WO2021035582A1

WO2021035582A1 - Method for processing data during password input, data processing apparatus, and electronic device

Info

Publication number: WO2021035582A1
Application number: PCT/CN2019/103118
Authority: WO
Inventors: 赵谦; 陈光跃; 刘彭劼
Original assignee: 华为技术有限公司
Priority date: 2019-08-28
Filing date: 2019-08-28
Publication date: 2021-03-04
Also published as: CN112740204A

Abstract

A method for processing data during password input, a data processing apparatus, and an electronic device, which are used to protect sensor data and which guarantee password security for a user. The data processing apparatus comprises: a low-power processor, which is used to receive sensor data that is outputted by a sensor and transmit the sensor data to a processor; and the processor, which is coupled with the low-power processor and which is used when a user executes password input to stop at least one software program run by the processor from accessing the sensor data. The power consumption of the processor is higher than that of the low-power processor.

Description

Data processing method, data processing device and electronic equipment in password input

Technical field

This application relates to the field of data security technology, and in particular to a data processing method, data processing device and electronic equipment in password input.

Background technique

At present, more and more user data are stored in electronic devices (such as mobile phones), and user privacy is becoming more and more important. Therefore, the requirements for the security of electronic devices are constantly increasing. From the beginning of sliding unlocking to unlocking with passwords and pattern unlocking of electronic devices, to the current biometric unlocking, unlocking methods are constantly evolving. However, no matter which unlocking method is used, the digital password is the basis of all unlocking methods. The main reasons are as follows: 1. Priority is required to set the password to unlock before setting the fingerprint/face; 2. The password is required to be unlocked after the phone is restarted; 3. , The mobile phone needs to enter a password to unlock at intervals; 4. After the biometric unlocking fails, it can only be unlocked with a password. Therefore, when attacking the mobile phone password, you can attack the digital password.

Currently, there is such an attack method against mobile phone passwords: in order to achieve more functions, electronic devices are usually equipped with various types of sensors. In the current various operating systems, such as the Android version, the system does not have requirements for sensor permissions, that is, any application, process, and service can apply for sensor data when needed. Sensor data is a public resource of the system, for all Open applications, processes and services. The attacker induces users to install an app that analyzes mobile phone passwords. Since sensor data is a public resource of the system, the app can collect information from various sensors (including mobile phone inclination, rotation angle, light, etc.) during the unlocking process of the electronic device. The machine learning model and massive learning data analyze several possible password combinations, and then try to crack the mobile phone password. This attack method can also be called a sensor-based side channel attack (SCA).

Data shows that using the combination of accelerometer and gyroscope data to perform side-channel cryptanalysis, the success rate of cipher cracking is 70%. Therefore, it is not difficult to see that in the process of unlocking the Android device password, an attacker can easily crack the mobile phone password by obtaining sensor data, which poses a threat to user privacy and the security of electronic devices.

Summary of the invention

The embodiments of the present application provide a data processing method, data processing device, and electronic equipment in password input, which are used to protect sensor data and provide protection for the user's password security.

In the first aspect, an embodiment of the present application provides a data processing device in password input, including: a low-power processor for receiving sensor data output by the sensor and transmitting the sensor data to the processor; the processor, and Low-power processor coupling, used to prevent at least one software program running by the processor from accessing sensor data during the user's password input; the power consumption of the processor is higher than that of the low-power processor . Optionally, the sensor includes one or more of the following: a compass, a gyroscope, an accelerometer, an ambient light sensor, a proximity light sensor, a barometer, or a Hall sensor.

With the data processing device provided in the first aspect, during the password input process of the user, the processor prevents at least one software program running by the processor from accessing sensor data, and thus requests a specific software program for obtaining sensor data, such as an application program Then the sensor data cannot be obtained. Compared with the prior art, the sensor data will no longer be arbitrarily obtained by the software program, and it is difficult for an attacker to crack the user password through the sensor data.

In one possible design, the at least one software program includes an application software program. Specifically, at least one software program may belong to non-secure software. With the above solution, the processor runs the software to form a secure environment and a non-secure environment, and at least one software program is non-secure software. The non-secure software can initiate a data request through a secure/non-secure interface driver to obtain sensor data. Once non-secure software is prohibited from acquiring sensor data, the security of password input will be improved.

In a possible design, when the processor prevents at least one software program running by the processor from accessing the sensor data, it is specifically used to discard the sensor data or replace the sensor data with fake data. With the above solution, the sensor data can be discarded or the sensor data can be replaced with fake data, and it is difficult for an attacker to crack the user password through the sensor data.

In a possible design, the data processing device further includes a protection unit for preventing the low-power processor from continuing to receive sensor data under the control of the processor; the processor is preventing at least one software program running by the processor from pairing When the sensor data is accessed, it is specifically used for: the processor controls the protection unit to perform an operation that prevents the low-power processor from continuing to receive the sensor data. With the above solution, a protection unit can be set between the sensor and the low-power processor, and the sensor data is cut off by the protection unit when the user enters the password, and it is difficult for an attacker to crack the user password through the sensor data.

Specifically, the protection unit is specifically configured to prevent the sensor data connection between the low-power processor and the sensor under the control of the processor. In the first implementation, the protection unit is specifically used to: disable the interface between the sensor and the low-power processor, or disable the data transmission function of the interface, or disable the interface between the sensor and the low-power processor Or set the data line to a preset level. In the second implementation manner, the protection unit is specifically used to: disable the sensor.

Optionally, the processor is further configured to: determine whether the user is performing password input. With the above solution, the processor can trigger the aforementioned operation of preventing at least one software program from accessing sensor data when it determines that the user is performing password input. Wherein, when the processor determines whether the user is performing password input, it is specifically used to determine whether the user is performing password input through the indication of the status flag bit.

Optionally, the processor is further configured to: run security software, and set a status flag when the security software detects that the user performs password input. Among them, the security software may include unlocking software.

In a second aspect, an embodiment of the present application also provides an electronic device, including the data processing device and sensor provided in the first aspect.

In the third aspect, the embodiment of the present application provides a data processing method in password input. The method includes the following steps: the low-power processor receives sensor data output by the sensor, and transmits the sensor data to the processor; the processor prevents at least one software program run by the processor from accessing the sensor during the password input by the user. Data access. Among them, the power consumption of the processor is higher than the power consumption of the low-power processor.

Wherein, the at least one software program includes an application software program. Specifically, at least one software program may belong to non-secure software.

Optionally, the processor preventing at least one software program run by the processor from accessing the sensor data may be implemented in the following manner: the processor discards the sensor data or replaces the sensor data with fake data.

Optionally, the processor preventing at least one software program running by the processor from accessing the sensor data can also be implemented in the following manner: the processor controls the protection unit to perform an operation that prevents the low-power processor from continuing to receive the sensor data.

Optionally, the method provided by the third aspect further includes: the processor judging whether the user is performing password input. Specifically, the specific way for the processor to determine whether the user is performing the password input may be: the processor determines whether the user is performing the password input through the indication of the status flag bit.

Optionally, the method provided by the third aspect further includes the processor running security software, and setting a status flag when the security software detects that the user performs a password input. Among them, the security software includes unlocking software.

Optionally, the sensor includes one or more of the following: a compass, a gyroscope, an accelerometer, an ambient light sensor, a proximity light sensor, a barometer, or a Hall sensor.

Description of the drawings

FIG. 1 is a schematic structural diagram of an electronic device provided by an embodiment of this application;

2 is a schematic diagram of a software module in an SoC provided by an embodiment of the application;

FIG. 3 is a schematic flowchart of a solution executed by each software module in an SoC according to an embodiment of the application;

FIG. 4 is a schematic diagram of data received by an application in each state according to an embodiment of the application;

FIG. 5 is a schematic structural diagram of another integrated chip provided by an embodiment of the application;

FIG. 6 is a schematic structural diagram of a first type of protection unit provided by an embodiment of this application;

FIG. 7 is a schematic structural diagram of a second type of protection unit provided by an embodiment of the application;

FIG. 8 is a schematic structural diagram of a third type of protection unit provided by an embodiment of this application;

FIG. 9 is a schematic structural diagram of a fourth type of protection unit provided by an embodiment of the application;

FIG. 10 is a schematic structural diagram of a fifth type of protection unit provided by an embodiment of this application;

FIG. 11 is a schematic structural diagram of a sixth type of protection unit provided by an embodiment of the application;

FIG. 12 is a schematic structural diagram of an electronic device provided by an embodiment of this application;

FIG. 13 is a schematic flowchart of a data processing method provided by an embodiment of this application.

detailed description

In the following, the application scenario of the embodiment of the present application will be introduced first. The embodiments of the present application can be applied to the electronic device shown in FIG. 1. As shown in Figure 1, the electronic device includes a system on chip (system on chip, SoC) and a sensor. Among them, the SoC includes a processor, specifically an application processor (application central processing unit, ACPU), and may further include other types of processors, such as digital signal processors, artificial intelligence processors, or microcontrollers. SoC also includes low-power micro-control unit (LP MCU). In the embodiments of the present application, a low-power microprocessor may also be referred to as a low-power processor, and its power consumption is lower than the power consumption of the processor, for example, lower than the power consumption of an application processor. Among them, electronic devices include, but are not limited to, smart phones, smart watches, smart TVs, tablet computers, virtual reality (VR) devices, augmented reality (AR) devices, and Internet of things (IoT) devices , Personal computers, handheld computers, personal digital assistants.

In the electronic device shown in Figure 1, the sensor is a device used to perceive external data or environmental parameters in the electronic device. The sensor can be based on an interconnected integrated circuit (inter-integrated circuit, I2C) bus or a serial peripheral interface ( Serial peripheral interface, SPI) bus and other low-speed bus devices. It can be understood that the interface used by the sensor may also be an interface other than a low-speed bus, such as a high-speed bus, which is not limited in this embodiment. The sensor can be used to detect the state of the electronic device and its surrounding environment (such as acceleration, magnetic field strength, light intensity, and air pressure). Exemplarily, the sensor may be one or more of a compass, a gyroscope, an accelerometer, an ambient light sensor, a proximity light sensor, a barometer, or a Hall sensor.

In the electronic device shown in FIG. 1, since the sensor usually needs to work in a low power consumption state, the sensor generally uses a low-speed bus to connect to the low-power processor of the SoC. The low-power processor is mainly used to simply process the sensor data and then transmit it to the application processor, so that the application processor can perform subsequent processing on the data.

In the electronic device shown in Figure 1, the application processor is used to process various functions and services of the electronic device, such as implementing various application software (APP) functions, providing users with unlocking services and other password operations, and performing various password operations on sensors. Control and dispatch, process sensor data, etc. In particular, the application processor runs the software to form different environments, such as a secure environment and a non-secure environment, that is, the software can be divided into a secure software side and a non-secure software side. Among them, data and programs that require a higher level of security, such as user privacy and payment security, are located on the side of secure software, and data and programs that require less security level are located on the side of non-secure software. The non-safety software side can initiate a data request through the safety/non-safety interface driver to obtain data on the safety software side. In the embodiments of the present application, the unlocking application and the sensor data processing application are located on the side of the security software. The non-safe software side corresponds to the normal environment, and the safe software side corresponds to the trusted execution environment (TEE).

In the prior art, taking the Android system as an example, although the application software used for sensor data processing is located on the security software side, the Android system does not limit the access rights of the sensor data, that is, the security software side may not Any application, service, and process on the security software side can access sensor data when needed. Sensor data, as a public resource of the entire system, is open to all applications, services, and processes. Therefore, when the user executes the password input process, the attacker can easily obtain the sensor data, and based on the machine learning model and massive learning data, analyze the possible password combination of the obtained sensor data, and try to crack the mobile phone password. In view of this, the embodiments of the present application provide an integrated chip and data processing method to protect sensor data and prevent attackers from performing sensor-based side-channel attacks during the user's password input process, that is, to prevent user passwords from being compromised. Cracking, so as to provide protection for the user's password security and mobile phone security.

Specifically, the data processing device in password input provided in the embodiment of the present application may include a processor and a low-power processor. Among them, the processor may include the application processor in the electronic device shown in FIG. 1, and may also include other necessary types of processors, such as microcontrollers, digital signal processors or artificial intelligence processors, etc., low-power processing The processor may be a low-power processor in the electronic device shown in FIG. 1. Optionally, the low-power processor is a sensor hub (Sensor Hub).

Among them, the low-power processor is used to receive sensor data output by the sensor and transmit the sensor data to the processor; the processor is coupled with the low-power processor to prevent the processor from running when the user executes the password input process Access to sensor data by at least one software program; wherein the power consumption of the processor is higher than the power consumption of the low-power processor.

Among them, the at least one software program includes an application software program, and can also optionally include other types of software, such as driver software or plug-ins. The at least one software program may be non-secure software, that is, the processor runs the software to form a secure environment and a non-secure environment, that is, the at least one software program is non-secure software, and the non-secure software can initiate a data request through a secure/non-secure interface driver, To obtain sensor data. Preventing at least one non-secure software program running by the processor from accessing sensor data helps improve the security of password input.

In the data processing device provided by the embodiment of the present application, the processor does not allow sensor data to be acquired by any application at any time as in the prior art, but prevents the processor from running when the user executes the password input process. At least one software program accesses the sensor data, so the application requesting to obtain the sensor data cannot obtain the sensor data or only obtains the fixed dummy data (that is, the fixed value data, for example, such as 0x00, 0xFF, etc.). In this case, the sensor data will no longer be arbitrarily obtained by software programs (applications on the security software side or applications on the non-security software side), and it is difficult for an attacker to crack the user password through the sensor data.

In addition, in the data processing device, the processor can also be used to determine whether the user is performing password input. In other words, when the processor determines that the user is performing password input, it can trigger the aforementioned operation of preventing at least one software program from accessing sensor data. Specifically, the processor can determine whether the user is performing password input through the indication of the status flag bit. That is, in the embodiment of the present application, a status flag bit is set in the processor to indicate whether the user is performing password input.

Specifically, in the embodiment of the present application, the status flag bit may be located on the side of the security software to prevent the status flag bit from being maliciously tampered with. Exemplarily, the status flag is used to indicate whether the electronic device is successfully unlocked. In practical applications, it can be designed as follows: when the status flag bit is the first value, the status flag bit is used to indicate that the electronic device is in the unlocking state; when the status flag bit is the second value, the status flag bit is used to indicate that the electronic device is locked Status: When the status flag bit is the third value, the status flag bit is used to indicate that the electronic device is in the unlocked state.

Exemplarily, the status flag bit can be represented by Lockstatus. When Lockstatus=0, it means that the electronic device is locked, that is, the electronic device has been locked; when Lockstatus=1, it means that the electronic device is unlocking, that is, the user is unlocking; when Lockstatus=2, it means that the electronic device is unlocked. In the unlocked state, that is, the electronic device has been unlocked. It should be noted that the embodiment of the present application uses an unlocking scenario as an example to describe an application scenario for inputting a password, so that this solution is better suitable for this scenario. It should be understood that the data processing scheme when the user performs password input involved in this embodiment can also be applied to other scenarios with password input, and is not limited to the unlocking scenario.

In the embodiment of the present application, the status flag bit can be set in the following manner: the processor runs the security software and sets the status flag bit when the security software (for example, unlocking software) detects that the user performs a password input.

In addition, when the status flag indicates that the electronic device is in a locked state or an unlocked state, the processor can no longer prevent the application from accessing the sensor data. That is, in the case that the user does not perform a password input operation, the sensor data can be obtained by the application on the secure software side or the non-secure software side.

As mentioned earlier, when an attacker conducts a sensor-based side-channel attack, he needs to use the sensor data when the user performs a password input. If the processor determines that the user has not performed the password input process, the attacker cannot perform a sensor-based side-channel attack at this time, and therefore can respond to at least one software program's request for sensor data through the secure/non-secure interface to achieve normal application functions.

In the data processing device provided by the embodiment of the present application, the low-power processor and the processor may be integrated in an integrated chip. Exemplarily, the integrated chip may be the SoC in the electronic device shown in FIG. 1. Of course, in practical applications, the low-power processor and the processor may also be integrated in different chips, for example, the processor is integrated in the SoC, and the low-power processor is coupled to the SoC as a separate chip. This embodiment does not limit various possible variations of the SoC.

As described in the electronic device shown in FIG. 1, the application software in the application processor may be on the secure software side or the non-secure software side. Then, the corresponding functions in the above-mentioned processor can also be implemented cooperatively by software modules located on the secure software side or the non-secure software side.

Illustratively, taking the processor as the ACPU, the low-power processor as the LP MCU, and the ACPU and the LP MCU are integrated in the SoC as an example, the division of software modules in the ACPU and the LP MCU may be as shown in FIG. 2. ACPU includes five software modules: unlocking application and unlocking service, secure/non-secure interface driver, sensor frame service, sensor data processing module and ordinary upper-level application. The above modules are software modules in the software system, and the software system is also called the system The software may include other software modules, which is not limited in this embodiment. Software systems include operating systems, plug-ins, middleware, and application software. The LP MCU includes sensor drivers. In addition, the sensor driver is also coupled with the sensor hardware, such as running on the LP MCU core coupled to the sensor hardware. The sensor hardware may include various types of sensors. For details, refer to the introduction in the previous embodiment.

Among them, the unlocking application and the unlocking service are used to initiate the unlocking operation when the system software needs to be unlocked, guide the user to unlock, and output the status flag to the sensor data processing module; the secure/non-secure interface driver is used for the secure software side and the non-secure software side. Data transmission interaction, the normal upper-layer application on the non-secure side initiates a data request and drives to return the requested data or status; the sensor framework service is the realization of the sensor software in the system software, used for higher-level software to control and schedule the sensor, and data transmission After reaching the sensor data processing module, it is sent to the application on the non-safety software side through the safety/non-safety interface; the sensor data processing module is used to process the sensor data transmitted by the sensor frame service, and the data processing flow is carried out under the control of the status flag; The upper-level application refers to a general Android application. When the application needs to obtain sensor data, it drives to request sensor data by calling a secure/non-secure interface. The sensor driver is an interactive module between sensor hardware and system software. The sensor driver realizes the control and data transmission of the low-speed bus through the underlying code, and at the same time simply processes the sensor data and sends it to the sensor frame service.

In the module architecture shown in Figure 2, the unlocking application and unlocking service, the sensor frame service, and the sensor data processing module are located on the secure software side, and the common upper-layer applications are located on the non-secure software side. Among them, the unlocking application and the unlocking service are used to output status flags, and the sensor data processing module is used to process the sensor data transmitted by the sensor frame service according to the status flags.

Specifically, the sensor data processing module can periodically poll to access the status flag (for example, the access cycle is tens of ms), if the polling result is unlocking (that is, the user is performing a password input scenario) Specific example), then the data channel between the sensor data processing module and the sensor frame service is switched to the disconnected state at this time, and the data request of the secure/non-secure interface is not responded. Optionally, the sensor data processing module notifies the sensor framework service to clear the sensor data, or transmits fixed sensor dummy data, such as 0x00, 0xFF, etc. to the secure/non-secure interface driver, and at the same time notifies the sensor framework service to clear the sensor data; if polled The result indicates that the electronic device is in the unlocked state or locked state, then the data channel is set to the normal state, so that ordinary upper-layer applications can drive normal requests through the secure/non-secure interface, obtain sensor data, and achieve normal application functions, as shown in Figure 3. Shown.

Exemplarily, when the electronic device is in different states (unlocking state, unlocked state, locked state), the data received by the ordinary upper-layer application may be as shown in FIG. 4. In the scheme 1 shown in FIG. 4, when the electronic device is in the locked state and the unlocked state, the ordinary upper-layer application receives normal sensor data; when the electronic device is in the unlocking state, the ordinary upper-layer application cannot receive data. In scheme 2 shown in FIG. 5, when the electronic device is in the locked state and the unlocked state, the ordinary upper-layer application receives normal sensor data; when the electronic device is in the unlocking state, the ordinary upper-layer application receives fixed dummy data.

Specifically, in the embodiment of the present application, the processor preventing at least one software program running by the processor from accessing sensor data can be implemented in a software manner or in a hardware manner. The two methods are introduced separately below.

1. Software method

When the processor prevents at least one software program running by the processor from accessing the sensor data, it can be specifically implemented in the following manner: discarding the sensor data or replacing the sensor data with fake data. In other words, the processor can discard the sensor data or replace the sensor data with dummy data when the user performs the password input. Then the application requesting the sensor data cannot obtain the sensor data or only obtain the fixed dummy data. It is also difficult for an attacker to crack user passwords through sensor data.

Second, the hardware method

The data processing device provided by the embodiment of the present application may further include: a protection unit, configured to prevent the low-power processor from continuing to receive sensor data under the control of the processor; then, the processor is preventing at least one software program running by the processor The access to sensor data is specifically implemented in the following manner: the processor controls the protection unit to perform an operation that prevents the low-power processor from continuing to receive sensor data. In the embodiment of the present application, a protection unit may be provided between the sensor and the low-power processor, as shown in FIG. 5, so that when the user enters a password, the protection unit performs an operation to prevent the low-power processor from continuing to receive sensor data. Then the application requesting to obtain the sensor data cannot obtain the sensor data or only obtain the fixed fake data, and it is difficult for an attacker to crack the user password through the sensor data.

Specifically, the protection unit is specifically configured to prevent the sensor data connection between the low-power processor and the sensor under the control of the processor. The protection unit prevents the sensor data connection between the low-power processor and the sensor, which can be implemented in different ways. For example, the protection unit can disable the interface between the sensor and the low-power processor, or the protection unit can disable the interface between the sensor and the low-power processor. The data transmission function can be interfaced, or the protection unit can disable the data line between the sensor and the low-power processor, or the protection unit can set the data line to a preset level. In addition, the protection unit can also directly disable the sensor.

In specific applications, the protection unit can be implemented in multiple ways, several of which are listed below.

The first way to achieve

In the first implementation manner, the protection unit includes an active transistor, which is coupled to the data bus between the low-power processor and the sensor, and is used to switch the electronic device into the unlocking state when the unlock state flag bit indicates The level of the data bus is pulled high or low.

Specifically, taking the active transistor as a metal oxide semiconductor (MOS) as an example, if the unlock state flag indicates that the electronic device is in the unlocking state, the gate of the MOS inputs a high level, so that the MOS transistor is turned on. Through, the level of the data bus between the low-power processor and the sensor is pulled up or down, depending on whether the voltage connected to the transistor is high or low. At this time, the protection unit sends the low-power processor to the low-power processor. If the output is high or low, it will be difficult for an attacker to obtain sensor data and use the sensor data to crack the user's password. In the embodiments of the present application, there may be multiple types of active transistors, such as MOS or bipolar junction transistor (BJT). The specific types of active transistors are not limited in the embodiments of the present application.

For example, when the protection unit is an active transistor, the connection relationship between the active transistor, the sensor and the low-power processor may be as shown in FIG. 6. In the example a of Figure 6, the active transistor is used to pull the data bus high (high level) according to the unlock state flag output by the processor; in the example b of Figure 6, the active transistor is used for the root processor output The unlocked status flag bit pulls the data bus low (GND).

In addition, in the first implementation manner, the active transistor can also be implemented by other devices that can fix the bus level, which is not specifically limited in the embodiment of the present application.

The second way to achieve

In the second implementation manner, the protection unit includes an analog switch, which is coupled to the data bus between the low-power processor and the sensor, and is used for enabling when the unlocking state flag indicates that the electronic device is in the unlocking state.

That is to say, an analog switch can be added to the data bus between the sensor and the low-power processor, and the analog switch is in the enabled state by default to turn on the data bus. When it is detected that the electronic device is in the unlocking state, the processor controls the enable signal of the analog switch to make the analog switch in the disabled state, and disconnect the data bus between the sensor and the low-power processor, as shown in Figure 7. Show.

The third way to achieve

In the third implementation manner, the protection unit includes a first register, the first register is used to store the unlock state flag bit and output to the input/output (input/output, IO) interface of the low-power processor, and to control the IO interface When the unlock state flag indicates that the electronic device is in the unlocking state, it switches to a general-purpose input/output (GPIO) function.

In the third implementation manner, the IO interface of the processor and the low-power processor supports function multiplexing. Specifically, the IO interface supports the function multiplexing of the data interface and the GPIO interface. In specific implementation, the multiplexing selection signal of the IO interface can be controlled by the first register, and the IO interface is set as the data interface by default; when it is detected that the electronic device is in the unlocking state, the IO multiplexing selection signal is controlled through the first register to make the IO interface The function is switched to GPIO, so as to achieve the effect of cutting off the transmission channel of sensor data, as shown in Figure 8.

The fourth way to achieve

In the fourth implementation manner, the protection unit includes a second register, which is coupled with the processor, and is used to store the unlock state flag bit and output to the IO interface of the low-power processor, and control the IO interface in the unlock state The flag bit indicates that the electronic device is disabled when it is in the unlocking state.

In the fourth implementation manner, the IO interface of the processor and the low-power processor supports state switching of enabling and disabling. By default, the IO interface is in the enabled state. When it is detected that the electronic device is in the unlocking state, the IO interface is controlled to switch to the disabled state through the second register, so as to achieve the effect of cutting off the transmission channel of the sensor data, as shown in FIG. 9.

The fifth way to achieve

In the fifth implementation manner, the protection unit includes a power management unit (PMU), and the PMU is used to power off the sensor when the unlock state flag indicates that the electronic device is in the unlocking state. Specifically, the PMU is respectively coupled with the application processor and the sensor. If it is detected that the electronic device is unlocking, the PMU will power off the sensor under the control of the application processor, so as to cut off the sensor data transmission channel, as shown in Figure 10. Shown.

In addition, in the fifth implementation, there is an alternative implementation. If the sensor supports power-on reset through the reset signal, then when it is detected that the electronic device is in the unlocking state, the application processor can send the sensor to the RST tube of the sensor. The pin sends a reset signal to make the sensor in the reset state, or sends a de-enable signal to the ENA pin of the sensor to make the sensor in the de-enable state, so that the sensor cannot output sensor data, thereby achieving the effect of cutting off the sensor data transmission channel , As shown in Figure 11.

In summary, using the data processing device provided by the embodiment of the present application, during the password input process of the user, the processor prevents at least one software program running by the processor from accessing sensor data, so the application program that requests sensor data is convenient. Unable to obtain sensor data or only fixed fake data. Compared with the prior art, sensor data will no longer be arbitrarily obtained by software programs (applications on the secure software side or applications on the non-secure software side), and it is difficult for an attacker to crack the user password through the sensor data.

Based on the same inventive concept, an embodiment of the present application also provides an electronic device, which includes the aforementioned data processing device and sensor, as shown in FIG. 12. The data processing device may correspond to the system-on-chip shown in FIG. 1, and the sensor corresponds to the description of FIG. 1 and the previous embodiment. The electronic device can be a complete device or part of its components. This electronic device includes but is not limited to a smart phone.

Based on the same inventive concept, the embodiment of the present application also provides a data processing method in password input. As shown in Figure 13, the method includes the following steps.

S1301: The low-power processor receives sensor data output by the sensor, and transmits the sensor data to the processor.

S1302: The processor prevents at least one software program run by the processor from accessing the sensor data during the password input process by the user. The power consumption of the processor is higher than the power consumption of the low-power processor.

It should be noted that the data processing method shown in FIG. 13 can be regarded as the method performed by the aforementioned data processing device, and the implementation of the data processing method shown in FIG. 13 that is not described in detail can be referred to the relevant description in the aforementioned data processing device. .

Obviously, those skilled in the art can make various changes and modifications to the embodiments of the present application without departing from the scope of the embodiments of the present application. In this way, if these modifications and variations of the embodiments of the present application fall within the scope of the claims of the present application and their equivalent technologies, the present application also intends to include these modifications and variations.

Claims

A data processing device in password input, which is characterized in that it comprises:

A low-power processor for receiving sensor data output by the sensor and transmitting the sensor data to the processor;

The processor is coupled with the low-power processor, and is configured to prevent at least one software program run by the processor from accessing the sensor data during the password input process by the user; wherein the processing The power consumption of the processor is higher than the power consumption of the low-power processor.
The data processing device according to claim 1, wherein the at least one software program includes an application software program.
The data processing device according to claim 1 or 2, wherein the at least one software program is non-secure software.
The data processing device according to any one of claims 1 to 3, wherein the processor is specifically configured to prevent at least one software program running by the processor from accessing the sensor data: Discard the sensor data or replace the sensor data with dummy data.
The data processing device according to any one of claims 1 to 4, further comprising: a protection unit configured to prevent the low-power processor from continuing to receive the sensor data under the control of the processor ；

When the processor prevents at least one software program running by the processor from accessing the sensor data, it is specifically configured to control the protection unit to execute a function that prevents the low-power processor from continuing to receive the sensor data. operating.
5. The data processing device according to claim 5, wherein the protection unit is specifically configured to block the sensor data connection between the low power consumption processor and the sensor under the control of the processor.
The data processing device according to claim 6, wherein the protection unit is specifically configured to: disable the interface between the sensor and the low-power processor when the protection unit prevents the sensor data connection Or disabling the data transmission function of the interface or disabling the data line between the sensor and the low-power processor or setting the data line to a preset level.
7. The data processing device according to claim 6, wherein the protection unit is specifically configured to: disable the sensor when preventing the sensor from connecting to data.
8. The data processing device according to any one of claims 1 to 8, wherein the processor is further configured to determine whether the user is performing the password input.
The data processing device according to claim 9, wherein when the processor determines whether the user is performing the password input, it is specifically configured to determine whether the user is performing the password input through the indication of the status flag bit .
The data processing device according to claim 10, wherein the processor is further configured to run security software, and set the status flag when the security software detects that the user performs the password input.
The data processing device according to claim 11, wherein the security software includes unlocking software.
The data processing device according to any one of claims 1 to 12, wherein the sensor comprises one or more of the following: a compass, a gyroscope, an accelerometer, an ambient light sensor, a proximity light sensor, a barometer, Or Hall sensor.
An electronic device, characterized by comprising the data processing device and sensor according to any one of 1-13.
A data processing method in password input, which is characterized in that it includes:

The low-power processor receives sensor data output by the sensor, and transmits the sensor data to the processor;

The processor prevents at least one software program run by the processor from accessing the sensor data during the password input by the user; wherein the power consumption of the processor is higher than that of the low-power processor. Consumption.