Fingerprint safety chip

Abstract

The invention discloses a fingerprint safety chip, which comprises a safety module, a fingerprint hardware operator accelerator, an instruction high-speed cache memory I-Cache and a busbar, wherein the safety module is used for supporting a GMB algorithm; the safety module, the fingerprint hardware operator accelerator and the instruction high-speed cache memory I-Cache are connected by the busbar. The fingerprint safety chip has the advantages that the safety of the data processing of the fingerprint identification is improved, and the chip property is improved.

Description

technical field [0001] The invention relates to the field of information security, in particular to a fingerprint security chip. Background technique [0002] Fingerprint identification technology is currently the most mature and cheap biometric identification technology. Due to the lifelong invariance, uniqueness and convenience of fingerprints, fingerprint recognition is currently the most widely used and mature biometric authentication method. In recent years, with the advancement of science and technology, the application of fingerprint recognition has become more and more extensive, and it has been increasingly used in key identity authentication links in financial payment, electronic card and other fields. Subsequently, there are more and more attacks on fingerprint identification. Therefore, the security and reliability of the fingerprint identification link need to be improved urgently. [0003] The complete fingerprint identification process includes two processes...

AI Technical Summary

Problems solved by technology

[0004] (1) The fingerprint recognition operation process is placed in the main system, sharing the storage space and running space of the same chip with other applications, that is, physically sharing the flash memory (Flash) and random-access memory (RAM, Random-AccessMemory) of the same chip ), which is assigned and controlled by software applications; however, this scheme has the following disadvantages: the fingerprint algorithm software is stored in the general storage space of the system, and is easily attacked or copied by other application software; the processing process of fingerprint image data is in the general RAM space, which is easy to Theft or forgery; the transmission of the fingerprint comparison results is interacted by the software inside the same chip, and there is a risk of being stolen or tampered with;

[0005] (2) The fingerprint recognition operation process is placed in the trusted execution environment (TEE, Trusted execution environment). This scheme is based on the TEE architecture. Although it uses the FLASH and RAM of the main control chip physically, it is provided by the TEE at the operating system and the underlying access level. Isolation protection; however, this scheme has the following disadvantages: TEE is at risk of being attacked by shared resources; there are loopholes in certificate processing or signature validity period in the secure boot code, allowing hackers to insert malicious code; Insert malicious code to obtain fingerprint information;

[0006] (3) The fingerprint recognition operation process is placed in an independent embedded chip, and a dedicated fingerprint algorithm chip is used to physically isolate the processing and storage of fingerprint sensitive data from the main system; however, this solution has the following disadvantages: general micro control unit (MCU, MicrocontrollerUnit)'s Flash and static random access memory (SRAM, StaticRandomAccessMemory) have no special protection mechanism, and there is a risk of being compromised; the operation of the algorithm has no independent encryption and decryption space, and information is easy to be stolen;

[0007] (4) The chip improves performance through the internal solidification fingerprint algorithm and accelerator scheme; however, this scheme is not universal and not suitable for other fingerprint algorithms, that is, it cannot meet the needs of many other fingerprint algorithm vendors, and the solidified fingerprint algorithm Unable to upgrade and optimize later, which hinders the optimization update of the fingerprint algorithm and hinders the path of performance improvement

[0008] It can be seen that the existing technology cannot guarantee the security of the fingerprint algorithm, the security of the user's fingerprint private data, and the security of the transmission link of the fingerprint authentication result, and at the same time, the performance of the chip needs to be improved.

Images