Password operation protection method and device, electronic equipment, storage medium and program

Abstract

Embodiments of the present application disclose a password operation protection method and device, electronic equipment, storage medium and program, and relate to the technical field of financial technology. The method comprises: obtaining a current fingerprint password input by a current user, and determining a current total password input duration of the current fingerprint password; comparing a target average password input duration associated with a current number of fingerprints with the current total password input duration to obtain a first password comparison result; comparing the current fingerprint password with a pre-stored fingerprint password of the current user to obtain a second password comparison result; and determining a password check result of the current fingerprint password according to the first password comparison result and the second password comparison result. The technical scheme of the embodiments of the present application can strengthen password protection of a user, thereby ensuring security of a user account.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of financial technology, and in particular to a method, apparatus, electronic device, storage medium and program for protecting cryptographic operations. Background Technology

[0002] In modern financial systems, digital passwords are widely used as an authentication tool to protect user account security and prevent losses due to password leaks. However, the use of digital passwords still carries the security risk of password theft. Summary of the Invention

[0003] This invention provides a password protection method, apparatus, electronic device, storage medium, and program that can enhance password protection for users and thus ensure user account security.

[0004] According to one aspect of the present invention, a cryptographic operation protection method is provided, comprising:

[0005] Obtain the current fingerprint password entered by the current user, and determine the total password entry time for the current fingerprint password;

[0006] The total current password entry time is compared with the average target password entry time associated with the current number of fingerprints to obtain the first password comparison result;

[0007] The current fingerprint password is compared with the pre-stored fingerprint password of the current user to obtain a second password comparison result;

[0008] The password verification result of the current fingerprint password is determined based on the first password comparison result and the second password comparison result.

[0009] According to another aspect of the present invention, a cryptographic operation protection device is provided, comprising:

[0010] The fingerprint password acquisition module is used to acquire the current fingerprint password entered by the current user and determine the total password entry time of the current fingerprint password;

[0011] The first password comparison result acquisition module is used to compare the current total password entry time with the target password entry average time associated with the current number of fingerprints to obtain the first password comparison result;

[0012] The second password comparison result acquisition module is used to compare the current fingerprint password with the current user's pre-stored fingerprint password to obtain the second password comparison result;

[0013] The password verification result acquisition module is used to determine the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result.

[0014] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0015] At least one processor; and

[0016] A memory communicatively connected to the at least one processor; wherein,

[0017] The memory stores a computer program that can be executed by the at least one processor, which enables the at least one processor to perform the cryptographic operation protection method according to any embodiment of the present invention.

[0018] According to another aspect of the present invention, a computer-readable storage medium is provided, the computer-readable storage medium storing computer instructions for causing a processor to execute and implement the cryptographic operation protection method according to any embodiment of the present invention.

[0019] According to another aspect of the present invention, a computer program product is also provided, comprising a computer program that, when executed by a processor, implements the cryptographic operation protection method described in any embodiment of the present invention.

[0020] This invention, through its embodiments, acquires the current fingerprint password entered by the current user and determines the total password entry time for that fingerprint password. Furthermore, it compares the total current password entry time with the average password entry time associated with the current number of fingerprints to obtain a first password comparison result. Further, it compares the current fingerprint password with the user's pre-stored fingerprint password to obtain a second password comparison result. Thus, based on the first and second password comparison results, the password verification result of the current fingerprint password can be determined. This addresses the problem of easy password leakage in existing digital password input scenarios, strengthens user password protection, and thereby ensures user account security.

[0021] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of the present invention, nor is it intended to limit the scope of the invention. Other features of the invention will become readily apparent from the following description. Attached Figure Description

[0022] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0023] Figure 1 This is a flowchart of a cryptographic operation protection method provided in Embodiment 1 of the present invention;

[0024] Figure 2 This is a flowchart of a cryptographic operation protection method provided in Embodiment 2 of the present invention;

[0025] Figure 3 This is a side view of a fingerprint acquisition device provided in Embodiment 2 of the present invention;

[0026] Figure 4 This is a top view of the interior of the base of a fingerprint acquisition device provided in Embodiment 2 of the present invention;

[0027] Figure 5 This is a schematic diagram of a cryptographic operation protection device provided in Embodiment 3 of the present invention;

[0028] Figure 6 This is a schematic diagram of the structure of an electronic device provided in Embodiment 4 of the present invention. Detailed Implementation

[0029] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0030] It should be noted that the terms "first," "second," and "current," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0031] Example 1

[0032] Figure 1 This is a flowchart of a password operation protection method provided in Embodiment 1 of the present invention. This embodiment is applicable to situations where user password input operations are protected by the number of fingerprint passwords and the password entry time. This method can be executed by a password operation protection device, which can be implemented in software and / or hardware, and is generally integrated into an electronic device. This electronic device can be a terminal device or a server device, as long as it can execute the password operation protection method. The present invention does not limit the specific type of electronic device. Correspondingly, as... Figure 1 As shown, the method includes the following operations:

[0033] S110. Obtain the current fingerprint password entered by the current user, and determine the total duration of the current password entry.

[0034] The current user can be a user interacting with a specific system or device. For example, a user using a bank ATM (Automated Teller Machine) to conduct business. The current fingerprint password can be the fingerprint password entered by the current user. The total password entry time can be the total time the current user spent entering the current fingerprint password.

[0035] The device currently operated by the user (hereinafter referred to as the device) can be configured with a fingerprint collection device. The device can be any type of device with a fingerprint collection device. For example, the device can include, but is not limited to, bank counter terminals, ATMs, POS (Point of Sale) machines, and other types of devices that require fingerprint and password authentication. This embodiment of the invention does not limit the type of device. When the current user performs a password input operation on the device, they can sequentially collect and input their fingerprint using the device's fingerprint collection device, thereby sequentially inputting their fingerprint password. During the current user's fingerprint password input process, the device can first obtain the current fingerprint password entered by the current user and monitor the current user's fingerprint password operation in real time, thereby obtaining the total password input time for the current fingerprint password.

[0036] S120. Compare the total current password entry time with the average target password entry time associated with the current number of fingerprints to obtain the first password comparison result.

[0037] The current fingerprint count can be the number of fingerprints included in the current fingerprint password. For example, if each digit in a complete numeric password corresponds to a right thumb fingerprint, then the current fingerprint count for that numeric password is 1. The average password entry time for the target password can be the average password entry time corresponding to the current fingerprint count. The first password comparison result can be the comparison result obtained by comparing the total current password entry time with the average target password entry time.

[0038] The device can store the average password entry time corresponding to different numbers of fingerprints. Understandably, different numbers of fingerprints will result in different average password entry times. Accordingly, after the device obtains the current user's entered fingerprint password and determines the total password entry time for that fingerprint password, it can compare the total current password entry time with the target average password entry time associated with the current number of fingerprints. This comparison yields the first password comparison result, which serves as the basis for subsequent operations.

[0039] For example, assuming the current number of fingerprints for the current fingerprint password is 3, the device can obtain the average password entry time corresponding to 3 fingerprints as the target average password entry time. Assuming the current number of fingerprints for the current fingerprint password is 6, the device can obtain the average password entry time corresponding to 6 fingerprints as the target average password entry time.

[0040] For example, if the total current password entry time is less than or equal to the target average password entry time associated with the current number of fingerprints, the first password comparison result can be that the total current password entry time does not exceed the target average password entry time associated with the previous number of fingerprints; if the total current password entry time is greater than the target average password entry time associated with the current number of fingerprints, the first password comparison result can be that the total current password entry time exceeds the target average password entry time associated with the previous number of fingerprints.

[0041] S130. Compare the current fingerprint password with the pre-stored fingerprint password of the current user to obtain a second password comparison result.

[0042] The pre-stored fingerprint password can be the fingerprint password that the current user has stored in advance. The second password comparison result can be the password comparison result obtained by comparing the current fingerprint password with the current user's pre-stored fingerprint password.

[0043] Specifically, the device can compare the current fingerprint password with the user's pre-stored fingerprint password to obtain a second password comparison result. For example, if the current fingerprint password matches the user's pre-stored fingerprint password, it can be determined that the current fingerprint password matches the pre-stored fingerprint password; if the current fingerprint password does not match the user's pre-stored fingerprint password, it can be determined that the current fingerprint password does not match the pre-stored fingerprint password.

[0044] Optionally, the device can obtain the pre-stored average password entry time and the current user's pre-stored fingerprint password from the corresponding server side, or it can also pre-store the average password entry time and the current user's pre-stored fingerprint password locally. This embodiment of the invention does not limit the method by which the device obtains information such as the average password entry time and the current user's pre-stored fingerprint password.

[0045] S140. Determine the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result.

[0046] The password verification result can be the verification result of the current fingerprint password determined based on the first password comparison result and the second password comparison result.

[0047] Accordingly, after obtaining the first password comparison result and the second password comparison result, the device can determine the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result, and thus decide whether to allow the current user to perform subsequent operations.

[0048] Therefore, the device first compares the current total password entry time with the target average password entry time to obtain the first password comparison result. The device can perform preliminary verification of the current password based on the password entry time. Then, it can compare the current fingerprint password with the user's pre-stored fingerprint password to obtain the second password comparison result. Combining the two comparison results, the password verification result of the current fingerprint password can be determined, thereby strengthening the user's password protection and ensuring the security of the user's account.

[0049] This invention, through its embodiments, acquires the current fingerprint password entered by the current user and determines the total password entry time for that fingerprint password. Furthermore, it compares the total current password entry time with the average password entry time associated with the current number of fingerprints to obtain a first password comparison result. Further, it compares the current fingerprint password with the user's pre-stored fingerprint password to obtain a second password comparison result. Thus, based on the first and second password comparison results, the password verification result of the current fingerprint password can be determined. This addresses the problem of easy password leakage in existing digital password input scenarios, strengthens user password protection, and thereby ensures user account security.

[0050] Example 2

[0051] Figure 2 This is a flowchart of a password operation protection method provided in Embodiment 2 of the present invention. This embodiment is based on the above embodiment and is further specified. In this embodiment, various specific optional implementation methods are given for the operations before obtaining the current fingerprint password input by the current user and for determining the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result. Accordingly, as Figure 2 As shown, the method in this embodiment may include:

[0052] S210. Collect the fingerprint password set by each user for the digital password; wherein, each digital password includes at least one fingerprint password; the number of fingerprints included in the fingerprint passwords of different users may be the same or different.

[0053] Numeric passwords are passwords composed of numbers and can be used to verify user identity, protect privacy, and grant system access. Fingerprint passwords are passwords composed of fingerprints. It should be noted that a single numeric password can include at least one fingerprint, and different users can use the same or different fingerprints. Using fingerprint passwords instead of numeric passwords for password input can effectively reduce the risk of password leakage.

[0054] In this embodiment of the invention, before using the user's fingerprint password to perform password input and password decryption, the fingerprint password set by each user for the digital password can be collected first.

[0055] In a specific example, after opening a bank account, a user can still set a six-digit numeric PIN as their bank card's deposit and withdrawal password, following the original procedure. This allows the user to continue making deposits, withdrawals, or conducting other transactions by entering the six-digit numeric PIN. After entering the six-digit numeric PIN, the user can further configure their fingerprint information. Optionally, there are two ways to set the fingerprint PIN corresponding to the numeric PIN: the first is to set it up on-site at the bank, where the bank provides the corresponding fingerprint collection device, and the user enters their fingerprint according to the prompts given by the device. Figure 3 This is a side view of a fingerprint acquisition device provided in Embodiment 2 of the present invention. Figure 4 This is a top view of the interior of the base of a fingerprint acquisition device provided in Embodiment 2 of the present invention. Figure 3 and Figure 4As shown, the fingerprint collection device can be installed on devices that use password verification, such as bank counters or ATMs. It includes a base and a top cover, with space between the top cover and the base sufficient to accommodate a hand. The base is recessed to accommodate the palm and fingers, with a fingerprint collection area at the fingertip. This fingerprint collection area also includes a pressure sensor. When the pressure detected by the pressure sensor reaches a certain threshold, the fingerprint collection area is triggered to collect the fingerprint. The top cover completely covers the base and is opaque, preventing others from seeing it and thus providing password protection.

[0056] When using it, the user will take their hand from Figure 3 The hand placement space between the base and the top cover, as shown, allows the user to insert their hand into the fingerprint collection device. The hand is then placed in the palm and finger placement space on the base for fingerprint collection. The fingerprint collection device can retain the confirmation button found on existing password input devices. Pressing the confirmation button once before and after fingerprint registration will transmit the collected fingerprints to the server for analysis. For example, if a user needs to register the fingerprint of their left index finger, they can press the base slightly with their left index finger. The pressure sensor detects the pressure, and the fingerprint collection area collects the fingerprint. It should be noted that pressing the confirmation button before registration avoids incorrect fingerprint registration due to accidental pressure during hand insertion.

[0057] The second way to set up a fingerprint password is for users to log in to the bank's user terminal offline via a mobile device and enter their fingerprints according to the prompts on the bank's user terminal.

[0058] The fingerprint collection device and bank user terminal can have a built-in fingerprint enrollment process to guide users in enrolling their fingerprints according to the prompts. For example, the fingerprint collection device or bank user terminal displays a first prompt, "Please select the number of fingerprints," along with six quantity options (1-6). After selecting an option and clicking "Confirm," a second prompt appears: "Please select the corresponding finger," again with finger options including left thumb, left index finger, left middle finger, left ring finger, left little finger, right thumb, right index finger, right middle finger, right ring finger, and right little finger. After selecting an option and clicking "Confirm," a fingerprint enrollment window appears, where the user enrolls their fingerprint. Users can select one option or two options simultaneously; that is, different combinations of fingerprints can represent one digit of a PIN, and the enrollment method for the remaining digits follows the same logic.

[0059] It's important to note that after the user selects the number of fingerprints, a "Done" button is always displayed on the interface. This "Done" button provides the user with a notification to complete the fingerprint password input. If the user initially selected 5 fingerprints and, after registering 3 fingerprints, decides to use only 3 fingerprints as the password, they can click the "Done" button. The interface will then display a third prompt: "You selected a 5-digit fingerprint password, but only 3 have been registered so far. Confirm the change?" After the user confirms, the fingerprint registration is complete. In this solution, users do not need to re-register fingerprints when temporarily changing the number, thus improving the user experience.

[0060] S220. Record the average password entry time for each user to continuously enter the corresponding fingerprint password.

[0061] The average time for fingerprint password entry can be the average time for each user to enter a complete set of fingerprints corresponding to a set of digital passwords.

[0062] Correspondingly, during the process of collecting fingerprint passwords set by each user for their digital passwords, the average password entry time for each user to input a complete set of digital passwords corresponding to their fingerprint passwords can also be recorded.

[0063] S230. Establish and store a first mapping table between the number of fingerprints and the average password entry time.

[0064] The first mapping table can be a table showing the correspondence between the number of fingerprints and the average password entry time.

[0065] Accordingly, after recording the average password entry time for each user to continuously input their corresponding fingerprint password, a first mapping table between the number of fingerprints and the average password entry time can be established and stored as reference data for subsequent user fingerprint password verification. In the above scheme, collecting fingerprint passwords set by each user can effectively reduce the risk of password leakage. Recording the average password entry time and establishing and storing the first mapping table can provide data support for improving password security and enhancing user experience.

[0066] In a specific example, Table 1 is an example of a first mapping relationship table provided in Embodiment 2 of the present invention. As shown in Table 1, when the number of fingerprints corresponding to a user's complete digital password is 1, the time taken for these users to input 1 fingerprint corresponding to the complete digital password is recorded, and the average time taken for these users to input 1 fingerprint corresponding to the complete digital password is calculated to obtain the average password input time t1 corresponding to 1 fingerprint. When the number of fingerprints corresponding to a user's complete digital password is 2, the time taken for these users to input 2 fingerprints corresponding to the complete digital password is recorded, and the average time taken for these users to input 2 fingerprints corresponding to the complete digital password is calculated to obtain the average password input time t2 corresponding to 2 fingerprints. When the number of fingerprints corresponding to a user's complete digital password is 3, the time taken for these users to input 3 fingerprints corresponding to the complete digital password is recorded, and the average time taken for these users to input 3 fingerprints corresponding to the complete digital password is calculated to obtain the average password input time t3 corresponding to 3 fingerprints. When a user's complete numeric password corresponds to 4 fingerprints, record the time taken for these users to input the 4 fingerprints, and calculate the average time t4 for each of these 4 fingerprints. When a user's complete numeric password corresponds to 5 fingerprints, record the time taken for these users to input the 5 fingerprints, and calculate the average time t5 for each of these 5 fingerprints. When a user's complete numeric password corresponds to 6 fingerprints, record the time taken for these users to input the 6 fingerprints, and calculate the average time t6 for each of these 6 fingerprints.

[0067] Table 1 First Mapping Relationship Table

[0068] 1 t1 2 t2 3 t3 4 t4 5 t5 6 t6

[0069] In an optional embodiment of the present invention, before obtaining the current fingerprint password entered by the current user, the method may further include: obtaining user attribute information of each user; establishing and periodically updating a second mapping relationship table between the number of fingerprints, the user attribute information and the average password entry time.

[0070] The user attribute information can be various data and information describing the characteristics of a user. For example, user attribute information may include, but is not limited to, the user's age. This embodiment of the invention does not limit the specific information included in the user attribute information. The second mapping table can be a table used to record the relationship between the number of fingerprints, user attribute information, and the average password entry time.

[0071] In this embodiment of the invention, before obtaining the current fingerprint password entered by the current user, user attribute information for each user can also be obtained. Furthermore, a second mapping table can be established based on the user attribute information, relating the number of fingerprints, user attribute information, and average password entry time. It should be noted that the second mapping table can be periodically updated as the number of users increases, the number of fingerprints set by users, and the average password entry time for users increases. By establishing and periodically updating the second mapping table, and considering the fingerprint characteristics and fingerprint entry speed of different user age groups, the above solution can provide more accurate data support for improving password security and enhancing user experience.

[0072] S240. Obtain the current fingerprint password entered by the current user, and determine the total duration of the current password entry.

[0073] S250. Compare the total current password entry time with the average target password entry time associated with the current number of fingerprints to obtain the first password comparison result.

[0074] In a specific example, Table 2 is an example of a second mapping relationship table provided in Embodiment 2 of the present invention. As shown in Table 2, when the number of fingerprints corresponding to a user's complete numeric password is 1, the time taken by users under 25 years old to input one fingerprint corresponding to their complete numeric password is recorded, and the average time taken by these users to input one fingerprint corresponding to their complete numeric password is calculated to obtain the average password input time t11 corresponding to one fingerprint; the time taken by users aged 26-40 years old to input one fingerprint corresponding to their complete numeric password is recorded, and the average time taken by these users to input one fingerprint corresponding to their complete numeric password is calculated to obtain the average password input time t12 corresponding to one fingerprint; the time taken by users aged 41-50 years old to input one fingerprint corresponding to their complete numeric password is recorded, and the average time taken by these users to input one fingerprint corresponding to their complete numeric password is calculated to obtain the average password input time t13 corresponding to one fingerprint; the time taken by users over 50 years old to input one fingerprint corresponding to their complete numeric password is recorded, and the average time taken by these users to input one fingerprint corresponding to their complete numeric password is calculated to obtain the average password input time t14 corresponding to one fingerprint. Similarly, the average password entry time for different numbers of fingerprints corresponding to a user's complete numeric password can be recorded separately.

[0075] Table 2 Second Mapping Relationship Table

[0076]

[0077] In an optional embodiment of the present invention, the step of comparing the total current password entry time with the target average password entry time associated with the current number of fingerprints to obtain a first password comparison result may include: querying the second mapping relationship table based on the current user's current user attribute information and the current number of fingerprints to obtain the target average password entry time associated with the current number of fingerprints; and comparing the total current password entry time with the target average password entry time to obtain the first password comparison result.

[0078] Among them, the current user attribute information can be the user attribute information of the current user.

[0079] Specifically, when comparing the total current password entry time with the target average password entry time associated with the current number of fingerprints to obtain the first password comparison result, the current user's current user attribute information and the number of fingerprint passwords entered by the current user can be obtained. Furthermore, the second mapping relationship table can be queried based on the current user's current user attribute information and the current number of fingerprints to obtain the target average password entry time associated with the current number of fingerprints. Thus, the total current password entry time can be compared with the target average password entry time to obtain the first password comparison result.

[0080] In a specific example, as shown in Table 2, assuming t22 is 15s, when the current user's age information is obtained as 35 years old, the current user's current fingerprint password input is 2, and the current password input total time is 20s, then the first password comparison result can be determined as the current password input total time exceeds the target password input average time associated with the current number of fingerprints.

[0081] S260. Compare the current fingerprint password with the pre-stored fingerprint password of the current user to obtain a second password comparison result.

[0082] S270. Determine the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result.

[0083] In an optional embodiment of the present invention, determining the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result may include: if the total duration of the current password entry exceeds a preset duration range based on the average duration of the target password entry, obtaining the number of fingerprints included in the current fingerprint password; if the number of fingerprints included in the current fingerprint password is different from the number of fingerprints included in the pre-stored fingerprint password, determining that the password verification result of the current fingerprint password is verification failed; if the number of fingerprints included in the current fingerprint password is the same as the number of fingerprints included in the pre-stored fingerprint password, and the current fingerprint password matches the pre-stored fingerprint password based on the second password comparison result, determining that the password verification result of the current fingerprint password is verification passed.

[0084] The preset duration range can be a time range pre-set based on the average duration of target password entry. For example, assuming the average duration of target password entry is t, the preset duration range can be (t-t0, t+t0). The specific value of t0 can be set according to actual needs, and this embodiment of the invention does not limit the specific value of t0.

[0085] In this embodiment of the invention, after comparing the current total password entry time with the target average password entry time to obtain a first password comparison result, it can be determined whether the current total password entry time exceeds a preset time range based on the first password comparison result. If it is determined that the current total password entry time exceeds the preset time range based on the target average password entry time, the number of fingerprints included in the current fingerprint password can be further obtained to verify the current fingerprint password.

[0086] In this embodiment of the invention, if the number of fingerprints included in the current fingerprint password is different from the number of fingerprints included in the pre-stored fingerprint password, the password verification result of the current fingerprint password can be directly determined as verification failure, without needing to perform specific comparison and verification of each fingerprint. If the number of fingerprints included in the current fingerprint password is the same as the number of fingerprints included in the pre-stored fingerprint password, it is also necessary to determine whether the current fingerprint password matches the pre-stored fingerprint password based on the second password comparison result, that is, whether the current fingerprint password is the same as the pre-stored fingerprint password. Further, if the current fingerprint password matches the pre-stored fingerprint password based on the second password comparison result, the password verification result of the current fingerprint password can be determined as verification success; if the current fingerprint password does not match the pre-stored fingerprint password based on the second password comparison result, the password verification result of the current fingerprint password can be determined as verification failure.

[0087] In the above scheme, when the number of fingerprints included in the current fingerprint password is different from the number of fingerprints included in the pre-stored fingerprint password, the password verification result of the current fingerprint password is directly determined as verification failure, without having to perform specific comparison and verification of each fingerprint. This can improve the verification efficiency of the current fingerprint password, simplify the verification logic, and improve the user experience.

[0088] In an optional embodiment of the present invention, after determining the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result, the method may further include: counting the number of deviations where the total current password entry time exceeds a preset time range based on the target average password entry time; if the number of deviations is determined to be greater than or equal to a preset threshold, calculating the deviation value between the total current password entry time and the target average password entry time; and updating the boundary value of the preset time range based on the largest deviation value and the target average password entry time.

[0089] The deviation count can be the number of times the current total password entry time exceeds a preset time range based on the target average password entry time. The preset threshold can be a pre-set threshold for the number of deviations. For example, the preset threshold can be 3 times. The deviation value can be the difference between the current total password entry time and the target average password entry time. The boundary values ​​of the preset time range can be the endpoint values ​​of the preset time range, that is, the maximum and minimum values ​​of the preset time range.

[0090] In this embodiment of the invention, after determining that the total current password entry time exceeds a preset time range based on the target average password entry time according to the first password comparison result, the number of deviations where the total current password entry time exceeds the preset time range based on the target average password entry time can be counted. When the number of deviations is greater than or equal to a preset threshold, the deviation value between the total current password entry time and the target average password entry time can be calculated, thereby updating the boundary value of the preset time range based on the maximum value of the deviation value and the target average password entry time. The above scheme realizes real-time updating of the preset time range, thereby improving the user experience while ensuring the efficiency of password verification.

[0091] In a specific example, assuming the preset threshold is 3 attempts, the number of deviations is 4, the target average password entry time is t, and the preset time range is (t-t0, t+t0), then the deviation between the current total password entry time and the target average password entry time can be calculated. Furthermore, when the maximum deviation value is a, the preset time range can be updated to (ta, t+a).

[0092] In an optional embodiment of the present invention, after determining the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result, the method may further include: if, based on the first password comparison result, it is determined that the total duration of the current password entry does not exceed a preset duration range based on the average duration of the target password entry, and based on the second password comparison result, it is determined that the current fingerprint password matches the pre-stored fingerprint password, obtaining the number of fingerprints included in the current fingerprint password; if, based on the determination that the number of fingerprints included in the current fingerprint password is less than a first fingerprint number threshold, and based on the determination that the total duration of the current password entry is less than the average duration of the first reference password entry, generating a first delayed verification prompt message based on the real-time password operation behavior of the current user; and if, based on the determination that the... If the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold, and the total duration of the current password entry is greater than or equal to the average duration of the first reference password entry, the subsequent business processing flow is executed; if the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and the total duration of the current password entry is less than the average duration of the second reference password entry, a second delayed verification prompt message is generated based on the current user's real-time password operation behavior; if the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and the total duration of the current password entry is greater than or equal to the average duration of the second reference password entry, the subsequent business processing flow is executed.

[0093] The first fingerprint number threshold can be preset and used to measure the number of fingerprints. For example, when the total number of digits in the password is 6, the first fingerprint number threshold can be 3. This embodiment of the invention does not limit the specific value of the first fingerprint number threshold. The first reference password entry average time can be the average password entry time when the number of fingerprints is the first fingerprint number threshold. The first delayed verification prompt information can be generated when the total password entry time is less than the first reference password entry average time during the current user's input of the current fingerprint password. The second fingerprint number threshold can be preset and used to measure the number of fingerprints. For example, when the total number of digits in the password is 6, the second fingerprint number threshold can be 6. This embodiment of the invention does not limit the specific value of the second fingerprint number threshold. The second reference password entry average time can be the average password entry time when the number of fingerprints is the second fingerprint number threshold. The second delayed verification prompt information can be generated when the total password entry time is less than the second reference password entry average time during the current user's input of the current fingerprint password.

[0094] In this embodiment of the invention, if the total duration of current password entry does not exceed a preset duration range based on the average duration of target password entry, as determined by the first password comparison result, it can be determined whether the current fingerprint password matches the pre-stored fingerprint password, based on the second password comparison result. If the current fingerprint password matches the pre-stored fingerprint password, the number of fingerprints included in the current fingerprint password can be obtained.

[0095] Furthermore, if it is determined that the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold, and the total password entry time is less than the average password entry time of the first reference password, a first delayed verification prompt message can be generated based on the current user's real-time password operation behavior; if it is determined that the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold, and the total password entry time is greater than or equal to the average password entry time of the first reference password, the subsequent business processing flow is executed.

[0096] If it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and the total password entry time is less than the average password entry time of the second reference password, a second delayed verification prompt message can be generated based on the current user's real-time password operation behavior; if it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold, and the total password entry time is greater than or equal to the average password entry time of the second reference password, the subsequent business processing flow can be executed.

[0097] In a specific example, assuming the first fingerprint count threshold is 3 and the average first reference password entry time is 15 seconds, if the current user has entered 2 fingerprint passwords and the total entry time is 8 seconds, the user can be prompted to wait for verification until the total entry time reaches 15 seconds before being prompted to remove the fingerprint from the device. If the total entry time is greater than or equal to 15 seconds, the user can be immediately prompted to continue with the subsequent business processing.

[0098] Assuming the second fingerprint threshold is 6 and the average entry time for the second reference password is 30 seconds, if the current user has entered 6 fingerprints and the total entry time is 25 seconds, the user can be prompted to wait for verification until the total entry time reaches 30 seconds before being prompted to remove the fingerprint from the device. If the total entry time is greater than or equal to 30 seconds, the user can be immediately prompted to continue with the subsequent business processing. By delaying verification, all users have consistent verification times when the number of fingerprints is within the first and second fingerprint thresholds, effectively preventing others from guessing the number of fingerprints based on the verification time, and also preventing users with fewer fingerprints from waiting too long.

[0099] This invention establishes and stores a first mapping table by collecting fingerprint passwords set by each user for their digital password and recording the average password entry time for each user's consecutive fingerprint password input. Further, it obtains the current fingerprint password entered by the current user and determines the total password entry time for the current fingerprint password. Then, it compares the total current password entry time with the average password entry time associated with the current number of fingerprints to obtain a first password comparison result. Further, it compares the current fingerprint password with the user's pre-stored fingerprint passwords to obtain a second password comparison result. Based on the first and second password comparison results, it determines the password verification result of the current fingerprint password, solving the problem of easy password leakage in existing digital password input scenarios, strengthening user password protection, and thus ensuring user account security.

[0100] It should be noted that the information collected in this disclosure is information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data all comply with the relevant laws, regulations and standards of the relevant countries and regions, necessary confidentiality measures have been taken, and they do not violate public order and good morals. Corresponding operation portals are provided for users to choose to authorize or refuse.

[0101] It should be noted that, in this embodiment of the invention, a corresponding operation entry can be provided to the user, allowing the user to choose to agree to or reject the automated decision result; if the user chooses to reject, the process will proceed to the expert decision-making process.

[0102] It should be noted that any arrangement or combination of the technical features in the above embodiments also falls within the protection scope of this invention.

[0103] Example 3

[0104] Figure 5 This is a schematic diagram of a cryptographic operation protection device provided in Embodiment 3 of the present invention, as shown below. Figure 5 As shown, the device includes: a fingerprint password acquisition module 310, a first password comparison result acquisition module 320, a second password comparison result acquisition module 330, and a password verification result acquisition module 340, wherein:

[0105] The fingerprint password acquisition module 310 is used to acquire the current fingerprint password entered by the current user and determine the total password entry time of the current fingerprint password.

[0106] The first password comparison result acquisition module 320 is used to compare the total current password entry time with the average target password entry time associated with the current number of fingerprints to obtain the first password comparison result.

[0107] The second password comparison result acquisition module 330 is used to compare the current fingerprint password with the pre-stored fingerprint password of the current user to obtain the second password comparison result.

[0108] The password verification result acquisition module 340 is used to determine the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result.

[0109] This invention, through its embodiments, acquires the current fingerprint password entered by the current user and determines the total password entry time for that fingerprint password. Furthermore, it compares the total current password entry time with the average password entry time associated with the current number of fingerprints to obtain a first password comparison result. Further, it compares the current fingerprint password with the user's pre-stored fingerprint password to obtain a second password comparison result. Thus, based on the first and second password comparison results, the password verification result of the current fingerprint password can be determined. This addresses the problem of easy password leakage in existing digital password input scenarios, strengthens user password protection, and thereby ensures user account security.

[0110] Optionally, the password verification result acquisition module 340 is specifically used for: when it is determined, based on the first password comparison result, that the total duration of the current password entry exceeds a preset duration range based on the average duration of the target password entry, acquiring the number of fingerprints included in the current fingerprint password; when it is determined, based on the first password comparison result, that the number of fingerprints included in the current fingerprint password is different from the number of fingerprints included in the pre-stored fingerprint password, determining that the password verification result of the current fingerprint password is verification failed; when it is determined, based on the second password comparison result, that the number of fingerprints included in the current fingerprint password is the same as the number of fingerprints included in the pre-stored fingerprint password, and based on the second password comparison result, determining that the current fingerprint password matches the pre-stored fingerprint password, determining that the password verification result of the current fingerprint password is verification passed.

[0111] Optionally, the above device may further include a preset duration range update module, specifically used for: counting the number of deviations where the current total password entry time exceeds a preset duration range based on the target average password entry time; when the number of deviations is determined to be greater than or equal to a preset threshold, calculating the deviation value between the current total password entry time and the target average password entry time; and updating the boundary value of the preset duration range based on the largest deviation value and the target average password entry time.

[0112] Optionally, the above device may further include a prompting module, specifically configured to: when it is determined, based on the first password comparison result, that the total duration of the current password entry does not exceed a preset duration range based on the average duration of the target password entry, and based on the second password comparison result, that the current fingerprint password matches the pre-stored fingerprint password, obtain the number of fingerprints included in the current fingerprint password; when it is determined, based on the current user's real-time password operation behavior, generate a first delayed verification prompt message when it is determined, based on the current user's real-time password operation behavior; when it is determined, based on the current fingerprint password's number of fingerprints is less than a first fingerprint number threshold, and based on the current total password entry time is less than a first reference password entry average duration, generate a first delayed verification prompt message; when it is determined, based on the current fingerprint password's number of fingerprints is less than the first fingerprint number threshold, generate a first delayed verification prompt message. If the current password entry time is greater than or equal to the average password entry time of the first reference password, the subsequent business processing flow is executed; if the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and the current password entry time is less than the average password entry time of the second reference password, a second delayed verification prompt message is generated based on the current user's real-time password operation behavior; if the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and the current password entry time is greater than or equal to the average password entry time of the second reference password, the subsequent business processing flow is executed.

[0113] Optionally, the above-mentioned device may further include a mapping relationship table establishment module, specifically used for: collecting fingerprint passwords set by each user for the digital password; wherein, one digit of the digital password includes at least one fingerprint password; the number of fingerprints included in the fingerprint passwords of different users may be the same or different; recording the average password entry time for each user to continuously input the corresponding fingerprint password; and establishing and storing a first mapping relationship table between the number of fingerprints and the average password entry time.

[0114] Optionally, the mapping relationship table establishment module is also used to: obtain user attribute information of each user; establish and periodically update a second mapping relationship table between the number of fingerprints, the user attribute information and the average password entry time.

[0115] Optionally, the first password comparison result acquisition module 320 is specifically used to: query the second mapping relationship table based on the current user's current user attribute information and the current number of fingerprints to obtain the target password entry average time associated with the current number of fingerprints; compare the current password entry total time with the target password entry average time to obtain the first password comparison result.

[0116] The aforementioned cryptographic operation protection device can execute the cryptographic operation protection method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the method. Technical details not described in detail in this embodiment can be found in the cryptographic operation protection method provided in any embodiment of the present invention.

[0117] Since the cryptographic operation protection device described above is an apparatus capable of executing the cryptographic operation protection method in the embodiments of the present invention, those skilled in the art can understand the specific implementation methods and various variations of the cryptographic operation protection device in this embodiment based on the cryptographic operation protection method described in the embodiments of the present invention. Therefore, how the cryptographic operation protection device implements the cryptographic operation protection method in the embodiments of the present invention will not be described in detail here. Any apparatus used by those skilled in the art to implement the cryptographic operation protection method in the embodiments of the present invention falls within the scope of protection of this application.

[0118] Example 4

[0119] Figure 6 A schematic diagram of an electronic device 10 that can be used to implement embodiments of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0120] like Figure 6As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 11. The memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 may also store various programs and data required for the operation of the electronic device 10. The processor 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0121] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0122] Processor 11 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 11 performs the various methods and processes described above, such as cryptographic operation protection methods.

[0123] In some embodiments, the cryptographic operation protection method may be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the cryptographic operation protection method described above may be performed. Alternatively, in other embodiments, processor 11 may be configured to perform the cryptographic operation protection method by any other suitable means (e.g., by means of firmware).

[0124] Optionally, the password operation protection method may include: obtaining the current fingerprint password entered by the current user, and determining the total password entry time of the current fingerprint password; comparing the total password entry time with the target password entry average time associated with the current number of fingerprints to obtain a first password comparison result; comparing the current fingerprint password with the current user's pre-stored fingerprint password to obtain a second password comparison result; and determining the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result.

[0125] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0126] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0127] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0128] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0129] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or computing systems that include middleware components (e.g., application servers), or computing systems that include frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0130] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0131] It should be understood that the various forms of processes shown above can be used to rearrange, add, or delete steps. For example, the steps described in this disclosure can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution disclosed in this disclosure can be achieved, and this is not limited herein.

[0132] The specific embodiments described above do not constitute a limitation on the scope of protection of this disclosure. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this disclosure should be included within the scope of protection of this disclosure.

Claims

1. A method for protecting cryptographic operations, characterized in that, include: Obtain the current fingerprint password entered by the current user, and determine the total password entry time for the current fingerprint password; The total current password entry time is compared with the average target password entry time associated with the current number of fingerprints to obtain the first password comparison result; The current fingerprint password is compared with the current user's pre-stored fingerprint password to obtain a second password comparison result; wherein, the current user's pre-stored fingerprint password is the fingerprint password that the current user has preset for the numeric password; The password verification result of the current fingerprint password is determined based on the first password comparison result and the second password comparison result; The method further includes: Obtain user attribute information for each user; Establish and periodically update a second mapping table between the number of fingerprints, the user attribute information, and the average password entry time; The step of comparing the total current password entry time with the average target password entry time associated with the current number of fingerprints to obtain a first password comparison result includes: Based on the current user's current user attribute information and the current number of fingerprints, the second mapping relationship table is queried to obtain the target password entry average time associated with the current number of fingerprints; The total current password entry time is compared with the average target password entry time to obtain the first password comparison result; After determining the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result, the method further includes: If, based on the first password comparison result, it is determined that the total duration of the current password entry does not exceed the preset duration range based on the average duration of the target password entry, and based on the second password comparison result, it is determined that the current fingerprint password matches the pre-stored fingerprint password, the number of fingerprints included in the current fingerprint password is obtained. If it is determined that the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold, and it is determined that the total time for the current password entry is less than the average time for the first reference password entry, a first delayed verification prompt message is generated based on the real-time password operation behavior of the current user. If it is determined that the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold, and the total duration of the current password entry is greater than or equal to the average duration of the first reference password entry, the subsequent business processing flow is executed. If it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and it is determined that the total time for current password entry is less than the average time for second reference password entry, a second delayed verification prompt message is generated based on the current user's real-time password operation behavior. If it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and it is determined that the total duration of the current password entry is greater than or equal to the average duration of the second reference password entry, the subsequent business processing flow is executed.

2. The method according to claim 1, characterized in that, The step of determining the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result includes: If, based on the first password comparison result, it is determined that the total duration of the current password entry exceeds a preset duration range based on the average duration of the target password entry, the number of fingerprints included in the current fingerprint password is obtained. If the number of fingerprints included in the current fingerprint password is different from the number of fingerprints included in the pre-stored fingerprint password, the password verification result of the current fingerprint password is determined to be verification failure. If it is determined that the number of fingerprints included in the current fingerprint password is the same as the number of fingerprints included in the pre-stored fingerprint password, and the current fingerprint password matches the pre-stored fingerprint password according to the second password comparison result, then the password verification result of the current fingerprint password is determined to be successful.

3. The method according to claim 2, characterized in that, After determining the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result, the method further includes: The number of times the current total password entry time exceeds a preset time range based on the target average password entry time is counted; If the number of deviations is greater than or equal to a preset threshold, calculate the deviation between the current total password entry time and the target average password entry time. The boundary value of the preset duration range is updated based on the maximum deviation value and the average duration of the target password entry.

4. The method according to claim 1, characterized in that, Before obtaining the current fingerprint password entered by the current user, the method further includes: Collect fingerprint passwords set by each user for the digital password; wherein, each digital password includes at least one fingerprint password; the number of fingerprints included in the fingerprint passwords of different users may be the same or different; Record the average password entry time for each user to continuously input the corresponding fingerprint password; Establish and store a first mapping table between the number of fingerprints and the average password entry time.

5. A password operation protection device, characterized in that, include: The fingerprint password acquisition module is used to acquire the current fingerprint password entered by the current user and determine the total password entry time of the current fingerprint password; The first password comparison result acquisition module is used to compare the current total password entry time with the target password entry average time associated with the current number of fingerprints to obtain the first password comparison result; The second password comparison result acquisition module is used to compare the current fingerprint password with the current user's pre-stored fingerprint password to obtain a second password comparison result; wherein, the current user's pre-stored fingerprint password is a fingerprint password that the current user has preset for the numeric password; The password verification result acquisition module is used to determine the password verification result of the current fingerprint password based on the first password comparison result and the second password comparison result; The mapping relationship table establishment module is used to obtain the user attribute information of each user. Establish and periodically update a second mapping table between the number of fingerprints, the user attribute information, and the average password entry time; The first password comparison result acquisition module is specifically used to: query the second mapping relationship table based on the current user's current user attribute information and the current number of fingerprints to obtain the target password entry average time associated with the current number of fingerprints; The total current password entry time is compared with the average target password entry time to obtain the first password comparison result; The prompting module is used to obtain the number of fingerprints included in the current fingerprint password when it is determined from the first password comparison result that the total time of the current password input does not exceed the preset time range based on the average time of the target password input, and when it is determined from the second password comparison result that the current fingerprint password matches the pre-stored fingerprint password. If it is determined that the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold, and it is determined that the total time for the current password entry is less than the average time for the first reference password entry, a first delayed verification prompt message is generated based on the real-time password operation behavior of the current user. If it is determined that the number of fingerprints included in the current fingerprint password is less than the first fingerprint number threshold, and the total duration of the current password entry is greater than or equal to the average duration of the first reference password entry, the subsequent business processing flow is executed. If it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and it is determined that the total time for current password entry is less than the average time for second reference password entry, a second delayed verification prompt message is generated based on the current user's real-time password operation behavior. If it is determined that the number of fingerprints included in the current fingerprint password is greater than the first fingerprint number threshold and less than the second fingerprint number threshold, and it is determined that the total duration of the current password entry is greater than or equal to the average duration of the second reference password entry, the subsequent business processing flow is executed.

6. An electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that is executed by the at least one processor, such that the at least one processor is able to perform the cryptographic operation protection method according to any one of claims 1-4.

7. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that are used to cause a processor to execute the cryptographic operation protection method according to any one of claims 1-4.

8. A computer program product comprising a computer program / instructions, wherein, When the computer program / instruction is executed by the processor, it implements the cryptographic operation protection method according to any one of claims 1-4.

Images