CN102664887A - Input information protecting method, device and system - Google Patents

Abstract

The embodiment of the invention provides an input information protecting method, an input information protecting device and an input information protecting system, belonging to the technical field of information security. The input information protecting method comprises the following steps: receiving a protocol data unit which is sent by a host computer by an input information security protecting device, wherein the protocol data unit comprises encryption algorithm parameters; according to corresponding relations of preset encryption algorithm parameters and encryption algorithms, selecting the encryption algorithms corresponding to the encryption algorithm parameters in the protocol data unit; acquiring data input by a user; encrypting the data input by the user by the selected encryption algorithms; and sending the encrypted data to the host computer. Multiple corresponding rations of the encryption algorithms and the encryption algorithm parameters are arranged in the input information security protecting device, the protocol data unit comprises the encryption algorithm parameters corresponding to a network service program, and thus the encryption algorithms corresponding to the network service program are appointed, so that the input information protecting method, the input information protecting device and the input information protecting system are good in university and can ensure the security of information input by the user.

Description

Input information protection method, device and system

technical field

The present invention relates to the technical field of information security, in particular to an input information protection method, device and system.

Background technique

Nowadays, the network plays an important role in people's daily life, and various network services are gradually penetrating into people's study, life and work. However, the increasing seriousness of network security issues has brought a lot of inconvenience to people's daily life, especially the information entered by users through keyboards, such as account numbers and passwords, is stolen by Trojan horse viruses.

In the prior art, encryption is mainly used to prevent the information input by the user from being stolen. Specifically, the information input by the user may be encrypted by a dedicated input information encryption device and then sent to the host, and then sent to the network server.

In the process of realizing the present invention, the inventor found that the prior art has at least the following problems:

The existing input information encryption devices all use predetermined special encryption algorithms to encrypt the information input by users. These devices are all dedicated, so their scope of use is greatly limited, and it is difficult to meet the requirements of various network services at the same time. Need, poor versatility.

Contents of the invention

In order to overcome the disadvantages of limited use range and poor versatility of the input information encryption device in the prior art, the present invention provides an input information protection method, device and system. Described technical scheme is as follows:

On the one hand, an embodiment of the present invention provides a method for protecting input information, the method comprising:

The input information security protection device receives the protocol data unit sent by the host, and the protocol data unit includes encryption algorithm parameters;

Selecting an encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit according to the preset correspondence between the encryption algorithm parameter and the encryption algorithm;

Get the data entered by the user;

using the selected encryption algorithm to encrypt the data input by the user;

Send the encrypted data to the host.

Preferably, the protocol data unit also includes a data unit type parameter, and before the encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit is selected according to the preset correspondence between the encryption algorithm parameter and the encryption algorithm , the method also includes:

According to the data unit type parameter, it is judged whether the protocol data unit is an encrypted input type, and if so, the encryption algorithm parameter in the protocol data unit is acquired.

Preferably, before the encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit is selected according to the preset correspondence between the encryption algorithm parameter and the encryption algorithm, the method further includes:

Authenticate the server.

Preferably, the method further includes: acquiring an interrupt instruction, and executing the interrupt instruction.

Preferably, the method further includes: displaying the current working status and operating data of the input information security protection device on the input information security protection device.

In yet another aspect, an embodiment of the present invention provides an input information protection device, the device comprising:

The receiving module is used to receive the protocol data unit sent by the host, and the protocol data unit includes encryption algorithm parameters;

A selection module, configured to select an encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit received by the receiving module according to the preset correspondence between the encryption algorithm parameter and the encryption algorithm;

The acquisition module is used to acquire the data input by the user;

An encryption module, configured to encrypt the data acquired by the acquisition module according to the encryption algorithm selected by the selection module;

A sending module, configured to send the data encrypted by the encryption module to the host.

Preferably, the protocol data unit also includes a data unit type parameter, then the device further includes:

A judging module, configured to judge whether the protocol data unit is an encrypted input type according to the data unit type parameter, and if so, obtain the encryption algorithm parameter in the protocol data unit.

Preferably, the device further includes: an authentication module, configured to authenticate the server.

Preferably, the device further includes: an interrupt command execution module, configured to acquire the interrupt command and execute the interrupt command.

Preferably, the device further includes: a display module, configured to display the current working status and operating data of the input information security protection device.

In yet another aspect, an embodiment of the present invention also provides an input information protection system, the system comprising:

The host is configured to send a protocol data unit, where the protocol data unit includes encryption algorithm parameters;

The input information protection device is used to receive the protocol data unit sent by the host; select the encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit according to the corresponding relationship between the preset encryption algorithm parameters and the encryption algorithm; obtain data input by the user; using the selected encryption algorithm to encrypt the data input by the user; and sending the encrypted data to the host.

Further, the system also includes:

The server is configured to send encrypted input request information to the host;

Correspondingly, the protocol data unit sent by the host further includes the encrypted input request information, and the host is further configured to send the encrypted data sent by the input information protection device to the server.

The beneficial effect of the technical solution provided by the embodiment of the present invention is: by presetting the corresponding relationship between various encryption algorithms and encryption algorithm parameters in the input information security protection device, and specifying in the protocol data unit sent to the input information security protection device The encryption algorithm and the required encryption parameters are given, and then the input information security protection device can select a specific encryption algorithm according to the requirements of the host or server to encrypt the data input by the user on the input information security protection device. In this way, the same input information security protection device can provide the encrypted input services required by the hosts and servers running different applications, which overcomes the shortcomings of the dedicated input information security protection device with a single algorithm and narrow application range, and also overcomes the problems of general input information security. The defect that the device cannot provide the required encrypted input service for the host and the server takes into account safety, versatility and flexibility.

Description of drawings

FIG. 1 is a flow chart of the input information protection method provided by Embodiment 1 of the present invention;

Fig. 2 is a flow chart of the input information protection method provided by Embodiment 2 of the present invention;

FIG. 3 is a structural block diagram of an input information protection device provided by Embodiment 3 of the present invention;

FIG. 4 is a structural block diagram of an input information protection device provided by Embodiment 4 of the present invention;

Fig. 5 is a structural block diagram of an input information protection system provided by Embodiment 5 of the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the implementation manner of the present invention will be further described in detail below in conjunction with the accompanying drawings.

Example 1

As shown in Figure 1, this embodiment provides a method for protecting input information, the method comprising:

Step 101: The input information protection device receives the protocol data unit sent by the host, and the protocol data unit includes encryption algorithm parameters.

Specifically, for example, when a user needs to access a certain server, the host computer interacts with the server, and the host computer obtains encrypted input request information of the server, such as after the account information request (the account information request is usually a protocol data that requires an account number and a password) Unit), encapsulate it as a "DATA" field and send it to the input information security protection device. In this application, "host" refers to the main body part of a computer except for input and output devices.

For another example, when a user needs to log in to a local application, the host obtains the application's request to provide an account number and password, encapsulates it as a "DATA" field, and sends it to the input information security protection device.

That is to say, the encryption algorithm parameters in the protocol data unit correspond to the application program on the server or host.

Step 102: Select an encryption algorithm corresponding to the encryption algorithm parameters in the protocol data unit according to the preset correspondence between encryption algorithm parameters and encryption algorithms.

The correspondence between the preset encryption algorithm parameters and the encryption algorithm is preset in the input information security protection device.

Step 103: Obtain the data input by the user.

Step 104: Use the selected encryption algorithm to encrypt the data input by the user.

Step 105: Send the encrypted data to the host.

In the embodiment of the present invention, the corresponding relationship between various encryption algorithms and encryption algorithm parameters is preset in the input information security protection device, and the encryption algorithm is specified in the protocol data unit sent to the input information security protection device and the required encryption is given. Parameters, and then the input information security protection device can select a specific encryption algorithm to encrypt the data input by the user on the input information security protection device according to the requirements of the host or server. In this way, the same input information security protection device can provide the required encrypted input services for hosts and servers with different purposes, which overcomes the shortcomings of the dedicated input information security protection device with a single algorithm and narrow application range, and also overcomes the shortcomings of the general input device. The defect of not being able to provide the required encrypted input services for the host and the server takes into account security, versatility, and flexibility.

Example 2

As shown in Figure 2, this embodiment provides a method for protecting input information, which includes:

Step 201: The input information protection device receives the protocol data unit sent by the host, and the protocol data unit includes encryption algorithm parameters.

Specifically, the protocol data unit may also include a protocol data unit type parameter. The type of protocol data unit may be, but not limited to, transmission control, software upgrade, input device certificate request, server certificate request, and encrypted input. Among them, the transmission control is used to meet requirements such as confirmation ACK (Acknowledgement, acknowledgment), retransmission request NAK (NegativeAcknowledge, negative response), and packet transmission of bulk data (eg, software upgrade). When the server needs to obtain the digital certificate or public key of the input information protection device, the host can request the digital certificate from the input information protection device through the protocol data unit of the input device certificate request type. Of course, the digital certificate can also be saved on the host and directly sent to the server. It should be pointed out that the legal source of the digital certificate required here includes the memory, host, network server, etc. in the input information protection device, and its digital signature must be reliable. To ensure reliability and avoid possible legal difficulties, a certification chain rooted at the manufacturer of the processor of the input information protection device can be used. In addition, for some high-security services, it is necessary to compulsorily authenticate the server (actually the entity that provides security parameters). At this time, the input information protection device can send a certificate request to request the digital certificate of the server.

Specifically, the protocol data unit can be in the following format:

Wherein, the synchronization code is used to identify the beginning of a data unit, and its length is related to the communication link. For example, when the communication link is a PS2 interface, the synchronization code is a start character; when the communication link is a synchronization link, the synchronization code should be a start marker block. The check code, like the synchronization code, is related to the communication link.

The total length refers to the length of all fields starting from the type|protocol field, excluding the synchronization code, version field and the total length field itself.

Type|protocol is used to represent the above encryption algorithm parameters and data unit type parameters. In this embodiment, it is preferred to use a unified number. In other implementation manners, it can also be expressed separately.

DATA is the data corresponding to various types and protocol data units, generally the data packets of the protocol, such as the X509 digital certificate of the server.

More preferably, in order to facilitate the identification of the protocol data unit type, the type segmentation method can be used, for example, the upper 3 bits (binary) are used to indicate the data unit type as follows:

000 Transmission Control

001 software upgrade

010 Device Certification

011 server authentication

10x encryption

11x reserved

Wherein, x represents 0 or 1. According to this scheme, the number of bits that can be used to identify the encryption protocol is 6 binary bits in total, and the number of protocols that can be marked reaches 64. Adding the reserved part, there are up to 128 encryption protocols, which can be applied to various network service programs.

Preferably, the transmission of all protocol data units adopts a stop-and-wait protocol. Considering that the user input data is relatively slow, when the input information protection device receives a protocol data unit, it will immediately reply an ACK or NAK response frame after completing the verification, so that the host can make a correct judgment in time to take the next step .

Specifically, for example, when a user needs to access a certain server, the host computer interacts with the server, and the host computer obtains the encrypted input request information of the server, such as after the account information request, (the account information request is usually a protocol requiring an account number and password Data unit), which is encapsulated as a "DATA" field and sent to the input information security protection device.

For another example, when a user needs to log in to a local application, the host obtains the application's request to provide an account number and password, encapsulates it as a "DATA" field, and sends it to the input information security protection device.

That is to say, the encryption algorithm parameters in the protocol data unit correspond to the application program on the server or host.

Step 202: Determine whether the version of the received PDU is compatible, if yes, execute step 203; if not, reply available version information to the host.

Step 203: Determine whether the protocol data unit is an encrypted input type according to the data unit type parameter, if yes, execute step 204, if not, execute non-encrypted input type processing, such as transmission control, software upgrade, device authentication, server authentication, etc. .

Step 204: Determine whether the encryption algorithm parameter can be processed, if it can be processed, execute step 205; if it cannot be processed, it can reply the non-support protocol information.

Specifically, among the encryption algorithm parameters preset in the input information protection device, it is possible to search whether there is an encryption algorithm parameter identical to the encryption algorithm parameter in the protocol data unit. If it exists, it means that the encryption algorithm parameter can be processed, and vice versa. Indicates that the encryption algorithm parameters cannot be processed.

Step 205: Judging whether the server needs to be authenticated, if yes, go to step 206; if not, go to step 208.

Specifically, it may be determined according to the user's preset whether to authenticate the server.

Step 206: Detect whether the protocol data unit contains the digital certificate sent by the server; if yes, execute step 207; if not, send a server certificate request to the host.

Step 207: verify whether the digital certificate in the protocol data unit is legal, if yes, execute step 208; if not, reply authentication failure information to the host.

Through the above steps 205-207, the server can be authenticated.

Step 208: Select an encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit according to the preset correspondence between the encryption algorithm parameters and the encryption algorithm.

The correspondence between the preset encryption algorithm parameters and the encryption algorithm is preset in the input information security protection device.

Specifically, the step of selecting the encryption algorithm corresponding to the encryption algorithm parameter in the received protocol data unit includes:

The processing function pointer corresponding to the encryption algorithm parameter is assigned to the pointer variable func pointing to the processing function, and the processing function is initialized, so that the corresponding encryption processing is performed by calling the processing function pointed to by func when the user inputs. Encryption algorithm parameters and corresponding processing function pointers can be made into a table and stored in the input information protection device, so as to update the processing program.

Step 209: Obtain the data input by the user.

Specifically, at this moment, the input information protection device enters the encrypted keyboard state, and a NKS (normal keyboard status, common keyboard status flag) variable can be set, and when NKS=N, it represents the encrypted keyboard state; when NKS=Y, it represents non-encrypted Keyboard state, that is, the normal keyboard state. The state when the system starts is the normal keyboard state.

Step 211: Encrypt the data input by the user in step 210 using the selected encryption algorithm.

In practical applications, after the user finishes inputting, set NKS=Y to return to the normal keyboard state.

Step 212: Send the encrypted data to the host.

Specifically, the encrypted data may be encapsulated as a "DATA" field into a protocol data unit and sent to the host. After the host receives it, the application program on the host will either decrypt and use the data in the "DATA" field, or forward the data in the "DATA" field to the server.

It should be noted that, the data exchange between the input information protection device and the host can be through a PS2 interface, a USB interface or a wireless interface.

During the execution of the above steps 201-212, the method further includes:

Receive the user's interrupt command, and execute the interrupt service program corresponding to the interrupt command to perform corresponding processing.

Specifically, these interruption instructions may include: a setting instruction, a mandatory authentication instruction, a mandatory termination instruction and all data keys.

Among them, the setting command is used to set some optional items, such as whether to hide and display the password entered by the user with what symbol, whether to display the server logo, whether to always perform mandatory server authentication, whether to require user confirmation when the system is upgraded, etc. All possible settings can be made in an interactive question-and-answer manner.

The method in this embodiment further includes: displaying the current working status and operating data of the input information security protection device on the input information protection device. The working status and running data include but not limited to encrypted input status, authentication results, data input by users, etc.

In the embodiment of the present invention, the corresponding relationship between various encryption algorithms and encryption algorithm parameters is preset in the input information security protection device, and the encryption algorithm is specified in the protocol data unit sent to the input information security protection device and the required encryption is given. Parameters, and then the input information security protection device can select a specific encryption algorithm to encrypt the data input by the user on the input information security protection device according to the requirements of the host or server. In this way, the same input information security protection device can provide the required encrypted input services for hosts and servers with different purposes, which overcomes the shortcomings of the dedicated input information security protection device with a single algorithm and narrow application range, and also overcomes the shortcomings of the universal input device. The defect of not being able to provide the required encrypted input services for the host and the server takes into account security, versatility, and flexibility. In addition, the embodiment of the present invention can also realize two-way authentication between the input information security protection device and the server, further improving the security of the input information.

Example 3

As shown in Figure 3, an embodiment of the present invention provides an input information security protection device, which includes:

The receiving module 301 is configured to receive the protocol data unit sent by the host, and the protocol packet includes encryption algorithm parameters;

The selection module 302 is used to select the encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit received by the receiving module 301 according to the preset corresponding relationship between the encryption algorithm parameter and the encryption algorithm;

An acquisition module 303, configured to acquire data input by the user;

An encryption module 304, configured to encrypt the data obtained by the acquisition module 303 according to the encryption algorithm selected by the selection module 302;

The sending module 305 is configured to send the data encrypted by the encryption module 304 to the host.

Specifically, the input information security protection device of this embodiment can be used as a separate device compatible with a common keyboard, or can be directly integrated on the keyboard as a part of the keyboard.

The beneficial effect of the technical solution provided by the embodiment of the present invention is: by presetting the corresponding relationship between various encryption algorithms and encryption algorithm parameters in the input information security protection device, and specifying in the protocol data unit sent to the input information security protection device The encryption algorithm and the required encryption parameters are provided, and then the input information security protection device can select a specific encryption algorithm according to the requirements of the host or server to encrypt the data input by the user on the input information security protection device. In this way, the same input information security protection device can provide the required encrypted input services for hosts and servers with different purposes, which overcomes the shortcomings of the dedicated input information security protection device with a single algorithm and narrow application range, and also overcomes the shortcomings of the general input device. The defect of not being able to provide the required encrypted input services for the host and the server takes into account security, versatility, and flexibility.

Example 4

As shown in Figure 4, an embodiment of the present invention provides an input information security protection device, which includes:

The receiving module 301 is configured to receive the protocol data unit sent by the host, and the protocol data unit includes encryption algorithm parameters;

The selection module 302 is used to select the encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit received by the receiving module 301 according to the preset corresponding relationship between the encryption algorithm parameter and the encryption algorithm;

An acquisition module 303, configured to acquire data input by the user;

An encryption module 304, configured to encrypt the data obtained by the acquisition module 303 according to the encryption algorithm selected by the selection module 302;

The sending module 305 is configured to send the data encrypted by the encryption module 304 to the host.

Preferably, the protocol data unit also includes a data unit type parameter, then the device also includes:

Judging module 406, for judging whether the protocol data unit received by the receiving module 301 is an encrypted input type according to the data unit type parameter, and if so, obtaining the encryption algorithm parameter in the protocol data unit;

Correspondingly, when the judgment result of the judging module 406 is yes, the selection module 302 selects the encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit according to the preset correspondence between the encryption algorithm parameter and the encryption algorithm.

Preferably, the device further includes: an authentication module 407, configured to authenticate the server.

Preferably, the device further includes: an interrupt command execution module 408, configured to acquire the interrupt command and execute an interrupt service program corresponding to the interrupt command.

Specifically, the interruption instruction may include a setting instruction, a mandatory authentication instruction, a mandatory termination instruction and all data keys.

Preferably, the device further includes a display module 409 for displaying the current working status and operating data of the input information security protection device. The working status and running data include but not limited to encrypted input status, authentication results, data input by users, etc.

Preferably, the device further includes: a software upgrade module, configured to upgrade the software in the input information security protection device, including the encryption algorithm.

In a specific implementation of this embodiment, the interrupt command execution module 408 may include but not limited to a display mode switching button, a mandatory server authentication button, a termination and cancel input button, a data key, etc., and the display module 409 may include an indicator light and display etc.

By pre-setting the corresponding relationship between various encryption algorithms and encryption algorithm parameters in the input information security protection device, specifying the encryption algorithm and giving the required encryption parameters in the protocol data unit sent to the input information security protection device, and then input The information security protection device can select a specific encryption algorithm to encrypt the data input by the user on the input information security protection device according to the requirements of the host or server. In this way, the same input information security protection device can provide the required encrypted input services for hosts and servers with different purposes, which overcomes the shortcomings of the dedicated input information security protection device with a single algorithm and narrow application range, and also overcomes the shortcomings of the general input device. The defect of not being able to provide the required encrypted input services for the host and the server takes into account security, versatility, and flexibility. In addition, the embodiment of the present invention can also realize two-way authentication between the input information security protection device and the server, further improving the security of the input information.

Example 5

This embodiment provides an input information protection system, which includes: a host 52 and an input information protection device 51, wherein the input information protection device 51 can be the input information protection device provided in Embodiment 3 or 4; the host 52 uses To send the protocol data unit to the input information protection device 51, the protocol data unit includes encryption algorithm parameters.

Further, the system may also include: a server 53, configured to send encrypted input request information to the host 52;

Correspondingly, the protocol data unit sent by the host 52 also includes the encrypted input information request, and the host is also used to send the encrypted data sent by the input information protection device to the server.

In the embodiment of the present invention, the corresponding relationship between various encryption algorithms and encryption algorithm parameters is preset in the input information security protection device, and the encryption algorithm is specified in the protocol data unit sent to the input information security protection device and the required encryption is given. Parameters, and then the input information security protection device can select a specific encryption algorithm to encrypt the data input by the user on the input information security protection device according to the requirements of the host or server. In this way, the same input information security protection device can provide the required encrypted input services for hosts and servers with different purposes, which overcomes the shortcomings of the dedicated input information security protection device with a single algorithm and narrow application range, and also overcomes the shortcomings of the general input device. The defect of not being able to provide the required encrypted input services for the host and the server takes into account security, versatility, and flexibility.

It should be noted that: when the input information protection device and system provided in the above embodiments protect input information, the division of the above-mentioned functional modules is used as an example for illustration. In practical applications, the above-mentioned functions can be assigned to different functional Module completion means that the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. In addition, the input information protection device and system provided by the above-mentioned embodiments belong to the same idea as the input information protection method embodiments, and the specific implementation process thereof is detailed in the method embodiments, and will not be repeated here.

Those of ordinary skill in the art can understand that all or part of the steps for implementing the above embodiments can be completed by hardware, and can also be completed by instructing related hardware through a program. The program can be stored in a computer-readable storage medium. The above-mentioned The storage medium mentioned may be a read-only memory, a magnetic disk or an optical disk, and the like.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included in the protection of the present invention. within range.

Claims (12)

1. A method for protecting input information, characterized in that the method comprises: The input information security protection device receives the protocol data unit sent by the host, and the protocol data unit includes encryption algorithm parameters; Selecting an encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit according to the preset correspondence between the encryption algorithm parameter and the encryption algorithm; Get the data entered by the user; using the selected encryption algorithm to encrypt the data input by the user; Send the encrypted data to the host. 2. The method according to claim 1, wherein the protocol data unit also includes a data unit type parameter, and then selects the protocol data according to the corresponding relationship between the preset encryption algorithm parameters and the encryption algorithm. Before the encryption algorithm corresponding to the encryption algorithm parameter in the unit, the method also includes: According to the data unit type parameter, it is judged whether the protocol data unit is an encrypted input type, and if so, the encryption algorithm parameter in the protocol data unit is obtained. 3. The method according to claim 1, characterized in that, before the encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit is selected according to the corresponding relationship between the preset encryption algorithm parameters and the encryption algorithm, the The method also includes: Authenticate the server. 4. The method according to claim 1, further comprising: obtaining an interrupt instruction, and executing an interrupt service program corresponding to the interrupt instruction. 5. The method according to claim 1, further comprising: displaying the current working status and operating data of the input information security protection device on the input information security protection device. 6. An input information security device, characterized in that the device comprises: The receiving module is used to receive the protocol data unit sent by the host, and the protocol data unit includes encryption algorithm parameters; A selection module, configured to select an encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit received by the receiving module according to the preset correspondence between the encryption algorithm parameter and the encryption algorithm; The acquisition module is used to acquire the data input by the user; An encryption module, configured to encrypt the data acquired by the acquisition module according to the encryption algorithm selected by the selection module; A sending module, configured to send the data encrypted by the encryption module to the host. 7. The device according to claim 6, wherein the protocol data unit further comprises a data unit type parameter, and the device further comprises: A judging module, configured to judge whether the protocol data unit is an encrypted input type according to the data unit type parameter, and if so, obtain the encryption algorithm parameter in the protocol data unit. 8. The device of claim 6, further comprising: The authentication module is used to authenticate the server. 9 . The device according to claim 6 , further comprising: an interrupt command execution module, configured to acquire the interrupt command and execute the interrupt command. 10. The device according to claim 6, further comprising: a display module, configured to display the current working status and operating data of the input information security protection device. 11. An input information protection system, characterized in that the system comprises: The host is configured to send a protocol data unit, where the protocol data unit includes encryption algorithm parameters; The input information protection device is used to receive the protocol data unit sent by the host; select the encryption algorithm corresponding to the encryption algorithm parameter in the protocol data unit according to the corresponding relationship between the preset encryption algorithm parameters and the encryption algorithm; obtain data input by the user; using the selected encryption algorithm to encrypt the data input by the user; and sending the encrypted data to the host. 12. The system of claim 11, further comprising: The server is configured to send encrypted input request information to the host; Correspondingly, the protocol data unit sent by the host further includes the encrypted input request information, and the host is further configured to send the encrypted data sent by the input information protection device to the server.

Images