Method and apparatus for securely calling fingerprint information and mobile terminal

Abstract

Provided are a method for securely calling fingerprint information, an apparatus for securely calling fingerprint information, and a mobile terminal. The method includes: receiving a request for calling the fingerprint information (S 101 ); according to a unique identification in an application process sending the request for calling the fingerprint information, determining whether the application corresponding to the application process is a legitimate application (S 102 ); when it is determined that the application corresponding to the application process is a legitimate application, allowing the application corresponding to the application process to call the fingerprint information (S 103 ).

1 . A method for securely calling fingerprint information, comprising:
 receiving a request for calling the fingerprint information;   determining whether an application corresponding to an application process sending the request for calling the fingerprint information is a legitimate application according to a first unique identification in the application process; and   allowing the application corresponding to the application process to call the fingerprint information when it is determined that the application corresponding to the application process is the legitimate application.   
     
     
         2 . The method according to  claim 1 , further comprising:
 when it is determined that the application corresponding to the application process is an illegitimate application, forbidding the application corresponding to the application process to call the fingerprint information, and outputting a warning message.   
     
     
         3 . The method according to  claim 1 , further comprising:
 generating a second unique identification of the application according to a unique identification public key of the application when installing the application;   storing the second unique identification;   wherein determining whether the application corresponding to the application process is the legitimate application according to the first unique identification in the application process comprises:   matching the first unique identification in the application process with the second unique identification, and determining that the application corresponding to the application process is the legitimate application when the first unique identification in the application process is matched with the second unique identification successfully.   
     
     
         4 . The method according to  claim 3 , wherein, storing the second unique identification comprises:
 storing the second unique identification in an application based on a TrustZone environment, and administrator rights being required to run the application based on the TrustZone environment;   matching the first unique identification in the application process with the second unique identification comprises:   accessing the application based on the TrustZone environment, and matching the first unique identification in the application process with the second unique identification stored in the application based on the TrustZone environment.   
     
     
         5 . The method according to  claim 4 , wherein, accessing the application based on the TrustZone environment, and matching the first unique identification in the application process with the second unique identification stored in the application based on the TrustZone environment comprises:
 obtaining the second unique identification by accessing the application based on the TrustZone environment;   determining whether the second unique identification is same as the first unique identification in the application process;   determining that the first unique identification in the application process is matched with the second unique identification successfully when the second unique identification is the same as the first unique identification in the application process; and   determining that the first unique identification in the application process fails to match with the second unique identification when the second unique identification is different from the first unique identification in the application process.   
     
     
         6 . The method according to  claim 1 , further comprising:
 confusing the first unique identification in the application process with an instruction for calling the fingerprint information sent by the application corresponding to the application process, to generate a confusion instruction;   wherein allowing the application to call the fingerprint information comprises:   extracting the first unique identification from the confusion instruction, matching the first unique identification with the second unique identification, and allowing the application corresponding to the application process to call the fingerprint information when the first unique identification is matched with the second unique identification successfully.   
     
     
         7 . The method according to  claim 6 , wherein, confusing the first unique identification in the application process with the instruction for calling the fingerprint information sent by the application corresponding to the application process, to generate the confusion instruction comprises:
 adding the first unique identification in the application process to the instruction for calling the fingerprint information sent by the application corresponding to the application process according to a preset location, to generate the confusion instruction.   
     
     
         8 . An apparatus for securely calling fingerprint information, comprising a non-transitory computer-readable medium comprising computer-executable instructions stored thereon, and an instruction execution system which is configured by the instructions to implement at least one of:
 a request receiving module, configured to receive a request for calling the fingerprint information;   a legitimate application determining module, configured to determine whether an application corresponding to an application process sending the request for calling the fingerprint information is a legitimate application according to a first unique identification in the application process; and   a call allowing module, configured to allow the application corresponding to the application process to call the fingerprint information when it is determined that the application corresponding to the application process is the legitimate application.   
     
     
         9 . The apparatus according to  claim 8 , wherein the instruction execution system is further configured by the instructions to implement:
 a warning message outputting module, configured to forbid the application corresponding to the application process to call the fingerprint information, and output a warning message when it is determined that the application corresponding to the application process is an illegitimate application.   
     
     
         10 . The apparatus according to  claim 8 , wherein the instruction execution system is further configured by the instructions to implement:
 an identification generating module, configured to generate a second unique identification of the application according to a unique identification public key of the application when installing the application;   an identification storing module, configured to store the second unique identification;   wherein the legitimate application determining module comprises:   an identification matching unit, configured to match the first unique identification in the application process with the second unique identification, and determine that the application corresponding to the application process is the legitimate application when the first unique identification in the application process is matched with the second unique identification successfully.   
     
     
         11 . The apparatus according to  claim 10 , wherein, the identification storing module is configured to:
 store the second unique identification in an application based on a TrustZone environment, and administrator rights being required to run the application based on the TrustZone environment;   the identification matching unit is configured to access the application based on the TrustZone environment, and match the first unique identification in the application process with the second unique identification stored in the application based on the TrustZone environment.   
     
     
         12 . The apparatus according to  claim 11 , wherein, the identification matching unit is further configured to:
 obtain the second unique identification by accessing the application based on the TrustZone environment;   determine whether the second unique identification is same as the first unique identification in the application process;   determine that the first unique identification in the application process is matched with the second unique identification successfully when the second unique identification is the same as the first unique identification in the application process; and   determine that the first unique identification in the application process fails to match with the second unique identification when the second unique identification is different from the first unique identification in the application process.   
     
     
         13 . The apparatus according to  claim 8 , wherein the instruction execution system is further configured by the instructions to implement:
 a confusion instruction generating module, configured to confuse the first unique identification in the application process with an instruction for calling the fingerprint information sent by the application corresponding to the application process, to generate a confusion instruction;   wherein the identification matching unit is configured to:   extract the first unique identification from the confusion instruction, match the first unique identification with the second unique identification, and allow the application corresponding to the application process to call the fingerprint information when the first unique identification is matched with the second unique identification successfully.   
     
     
         14 . The apparatus according to  claim 13 , wherein, the confusion instruction generating module is further configured to:
 add the first unique identification in the application process to the instruction for calling the fingerprint information sent by the application corresponding to the application process according to a preset location, to generate the confusion instruction.   
     
     
         15 . A mobile terminal, comprising:
 a fingerprint sensor; and   an apparatus for securely calling fingerprint information coupled to the fingerprint sensor;   wherein, the apparatus for securely calling fingerprint information comprises a non-transitory computer-readable medium comprising computer-executable instructions stored thereon, and an instruction execution system which is configured by the instructions to implement at least one of:   a request receiving module, configured to receive a request for calling the fingerprint information;   a legitimate application determining module, configured to determine whether an application corresponding to an application process sending the request for calling the fingerprint information is a legitimate application according to a first unique identification in the application process; and   a call allowing module, configured to allow the application corresponding to the application process to call the fingerprint information when it is determined that the application corresponding to the application process is the legitimate application.   
     
     
         16 . The terminal according to  claim 15 , wherein the instruction execution system is further configured by the instructions to implement:
 a warning message outputting module, configured to forbid the application corresponding to the application process to call the fingerprint information, and output a warning message when it is determined that the application corresponding to the application process is an illegitimate application.   
     
     
         17 . The terminal according to  claim 15 , wherein the instruction execution system is further configured by the instructions to implement:
 an identification generating module, configured to generate a second unique identification of the application according to a unique identification public key of the application when installing the application;   an identification storing module, configured to store the second unique identification;   the legitimate application determining module comprises:   an identification matching unit, configured to match the first unique identification in the application process with the second unique identification, and determine that the application corresponding to the application process is the legitimate application when the first unique identification in the application process is matched with the second unique identification successfully.   
     
     
         18 . The terminal according to  claim 17 , wherein, the identification storing module is configured to:
 store the second unique identification in an application based on a TrustZone environment, and administrator rights being required to run the application based on the TrustZone environment;   the identification matching unit is configured to access the application based on the TrustZone environment, and match the first unique identification in the application process with the second unique identification stored in the application based on the TrustZone environment.   
     
     
         19 . The terminal according to  claim 18 , wherein, the identification matching unit is further configured to:
 obtain the second unique identification by accessing the application based on the TrustZone environment;   determine whether the second unique identification is same as the first unique identification in the application process;   determine that the first unique identification in the application process is matched with the second unique identification successfully when the second unique identification is the same as the first unique identification in the application process; and   determine that the first unique identification in the application process fails to match with the second unique identification when the second unique identification is different from the first unique identification in the application process.   
     
     
         20 . The terminal according to  claim 15 , wherein the instruction execution system is further configured by the instructions to implement:
 a confusion instruction generating module, configured to confuse the first unique identification in the application process with an instruction for calling the fingerprint information sent by the application corresponding to the application process, to generate a confusion instruction;   the identification matching unit is configured to:   extract the first unique identification from the confusion instruction, match the first unique identification with the second unique identification, and allow the application corresponding to the application process to call the fingerprint information when the first unique identification is matched with the second unique identification successfully.