# US 12,015,711 B2 · Data security processing terminal and system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,015,711 B2 - Document ID: US12015711B2 - Status: Granted - Kind: B2 - Application number: 17/619,725 - Filed: 2020-07-10 - Published: 2022-11-10 - Granted: 2024-06-18 - Earliest claimed: 2019-07-11 - Assignees: China Unionpay Co., Ltd. - Applicants: China Unionpay Co., Ltd. - Inventors: Jialiang Kang; Jien Zhou; Xi Shen - Web page: https://patentgrep.com/patent/US12015711B2 ## CPC - H04L 9/321: {involving a third party or a trusted authority} - G06F 16/583: using metadata automatically derived from the content - H04L 9/0618: {Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation} - H04L 9/0643: {Hash functions, e.g. MD5, SHA, HMAC or f9 MAC} - H04L 9/0827: {involving distinctive intermediate devices or communication paths (network architectures or network communication protocols using different networks H04L63/18)} - G06F 2221/031: Protect user input by software means - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract The application provides a data security processing terminal, system and method, and is related to a field of data processing. The data security processing terminal includes: an image acquisition device configured to acquire image data and transmit the image data to a Trust Execution Environment through a secure channel; an image acquisition driver operating in the Trust Execution Environment and configured to drive, in response to a drive instruction from a processor, the image acquisition device to acquire the image data; the processor operating in the Trust Execution Environment and configured to send the drive instruction to the image acquisition driver, obtain the image data, encrypt the image data using a stored first key to obtain image ciphertext data, and output the image ciphertext data. The technical solution of the present applicant can be used to ensure the security of image data. ## Claims ### Claim 1 A data security processing terminal, comprising: an image acquisition device configured to acquire image data and transmit the image data to a Trust Execution Environment through a secure channel; an image acquisition driver operating in the Trust Execution Environment and configured to drive, in response to a drive instruction, the image acquisition device to acquire the image data; a hardware processor operating in the Trust Execution Environment and configured to send the drive instruction to the image acquisition driver, obtain the image data, encrypt the image data using a stored first key to obtain image ciphertext data, and output the image ciphertext data, wherein the hardware processor is further configured to output image verification auxiliary information obtained based on the image data, and the image verification auxiliary information is used to assist in security verification of decrypted image ciphertext data. ### Claim 2 (depends on 1) The data security processing terminal according to claim 1, further comprising: a first application configured to obtain the image ciphertext data and the image verification auxiliary information, use the image verification auxiliary information as image verification information, and output the image ciphertext data and the image verification information to a server. ### Claim 3 (depends on 2) The data security processing terminal according to claim 2, wherein the image verification auxiliary information comprises the image data, and the first application is further configured to perform a recognition-related task according to the image data; or, the first application is further configured to decrypt the image ciphertext data output by the hardware processor using the stored first key, and perform the recognition-related task according to the decrypted image ciphertext data. ### Claim 4 (depends on 2) The data security processing terminal according to claim 2, wherein the first application is further configured to receive an image acquisition authority request, verify whether an initiator of the image acquisition authority request has an image acquisition authority, and send an invoking instruction to the hardware processor under a condition that it is verified that the initiator of the image acquisition authority request has the image acquisition authority; the hardware processor is further configured to send the drive instruction to the image acquisition driver in response to the invoking instruction. ### Claim 5 (depends on 2) The data security processing terminal according to claim 2, wherein the first application is further configured to acquire user identity information, output the user identity information to the server, receive a recognition result sent by the server, and process business corresponding to acquisition of the image data according to the recognition result. ### Claim 6 (depends on 1) The data security processing terminal according to claim 1, further comprising: a second application configured to obtain the image ciphertext data and the image verification auxiliary information, process the image verification auxiliary information to obtain image verification information, and output the image ciphertext data and the image verification information to a server, wherein the image verification information is used for security verification of decrypted image ciphertext data. ### Claim 7 (depends on 6) The data security processing terminal according to claim 6, wherein the image verification auxiliary information comprises the image data, and the second application is specifically configured to: calculate a digest of the image data according to a digest algorithm; calculate a signature of the digest of the image data using a stored fourth key, and use the signature of the digest of the image data as the image verification information. ### Claim 8 (depends on 6) The data security processing terminal according to claim 6, wherein the image verification auxiliary information comprises the image data, and the second application is specifically configured to: obtain second integrated data, the second integrated data comprising a task identifier of a current task for acquiring the image data and a digest of the image data calculated according to a digest algorithm; calculate an integrated signature of the second integrated data using a stored fifth key, and use the integrated signature of the second integrated data as the image verification information. ### Claim 9 (depends on 1) The data security processing terminal according to claim 1, wherein the hardware processor is further configured to: calculate a digest of the image data according to a digest algorithm; calculate a signature of the digest of the image data using a stored second key, and use the signature of the digest of the image data as the image verification auxiliary information. ### Claim 10 (depends on 1) The data security processing terminal according to claim 1, wherein the hardware processor is specifically configured to: obtain first integrated data, the first integrated data comprising a task identifier of a current task for acquiring the image data and a digest of the image data calculated according to a digest algorithm; calculate an integrated signature of the first integrated data using a stored third key, and use the integrated signature of the first integrated data as the image verification auxiliary information. ### Claim 11 (depends on 1) The data security processing terminal according to claim 1, wherein the image acquisition device is further configured to acquire live-body feature data corresponding to the image data; the image acquisition driver is further configured to drive, in response to the drive instruction, the image acquisition device to acquire the live-body feature data. ### Claim 12 (depends on 11) The data security processing terminal according to claim 11, wherein the hardware processor is further configured to: perform a live-body detection based on the live-body feature data to obtain live-body detection result data; obtain a signature of the live-body detection result data using a stored sixth key, and output the live-body detection result data and the signature of the live-body detection result data. ### Claim 13 (depends on 11) The data security processing terminal according to claim 11, wherein the hardware processor is further configured to: obtain third integrated data, the third integrated data comprising a task identifier of a current task for acquiring the image data, a digest of the image data calculated according to a digest algorithm, and live-body detection result data obtained by performing a live-body detection based on the live-body feature data; obtain an integrated signature of the third integrated data using a stored seventh key, and use the integrated signature of the third integrated data as image verification auxiliary information; output the live-body detection result data. ### Claim 14 (depends on 11) The data security processing terminal according to claim 11, wherein the data security processing terminal further comprises a second application; the hardware processor is further configured to transmit the live-body feature data to the second application; the second application is configured to perform a live-body detection based on the live-body feature data to obtain live-body detection data, obtain a signature of the live-body detection data using a stored eighth key, and output the live-body detection data and the signature of the live-body detection data. ### Claim 15 (depends on 11) The data security processing terminal according to claim 11, wherein the data security processing terminal further comprises a second application; the hardware processor is further configured to transmit the live-body feature data to the second application; the second application is configured to: obtain fourth integrated data, the fourth integrated data comprising a task identifier of a current task for acquiring the image data, a digest of the image data calculated according to a digest algorithm, and live-body detection result data obtained by performing a live-body detection based on the live-body feature data; obtain an integrated signature of the fourth integrated data using a stored ninth key, and use the integrated signature of the fourth integrated data as image verification auxiliary information; and output the live-body detection result data to a server. ### Claim 16 (depends on 1) A data security processing system, comprising: the data security processing terminal according to claim 1; a server configured to decrypt the image ciphertext data output by the data security processing terminal using the stored first key. ### Claim 17 (depends on 16) The data security processing system according to claim 16, wherein the server is further configured to perform security verification on the decrypted image ciphertext data using image verification information output by the data security processing terminal, and the image verification information is obtained based on image verification auxiliary information. ### Claim 18 (depends on 16) The data security processing system according to claim 16, wherein the data security processing terminal is further configured to output live-body detection result data and a signature of the live-body detection result data obtained by using a first target key; the server is further configured to match the signature of the live-body detection result data with the live-body detection result data based on the stored first target key, and determine that live-body detection security verification is successful under a condition that the live-body detection result data matches the signature of the live-body detection result data. ### Claim 19 (depends on 16) The data security processing system according to claim 16, wherein image verification information comprises an integrated signature of target integrated data obtained by using a second target key, the target integrated data comprises a digest of the image data, a task identifier and live-body detection result data; the data security processing terminal is further configured to output the live-body detection result data; the server is specifically configured to calculate a digest of the decrypted image ciphertext data, match the digest of the decrypted image ciphertext data with the image verification information and match the live-body detection result data with the image verification information based on the stored second target key, and determine that security verification is successful under a condition that the digest of the decrypted image ciphertext data matches the image verification information, and determine that live-body detection security verification is successful under a condition that the live-body detection result data matches the image verification information.