# US 2019/0319795 A1 · Method, apparatus and system for establishing biometric identification information transmission and storage medium

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0319795 A1
- Document ID: US20190319795A1
- Status: Published application
- Kind: A1
- Application number: 16/453,996
- Filed: 2019-06-26
- Published: 2019-10-17
- Earliest claimed: 2017-11-21
- Assignees: Shenzhen Goodix Technology Co., Ltd.
- Applicants: Shenzhen Goodix Technology Co., Ltd.
- Inventors: Weiguo Kong; Bing Wang; Wenbin Sun
- Web page: https://patentgrep.com/patent/US20190319795A1

## CPC

- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- G06F 7/58: Random or pseudo-random number generators
- H04L 9/0618: {Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation}
- H04L 9/0869: {involving random numbers or seeds}
- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 9/14: using a plurality of keys or algorithms
- H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70)
- H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

The present application provides a method, an apparatus and a system for establishing biometric identification information transmission and a storage medium, including: transmitting a first random number to a driving unit; receiving a second random number and a first identity verification information from the driving unit; generating a key of a first session according to the first random number, the second random number and a pre-shared key, and generating a second identity verification information according to the key of the first session, the first random number and the second random number; transmitting the second identity verification information to the driving unit; and determining, according to the first identity verification information and the second identity verification information, whether a session between a biometric identification apparatus and the driving unit is established successfully. Therefore system overheads is reduced.

## Claims

### Claim 1

A method for establishing biometric identification information transmission, comprising:
transmitting a first random number to a driving unit;
receiving a second random number and a first identity verification information from the driving unit;
generating a key of a first session according to the first random number, the second random number and a pre-shared key, and generating a second identity verification information according to the key of the first session, the first random number and the second random number;
transmitting the second identity verification information to the driving unit; and
determining, according to the first identity verification information and the second identity verification information, whether a session between a biometric identification apparatus and the driving unit is established successfully.

### Claim 2 (depends on 1)

The method according to claim 1, wherein the key of the first session comprises at least one key of a second session, and the method further comprising:
encrypting the biometric identification information by using the key of the first session or the key of the second session to generate a first ciphertext when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully; and
transmitting the first ciphertext to the driving unit.

### Claim 3 (depends on 2)

The method according to claim 2, wherein the key of the first session further comprises a first value and a key of a first algorithm, wherein the first value is used to determine a quantity of packets transmitted to the driving unit, and the first algorithm is an algorithm for generating the second identity verification information;
the method further comprising:
calculating the key of the first algorithm, the first ciphertext and the first value by using the first algorithm to obtain a first check value;
transmitting the first check value and the first ciphertext to the driving unit, wherein the first check value is used to determine whether the first ciphertext is valid.

### Claim 4 (depends on 3)

The method according to claim 3, wherein the method further comprises:
receiving a second ciphertext from the driving unit when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully; and
decrypting the second ciphertext by using the key of the first session or the key of the second session.

### Claim 5 (depends on 4)

The method according to claim 4, wherein the key of the first session further comprises a second value, wherein the second value is used to determine a quantity of packets received from the driving unit;
the method further comprising:
receiving a second check value transmitted by the driving unit;
calculating the key of the first algorithm, the second ciphertext and the second value by using the first algorithm to obtain a third check value; and
determining whether the second ciphertext is valid according to whether the second check value and the third check value being the same.

### Claim 6

A method for establishing biometric identification information transmission, comprising:
transmitting a second random number to a biometric identification apparatus;
receiving a first random number and a second identity verification information transmitted by the biometric identification apparatus;
generating a key of a third session according to the first random number, the second random number and a pre-shared key, and generating a first identity verification information according to the key of the third session, the first random number and the second random number;
transmitting the first identity verification information to the biometric identification apparatus; and
determining, according to the first identity verification information and the second identity verification information, whether a session between the biometric identification apparatus and a driving unit is established successfully.

### Claim 7 (depends on 6)

The method according to claim 6, wherein the key of the third session comprises at least one key of a fourth session; the method further comprising:
encrypting the biometric identification information by using the key of the third session or the key of the fourth session to generate a second ciphertext when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully; and
transmitting the second ciphertext to the biometric identification apparatus.

### Claim 8 (depends on 7)

The method according to claim 7, wherein the key of the third session further comprises a third value and a key of a first algorithm, wherein the third value is used to determine a quantity of packets transmitted to the biometric identification apparatus, and the first algorithm is an algorithm for generating the first identity verification information;
the method further comprising:
calculating the key of the first algorithm, the second ciphertext and the third value by using the first algorithm to obtain a second check value; and
transmitting the second check value and the second ciphertext to the biometric identification apparatus, wherein the second check value is used to determine whether the second ciphertext is valid.

### Claim 9 (depends on 8)

The method according to claim 8, wherein the method further comprises:
receiving a first ciphertext from the biometric identification apparatus when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully; and
decrypting the first ciphertext by using the key of the third session or the key of the fourth session.

### Claim 10 (depends on 9)

The method according to claim 9, wherein the key of the third session further comprises a fourth value, wherein the fourth value is used to determine a quantity of packets received from the biometric identification apparatus;
the method further comprising:
receiving a first check value from the biometric identification apparatus;
calculating the key of the first algorithm, the first ciphertext and the fourth value by using the first algorithm to obtain a fourth check value; and
determining whether the first ciphertext is valid according to whether the first check value and the fourth check value being the same.

### Claim 11

A system for establishing biometric identification information transmission, comprising: a biometric identification apparatus and a driving unit;
wherein the biometric identification apparatus is configured to:
transmit a first random number to the driving unit;
receive a second random number and a first identity verification information from the driving unit;
generate a key of a first session according to the first random number, the second random number and a pre-shared key, and generate a second identity verification information according to the key of the first session, the first random number and the second random number;
transmit the second identity verification information to the driving unit; and
determine, according to the first identity verification information and the second identity verification information, whether a session between the biometric identification apparatus and the driving unit is established successfully;
and wherein the driving unit is configured to:
transmit the second random number to the biometric identification apparatus;
receive the first random number and the second identity verification information transmitted by the biometric identification apparatus;
generate a key of a third session according to the first random number, the second random number and the pre-shared key, and generate a first identity verification information according to the key of the third session, the first random number and the second random number; and
transmit the first identity verification information to the biometric identification apparatus;
determine, according to the first identity verification information and the second identity verification information, whether a session between the biometric identification apparatus and the driving unit is established successfully.

### Claim 12 (depends on 11)

The system according to claim 11, wherein the key of the first session comprises at least one key of a second session, and the biometric identification apparatus is further configured to:
encrypt the biometric identification information by using the key of the first session or the key of the second session to generate a first ciphertext when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully, and transmit the first ciphertext to the driving unit.

### Claim 13 (depends on 12)

The system according to claim 12, wherein the key of the first session further comprises a first value and a key of a first algorithm, wherein the first value is used to determine a quantity of packets transmitted by the biometric identification apparatus to the driving unit, and the first algorithm is an algorithm for generating the second identity verification information;
the biometric identification apparatus is further configured to:
calculate the key of the first algorithm, the first ciphertext and the first value by using the first algorithm to obtain a first check value;
transmit the first check value and the first ciphertext to the driving unit, wherein the first check value is used to determine whether the first ciphertext is valid.

### Claim 14 (depends on 13)

The system according to claim 13, wherein the biometric identification apparatus is further configured to:
receive a second ciphertext from the driving unit when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully; and
decrypt the second ciphertext by using the key of the first session or the key of the second session.

### Claim 15 (depends on 14)

The system according to claim 14, wherein the key of the first session further comprises a second value, wherein the second value is used to determine a quantity of packets received from the driving unit by the biometric identification apparatus;
the biometric identification apparatus is further configured to:
receive a second check value transmitted by the driving unit;
calculate the key of the first algorithm, the second ciphertext and the second value by using the first algorithm to obtain a third check value; and
determine whether the second ciphertext is valid according to whether the second check value and the third check value being the same.

### Claim 16 (depends on 11)

The system according to claim 11, wherein the key of the third session comprises at least one key of a fourth session;
the driving unit is further configured to:
encrypt the biometric identification information by using the key of the third session or the key of the fourth session to generate a second ciphertext when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully, and transmit the second ciphertext to the biometric identification apparatus.

### Claim 17 (depends on 16)

The system according to claim 16, wherein the key of the third session further comprises a third value and a key of a first algorithm, wherein the third value is used to determine a quantity of packets transmitted to the biometric identification apparatus by the driving unit, and the first algorithm is an algorithm for generating the first identity verification information;
the driving unit is further configured to:
calculate the key of the first algorithm, the second ciphertext and the third value by using the first algorithm to obtain a second check value; and
transmit the second check value and the second ciphertext to the biometric identification apparatus, wherein the second check value is used to determine whether the second ciphertext is valid.

### Claim 18 (depends on 17)

The system according to claim 17, wherein the driving unit is further configured to:
receive a first ciphertext from the biometric identification apparatus when it is determined that the session between the biometric identification apparatus and the driving unit is established successfully; and
decrypt the first ciphertext by using the key of the third session or the key of the fourth session.

### Claim 19 (depends on 18)

The system according to claim 18, wherein the key of the third session further comprises a fourth value, wherein the fourth value is used to determine a quantity of packets received from the biometric identification apparatus by the driving unit;
the driving unit is further configured to:
receive a first check value from the biometric identification apparatus;
calculate the key of the first algorithm, the first ciphertext and the fourth value by using the first algorithm to obtain a fourth check value; and
determine whether the first ciphertext is valid according to whether the first check value and the fourth check value being the same.

### Claim 20 (depends on 1)

A biometric identification apparatus, comprising: a sensor and a micro control unit, wherein the sensor is configured to collect biometric identification information, and the micro control unit is configured to perform the method according to claim 1 to establish a biometric identification information transmission channel between the biometric identification apparatus and a driving unit, the biometric identification information transmission channel being used to transmit the biometric identification information.