CN106778313A - A data verification method and device - Google Patents

Abstract

The embodiment of the invention discloses a data verification method and a device, wherein the data verification method comprises the following steps: the special processor receives a verification request, wherein the verification request carries first data needing to be verified; the special processor acquires second data from the isolated memory area, wherein the data stored in the isolated memory area is data with the importance degree greater than a preset threshold value; the dedicated processor matching the first data with the second data; and if the matching is consistent, the special processor returns the indication information that the verification is passed. By adopting the invention, the safety of the important data of the user can be effectively ensured by storing the important information in the isolated storage area.

Description

A data verification method and device

technical field

The invention relates to the technical field of communication networks, in particular to a data verification method and device.

Background technique

In daily life, terminals are widely used. Users can install various applications on the terminal to realize various functions, such as various navigation software, various shopping software, various instant messaging applications, and so on. With the openness of terminal use, various criminals can easily take advantage of the openness of terminal use and use hacking techniques to steal some important information. Therefore, users also have various concerns about the security of the terminal when using the terminal. .

For example, we will set power-on passwords, power-on fingerprints, and power-on patterns, etc. For these important information, if hackers attack, important information will be leaked, and others can control their mobile phones and steal a lot of private information in the mobile phone .

Contents of the invention

Embodiments of the present invention provide a data verification method and device, which can effectively ensure the security of important user data by storing important information in an isolated storage area.

The first aspect of the embodiments of the present invention provides a data verification method, which is applied to a terminal. The terminal includes an isolated storage area and a dedicated processor. The access authority of the isolated storage area is limited to the dedicated processor, which may include:

The dedicated processor receives a verification request, and the verification request carries first data to be verified;

The dedicated processor acquires second data from the isolated storage area, and the data stored in the isolated storage area is data whose importance is greater than a preset threshold;

the special purpose processor matches the first data with the second data;

If the matches are consistent, the dedicated processor returns indication information that the verification is passed.

The second aspect of the embodiment of the present invention provides a data verification device, which is applied to a dedicated processor of a terminal. The terminal also includes an isolated storage area, and the access right of the isolated storage area is limited to the dedicated processor, which may include :

a receiving unit, configured to receive a verification request, where the verification request carries first data to be verified;

An acquisition unit, configured to acquire second data from the isolated storage area, where the data stored in the isolated storage area is data whose importance is greater than a preset threshold;

a matching unit, configured to match the first data with the second data;

A returning unit, configured to return, by the dedicated processor, indication information of passing the verification if the first data matches the second data.

In the embodiment of the present invention, the terminal includes an isolated storage area and a dedicated processor, the access authority of the isolated storage area is limited to the dedicated processor, and the data stored in the isolated storage area is data whose importance is greater than a preset threshold. When verifying the first data that needs to be verified carried in the verification request, the second data is obtained from the isolated storage area, and the first data is matched with the second data, and if the matching is consistent, an indication message that the verification is passed is returned. This method can effectively ensure the security of important user data by storing important information in an isolated storage area.

Description of drawings

In order to illustrate the technical solutions of the embodiments of the present invention more clearly, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are some embodiments of the present invention. Ordinary technicians can also obtain other drawings based on these drawings on the premise of not paying creative work.

Fig. 1 is a schematic flow chart of the first embodiment of the data verification method provided by the embodiment of the present invention;

Fig. 2 is a schematic flow chart of the second embodiment of the data verification method provided by the embodiment of the present invention;

Fig. 3 is a schematic flow chart of the third embodiment of the data verification method provided by the embodiment of the present invention;

FIG. 4 is a diagram of an internal architecture of a terminal provided by an embodiment of the present invention;

Fig. 5 is a schematic structural diagram of a data verification device provided by an embodiment of the present invention;

Fig. 6 is a schematic structural diagram of another data verification device provided by an embodiment of the present invention.

detailed description

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

The terms "first", "second" and the like in the description and claims of the present invention and the drawings are used to distinguish different objects, rather than to describe a specific order. Furthermore, the terms "include" and "have", as well as any variations thereof, are intended to cover a non-exclusive inclusion. For example, a process, method, system, product or device comprising a series of steps or units is not limited to the listed steps or units, but optionally also includes unlisted steps or units, or optionally further includes For other steps or units inherent in these processes, methods, products or apparatuses.

Reference herein to an "embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment can be included in at least one embodiment of the present invention. The presentation of this phrase in various places in the specification are not necessarily all referring to the same embodiment, nor are independent or alternative embodiments mutually exclusive of other embodiments. It is understood explicitly and implicitly by those skilled in the art that the embodiments described herein can be combined with other embodiments.

The terminal described in the embodiment of the present invention may include a smart phone (such as an Android phone, an iOS phone, a Windows Phone, etc.), a tablet computer, a palmtop computer, a notebook computer, a mobile Internet device (MID, MobileInternet Devices) or a wearable device, etc. The above-mentioned terminals are only examples, not exhaustive, including but not limited to the above-mentioned terminals.

The data verification method and device provided by the embodiments of the present invention will be specifically described below with reference to FIG. 1 to FIG. 6 .

Please refer to FIG. 1 , which is a schematic flowchart of the first embodiment of the data verification method provided by the embodiment of the present invention. The data verification method described in this embodiment is applied to a terminal. The terminal includes an isolated storage area and a dedicated processor. The access authority of the isolated storage area is limited to the dedicated processor. As shown in the figure, the present invention implements The example data validation method includes steps:

S101. The dedicated processor receives a verification request, where the verification request carries first data to be verified;

In the embodiment of the present invention, the dedicated processor may be a newly added processor in the terminal, and the processing performance of the dedicated processor is not specifically required, for example, it may be a common processor. The dedicated processor only handles specific verification requests, such as terminal unlock verification, payment verification, and the like.

The dedicated processor may be connected with a specific preset hardware resource, that is, only receive the verification request sent by the preset hardware resource, and the preset hardware resource may include but not limited to a terminal screen, a fingerprint reading area of a terminal, and the like.

The dedicated processor receives the verification request, and the verification request carries the first data that needs to be verified. The first data may be data input by the user through preset hardware resources. For example, the first data may be fingerprint information, or the first The data may be an input password, or the first data may be a user's sliding track on the terminal screen or the like.

S102. The dedicated processor acquires second data from the isolated storage area, where the data stored in the isolated storage area is data whose importance is greater than a preset threshold;

In the embodiment of the present invention, the isolated storage area is a newly added storage area of the terminal, and the isolated storage area only stores data whose importance is greater than a preset threshold, for example, the power-on password set by the user on the terminal, the unlock pattern set by the user, and the unlock password , the user's pre-recorded unlock fingerprints, etc. If the data whose importance is greater than the preset threshold is misappropriated by hackers, it may cause relatively significant losses.

In the embodiment of the present invention, all data whose importance is greater than a preset threshold is stored in an isolated storage area, and other applications or any other hardware resources in the terminal cannot access the isolated storage area except for a dedicated processor.

After the dedicated processor receives the first data that needs to be verified, it obtains the second data from the isolated storage area. Specifically, the acquisition method may be that the dedicated processor acquires the identification of the first data, and the isolated storage area is in the When storing data, assign a unique identifier to each data to identify the type of the data, for example, the data is an unlock password type or a power-on password type, or an unlock fingerprint type, and the like. A dedicated processor retrieves second data matching the identification of the first data from the isolated storage area.

S103. The dedicated processor matches the first data with the second data;

In the embodiment of the present invention, the dedicated processor matches the first data with the second data. For example, if the first data is fingerprint data, the dedicated processor can match the acquired fingerprint data with the fingerprint data stored in the isolated storage area. fingerprint data for matching. It should be noted that, if the first data is a graphic, the dedicated processor can compare and match the acquired graphic with the stored graphic.

S104. If the matches are consistent, the dedicated processor returns indication information that the verification is passed.

In the embodiment of the present invention, if the first data matches the second data, the special processor returns the indication information that the verification is passed. It should be noted that the special processor can establish a communication connection with the general processor of the terminal. The special-purpose processor can return the indication information of passing the verification to the general-purpose processor through the communication connection, so as to trigger the general-purpose processor to perform corresponding operations, such as starting up and unlocking.

Optionally, when the first data is matched with the second data, if the matching rate reaches more than 90%, it can be considered that the first data and the second data are consistent.

In the embodiment of the present invention, the terminal includes an isolated storage area and a dedicated processor, the access authority of the isolated storage area is limited to the dedicated processor, and the data stored in the isolated storage area is data whose importance is greater than a preset threshold. When verifying the first data that needs to be verified carried in the verification request, the second data is obtained from the isolated storage area, and the first data is matched with the second data, and if the matching is consistent, an indication message that the verification is passed is returned. This method can effectively ensure the security of important user data by storing important information in an isolated storage area.

Please refer to FIG. 2 , which is a schematic flowchart of the second embodiment of the data verification method provided by the embodiment of the present invention. The data verification method described in this embodiment is applied to a terminal. The terminal includes an isolated storage area and a dedicated processor. The access authority of the isolated storage area is limited to the dedicated processor. As shown in the figure, the present invention implements The example data validation method includes steps:

S201. The dedicated processor receives a verification request, where the verification request carries first data to be verified;

S202. The dedicated processor determines whether the first data carries a preset identifier, and the preset identifier is used to identify that the first data is data processed by the dedicated processor;

In one embodiment, the special-purpose processor can establish a communication connection with the general-purpose processor of the terminal, and the general-purpose processor handles all verifications of the terminal. For terminal unlocking verification, the first data in the verification request is marked with a preset logo and sent to a dedicated processor. When the patented processor receives the verification request, it first judges whether the first data carries a preset logo.

S203. If the first data carries the preset identifier, the dedicated processor determines the target type to which the first data belongs;

In one embodiment, if the first data carries a preset identifier, it means that the verification of the first data is processed by a dedicated processor. The dedicated processor determines the object type to which the first data belongs, and the object type may include but not limited to a character string type (such as a verification password), a graphic type (such as an unlocking pattern), and a fingerprint type.

S204. The dedicated processor acquires second data corresponding to the target type from the isolated storage area.

In an embodiment, the dedicated processor obtains the second data corresponding to the target type from the isolated storage area. It should be noted that the isolated storage area can be classified and stored according to the type of the data.

S205. The dedicated processor matches the first data with the second data;

S206. If the match is consistent, the dedicated processor returns the indication information that the verification is passed.

In the embodiment of the present invention, the terminal includes an isolated storage area and a dedicated processor, the access authority of the isolated storage area is limited to the dedicated processor, and the data stored in the isolated storage area is data whose importance is greater than a preset threshold. When verifying the first data that needs to be verified carried in the verification request, the second data is obtained from the isolated storage area, and the first data is matched with the second data, and if the matching is consistent, an indication message that the verification is passed is returned. This method can effectively ensure the security of important user data by storing important information in an isolated storage area.

Please refer to FIG. 3 , which is a schematic flowchart of the third embodiment of the data verification method provided by the embodiment of the present invention. The data verification method described in this embodiment is applied to a terminal. The terminal includes an isolated storage area and a dedicated processor. The access authority of the isolated storage area is limited to the dedicated processor. As shown in the figure, the present invention implements The example data validation method includes steps:

S301. The dedicated processor receives a verification request of the preset hardware resource, the verification request is sent when the terminal is in a preset state and the preset hardware resource detects an operation behavior of a user, and the verification The first data in the request includes the operation behavior data.

Optionally, the preset hardware resource includes a terminal screen, and the verification request is sent when the terminal screen detects the user's sliding track or verification code input behavior when the terminal is in a locked screen state; or,

The preset hardware resource includes a fingerprint reading area of the terminal, and the verification request is sent when the terminal is in a lock screen state or a payment state, and the fingerprint reading area detects a user's fingerprint input behavior.

In the embodiment of the present invention, as shown in Figure 4, the dedicated processor only establishes a communication connection with the preset hardware resource, that is, the dedicated processor only processes the verification request from the preset hardware resource, and the dedicated processor establishes a communication connection with the isolated storage area. communication connection.

The dedicated processor only handles certain specific verification requests. For example, the verification request is sent when the terminal is in a preset state (including power-off state or lock-screen state, etc.), when the preset hardware resource detects the user's operation behavior, and the user's operation Behaviors can be sliding operations on preset hardware resources, password input operations, and so on. The first data is the data generated by the operation behavior. For example, if the user operation behavior is a password input operation, the first data is the input password; Enrolled fingerprints.

Optionally, when the terminal is in the locked screen state, the user enters the unlock password, and the terminal screen sends a verification request to the dedicated processor, the verification request carries the unlock password entered by the user, and the dedicated processor combines the unlock password with the unlock password stored in the isolated storage area. The stored unlocking passwords are matched, and if the matches are consistent, the dedicated processor returns an indication message that the verification is passed to the terminal screen.

S302. The dedicated processor acquires second data from the isolated storage area, where the data stored in the isolated storage area is data whose importance is greater than a preset threshold;

S303. The dedicated processor matches the first data with the second data;

S304. If the match is consistent, the dedicated processor returns the indication information that the verification is passed.

For the steps S302-S304 in the embodiment of the present invention, please refer to the steps S102-S104 in the embodiment of FIG. 1 , which will not be repeated here.

In the embodiment of the present invention, the terminal includes an isolated storage area and a dedicated processor, the access authority of the isolated storage area is limited to the dedicated processor, and the data stored in the isolated storage area is data whose importance is greater than a preset threshold. When verifying the first data that needs to be verified carried in the verification request, the second data is obtained from the isolated storage area, and the first data is matched with the second data, and if the matching is consistent, an indication message that the verification is passed is returned. This method can effectively ensure the security of important user data by storing important information in an isolated storage area.

Please refer to FIG. 5 , which is a schematic structural diagram of a data verification device provided by an embodiment of the present invention. The data verification device described in the embodiment of the present invention is applied to a dedicated processor of a terminal. The terminal also includes an isolated storage area, and the access authority of the isolated storage area is limited to the dedicated processor. As shown in the figure, the present invention The data verification device of the embodiment includes a receiving unit 10, an acquiring unit 11, a matching unit 12, and a returning unit 13;

The receiving unit 10 is configured to receive a verification request, wherein the verification request carries first data to be verified;

In the embodiment of the present invention, the dedicated processor may be a newly added processor in the terminal, and the processing performance of the dedicated processor is not specifically required, for example, it may be a common processor. The dedicated processor only handles specific verification requests, such as terminal unlock verification, payment verification, and the like.

The dedicated processor may be connected with a specific preset hardware resource, that is, only receive the verification request sent by the preset hardware resource, and the preset hardware resource may include but not limited to a terminal screen, a fingerprint reading area of a terminal, and the like.

The dedicated processor receives the verification request, and the verification request carries the first data that needs to be verified. The first data may be data input by the user through preset hardware resources. For example, the first data may be fingerprint information, or the first The data may be an input password, or the first data may be a user's sliding track on the terminal screen or the like.

Optionally, the dedicated processor establishes a connection with preset hardware resources of the terminal;

The receiving unit 10 is specifically configured to receive a verification request of the preset hardware resource, the verification request is sent when the terminal is in a preset state and the preset hardware resource detects an operation behavior of the user, the The first data in the verification request includes the operation behavior data.

Optionally, the preset hardware resource includes a terminal screen, and the verification request is sent when the terminal screen detects the user's sliding track or verification code input behavior when the terminal is in a locked screen state; or,

The preset hardware resource includes a fingerprint reading area of the terminal, and the verification request is sent when the terminal is in a lock screen state or a payment state, and the fingerprint reading area detects a user's fingerprint input behavior.

In the embodiment of the present invention, as shown in Figure 4, the dedicated processor only establishes a communication connection with the preset hardware resource, that is, the dedicated processor only processes the verification request from the preset hardware resource, and the dedicated processor establishes a communication connection with the isolated storage area. communication connection.

The dedicated processor only handles certain specific verification requests. For example, the verification request is sent when the terminal is in a preset state (including power-off state or lock-screen state, etc.), when the preset hardware resource detects the user's operation behavior, and the user's operation Behaviors can be sliding operations on preset hardware resources, password input operations, and so on. The first data is the data generated by the operation behavior. For example, if the user operation behavior is a password input operation, the first data is the input password; Enrolled fingerprints.

Optionally, when the terminal is in the locked screen state, the user enters the unlock password, and the terminal screen sends a verification request to the dedicated processor, the verification request carries the unlock password entered by the user, and the dedicated processor combines the unlock password with the unlock password stored in the isolated storage area. The stored unlocking passwords are matched, and if the matches are consistent, the dedicated processor returns an indication message that the verification is passed to the terminal screen.

An acquisition unit 11, configured to acquire second data from the isolated storage area, where the data stored in the isolated storage area is data whose importance is greater than a preset threshold;

In the embodiment of the present invention, the isolated storage area is a newly added storage area of the terminal, and the isolated storage area only stores data whose importance is greater than a preset threshold, for example, the power-on password set by the user on the terminal, the unlock pattern set by the user, and the unlock password , the user's pre-recorded unlock fingerprints, etc. If the data whose importance is greater than the preset threshold is misappropriated by hackers, it may cause relatively significant losses.

In the embodiment of the present invention, all data whose importance is greater than a preset threshold is stored in an isolated storage area, and other applications or any other hardware resources in the terminal cannot access the isolated storage area except for a dedicated processor.

After the dedicated processor receives the first data that needs to be verified, it obtains the second data from the isolated storage area. Specifically, the acquisition method may be that the dedicated processor acquires the identification of the first data, and the isolated storage area is in the When storing data, assign a unique identifier to each data to identify the type of the data, for example, the data is an unlock password type or a power-on password type, or an unlock fingerprint type, and the like. A dedicated processor retrieves second data matching the identification of the first data from the isolated storage area.

a matching unit 12, configured to match the first data with the second data;

In the embodiment of the present invention, the dedicated processor matches the first data with the second data. For example, if the first data is fingerprint data, the dedicated processor can match the acquired fingerprint data with the fingerprint data stored in the isolated storage area. fingerprint data for matching. It should be noted that, if the first data is a graphic, the dedicated processor can compare and match the acquired graphic with the stored graphic.

The return unit 13 is configured to return the indication information that the verification is passed if the first data matches the second data.

In the embodiment of the present invention, if the first data matches the second data, the special processor returns the indication information that the verification is passed. It should be noted that the special processor can establish a communication connection with the general processor of the terminal. The special-purpose processor can return the indication information of passing the verification to the general-purpose processor through the communication connection, so as to trigger the general-purpose processor to perform corresponding operations, such as starting up and unlocking.

Optionally, when the first data is matched with the second data, if the matching rate reaches more than 90%, it can be considered that the first data and the second data are consistent.

In the embodiment of the present invention, the terminal includes an isolated storage area and a dedicated processor, the access authority of the isolated storage area is limited to the dedicated processor, and the data stored in the isolated storage area is data whose importance is greater than a preset threshold. When verifying the first data that needs to be verified carried in the verification request, the second data is obtained from the isolated storage area, and the first data is matched with the second data, and if the matching is consistent, an indication message that the verification is passed is returned. This method can effectively ensure the security of important user data by storing important information in an isolated storage area.

Please refer to FIG. 6 , which is a schematic structural diagram of another data verification device provided by an embodiment of the present invention. The data verification device described in the embodiment of the present invention is applied to a dedicated processor of a terminal. The terminal also includes an isolated storage area, and the access authority of the isolated storage area is limited to the dedicated processor. As shown in the figure, the present invention The data verification device of the embodiment includes a receiving unit 20, a judging unit 21, a determining unit 22, an acquiring unit 23, a matching unit 24, and a returning unit 25;

The receiving unit 20 is configured to receive a verification request, wherein the verification request carries first data to be verified;

A judging unit 21, configured to judge whether the first data carries a preset identifier, and the preset identifier is used to identify that the first data is data processed by the dedicated processor;

In one embodiment, the special-purpose processor can establish a communication connection with the general-purpose processor of the terminal, and the general-purpose processor handles all verifications of the terminal. For terminal unlocking verification, the first data in the verification request is marked with a preset logo and sent to a dedicated processor. When the patented processor receives the verification request, it first judges whether the first data carries a preset logo.

A determining unit 22, configured to determine the target type to which the first data belongs if the first data carries the preset identifier;

In one embodiment, if the first data carries a preset identifier, it means that the verification of the first data is processed by a dedicated processor. The dedicated processor determines the object type to which the first data belongs, and the object type may include but not limited to a character string type (such as a verification password), a graphic type (such as an unlocking pattern), and a fingerprint type.

The acquiring unit 23 is specifically configured to acquire second data corresponding to the target type from the isolated storage area.

In an embodiment, the dedicated processor obtains the second data corresponding to the target type from the isolated storage area. It should be noted that the isolated storage area can be classified and stored according to the type of the data.

a matching unit 24, configured to match the first data with the second data;

The return unit 25 is configured to return, by the dedicated processor, indication information of passing the verification if the first data matches the second data.

In the embodiment of the present invention, the terminal includes an isolated storage area and a dedicated processor, the access authority of the isolated storage area is limited to the dedicated processor, and the data stored in the isolated storage area is data whose importance is greater than a preset threshold. When verifying the first data that needs to be verified carried in the verification request, the second data is obtained from the isolated storage area, and the first data is matched with the second data, and if the matching is consistent, an indication message that the verification is passed is returned. This method can effectively ensure the security of important user data by storing important information in an isolated storage area.

An embodiment of the present invention also provides a computer storage medium, wherein the computer storage medium can store a program, and when the program is executed, some or all steps of any data verification method described in the above method embodiments are included.

Although the present invention has been described in conjunction with various embodiments herein, in the process of implementing the claimed invention, those skilled in the art can understand and Other variations of the disclosed embodiments are implemented. In the claims, the word "comprising" does not exclude other components or steps, and "a" or "an" does not exclude a plurality. A single processor or other unit may fulfill the functions of several items recited in the claims. The mere fact that certain measures are recited in mutually different dependent claims does not indicate that these measures cannot be combined to advantage.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, devices (devices), or computer program products. Accordingly, the present invention can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein. The computer program is stored/distributed on suitable media, supplied with or as part of other hardware, and may also take other forms of distribution, such as via the Internet or other wired or wireless telecommunication systems.

The present invention is described with reference to flowcharts and/or block diagrams of methods, apparatus (device) and computer program products according to embodiments of the present invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

Although the invention has been described in conjunction with specific features and embodiments thereof, it will be apparent that various modifications and combinations can be made therein without departing from the spirit and scope of the invention. Accordingly, the specification and drawings are merely illustrative of the invention as defined by the appended claims and are deemed to cover any and all modifications, variations, combinations or equivalents within the scope of the invention. Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalent technologies, the present invention also intends to include these modifications and variations.

Claims (13)

1. A data verification method applied to a terminal, the terminal comprising an isolated storage area and a dedicated processor, the access authority of the isolated storage area being limited to the dedicated processor, characterized in that it comprises: The dedicated processor receives a verification request, and the verification request carries first data to be verified; The dedicated processor acquires second data from the isolated storage area, and the data stored in the isolated storage area is data whose importance is greater than a preset threshold; the special purpose processor matches the first data with the second data; If the matches are consistent, the dedicated processor returns indication information that the verification is passed. 2. The method according to claim 1, wherein, before the special processor obtains the second data from the isolated storage area, further comprising: The dedicated processor determines whether the first data carries a preset identifier, and the preset identifier is used to identify that the first data is data processed by the dedicated processor; If the first data carries the preset identifier, the dedicated processor executes the step of acquiring second data from the isolated storage area. 3. The method according to claim 1 or 2, wherein before the special-purpose processor obtains the second data from the isolated storage area, further comprising: the dedicated processor determines the object type to which the first data belongs; The dedicated processor obtains second data from the isolated storage area, including: The dedicated processor retrieves second data corresponding to the target type from the isolated storage area. 4. The method according to claim 3, wherein the target type includes any one of a character string type, a graphic type, and a fingerprint type. 5. The method according to claim 1, wherein the dedicated processor establishes a connection with a preset hardware resource of the terminal; The dedicated processor receives a verification request comprising: The dedicated processor receives the verification request of the preset hardware resource, the verification request is sent when the terminal is in a preset state, and the preset hardware resource detects an operation behavior of the user, and the verification request includes The first data includes the operation behavior data. 6. The method according to claim 5, wherein the preset hardware resources include a terminal screen, the verification request is that the terminal is in a locked screen state, and the terminal screen detects a user's sliding track or verifies sent when the code is entered; or, The preset hardware resource includes a fingerprint reading area of the terminal, and the verification request is sent when the terminal is in a lock screen state or a payment state, and the fingerprint reading area detects a user's fingerprint input behavior. 7. A data verification device, applied to a dedicated processor of a terminal, the terminal also includes an isolated storage area, the access authority of the isolated storage area is limited to the dedicated processor, characterized in that it includes: a receiving unit, configured to receive a verification request, where the verification request carries first data to be verified; An acquisition unit, configured to acquire second data from the isolated storage area, where the data stored in the isolated storage area is data whose importance is greater than a preset threshold; a matching unit, configured to match the first data with the second data; A returning unit, configured to return, by the dedicated processor, indication information of passing the verification if the first data matches the second data. 8. The device of claim 7, further comprising: a judging unit, configured to judge whether the first data carries a preset identifier, and the preset identifier is used to identify that the first data is data processed by the dedicated processor; The obtaining unit is specifically configured to obtain the second data from the isolated storage area if the first data carries the preset identifier. 9. The device according to claim 7 or 8, wherein the device further comprises: a determining unit, configured to determine the target type to which the first data belongs; The acquiring unit is specifically configured to acquire second data corresponding to the target type from the isolated storage area. 10. The device according to claim 9, wherein the target type includes any one of a character string type, a graphic type, and a fingerprint type. 11. The device according to claim 7, wherein the dedicated processor establishes a connection with preset hardware resources of the terminal; The receiving unit is specifically configured to receive a verification request of the preset hardware resource, the verification request is sent when the terminal is in a preset state and the preset hardware resource detects an operation behavior of a user, and the verification request is The first data in the request includes the operation behavior data. 12. The device according to claim 11, wherein the preset hardware resources include a terminal screen, the verification request is that the terminal is in a locked screen state, and the terminal screen detects a user's sliding track or verifies sent when the code is entered; or, The preset hardware resource includes a fingerprint reading area of the terminal, and the verification request is sent when the terminal is in a lock screen state or a payment state, and the fingerprint reading area detects a user's fingerprint input behavior. 13. A terminal, characterized in that it includes a common storage area, an isolated storage area, a special-purpose processor and a general-purpose processor, and both the special-purpose processor and the general-purpose processor have permission to access the common storage area, so The access authority of the isolated storage area is limited to the dedicated processor, and the data stored in the isolated storage area is data whose importance is greater than a preset threshold.