Patent ID: 7890993

Claim:
A secret file access authorization system with fingerprint limitation, comprising: an authorization server provided with an authorization module, which provides a fingerprint template and an authorization secret key, the authorization module including a password fingerprint unit, an environment fingerprint sampling unit, and a time fingerprint sampling unit, which are set in parallel, as well as an authorization unit, wherein the environment fingerprint can only be certified for a designated hardware environment; an encryption server provided with an encryption module, which generates a decryption secret key by accepting the authorization secret key provided by the authorization module, and produces encrypted secret files by encrypting secret files to be encrypted; a certification server provided with a certification module, which accepts the fingerprint template provided by the authorization module, accepts the decryption secret key provided by the encryption module and the authorization secret key claiming certification that is sent by a client, and judges and confirms by providing a certified decryption secret key; and at least one client machine, each of which is provided with a user module, which embeds a kernel encryption/decryption unit into a corresponding operation system kernel of the client, accepts the authorization secret key provided by the authorization module and the decryption secret key provided by the encryption module, sends the claiming of certification respectively to the certification module, opens the encryption/decryption unit with a certified authorization secret key and the certified decryption secret key which is returned after the certification module makes the certification, and reads/writes the encrypted secret files.