CN107403114A - A kind of structure and method for locking input - Google Patents

Abstract

The invention discloses a structure and method for locking input, which is applied to a computer system or an electronic system including a mobile phone, and includes a locking module, which is used to lock system input, and in the locked state, any device input of the system is in an invalid state The control module is used to logically control the locking and unlocking of the system input. By judging whether the current system state is in a safe state, the system performs normal device input when it is in a safe state, and the system locks the device input through the locking module when it is not in a safe state. . Compared with the prior art, the lock input structure and method of the present invention can effectively prevent attack methods such as credentialing, avoid data loss caused by password leakage, avoid complicated secondary verification process, and effectively improve The system is safe and practical, has a wide range of applications and is easy to promote.

Description

A structure and method for locking input

technical field

The invention relates to the technical field of information security, in particular to a structure and method that can be applied to a lock input of a computer system or a mobile phone system.

Background technique

Computers (computers) and mobile phones have become indispensable and important devices in daily work and life. These electronic devices have improved our office efficiency and facilitated our production and life through instant interconnection and information sharing. In our work, production, and life, a large amount of private data information is stored in corresponding electronic devices. How to prevent criminals from spying and protect our information security has become a serious issue of common concern to the whole society and various fields. .

At this stage, in order to avoid other people’s snooping, the most common method used by the system is to introduce a user name and secret key authentication mechanism. If the user wants to access the data, he needs to verify it. If the authentication is successful, he can access it.

At present, the user name and secret key authentication mechanism is the most widely used security method, but unfortunately this authentication mechanism is not safe, the user's password is leaked, and malicious credential databases can be easily cracked to log in and obtain data, resulting in the loss of private information .

The current security method is shown in Figure 1: first obtain the data information request, and then perform password authentication, and then obtain the data after the password authentication is successful. To obtain private information.

To sum up, the existing technology can no longer meet people's needs for security, and then there are enhanced protection strategies, the most extensive of which is secondary authentication, which enhances security to a certain extent, but relies on other smart electronic devices , and the safety of the device itself as a secondary authentication cannot be guaranteed. For example, through SMS secondary authentication, an attacker can successfully invade the system by disguising the base station or hacking the mobile phone to obtain the secondary authentication code without the user's awareness.

To sum up, the security system is still easy to be breached, and there is no effective prevention of intrusion.

Based on this, there is an urgent need for a solution that can effectively improve system security performance.

Contents of the invention

The technical task of the present invention is to provide a structure and method that can effectively improve system security performance and lock input in view of the above deficiencies.

A structure for locking input, applied to a computer system or an electronic system including a mobile phone, the structure comprising,

The locking module is used to lock the system input, and any device input of the system is invalid in the locked state;

The control module is used to logically control the locking and unlocking of the system input. By judging whether the current system state is in a safe state, the system performs normal device input when it is in a safe state, and the system locks device input through the locking module when it is not in a safe state.

The devices used for system input include keyboard, mouse, touchpad, and network. When the locking module locks the system, the device input is discarded, that is, the system and the device are isolated from each other.

The process of system input is as follows: first, the content input by the device is obtained by the input device driver, and then the input content is converted into a kernel general key value by the input content processing module, and finally the input content is distributed to the application program; when the locking module locks the When the equipment of the system is input, the function of locking the input is achieved by inserting the locking module before the distribution of the input content.

The locking module is inserted into the input content distribution stage through a hook mechanism, specifically: the locking module inserts a checkpoint hook point on the content processing flow, and the processing flow refers to whether to allow or not according to the judgment of the control module before the input content is distributed. This content continues to be distributed to prevent entry while the system is locked down.

The process of the control module judging whether the current system status is safe or not is: the control module takes whether there is a security device connected to the system as a trigger condition, when a security device is connected to the system, and after the security device passes the security authentication, the current system is in a safe state. Status, unlock the device, the system can input content through the device; when no security device is connected to the system, or the security device connected to the system has not passed the security authentication, the current system is in an unsafe state, the device is locked, and the system cannot input content through the device.

The security authentication is fingerprint authentication, that is, when the security device is connected to the system, check whether the fingerprint information of the security device itself matches the fingerprint information entered in the system, and when they match completely, trigger the control module to unlock the device, and the input The content is distributed normally, otherwise the steps of content distribution cannot be performed.

A method of locking input, based on the structure of the above locking input, the implementation process is as follows: firstly, the control module judges whether the state of the system is safe, and when the system is in a safe state, the system performs normal device input, that is, the system and the input device are in a connected state , the device can normally input content to the system; when the system is in an unsafe state, the device input is locked through the locking module to isolate the system from the device.

When the system is in a safe state, the normal device input process of the system is as follows: first input content through the device; then obtain the input content from the input device driver, and then convert the input content into kernel general key values through the input content processing module, Finally the input is distributed to the application.

When the system is in a non-secure state, the process of locking the system so that it cannot perform device input is: insert the locking module before the input content distribution through the hook mechanism, so that the system cannot enter the step of content distribution, so as to achieve the function of locking input.

The specific process of inserting through the hook mechanism is: the lock module inserts a checkpoint hook point before the input content is distributed, and decides whether to allow the content to continue to be distributed according to the judgment of the control module, so as to prohibit input under the system lock state.

Compared with the prior art, a locking input structure and method of the present invention has the following beneficial effects:

A structure and method for locking input of the present invention, the locking module in the method is inserted into the hook process in the kernel module, directly and effectively locking the distribution of the input, thereby realizing the locking of the input; the control module can automatically calculate through the device parameters The fingerprint information of the device does not depend on the key and other information stored in the external device, which effectively prevents attacks such as credentialing, avoids data loss caused by password leakage, and avoids the complicated secondary verification process. The safety of the system is improved, the practicability is strong, the scope of application is wide, and it is easy to popularize.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can also obtain other drawings according to the provided drawings without creative work.

Accompanying drawing 1 is the implementation flowchart of information security means in the prior art.

Accompanying drawing 2 is the concrete implementation schematic diagram of the structure of the present invention.

Accompanying drawing 3 is the implementation flowchart of the method of the present invention.

Accompanying drawing 4 is the concrete implementation flowchart of the method of the present invention.

Accompanying drawing 5 is an example diagram of the logical judgment process of the control module in the method of the present invention.

detailed description

In order to enable those skilled in the art to better understand the solutions of the present invention, the present invention will be further described in detail below in conjunction with specific embodiments. Apparently, the described embodiments are only some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

As shown in Figure 2, a locking input structure is applied to a computer system or an electronic system including a mobile phone, and its structure includes,

The locking module is used to lock the system input. In the locked state, any device input to the system is invalid. That is to say, in the locked state, the input control to the system such as keyboard and mouse input and remote input control is discarded. Do a good job of the isolation characteristics of the system.

The control module is used to logically control the locking and unlocking of the system input. By judging whether the current system state is in a safe state, the system performs normal device input when it is in a safe state, and the system locks device input through the locking module when it is not in a safe state.

The devices used for system input include keyboard, mouse, touchpad, and network. When the locking module locks the system, the device input is discarded, that is, the system and the device are isolated from each other.

The process of system input is as follows: first, the content input by the device is obtained by the input device driver, and then the input content is converted into a kernel general key value by the input content processing module, and finally the input content is distributed to the application program; when the locking module locks the When the equipment of the system is input, the function of locking the input is achieved by inserting the locking module before the distribution of the input content.

Taking keyboard input as an example below, the general processing flow of the input device by the system kernel is as follows: keyboard input The keyboard driver takes input and converts it to kernel-generic key-value codes Kernel input event processing (such as packaging into a specific format) Input time distribution (e.g. write input times to a file) The application gets the input information (key value) from the file.

The locking module is inserted into the input content distribution stage through a hook mechanism, specifically: the locking module inserts a checkpoint hook point on the content processing flow, and the processing flow refers to whether to allow or not according to the judgment of the control module before the input content is distributed. This content continues to be distributed to prevent entry while the system is locked down.

The process of the control module judging whether the current system status is safe or not is: the control module takes whether there is a security device connected to the system as a trigger condition, when a security device is connected to the system, and after the security device passes the security authentication, the current system is in a safe state. Status, unlock the device, the system can input content through the device; when no security device is connected to the system, or the security device connected to the system has not passed the security authentication, the current system is in an unsafe state, the device is locked, and the system cannot input content through the device.

The security authentication is fingerprint authentication, that is, when the security device is connected to the system, check whether the fingerprint information of the security device itself matches the fingerprint information entered in the system, and when they match completely, trigger the control module to unlock the device, and the input The content is distributed normally, otherwise the steps of content distribution cannot be performed.

A method for locking input, as shown in accompanying drawing 3, based on the structure of the above-mentioned locking input, its implementation process is:

Install the above-mentioned locking input structure in a computer system or a mobile phone system.

Insert the peripherals that you want to be the trigger device, generally including U disk, wifi network card and other devices that can support hot swapping.

Open the setting interface, select a specific trigger device, and check whether the system can match the trigger device.

Finally lock or unlock.

Further, as shown in Figure 4 and Figure 5, in this method, firstly, the control module judges whether the state of the system is safe, and when the system is in a safe state, the system performs normal device input, that is, the system is connected to the input device, The device can normally input content to the system; when the system is in an unsafe state, the device input is locked through the locking module to isolate the system from the device.

When the system is in a safe state, the normal device input process of the system is as follows: first input content through the device; then obtain the input content from the input device driver, and then convert the input content into kernel general key values through the input content processing module, Finally the input is distributed to the application.

When the system is in a non-secure state, the process of locking the system so that it cannot perform device input is: insert the locking module before the input content distribution through the hook mechanism, so that the system cannot enter the step of content distribution, so as to achieve the function of locking input.

The specific process of inserting through the hook mechanism is: the lock module inserts a checkpoint hook point before the input content is distributed, and decides whether to allow the content to continue to be distributed according to the judgment of the control module, so as to prohibit input under the system lock state.

The present invention inserts a specific security module into the system kernel, locks the system input when needed, that is, in the locked state, any input information is discarded, the main security mechanism works with the kernel state, and the security of the security system itself is obtained. greatly improved. Compared with the existing scheme, even if the user password is leaked, if the system input is still locked, the attacker still cannot control the system and cannot log in by entering the password. Even if it is cracked through a malicious credentialing method, it cannot be realized because it cannot be input to the system, which effectively improves system security. Again, the present invention avoids complex secondary authentication mechanisms (such as short messages, phone calls, etc.), and prevents the possibility of re-intrusion.

Through the above specific implementation manners, those skilled in the technical field can easily realize the present invention. In this paper, specific examples are used to illustrate the principle and implementation of the present invention, and the descriptions of the above embodiments are only used to help understand the method and core idea of the present invention. It should be pointed out that for those skilled in the art, without departing from the principles of the present invention, some improvements and modifications can be made to the present invention, and these improvements and modifications also fall within the protection scope of the claims of the present invention.

Claims (10)

1. A structure for locking input, applied to a computer system or an electronic system comprising a mobile phone, characterized in that its structure comprises, The locking module is used to lock the system input, and any device input of the system is invalid in the locked state; The control module is used to logically control the locking and unlocking of the system input. By judging whether the current system state is in a safe state, the system performs normal device input when it is in a safe state, and the system locks device input through the locking module when it is not in a safe state. 2. A structure for locking input according to claim 1, wherein the equipment used for system input includes a keyboard, a mouse, a touch panel, and a network, and when the locking module locks the system, the equipment input is in a discarded state, That is, the system and equipment are isolated from each other. 3. The structure of a kind of locking input according to claim 1, characterized in that, the process of the system input is: at first the content input by the device is acquired by the input device driver, and then the input content is converted into Kernel general key value, and finally distribute the input content to the application program; when the locking module locks the device input of the system, the function of locking the input can be achieved by inserting the locking module before the input content distribution. 4. A structure for locking input according to claim 3, wherein the locking module is inserted into the input content distribution stage through a hook mechanism, specifically: the locking module inserts a checkpoint hookpoint on the content processing flow, This processing flow means that before the input content is distributed, it is determined whether to allow the content to continue to be distributed according to the judgment of the control module, so as to prohibit input in the system locked state. 5. A lock input structure according to claim 1, characterized in that the process of the control module judging whether the current system state is safe or not is: the control module takes whether there is a security device connected to the system as a trigger condition, when there is When a security device is connected to the system, and the security device has passed security authentication, the current system is in a secure state, unlock the device, and the system can input content through the device; when no security device is connected to the system, or the security device connected to the system has not passed the security After authentication, the current system is in a non-secure state, the device is locked, and the system cannot input content through the device. 6. A lock input structure according to claim 5, characterized in that the security authentication is fingerprint authentication, that is, after the security device is connected to the system, the fingerprint information of the security device itself and the fingerprint entered in the system can be checked Whether the information matches, when completely matched, the control module is triggered to unlock the device, and the content input by the device is distributed normally, otherwise the step of content distribution cannot be performed. 7. A method for locking input, characterized in that, based on the structure of the above-mentioned locking input, its implementation process is: first judge whether the state of the system is safe by the control module, and when the system is in a safe state, the system performs normal equipment input, that is, the system It is connected to the input device, and the device can input content to the system normally; when the system is in an unsafe state, the device input is locked by the locking module to isolate the system from the device. 8. A method of locking input according to claim 7, characterized in that, when the system is in a safe state, the process of the system performing normal device input is as follows: first input content through the device; then input the input content The device driver obtains, and then converts the input content into kernel general key values through the input content processing module, and finally distributes the input content to the application program. 9. A method of locking input according to claim 7, characterized in that, when the system is in a non-safe state, the process of locking the system so that it cannot perform device input is: insert the locking module into the input content through the hook mechanism Before distribution, the system cannot enter the step of content distribution, so as to achieve the function of locking input. 10. A method for locking input according to claim 9, characterized in that the specific process of inserting through the hook mechanism is: the locking module inserts a checkpoint hook point before the input content is distributed, and decides according to the judgment of the control module Whether to allow this content to continue to be distributed, so that input is prohibited when the system is locked.