Method, apparatus and system for establishing biometric identification information transmission and storage medium

Patent metadata

Field	Value
Publication number	US-11245531-B2
Application number	US-201916453996-A
Country	US
Kind code	B2
Filing date	Jun 26, 2019
Priority date	Nov 21, 2017
Publication date	Feb 8, 2022
Grant date	Feb 8, 2022

Abstract

The present application provides a method, an apparatus and a system for establishing biometric identification information transmission and a storage medium, including: transmitting a first random number to a driving unit; receiving a second random number and a first identity verification information from the driving unit; generating a key of a first session according to the first random number, the second random number and a pre-shared key, and generating a second identity verification information according to the key of the first session, the first random number and the second random number; transmitting the second identity verification information to the driving unit; and determining, according to the first identity verification information and the second identity verification information, whether a session between a biometric identification apparatus and the driving unit is established successfully. Therefore system overheads is reduced.

First claim

What is claimed is:

1. A method for establishing biometric identification information transmission, comprising:
transmitting a first random number to a driving unit;
receiving a second random number and a first identity verification information from the driving unit;
generating a key of a first session according to the first random number, the second random number and a pre-shared key, and generating a second identity verification information according to the key of the first session, the first random number and the second random number;
transmitting the second identity verification information to the driving unit; and
determining, according to the first identity verification information and the second identity verification information, whether a session between a biometric identification apparatus and the driving unit is established successfully;
wherein the key of the first session comprises at least one key of a second session, and the method further comprising:
encrypting the biometric identification information by using the key of the first session or the key of the second session to generate a first ciphertext when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully; and
transmitting the first ciphertext to the driving unit.

2. The method according to claim 1 , wherein the key of the first session further comprises a first value and a key of a first algorithm, wherein the first value is used to determine a quantity of packets transmitted to the driving unit, and the first algorithm is an algorithm for generating the second identity verification information;
the method further comprising:
calculating the key of the first algorithm, the first ciphertext and the first value by using the first algorithm to obtain a first check value;
transmitting the first check value and the first ciphertext to the driving unit, wherein the first check value is used to determine whether the first ciphertext is valid.

3. The method according to claim 2 , wherein the method further comprises:
receiving a second ciphertext from the driving unit when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully; and
decrypting the second ciphertext by using the key of the first session or the key of the second session.

4. The method according to claim 3 , wherein the key of the first session further comprises a second value, wherein the second value is used to determine a quantity of packets received from the driving unit;
the method further comprising:
receiving a second check value transmitted by the driving unit;
calculating the key of the first algorithm, the second ciphertext and the second value by using the first algorithm to obtain a third check value; and
determining whether the second ciphertext is valid according to whether the second check value and the third check value being the same.

5. A method for establishing biometric identification information transmission, comprising:
transmitting a second random number to a biometric identification apparatus;
receiving a first random number and a second identity verification information transmitted by the biometric identification apparatus;
generating a key of a third session according to the first random number, the second random number and a pre-shared key, and generating a first identity verification information according to the key of the third session, the first random number and the second random number;
transmitting the first identity verification information to the biometric identification apparatus; and
determining, according to the first identity verification information and the second identity verification information, whether a session between the biometric identification apparatus and a driving unit is established successfully;
wherein the key of the third session comprises at least one key of a fourth session; the method further comprising:
encrypting the biometric identification information by using the key of the third session or the key of the fourth session to generate a second ciphertext when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully; and
transmitting the second ciphertext to the biometric identification apparatus.

6. The method according to claim 5 , wherein the key of the third session further comprises a third value and a key of a first algorithm, wherein the third value is used to determine a quantity of packets transmitted to the biometric identification apparatus, and the first algorithm is an algorithm for generating the first identity verification information;
the method further comprising:
calculating the key of the first algorithm, the second ciphertext and the third value by using the first algorithm to obtain a second check value; and
transmitting the second check value and the second ciphertext to the biometric identification apparatus, wherein the second check value is used to determine whether the second ciphertext is valid.

7. The method according to claim 6 , wherein the method further comprises:
receiving a first ciphertext from the biometric identification apparatus when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully; and
decrypting the first ciphertext by using the key of the third session or the key of the fourth session.

8. The method according to claim 7 , wherein the key of the third session further comprises a fourth value, wherein the fourth value is used to determine a quantity of packets received from the biometric identification apparatus;
the method further comprising:
receiving a first check value from the biometric identification apparatus;
calculating the key of the first algorithm, the first ciphertext and the fourth value by using the first algorithm to obtain a fourth check value; and
determining whether the first ciphertext is valid according to whether the first check value and the fourth check value being the same.

9. A system for establishing biometric identification information transmission, comprising: a biometric identification apparatus and a driving unit wherein the biometric identification apparatus comprises a first processor and a first memory, wherein the first memory is configured to store a first set of instructions, and the first processor is configured to execute the first set of instructions stored in the first memory to cause the biometric identification apparatus to:
transmit a first random number to the driving unit;
receive a second random number and a first identity verification information from the driving unit;
generate a key of a first session according to the first random number, the second random number and a pre-shared key, and generate a second identity verification information according to the key of the first session, the first random number and the second random number, wherein the key of the first session comprises at least one key of a second session;
transmit the second identity verification information to the driving unit;
determine, according to the first identity verification information and the second identity verification information, whether a session between the biometric identification apparatus and the driving unit is established successfully; and
encrypt the biometric identification information by using the key of the first session or the key of the second session to generate a first ciphertext when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully, and transmi

Assignees

• Shenzhen Goodix Tech Co Ltd

Inventors

• Kong Weiguo
• Wang Bing
• Sun Wenbin

Classifications

• H04L9/0869 Primary

  involving random numbers or seeds · CPC title

• G06F7/58

  Random or pseudo-random number generators · CPC title

• H04L63/0435

  wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06) · CPC title

• H04L67/141

  Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) · CPC title

• H04L9/3231 Primary

  Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861) · CPC title