JP2014107740A - Security verification method for mobile device verification - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a security verification method which is capable of strengthening security during data transmission and suitable for implementation during use of a mobile device.SOLUTION: The security verification method is executed by a mobile device (1) to be verified. According to the method, the mobile device (1) acquires at least one instruction indicating a specific motion from a storage unit (12), outputs the instruction, generates an operation signal according to user operation via one of a motion detection unit (14) and a button unit (15), obtains the operation signal from one of the motion detection unit (14) and the button unit (15), determines whether the operation signal meets the motion corresponding to the instruction and, when a result of the determination is positive, generates a confirmation signal indicating that the mobile device (1) is verified.

Description

  The present invention relates to a safety verification method, and more particularly to a safety verification method for verifying a mobile device.

  The functionality of mobile devices (eg, smart phones, tablet computers, personal digital assistants, etc.) and the accessibility of wireless networks are developing rapidly. Various applications, such as electronic commerce services designed in a traditional manner to be implemented using a personal computer, are now implemented using mobile devices independently. However, many modes of operation remain unsuitable for use with current mobile devices.

  For example, online payment using a credit card is widely performed on personal computers. When performing online payments, the user first enters personal information, including a user name and corresponding password, via an interface (eg, a web page displayed on a personal computer) to verify the user's identity. Instructed to do so. After the user's ID is verified, the interface further prompts the user to enter credit card information that would include a card number, expiration date, etc. Such a conventional system of payment execution can be found in Taiwan Patent Application No. 473681.

  When using a personal computer to make online payments, personal information and credit card information are typically entered using a keyboard. However, there is a malicious program (such as a Trojan horse) that can record keyboard input strokes and send them secretly to organizations in other countries. There is a danger that it will be embedded before it is noticed. In other words, the user may give personal information without knowing it. And organizations in other countries may be able to remotely control personal computers via a Trojan horse using illegally acquired personal information.

  In order to ensure that a personal computer is not operated by a Trojan horse, a virtual keyboard system (for example, described in Taiwan Patent Application Publication No. 200905541) and a challenge response test such as CAPTCHA are conventionally performed. However, such a test would be very inconvenient and time consuming for users trying to pass. Further, if personal information has already been acquired by an organization in another country, such a test alone will not help prevent the organization in another country from remotely operating a personal computer.

Taiwan Patent Application Publication No. 473681 Taiwan Patent Application Publication No. 200905541

  In contrast, a mobile device typically includes a motion sensor that generates a signal in response to an operation from a user (eg, rotating, shaking, etc.). Such a signal, when combined with a conventional password scheme, will allow both handling the authentication problem and ensuring that the mobile device is not manipulated by a Trojan horse.

  Accordingly, it is an object of the present invention to provide a security verification method that can enhance security during data transmission and is suitable for implementation while using a mobile device.

Therefore, the security verification method of the present invention is implemented by the mobile device to be verified. The mobile device includes a processing unit, a storage unit, an output unit, a motion detection unit, and a button unit. The storage unit stores at least one indication of a specific movement. The safety verification method includes the following steps:
(A) configuring the processing unit to obtain instructions from the storage unit;
(B) configuring the output unit to output the instructions;
(C) configuring one of the motion detection unit and the button unit so that the user can generate an operation signal in accordance with an operation from the user;
(D) configuring the processing unit to obtain the operation signal from one of the motion detection unit and the button unit and determine whether the operation signal matches a motion corresponding to the instruction; Steps and
(E) configuring the processing unit to generate a confirmation signal indicating that the mobile device has been verified if the determination made in step (d) is affirmative;

  ADVANTAGE OF THE INVENTION According to this invention, the security during data transmission can be strengthened and the safety verification method suitable for implementation while using a mobile device can be provided.

Schematic block diagram of a mobile device for implementing the safety verification method according to the present invention Flowchart showing the steps of a preferred embodiment of the safety verification method according to the present invention. Schematic showing how the user changes the orientation of the mobile device as instructed Schematic showing how the user points the mobile device up as instructed Schematic showing how the user presses the volume control button on the mobile device as instructed Schematic showing how the user shakes the mobile device sideways as instructed

  As shown in FIG. 1, a preferred embodiment of the security verification method according to the present invention is implemented by a mobile device 1. The mobile device 1 includes a processing unit 11, a storage unit 12, an output unit 13, an operation detection unit 14 and a button unit 15. In the present embodiment, the mobile device 1 is a mobile phone, but in other embodiments, it may be another mobile device such as a tablet computer or a personal digital assistant. The storage unit 12 stores a plurality of instructions each indicating a specific movement. The output unit 13 includes a display device 131 and an audio speaker 132 (see FIG. 3). The motion detection unit 14 is a micro-electromechanical element (MEMS) component and includes an accelerometer, a gyrometer, and / or a pressure sensor. The button unit 15 includes a volume control button 151, but may include other buttons in other embodiments. When the motion detection unit 14 detects the movement of the mobile device 1 or when the button unit 15 is operated by the user, an operation signal is generated from one of the motion detection unit 14 and the button unit 15.

  The processing unit 11 is electrically connected to the storage unit 12, the output unit 13, the motion detection unit 14 and the button unit 15 and is operable to execute an application. For example, the application is an online trading program, but may be other programs that require a high level of security. The security verification method can be integrated as a sub-program of this application and verifies the mobile device 1 in addition to the password before moving to the online transaction program.

  When the user starts executing the application, the mobile device 1 is configured to first perform the safety verification method including the following steps.

  Still referring to FIG. 2, at step 21, the processing unit 11 is operable to obtain at least one instruction from the storage unit 12. Typical non-limiting instructions are listed in Table 1 below. In the present embodiment, the processing unit 11 randomly acquires five instructions, for example, instruction numbers 1, 9, 13, 18 and 20.

  In step 22, the output unit 13 is operable to output the first one of the instructions (ie, the first instruction). As shown in FIG. 3, the first instruction instructs the user to move the mobile device 1 from the portrait mode to the landscape mode in the counterclockwise direction indicated by the arrow 41 in FIG. The text is displayed in the pop-up window 5 on the display device 131. In step 23, one of the motion detection unit 14 and the button unit 15 (in this case, the motion detection unit 14) detects the movement of the mobile device 1 made by the user and sends an operation signal according to the detected movement. The processing unit 11 is operable to determine in step 231 whether the operation signal has been input as instructed. In this case, the processing unit 11 starts measuring the time limit, and if the operation signal is not input within the time limit, the flow proceeds to step 26 and the processing unit 11 receives an error signal indicating that the mobile device 1 is not verified. Is operable to generate This application is thus terminated in this embodiment, but in other embodiments, the flow may return to step 21 to resume the method.

  Otherwise, the flow proceeds to step 24 and the processing unit 11 is operable to receive an operation signal from the motion detection unit 14. Thereafter, in step 25, the processing unit 11 is operable to determine whether the operation signal received in step 24 matches the movement corresponding to the first indication. If the decision is affirmative (i.e. the mobile device 1 is turned according to the first indication), the flow moves to step 30. If not, the flow proceeds to step 26.

  In step 30, the processing unit 11 is operable to determine whether all the instructions obtained in step 21 have been output and whether all the corresponding operation signals have been correctly received. If the determination is negative, the flow returns to step 22 to output another one of the instructions obtained at step 21. If not, the flow proceeds to step 33 and the processing unit 11 is operable to generate a confirmation signal indicating that the mobile device 1 has been verified. Since there are instructions that have not yet been output this time, the flow returns to step 22 to process the second instruction.

  Still referring to FIG. 4, in step 22, the audio speaker 132 of the output unit 13 is operable to output a second instruction (ie, instruction number 9). The instruction number 9 is for the user to listen to a notification sound (eg, a “beep” sound generated by the audio speaker 132) and turn the mobile device 1 to a position to lie out of landscape mode in the direction indicated by arrow 43. To instruct. The motion detection unit 14 is then operable in step 23 to detect the movement of the mobile device 1 and to generate other operation signals according to the detected movement. As mentioned above, the processing unit 11 starts measuring the time limit at step 231 and the determination regarding the time limit is the same in the various instructions, and for the sake of brevity, the detailed description thereof will not be repeated here. .

  Later, in step 24, the processing unit 11 is operable to receive an operation signal from the motion detection unit 14. Thereafter, when the mobile device 1 is turned as instructed, the processing unit 11 determines in step 25 that the operation signal matches the movement corresponding to the instruction, the flow proceeds to step 30 and the third Return to step 22 to process the instructions.

  Still referring to FIG. 5, at step 22, the audio speaker 132 of the output unit 13 is operable to output a third instruction (ie, instruction number 13). The instruction No. 13 listens to the notification sound, presses the volume control button 151 of the button unit 15, and instructs the user to hold it down until notified by the stop notification to release the volume control button 151. . In step 23, the button unit 15 is configured to detect an operation of the volume control button 151 and to generate an operation signal by the operation of the volume control button 151. After a predetermined time has elapsed, a stop notification is output by the audio speaker 132. If it is determined that the volume control button 151 is continuously pressed during the predetermined time, the processing unit 11 confirms in step 25 that the operation signal matches the movement corresponding to the instruction No. 13. Then, the flow proceeds to step 30. Otherwise, flow proceeds to step 26 and the method ends. This time (assuming that the operation signal matches the movement), there are instructions that have not yet been output, so the flow proceeds to step 30 and then returns to step 22 to process the fourth instruction.

  Further, referring to FIG. 6, the display device 131 of the output unit 13 is operable to output the fourth instruction (that is, the instruction number 18). The 18th instruction listens to the notification sound and instructs the user to shake the mobile device 1 sideways as indicated by the arrow 45. The motion detection unit 14 is then operable at step 23 to detect the movement of the mobile device 1 and to generate another operation signal according to the detected movement. If the mobile device 1 is swayed sideways as instructed, the processing unit 11 determines in step 25 that the operation signal matches the movement corresponding to the instruction 18 and the flow proceeds to step 30. Otherwise, flow proceeds to step 26 and the method ends. This time (assuming that the operation signal matches the movement), there are instructions that have not yet been output, so the flow proceeds to step 30 and then returns to step 22 to process the fifth instruction.

  Returning to FIG. 5, in step 22, the audio speaker 132 of the output unit 13 is operable to output the fifth instruction (that is, instruction number 20). The instruction No. 20 is displayed to the user to hear the notification sound, press the volume control button 151 of the button unit 15, and keep pressing it until notified by a stop notification of releasing the volume control button 151. In step 23, the button unit 15 is configured to detect an operation of the volume control button 151 and to generate an operation signal by the volume control button 151. Thereafter, after a predetermined time has elapsed, a stop notification is output by the display device 131. If it is determined that the volume control button 151 remains pressed continuously for a predetermined time, the flow proceeds to step 30. Otherwise, flow proceeds to step 26 and the method ends. In this case (assuming that the operation signal matches the movement), the flow proceeds to step 30, and then proceeds to step 33. At step 33, the processing unit 11 generates a confirmation signal, and after the mobile device has been verified, the application can proceed to make an online transaction.

  In short, the present invention uses a MEMS device dedicated to the mobile device 1 to prevent organizations from other countries from passing the security verification method using a computer device and / or a computer program. As a result, the application can be executed with a relatively high security level.

  Although the invention has been described with reference to what is considered to be the most practical and preferred embodiment, the invention is not limited to the disclosed embodiment and encompasses all variations and equivalent configurations. Thus, it is understood that it is intended to cover various configurations that fall within the spirit and scope of the broadest interpretation.

DESCRIPTION OF SYMBOLS 1 ... Mobile device 11 ... Processing unit 12 ... Storage unit 13 ... Output unit 131 ... Display device 132 ... Audio speaker 14 ... Motion detection unit 15 ... Button unit 151 ... Volume control button

Claims (8)

A safety verification method performed by a mobile device (1) to verify a mobile device (1), comprising:
The mobile device (1)
A processing unit (11);
A storage unit (12);
An output unit (13);
An operation detection unit (14) and a button unit (15);
Including
The storage unit (12) stores at least one indication of a specific movement;
The safety verification method includes:
(A) configuring the processing unit (11) to obtain the instructions from the storage unit (12);
(B) configuring the output unit (13) to output the instructions;
(C) configuring one of the motion detection unit (14) and the button unit (15) to generate an operation signal in accordance with an operation from a user;
(D) obtaining the motion signal from one of the motion detection unit (14) and the button unit (15) and determining whether the motion signal matches a motion corresponding to the instruction; Configuring the processing unit (11);
(E) configuring the processing unit (11) to generate a confirmation signal indicating that the mobile device (1) has been verified when the determination made in step (d) is affirmative; Steps,
A safety verification method characterized by including:   After the step (d), the processing unit (11) is adapted to generate an error signal indicating that the mobile device (1) is not verified if the determination made in the step (d) is negative. The safety verification method according to claim 1, further comprising the step of:   The storage unit (12) stores a plurality of instructions, and in the step (a), the processing unit (11) is configured to randomly obtain at least one instruction from the storage unit (12). The safety verification method according to claim 1 or 2, characterized in that:   In the step (c), the motion detection unit (14) is configured to detect a movement of the mobile device (1) made by the user and generate an operation signal according to the detected movement. The safety verification method according to any one of claims 1 to 3, characterized in that:   The button unit (15) includes a volume control button (151). In the step (c), the button unit (15) detects an operation of the volume control button (151), and the volume control button ( 151. The safety verification method according to any one of claims 1 to 4, wherein the safety verification method is configured to generate an operation signal generated by the operation 151).   6. The step (c), wherein the output unit (13) is configured to instruct a user to perform a movement corresponding to the instruction. The safety verification method described in 1.   In step (c), the output unit (13) is further configured to instruct the user to perform a movement within a predetermined time limit, and the processing unit (11) further includes the operation signal. The safety verification method according to claim 6, wherein the security verification method is configured to determine whether or not a message is input within the time limit.   8. The determination of claim 1, wherein in step (d), the determination made by the processing unit (11) is positive when the operation signal persists for a predetermined duration. The safety verification method according to any one of the above items.

Images