Method and apparatus for processing biometric information in electronic device

Patent metadata

Field	Value
Publication number	US-12197628-B2
Application number	US-202318328412-A
Country	US
Kind code	B2
Filing date	Jun 2, 2023
Priority date	Feb 19, 2014
Publication date	Jan 14, 2025
Grant date	Jan 14, 2025

Abstract

A method and apparatus for processing biometric information in an electronic device including a processor that operates at a normal mode or at a secure mode, the method comprising, detecting a biometric input event from a biometric sensor module at normal mode, creating biometric data based on sensed data from the biometric sensor module at the secure mode, performing biometric registration or biometric authentication based on the created biometric data at the secure mode, and providing result information of biometric registration or biometric authentication at the normal mode.

First claim

What is claimed is:

1. A method for processing biometric information in an electronic device including a biometric sensor and a processor that provides a rich execution environment and a trusted execution environment, the method comprising:
receiving an input signal from the biometric sensor via a first operating system providing the rich execution environment;
in response to receiving the input signal, obtaining raw data from the biometric sensor via a second operating system providing the trusted execution environment, wherein the raw data is only obtainable by the second operating system providing the trusted execution environment;
generating biometric data based on the raw data via the second operating system providing the trusted execution environment;
performing biometric authentication based on the generated biometric data via the second operating system providing the trusted execution environment; and
providing result information of biometric authentication via the first operating system providing the rich execution environment,
wherein the raw data from the biometric sensor is accessible by the second operating system providing the trusted execution environment while the raw data from the biometric sensor is not accessible by the first operating system providing the rich execution environment.

2. The method of claim 1 , further comprising:
in response to receiving the input signal, transmitting a first signal to the second operating system providing the trusted execution environment via the first operating system providing the rich execution environment; and
in response to receiving the first signal, obtaining the raw data from the biometric sensor via the second operating system providing the trusted execution environment.

3. The method of claim 2 , further comprising:
based on the biometric authentication, transmitting a second signal to the first operating system providing the rich execution environment via the second operating system providing the trusted execution environment; and
in response to receiving the second signal, providing the result information of the biometric authentication via the first operating system providing the rich execution environment.

4. The method of claim 1 ,
wherein the raw data comprises at least one of fingerprint data, face data or iris data, and
wherein the biometric data comprises a template including at least one feature, the at least one feature being obtained based on the raw data.

5. The method of claim 1 ,
wherein a memory of the electronic device comprises a secure zone and a normal zone,
wherein the secure zone of the memory is accessible by the second operating system providing the trusted execution environment and the secure zone of the memory is not accessible by the first operating system providing the rich execution environment, and
wherein the method further comprises storing the generated biometric data in the secure zone of the memory via the second operating system providing the trusted execution environment.

6. The method of claim 3 , further comprising:
obtaining at least one feature based on the raw data via the second operating system providing the trusted execution environment;
generating the biometric data based on the at least one feature via the second operating system providing the trusted execution environment; and
encrypting the biometric data based on a unique identifier via the second operating system providing the trusted execution environment.

7. The method of claim 6 ,
wherein a memory of the electronic device comprises a normal zone and a secure zone, and
wherein the method further comprises storing the encrypted biometric data in the normal zone of the memory via the first operating system providing the rich execution environment.

8. The method of claim 7 , further comprising:
obtaining the encrypted biometric data from the memory via the second operating system providing the trusted execution environment;
decrypting the encrypted biometric data based on the unique identifier via the second operating system providing the trusted execution environment; and
performing biometric authentication by comparing the decrypted biometric data with biometric data via the second operating system providing the trusted execution environment,
wherein the biometric authentication is successful when a matching value of the biometric data exceeds a threshold by the second operating system providing the trusted execution environment, and
wherein the biometric authentication is failed when a matching value of the biometric data is less than or equal to the threshold by the second operating system providing the trusted execution environment.

9. The method of claim 3 , further comprising:
providing the result information by using a true-false-type of signal for the biometric authentication via the first operating system providing the rich execution environment.

10. The method of claim 1 , wherein the first operating system is a normal operating system, and the second operating system is a secure operating system.

11. The method of claim 1 , further comprising:
based on a finger, to be recognized, contacting the biometric sensor, generating the input signal and the raw data via the biometric sensor.

12. The method of claim 1 , wherein both the input signal and the raw data are generated based on a finger, to be recognized, contacting the biometric sensor.

13. An electronic device for processing biometric information, the electronic device comprising:
a biometric sensor;
memory storing one or more computer programs; and
at least one processor, providing a rich execution environment and a trusted execution environment, communicatively coupled to the biometric sensor and the memory,
wherein the one or more computer programs include computer-executable instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to:
receive an input signal from the biometric sensor via a first operating system providing the rich execution environment,
in response to receiving the input signal, obtain raw data from the biometric sensor via a second operating system providing the trusted execution environment, wherein the raw data is only obtainable by the second operating system providing the trusted execution environment,
generate biometric data based on the raw data via the second operating system providing the trusted execution environment,
perform biometric authentication based on the generated biometric data via the second operating system providing the trusted execution environment, and
provide result information of biometric authentication via the first operating system providing the rich execution environment, and
wherein the raw data from the biometric sensor is accessible by the second operating system providing the trusted execution environment while the raw data from the biometric sensor is not accessible by the first operating system providing the rich execution environment.

14. The electronic device of claim 13 , wherein the one or more computer programs further include computer-executable instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to:
in response to receiving the input signal, transmit a first signal to the second operating system providing the trusted execution environment via the first operating system providing the rich execution environment, and
in response to receiving the first signal, obtain the raw data from the biometric sensor via the second operating system providing the trusted executi

Assignees

• Samsung Electronics Co Ltd

Inventors

• An Teain
• Kim Taeho
• Kim Hyungjoon
• Park Seulhan
• Park Jonghoon
• You Heejun
• Lee Yangsoo
• Chang Moonsu
• Hyeon Jinho

Classifications

• G06F21/32

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F21/74 Primary

  operating in dual or compartmented mode, i.e. at least one secure mode · CPC title