CN103297240B - Towards secure password input system and the implementation method of intelligent terminal - Google Patents

Abstract

The intelligent terminal-oriented security password input system of the present invention includes an intelligent terminal, an external password input device and a remote server, and the external password input device is used for displaying and encrypting graphic information and directed line segment information. The implementation method includes a). Connection of an external password input device; b). Graphic parameter setting; c). Selection of directed line segments; d). Encryption of password configuration information; e). Sending of password configuration information; f). Password configuration information; g). Randomly generate rule graphics; h). Information encryption; i). Information transmission; j). Information decryption; j). Remote server judgment. The system and method of the present invention set the password through the combination of graphics and directed line segments, so that the passwords generated each time are different; even if a keylogger is installed on the intelligent terminal, the real password of the user cannot be detected. The present invention will have broad application space in the field of mobile applications, especially in the fields of electronic commerce and electronic government affairs.

Description

Smart terminal-oriented security password input system and implementation method

technical field

The present invention relates to an intelligent terminal-oriented security password input system and its implementation method, more specifically, to an intelligent terminal-oriented security password input system and implementation method in which the input password has high strength and is difficult for opponents to steal.

Background technique

With the popularization of smartphones, IPADs, tablet computers and other intelligent mobile terminal devices with Internet access functions, it has become a trend and general trend of the information society to use such devices to realize e-commerce transactions and e-government system login anytime and anywhere. However, because users often install a large number of application software on personal smart terminals, and the security of these application software cannot be guaranteed, some malicious application software will intercept the user's keystroke information, thereby capturing the user's transaction password or password. It brings huge security risks to users' e-commerce transactions and e-government affairs. In order to solve this security problem, a common method at present is to design an external device that communicates with the smart terminal through an audio interface, and the device has a keyboard for users to input passwords. However, this method has problems in operability and safety.

The operability problem has two aspects: (1) It is not convenient for the user to carry it when the keyboard design is large; (2) It is not convenient for the user to input the password when the keyboard design is small, and it is easy to cause password input errors.

The security problem is: for the convenience of the user's operation and memory, the external device only provides a numeric keypad to allow the user to set a password of 6-8 digits. The strength of this password is low, and it is easy to be guessed by the adversary, or observed by the adversary when entering the password. And because the user often uses one password for multiple applications for the convenience of memory, this will cause security problems for other applications of the user.

Contents of the invention

In order to overcome the disadvantages of the above-mentioned technical problems, the present invention provides an intelligent terminal-oriented security password input system and its implementation method, in which the input password has high strength and is difficult for opponents to steal.

The smart terminal-oriented security password input system of the present invention includes a smart terminal, an external password input device and a remote server, and its special feature is that: the external password input device communicates with the smart terminal in a wired or wireless form, The external password input device is used for displaying and encrypting graphic information and directed line segment information. The intelligent terminal is used to send the information entered by the user to the remote server through the 3G or GPRS network. The remote server is used to identify the correctness of the password entered by the user and provide Related Services.

The external password input device is used for displaying graphics and directed line segment information without a keyboard, which effectively reduces the size of the external password input device and is easy to carry and use. The corresponding application program is loaded on the intelligent terminal, and relevant information can be sent to the remote server. The remote server can judge the correctness of the password input by the user, and provide related services according to the judgment result.

In the intelligent terminal-oriented security password input system of the present invention, when the external password input device and the intelligent terminal adopt wired communication, the external password input device is connected to the audio or USB interface of the intelligent terminal through the communication line. The intelligent terminal is a smart phone, an IPAD or a tablet computer.

The implementation method of the intelligent terminal-oriented security password input system of the present invention is special in that it includes a password configuration step and a user login and use step, and the remote server and the external password input device share a preset key;

Described password configuration comprises the following steps:

a). The connection of the external password input device first realizes the communication connection between the external password input device and the intelligent terminal, and runs the application program of the external password input device on the intelligent terminal; b). The terminal selects the graphic type, graphic size and the range of the password character set; the range of the password character set is the value form of each element in the graphic, which can be a combination of numbers, numbers and lowercase letters, or a combination of numbers, lowercase letters and uppercase letters Combination; c). Directed line segment selection. According to the graphic parameters set by the user, several directed line segments based on the selected graphics are displayed on the external password input device. The user selects one or several directed line segments through the smart terminal as Password symbol input sequence, and write down this directed line segment; d). Password configuration information is encrypted, and the external password input device is used to preset the key to the graphic type, graphic size, and the scope of the password character set and the selected directed line segment The information is encrypted to form the encrypted password configuration information; e). Sending the password configuration information, the intelligent terminal sends the encrypted password configuration information to the remote server through the 3G or GPRS network; f). Obtaining the password configuration information, the remote server Decrypt the encrypted password configuration information through the preset key to obtain the user's graphic type, graphic size, range of password character set and selected directed line segment information;

The user login includes the following steps:

g). Randomly generate graphics, connect the external password input device to the smart terminal, use the smart terminal to activate the external password input device, and use the external password input device according to the graphic type, graphic size and password character set range set by the user Randomly generate a graph; the user reads the password from the graph according to the directed line segment written down, and enters it from the smart terminal; h). Information is encrypted, and the external password input device generates in step g) through the preset key pair Encrypt the graphics information, and send the encrypted graphics information to the smart terminal; i). For information transmission, the smart terminal encodes the password entered by the user, and sends it to the remote server together with the encrypted graphics information; j). Information decryption, the remote server uses the preset key to decrypt the received information, and restores the graphic information; k). The remote server judges, and the remote server parses the restored graphic information according to the directed line segment information selected by the user. Correct password, and judge whether the parsed password is consistent with the password entered by the user. If they are consistent, provide users with e-commerce transactions or e-government services; if they are inconsistent, do not allow access to e-commerce transactions or e-government services.

The implementation method of the smart terminal-oriented security password input system of the present invention, the graphic type is a square matrix graphic, a matrix graphic, a pentagram, a hexagon, a heptagon, or a nesting of two or more of the above-mentioned graphics; The size is determined by the screen size of the external password input device, and the size of the square matrix graphics can be selected from 3*3 to 10*10.

The beneficial effects of the present invention are: the intelligent terminal-oriented security password input system and implementation method of the present invention, by setting the external password input device as a device that only displays graphics and directed line segment information, without setting an input keyboard, effective The size of the external password input device is greatly reduced, which is convenient for carrying and using. Passwords are set by combining randomly generated graphics and directed lines, so that the passwords generated each time are different; as long as the user sets the graphics type in advance and remembers the directed lines, passwords with different strengths can be configured. Even if a keylogger is installed on the smart terminal, it cannot detect the user's real password, which can be used in mobile applications with different security levels.

At the same time, the existing smart terminal communication channel is used to complete the authentication, and the highly secure password input and verification is realized on the unsafe smart terminal. With the popularity of mobile applications and the increasing security threats faced by mobile applications, it can be predicted that the present invention will have a broad application space in the field of mobile applications, especially in the fields of e-commerce and e-government affairs.

The advantages of this patented technology are mainly reflected in the following aspects:

(1) The external password input device with LCD does not need to design a keyboard, which effectively reduces the size of the device;

(2) Passwords of any strength can be configured according to requirements, and are very easy for users to remember;

(3) The password space is large, which ensures that it is difficult for the adversary to implement exhaustive guessing attacks;

(4) The password provided by the external password input device changes dynamically. Even if the adversary obtains the current login password through the monitoring software on the terminal, it will be invalid for the next login;

(5) The external password input device contains a password chip, which can transmit the necessary password information to a remote server through the 3G or GPRS channel of the terminal, and can conveniently realize the confidential transmission of user login information;

(6) The smart terminal does not need to encrypt the password entered by the user, which can save the energy of the smart terminal;

(7) The user enters the password on the smart terminal, which conforms to the user's operating habits.

Description of drawings

Fig. 1 is the schematic diagram of the security password input system facing intelligent terminal of the present invention;

Fig. 2 is the schematic diagram of 5*5 square matrix figure;

Fig. 3 is a schematic diagram of directed line segments generated based on 5*5 square matrix graphics;

Fig. 4 is a schematic diagram of a random 5*5 square matrix figure;

Fig. 5 is a schematic diagram of a random 6*6 square matrix;

Figure 6 and Figure 7 are some simple random graphics.

In the figure: 1 intelligent terminal, 2 external password input device, 3 remote server, 4 communication line.

detailed description

The present invention will be further described below in conjunction with the accompanying drawings and embodiments.

As shown in Figure 1, the schematic diagram of the invented secure password input system for intelligent terminals is given, which includes intelligent terminals 1 (such as smart phones, IPADs, tablet computers and other intelligent mobile terminal devices with Internet access functions), external A password input device 2, a remote server 3 and a communication line 4 are installed, and the external password input device 2 communicates with the intelligent terminal 1 in a wired or wireless manner. In the case that the external password input device 2 and the smart terminal 1 adopt wired communication, it can be connected with the audio or USB interface of the smart terminal 2 through the communication line 4 . Smart terminal 1 communicates with remote server 3 through 3G or GPRS network. The smart terminal 1 is also used to run the application program of the external password input device 2 so as to control and manage the external password input device 2 .

The external password input device 2 only needs to be provided with a display screen, and no buttons are required, and the input of the password and the selection of the directed line segment can be realized through the intelligent terminal 1 . This effectively reduces the volume of the external password input device 2 . The external password input device 2 can generate random regular graphics, and is provided with an encryption chip to encrypt graphics and directed line information. The external password input device 1 and the remote server 3 share a preset key so as to realize encryption and decryption of related password information.

In the process of use, the user sets the size of the graphic and the range of the password character set, and selects the directed line segment according to the set graphic; and encrypts the information of the graphic size, the range of the password character set and the selected directed line segment sent to the remote server. When the user logs in again, the remote server can judge the legitimacy of the user according to the graphic information sent by the smart terminal and the password entered by the user.

The implementation method of the intelligent terminal-oriented security password input system of the present invention includes a password configuration step and a user login and use step, and the remote server 3 shares a preset key with the external password input device 2;

Password configuration includes the following steps:

a). The connection of the external password input device first realizes the communication connection between the external password input device 2 and the intelligent terminal 1, and runs the application program of the external password input device 2 on the intelligent terminal 1;

b). Graphic parameter setting, the user selects the graphic type, graphic size and the range of the password character set through the smart terminal; the range of the password character set is the value form of each element in the graphic, which can be a combination of numbers, numbers and lowercase letters , or a combination of numbers, lowercase letters, and uppercase letters;

The graphics type is square matrix graphics, matrix graphics, pentagrams, hexagons, heptagons or the nesting of two or more of the above graphics; the size of the graphics is determined by the screen size of the external password input device, and the size of the square matrix graphics It can be selected between 3*3～10*10.

According to different levels of security requirements, different square matrix graphics can be selected; for applications with higher security, matrix graphics above 5*5 can be selected, and the password character set is required to include uppercase and lowercase English letters, numbers and special characters. For example, when the user registers, he can specify a 5*5 square matrix, as shown in Figure 2. In the password preset stage, the elements in the matrix graphics can be represented by the letter "A" in the figure, because only the size of the graphics is concerned at this time; when the user logs in, the character "A" in Figure 2 should be based on the selected Password character set to replace.

c). Selection of directed line segments. According to the graphic parameters set by the user, several directed line segments based on the selected graphics are displayed on the external password input device. The user selects one or several directed line segments as password symbols through the smart terminal Enter the order and write down the directed line segment;

As shown in Figure 3, a schematic diagram of a directed line segment generated based on a 5*5 square matrix graphic is given. The line segment with the same label is a directed line segment with many forms, and only 4 are shown in this figure;

d). The password configuration information is encrypted, and the external password input device encrypts the graphic type, graphic size, the range of the password character set and the selected directed line segment information through a preset key to form encrypted password configuration information;

e). Sending the password configuration information, the intelligent terminal 1 sends the encrypted password configuration information to the remote server 3 through the 3G or GPRS network;

f). To obtain password configuration information, the remote server 3 decrypts the encrypted password configuration information through a preset key, so as to obtain the user's graphic type, graphic size, and the scope of the password character set and the selected directed line segment information;

User login includes the following steps:

g). Randomly generate graphics, connect the external password input device to the smart terminal, use the smart terminal to activate the external password input device, and use the external password input device according to the graphic type, graphic size and password character set range set by the user Randomly generate a graph; the user reads the password from the graph according to the directed line segment written down, and inputs it from the smart terminal;

As shown in Figure 4, if the user selects step 1 in step c) of selecting a directed line segment, that is, an "L" shape that starts with the first element in the upper left corner and ends with the last element in the lower right corner, then in this step the user The password that should be typed is "b0ca38e?S";

Of course, when registering, the user can only specify the type of the graph and the directed line segment, without specifying the size of the graph. For example, when the user registers, the specified figure is a square matrix, and the directed line segment is an L-shaped line segment, and the L-shaped vertical drawing starts from the second column of the square matrix, and the horizontal drawing is the penultimate row of the square matrix. Then when the external password input device gives a graph as shown in Figure 4, the password should be: "hPgT2qU". And when the user inputs the password again, the external password input device gives the graphic shown in Figure 5, then the password that the user needs to input is "1gzMA?c-".

h). Information encryption, the external password input device encrypts the graphic information generated in step g) through a preset key, and sends the encrypted graphic information to the smart terminal;

i).Information transmission, after the intelligent terminal encodes the password entered by the user, it sends it to the remote server together with the encrypted graphic information;

j). Information decryption, the remote server uses the preset key to decrypt the received encrypted information, and restores the graphic information;

k). Judging by the remote server, the remote server parses the correct password from the restored graphic information according to the directed line segment information selected by the user, and judges whether the parsed password is consistent with the password entered by the user. Provide e-commerce transactions or e-government services; if inconsistent, do not allow access to e-commerce transactions or e-government services.

For applications with a lower security level, relatively simple graphics and directed line segments can also be used, as shown in Figure 6 and Figure a and Figure 7 in Figure 7 .

Even if the adversary can obtain the user's password through the keylogging software, the adversary cannot guess the next password because the arrangement of the password characters in the graphics provided to the user by the external password input device is randomly changed each time. In addition, since the password input system provides a very large password space, it can also effectively resist the exhaustive guessing attack of the adversary. For example, for a 5*5 square matrix graphic, there are 36 to ²⁵ variations according to the order of lowercase letters and numbers. Therefore, it is difficult for the adversary to guess such a large password space. , or when the graph expands to a 6*6 square matrix, the password space will further increase.

Claims (2)

1. the implementation method towards the secure password input system of intelligent terminal, secure password input system towards intelligent terminal comprises intelligent terminal (1), external password loader (2) and remote server (3), described external password loader communicates with wired or wireless form with intelligent terminal, external password loader is used for display and the encryption of graphical information and directed line segment information, the information that intelligent terminal is used for user inputs is sent to remote server by 3G or GPRS network, remote server is for identifying that user inputs the correctness of password and provides related service, it is characterized in that, the implementation method towards the secure password input system of intelligent terminal comprises password configuration step and user logs in use step, and a preset key shared by remote server and external password loader,

Described password configuration comprises the following steps:

A). the connection of external password loader, first realizes the communication connection of external password loader (2) and intelligent terminal (1), and on intelligent terminal, runs the application program of external password loader;

B). graphic parameter is arranged, and user chooses the scope of graph style, feature size and password character set by intelligent terminal; The scope of password character set is the value form of each element in figure, and it can be numeral, the combination of numeral and lowercase, or numeral, lowercase and uppercase combination;

C). directed line segment is chosen, according to the graphic parameter of user's setting, external password loader shows some the directed line segments based on choosing figure, user chooses wherein one or some directed line segments by intelligent terminal and, as password symbol input order, and to be write down by this directed line segment;

D). password configuration information is encrypted, and external password loader is encrypted the scope of graph style, feature size and password character set and the directed line segment information chosen by preset key, forms the password configuration information after encryption;

E). the transmission of password configuration information, the password configuration information after encryption is sent to remote server (3) by 3G or GPRS network by intelligent terminal;

F). obtain password configuration information, remote server is decrypted the password configuration information after encryption by preset key, with the scope obtaining the graph style of user, feature size and password character set and the directed line segment information chosen;

Described user logs in use and comprises the following steps:

G). produce figure at random, external password loader is connected with intelligent terminal, utilize intelligent terminal to activate external password loader, the scope of the graph style set according to user by external password loader, feature size and password character set produces a figure at random; User reads password according to the directed line segment write down from figure, and inputs from intelligent terminal;

H). information encryption, external password loader by preset key to step g) in produce graphical information be encrypted, and by encryption after graphical information be sent to intelligent terminal;

I). information sends, and after intelligent terminal is encoded to the password that user inputs, is sent to remote server together with the graphical information after encryption;

J). decrypts information, remote server utilizes preset key to be decrypted the enciphered message received, and restores graphical information;

K). remote server judges, the directed line segment information that remote server is chosen according to user, correct password is parsed from the graphical information restored, and judge that whether the password parsed is consistent with the password that user inputs, if consistent, then provide the service of e-commerce transaction or E-Government to user; If inconsistent, then do not allow the service entering e-commerce transaction or E-Government.

2. the implementation method of the secure password input system towards intelligent terminal according to claim 1, is characterized in that: described graph style be square formation figure, Matrix Pattern, pentalpha, hexagon, heptagon or two kinds or above above-mentioned figure nested; Feature size is determined by external password loader screen size, and the large I of square formation figure is chosen between 3*3 ~ 10*10.