USB flash disk storage access data encryption protection method fused with biological recognition technology

Abstract

The invention discloses a USB flash disk storage access data encryption protection method fusing a biological recognition technology, and relates to the technical field of data encryption protection, and the method comprises the following steps: carrying out the biological recognition of a user, and obtaining the fingerprint features of the user; processing the fingerprint features, and constructing a biological key based on relative positions of feature points in the fingerprint features; performing encryption protection processing on the USB flash disk data through the biological key to obtain a biological encryption ciphertext; storing the biological encrypted ciphertext, verifying the fingerprint feature of the user when the user reads the USB flash disk data, and decrypting the biological encrypted ciphertext based on the fingerprint feature; the data encryption protection method and device are used for solving the problems that according to an existing data encryption protection technology, data encryption protection does not have specificity, a security key is usually set by a user, and the risk that data are still stolen or leaked exists.

Description

TECHNICAL FIELD

[0001] The application relates to the technical field of data encryption protection, in particular to a U disk storage access data encryption protection method fusing a biological recognition technology. BACKGROUND

[0002] Data encryption protection technology refers to a comprehensive technical system, the core of which is to convert readable plaintext data into unreadable ciphertext data by using the principle of cryptography, and this process is called encryption. Only when an authorized user holds a correct key, can the ciphertext be restored to plaintext through the decryption process. The fundamental goal of this technology is to ensure the confidentiality, integrity and availability of data during storage, transmission and processing, and to prevent unauthorized access, leakage, tampering or destruction.

[0003] The existing data encryption protection technology usually only verifies the identity of the user through biological characteristics, and the encryption protection of the data is not deeply associated with the biological characteristics, resulting in that the encryption protection of the data does not have specificity, and the existing data encryption protection technology is usually applied to U disk data protection by setting a security key to encrypt the U disk data, and the security key is usually set by the user, which still has the risk of being stolen or leaked. For example, in the patent application with the publication number CN117828573A, an "intelligent encryption U disk based on fingerprint technology" is disclosed, which only verifies the access permission of the user based on the user's fingerprint information, and does not encrypt the U disk data itself. If someone bypasses the permission verification link, the U disk data can be directly stolen, which is not conducive to the security of the U disk data. The existing data encryption protection technology also has the problem that the encryption protection of the data does not have specificity, and the security key is usually set by the user, resulting in the risk that the data is still stolen or leaked. SUMMARY

[0004] The present application aims to at least solve one of the technical problems in the prior art. By biologically recognizing the user, the fingerprint features of the user are obtained, and then the fingerprint features are processed to analyze the relative positions of the feature points, and a biological key is constructed based on the relative positions of the feature points. Then the biological key and the U disk data are converted into the coding format required for encryption protection processing to obtain the key code and the data code. Then the data code is encrypted by the key code to convert the data code into biological encryption ciphertext. Finally, the biological encryption ciphertext is stored. When the user reads the U disk data, the fingerprint features of the user are verified, and the biological encryption ciphertext is decrypted based on the fingerprint features to solve the problem that the existing data encryption protection technology does not have specificity in the encryption protection of the data, and the security key is usually set by the user, resulting in the risk that the data is still stolen or leaked.

[0005] To achieve the above object, the application provides a U disk storage access data encryption protection method fusing biological recognition technology, comprising the following steps: Carrying out biological recognition on the user to obtain fingerprint features of the user; Processing the fingerprint features to construct a biological key based on the relative positions of feature points in the fingerprint features; Encrypting and protecting the U disk data by the biological key to obtain biological encryption ciphertext; Storing the biological encryption ciphertext, and when the user reads the U disk data, verifying the fingerprint features of the user and decrypting the biological encryption ciphertext based on the fingerprint features.

[0006] Further, the step of carrying out biological recognition on the user to obtain fingerprint features of the user comprises the following sub-steps: Setting a fingerprint recognition area on the surface of the U disk, and collecting fingerprint information of the user through the fingerprint recognition area; Extracting fingerprint features from the fingerprint information based on the fingerprint recognition technology, wherein the fingerprint features are the position distribution of feature points.

[0007] Further, the step of processing the fingerprint features to construct a biological key based on the relative positions of feature points in the fingerprint features comprises the following sub-steps: Processing the fingerprint features to analyze the relative positions of feature points; Constructing the biological key based on the relative positions of feature points.

[0008] Further, the step of processing the fingerprint features to analyze the relative positions of feature points comprises the following sub-steps: Obtaining the position distribution of feature points, naming the leftmost feature point as a left reference point, naming the feature point farthest from the left reference point as a right reference point, numbering the feature points, and denoting by symbol FP n , wherein n is a non-zero natural number, n is the serial number of FP, and FP1 is the left reference point; Taking the left reference point as a circle point, the line connecting the left reference point and the right reference point as the positive direction of the X axis, and drawing the Y axis based on the X axis, a plane rectangular coordinate system is constructed, named as a reference coordinate system, the coordinates of the feature points in the reference coordinate system are obtained and marked as RC(X, Y), and the RC(X, Y) is the relative position of the feature points.

[0009] Further, the step of constructing the biological key based on the relative positions of feature points comprises the following sub-steps: Setting an encoded point and an unencoded point, and inducing all FPs n except FP1 as unencoded points and inducing FP1 as an encoded point; Starting with n=1, searching for an unencoded point closest to FP nThe nearest un-coded point is marked as a neighboring point, the neighboring point is removed from the un-coded points and included in the coded points, the nearest un-coded point from the neighboring point is searched again, the coded points and the un-coded points are updated, and the loop is executed until all the un-coded points become coded points; The feature points are sorted and numbered in the order of being included in the coded points, and the symbol TP m is used to represent, where m is a non-zero natural number and m is the serial number of TP; TP m is removed from the un-coded points and included in the coded points, the nearest un-coded point from the neighboring point is searched again, the coded points and the un-coded points are updated, and the loop is executed until all the un-coded points become coded points; m The X and Y in the corresponding RC(X, Y) are marked as TX m and TY m respectively, TX m is placed before TY m to form a string of digital strings, which is marked as SN m , SN i is combined into a string of digital strings in the order of m from small to large, and the biological key is obtained.

[0010] Further, the U disk data is encrypted and protected by the biological key to obtain a biological encryption ciphertext, including the following sub-steps: The biological key and the U disk data are converted into the encoding format required for encryption and protection processing to obtain key encoding and data encoding; The data encoding is converted into the biological encryption ciphertext by encrypting and calculating the data encoding through the key encoding.

[0011] Further, the biological key and the U disk data are converted into the encoding format required for encryption and protection processing, including the following sub-steps: The digital groups in the biological key are converted into binary format encoding according to ASCII encoding, named key encoding, with every two digits as a digital group; The U disk data is converted into binary format encoding based on UTF-8 encoding, named data encoding.

[0012] Further, the data encoding is converted into the biological encryption ciphertext by encrypting and calculating the data encoding through the key encoding, including the following sub-steps: The numbers in the key encoding are numbered in the order from left to right, represented by the symbol KE i , and the numbers in the data encoding are numbered in the order from left to right, represented by the symbol DE j , where i and j are non-zero natural numbers and i is the serial number of KE and j is the serial number of DE; When DE j is analyzed, j%10 is calculated, and the calculation result is marked as GJ, where % is the modulus operator, and KE iCalculate i, calculate i%10, mark the result as GI, and obtain KE of GI=GJ. i Label them as KGE in ascending order of i. m , where m is a non-zero natural number and m is the index of KGE; Statistics KGE m The number of 0s and 1s in m is labeled F1 and F2 respectively. If m is even, then KGE m Convert to negative numbers and calculate. Mark the calculation result as KR, then calculate |KR-F1+F2| and mark the result as KF; Calculate DE j +KF, mark the calculation result as DF j Analyze all possible values ​​of j and calculate each DF. j ; DF according to ASCII encoding j Convert to binary encoding to obtain DW j DW in ascending order of j j The numbers are combined to obtain a transition code. The numbers in the transition code are then numbered from left to right, using the symbol DS. t Let represent , where t is a non-zero natural number and t is the index of DS; For DS t The analysis and conversion yielded the bio-encrypted ciphertext.

[0013] Furthermore, regarding DS j The analysis and conversion to obtain the bio-encrypted ciphertext includes the following sub-steps: Set the ciphertext sequence number, marked as MT. h Where h is a non-zero natural number and h is the index of MT, h is initially 1 and MT h Initially, all values ​​are 0; Starting with t=1, determine the parity of t. If t is odd, output the odd number processing signal; if t is even, output the even number processing signal. If the output is an odd number of processed signals, then determine DS. t Is it 1? If yes, then set MT. h Increment by one, and simultaneously increment t by 1 and check DS again. t If the value is 1, then increment h and output an even number processing signal. If the output is an even number of processed signals, then determine DS. t Is it 0? If so, then set MT. h Increment by one, and simultaneously increment t by 1 and check DS again. t If the value is 0, then increment h by one and output an odd-number processing signal. After analyzing all possible values ​​of t, different MT values ​​were obtained. h MT in ascending order of h h By combining the results, we obtain the bio-encrypted ciphertext.

[0014] Furthermore, the biometric encrypted ciphertext is stored, and when a user reads the data from the USB drive, the user's fingerprint is verified, and the biometric encrypted ciphertext is decrypted based on the fingerprint, including the following sub-steps: The biometric encrypted ciphertext is stored in the USB flash drive. When the user reads the data from the USB flash drive, the user's fingerprint features are obtained and a biometric key is generated. The data on the USB drive can be obtained by decrypting the bio-encrypted ciphertext using a biometric key.

[0015] The beneficial effects of this invention are as follows: This invention obtains the user's fingerprint features by performing biometric identification, then processes the fingerprint features, analyzes the relative positions of the feature points, and constructs a biometric key based on the relative positions of the feature points. The advantage is that it deeply associates the user's fingerprint features with the encryption process, directly generates a biometric key from the fingerprint features, and then uses the biometric key to encrypt and protect the USB flash drive data. Moreover, the biometric key cannot be stolen, thus improving the security and effectiveness of USB flash drive data encryption and protection. This invention converts biometric keys and USB flash drive data into the encoding format required for encryption protection, obtaining key encoding and data encoding. Then, the data encoding is encrypted using the key encoding, converting it into biometric ciphertext. Finally, the biometric ciphertext is stored. When a user reads the USB flash drive data, the user's fingerprint is verified, and the biometric ciphertext is decrypted based on the fingerprint. The advantage lies in using a biometric key to encrypt USB flash drive data, simultaneously verifying the user's identity and encrypting / decrypting the data. Furthermore, the two processes are deeply interconnected. This method abandons the traditional method of encrypting data by setting a password; instead, it combines fingerprint features to generate a unique biometric key for data encryption protection, further improving the security and effectiveness of USB flash drive data encryption protection. Attached Figure Description

[0016] Figure 1 This is a flowchart illustrating the steps of the method of the present invention; Figure 2 This is a schematic diagram showing the positional distribution of the feature points of the present invention; Figure 3 This is a schematic diagram of the reference coordinate system of the present invention; Figure 4 This is a schematic diagram of the electronic device of the present invention. Detailed Implementation

[0017] With reference to the accompanying drawings on the basis of the embodiments of the present application, the technical solutions in the embodiments of the present application will be described clearly and completely. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments of the present application, all the other embodiments obtained by a person of ordinary skill in the art without creative effort belong to the scope of the present application.

[0018] Embodiment 1, please refer to Figure 1 As shown in the figure, the present application provides a U disk storage access data encryption protection method based on biometric identification technology, including the following steps: Step S1, biometric identification is performed on a user to obtain fingerprint features of the user; step S1 includes the following sub-steps: Step S101, a fingerprint identification area is arranged on the surface of the U disk, and fingerprint information of the user is collected through the fingerprint identification area; Please refer to Figure 2 As shown in the figure, step S102, fingerprint features are extracted from the fingerprint information based on fingerprint identification technology, and the fingerprint features are the position distribution of feature points; In the specific implementation, a fingerprint sensing device is arranged on the surface of the U disk, and no energy storage device is arranged inside the U disk. Therefore, fingerprint information can only be collected after the U disk is inserted into a USB interface and powered on, that is, fingerprint information can be automatically collected when the user inserts the U disk into the USB interface. The extraction of the fingerprint features adopts existing fingerprint identification technology, and therefore will not be described in detail in this embodiment. The position distribution of the feature points collected in a collection process is as shown in the figure Figure 2 , Figure 2 This is only an example and is used to describe the analysis process of the fingerprint features in detail, Figure 2 The gray dots in the figure are the feature points.

[0019] Step S2, the fingerprint features are processed, and a biometric key is constructed based on the relative positions of the feature points in the fingerprint features; step S2 includes the following sub-steps: Step S201, the fingerprint features are processed, and the relative positions of the feature points are analyzed; Step S201 includes the following sub-steps: Step S201.1, the position distribution of the feature points is obtained, the leftmost feature point is named as a left reference point, the feature point farthest from the left reference point is named as a right reference point, the feature points are numbered, and the symbol FP n is used to represent, where n is a non-zero natural number, n is the serial number of FP, and FP1 is the left reference point; Please refer to Figure 3As shown, in step S201.2, the left reference point is taken as the circle point, the line connecting the left reference point and the right reference point is the positive direction of the X-axis, and then the Y-axis is drawn based on the X-axis to construct a plane rectangular coordinate system, which is named the reference coordinate system. The coordinates of the feature point in the reference coordinate system are obtained and marked as RC(X,Y). RC(X,Y) is the relative position of the feature point. In practice, determining the left and right reference points is to ensure that the same relative position is obtained each time a biometric key is generated. Therefore, it is necessary to construct the same reference coordinate system using the left and right reference points. The constructed reference coordinate system is as follows: Figure 3 As shown, RC(X,Y) represents the coordinates of the feature point in the reference coordinate system. For example, the coordinates of a feature point are RC(3,0.8). In the reference coordinate system, one unit length is 1mm.

[0020] Step S202: Construct a biometric key based on the relative positions of feature points; Step S202 includes the following sub-steps: Step S202.1: Set the numbered and unnumbered points, and set all FPs except FP1. n All are classified as uncoded points, while FP1 is classified as a coded point; Step S202.2, starting with n=1, search for the match with FP. n The nearest unnumbered point is marked as an adjacent point. The adjacent point is removed from the unnumbered points and added to the numbered points. Then, the nearest unnumbered point to the adjacent point is found, and the numbered points and unnumbered points are updated. This process is repeated until all unnumbered points are called numbered points. Step S202.3: Sort and number the feature points according to the order in which they were included in the numbered points, using the symbol TP. m This indicates that m is a non-zero natural number and m is the index of TP; Step S202.4, TP m In the corresponding RC(X,Y), X and Y are labeled as TX, respectively. m and TY m , TX m Placed in TY m First, form a string of numbers, labeled as SN. m SN are arranged in ascending order of m. m Combine them into a string of numbers to obtain the biometric key; In specific implementation, for example, when n=1, if the found neighboring point is FP4, then FP4 is removed from the unnumbered points and added to the numbered points. Then, the nearest unnumbered point to FP4 is found, resulting in a new neighboring point FP2. FP2 is then removed from the unnumbered points and added to the numbered points. Next, neighboring points are found based on FP2, and so on, until all unnumbered points are changed to numbered points. TP1 is fixed as FP1. Then, the feature points are sorted according to the order in which they are added to the numbered points. In the data listed in this embodiment, TP2 is FP4, TP3 is FP2, and so on, until all TPs are obtained. m To facilitate a detailed explanation of the generation of the biometric key, this embodiment only uses four feature points as an example, namely FP1 to FP4, and TP1 to TP4, which are FP1, FP4, FP2 and FP3 respectively. Among them, FP1, FP4, FP2 and FP3 are RC(0,0), RC(0.8,0.6), RC(3,0.8) and RC(4,2) respectively. Further, SN1 to SN4 are 00, 0806, 308 and 42 respectively. The decimal point can be directly removed during the conversion process. SN1 is fixed at 00, so it does not need to be included in the reference range. Finally, the biometric key is 080630842.

[0021] Step S3 involves encrypting the USB flash drive data using a biometric key to obtain biometric encrypted ciphertext. Step S3 includes the following sub-steps: Step S301: Convert the biometric key and USB flash drive data into the encoding format required for encryption protection processing to obtain key encoding and data encoding; Step S301 includes the following sub-steps: Step S301.1: Divide the numbers in the biometric key into groups of two digits each, and convert the groups into binary format according to ASCII encoding, naming the encoding as key encoding; Step S301.2: Convert the USB flash drive data into a binary format encoding based on UTF-8 encoding, and name it data encoding; In practice, the biometric key is 080630842, with each two digits forming a group of numbers, namely 08, 06, 30, 84, and 2. The last group of numbers has no length requirement. The resulting key code is 0000100000000110000111100101010000000010, with each group of numbers consisting of eight digits. The underlying logic of the USB flash drive data in the computer is still binary format encoding, which can be directly obtained. Whether it is text, image, or audio data, the data encoding can be directly obtained. For example, if the text is "salary table" without quotation marks, its data encoding in the computer is "11100101101101111010010111101000101101011000010011101000101000011010100001101000100001101010000".

[0022] Step S302: Encrypt the data encoding using key encoding to convert the data encoding into biometric encrypted ciphertext; Step S302 includes the following sub-steps: Step S302.1: Number the digits in the key encoding from left to right, using the symbol KE. i This indicates that the numbers in the data encoding are numbered from left to right, using the symbol DE. j This indicates that i and j are both non-zero natural numbers, and i is the index of KE, and j is the index of DE; Step S302.2, for DE j During the analysis, j%10 is calculated, and the result is marked as GJ, where % is the modulo operator, and for each bit KE i Calculate i, calculate i%10, mark the result as GI, and obtain KE of GI=GJ. i Label them as KGE in ascending order of i. m , where m is a non-zero natural number and m is the index of KGE; Step S302.3, Calculate KGE m The number of 0s and 1s in m is labeled F1 and F2 respectively. If m is even, then KGE m Convert to negative numbers and calculate. Mark the calculation result as KR, then calculate |KR-F1+F2| and mark the result as KF; Step S302.4, calculate DE j +KF, mark the calculation result as DF j Analyze all possible values ​​of j and calculate each DF. j ; Step S302.5, DF is encoded according to ASCII. jConvert to binary encoding to obtain DW j DW in ascending order of j j The numbers are combined to obtain a transition code. The numbers in the transition code are then numbered from left to right, using the symbol DS. t Let represent , where t is a non-zero natural number and t is the index of DS; In practice, KE is obtained through numbering. i and DE j Where 1≤i≤40, 1≤j≤72, taking j=1 as an example, DE1 is 1, j=1, and GJ is calculated to be 1. Assuming i=1, GI is calculated to be 1, and GI=GJ, thus KGE1 is obtained. When i=11, DI is also 1, thus KGE2 is KE. 11 And so on, we eventually obtain KGE1 to KGE4, which are 0, 0, 1 and 0 respectively. The statistics show that F1 is 3 and F2 is 1. When m=2 and m=4, m is an even number. The corresponding KGE... m Converting to negative numbers, KGE1 to KGE4 are now 0, 0, 1, and 0 respectively. Further calculation yields KR=1, and then KF=|1-3+1|=1. DE1 is now 1, and DF1 is 2. Similarly, all DF values ​​are calculated. j Then, the transition codes are obtained by converting and combining them to get the DS. t The conversion of binary encoding and the combination of encodings are mentioned in steps S2 and S3, and will not be explained in detail here.

[0023] Step S302.6, for DS t The analysis and conversion yielded the bio-encrypted ciphertext; Step S302.6 includes the following sub-steps: Step S302.6.a: Set the ciphertext sequence number and mark it as MT. h Where h is a non-zero natural number and h is the index of MT, h is initially 1 and MT h Initially, all values ​​are 0; Step S302.6.b: Starting with t=1, determine the parity of t. If t is odd, output the odd processing signal; if t is even, output the even processing signal. Step S302.6.c: If the output is an odd-numbered processing signal, then determine DS. t Is it 1? If yes, then set MT. h Increment by one, and simultaneously increment t by 1 and check DS again. t If the value is 1, then increment h and output an even number processing signal. Step S302.6.d: If the output is an even number of processing signals, then determine DS.t Is it 0? If so, then set MT. h Increment by one, and simultaneously increment t by 1 and check DS again. t If the value is 0, then increment h by one and output an odd-number processing signal. Step S302.6.e: After analyzing all possible values ​​of t, different MT values ​​are obtained. h MT in ascending order of h h By combining the results, we obtain the bio-encrypted ciphertext. In specific implementation, assuming the transition code is 0011010001001110, DS1 is 0, t=1, which is odd, and the output is an odd-numbered processed signal. t Since DS1 is not 1, h is incremented by one, making h = 2. MT1 is 0, so an even-numbered processing signal is output. DS1 is 0, so MT2 is incremented by one, making MT2 1. Simultaneously, t is incremented by one, and DS1 is checked again. t If MT2 is 0, and DS2 is 0, then increment MT2 by one, making MT2 2. Simultaneously, increment t by 1 and check DS2 again. t If DS3 is not 0, h is increased by 1 and an odd-number processing signal is output. At this time, MT1 is 0, MT2 is 2, h=3, t=3, and the analysis process corresponding to the odd-number processing signal is executed. This process continues until t reaches its maximum value. Finally, the analysis shows that MT1 to MT9 are 0, 2, 1, 1, 3, 1, 2, 3 and 1 respectively. The final biological encryption ciphertext is 021131231.

[0024] Step S4 involves storing the biometric encrypted ciphertext. When the user reads the data from the USB drive, the user's fingerprint is verified, and the biometric encrypted ciphertext is decrypted based on the fingerprint. Step S4 includes the following sub-steps: Step S401: Store the biometric encrypted ciphertext in the USB flash drive. When the user reads the data from the USB flash drive, obtain the user's fingerprint features and generate a biometric key. Step S402: Decrypt the bio-encrypted ciphertext using the bio-key to obtain the data on the USB drive; In practice, decryption is the reverse process of encryption, which will not be described in detail in this embodiment.

[0025] Example 2, please refer to Figure 4 As shown, Figure 4A schematic diagram of an electronic device is provided, which may include a processor, a communication interface, a memory, and a communication bus. The processor, communication interface, and memory communicate with each other via the communication bus. The memory stores computer-readable instructions, which the processor can invoke. When the processor executes a computer-readable instruction, it performs steps such as those in a USB flash drive data encryption protection method incorporating biometric technology to achieve the following functions: performing biometric identification on the user to obtain the user's fingerprint features; processing the fingerprint features to construct a biometric key based on the relative positions of feature points in the fingerprint; encrypting the USB flash drive data using the biometric key to obtain biometric encrypted ciphertext; storing the biometric encrypted ciphertext; and when the user reads the USB flash drive data, verifying the user's fingerprint features and decrypting the biometric encrypted ciphertext based on the fingerprint features.

[0026] Furthermore, when the logical instructions in the aforementioned memory can be implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0027] Example 3: This application also provides a computer program product, which includes a computer program stored on a computer-readable storage medium. The computer program includes program instructions. When the program instructions are executed by a computer, the computer can execute the USB flash drive storage access data encryption protection method integrating biometric technology provided by the above methods. The method includes: performing biometric identification on the user to obtain the user's fingerprint features; processing the fingerprint features to construct a biometric key based on the relative positions of feature points in the fingerprint features; encrypting the USB flash drive data using the biometric key to obtain biometric encrypted ciphertext; storing the biometric encrypted ciphertext; and when the user reads the USB flash drive data, verifying the user's fingerprint features and decrypting the biometric encrypted ciphertext based on the fingerprint features.

[0028] Example 4: This application also provides a computer-readable storage medium. This application provides a storage medium storing a computer program thereon. When the computer program is executed by a processor, it performs the steps of the above-described USB flash drive storage access data encryption protection method integrating biometric technology to achieve the following functions: performing biometric identification on the user to obtain the user's fingerprint features; processing the fingerprint features to construct a biometric key based on the relative positions of feature points in the fingerprint features; encrypting the USB flash drive data using the biometric key to obtain biometric encrypted ciphertext; storing the biometric encrypted ciphertext; and when the user reads the USB flash drive data, verifying the user's fingerprint features and decrypting the biometric encrypted ciphertext based on the fingerprint features.

[0029] Based on the above description of the embodiments, the embodiments of the present invention can be provided as methods, systems, or computer program products. Based on this understanding, the above technical solutions, in essence or in terms of their contribution to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or certain parts of the embodiments.

[0030] In the embodiments provided in this application, it should be understood that the disclosed system or method can be implemented in other ways. The embodiments described above are merely illustrative. For example, the division of modules or units is only a logical functional division, and there may be other division methods in actual implementation. Furthermore, multiple modules or units may be combined or integrated into another system, or some features may be ignored or not executed. Additionally, the coupling or direct coupling or communication connection shown or discussed may be through some communication interfaces. The indirect coupling or communication connection between systems, modules, and units may be electrical, mechanical, or other forms.

[0031] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.

Claims

1. A method for encrypting and protecting data accessed via USB flash drive using biometric technology, characterized in that: Includes the following steps: Biometric identification of users, obtaining users' fingerprint features; The fingerprint features are processed to construct a biometric key based on the relative positions of the feature points in the fingerprint features; The data on the USB drive is encrypted using a biometric key to obtain biometric encrypted ciphertext. The system stores biometric encrypted ciphertext. When a user reads data from the USB drive, it verifies the user's fingerprint and decrypts the biometric encrypted ciphertext based on the fingerprint.

2. The USB flash drive storage access data encryption protection method integrating biometric identification technology according to claim 1, characterized in that, Biometric identification of users and obtaining their fingerprint features includes the following sub-steps: A fingerprint recognition area is set on the surface of the USB flash drive to collect the user's fingerprint information. Fingerprint features are extracted from fingerprint information based on fingerprint recognition technology. The fingerprint features are the location distribution of feature points.

3. The USB flash drive storage access data encryption protection method integrating biometric identification technology according to claim 2, characterized in that, Processing fingerprint features and constructing a biometric key based on the relative positions of feature points in the fingerprint features includes the following sub-steps: The fingerprint features are processed to analyze the relative positions of the feature points; Biometric keys are constructed based on the relative positions of feature points.

4. The USB flash drive storage access data encryption protection method integrating biometric identification technology according to claim 3, characterized in that, Processing fingerprint features and analyzing the relative positions of feature points includes the following sub-steps: Obtain the positional distribution of feature points, name the leftmost feature point as the left reference point, and name the feature point farthest from the left reference point as the right reference point. Number the feature points using the symbol FP. n It is represented as follows, where n is a non-zero natural number and n is the index of FP, and FP1 is the left reference point; Using the left reference point as the center, the line connecting the left and right reference points is the positive direction of the X-axis. Then, the Y-axis is drawn based on the X-axis to construct a Cartesian coordinate system, which is named the reference coordinate system. The coordinates of the feature point in the reference coordinate system are obtained and marked as RC(X,Y). RC(X,Y) is the relative position of the feature point.

5. The USB flash drive storage access data encryption protection method integrating biometric identification technology according to claim 4, characterized in that, Constructing a biometric key based on the relative position of feature points includes the following sub-steps: Set the number of assigned and unassigned points, and assign all FPs except FP1. n All are classified as uncoded points, while FP1 is classified as a coded point; Starting with n=1, search for the product of FP. n The nearest unnumbered point is marked as an adjacent point. The adjacent point is removed from the unnumbered points and added to the numbered points. Then, the nearest unnumbered point to the adjacent point is found, and the numbered points and unnumbered points are updated. This process is repeated until all unnumbered points are called numbered points. Feature points are sorted and numbered according to the order in which they were included in the initial numbering, using the symbol TP. m This indicates that m is a non-zero natural number and m is the index of TP; TP m In the corresponding RC(X,Y), X and Y are labeled as TX, respectively. m and TY m , TX m Placed in TY m First, form a string of numbers, labeled as SN. m SN are arranged in ascending order of m. m Combine them into a string of numbers to obtain the biometric key.

6. The USB flash drive storage access data encryption protection method integrating biometric identification technology according to claim 5, characterized in that, Encrypting USB flash drive data using a biometric key to obtain biometric encrypted ciphertext involves the following sub-steps: The biometric key and USB flash drive data are converted into the encoding format required for encryption protection, resulting in key encoding and data encoding. The data encoding is encrypted using key encoding, and the data encoding is converted into biometric encrypted ciphertext.

7. The USB flash drive storage access data encryption protection method integrating biometric identification technology according to claim 6, characterized in that, Converting the biometric key and USB flash drive data into the encoding format required for encryption protection includes the following sub-steps: Divide the numbers in the biometric key into groups of two digits, convert them into binary format according to ASCII encoding, and name the encoding as key encoding. The encoding method that converts USB flash drive data into binary format based on UTF-8 encoding is called data encoding.

8. The USB flash drive storage access data encryption protection method integrating biometric identification technology according to claim 7, characterized in that, Encrypting data encoding with key encoding to convert it into biometric ciphertext involves the following sub-steps: The numbers in the key encoding are numbered from left to right, using the symbol KE. i This indicates that the numbers in the data encoding are numbered from left to right, using the symbol DE. j This indicates that i and j are both non-zero natural numbers, and i is the index of KE, and j is the index of DE; to DE j During the analysis, j%10 is calculated, and the result is marked as GJ, where % is the modulo operator, and for each bit KE i Calculate i, calculate i%10, mark the result as GI, and obtain KE of GI=GJ. i Label them as KGE in ascending order of i. m , where m is a non-zero natural number and m is the index of KGE; Statistics KGE m The number of 0s and 1s in m is labeled F1 and F2 respectively. If m is even, then KGE m Convert to negative numbers and calculate. Mark the calculation result as KR, then calculate |KR-F1+F2| and mark the result as KF; Calculate DE j +KF, mark the calculation result as DF j Analyze all possible values ​​of j and calculate each DF. j ; DF according to ASCII encoding j Convert to binary encoding to obtain DW j DW in ascending order of j j The numbers are combined to obtain a transition code. The numbers in the transition code are then numbered from left to right, using the symbol DS. t Let represent , where t is a non-zero natural number and t is the index of DS; For DS t The analysis and conversion yielded the bio-encrypted ciphertext.

9. The USB flash drive storage access data encryption protection method integrating biometric identification technology according to claim 8, characterized in that, For DS j The analysis and conversion to obtain the bio-encrypted ciphertext includes the following sub-steps: Set the ciphertext sequence number, marked as MT. h Where h is a non-zero natural number and h is the index of MT, h is initially 1 and MT h Initially, all values ​​are 0; Starting with t=1, determine the parity of t. If t is odd, output the odd number processing signal; if t is even, output the even number processing signal. If the output is an odd number of processed signals, then determine DS. t Is it 1? If so, then set MT. h Increment by one, and simultaneously increment t by 1 and check DS again. t If the value is 1, then increment h and output an even number processing signal. If the output is an even number of processed signals, then determine DS. t Is it 0? If so, then set MT. h Increment by one, and simultaneously increment t by 1 and check DS again. t If the value is 0, then increment h by one and output an odd-number processing signal. After analyzing all possible values ​​of t, different MT values ​​were obtained. h MT in ascending order of h h By combining the data, we obtain the bio-encrypted ciphertext.

10. The USB flash drive storage access data encryption protection method integrating biometric identification technology according to claim 9, characterized in that, The process of storing biometric encrypted ciphertext and then decrypting it based on the fingerprint features when a user reads the data from the USB drive includes the following sub-steps: The biometric encrypted ciphertext is stored in the USB flash drive. When the user reads the data from the USB flash drive, the user's fingerprint features are obtained and a biometric key is generated. The data on the USB drive can be obtained by decrypting the bio-encrypted ciphertext using a biometric key.

Images