Password operation protection method and device, electronic equipment, storage medium and program

Abstract

The embodiment of the invention discloses a password operation protection method and device, electronic equipment, a storage medium and a program, and relates to the technical field of financial science and technology. The method comprises the steps that a current fingerprint password input by a current user is acquired, and the current password input total duration of the current fingerprint password is determined; comparing the current password input total duration with the target password input average duration associated with the current fingerprint number to obtain a first password comparison result; comparing the current fingerprint password with a pre-stored fingerprint password of the current user to obtain a second password comparison result; and determining a password verification result of the current fingerprint password according to the first password comparison result and the second password comparison result. According to the technical scheme, password protection of a user can be enhanced, and therefore the safety of a user account is guaranteed.

Description

Technical Field

[0001] Embodiments of the present invention relate to the field of financial technology, and in particular, to a cryptographic operation protection method, device, electronic device, storage medium and program. Background Art

[0002] In the modern financial system, digital passwords are widely used as an identity verification tool to protect user account security and prevent losses due to password leakage. However, in the process of using digital passwords, there is still a security risk of password theft. Summary of the invention

[0003] The embodiments of the present invention provide a password operation protection method, device, electronic device, storage medium and program, which can strengthen the password protection of users and thus ensure the security of user accounts.

[0004] According to one aspect of the present invention, there is provided a cryptographic operation protection method, comprising:

[0005] Obtaining the current fingerprint password input by the current user, and determining the total password input time of the current fingerprint password;

[0006] Compare the total time of entering the current password with the average time of entering the target password associated with the current number of fingerprints to obtain a first password comparison result;

[0007] Compare the current fingerprint password with the pre-stored fingerprint password of the current user to obtain a second password comparison result;

[0008] The password verification result of the current fingerprint password is determined according to the first password comparison result and the second password comparison result.

[0009] According to another aspect of the present invention, there is provided a password operation protection device, comprising:

[0010] A fingerprint password acquisition module is used to acquire the current fingerprint password input by the current user and determine the total password input time of the current fingerprint password;

[0011] A first password comparison result acquisition module is used to compare the total time of the current password entry with the average time of the target password entry associated with the current number of fingerprints to obtain a first password comparison result;

[0012] A second password comparison result acquisition module is used to compare the current fingerprint password with the pre-stored fingerprint password of the current user to obtain a second password comparison result;

[0013] The password verification result acquisition module is used to determine the password verification result of the current fingerprint password according to the first password comparison result and the second password comparison result.

[0014] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0015] at least one processor; and

[0016] a memory communicatively connected to the at least one processor; wherein,

[0017] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can perform the cryptographic operation protection method described in any embodiment of the present invention.

[0018] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the cryptographic operation protection method described in any embodiment of the present invention when executed.

[0019] According to another aspect of the present invention, a computer program product is provided, including a computer program, wherein when the computer program is executed by a processor, the cryptographic operation protection method according to any embodiment of the present invention is implemented.

[0020] The embodiment of the present invention obtains the current fingerprint password input by the current user and determines the total time of the current password entry of the current fingerprint password. Furthermore, the total time of the current password entry can be compared with the average time of the target password entry associated with the current number of fingerprints to obtain a first password comparison result. Furthermore, the current fingerprint password can be compared with the pre-stored fingerprint password of the current user to obtain a second password comparison result, so that the password verification result of the current fingerprint password can be determined according to the first password comparison result and the second password comparison result, solving the problem of easy password leakage in the existing digital password input scenario, and strengthening the user's password protection, thereby ensuring the security of the user account.

[0021] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0023] Figure 1 is a flow chart of a password operation protection method provided by Embodiment 1 of the present invention;

[0024] Figure 2 is a flow chart of a cryptographic operation protection method provided by Embodiment 2 of the present invention;

[0025] Figure 3 It is a side view of a fingerprint collection device provided by Embodiment 2 of the present invention;

[0026] Figure 4 It is a top view of the interior of a base of a fingerprint collection device provided in Embodiment 2 of the present invention;

[0027] Figure 5 is a schematic diagram of a password operation protection device provided in Embodiment 3 of the present invention;

[0028] Figure 6 A schematic diagram of the structure of an electronic device provided in Embodiment 4 of the present invention. DETAILED DESCRIPTION

[0029] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0030] It should be noted that the terms "first", "second" and "current" in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0031] Embodiment 1

[0032] Figure 1 This is a flowchart of a password operation protection method provided by the first embodiment of the present invention. This embodiment is applicable to the case where the user password input operation is protected by the number of fingerprint passwords and the password entry time. The method can be executed by a password operation protection device, which can be implemented by software and / or hardware, and can generally be integrated in an electronic device. The electronic device can be a terminal device or a server device. As long as it can execute the password operation protection method, the embodiment of the present invention does not limit the specific device type of the electronic device. Accordingly, if Figure 1 As shown, the method includes the following operations:

[0033] S110, obtaining a current fingerprint password input by a current user, and determining a total password input time of the current fingerprint password.

[0034] The current user may be a user who is interacting with a specific system or device. For example, a user who is using a bank ATM (Automated Teller Machine) to perform business operations. The current fingerprint password may be the fingerprint password entered by the current user. The total time for entering the current password may be the total time for the current user to enter the current fingerprint password.

[0035] The device operated by the current user (hereinafter referred to as the device) may be configured with a fingerprint collection device. The device may be any type of device with a fingerprint collection device. For example, the device may include but is not limited to bank counter terminals, ATM machines, POS (Point of Sale) machines, and other types of devices that require identity authentication through fingerprint passwords, etc. The embodiments of the present invention do not limit the type of device. When the current user performs a password input operation based on the device, the fingerprint collection and input operations can be performed in sequence based on the fingerprint collection device of the device, thereby inputting the fingerprint password in sequence. In the process of the current user inputting the fingerprint password, the device can first obtain the current fingerprint password input by the current user, and monitor the fingerprint password operation of the current user in real time, thereby obtaining the total password entry time of the current fingerprint password.

[0036] S120: Compare the total time for entering the current password with the average time for entering a target password associated with the current number of fingerprints to obtain a first password comparison result.

[0037] The current number of fingerprints may be the number of fingerprints included in the current fingerprint password. For example, if the fingerprint password corresponding to each digital password in a complete digital password is 1 right thumb fingerprint, then the current number of fingerprints corresponding to the digital password is 1. The average time for entering the target password may be the average time for entering the password corresponding to the current number of fingerprints. The first password comparison result may be a comparison result obtained by comparing the total time for entering the current password with the average time for entering the target password.

[0038] The device can store the average password entry time corresponding to different numbers of fingerprints. It is understandable that different numbers of fingerprints usually result in different values ​​of the corresponding average password entry time. Accordingly, after the device obtains the current fingerprint password entered by the current user and determines the total password entry time of the current fingerprint password, the total password entry time can be compared with the average target password entry time associated with the current number of fingerprints, thereby obtaining the first password comparison result as a basis for subsequent operations.

[0039] For example, assuming that the current number of fingerprints of the current fingerprint password is 3, the device can obtain the average password entry time corresponding to the number of fingerprints of 3 as the target password entry average time. Assuming that the current number of fingerprints of the current fingerprint password is 6, the device can obtain the average password entry time corresponding to the number of fingerprints of 6 as the target password entry average time.

[0040] Exemplarily, when the total time for entering the current password is less than or equal to the average time for entering the target password associated with the current number of fingerprints, the first password comparison result may be that the total time for entering the current password does not exceed the average time for entering the target password associated with the previous number of fingerprints; when the total time for entering the current password is greater than the average time for entering the target password associated with the current number of fingerprints, the first password comparison result may be that the total time for entering the current password exceeds the average time for entering the target password associated with the previous number of fingerprints.

[0041] S130: Compare the current fingerprint password with the pre-stored fingerprint password of the current user to obtain a second password comparison result.

[0042] The pre-stored fingerprint password may be a fingerprint password pre-stored by the current user. The second password comparison result may be a password comparison result obtained by comparing the current fingerprint password with the pre-stored fingerprint password of the current user.

[0043] Specifically, the device can compare the current fingerprint password with the pre-stored fingerprint password of the current user, so as to obtain the second password comparison result. Exemplarily, when the current fingerprint password is consistent with the pre-stored fingerprint password of the current user, it can be determined that the current fingerprint password matches the pre-stored fingerprint password; when the current fingerprint password is inconsistent with the pre-stored fingerprint password of the current user, it can be determined that the current fingerprint password does not match the pre-stored fingerprint password.

[0044] Optionally, the device can obtain the pre-stored average password entry time and the pre-stored fingerprint password of the current user from the corresponding server side, or can also pre-store the average password entry time and the pre-stored fingerprint password of the current user locally. The embodiments of the present invention do not limit the manner in which the device obtains information such as the average password entry time and the pre-stored fingerprint password of the current user.

[0045] S140: Determine a password verification result of the current fingerprint password according to the first password comparison result and the second password comparison result.

[0046] The password verification result may be a verification result of the current fingerprint password determined based on the first password comparison result and the second password comparison result.

[0047] Correspondingly, after obtaining the first password comparison result and the second password comparison result, the device can determine the password verification result of the current fingerprint password according to the first password comparison result and the second password comparison result, so as to decide whether to allow the current user to perform subsequent operations.

[0048] It can be seen that first, the total time for entering the current password is compared with the average time for entering the target password to obtain the first password comparison result. The device can perform a preliminary verification of the current password based on the password entry time, and then compare the current fingerprint password with the fingerprint password pre-stored by the current user to obtain the second password comparison result. Combining the two comparison results, the password verification result of the current fingerprint password can be determined, thereby strengthening the user's password protection and ensuring the security of the user's account.

[0049] The embodiment of the present invention obtains the current fingerprint password input by the current user and determines the total time of the current password entry of the current fingerprint password. Furthermore, the total time of the current password entry can be compared with the average time of the target password entry associated with the current number of fingerprints to obtain a first password comparison result. Furthermore, the current fingerprint password can be compared with the pre-stored fingerprint password of the current user to obtain a second password comparison result, so that the password verification result of the current fingerprint password can be determined according to the first password comparison result and the second password comparison result, solving the problem of easy password leakage in the existing digital password input scenario, and strengthening the user's password protection, thereby ensuring the security of the user account.

[0050] Embodiment 2

[0051] Figure 2 is a flowchart of a password operation protection method provided by the second embodiment of the present invention. This embodiment is specific based on the above embodiment. In this embodiment, multiple specific optional implementation methods are provided for obtaining the operation before the current fingerprint password input by the current user and determining the password verification result of the current fingerprint password according to the comparison result of the first password and the comparison result of the second password. Figure 2 As shown, the method of this embodiment may include:

[0052] S210, collecting fingerprint passwords set by each user for the digital password; wherein, one of the digital passwords includes at least one fingerprint password; the number of fingerprints included in the fingerprint passwords of different users is the same or different.

[0053] Among them, a digital password can be a password composed of numbers, which can be used to verify user identity, protect privacy information, and obtain system access rights. A fingerprint password can be a password composed of fingerprints. It should be noted that a digital password can include at least one fingerprint password, and the number of fingerprint passwords of different users can be the same or different. Using a fingerprint password instead of a digital password to perform a password input operation can effectively reduce the risk of password leakage.

[0054] In the embodiment of the present invention, before using the user's fingerprint password to perform password input operation and password decryption, the fingerprint password set by each user for the digital password can be collected first.

[0055] In a specific example, after a user applies for a bank card at a bank, he or she still sets a six-digit password as the bank card deposit and withdrawal password according to the original process, so that the user can still make deposits and withdrawals or other business transactions by entering the six-digit password. After entering the six-digit password, the user can further set fingerprint information for the set digital password. Optionally, there are two ways to set the fingerprint password corresponding to the digital password: the first is to set it on-site at the bank, the bank provides the corresponding fingerprint collection device, and the user enters the fingerprint according to the prompt given by the fingerprint collection device. Figure 3 is a side view of a fingerprint collection device provided by Embodiment 2 of the present invention, Figure 4 FIG. 1 is a top view of the interior of a base of a fingerprint collection device provided in Embodiment 2 of the present invention. Figure 3 and Figure 4As shown, the fingerprint collection device can be set on a bank counter or ATM machine and other devices that use passwords to verify user information, including a base and an upper cover, with a space for accommodating a hand between the upper cover and the base. The base is concave downward to form a space for accommodating palms and fingers, and a fingerprint collection area is provided at the end of the finger. The fingerprint collection area is also provided with a pressure sensor. When the pressure detected by the pressure sensor reaches a certain threshold, the fingerprint collection area is triggered to collect fingerprints. The upper cover can completely cover the base and is opaque to prevent others from seeing it, thereby achieving password protection.

[0056] When in use, the user moves his hand from Figure 3 The hand placement space between the base and the upper cover is shown to extend into the fingerprint collection device, and then the hand is placed in the palm and finger accommodation space on the base, and then fingerprint collection can be performed. The confirmation key on the existing password input device can be retained on the fingerprint collection device. Press the confirmation key once before starting to record fingerprints. Press the confirmation key after the fingerprint entry is completed to transmit each set of recorded fingerprints to the server for analysis. For example, if the user needs to enter the fingerprint of the left index finger, the base can be pressed slightly with the left index finger. At this time, the pressure sensor detects the pressure, and then the fingerprint collection area performs fingerprint collection. It should be noted that the confirmation key can be pressed once before starting to record fingerprints, which can avoid erroneous fingerprint entry caused by accidental pressure when the user extends his hand.

[0057] The second method of setting the fingerprint password is for the user to log in to the bank user terminal offline through a mobile terminal and enter the fingerprint according to the prompt of the bank user terminal.

[0058] Among them, the fingerprint collection device and the bank user terminal can have a built-in fingerprint entry process to guide the user to enter the fingerprint according to the prompt. Exemplarily, the first prompt is given on the display interface of the fingerprint collection device or the bank user terminal, "Please select the number of fingerprints", and the number options are given on the display interface at the same time. There are six number options, 1-6 respectively. After the user selects the corresponding option, click to confirm, and then the second prompt is given on the display interface, "Please select the corresponding finger", and the finger options are given on the display interface at the same time. The options may include the left thumb, left index finger, left middle finger, left ring finger, left little finger, right thumb, right index finger, right middle finger, right ring finger and right little finger. After the user selects the corresponding option, click to confirm, and then the fingerprint entry window is given on the display interface, and the user can enter the fingerprint accordingly. Here, the user can select one option or two options at the same time, that is, the fingerprint combination of different fingers can represent a digit password, and the fingerprint entry method corresponding to the remaining digit passwords is similar.

[0059] It should be noted that after the user selects the quantity option, the display interface always displays the Done button. The Done button can provide the user with a command trigger entry for completing the fingerprint password input. If the user initially selects 5 fingerprint quantity options, after entering 3 fingerprints, if you temporarily decide to use only three fingerprints as the password, you can click the Done button, and then the display interface will give a third prompt "You have selected a 5-digit fingerprint password, and only 3 have been entered. Are you sure to change it?" The user selects Confirm to complete the fingerprint entry. In the above solution, the user does not need to re-enter when temporarily changing the number of fingerprints, which improves the user experience.

[0060] S220, recording the average password entry time of each user continuously inputting the corresponding fingerprint password.

[0061] The average password entry time of the fingerprint password may be the average time taken by each user to enter a set of fingerprints corresponding to a complete digital password.

[0062] Correspondingly, in the process of collecting the fingerprint passwords set by each user for the digital password, the average password entry time of each user inputting a complete set of digital passwords corresponding to the fingerprint password can also be recorded.

[0063] S230: Establish and store a first mapping relationship table between the number of fingerprints and the average password entry time.

[0064] The first mapping relationship table may be a corresponding relationship table between the number of fingerprints and the average password entry time.

[0065] Accordingly, after recording the average password entry time of each user continuously entering the corresponding fingerprint password, a first mapping relationship table between the number of fingerprints and the average password entry time can be established and stored as reference data for subsequent user fingerprint password verification. In the above scheme, by collecting the fingerprint password set by each user for the data password, the risk of password leakage can be effectively reduced, and the average password entry time can be recorded, and the first mapping relationship table can be established and stored, which can provide data support for subsequent improvement of password security and user experience.

[0066] In a specific example, Table 1 is an example of a first mapping relationship table provided in Embodiment 2 of the present invention. As shown in Table 1, when the number of fingerprints corresponding to a set of complete digital passwords of a user is 1, the time taken by these users to enter one fingerprint corresponding to the complete digital password is recorded, and the time taken by these users to enter one fingerprint corresponding to the complete digital password is averaged to obtain the average password entry time t1 corresponding to the number of fingerprints. When the number of fingerprints corresponding to a set of complete digital passwords of a user is 2, the time taken by these users to enter two fingerprints corresponding to the complete digital password is recorded, and the time taken by these users to enter two fingerprints corresponding to the complete digital password is averaged to obtain the average password entry time t2 corresponding to the number of fingerprints. When the number of fingerprints corresponding to a set of complete digital passwords of a user is 3, the time taken by these users to enter three fingerprints corresponding to the complete digital password is recorded, and the time taken by these users to enter three fingerprints corresponding to the complete digital password is averaged to obtain the average password entry time t3 corresponding to the number of fingerprints. When the number of fingerprints corresponding to a set of complete digital passwords of a user is 4, the time taken by these users to input the 4 fingerprints corresponding to the complete digital passwords is recorded, and the average time taken by these users to input the 4 fingerprints corresponding to the complete digital passwords is calculated to obtain the average password entry time t4 corresponding to the number of 4 fingerprints. When the number of fingerprints corresponding to a set of complete digital passwords of a user is 5, the time taken by these users to input the 5 fingerprints corresponding to the complete digital passwords is recorded, and the average time taken by these users to input the 5 fingerprints corresponding to the complete digital passwords is calculated to obtain the average password entry time t5 corresponding to the number of 5 fingerprints. When the number of fingerprints corresponding to a set of complete digital passwords of a user is 6, the time taken by these users to input the 6 fingerprints corresponding to the complete digital passwords is recorded, and the average time taken by these users to input the 6 fingerprints corresponding to the complete digital passwords is calculated to obtain the average password entry time t6 corresponding to the number of 6 fingerprints.

[0067] Table 1 First mapping relationship table

[0068] Number of fingerprints q Average password entry time t 1 t1 2 t2 3 t3 4 t4 5 t5 6 t6

[0069] In an optional embodiment of the present invention, before obtaining the current fingerprint password input by the current user, it can also include: obtaining user attribute information of each of the users; establishing and regularly updating a second mapping relationship table between the number of fingerprints, the user attribute information and the average password entry time.

[0070] The user attribute information may be various data and information describing the characteristics of the user's features. For example, the user attribute information may include, but is not limited to, the user's age, etc. The embodiment of the present invention does not limit the specific information included in the user attribute information. The second mapping relationship table may be a table for recording the relationship between the number of fingerprints, user attribute information, and the average password entry time.

[0071] In an embodiment of the present invention, before obtaining the current fingerprint password input by the current user, the user attribute information of each user can also be obtained. Furthermore, a second mapping relationship table between the number of fingerprints, the user attribute information and the average password entry time can be established based on the user attribute information. It should be noted that the second mapping relationship table can be regularly updated with the increase in the number of users, the number of fingerprints set by the user, and the average password entry time of the user. The above scheme can provide more accurate data support for subsequent improvement of password security and user experience by establishing and regularly updating the second mapping relationship table, taking into account the fingerprint characteristics and fingerprint entry speed of different user age groups.

[0072] S240: Acquire the current fingerprint password input by the current user, and determine the total password input time of the current fingerprint password.

[0073] S250: Compare the total time for entering the current password with the average time for entering a target password associated with the current number of fingerprints to obtain a first password comparison result.

[0074] In a specific example, Table 2 is an example of a second mapping relationship table provided in Embodiment 2 of the present invention. As shown in Table 2, when the number of fingerprints corresponding to a set of complete digital passwords of a user is 1, the time taken by users under the age of 25 to enter one fingerprint corresponding to the complete digital password is recorded, and the average time taken by these users to enter one fingerprint corresponding to the complete digital password is calculated to obtain the average password entry time t11 corresponding to the number of fingerprints; the time taken by users aged 26-40 to enter one fingerprint corresponding to a set of complete digital passwords is recorded, and the average time taken by these users to enter one fingerprint corresponding to the complete digital password is calculated to obtain the average password entry time t12 corresponding to the number of fingerprints; the time taken by users aged 41-50 to enter one fingerprint corresponding to a set of complete digital passwords is recorded, and the average time taken by these users to enter one fingerprint corresponding to the complete digital password is calculated to obtain the average password entry time t13 corresponding to the number of fingerprints; the time taken by users aged over 50 to enter one fingerprint corresponding to a set of complete digital passwords is recorded, and the average time taken by these users to enter one fingerprint corresponding to the complete digital password is calculated to obtain the average password entry time t14 corresponding to the number of fingerprints. Similarly, the average password entry time corresponding to different numbers of fingerprints for a set of complete digital passwords of the user can be recorded respectively.

[0075] Table 2 Second mapping relationship table

[0076]

[0077] In an optional embodiment of the present invention, the comparing the total time for entering the current password with the average time for entering the target password associated with the current number of fingerprints to obtain the first password comparison result may include: querying the second mapping relationship table according to the current user attribute information of the current user and the current number of fingerprints to obtain the average time for entering the target password associated with the current number of fingerprints; comparing the total time for entering the current password with the average time for entering the target password to obtain the first password comparison result.

[0078] The current user attribute information may be user attribute information of the current user.

[0079] Specifically, when the total time for entering the current password is compared with the average time for entering the target password associated with the current number of fingerprints to obtain the first password comparison result, the current user attribute information of the current user and the number of current fingerprint passwords entered by the current user can be obtained. Furthermore, the second mapping relationship table can be queried according to the current user attribute information and the current number of fingerprints of the current user, so as to obtain the average time for entering the target password associated with the current number of fingerprints. Therefore, the total time for entering the current password can be compared with the average time for entering the target password to obtain the first password comparison result.

[0080] In a specific example, as shown in Table 2, assuming that t22 is 15s, when the age information of the current user is 35 years old, the number of current fingerprint passwords entered by the current user is 2 and the total time for entering the current password is 20s, the first password comparison result can be determined as the total time for entering the current password exceeds the average time for entering the target password associated with the current number of fingerprints.

[0081] S260: Compare the current fingerprint password with the pre-stored fingerprint password of the current user to obtain a second password comparison result.

[0082] S270: Determine a password verification result of the current fingerprint password according to the first password comparison result and the second password comparison result.

[0083] In an optional embodiment of the present invention, determining the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result may include: when it is determined according to the first password comparison result that the total time duration of the current password entry exceeds a preset time duration range based on the average time duration of the target password entry, obtaining the number of fingerprints included in the current fingerprint password; when it is determined that the number of fingerprints included in the current fingerprint password is different from the number of fingerprints included in the pre-stored fingerprint password, determining that the password verification result of the current fingerprint password is verification failure; when it is determined that the number of fingerprints included in the current fingerprint password is the same as the number of fingerprints included in the pre-stored fingerprint password, and when it is determined according to the second password comparison result that the current fingerprint password matches the pre-stored fingerprint password, determining that the password verification result of the current fingerprint password is verification success.

[0084] The preset time range may be a time range pre-set according to the average time of entering the target password. For example, assuming that the average time of entering the target password is t, the preset time range may be (t-t0, t+t0), and the specific value of t0 may be set according to actual needs. The embodiment of the present invention does not limit the specific value of t0.

[0085] In an embodiment of the present invention, after the total time of entering the current password is compared with the average time of entering the target password to obtain the first password comparison result, it can be determined whether the total time of entering the current password exceeds the preset time range of the average time of entering the target password according to the first password comparison result. In the case that it is determined according to the first password comparison result that the total time of entering the current password exceeds the preset time range based on the average time of entering the target password, the number of fingerprints included in the current fingerprint password can be further obtained, so as to verify the current fingerprint password.

[0086] In an embodiment of the present invention, when it is determined that the number of fingerprints included in the current fingerprint password is different from the number of fingerprints included in the pre-stored fingerprint password, the password verification result of the current fingerprint password can be directly determined as verification failure without further specific comparison and verification of each fingerprint; when it is determined that the number of fingerprints included in the current fingerprint password is the same as the number of fingerprints included in the pre-stored fingerprint password, it is also necessary to determine whether the current fingerprint password matches the pre-stored fingerprint password based on the second password comparison result, that is, whether the current fingerprint password is the same as the pre-stored fingerprint password. Further, when it is determined that the current fingerprint password matches the pre-stored fingerprint password based on the second password comparison result, the password verification result of the current fingerprint password can be determined as verification passed; when it is determined that the current fingerprint password does not match the pre-stored fingerprint password based on the second password comparison result, the password verification result of the current fingerprint password can be determined as verification failure.

[0087] In the above scheme, when the number of fingerprints included in the current fingerprint password is different from the number of fingerprints included in the pre-stored fingerprint password, the password verification result of the current fingerprint password is directly determined as verification failure, without the need to perform specific comparison and verification on each fingerprint. This can improve the verification efficiency of the current fingerprint password, simplify the verification logic, and improve the user experience.

[0088] In an optional embodiment of the present invention, after determining the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result, it can also include: counting the number of deviations of the total time for entering the current password exceeding a preset time range based on the average time for entering the target password; when it is determined that the number of deviations is greater than or equal to a preset threshold, calculating the deviation value between the total time for entering the current password and the average time for entering the target password; and updating the boundary value of the preset time range based on the maximum deviation value and the average time for entering the target password.

[0089] The number of deviations may be the number of times the total duration of the current password entry exceeds a preset duration range based on the average duration of the target password entry. The preset threshold may be a preset threshold of the number of deviations. Exemplarily, the preset threshold may be 3 times. The deviation value may be the difference between the total duration of the current password entry and the average duration of the target password entry. The boundary value of the preset duration range may be the endpoint value of the preset duration range, i.e., the maximum value and the minimum value of the preset duration range.

[0090] In an embodiment of the present invention, after determining that the total duration of the current password entry exceeds the preset duration range based on the average duration of the target password entry according to the first password comparison result, the number of deviations of the total duration of the current password entry exceeding the preset duration range based on the average duration of the target password entry can be counted. When the number of deviations is greater than or equal to the preset threshold, the deviation value between the total duration of the current password entry and the average duration of the target password entry can be calculated, so that the boundary value of the preset duration range can be updated according to the maximum value of the deviation value and the average duration of the target password entry. The above scheme realizes the real-time update of the preset duration range, thereby improving the user experience while ensuring the efficiency of password verification.

[0091] In a specific example, assuming that the preset threshold is 3 times, the number of deviations is 4 times, the target password entry average duration is t, and the preset duration range is (t-t0, t+t0), the deviation value between the current password entry total duration and the target password entry average duration can be calculated. Further, when the maximum value of the deviation is a, the preset duration range can be updated to (ta, t+a).

[0092] In an optional embodiment of the present invention, after determining the password verification result of the current fingerprint password according to the first password comparison result and the second password comparison result, it may also include: when it is determined according to the first password comparison result that the total time duration of entering the current password does not exceed a preset time duration range based on the average time duration of entering the target password, and when it is determined according to the second password comparison result that the current fingerprint password matches the pre-stored fingerprint password, obtaining the number of fingerprints included in the current fingerprint password; when it is determined that the number of fingerprints included in the current fingerprint password is less than a first fingerprint quantity threshold, and when it is determined that the total time duration of entering the current password is less than the average time duration of entering the first reference password, generating a first delayed verification prompt message according to the real-time password operation behavior of the current user; when it is determined that the current fingerprint password matches the pre-stored fingerprint password When the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold, and it is determined that the total time for entering the current password is greater than or equal to the average time for entering the first reference password, a subsequent business processing flow is executed; when it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and it is determined that the total time for entering the current password is less than the average time for entering the second reference password, a second delayed verification prompt message is generated according to the real-time password operation behavior of the current user; when it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and it is determined that the total time for entering the current password is greater than or equal to the average time for entering the second reference password, a subsequent business processing flow is executed.

[0093] Among them, the first fingerprint quantity threshold may be pre-set and used to measure the fingerprint quantity threshold. Exemplarily, when the total number of digital passwords is 6 digits, the first fingerprint quantity threshold may be 3, and the embodiment of the present invention does not limit the specific value of the first fingerprint quantity threshold. The first reference password entry average time may be the average password entry time when the number of fingerprints is the first fingerprint quantity threshold. The first delayed verification prompt information may be the delayed verification prompt information generated when the current user enters the current fingerprint password and the total time of entering the current password is less than the average time of entering the first reference password. The second fingerprint quantity threshold may be pre-set and used to measure the fingerprint quantity threshold. Exemplarily, when the total number of digital passwords is 6 digits, the second fingerprint quantity threshold may be 6, and the embodiment of the present invention does not limit the specific value of the second fingerprint quantity threshold. The second reference password entry average time may be the average password entry time when the number of fingerprints is the second fingerprint quantity threshold. The second delayed verification prompt information may be the delayed verification prompt information generated when the current user enters the current fingerprint password and the total time of entering the current password is less than the average time of entering the second reference password.

[0094] In the embodiment of the present invention, when it is determined according to the first password comparison result that the total time duration of the current password entry does not exceed the preset time duration range based on the average time duration of the target password entry, it can be determined according to the second password comparison result whether the current fingerprint password matches the pre-stored fingerprint password. When it is determined according to the second password comparison result that the current fingerprint password matches the pre-stored fingerprint password, the number of fingerprints included in the current fingerprint password can be obtained.

[0095] Furthermore, when it is determined that the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold, and when it is determined that the total time for entering the current password is less than the average time for entering the first reference password, a first delayed verification prompt message can be generated based on the current user's real-time password operation behavior; when it is determined that the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold, and when it is determined that the total time for entering the current password is greater than or equal to the average time for entering the first reference password, the subsequent business processing flow is executed.

[0096] When it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and when it is determined that the total time for entering the current password is less than the average time for entering the second reference password, a second delayed verification prompt message can be generated based on the current user's real-time password operation behavior; when it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold, and when it is determined that the total time for entering the current password is greater than or equal to the average time for entering the second reference password, a subsequent business processing flow is executed.

[0097] In a specific example, assuming that the first fingerprint quantity threshold is 3, the average time for entering the first reference password is 15 seconds, and the current user enters 2 current fingerprint passwords, and the total time for entering the current password is 8 seconds, the current user can be prompted to wait for verification until the total time for entering the current password reaches 15 seconds, and then the current user can be prompted to take it out of the fingerprint collection device. If the total time for entering the current password is greater than or equal to 15 seconds, the current user can be immediately prompted to continue with the subsequent business processing flow.

[0098] Assuming that the second fingerprint quantity threshold is 6, and the average time for entering the second reference password is 30 seconds, then when the current user enters 6 current fingerprint passwords and the total time for entering the current password is 25 seconds, the current user can be prompted to wait for verification until the total time for entering the current password reaches 30 seconds, and then the current user can be prompted to take it out from the fingerprint collection device. If the total time for entering the current password is greater than or equal to 30 seconds, the current user can be immediately prompted to continue with the subsequent business processing flow. By delaying verification, when the number of fingerprints is within the first fingerprint quantity threshold, each user has a consistent verification time, and when the number of fingerprints is within the second fingerprint quantity threshold, each user has a consistent verification time, which effectively prevents others from speculating on the number of fingerprints through the verification time, and at the same time prevents users with fewer fingerprints from waiting too long.

[0099] The embodiment of the present invention establishes and stores a first mapping relationship table by collecting the fingerprint passwords set by each user for the digital password and recording the average password entry time of each user continuously entering the corresponding fingerprint password. Furthermore, the current fingerprint password entered by the current user can be obtained and the total password entry time of the current fingerprint password can be determined, and then the total password entry time of the current password can be compared with the average target password entry time associated with the current number of fingerprints to obtain a first password comparison result. Furthermore, the current fingerprint password can be compared with the pre-stored fingerprint password of the current user to obtain a second password comparison result, so that the password verification result of the current fingerprint password can be determined based on the first password comparison result and the second password comparison result, solving the problem of easy leakage of passwords in existing digital password input scenarios, and strengthening the user's password protection, thereby ensuring the security of the user account.

[0100] It should be noted that the information collected in this disclosure is information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of relevant data comply with the relevant laws, regulations and standards of relevant countries and regions, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0101] It should be noted that, in the embodiment of the present invention, a corresponding operation entry may be provided for the user to choose to agree or reject the automated decision result; if the user chooses to reject, the expert decision process is entered.

[0102] It should be noted that any arrangement and combination of the technical features in the above embodiments also falls within the protection scope of the present invention.

[0103] Embodiment 3

[0104] Figure 5 is a schematic diagram of a password operation protection device provided by Embodiment 3 of the present invention, such as Figure 5 As shown, the device includes: a fingerprint password acquisition module 310, a first password comparison result acquisition module 320, a second password comparison result acquisition module 330 and a password verification result acquisition module 340, wherein:

[0105] The fingerprint password acquisition module 310 is used to acquire the current fingerprint password input by the current user and determine the total password input time of the current fingerprint password.

[0106] The first password comparison result acquisition module 320 is used to compare the total time duration of the current password entry with the average time duration of the target password entry associated with the current number of fingerprints to obtain a first password comparison result.

[0107] The second password comparison result acquisition module 330 is used to compare the current fingerprint password with the pre-stored fingerprint password of the current user to obtain a second password comparison result.

[0108] The password verification result acquisition module 340 is used to determine the password verification result of the current fingerprint password according to the first password comparison result and the second password comparison result.

[0109] The embodiment of the present invention obtains the current fingerprint password input by the current user and determines the total time of the current password entry of the current fingerprint password. Furthermore, the total time of the current password entry can be compared with the average time of the target password entry associated with the current number of fingerprints to obtain a first password comparison result. Furthermore, the current fingerprint password can be compared with the pre-stored fingerprint password of the current user to obtain a second password comparison result, so that the password verification result of the current fingerprint password can be determined according to the first password comparison result and the second password comparison result, solving the problem of easy password leakage in the existing digital password input scenario, and strengthening the user's password protection, thereby ensuring the security of the user account.

[0110] Optionally, the password verification result acquisition module 340 is specifically used to: obtain the number of fingerprints included in the current fingerprint password when it is determined according to the first password comparison result that the total time for entering the current password exceeds a preset time range based on the average time for entering the target password; determine that the password verification result of the current fingerprint password is verification failure when it is determined that the number of fingerprints included in the current fingerprint password is different from the number of fingerprints included in the pre-stored fingerprint password; determine that the password verification result of the current fingerprint password is verification failure when it is determined that the number of fingerprints included in the current fingerprint password is the same as the number of fingerprints included in the pre-stored fingerprint password, and determine that the current fingerprint password matches the pre-stored fingerprint password according to the second password comparison result.

[0111] Optionally, the above-mentioned device may also include a preset time range update module, which is specifically used to: count the number of deviations of the current password entry total time that exceeds a preset time range based on the target password entry average time; when it is determined that the number of deviations is greater than or equal to a preset threshold, calculate the deviation value between the current password entry total time and the target password entry average time; and update the boundary value of the preset time range according to the maximum deviation value and the target password entry average time.

[0112] Optionally, the above-mentioned device may also include a prompt module, which is specifically used to: when it is determined according to the first password comparison result that the total time for entering the current password does not exceed the preset time range based on the average time for entering the target password, and when it is determined according to the second password comparison result that the current fingerprint password matches the pre-stored fingerprint password, obtain the number of fingerprints included in the current fingerprint password; when it is determined that the number of fingerprints included in the current fingerprint password is less than a first fingerprint number threshold, and when it is determined that the total time for entering the current password is less than the average time for entering the first reference password, generate a first delayed verification prompt message according to the real-time password operation behavior of the current user; when it is determined that the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold If the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and if the total time for entering the current password is less than the average time for entering the second reference password, a subsequent business processing flow is executed; if the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and if the total time for entering the current password is less than the average time for entering the second reference password, a second delayed verification prompt message is generated according to the real-time password operation behavior of the current user; if the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and if the total time for entering the current password is greater than or equal to the average time for entering the second reference password, a subsequent business processing flow is executed.

[0113] Optionally, the above-mentioned device may also include a mapping relationship table establishment module, which is specifically used to: collect the fingerprint password set by each user for the digital password; wherein, one of the digital passwords includes at least one fingerprint password; the number of fingerprints included in the fingerprint passwords of different users is the same or different; record the average password entry time of each user continuously entering the corresponding fingerprint password; establish and store a first mapping relationship table between the number of fingerprints and the average password entry time.

[0114] Optionally, the mapping relationship table establishing module is further used to: obtain user attribute information of each of the users; establish and regularly update a second mapping relationship table between the number of fingerprints, the user attribute information and the average password entry time.

[0115] Optionally, the first password comparison result acquisition module 320 is specifically used to: query the second mapping relationship table according to the current user attribute information of the current user and the current number of fingerprints to obtain the average target password entry time associated with the current number of fingerprints; compare the total current password entry time with the average target password entry time to obtain the first password comparison result.

[0116] The above-mentioned password operation protection device can execute the password operation protection method provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method. For technical details not described in detail in this embodiment, please refer to the password operation protection method provided by any embodiment of the present invention.

[0117] Since the cryptographic operation protection device described above is a device that can execute the cryptographic operation protection method in the embodiment of the present invention, based on the cryptographic operation protection method described in the embodiment of the present invention, those skilled in the art can understand the specific implementation of the cryptographic operation protection device of the present embodiment and its various variations, so how the cryptographic operation protection device implements the cryptographic operation protection method in the embodiment of the present invention will not be described in detail here. As long as those skilled in the art implement the device adopted by the cryptographic operation protection method in the embodiment of the present invention, it belongs to the scope of protection to be provided by this application.

[0118] Embodiment 4

[0119] Figure 6 A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0120] like Figure 6As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0121] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0122] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 performs the various methods and processes described above, such as a cryptographic operation protection method.

[0123] In some embodiments, the cryptographic operation protection method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the cryptographic operation protection method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to perform the cryptographic operation protection method in any other appropriate manner (e.g., by means of firmware).

[0124] Optionally, the password operation protection method may include: obtaining the current fingerprint password input by the current user, and determining the total password entry time of the current fingerprint password; comparing the total current password entry time with the average target password entry time associated with the current number of fingerprints to obtain a first password comparison result; comparing the current fingerprint password with the pre-stored fingerprint password of the current user to obtain a second password comparison result; determining the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result.

[0125] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0126] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0127] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0128] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0129] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0130] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0131] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps recorded in this disclosure can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solutions disclosed in this disclosure can be achieved, and this document does not limit this.

[0132] The above specific implementations do not constitute a limitation on the protection scope of the present disclosure. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present disclosure shall be included in the protection scope of the present disclosure.

Claims

1. A password operation protection method, characterized in that: include: Obtaining the current fingerprint password input by the current user, and determining the total password input time of the current fingerprint password; Compare the total time of entering the current password with the average time of entering the target password associated with the current number of fingerprints to obtain a first password comparison result; Compare the current fingerprint password with the pre-stored fingerprint password of the current user to obtain a second password comparison result; The password verification result of the current fingerprint password is determined according to the first password comparison result and the second password comparison result.

2. The method according to claim 1, characterized in that The determining the password verification result of the current fingerprint password according to the first password comparison result and the second password comparison result includes: When it is determined according to the comparison result of the first password that the total time duration of entering the current password exceeds a preset time duration range based on the average time duration of entering the target password, obtaining the number of fingerprints included in the current fingerprint password; When it is determined that the number of fingerprints included in the current fingerprint password is different from the number of fingerprints included in the pre-stored fingerprint password, determining that the password verification result of the current fingerprint password is verification failure; When it is determined that the number of fingerprints included in the current fingerprint password is the same as the number of fingerprints included in the pre-stored fingerprint password, and when it is determined based on the second password comparison result that the current fingerprint password matches the pre-stored fingerprint password, the password verification result of the current fingerprint password is determined to be verification passed.

3. The method according to claim 2, characterized in that After determining the password verification result of the current fingerprint password according to the first password comparison result and the second password comparison result, the method further includes: Counting the number of deviations of the total duration of the current password entry beyond a preset duration range based on the average duration of the target password entry; When it is determined that the number of deviations is greater than or equal to a preset threshold, calculating a deviation value between the total duration of the current password entry and the average duration of the target password entry; The boundary value of the preset time range is updated according to the maximum deviation value and the average time duration of the target password entry.

4. The method according to claim 1, characterized in that: After determining the password verification result of the current fingerprint password according to the first password comparison result and the second password comparison result, the method further includes: If it is determined according to the first password comparison result that the total time duration of entering the current password does not exceed the preset time duration range based on the average time duration of entering the target password, and if it is determined according to the second password comparison result that the current fingerprint password matches the pre-stored fingerprint password, the number of fingerprints included in the current fingerprint password is obtained; When it is determined that the number of fingerprints included in the current fingerprint password is less than a first fingerprint number threshold, and when it is determined that the total time duration of entering the current password is less than an average time duration of entering the first reference password, generating a first delayed verification prompt message according to the real-time password operation behavior of the current user; When it is determined that the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold, and when it is determined that the total time length of entering the current password is greater than or equal to the average time length of entering the first reference password, executing a subsequent business processing flow; When it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and when it is determined that the total time duration of entering the current password is less than the average time duration of entering the second reference password, a second delayed verification prompt message is generated according to the real-time password operation behavior of the current user; When it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and when it is determined that the total time length for entering the current password is greater than or equal to the average time length for entering the second reference password, a subsequent business processing flow is executed.

5. The method according to claim 1, characterized in that Before obtaining the current fingerprint password input by the current user, the method further includes: Collecting fingerprint passwords set by each user for the digital password; wherein each digital password includes at least one fingerprint password; the number of fingerprints included in the fingerprint passwords of different users is the same or different; Record the average password entry time of each user continuously entering the corresponding fingerprint password; A first mapping relationship table between the number of fingerprints and the average password entry time is established and stored.

6. The method according to claim 5, characterized in that Also includes: Obtaining user attribute information of each of the users; Establishing and regularly updating a second mapping relationship table between the number of fingerprints, the user attribute information and the average password entry time; The comparing the total time for entering the current password with the average time for entering the target password associated with the current number of fingerprints to obtain a first password comparison result includes: According to the current user attribute information of the current user and the current number of fingerprints, the second mapping relationship table is searched to obtain the average target password entry time associated with the current number of fingerprints; The total time for entering the current password is compared with the average time for entering the target password to obtain the first password comparison result.

7. A password operation protection device, characterized in that: include: A fingerprint password acquisition module is used to acquire the current fingerprint password input by the current user and determine the total password input time of the current fingerprint password; A first password comparison result acquisition module is used to compare the total time of the current password entry with the average time of the target password entry associated with the current number of fingerprints to obtain a first password comparison result; A second password comparison result acquisition module is used to compare the current fingerprint password with the pre-stored fingerprint password of the current user to obtain a second password comparison result; The password verification result acquisition module is used to determine the password verification result of the current fingerprint password according to the first password comparison result and the second password comparison result.

8. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the cryptographic operation protection method described in any one of claims 1-6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the cryptographic operation protection method described in any one of claims 1-6 when executed.

10. A computer program product comprising a computer program / instructions, wherein: When the computer program / instructions are executed by a processor, the cryptographic operation protection method described in any one of claims 1 to 6 is implemented.

Images