the three-dimensional model by finding the area with a large change in depth value. In one embodiment, the eye socket location function , the boundary of the eye socket is determined according to the gradient change of the depth. In the eye socket, the center position of the eyeball is found by analyzing the change of local curvature. In one embodiment, the eyeball center calculation function , the eyeball center coordinate set is .

[0115] Further, for the nose feature, the area with the largest depth value is found along the central axis of the face in the three-dimensional model as the bridge of the nose. In one embodiment, the bridge of the nose positioning function is: ,in, The position of the nose wing is further determined by analyzing the symmetry and curvature change of both sides of the nose bridge. In one embodiment, the nose wing positioning function is: , get the nose wing coordinate set .

[0116] Furthermore, for the mouth feature, the lip contour is found by analyzing the depth value and curvature change of the lower part of the face in the three-dimensional model. In one embodiment, the lip contour calculation function is: , get the lip contour coordinate point set .

[0117] The final facial information includes the depth information of the three-dimensional model and the coordinates and shape information of key features such as eyes, nose, and mouth.

[0118] The embodiment of the present invention accurately extracts facial information, provides a data basis for subsequent security query and verification through biometric features, and improves the security of solid state hard disk data query and verification.

[0119] In one embodiment, the description of steps 301 to 304 is as follows:

[0120] Step 301, obtaining a shared encryption mode agreed upon between the solid state drive and the data management system;

[0121] Step 302: dividing the target security key into a first target binary sequence of a first sequence length based on a shared encryption mode, and converting each character in the data query request into a corresponding binary value to obtain a second target binary sequence of a second sequence length;

[0122] Step 303, performing key expansion on the first target binary sequence based on the second sequence length to obtain an expanded key sequence;

[0123] Step 304: encrypt the second target binary sequence based on the expanded key sequence, and use the shared encryption mode as a data prefix to obtain an encrypted query request.

[0124] Specifically, the solid-state drive obtains the shared encryption mode M agreed upon between the solid-state drive and the data management system, wherein the shared encryption mode M in the embodiment of the present invention is a binary encryption mode, and the target security key K is divided into a first target binary sequence with a sequence length of n according to the shared encryption mode M, which is recorded as , where each The value is 0 or 1.

[0125] Furthermore, the solid-state drive converts each character in the data query request into a corresponding binary value, and connects all the binary values ​​to obtain a second target binary sequence. The second target binary sequence is expressed as , m is the sequence length.

[0126] Furthermore, the solid state drive performs key expansion on the first target binary sequence according to the sequence length of the second target binary sequence to obtain an expanded key sequence ,in, , where mod represents the modulo operation.

[0127] Furthermore, the SSD processes each binary value of the data query request according to the extended key sequence. Encrypt and get the encrypted binary value , the encryption rules are as follows: .

[0128] Furthermore, the SSD uses the shared encryption mode M as the prefix of the encrypted data, and all encrypted binary values ​​obtained by bit-by-bit encryption Connect in sequence and get the encrypted query request .

[0129] The embodiment of the present invention encrypts the data query request through the target security key matched by the biometric feature. Due to the close combination of the first biometric feature information and the key, even if the malware obtains part of the encrypted information, it cannot decrypt the query request without the correct biometric feature, thereby improving the resistance to malware attacks and thus improving the security of solid-state hard drive data query verification.

[0130] In one embodiment, the description of steps 401 to 403 is as follows:

[0131] Step 401, calculate the verification value of the decryption result based on a preset verification formula; step 402, if the verification value is greater than or equal to a preset threshold, determine the decryption result to be successful decryption of the encrypted query request; step 403, if the verification value is less than the preset threshold, determine the decryption result to be unsuccessful decryption of the encrypted query request, wherein the preset value is set according to the actual situation, and the verification formula is expressed as:

[0132] ;

[0133] in, Represents the verification value, Indicates the encrypted query request. represents the target security key, represents the length of the second sequence, represents the i-th encrypted binary value, represents the i-th extended key, mod represents the modulus operation, Represents the weight factor.

[0134] The embodiment of the present invention performs double verification on the decryption result, thereby ensuring the security of the decryption process and improving the security of the query and verification of the solid state drive data.

[0135] Furthermore, the solid-state hard disk data query security verification system provided by the present invention is described below. The solid-state hard disk data query security verification system described below and the solid-state hard disk data query security verification method described above can be referenced to each other.

[0136] Optional, see Figure 2 , Figure 2 2 is a structural diagram of a solid-state hard disk data query security verification device provided by the present invention, the solid-state hard disk data query security verification device comprises a biometric feature collection module 210, a key storage module 220, a matching module 230, an encryption transmission module 240 and a data query module, and the key storage module stores the first biometric feature information and its corresponding security key;

[0137] The biometric feature collection module 210 is used to respond to the data query request initiated by the target user for the target solid state drive, and collect the second biometric feature information of the target user based on the biometric feature collection module; the second biometric feature information includes fingerprint information and face information;

[0138] The matching module 230 is used to match the second biometric information with the first biometric information stored in the key storage module 220 to obtain a target security key corresponding to the second biometric information;

[0139] The encryption transmission module 240 is used to encrypt the data query request based on the target security key, and send the encrypted query request to the data management system of the solid state drive, so that the data management system decrypts the encrypted query request and returns the decryption result to the solid state drive;

[0140] The data query module 250 is used to display the data query interface of the solid state drive if the decryption result returned by the data management system indicates that the encrypted query request is successfully decrypted, so that the target user can query the data in the solid state drive based on the data query interface.

[0141] The embodiment of the present invention performs security query and verification through biometrics. Since each person's biometrics are unique and difficult to replicate, the risk of being cracked or stolen is greatly reduced compared to traditional passwords and digital certificates. At the same time, due to the close combination of the first biometric information and the key, even if malware obtains part of the encrypted information, it cannot decrypt the query request without the correct biometrics, thereby improving resistance to malware attacks and, therefore, improving the security of solid-state hard drive data query and verification.

[0142] See also Figure 3 , Figure 3 FIG. 1 is an embodiment diagram of an electronic device provided by an embodiment of the present invention. Figure 3 As shown, an embodiment of the present invention provides an electronic device 300, including a memory 310, a processor 320, and a computer program 311 stored in the memory 310 and executable on the processor 320. When the processor 320 executes the computer program 311, the following steps are implemented:

[0143] In response to a data query request initiated by a target user for a target solid-state drive, the target user's second biometric information is collected based on the biometric collection module; the second biometric information includes fingerprint information and face information;

[0144] Matching the second biometric information with the first biometric information stored in the key storage module to obtain a target security key corresponding to the second biometric information;

[0145] Encrypting the data query request based on the target security key, and sending the encrypted query request to the data management system of the solid-state drive, so that the data management system decrypts the encrypted query request and returns the decryption result to the solid-state drive;

[0146] If the decryption result received from the data management system indicates that the encrypted query request is successfully decrypted, the data query interface of the solid state drive is displayed, so that the target user can query the data in the solid state drive based on the data query interface.

[0147] See also Figure 4 , Figure 4 Detailed description of an embodiment of a computer-readable storage medium provided by an embodiment of the present invention. Figure 4 As shown, this embodiment provides a computer-readable storage medium 400, on which a computer program 311 is stored. When the computer program 311 is executed by a processor, the following steps are implemented:

[0148] In response to a data query request initiated by a target user for a target solid-state drive, the target user's second biometric information is collected based on the biometric collection module; the second biometric information includes fingerprint information and face information;

[0149] Matching the second biometric information with the first biometric information stored in the key storage module to obtain a target security key corresponding to the second biometric information;

[0150] Encrypting the data query request based on the target security key, and sending the encrypted query request to the data management system of the solid-state drive, so that the data management system decrypts the encrypted query request and returns the decryption result to the solid-state drive;

[0151] If the decryption result received from the data management system indicates that the encrypted query request is successfully decrypted, the data query interface of the solid state drive is displayed, so that the target user can query the data in the solid state drive based on the data query interface.

[0152] On the other hand, the present invention further provides a computer program product, the computer program product includes a computer program, the computer program can be stored on a non-transitory computer-readable storage medium, when the computer program is executed by a processor, the computer can execute the solid state drive data query security verification method provided by the above methods, the method includes:

[0153] In response to a data query request initiated by a target user for a target solid-state drive, the target user's second biometric information is collected based on the biometric collection module; the second biometric information includes fingerprint information and face information;

[0154] Matching the second biometric information with the first biometric information stored in the key storage module to obtain a target security key corresponding to the second biometric information;

[0155] Encrypting the data query request based on the target security key, and sending the encrypted query request to the data management system of the solid-state drive, so that the data management system decrypts the encrypted query request and returns the decryption result to the solid-state drive;

[0156] If the decryption result received from the data management system indicates that the encrypted query request is successfully decrypted, the data query interface of the solid state drive is displayed, so that the target user can query the data in the solid state drive based on the data query interface.

[0157] The system embodiment described above is merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment. Those of ordinary skill in the art may understand and implement it without creative work.

[0158] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0159] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for verifying the security of solid state drive data query, characterized in that: Applied to a solid state drive data query security verification device, the solid state drive data query security verification device includes a biometric feature acquisition module and a key storage module, the key storage module stores first biometric feature information and its corresponding security key, the solid state drive data query security verification method includes: In response to a data query request initiated by a target user for a target solid-state drive, collecting second biometric information of the target user based on the biometric collection module; the second biometric information includes fingerprint information and face information; Matching the second biometric information with the first biometric information stored in the key storage module to obtain a target security key corresponding to the second biometric information; Encrypting the data query request based on the target security key, and sending the encrypted query request to the data management system of the solid state drive, so that the data management system decrypts the encrypted query request and returns the decryption result to the solid state drive; If the decryption result returned by the data management system indicates that the encrypted query request is successfully decrypted, a data query interface of the solid state drive is displayed, so that the target user can query the data in the solid state drive based on the data query interface; The specific process of encrypting the data query request based on the target security key to obtain the encrypted query request includes: Obtaining a shared encryption mode agreed upon between the solid state drive and the data management system; Dividing the target security key into a first target binary sequence of a first sequence length based on the shared encryption mode, and converting each character in the data query request into a corresponding binary value to obtain a second target binary sequence of a second sequence length; Performing key expansion on the first target binary sequence based on the second sequence length to obtain an expanded key sequence; Encrypting the second target binary sequence based on the extended key sequence and using the shared encryption mode as a data prefix to obtain the encrypted query request; The specific steps of the verification process of the decryption result are as follows: Calculating a verification value of the decryption result based on a preset verification formula; If the verification value is greater than or equal to a preset threshold, determining that the decryption result is that the encrypted query request is successfully decrypted; If the verification value is less than the preset threshold, determining that the decryption result is that the encrypted query request decryption is unsuccessful; The verification formula is expressed as: ； in, Represents the verification value, Indicates the encrypted query request. represents the target security key, represents the length of the second sequence, represents the i-th encrypted binary value, represents the i-th extended key, mod represents the modulus operation, Represents the weight factor.

2. The solid state drive data query security verification method according to claim 1, characterized in that: The biometric feature acquisition module includes a fingerprint acquisition module and a face acquisition module; The collecting the second biometric information of the target user based on the biometric collection module includes: Collecting fingerprint pattern features, fingerprint ridge features, and fingerprint valley features of the target user based on the fingerprint collection module; Generating fingerprint information of the target user based on the fingerprint pattern features, the fingerprint ridge features, and the fingerprint valley features; Collecting facial contour features, eye features, nose features and mouth features of the target user based on the face collection module; Based on the facial contour features, the eye features, the nose features and the mouth features, the facial information of the target user is generated.

3. The method for verifying the security of solid state drive data query according to claim 2, characterized in that: The generating the fingerprint information of the target user based on the fingerprint pattern feature, the fingerprint ridge feature and the fingerprint valley feature includes: According to the directional characteristics of the fingerprint pattern features, the neighborhood of each coordinate point is obtained and the gradient vector of the optical path difference in the neighborhood is calculated, and the directional value of the fingerprint pattern feature at each coordinate point is determined based on the gradient vector; the coordinate point is obtained based on the position of each point of the finger in the fingerprint acquisition module; Calculating the second-order derivative information at each coordinate point according to the curvature feature of the fingerprint pattern feature, and determining the curvature value of each coordinate point based on the second-order derivative information; the second-order derivative information includes a second-order derivative tensor, and the curvature value is obtained by analyzing the principal curvature direction and magnitude of the second-order derivative tensor; Constructing a topological graph using the fingerprint ridge features as edges and the fingerprint valley features as vertices; Determine the direction value and curvature value of each fingerprint ridge feature as the attribute of each edge in the topological graph, and determine the connectivity value of each vertex in the topological graph; The fingerprint information is determined based on the topological map, the direction value, the curvature value, and the connectivity value.

4. The method for verifying the security of solid state drive data query according to claim 2, characterized in that: The generating the face information of the target user based on the face contour feature, the eye feature, the nose feature and the mouth feature includes: Based on the face acquisition module projecting a preset light pattern, and calculating the depth information of the face surface according to the deformation of the light pattern, a three-dimensional model of the facial contour features is constructed; Determine the boundary of the eye socket according to the depth information in the three-dimensional model, and determine the coordinates of the center of the eyeball based on the local curvature in the eye socket; In the three-dimensional model, along the central axis of the human face, the area with the largest depth value is taken as the bridge of the nose, and the coordinates of the nose wings are determined based on the symmetry and curvature change of both sides of the bridge of the nose; Determining the lip contour coordinate points of the lips by analyzing the depth value and curvature change of the lower part of the face in the three-dimensional model; The facial information is determined based on the eyeball center coordinates, the nose wing coordinates and the lip contour coordinate points.

5. The method for verifying the security of solid state drive data query according to claim 1, characterized in that: The matching formula of the fingerprint information is: ； in, represents the fingerprint similarity value, represents the fingerprint similarity calculation function, represents the fingerprint information in the second biometric information, represents the fingerprint template in the first biometric information, Indicates fingerprint information The elements, Indicates fingerprint template The elements, n represents the number of elements; The matching formula of the face information is: ； in, Represents the face similarity value, represents the face similarity calculation function, Indicates the face information in the second biometric information currently collected, represents the face template in the first biometric information, Represents face information The elements, Represents a face template The elements, and m represents the number of elements.

6. A solid state hard disk data query security verification device, characterized in that: It includes a biometric feature collection module, a key storage module, a matching module, an encryption transmission module and a data query module, wherein the key storage module stores the first biometric feature information and its corresponding security key; A biometric feature collection module, configured to respond to a data query request initiated by a target user for a target solid-state drive, and collect second biometric feature information of the target user based on the biometric feature collection module; the second biometric feature information includes fingerprint information and face information; a matching module, configured to match the second biometric characteristic information with the first biometric characteristic information stored in the key storage module to obtain a target security key corresponding to the second biometric characteristic information; An encryption transmission module, used for encrypting the data query request based on the target security key, and sending the encrypted query request to the data management system of the solid state drive, so that the data management system decrypts the encrypted query request and returns the decryption result to the solid state drive; A data query module, configured to display a data query interface of the solid state drive if the decryption result returned by the data management system indicates that the encrypted query request is successfully decrypted, so that the target user can query the data in the solid state drive based on the data query interface; The specific process of encrypting the data query request based on the target security key to obtain the encrypted query request includes: Obtaining a shared encryption mode agreed upon between the solid state drive and the data management system; Dividing the target security key into a first target binary sequence of a first sequence length based on the shared encryption mode, and converting each character in the data query request into a corresponding binary value to obtain a second target binary sequence of a second sequence length; Performing key expansion on the first target binary sequence based on the second sequence length to obtain an expanded key sequence; Encrypting the second target binary sequence based on the extended key sequence and using the shared encryption mode as a data prefix to obtain the encrypted query request; The specific steps of the verification process of the decryption result are as follows: Calculating a verification value of the decryption result based on a preset verification formula; If the verification value is greater than or equal to a preset threshold, determining that the decryption result is that the encrypted query request is successfully decrypted; If the verification value is less than the preset threshold, determining that the decryption result is that the encrypted query request decryption is unsuccessful; The verification formula is expressed as: ； in, Represents the verification value, Indicates the encrypted query request. represents the target security key, represents the length of the second sequence, represents the i-th encrypted binary value, represents the i-th extended key, mod represents the modulus operation, Represents the weight factor.

7. An electronic device comprising: Memory for storing computer software programs; A processor, used to read and execute the computer software program, characterized in that when the processor executes the computer software program, it implements the solid-state hard disk data query security verification method as described in any one of claims 1 to 5.

8. A non-transitory computer-readable storage medium, wherein a computer software program is stored in the non-transitory computer-readable storage medium, and when the computer software program is executed by a processor, the solid-state hard disk data query security verification method as described in any one of claims 1 to 5 is implemented.

Images