Identity authentication recognition and mode switching method and system for mobile hardware equipment

Abstract

The invention provides an identity authentication recognition and mode switching method and system for mobile hardware equipment, and the method comprises the steps: obtaining equipment basic information of the mobile hardware equipment when the mobile hardware equipment is detected to be accessed to host equipment; performing user authentication on a user of the host device; detecting whether the host equipment has first equipment authentication data corresponding to the mobile hardware equipment or not according to the equipment basic information, and performing hardware authentication according to the first equipment authentication data; under the condition that both the user authentication and the hardware authentication are successful, enabling the mobile hardware equipment to load a built-in program / system stored in firmware of the mobile hardware equipment; under the condition that user authentication or hardware authentication fails or authentication is not carried out, the mobile hardware equipment does not load the built-in program / system. According to the invention, stricter data security is provided, and the convenience and user experience of mobile hardware equipment are maintained.

Description

Technical Field

[0001] The present invention relates to the field of computer security technology, and in particular to an identity authentication and recognition and mode switching method and system for a mobile hardware device. Background Art

[0002] With the increasing demand for mobile office, portable storage devices such as USB flash drives are widely favored by users because of their portability. With the increasing popularity of USB devices, security attacks against USB devices are also increasing, especially because USB flash drives are small and easy to lose or steal. Unauthorized personnel may obtain sensitive information through simple physical contact, which poses a huge threat to personal privacy and corporate information security. Therefore, the security protection of USB hardware devices has become an important research direction in the industry. Various encryption technologies and security mechanisms have been developed to meet these challenges. For example, the application of password protection, hardware locks and other functions has ensured data security to a certain extent.

[0003] Compared with hardware encryption, software encryption is more economical and portable. It does not require additional hardware support and can perform encryption and decryption operations using existing computing resources. It can also be added to existing systems to ensure that data always uses the latest and most secure encryption technology, providing greater flexibility and customizability. Relatively speaking, it has higher compatibility, does not require the support of specific hardware, and can be applied file by file. It provides a low-cost and flexible way to ensure data security while still maintaining the convenience of the device and user experience.

[0004] However, existing software encryption protection technology solutions have great limitations and focus more on single-point authentication. In many cases, they only verify the user's identity without considering whether the access environment is trustworthy. In addition, the encryption solution can be easily identified by illegal personnel, increasing the risk of illegal personnel cracking the device. Once the password of the software password protection solution is cracked, the data of the entire storage device will be exposed to risks. The data and files of the operating system in the storage device can be easily obtained, posing a great risk of data leakage. Summary of the invention

[0005] In view of the defects in the prior art, the purpose of the present invention is to provide an identity authentication and recognition and mode switching method and system for a mobile hardware device.

[0006] According to the present invention, a method for identity authentication and mode switching of a mobile hardware device is provided, comprising:

[0007] Device identification step: when detecting that the mobile hardware device is connected to the host device, obtaining basic device information of the mobile hardware device;

[0008] User authentication step: performing user authentication on the user of the host device. If the user authentication passes, the user authentication is successful;

[0009] Hardware authentication step: according to the basic information of the device, detecting whether the host device has the first device authentication data corresponding to the mobile hardware device, and if the first device authentication data is present, the hardware authentication is successful;

[0010] Mode switching steps: when both the user authentication and the hardware authentication are successful, the mobile hardware device is made to load the built-in program / system stored in the firmware of the mobile hardware device; when the user authentication or the hardware authentication fails, or the user authentication and / or the hardware authentication are not performed, the host device loads a storage device driver adapted to the mobile hardware device, and the host device can access data on the open file storage area of ​​the mobile hardware device.

[0011] Furthermore, the device identification step includes:

[0012] The host device sends a handshake request to the mobile hardware device to establish a connection with the mobile hardware device;

[0013] The host device obtains the basic information of the device by sending a command to the mobile hardware device.

[0014] Furthermore, in the hardware authentication step:

[0015] In the absence of the first device authentication data and the user authentication is successful, the mobile hardware device and the host device are hardware-bound according to the user operation. If the binding is successful, the host device obtains the first device authentication data corresponding to the mobile hardware device, thereby passing the hardware authentication; if the binding is unsuccessful, the host device loads a storage device driver adapted to the mobile hardware device, and the host device can access the data on the open file storage area of ​​the mobile hardware device.

[0016] Furthermore, in the hardware authentication step:

[0017] In the case where the first device authentication data is available, the second device authentication data corresponding to the host device is sent to the mobile hardware device for verification. If the verification passes, the hardware authentication is successful; if the verification does not pass, the hardware authentication fails.

[0018] Furthermore, the user authentication step includes authenticating the user by means of a password or biometrics.

[0019] According to the present invention, a mobile hardware device identity authentication and mode switching system is provided, comprising:

[0020] Device identification module: when detecting that a mobile hardware device is connected to a host device, obtains basic device information of the mobile hardware device;

[0021] User authentication module: performs user authentication on the user of the host device. If the user authentication passes, the user authentication is successful;

[0022] Hardware authentication module: detects whether the host device has first device authentication data corresponding to the mobile hardware device according to the basic information of the device, and if the host device has the first device authentication data, the hardware authentication is successful;

[0023] Mode switching module: when both the user authentication and the hardware authentication are successful, the mobile hardware device is enabled to load the built-in program / system stored in the firmware of the mobile hardware device; when the user authentication or the hardware authentication fails, or the user authentication and / or the hardware authentication are not performed, the host device loads a storage device driver adapted to the mobile hardware device, and the host device is able to access data on the open file storage area of ​​the mobile hardware device.

[0024] Furthermore, the device identification module includes:

[0025] Instructing the host device to send a handshake request to the mobile hardware device to establish a connection with the mobile hardware device;

[0026] The host device is instructed to obtain basic information of the device by sending a command to the mobile hardware device.

[0027] Furthermore, in the hardware authentication module:

[0028] In the absence of the first device authentication data and the user authentication is successful, the mobile hardware device and the host device are hardware-bound according to the user operation. If the binding is successful, the host device obtains the first device authentication data corresponding to the mobile hardware device, thereby passing the hardware authentication; if the binding is unsuccessful, the host device loads a storage device driver adapted to the mobile hardware device, and the host device can access the data on the open file storage area of ​​the mobile hardware device.

[0029] Furthermore, in the hardware authentication module:

[0030] In the case where the first device authentication data is available, the second device authentication data corresponding to the host device is sent to the mobile hardware device for verification. If the verification passes, the hardware authentication is successful; if the verification does not pass, the hardware authentication fails.

[0031] Furthermore, the user authentication module includes user authentication through passwords and biometrics.

[0032] Compared with the prior art, the present invention has the following beneficial effects:

[0033] When the mobile hardware device accesses the host device, the present invention automatically identifies whether the host device is authorized. If it is not authorized, the mobile hardware device is disguised as an ordinary mobile hardware device, and the user is unaware. The host device cannot identify the operating system and data inside the device, limiting access to its internal resources in an untrusted environment. In addition, the user identity is authenticated to ensure that only authorized users and host devices can access the operating system and data, further ensuring the data security of the device. Through these technologies and strategies, while further providing more stringent data security, the convenience and user experience of mobile hardware devices are maintained, reducing the risk of illegal personnel cracking the device and exposing sensitive data. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Other features, objects and advantages of the present invention will become more apparent from the detailed description of non-limiting embodiments made with reference to the following drawings:

[0035] Figure 1 It is a schematic diagram of the overall workflow of the present invention. DETAILED DESCRIPTION

[0036] The present invention is described in detail below in conjunction with specific embodiments. The following embodiments will help those skilled in the art to further understand the present invention, but are not intended to limit the present invention in any form. It should be noted that, for those of ordinary skill in the art, several changes and improvements can also be made without departing from the concept of the present invention. These all belong to the protection scope of the present invention.

[0037] Example 1

[0038] like Figure 1 As shown, a method for identity authentication and mode switching of a mobile hardware device includes:

[0039] Device identification step: When it is detected that the mobile hardware device is connected to the host device, the basic device information of the mobile hardware device is obtained. Among them, the host device can be a mobile phone, a tablet, a computer, etc., and the mobile hardware device is connected to the host device through a USB interface. When the mobile hardware device is connected to the host device, the host device detects that a device is connected through the hub. At this time, the host device sends a handshake request to the mobile hardware device through the hub and establishes a connection. The host device sends a command to the mobile hardware device to obtain the basic device information of the mobile hardware device and perform device identification. The basic device information includes the device serial number, descriptor, complete descriptor set, etc., such as VID (vendor identification code) and PID (product identification code), the maximum data packet size of the device, as well as configuration descriptors, interface descriptors, etc.

[0040] User authentication steps: Perform user authentication on the host device. If the user authentication is successful, the user authentication is successful. The host device needs to install the application app for managing mobile hardware devices, and the application app needs to perform user authentication. User authentication can use traditional passwords, PIN codes or gestures, or can use biometric features such as fingerprint scanning, facial recognition or voice ID for authentication, or SMS verification code to log in a one-time code.

[0041] Hardware authentication step: According to the basic information of the device, check whether the host device has the first device authentication data corresponding to the mobile hardware device. If there is the first device authentication data, the hardware authentication is successful. If there is no first device authentication data and the user authentication is successful, the hardware authentication fails. The host device has a database of device information that has passed identity authentication. Based on the acquired basic information of the device, such as the device serial number or the VID and PID in the device descriptor, it is determined whether the connected mobile hardware device is in the database of device information that has passed identity authentication. The identity authentication process between the host device and the mobile hardware device can be implemented using existing encryption algorithms, such as AES (Advanced Encryption Standard), ECDSA (Elliptic Curve Digital Signature Algorithm), and HMAC (Hash-based Message Authentication Code) to ensure the security and validity of the data in the identity authentication process.

[0042] Mode switching steps: when both user authentication and hardware authentication are successful, the mobile hardware device loads the built-in program / system (such as an operating system, etc.) stored in the firmware of the mobile hardware device; when user authentication or hardware authentication fails, or user authentication and / or hardware authentication are not performed, the mobile hardware device does not load the built-in program / system. At this time, the host device can load a universal driver adapted to the mobile hardware device, such as loading a universal storage driver to support the function of a USB flash drive, and the host device can access data on the open file storage area of ​​the mobile hardware device.

[0043] The storage system space of the mobile hardware device in the present invention is divided into different areas. For example, there is an area specifically used to store system data such as operating systems and applications. This part has encryption protection, and this part of data can only be loaded or displayed after identity authentication is passed; there is also an area used as an open file storage area for ordinary mobile storage device files.

[0044] Through the identity authentication and mode switching method of the mobile hardware device of the present invention, when the mobile hardware device is connected to a host device such as a mobile phone, a tablet, or a computer, the built-in program / system, such as an operating system, is allowed to be loaded only after the dual identity authentication of the device and the user is performed. Otherwise, the mobile hardware device will behave as an ordinary storage drive by default, restricting access to its internal resources in an untrusted environment. The host device implements dual authentication of the device and the user, effectively avoiding unauthorized illegal access, doubly protecting the data security of the device, and achieving high security protection of sensitive data at the lowest cost.

[0045] Example 2

[0046] On the basis of Example 1, this embodiment supplements the hardware authentication step with an identity binding process between the mobile hardware device and the host device.

[0047] When the user authentication is successful but there is no first device authentication data, the user can actively bind the host device and the mobile hardware device through the hardware device's application app. The identity binding process is: the user uses the application to make the mobile hardware device and the host device add each other's device authentication data to each other's device information database. The device authentication data is unique, such as the serial number of the mobile hardware device, and the host device can use the MAC address.

[0048] If identity binding is not performed or fails, the host device still cannot detect the first device authentication data corresponding to the mobile hardware device during the hardware authentication process, that is, the hardware authentication cannot be passed. The host device can only load the storage device driver adapted to the mobile hardware device, and the host device can access the data in the open file storage area of ​​the mobile hardware device. If the identity binding is successful, the mobile hardware device and the host device will add each other's device authentication data to each other's device information database, and the hardware authentication can be passed.

[0049] After identity binding, when the mobile hardware device is inserted into the host device, it will automatically identify whether it is authorized. Unauthorized mobile hardware devices will be disguised as ordinary mobile storage devices, and the user will not be aware of it. The host device cannot identify the device's operating system and data, limiting access to its internal resources in an untrusted environment.

[0050] Example 3

[0051] In order to further improve the security of the hardware authentication process, this embodiment further supplements the hardware authentication step based on Embodiment 1 or Embodiment 2.

[0052] The hardware authentication step includes: based on the basic information of the device, detecting whether the host device has the first device authentication data corresponding to the mobile hardware device. If the host device has the first device authentication data corresponding to the mobile hardware device, the host device sends the second device authentication data corresponding to itself to the mobile hardware device, and the mobile hardware device detects whether it stores the second device authentication data corresponding to the host device. If the detection result is yes, the hardware authentication succeeds, otherwise the hardware authentication fails. If the host device does not have the first device authentication data corresponding to the mobile hardware device, the hardware authentication fails.

[0053] The process of a mobile hardware device detecting whether there is second device authentication data corresponding to the host device: After the host device and the mobile hardware device are bound to each other, the mobile hardware device and the host device will record each other's device authentication data. The second device authentication data sent by the host device is the identification information of the host device. The mobile hardware device detects whether the identification information of the host device is recorded, and vice versa. This process can also be implemented using existing encryption algorithms, such as AES (Advanced Encryption Standard), ECDSA (Elliptic Curve Digital Signature Algorithm), and HMAC (Hash-based Message Authentication Code) to ensure the security and validity of the data in the identity authentication process.

[0054] This embodiment performs two-way authentication on the host device and the mobile hardware device. When the mobile hardware device does not have the authentication information of the authorized host device due to special circumstances, the host device still cannot complete the hardware authentication and cannot load the built-in program / system, such as the operating system. It appears in the form of an ordinary storage drive, restricting access to its internal resources in a non-trusted environment, and fully ensuring that the access and reading of sensitive data have reliable protection.

[0055] Example 4

[0056] A mobile hardware device identity authentication and mode switching system, the mobile hardware device identity authentication and mode switching system can be implemented by executing the process steps of the mobile hardware device identity authentication and mode switching method, that is, those skilled in the art can understand the mobile hardware device identity authentication and mode switching method as a preferred implementation of the mobile hardware device identity authentication and mode switching system. The system includes:

[0057] Device identification module: when it is detected that the mobile hardware device is connected to the host device, the basic device information of the mobile hardware device is obtained. Among them, the host device can be a mobile phone, a tablet, a computer, etc., and the mobile hardware device is connected to the host device through a USB interface. When the mobile hardware device is connected to the host device, the host device detects that a device has been connected through the hub. At this time, the host device sends a handshake request to the mobile hardware device through the hub and establishes a connection. The host device sends a command to the mobile hardware device to obtain the basic device information of the mobile hardware device and perform device identification. The basic device information includes the device serial number, descriptor, complete descriptor set, such as VID (vendor identification code) and PID (product identification code), the maximum data packet size of the device, as well as configuration descriptors, interface descriptors, etc.

[0058] User authentication module: Authenticate the user of the host device. If the user authentication is successful, the user authentication is successful. The host device needs to install the application app for managing mobile hardware devices, and the application app needs to perform user authentication. User authentication can use traditional passwords, PIN codes or gestures, or biometric features such as fingerprint scanning, facial recognition or voice ID, or SMS verification code to log in a one-time code.

[0059] Hardware authentication module: Based on the basic information of the device, detect whether the host device has the first device authentication data corresponding to the mobile hardware device. If there is the first device authentication data, the hardware authentication is successful. If there is no first device authentication data and the user authentication is successful, the hardware authentication fails. The host device has a database for storing device information that has passed identity authentication. Based on the acquired basic information of the device, such as the device serial number or the VID and PID in the device descriptor, it is determined whether the connected mobile hardware device is in the database of device information that has passed identity authentication. The identity authentication process between the host device and the mobile hardware device can be implemented using existing encryption algorithms, such as AES (Advanced Encryption Standard), ECDSA (Elliptic Curve Digital Signature Algorithm), and HMAC (Hash-based Message Authentication Code) to ensure the security and validity of the data in the identity authentication process.

[0060] When user authentication succeeds but hardware authentication fails, the user can actively bind the host device and the mobile hardware device through the hardware device's application app. The identity binding process is: the user uses the application to make the mobile hardware device and the host device add each other's device authentication data to each other's device information database. The device authentication data is unique, such as the serial number of the mobile hardware device, and the host device can use the MAC address.

[0061] If identity binding is not performed or fails, the host device still cannot detect the first device authentication data corresponding to the mobile hardware device during the hardware authentication process, or the mobile hardware device cannot detect the second device authentication data corresponding to the host device, that is, the hardware authentication cannot be passed. The host device can only load the storage device driver that adapts to the mobile hardware device, and the host device can access the data in the open file storage area of ​​the mobile hardware device. If the identity binding is successful, the mobile hardware device and the host device will add each other's device authentication data to each other's device information database, and the hardware authentication can be passed.

[0062] After identity binding, when the mobile hardware device is inserted into the host device, it will automatically identify whether it is authorized. Unauthorized mobile hardware devices will be disguised as ordinary mobile storage devices, and the user will not be aware of it. The host device cannot identify the device's operating system and data, limiting access to its internal resources in an untrusted environment.

[0063] In order to further enhance the security of the hardware authentication process, the hardware authentication module can also, when the host device has the first device authentication data corresponding to the mobile hardware device, instruct the host device to send the second device authentication data corresponding to itself to the mobile hardware device. The mobile hardware device detects whether it has the second device authentication data corresponding to the host device stored in itself. If the detection result is yes, the hardware authentication succeeds, otherwise the hardware authentication fails. If the host device does not have the first device authentication data corresponding to the mobile hardware device, the hardware authentication fails.

[0064] The process of a mobile hardware device detecting whether there is second device authentication data corresponding to the host device: After the host device and the mobile hardware device are bound to each other, the mobile hardware device and the host device will record each other's device authentication data. The second device authentication data sent by the host device is the identification information of the host device. The mobile hardware device detects whether the identification information of the host device is recorded, and vice versa. This process can also be implemented using existing encryption algorithms, such as AES (Advanced Encryption Standard), ECDSA (Elliptic Curve Digital Signature Algorithm), and HMAC (Hash-based Message Authentication Code) to ensure the security and validity of the data in the identity authentication process.

[0065] Through two-way authentication of the host device and the mobile hardware device, when the mobile hardware device does not have the authentication information of the authorized host device due to special circumstances, the host device still cannot complete the hardware authentication and cannot load the built-in program / system, such as the operating system. It appears in the form of an ordinary storage drive, restricting access to its internal resources in an untrusted environment, and fully ensuring that access to and reading of sensitive data has reliable protection.

[0066] Mode switching module: When both user authentication and hardware authentication are successful, the mobile hardware device is enabled to load the built-in program / system (such as an operating system, etc.) stored in the firmware of the mobile hardware device; when user authentication or hardware authentication fails, or user authentication and / or hardware authentication are not performed, the mobile hardware device does not load the built-in program / system. At this time, the host device can load a universal driver adapted to the mobile hardware device, such as loading a universal storage driver to support the function of a USB flash drive, and the host device can access data on the open file storage area of ​​the mobile hardware device.

[0067] The storage system space of the mobile hardware device in the present invention is divided into different areas. For example, there is an area specifically used to store system data such as operating systems and applications. This part has encryption protection, and this part of data can only be loaded or displayed after identity authentication is passed; there is also an area used as an open file storage area for ordinary mobile storage device files.

[0068] Through the mobile hardware device identity authentication and mode switching system of the present invention, when the mobile hardware device is connected to a host device such as a mobile phone, tablet, or computer, the built-in program / system, such as an operating system, is allowed to be loaded only after the dual identity authentication of the device and the user is performed. Otherwise, the mobile hardware device will behave as an ordinary storage drive by default, restricting access to its internal resources in an untrusted environment. The host device implements dual identity authentication of the device and the user, effectively avoiding unauthorized illegal access, doubly protecting the data security of the device, and achieving high security protection of sensitive data at the lowest cost.

[0069] Those skilled in the art know that, in addition to realizing the system and its various devices, modules, and units provided by the present invention in a purely computer-readable program code, it is entirely possible to realize the same functions in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers by logically programming the method steps. Therefore, the system and its various devices, modules, and units provided by the present invention can be considered as a hardware component, and the devices, modules, and units included therein for realizing various functions can also be regarded as structures within the hardware component; the devices, modules, and units for realizing various functions can also be regarded as both software modules for realizing the method and structures within the hardware component.

[0070] The above describes the specific embodiments of the present invention. It should be understood that the present invention is not limited to the above specific embodiments, and those skilled in the art can make various changes or modifications within the scope of the claims, which does not affect the essence of the present invention. In the absence of conflict, the embodiments of the present application and the features in the embodiments can be combined with each other arbitrarily.

Claims

1. A method for identity authentication and mode switching of a mobile hardware device, characterized in that: include: Device identification step: when detecting that the mobile hardware device is connected to the host device, obtaining basic device information of the mobile hardware device; User authentication step: performing user authentication on the user of the host device. If the user authentication passes, the user authentication is successful; Hardware authentication step: according to the basic information of the device, detecting whether the host device has the first device authentication data corresponding to the mobile hardware device, and if the first device authentication data is present, the hardware authentication is successful; Mode switching step: when both the user authentication and the hardware authentication are successful, causing the mobile hardware device to load a built-in program / system stored in the firmware of the mobile hardware device; When the user authentication or the hardware authentication fails, or the user authentication and / or the hardware authentication is not performed, the host device loads a storage device driver adapted to the mobile hardware device, and the host device can access data on an open file storage area of ​​the mobile hardware device.

2. The user authentication identification and mode switching method of a mobile hardware device according to claim 1, characterized in that: The device identification step comprises: The host device sends a handshake request to the mobile hardware device to establish a connection with the mobile hardware device; The host device obtains the basic information of the device by sending a command to the mobile hardware device.

3. The identity authentication and mode switching method of a mobile hardware device according to claim 1, characterized in that: In the hardware authentication step: In the absence of the first device authentication data and the user authentication is successful, the mobile hardware device and the host device are hardware-bound according to the user operation. If the binding is successful, the host device obtains the first device authentication data corresponding to the mobile hardware device, thereby passing the hardware authentication; if the binding is unsuccessful, the host device loads a storage device driver adapted to the mobile hardware device, and the host device can access the data on the open file storage area of ​​the mobile hardware device.

4. The identity authentication and mode switching method of a mobile hardware device according to claim 1 or 3, characterized in that: In the hardware authentication step: In the case where the first device authentication data is available, the second device authentication data corresponding to the host device is sent to the mobile hardware device for verification. If the verification passes, the hardware authentication is successful; if the verification does not pass, the hardware authentication fails.

5. The identity authentication and mode switching method of a mobile hardware device according to claim 1, characterized in that: The user authentication step includes authenticating the user by means of a password or biometric features.

6. An identity authentication and mode switching system for a mobile hardware device, characterized in that: include: Device identification module: when detecting that a mobile hardware device is connected to a host device, obtains basic device information of the mobile hardware device; User authentication module: performs user authentication on the user of the host device. If the user authentication passes, the user authentication is successful; Hardware authentication module: detects whether the host device has first device authentication data corresponding to the mobile hardware device according to the basic information of the device, and if the host device has the first device authentication data, the hardware authentication is successful; Mode switching module: when both the user authentication and the hardware authentication are successful, causing the mobile hardware device to load a built-in program / system stored in the firmware of the mobile hardware device; When the user authentication or the hardware authentication fails, or the user authentication and / or the hardware authentication is not performed, the host device loads a storage device driver adapted to the mobile hardware device, and the host device can access data on an open file storage area of ​​the mobile hardware device.

7. The user authentication and mode switching system for mobile hardware devices according to claim 6, characterized in that: The device identification module includes: Instructing the host device to send a handshake request to the mobile hardware device to establish a connection with the mobile hardware device; The host device is instructed to obtain basic information of the device by sending a command to the mobile hardware device.

8. The identity authentication and mode switching system for mobile hardware devices according to claim 6, characterized in that: In the hardware authentication module: In the absence of the first device authentication data and the user authentication is successful, the mobile hardware device and the host device are hardware-bound according to the user operation. If the binding is successful, the host device obtains the first device authentication data corresponding to the mobile hardware device, thereby passing the hardware authentication; if the binding is unsuccessful, the host device loads a storage device driver adapted to the mobile hardware device, and the host device can access the data on the open file storage area of ​​the mobile hardware device.

9. The identity authentication and mode switching system for mobile hardware devices according to claim 6, characterized in that: In the hardware authentication module: In the case where the first device authentication data is available, the second device authentication data corresponding to the host device is sent to the mobile hardware device for verification. If the verification passes, the hardware authentication is successful; if the verification does not pass, the hardware authentication fails.

10. The identity authentication and mode switching system for mobile hardware devices according to claim 6, characterized in that: The user authentication module performs user authentication on the user by means of password and biometric features.

Images