Information processing method and device, terminal and storage medium

Abstract

The invention relates to an information processing method and device, a terminal and a storage medium. The information processing method is applied to the terminal. Wherein the terminal at least comprises a first security chip; the method comprises the steps of receiving first voucher information; generating a first random number; generating first ciphertext information according to the first credential information and the first random number; writing the first ciphertext information and the first random number into a first security chip; wherein the first security chip is used for performing first ciphertext registration processing on the first credential information according to the first random number. Through the embodiment of the invention, the risk of terminal information leakage can be reduced, and the safety performance of the terminal is improved.

Description

Technical Field

[0001] The present disclosure relates to the field of information processing, and in particular to an information processing method, device, terminal and storage medium. Background Art

[0002] As the application scope of smart terminals increases, the information security of smart terminals is an important part of the terminal performance. For example, the combination of lock screen password and FBE (File-Base Encrypt) provides protection for user information and data of smart terminals. The encryption modules such as lock screen password in this system mainly run in the logical processing mechanism of TEE (Trust Excution Environment). However, in actual applications, the encryption method running in TEE in smart terminals still has the risk of information leakage. Summary of the invention

[0003] In order to overcome the problems existing in the related art, the present disclosure provides an information processing method, device and storage medium to overcome the problem that the encryption method running in TEE in the current terminal has the risk of information leakage.

[0004] According to a first aspect of an embodiment of the present disclosure, there is provided an information processing method, the method being applied to a terminal; wherein the terminal at least includes a first security chip; the method comprising:

[0005] receiving first credential information;

[0006] generating a first random number;

[0007] Generate first ciphertext information according to the first credential information and the first random number;

[0008] The first ciphertext information and the first random number are written into the first security chip; wherein the first security chip is used to perform a first ciphertext registration process on the first credential information according to the first random number.

[0009] In some embodiments, the terminal further includes a second security chip; and the method further includes:

[0010] generating a second random number;

[0011] Generate second ciphertext information according to the first credential information and the second random number;

[0012] The second ciphertext information and the second random number are written into the second security chip; wherein the second security chip is used to perform a second ciphertext registration process on the first credential information according to the second random number.

[0013] In some embodiments, the first ciphertext registration process includes:

[0014] The first security chip generates a first key according to the first random number and the first ciphertext information;

[0015] The second ciphertext registration process includes:

[0016] The second security chip generates a second key according to the second random number and the second ciphertext information;

[0017] The first key is different from the second key.

[0018] In some embodiments, the method further comprises:

[0019] Obtaining a preset composite password; wherein the composite password is used to encrypt user files of the terminal;

[0020] Encrypt the composite password according to the first key to obtain a first ciphertext file;

[0021] The synthesized password is encrypted according to the second key to obtain a second ciphertext file.

[0022] In some embodiments, generating first ciphertext information according to the first credential information and the first random number includes:

[0023] Generate a first random number file according to the first random number;

[0024] Performing a first operation on the first credential information and the first random number file to generate the first ciphertext information;

[0025] The generating second ciphertext information according to the first credential information and the second random number includes:

[0026] Generate a second random number file according to the second random number;

[0027] A second operation is performed on the first credential information and the second random number file to generate the second ciphertext information.

[0028] According to a second aspect of an embodiment of the present disclosure, there is provided an information processing method, the method being applied to a terminal, the terminal comprising at least a first security chip; the method comprising:

[0029] receiving second credential information;

[0030] Generate third ciphertext information according to the second credential information and a first random number corresponding to the first security chip;

[0031] Verifying the third ciphertext information by using the first security chip to obtain a first verification result;

[0032] The terminal is unlocked according to the first verification result.

[0033] In some embodiments, verifying the third ciphertext information by the first security chip to obtain a first verification result includes:

[0034] Reading first ciphertext information pre-stored in the first security chip;

[0035] Verify whether the third ciphertext information matches the first ciphertext information, and if so, obtain a first verification result indicating that the verification is successful.

[0036] In some embodiments, unlocking the terminal according to the first verification result includes:

[0037] If the first verification result indicates that the verification is passed, generating a first key according to the first ciphertext information and the first random number;

[0038] Decrypting the first ciphertext file pre-stored in the first security chip according to the first key to obtain a preset composite password; wherein the composite password is used to encrypt the user file of the terminal;

[0039] The ciphertext of the user file in the terminal is decrypted according to the synthetic password to obtain the original text of the user file.

[0040] In some embodiments, the terminal further includes a second security chip; and the method further includes:

[0041] Generate fourth ciphertext information according to the second credential information and a second random number corresponding to the second security chip;

[0042] Verifying the fourth ciphertext information by using the second security chip to obtain a second verification result;

[0043] The terminal is unlocked according to the second verification result.

[0044] In some embodiments, the verifying the fourth ciphertext information by the second security chip to obtain a second verification result includes:

[0045] Reading the second ciphertext information pre-stored in the second security chip;

[0046] Verify whether the fourth ciphertext information matches the second ciphertext information, and if so, obtain a second verification result indicating that the verification is successful.

[0047] In some embodiments, unlocking the terminal according to the second verification result includes:

[0048] If the second verification result indicates that the verification is passed, generating a second key according to the second ciphertext information and the second random number;

[0049] Decrypting the second key to obtain a preset composite password; wherein the composite password is used to encrypt user files of the terminal;

[0050] The user file ciphertext in the terminal is decrypted according to the synthetic password to obtain the original text of the user file.

[0051] According to a third aspect of an embodiment of the present disclosure, an information processing device is provided, the device being applied to a terminal; wherein the terminal at least includes a first security chip; the device includes:

[0052] A first receiving module, configured to receive first credential information;

[0053] A first generating module, configured to generate a first random number;

[0054] A second generating module, configured to generate first ciphertext information according to the first credential information and the first random number;

[0055] The first writing module is configured to write the first ciphertext information and the first random number into the first security chip; wherein the first security chip is used to perform a first ciphertext registration process on the first credential information according to the first random number.

[0056] In some embodiments, the terminal further includes a second security chip; the device further includes:

[0057] A third generating module, configured to generate a second random number;

[0058] a fourth generating module, configured to generate second ciphertext information according to the first credential information and the second random number;

[0059] The second writing module is configured to write the second ciphertext information and the second random number into the second security chip; wherein the second security chip is used to perform a second ciphertext registration process on the first credential information according to the second random number.

[0060] In some embodiments, the first ciphertext registration process includes:

[0061] The first security chip generates a first key according to the first random number and the first ciphertext information;

[0062] The second ciphertext registration process includes:

[0063] The second security chip generates a second key according to the second random number and the second ciphertext information;

[0064] The first key is different from the second key.

[0065] In some embodiments, the apparatus further comprises:

[0066] A first acquisition module is configured to acquire a preset composite password; wherein the composite password is used to encrypt a user file of the terminal;

[0067] A first encryption module is configured to encrypt the composite password according to the first key to obtain a first ciphertext file;

[0068] The second encryption module is configured to encrypt the composite password according to the second key to obtain a second ciphertext file.

[0069] In some embodiments, the second generating module is configured to:

[0070] Generate a first random number file according to the first random number;

[0071] Performing a first operation on the first credential information and the first random number file to generate the first ciphertext information;

[0072] The fourth generation module is configured as follows:

[0073] Generate a second random number file according to the second random number;

[0074] A second operation is performed on the first credential information and the second random number file to generate the second ciphertext information.

[0075] According to a fourth aspect of an embodiment of the present disclosure, there is provided an information processing device, the device being applied to a terminal, the terminal comprising at least a first security chip; the device comprising:

[0076] A second receiving module, configured to receive second credential information;

[0077] a fifth generating module, configured to generate third ciphertext information according to the second credential information and a first random number corresponding to the first security chip;

[0078] A first verification module, configured to verify the third ciphertext information through the first security chip to obtain a first verification result;

[0079] The first unlocking module is configured to unlock the terminal according to the first verification result.

[0080] In some embodiments, the first verification module is configured as follows:

[0081] Reading first ciphertext information pre-stored in the first security chip;

[0082] Verify whether the third ciphertext information matches the first ciphertext information, and if so, obtain a first verification result indicating that the verification is successful.

[0083] In some embodiments, the first unlocking module is configured as follows:

[0084] If the first verification result indicates that the verification is passed, generating a first key according to the first ciphertext information and the first random number;

[0085] Decrypting the first ciphertext file pre-stored in the first security chip according to the first key to obtain a preset composite password; wherein the composite password is used to encrypt the user file of the terminal;

[0086] The ciphertext of the user file in the terminal is decrypted according to the synthetic password to obtain the original text of the user file.

[0087] In some embodiments, the terminal further includes a second security chip; the device further includes:

[0088] a sixth generating module, configured to generate fourth ciphertext information according to the second credential information and a second random number corresponding to the second security chip;

[0089] A second verification module, configured to verify the fourth ciphertext information through the second security chip to obtain a second verification result;

[0090] The second unlocking module is configured to unlock the terminal according to the second verification result.

[0091] In some embodiments, the second verification module is configured as follows:

[0092] Reading the second ciphertext information pre-stored in the second security chip;

[0093] Verify whether the fourth ciphertext information matches the second ciphertext information, and if so, obtain a second verification result indicating that the verification is successful.

[0094] In some embodiments, the second unlocking module is configured as follows:

[0095] If the second verification result indicates that the verification is passed, generating a second key according to the second ciphertext information and the second random number;

[0096] Decrypting the second key to obtain a preset composite password; wherein the composite password is used to encrypt user files of the terminal;

[0097] The user file ciphertext in the terminal is decrypted according to the synthetic password to obtain the original text of the user file.

[0098] According to a fifth aspect of an embodiment of the present disclosure, there is provided a terminal, comprising at least a first security chip;

[0099] The first security chip is used to assist the terminal in implementing the steps in any one of the above-mentioned information processing methods.

[0100] According to a sixth aspect of an embodiment of the present disclosure, there is provided an information processing device, including:

[0101] processor;

[0102] a memory for storing processor-executable instructions;

[0103] Wherein, the processor is configured to: implement the steps in any of the above-mentioned information processing methods when executed.

[0104] According to the seventh aspect of an embodiment of the present disclosure, a non-temporary computer-readable storage medium is provided, and when instructions in the storage medium are executed by a processor of an information processing device, the device is enabled to perform the steps in any one of the above-mentioned information processing methods.

[0105] The technical solution provided by the embodiments of the present disclosure may have the following beneficial effects:

[0106] In an embodiment of the present disclosure, a terminal receives first credential information; generates a first random number; generates first ciphertext information based on the first credential information and the first random number; writes the first ciphertext information and the first random number into the first security chip; wherein the first security chip is used to perform a first ciphertext registration process on the first credential information based on the first random number.

[0107] Through the disclosed embodiments, the security chip is applied to the terminal for ciphertext registration, and the user files such as the terminal lock screen are encrypted. Compared with the encryption method running in TEE, the security chip is physically isolated from other operating environments of the terminal, which can achieve a higher security level, effectively reduce the risk of information leakage, and improve the security performance of terminal encryption.

[0108] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0109] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0110] Figure 1 The following is a flow chart of an information processing method according to an exemplary embodiment. Figure 1 ;

[0111] Figure 2 The following is a flow chart of an information processing method according to an exemplary embodiment. Figure 2 ;

[0112] Figure 3 The following is a flow chart of an information processing method according to an exemplary embodiment. Figure 3 ;

[0113] Figure 4 The following is a flow chart of an information processing method according to an exemplary embodiment. Figure 4 ;

[0114] Figure 5 The following is a flow chart of an information processing method according to an exemplary embodiment. Figure 5 ;

[0115] Figure 6 The following is a flow chart of an information processing method according to an exemplary embodiment. Figure 6 ;

[0116] Figure 7 An information processing device frame is shown according to an exemplary embodiment Figure 1 ;

[0117] Figure 8 An information processing device frame is shown according to an exemplary embodiment Figure 2 ;

[0118] Fig. 9 is a block diagram of an information processing device according to an exemplary embodiment;

[0119] Fig.10 The figure is a hardware structure block diagram of an information processing device according to an exemplary embodiment. DETAILED DESCRIPTION

[0120] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present disclosure. Instead, they are merely examples of devices and methods consistent with some aspects of the present disclosure as detailed in the appended claims.

[0121] The lock screen password has always been an important part of privacy protection and identity authentication for smart devices such as mobile phones and tablets. It is combined with FBE to provide protection for user information and data. Previously, the lock screen password module of this system mainly ensured the information security of the lock screen password by the logic processing mechanism running on TEE.

[0122] As the application scope of smart terminals gradually expands, users have higher requirements for privacy and information security such as lock screen passwords. In the disclosed embodiment, the lock screen password solution using a security chip is compared with the previous user lock screen password verification solution based on TEE. Because it runs on an independent security chip, it is physically isolated from the operating environment such as TEE and REE, which effectively reduces the risk of information leakage and significantly improves the security of the device.

[0123] The following is a detailed description:

[0124] Figure 1 The following is a flow chart of an information processing method according to an exemplary embodiment. Figure 1 ,like Figure 1 As shown, the method is applied to a terminal, wherein the terminal at least includes a first security chip, and the method mainly includes the following steps:

[0125] In step 101, first credential information is received;

[0126] In step 102, a first random number is generated;

[0127] In step 103, first ciphertext information is generated according to the first credential information and the first random number;

[0128] In step 104, the first ciphertext information and the first random number are written into the first security chip; wherein the first security chip is used to perform a first ciphertext registration process on the first credential information according to the first random number.

[0129] Here, the terminal may be any intelligent terminal, including mobile phones, tablet computers, smart watches, smart glasses, and vehicle-mounted display devices, etc. The terminal includes a chip for executing various applications in the terminal and storing user files, etc. The first security chip is independent of other chips in the terminal, and the ciphertext registration process of the terminal can be independently run on the first security chip, thereby reducing the risk of information leakage.

[0130] The first ciphertext registration process is actually a process of registering the password set by the user and storing it on the first security chip. By performing a series of processes on the password set by the user, the purpose of encrypting the terminal is achieved. The password here can be a terminal lock screen password, which is used to authenticate the startup of any function of the terminal; it can also be a password for certain applications or a specific usage environment, for example, authentication for a payment environment, etc. The first security chip is an independent chip used to provide functions such as secure information storage and secure execution of important programs, such as eSE (EmbeddedSecure Element, embedded security chip).

[0131] In the embodiment of the present disclosure, the above-mentioned first credential information can be information input by the user when setting a password. For example, it can be string information input through a touch screen, or it can be image information collected by a camera (such as facial information, human iris information, etc.), or it can be feature information collected by a specific collection device (such as a fingerprint collection sensor).

[0132] The terminal may generate a random number for this ciphertext registration, that is, the first random number mentioned above. The first random number may be generated by the first security chip or by other data processing modules of the terminal.

[0133] In some embodiments, the method further comprises:

[0134] A first random number token (pwdToken1) is generated according to the first ciphertext information. The first random number token can be used to write into the first security chip to generate a key.

[0135] In some embodiments, generating first ciphertext information according to the first credential information and the first random number includes:

[0136] Generate a first random number file according to the first random number;

[0137] A first operation is performed on the first credential information and the first random number file to generate first ciphertext information.

[0138] Here, the first random number file (pwd file) is a file generated using the first random number, and is used for data processing with the first credential information. The random number can exemplarily perform a preset data operation, such as a hash operation, to obtain a corresponding data result as the first ciphertext information.

[0139] After the first ciphertext information and the first random number are written into the first security chip, the first security chip performs corresponding processing based on the two, thereby realizing the registration of the ciphertext. Here, the processing of the first security chip based on the first ciphertext information and the first random number at least includes storing the first ciphertext information and the first random number, and further, may include combining the two to generate a key and other processing.

[0140] It should be noted that after the first random number is written into the first security chip, it is associated with the first ciphertext information registered by the first security chip this time. Therefore, the first security chip can use the stored first random number to decrypt the first ciphertext information after registration, thereby achieving physical isolation from other chips.

[0141] After the first ciphertext registration process, the terminal can use the first ciphertext information to unlock the terminal.

[0142] In some embodiments, the terminal further includes a second security chip; Figure 2 As shown, the method also includes the following steps:

[0143] In step 201, a second random number is generated;

[0144] In step 202, second ciphertext information is generated according to the first credential information and the second random number;

[0145] In step 203, the second ciphertext information and the second random number are written into the second security chip; wherein the second security chip is used to perform a second ciphertext registration process on the first credential information according to the second random number.

[0146] In some embodiments, the method further comprises:

[0147] A second random number token (pwdToken2) is generated according to the second ciphertext information. The second random number token can be used to write into the second security chip to generate a key.

[0148] In some embodiments, in the above step 202, generating the second ciphertext information according to the first credential information and the second random number includes:

[0149] Generate a second random number file based on the second random number; perform a second operation on the first credential information and the second random number file to generate second ciphertext information. Here, the second random number file is a file generated by the second random number, and is also used to perform data processing with the first credential information. The second operation processing here can be the same processing type as the first operation processing, such as a hash operation.

[0150] Here, the second security chip can be a chip of the same type as the first security chip, and the two are independent of each other, and the second security chip is also independent of other chips in the terminal. When the terminal registers the first credential information, the first random number and the second random number can be generated at the same time. Similar to the first random number, the second random number can be generated by the second security chip or by other data processing modules of the terminal.

[0151] Similarly, the terminal processes the first credential information and the second random number to obtain the second ciphertext information, and writes the second random number and the second ciphertext information into the second security chip. In this way, the second security chip can also encrypt the first credential information by processing the second ciphertext information and the second random number.

[0152] It is understandable that the functions of the second security chip and the first security chip are similar, both of which register the first credential information, but the random numbers used by the two are different. Therefore, the first ciphertext information and the second ciphertext information stored in the first security chip and the second security chip are different. In this way, even if the first security chip is cracked, the second security chip cannot be cracked at the same time.

[0153] In the disclosed embodiment, two security chips are used to register the first credential information, which can ensure that after the first security chip used under the original logic is damaged or the key-related file corresponding to the first security chip is damaged or lost, the user can still normally unlock the terminal and restore the data therein, thereby avoiding data loss problems.

[0154] It should be noted that the above steps 201 to 203 may be independent of and synchronously executed with the above steps 102 to 104 (the synchronization here does not mean that the execution time is completely consistent, but that they are executed separately after receiving the first credential information).

[0155] In some embodiments, the first ciphertext registration process includes: the first security chip generates a first key according to the first random number and the first ciphertext information;

[0156] The second ciphertext registration process includes: the second security chip generates a second key according to a second random number and second ciphertext information; wherein the first key is different from the second key.

[0157] That is to say, the first ciphertext registration process can be a process in which the first security chip generates a first key using a first random number and a first ciphertext message, and the second ciphertext process can be a process in which the second security chip generates a second key using a second random number and a second ciphertext message. Since the first random number is different from the second random number, and thus the first ciphertext message is different from the second ciphertext message, the first key and the second key obtained by the two processes are ultimately different. Here, both the first key and the second key can be used to encrypt user files of the terminal.

[0158] In this way, for the first credential information, the terminal uses two different security chips to perform registration processing and obtains different keys respectively, thereby enhancing the encryption strength of the first credential information and improving the security of the terminal data.

[0159] In some embodiments, the method further comprises:

[0160] Obtaining a preset composite password; wherein the composite password is used to encrypt user files of the terminal;

[0161] The synthesized password is encrypted according to the first key to obtain a first ciphertext file;

[0162] The synthesized password is encrypted according to the second key to obtain a second ciphertext file.

[0163] Here, the synthetic password (SyntheticPassword, SP) is suitable for the password for user file encryption. The password can be generated using a variant hash algorithm when the user sets the password for the first time after resetting the terminal. It can be encrypted using a derived component of the screen lock password and stored in the mobile phone system.

[0164] In the registration process of the embodiment of the present disclosure, the terminal generates the first ciphertext information according to the first credential information input by the user and the generated first random number, and generates the second ciphertext information according to the first credential information and the second random number. The first security chip and the second security chip can generate the first key and the second key respectively.

[0165] The terminal uses the first key and the second key to encrypt the composite password respectively to obtain the ciphertext file about SP. In this way, during the decryption process of the user, the security chip can use the first key or the second key to decrypt and obtain SP, and then use SP to decrypt and obtain the corresponding user file.

[0166] It can be understood that the first key and the second key are independent of each other and encrypt the SP respectively, that is, two different "keys" are provided for the SP. In this way, when a security chip fails, or the key is lost or cracked, the other key can be used to decrypt the SP, thereby effectively reducing the loss of user files caused by the unusable key.

[0167] Figure 3 The following is a flow chart of an information processing method according to an exemplary embodiment. Figure 3 ,like Figure 3 As shown, the process of registering the terminal using the first security chip and the second security chip is as follows:

[0168] In step 301, the terminal receives first credential information input by a user.

[0169] In step 302, a first random number and a second random number are generated respectively, and a first random number file (pwd file 1) is generated based on the first random number, and a second random number file (pwd file 2) is generated based on the second random number.

[0170] In step 303, a hash operation is performed on the first credential information, the first random number file and the second random number file respectively to obtain first ciphertext information and second ciphertext information.

[0171] In step 304, a first random number token is generated using the first ciphertext information, written into the first security chip, and a value is written based on the first random number; a second random number token is generated using the second ciphertext information, written into the second security chip, and a value is written based on the second random number.

[0172] In step 305, the first security chip generates a first key using the written first random number token and the value of the first random number; the second security chip generates a second key using the written second random number token and the value of the second random number.

[0173] In step 306, the SP is encrypted using the first key and the second key respectively to obtain a first ciphertext file and a second ciphertext file.

[0174] The registration of the credentials entered by the user is divided into two stages. The first stage is that after the user completes the input of the credentials, the security chip processes the credentials entered by the user. The second stage is that the security chip processes the SP generated by the preset password as input, and the password service completes the processing of the SP.

[0175] In the first stage, the credentials entered by the user, such as the lock screen password, are mainly encrypted. First, the credentials and some fixed content are "salted" to generate a ciphertext file about the credentials. A random number token is generated through this file, and a corresponding random number value is generated at the same time. The value is then written into the security chip. After that, the random number token and the value are combined into a key key to encrypt the SP and generate a ciphertext file about the SP.

[0176] For example, in the lock screen password verification system of the smart terminal, once the random number is lost due to a security chip failure, the SP is unavailable and the user data cannot be decrypted. A simple backup lock screen password file cannot be unlocked by another security chip. Therefore, the embodiment of the present disclosure considers using at least two security chips to register separately during the registration process to obtain the corresponding encrypted SP. In this way, if one security chip fails, the SP can be obtained through another security chip to restore the user data.

[0177] In the disclosed embodiment, after the user enters the first credential information, the system will generate two corresponding random numbers. These two random numbers are combined with the first credential information to generate a ciphertext file about the credential information, from which a random number token (pwdToken) is derived. The random number token and the random number value are written into the security chip together, completing the first step of registration.

[0178] After that, the random number token is combined with the random number value to participate in the encryption operation of the SP in the form of a key to generate a ciphertext file related to the SP. Then enter the second stage, the lock screen password service completes the subsequent registration work according to the corresponding files of the above two security chips.

[0179] Figure 4 The following is a flow chart of an information processing method according to an exemplary embodiment. Figure 3 ,like Figure 4 As shown, the method is applied to a terminal, and the terminal at least includes a first security chip; the method mainly includes the following steps:

[0180] In step 401, receiving second credential information;

[0181] In step 402, third ciphertext information is generated according to the second credential information and a first random number corresponding to the first security chip;

[0182] In step 403, the third ciphertext information is verified by the first security chip to obtain a first verification result;

[0183] In step 404, the terminal is unlocked according to the first verification result.

[0184] Figure 4The method shown is a method for unlocking the terminal corresponding to the method of the above embodiment. When the terminal receives the second credential information input by the user, the credential information is verified accordingly to determine whether to unlock. It can be understood that if the second credential information is consistent with the first credential information, it means that the verification is passed, and the terminal can be unlocked.

[0185] Specifically, the terminal generates corresponding third ciphertext information based on the second credential information and the first random number corresponding to the first security chip during the registration process. It should be noted that this step can be performed by the first security chip, or it can be performed by other modules of the terminal and written to the first security chip. The process of generating the third ciphertext information here is the same as the process of generating the first ciphertext information during the registration process. Therefore, the first security chip can verify whether the third ciphertext information is consistent with the first ciphertext information, and unlock the terminal based on the first verification result obtained.

[0186] In some embodiments, verifying the third ciphertext information by the first security chip to obtain a first verification result includes:

[0187] Reading first ciphertext information pre-stored in the first security chip;

[0188] Verify whether the third ciphertext information matches the first ciphertext information, and if so, obtain a first verification result indicating that the verification is successful.

[0189] Here, verifying whether the third ciphertext information matches the first ciphertext information can be achieved by comparing whether the two are identical or whether they include the same specified part. If they match, the first security chip can return a corresponding result, such as a one-character mark as the first verification result, to indicate whether the verification is passed. For example, when the mark is "1", it indicates that the verification is passed, and when the mark is "0", it indicates that the verification is not passed. If the verification is not passed, the first security chip does not perform the subsequent unlocking steps, and can also return information indicating that the verification failed.

[0190] In some embodiments, unlocking the terminal according to the first verification result includes:

[0191] If the first verification result indicates that the verification is passed, generating a first key according to the first ciphertext information and the first random number;

[0192] Decrypting the first ciphertext file pre-stored in the first security chip according to the first key to obtain a preset composite password; wherein the composite password is used to encrypt the user file of the terminal;

[0193] The ciphertext of the user file in the terminal is decrypted according to the synthetic password to obtain the original text of the user file.

[0194] The unlocking process here corresponds to the registration process. If the verification is successful, the first ciphertext information and the third ciphertext information are matched, so the first key can be generated according to the first ciphertext information and the first random number. The first key generated here is consistent with the first key generated in the registration process, so it can be used to decrypt the first ciphertext file of the first security chip (the ciphertext file related to the SP) to obtain the SP. In this way, the SP can be further used to decrypt the user files in the terminal.

[0195] In some embodiments, Figure 5 As shown, the terminal also includes a second security chip; the method also includes:

[0196] In step 501, fourth ciphertext information is generated according to the second credential information and a second random number corresponding to the second security chip;

[0197] In step 502, the fourth ciphertext information is verified by the second security chip to obtain a second verification result;

[0198] In step 503, the terminal is unlocked according to the second verification result.

[0199] It can be understood that the above steps 501 to 503 are similar to steps 402 to 404, and both use different random numbers to generate corresponding ciphertext information and verify the ciphertext information to determine whether to unlock the terminal.

[0200] It should be noted that the unlocking process of the second security chip can be performed synchronously with the first security chip, and can also be started when the first security chip is damaged or the unlocking of the first security chip fails.

[0201] Exemplarily, if the first security chip is detected to be abnormal, the above steps are executed.

[0202] In some embodiments, verifying the fourth ciphertext information by the second security chip to obtain a second verification result includes:

[0203] Reading the second ciphertext information pre-stored in the second security chip;

[0204] Verify whether the fourth ciphertext information matches the second ciphertext information, and if so, obtain a second verification result indicating that the verification is successful.

[0205] Similarly, verifying whether the third ciphertext information matches the first ciphertext information can also be achieved by comparing whether the two are identical, or whether they include the same specified part. If they match, the second security chip can return a corresponding result, such as a one-character mark as the second verification result, to indicate whether the verification is passed. For example, when the mark is "1", it indicates that the verification is passed, and when the mark is "0", it indicates that the verification is not passed. If the verification is not passed, the second security chip does not perform the subsequent unlocking steps, and can also return information indicating that the verification failed.

[0206] In some embodiments, unlocking the terminal according to the second verification result includes:

[0207] If the second verification result indicates that the verification is successful, generating a second key according to the second ciphertext information and the second random number;

[0208] Decrypting the password using the second key to obtain a preset composite password, wherein the composite password is used to encrypt user files of the terminal;

[0209] The user file ciphertext in the terminal is decrypted according to the synthetic password to obtain the original text of the user file.

[0210] Similarly, the unlocking process here corresponds to the registration process. If the verification is successful, the second ciphertext information and the fourth ciphertext information are matched, so the second key can be generated according to the second ciphertext information and the second random number. The second key generated here is consistent with the second key generated in the registration process, so it can be used to decrypt the second ciphertext file of the second security chip (the ciphertext file related to the SP) to obtain the SP. In this way, the SP can be further used to decrypt the user files in the terminal.

[0211] Figure 6 The following is a flow chart of an information processing method according to an exemplary embodiment. Figure 6 ,like Figure 6 As shown, the process of the terminal using the first security chip and the second security chip to perform user authentication is as follows:

[0212] In step 601, the terminal receives second credential information input by a user.

[0213] In step 602, a hash operation is performed on the second credential information, the first random number file and the second random number file respectively, to obtain third ciphertext information and fourth ciphertext information.

[0214] In step 603, a first random number token is generated using the third ciphertext information, written into the first security chip, and the first random number is read based on the first random number token; a second random number token is generated using the fourth ciphertext information, written into the second security chip, and the second random number is read based on the second random number token.

[0215] In step 604, the first security chip generates a first key using the written first random number token and the value of the first random number; the second security chip generates a second key using the written second random number token and the value of the second random number.

[0216] In step 605, the first ciphertext file about the SP is decrypted by the first key, or the second ciphertext file is decrypted by the second key to obtain the SP.

[0217] In step 606, the ciphertext of the user file is decrypted according to the obtained SP to obtain the original text of the user file.

[0218] For the verification and decryption process, after the user enters the credential information, the corresponding random number token can be obtained from the ciphertext file related to the credential information, and the value of the random number can be read in the security chip based on the random number token. The value of the random number will be returned only when the security chip reads the content correctly. The value of the random number is then combined with the obtained random number token as a key, and the ciphertext file about the SP is decrypted to obtain the SP. The SP obtained through decryption participates in the second-stage decryption service of the lock screen password service, and finally decrypts the user file on the premise that the password is correct.

[0219] In the disclosed embodiment, during a normal unlocking process of a user, the system obtains the first random number generated by the first security chip introduced in the above process through the first security chip, generates a first key for encryption and decryption through the first random number and the first credential information input by the user, and uses the first key to decrypt the file about the SP ciphertext generated in the above process, and finally obtains the SP, which is used to decrypt the file-level encryption of the system.

[0220] When the first security chip used under the above logic is damaged or the first key-related file is lost or damaged, the corresponding correct first random number generated by the first security chip cannot be obtained, and the normal decryption process cannot be carried out, which will cause the terminal to be unable to unlock, such as the lock screen cannot be unlocked, data loss and other problems. In this case, the second ciphertext file can be enabled, such as the backup lock screen file. Since the second ciphertext file is generated by the second security chip and has a second random number independent of the first security chip, the use of the second security chip will not be affected when the first security chip is damaged. Therefore, when the verification of the lock screen password and other verification credentials fails due to non-user reasons, the backup second security chip can be used to re-execute the verification process to complete the unlocking.

[0221] Figure 7 is a structural block diagram of an information processing device according to an exemplary embodiment, the device is applied to a terminal; wherein the terminal at least includes a first security chip; Figure 7 As shown, the information processing device 100 includes:

[0222] A first receiving module 701 is configured to receive first credential information;

[0223] A first generating module 702, configured to generate a first random number;

[0224] The second generating module 703 is configured to generate first ciphertext information according to the first credential information and the first random number;

[0225] The first writing module 704 is configured to write the first ciphertext information and the first random number into the first security chip; wherein the first security chip is used to perform a first ciphertext registration process on the first credential information according to the first random number.

[0226] In some embodiments, the terminal further includes a second security chip; the device further includes:

[0227] A third generating module, configured to generate a second random number;

[0228] A fourth generating module, configured to generate second ciphertext information according to the first credential information and the second random number;

[0229] The second writing module is configured to write the second ciphertext information and the second random number into the second security chip; wherein the second security chip is used to perform second ciphertext registration processing on the first credential information according to the second random number.

[0230] In some embodiments, the first ciphertext registration process includes:

[0231] The first security chip generates a first key according to the first random number and the first ciphertext information;

[0232] The second ciphertext registration process includes:

[0233] The second security chip generates a second key according to the second random number and the second ciphertext information;

[0234] The first key is different from the second key.

[0235] In some embodiments, the apparatus further comprises:

[0236] A first acquisition module is configured to acquire a preset composite password; wherein the composite password is used to encrypt a user file of the terminal;

[0237] A first encryption module is configured to encrypt the composite password according to a first key to obtain a first ciphertext file;

[0238] The second encryption module is configured to encrypt the composite password according to the second key to obtain a second ciphertext file.

[0239] In some embodiments, the second generation module is configured to:

[0240] Generate a first random number file according to the first random number;

[0241] Performing a first operation on the first credential information and the first random number file to generate first ciphertext information;

[0242] The fourth generation module is configured as follows:

[0243] Generate a second random number file according to the second random number;

[0244] A second operation is performed on the first credential information and the second random number file to generate second ciphertext information.

[0245] Figure 8 is a structural frame of an information processing device according to an exemplary embodiment Figure 2 , the device is applied to a terminal, the terminal at least includes a first security chip; Figure 8 As shown, the information processing device 200 includes:

[0246] The second receiving module 801 is configured to receive second credential information;

[0247] A fifth generating module 802 is configured to generate third ciphertext information according to the second credential information and a first random number corresponding to the first security chip;

[0248] The first verification module 803 is configured to verify the third ciphertext information through the first security chip to obtain a first verification result;

[0249] The first unlocking module 804 is configured to unlock the terminal according to the first verification result.

[0250] In some embodiments, the first verification module is configured to:

[0251] Reading first ciphertext information pre-stored in the first security chip;

[0252] Verify whether the third ciphertext information matches the first ciphertext information, and if so, obtain a first verification result indicating that the verification is successful.

[0253] In some embodiments, the first unlocking module is configured to:

[0254] If the first verification result indicates that the verification is passed, generating a first key according to the first ciphertext information and the first random number;

[0255] Decrypting the first ciphertext file pre-stored in the first security chip according to the first key to obtain a preset composite password; wherein the composite password is used to encrypt the user file of the terminal;

[0256] The ciphertext of the user file in the terminal is decrypted according to the synthetic password to obtain the original text of the user file.

[0257] In some embodiments, the terminal further includes a second security chip; the device further includes:

[0258] a sixth generating module, configured to generate fourth ciphertext information according to the second credential information and a second random number corresponding to the second security chip;

[0259] A second verification module, configured to verify the fourth ciphertext information through the second security chip to obtain a second verification result;

[0260] The second unlocking module is configured to unlock the terminal according to the second verification result.

[0261] In some embodiments, the second verification module is configured to:

[0262] Reading the second ciphertext information pre-stored in the second security chip;

[0263] Verify whether the fourth ciphertext information matches the second ciphertext information, and if so, obtain a second verification result indicating that the verification is successful.

[0264] In some embodiments, the second unlocking module is configured to:

[0265] If the second verification result indicates that the verification is successful, generating a second key according to the second ciphertext information and the second random number;

[0266] Decrypting the password using the second key to obtain a preset composite password, wherein the composite password is used to encrypt user files of the terminal;

[0267] The user file ciphertext in the terminal is decrypted according to the synthetic password to obtain the original text of the user file.

[0268] In a smartphone lock screen password verification system based on a security chip, once the security chip fails, the smartphone will become unusable; this solution is based on the above system and adds an additional lock screen password registration process to deal with the situation where the device cannot be unlocked and the user file is locked due to the loss of the lock screen file or the damage of the security chip. This solution optimizes the user experience when the user's smartphone encounters lock screen related problems and improves the stability of the device.

[0269] At the same time, the relationship between the two security chips in this solution is independent of each other. If one of the security chips is cracked, it cannot provide additional convenient information for cracking the other security chip.

[0270] Fig. 9is a block diagram of an information processing device 900 according to an exemplary embodiment. For example, the device 900 may be a mobile phone, a mobile computer, etc.

[0271] Reference Fig. 9 , the device 900 may include one or more of the following components: a processing component 902 , a memory 904 , a power component 906 , a multimedia component 908 , an audio component 910 , an input / output (I / O) interface 912 , a sensor component 914 , and a communication component 916 .

[0272] The processing component 902 generally controls the overall operation of the device 900, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 902 may include one or more processors 920 to execute instructions to perform all or part of the steps of the above-described method. In addition, the processing component 902 may include one or more modules to facilitate interaction between the processing component 902 and other components. For example, the processing component 902 may include a multimedia module to facilitate interaction between the multimedia component 908 and the processing component 902.

[0273] The memory 904 is configured to store various types of data to support operations on the device 900. Examples of such data include instructions for any application or method operating on the device 900, contact data, phone book data, messages, pictures, videos, etc. The memory 904 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0274] The power supply component 906 provides power to the various components of the device 900. The power supply component 906 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power for the device 900.

[0275] The multimedia component 908 includes a screen that provides an output interface between the device 900 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundaries of the touch or slide action, but also detect the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 908 includes a front camera and / or a rear camera. When the device 900 is in an operating mode, such as a shooting mode or a video mode, the front camera and / or the rear camera may receive external multimedia data. Each front camera and rear camera may be a fixed optical lens system or have a focal length and optical zoom capability.

[0276] The audio component 910 is configured to output and / or input audio signals. For example, the audio component 910 includes a microphone (MIC), and when the device 900 is in an operating mode, such as a call mode, a recording mode, and a speech recognition mode, the microphone is configured to receive an external audio signal. The received audio signal can be further stored in the memory 904 or sent via the communication component 916. In some embodiments, the audio component 910 also includes a speaker for outputting audio signals.

[0277] I / O interface 912 provides an interface between processing component 902 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include but are not limited to: a home button, a volume button, a start button, and a lock button.

[0278] The sensor assembly 914 includes one or more sensors for providing various aspects of status assessment for the device 900. For example, the sensor assembly 914 can detect the open / closed state of the device 900, the relative positioning of components, such as the display and keypad of the device 900, and the sensor assembly 914 can also detect the position change of the device 900 or a component of the device 900, the presence or absence of user contact with the device 900, the orientation or acceleration / deceleration of the device 900, and the temperature change of the device 900. The sensor assembly 914 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. The sensor assembly 914 may also include an optical sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 914 may also include an accelerometer, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

[0279] The communication component 916 is configured to facilitate wired or wireless communication between the device 900 and other devices. The device 900 can access a wireless network based on a communication standard, such as Wi-Fi, 4G or 5G, or a combination thereof. In an exemplary embodiment, the communication component 916 receives a broadcast signal or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 916 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.

[0280] In an exemplary embodiment, the apparatus 900 may be implemented by one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors or other electronic components to perform the above method.

[0281] In an exemplary embodiment, a terminal is also provided, which may include the modules or components in the above-mentioned information processing device, the terminal also includes a first security chip, and the terminal may also include a second security chip. Exemplarily, the terminal may be a smart phone, a tablet computer, a computer, a smart wearable device, and a vehicle-mounted device.

[0282] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 904 including instructions, and the instructions can be executed by the processor 920 of the device 900 to perform the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0283] A non-transitory computer-readable storage medium, when instructions in the storage medium are executed by a processor of an information processing device, enables the information processing device to perform an information processing method, the method comprising:

[0284] generating a first random number;

[0285] Generate first ciphertext information according to the first credential information and the first random number;

[0286] The first ciphertext information and the first random number are written into the first security chip; wherein the first security chip is used to perform a first ciphertext registration process on the first credential information according to the first random number.

[0287] Fig.101900 is a hardware structure block diagram of an information processing device according to an exemplary embodiment. For example, the device 1900 may be provided as a server. Fig.10 , the apparatus 1900 includes a processing component 1922, which further includes one or more processors, and a memory resource represented by a memory 1932 for storing instructions executable by the processing component 1922, such as an application. The application stored in the memory 1932 may include one or more modules each corresponding to a set of instructions. In addition, the processing component 1922 is configured to execute instructions to perform an information processing method, including:

[0288] generating a first random number;

[0289] Generate first ciphertext information according to the first credential information and the first random number;

[0290] The first ciphertext information and the first random number are written into the first security chip; wherein the first security chip is used to perform a first ciphertext registration process on the first credential information according to the first random number.

[0291] The device 1900 may also include a power supply component 1926 configured to perform power management of the device 1900, a wired or wireless network interface 1950 configured to connect the device 1900 to a network, and an input / output (I / O) interface 1958. The device 1900 may operate based on an operating system stored in the memory 1932, such as Windows Server™, MacOS X™, Unix™, Linux™, FreeBSD™, or the like.

[0292] It should be understood that "one embodiment" or "an embodiment" mentioned throughout the specification means that specific features, structures or characteristics related to the embodiment are included in at least one embodiment of the present disclosure. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner. It should be understood that in the various embodiments of the present disclosure, the size of the serial number of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present disclosure. The serial numbers of the embodiments of the present disclosure are for description only and do not represent the advantages and disadvantages of the embodiments.

[0293] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

[0294] In the several embodiments provided in the present disclosure, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored, or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the devices or units can be electrical, mechanical or other forms.

[0295] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units; they may be located in one place or distributed on multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0296] In addition, all functional units in the embodiments of the present disclosure may be integrated into one processing unit, or each unit may be separately configured as a unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0297] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses, or adaptations of the present disclosure that follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are to be considered exemplary only, and the true scope and spirit of the present disclosure are indicated by the following claims.

[0298] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. An information processing method, characterized in that: The method is applied to a terminal; wherein the terminal at least includes a first security chip; the method includes: receiving first credential information; generating a first random number; Generate first ciphertext information according to the first credential information and the first random number; The first ciphertext information and the first random number are written into the first security chip; wherein the first security chip is used to perform a first ciphertext registration process on the first credential information according to the first random number.

2. The method according to claim 1, characterized in that The terminal further includes a second security chip; and the method further includes: generating a second random number; Generate second ciphertext information according to the first credential information and the second random number; The second ciphertext information and the second random number are written into the second security chip; wherein the second security chip is used to perform a second ciphertext registration process on the first credential information according to the second random number.

3. The method according to claim 2, characterized in that The first ciphertext registration process includes: The first security chip generates a first key according to the first random number and the first ciphertext information; The second ciphertext registration process includes: The second security chip generates a second key according to the second random number and the second ciphertext information; The first key is different from the second key.

4. The method according to claim 3, characterized in that The method further comprises: Obtaining a preset composite password; wherein the composite password is used to encrypt user files of the terminal; Encrypt the composite password according to the first key to obtain a first ciphertext file; The synthesized password is encrypted according to the second key to obtain a second ciphertext file.

5. The method according to claim 2, characterized in that: The generating first ciphertext information according to the first credential information and the first random number includes: Generate a first random number file according to the first random number; Performing a first operation on the first credential information and the first random number file to generate the first ciphertext information; The generating second ciphertext information according to the first credential information and the second random number includes: Generate a second random number file according to the second random number; A second operation is performed on the first credential information and the second random number file to generate the second ciphertext information.

6. An information processing method, characterized in that: The method is applied to a terminal, and the terminal at least includes a first security chip; the method includes: receiving second credential information; Generate third ciphertext information according to the second credential information and a first random number corresponding to the first security chip; Verifying the third ciphertext information by using the first security chip to obtain a first verification result; The terminal is unlocked according to the first verification result.

7. The method according to claim 6, characterized in that The verifying the third ciphertext information by the first security chip to obtain a first verification result includes: Reading first ciphertext information pre-stored in the first security chip; Verify whether the third ciphertext information matches the first ciphertext information, and if so, obtain a first verification result indicating that the verification is successful.

8. The method according to claim 7, characterized in that The unlocking the terminal according to the first verification result includes: If the first verification result indicates that the verification is passed, generating a first key according to the first ciphertext information and the first random number; Decrypting the first ciphertext file pre-stored in the first security chip according to the first key to obtain a preset composite password; wherein the composite password is used to encrypt the user file of the terminal; The ciphertext of the user file in the terminal is decrypted according to the synthetic password to obtain the original text of the user file.

9. The method according to claim 6, characterized in that The terminal further includes a second security chip; and the method further includes: Generate fourth ciphertext information according to the second credential information and a second random number corresponding to the second security chip; Verifying the fourth ciphertext information by using the second security chip to obtain a second verification result; The terminal is unlocked according to the second verification result.

10. The method according to claim 9, characterized in that The verifying the fourth ciphertext information by the second security chip to obtain a second verification result includes: Reading the second ciphertext information pre-stored in the second security chip; Verify whether the fourth ciphertext information matches the second ciphertext information, and if so, obtain a second verification result indicating that the verification is successful.

11. The method according to claim 10, characterized in that The unlocking the terminal according to the second verification result includes: If the second verification result indicates that the verification is passed, generating a second key according to the second ciphertext information and the second random number; Decrypting the second key to obtain a preset composite password; wherein the composite password is used to encrypt user files of the terminal; The user file ciphertext in the terminal is decrypted according to the synthetic password to obtain the original text of the user file.

12. An information processing device, characterized in that: The device is applied to a terminal; wherein the terminal at least includes a first security chip; the device includes: A first receiving module, configured to receive first credential information; A first generating module, configured to generate a first random number; A second generating module, configured to generate first ciphertext information according to the first credential information and the first random number; The first writing module is configured to write the first ciphertext information and the first random number into the first security chip; wherein the first security chip is used to perform a first ciphertext registration process on the first credential information according to the first random number.

13. An information processing device, characterized in that: The device is applied to a terminal, and the terminal at least includes a first security chip; the device includes: A second receiving module, configured to receive second credential information; a fifth generating module, configured to generate third ciphertext information according to the second credential information and a first random number corresponding to the first security chip; A first verification module, configured to verify the third ciphertext information through the first security chip to obtain a first verification result; The first unlocking module is configured to unlock the terminal according to the first verification result.

14. A terminal, characterized in that: At least comprising a first security chip; The first security chip is used to assist the terminal in implementing the steps of any one of the information processing methods in claims 1 to 5 or 6 to 11 above.

15. An information processing device, characterized in that: include: processor; a memory for storing processor-executable instructions; The processor is configured to: implement the steps of any one of the information processing methods in claims 1 to 5 or 6 to 11 when executed.

16. A non-transitory computer-readable storage medium, when the instructions in the storage medium are executed by a processor of an information processing device, the device is enabled to perform the steps of any one of the information processing methods of claims 1 to 5 or 6 to 11 above.

Images