KR101558897B1 - Method and apparatus for inputting password using security channel interface - Google Patents

Abstract

The present invention relates to a method and apparatus for inputting a password using a covert channel.
According to another aspect of the present invention, there is provided a method for inputting a password, including: sensing a user's operation related to inputting a password; Determining whether an operation of the detected user corresponds to a condition for providing temporary secret information, and providing the temporary secret information when the detected operation corresponds to the condition; And providing an input interface for manipulating and selecting a user password or the temporary secret information.

Description

TECHNICAL FIELD [0001] The present invention relates to a method and apparatus for inputting a password using a secret channel,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method and apparatus for inputting a password, and more particularly, to a method and apparatus for inputting a password to a terminal device or the like and used for user authentication.

Recently, as the spread of smart devices such as smart phones, tablet computers, and computers has expanded, and mobile banking and internet banking have become security-related tasks, it is increasingly necessary for individuals to check and input passwords in public places . However, there is a high possibility that personal information such as a password is easily exposed on the front side of a smart device without physical screening and leaked by a person or a camera. Thus, although many techniques for security and security for password entry have been proposed, there are still few suggestions for satisfying security and convenience in password verification.

Thus, there is a need to develop a physical covert channel for the user to securely confirm or enter the password.

FIG. 1 is a diagram illustrating a configuration of a general channel and a covert channel in a conventional technique.

The secret channel of the existing smart device according to the prior art exists as a separate entity from the general channel. If the normal channel is normally activated and the user calls the secret channel, the secret channel is activated on the screen of the smart device and the password is displayed.

For example, in the case of a physical one-time password (OTP) device, only the user outputs a password that should be visually checked, but the password is always exposed on the screen. Also, even when password and confidential information are confirmed on the smart device screen, the screen is displayed on the whole screen. Thus, passwords displayed using the independent secret channel are likely to be leaked by an attacker (other than a user, a camera, etc.) around the user due to exposure from time to time or a wide exposure range on the screen.

Therefore, in order to cope with this, it is necessary to provide a covert channel interface that provides a covert channel that is not exposed to the user external media while allowing the user to naturally perform physical actions in the covert channel activation method.

On the other hand, Korean Patent Laid-Open Publication No. 2008-0073121 (entitled "FIELD AUTOMATIC DEVICE AND DISPLAY METHOD FOR PREVENTING PASSWORD LEAKAGE OF THE SAME") discloses a method of detecting a password A password input device and method for activating an input menu window and setting a size, position, transparency, and the like of a password input window desired by a user in an active state are proposed.

The present invention relates to a secure password input method using a mobile smart computing device such as a smart phone. More particularly, the present invention relates to a method and system for inputting a password by inputting / The present invention provides a method for providing a plurality of data streams.

It is another object of the present invention to provide a password input device for performing the above method.

According to another aspect of the present invention, there is provided a method for inputting a password, the method comprising the steps of: sensing an operation of a user associated with a password input by a sensor included in an apparatus for inputting a password; Determining whether an operation of the detected user corresponds to a condition for providing temporary secret information, and providing the temporary secret information when the detected operation corresponds to the condition; And providing a user password to be input for user authentication or an input interface for manipulating and selecting the temporary secret information.

In the present invention, the input interface is preferably a touch input interface for sensing a touch operation of the user. Also, controlling the user password or the temporary secret information may include increasing or decreasing the user secret number or the temporary secret information presented at the time when the touch operation exists as the input of the touch input interface in accordance with the touch operation desirable.

Determining whether or not the above condition is satisfied means to determine whether to activate the covert channel providing the temporary secret information, wherein the condition is, for example, when the temporary secret information is displayed on the device The operation of the detected user is to hide the temporary secret information, and the operation for concealing the temporary password can be treated as an operation that satisfies this condition.

In addition, the present invention may further include providing a guide for defining an area for detecting the operation of the user. Here, the determination of whether or not the condition is satisfied may be handled as corresponding to the condition when the region defined by the guide and the region where the detected user's action is located coincide with a predetermined reference or more .

The input interface may include a scroll-type interface for the touch operation in the up-and-down or left-right direction, or a round-type interface for the touch operation in the curved direction.

The method may further include determining whether the user password or the temporary secret information controlled in accordance with the touch operation on the input interface coincides with the already registered user password.

In addition, the present invention may further include the step of providing an error correction button for correcting at least a part of the user password or the temporary password selected and input in the operation interface. And deactivating the confidential channel when the region defined by the guide and the region in which the detected user's operation is located do not coincide with a predetermined reference or more. The temporary secret information may be a one-time password (OTP).

According to another aspect of the present invention, there is provided a password input apparatus comprising: a sensing unit for sensing a user's operation related to inputting a password; Determining whether the detected operation of the user corresponds to a condition for providing temporary secret information, and if the detected operation corresponds to the condition, activating a secret channel for providing the temporary secret information A channel control unit; And an input interface providing unit for providing a user password to be input for user authentication or an input interface for selecting and operating the temporary secret information.

The present invention may further include a determination unit that determines whether the user password or the temporary secret information controlled in accordance with the touch operation on the input interface coincides with the already registered user password. The input interface providing unit may provide a touch input interface for sensing a touch operation of the user as the input interface.

Controlling the user secret number or the temporary secret information may be performed by, for example, increasing or decreasing the user secret number or the temporary secret information presented at a time when the touch operation exists at the touch input interface .

In the present invention, the secret channel control unit may determine, as the condition, whether the operation of the detected user is an operation for concealing the temporary secret information when the temporary secret information is displayed on the apparatus.

The secret channel control unit may further provide a guide for defining an area in which the temporary secret information is displayed, and the step of determining whether the secret channel control unit satisfies the condition may include: And if the region in which the detected user's operation is located coincides with a predetermined reference or more, it may be determined that the condition is satisfied.

When the area defined by the guide and the area where the sensed user's operation is located do not coincide with a predetermined reference or more, the secret channel controller transmits the user secret number or the temporary secret information to the external So as not to be visible.

According to any one of the above-mentioned objects of the present invention, the secret channel for providing the temporary secret information is activated by detecting the physical action of the user, but the temporary secret information is displayed according to the operation of the user. Secure input of password is possible. In addition, the present invention can replace existing technologies, such as OTP, security card, etc., for user authentication through simple software.

FIG. 1 is a diagram illustrating a configuration of a general channel and a covert channel in a conventional technique.
2 is a diagram illustrating a configuration of a general channel and a covert channel according to an embodiment of the present invention.
3 is a block diagram illustrating a password input device according to an embodiment of the present invention.
4 is a flowchart illustrating a method of inputting a password according to an exemplary embodiment of the present invention.
FIG. 5 is a flow chart illustrating the detailed flow of step 150 of providing an input interface in FIG.
FIG. 6 is an example for explaining a concept of activating a secret channel by sensor recognition according to an embodiment of the present invention.
7 is a diagram showing a user view and an attacker field of view of a covert channel in the present invention.
8 is a diagram illustrating a covert channel and an input interface according to another embodiment of the present invention.
9 to 17 are diagrams illustrating examples of a covert channel interface and an input interface provided by a password device according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily carry out the present invention. It should be understood, however, that the present invention may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In the drawings, the same reference numbers are used throughout the specification to refer to the same or like parts.

Throughout the specification, when a part is referred to as being "connected" to another part, it includes not only "directly connected" but also "electrically connected" with another part in between . Also, when an element is referred to as "comprising ", it means that it can include other elements as well, without departing from the other elements unless specifically stated otherwise.

Before explaining the embodiment of the present invention, the configurations of the covert channel and the general channel will be described.

2 is a diagram illustrating a configuration of a general channel and a covert channel according to an embodiment of the present invention.

As shown in FIG. 2, a form in which a covert channel is included in a part of a general channel is different from the conventional technique in FIG. The normally covert channel is in the inactive state and is exposed to a specific area coupled to the common channel when the covert channel interface is activated. The general channel is a public channel that is placed on the front side of the device, so that the screen of the device is easily exposed to an attacker and has a weak security. On the other hand, it has advantages of intuitiveness, convenience and convenience, There is a high advantage.

2, the secret information input device according to the present invention is a device for inputting confidential information in a specific area coupled to a general channel, Can be safely activated.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

Although FIG. 3 shows the configurations for implementing the password input device according to an embodiment of the present invention, other processing units (not shown) may be further included depending on the type of the apparatus. 3 is a block diagram showing a password input device 1 according to an embodiment of the present invention. In an embodiment of the present invention, when the password input device 1 is a portable communication device such as a smart phone, As an example.

In addition, the password input device 1 according to the embodiment of the present invention may be various kinds of devices other than the portable communication devices, and may further include different processing units depending on the type and purpose of each device . For example, when the password input device 1 is an ATM device used in a bank, a communication module connected to the bank computer, a computer processing unit performing bank computer processing for each account, And a user interface module for receiving a bank transaction result or outputting a bank transaction result.

3, the password input apparatus 1 according to the present invention includes a sensing unit 10, a guide providing unit 20, a secret channel control unit 30, an input interface providing unit 40, (50).

First, the sensing unit 10 senses a user's operation related to input of a password. The sensing unit 10 senses an operation of a user for initiating a password input procedure, for example, a touch sensor, a direction sensor, a proximity sensor, and a gravity sensor. Also, the sensing unit may be composed of two or more sensors, and may be implemented through a sensor built in a smartphone, and may be selected by a person skilled in the art depending on the type and application of the device.

The guide providing unit 20 provides a guide for defining an area in which temporary secret information is displayed. The guide providing unit 20 provides a guide for guiding and guiding the sensor recognition method so that the user can input a sensing value matching the condition. The guide provided through the guide providing unit is displayed on the screen of the password input device. At this time, the guide may vary according to the configuration of the sensor, and an example of providing a guide will be described later with reference to the drawings.

The secret channel control unit 30 activates or deactivates the secret channel, and displays a secret channel interface for presenting the secret information when the secret channel is activated. The secret channel control unit 30 of the present embodiment may include a condition determination unit 32 and a secret channel activation unit 34. [ The condition determination unit 32 determines whether the operation of the user detected through the sensing unit 10 corresponds to a condition for providing temporary secret information (a secret channel activation condition). The secret channel activation unit 34 activates a secret channel for providing the temporary secret information when the detected operation of the user corresponds to an activation condition of the secret channel. Conversely, if the activation condition of the covert channel is not satisfied, the covert channel is deactivated.

In particular, when the temporary secret information is displayed on the apparatus, the secret channel activating unit 34 determines whether the detected user's operation is an operation for concealing the temporary secret information, and if the operation of the user is the temporary secret information If it is determined to hide the secret channel, activate the secret channel. The activated secret channel is displayed on the screen through a secret channel interface, and the secret channel interface may include provisional secret information to be presented and a guide for guiding the user action.

The input interface providing unit 40 provides a user password to be input for user authentication or an input interface for selecting and operating the temporary secret information.

The input interface providing unit 40 may provide a touch input interface for sensing a user's touch operation as an input interface. The control of the user secret number or the temporary secret information may be performed by, for example, increasing or decreasing the user secret number or the temporary secret information presented at the time of the touch operation on the touch input interface, .

Here, the input interface may include a scroll-type interface for touch operation in the up-and-down or left-right direction, or a round-type interface for the touch operation in the curved direction. Further, it is also possible to arrange separate up and down buttons (or left and right buttons) so as to constitute an input interface for pressing the corresponding button a certain number of times or for a specific time. If a touch must be maintained for a certain amount of time, vibration can be used to indicate that an increase or decrease in the number is in progress. It is also possible to control the temporary secret information by tilting the device in a certain direction or at a specific angle.

The determination unit 50 determines whether the user password or the temporary secret information controlled according to the touch operation on the input interface coincides with the already registered user password.

4 is a flowchart illustrating a method of inputting a password according to an exemplary embodiment of the present invention. The password input procedure shown in FIG. 4 includes the following steps, which are performed in a time-series manner in the password input apparatus 1.

In step 110, the guide providing unit 20 provides a guide for defining an area for sensing the user's operation. Here, the shape of the guide is not particularly limited.

The guide is intended to derive the user's actions related to starting the password entry. For example, the guide may be displayed as an image of a circular shape, and a temporary password may be displayed inside the guide. In order to prevent the third party from seeing the temporary password, it is preferable that the user action is to clench the temporary password included in the guide by clenching the hand.

In operation 120, the sensing unit 10 senses a user operation. Here, the user operation is an operation for initiating or maintaining the password input procedure. In the present embodiment, the user operation is preferably an operation for allowing the user's touch input along the guide area provided in the guide providing unit.

In operation 130, the condition determination unit 32 determines whether the condition for providing the detected temporary secret information through the sensing unit is satisfied.

Here, the temporary secret information means secret information presented when the temporary channel is activated. This temporary secret information may be presented differently each time the user authentication procedure is performed, and thus is a concept distinguished from the password of the previously registered user.

There are no special restrictions on the types of temporary secret information such as numbers, letters, images, figures, colors, and shapes. In particular, the temporary secret information may be an OTP temporarily granted for user authentication.

In the present embodiment, the secret channel providing unit 30 performs provisional secret information and signal processing for providing a guide, and displays temporary secret information and a guide on the screen. As can be seen from the embodiments shown in the drawings, the secret-channel providing unit includes temporary secret information, a slot S for displaying one or more identifiers constituting the secret number, and a slot S for the user to change the identifier It is possible to provide the wheel W to be operated and to provide the same number of error removal buttons B as the number of password digits that can be moved to the corresponding place of the password.

In this step, the conditions for providing the provisional secret information are that the user operation such as the touch of the user exists in the area specified by the guide, that the password input device is inclined at a certain angle or more, Touch input is present, and so on. This condition may be one or two or more, and the condition judging unit 32 judges that the user operation is suitable for providing temporary secret information when one or more of the above conditions are satisfied.

In the case of a condition in which a user operation such as a touch is present in an area specified by the guide, the touch input (user operation) exists only in a very small part of the area where the guide displayed on the screen of the password input device exists, It is preferable that all of the regions where the guide exists or coincide with a predetermined reference or more so as not to expose the provisional confidential information presented therein. Here, the predetermined criterion may be, for example, a criterion in which multi-touch input exists in at least two of the specific areas located in the guide area.

In operation 140, when the user operation detected in operation 120 satisfies the condition for providing the temporary secret information, the secret channel activation unit 34 activates the secret channel. When the secret channel is activated, the secret channel activation unit provides a secret channel interface for providing temporary secret information to a part of the screen.

Temporary confidential information presented in this step is preferably included in the area defined by the guide, and is presented in the form of one or several digits, letters, images, figures, colors, shapes, and the like.

In operation 132, when the user operation detected in operation 120 does not satisfy the condition for providing the temporary secret information, the secret channel activation unit 34 deactivates the secret channel.

Here, when the condition is not satisfied, for example, there is a case where a touch input is not present in an area defined by the guide, and a part of the hand floor surrounding the temporary secret information is at least partly separated from the guide. In this case, since the provisional secret information to be presented can be viewed from the outside, the secret channel activation unit 34 can perform the operation of stopping the provision of the provisional secret information or performing a hidden process so as not to be visually recognized from the outside.

In step 150, the input interface providing unit 40 provides an input interface. Here, the input interface is for manipulating and selecting the user password or the temporary secret information to be input for user authentication.

The apparatus for inputting a password of the present embodiment can be operated so as to operate (increase or decrease) the temporary secret information through the input interface and to receive the password by selecting the temporary secret information. In this case, the input interface is for inputting the touch operation of the user, and is preferably an interface for receiving the touch operation in the left / right / up and down directions or the touch operation in the curved direction. The temporary secret information selected through the touch operation is transmitted to the determination unit, and the determination unit determines whether the selected temporary secret information is identical to or corresponds to the pre-registered password.

In addition, the password input device may be implemented to increase or decrease the number of the password in consideration of the provisional secret information, by increasing or decreasing the number of the keypad, which is displayed on the input interface.

A touch sensor, a direction sensor, an acceleration sensor, a gyro sensor, a gravity sensor, and the like may be used to receive an operation related to a user's operation.

In step 160, the determination unit 50 determines whether the user password or the temporary secret information controlled according to the touch operation on the input interface coincides with the already registered user password.

The determination unit 50 determines whether the password information of the previously registered user and the temporary secret information or the password input through the selection in step 150 are identical to the previously registered user password.

5 is a detailed flowchart of step 150 of FIG.

In step 152, the input interface providing unit 40 provides a wheel-type or round-type input interface.

In step 154, the input interface providing unit 40 detects the user's operation related to the increase or decrease of the temporary secret information or the user's password. The input interface providing unit is preferably a touch input interface for touch input, and the user can input and control the number through the left / right / up / down touch operation or the rotation touch operation.

In step 156, the input interface providing unit receives either the temporary secret information or the secret number.

FIG. 6 illustrates an example of activating a secret channel according to an embodiment of the present invention and providing temporary secret information through an activated secret channel.

6A, a circular guide 310 according to an embodiment of the present invention can be output to the screen of the password input device 200, that is, to the display unit 220, After confirming the guide 310 on the display unit 220, the user can prepare for input. At this time, the password input device 200 may include a first sensor 231 for recognizing a touch on the circular guide 310 and a second sensor 232 for recognizing proximity to the upper end of the circular guide 310 have.

6 (b), when the user's hand blade touches the guide 310 on the display unit 220 along the guide 310, the first sensor 231 and the second sensor 232 ) Recognizes the operation of the user. At this time, if the generated sensing value meets the touch recognition condition according to the first sensor 231 and the proximity condition according to the second sensor 232, the secret channel interface 320 for providing temporary secret information is activated, 220).

The user can safely identify the covert channel through the activated covert channel interface 320 and deactivate the covert channel interface 320 by disabling at least one sensor recognition of the first sensor 231 and the second sensor 232 State.

In addition, the user can safely input the password through the password input interface after deactivating the secret channel.

Meanwhile, in FIG. 6C, the secret channel is an example showing a one-time password (OTP). One-time passwords (OTPs) are user authentication schemes that use randomly generated, one-time passwords rather than fixed passwords.

FIG. 7 is a diagram illustrating a user view and an attacker view that observe a covert channel according to an embodiment of the present invention.

As shown in FIG. 7 (a), the user's hand forms a screen while the secret channel interface 320 is activated, and only the user can confirm the secret channel in the user-centered view. At this time, the physical range and the degree of maintenance of the covert channel can be adjusted according to the body structure of the user and the type of operation. For example, if the user wishes to enhance confidentiality, he / she can recognize the sensor with his / her hand held narrowly, thus securing a field of view that can be confirmed only by the user. However, if the secret channel interface 320 is activated in a state where the physical confidentiality is weakened, the physical secretion due to the user's hand can not be precisely formed, so that the degree of physical confidentiality can be lowered. Thus, heuristic usability can be provided by appropriately adjusting the confidentiality according to the structure of the user's physique and the body image. On the other hand, as shown in FIG. 7B, the confidential channel interface 320 is hidden by the user's hand in the field of view of the attacker (the user other than the user, the camera, etc.).

FIG. 8 is a diagram illustrating a secret channel interface 320 and a password input interface 330 according to another embodiment of the present invention.

As shown in FIG. 8 (a), a secret channel and a general channel are separately formed at an upper end and a lower end of the display unit 220, respectively. A guide 310 appears on the top channel and a password input interface 330 appears on the bottom channel. When the secret channel interface activation condition is satisfied according to the guide 310, the secret channel interface 320 is activated and the secret channel interface 320 and the password input interface 330 ) On the display unit 220, thereby simultaneously performing the password check and inputting. At this time, the activated secret channel interface 320 may be displayed in any color. As shown in FIG. 8 (c), a secret channel is configured in an arbitrary color, and the corresponding color is temporarily displayed on the password input interface 330, so that the secret information can be informed to the user. For example, when the color designated by the secret channel is red, any one of the numbers of the password input interface 330 is displayed in red, and the user performs a password input using the button marked with red. At this time, if the password provided to the user through the activated secret channel interface 320 matches the secret information used for inputting the password in the password input interface 330, the secure state can be released.

If the sensing value of at least one of the first sensor 231 and the second sensor 232 recognized after the secret channel interface 320 is activated is not maintained, the secret channel interface 320 may be returned to the inactive state have.

9 to 17 are embodiments of a covert channel interface provided by a password input device according to an embodiment of the present invention. The drawing of the present embodiment shows an example of various operations related to the input of the password, which is represented by the sensor 230, the secret channel interface 320, the slot S, and the wheel W in the password input device.

The illustrated embodiments illustrate an authentication technique for entering a password by increasing or decrementing the number displayed in the secret channel interface. It should be noted that the hand operation for covering the covert channel interface is omitted in the following drawings.

As described above, the password value provided through the secret channel interface is not limited to a number. For example, in addition to numbers, colors or letters may be used.

In addition, the sensitivity to the increase or decrease of the password value can be changed by the user more slowly or faster than the default setting. Also, the increase or decrease of the number can be slowed or accelerated by the touch operation (scroll speed).

As shown, the password input device 200 according to an embodiment of the present invention can provide various types and types of interfaces. For example, both the wheel W and the slot S may be provided in a circular shape as shown in Fig. Or the wheel W and the slot S may all be provided in a rectangular shape as shown in Fig.

Also, the operation of the interface can be variously configured. For example, the slot S may show a single secret value or may show more than one secret value, and may be implemented such that the secret value is incremented or decremented in place, or the secret value is incremented or decremented .

In addition, the direction in which the user can increase or decrease the password value on the wheel W can be variously selected. For example, the clockwise direction may be the direction of increasing the password value, or the counterclockwise direction may be the direction of increasing the password value. Or the direction in which the upward direction increases the password value or the downward direction increases the password value.

According to various combinations of these, the password input apparatus 200 according to an embodiment of the present invention can provide various implementations as shown in the following embodiments.

In addition, error cancellation buttons B1 to B4 may be further provided as described above. This makes it possible to correct the wrong place when the wrong password is entered, which enhances convenience and safety.

A common part of each embodiment has been described above. Hereinafter, characteristic portions of the respective embodiments will be described. The description of common parts in the following description may be omitted.

9 shows an example in which the basic interface is configured as a round type or a circular type. In particular, the wheel W is configured as a dial pad. The slot (S) represents one secret value and the current number (4).

The number 4 shown is temporary secret information provided by the secret channel interface,

The user can increase or decrease the number '4' provided as temporary secret information, thereby inputting the selected number as a password.

As described above, in the illustrated embodiment, the number in the covert channel interface can be increased or decreased by operating the dial pad W clockwise or counterclockwise. The first drawing shows an example in which the password value is increased or decreased in place, and the second drawing shows an example in which the password value is increased or decreased by moving.

Through this circular interface, the process of increasing or decreasing the number in the secret channel interface based on the rotation angle and the rotation amount of the dial pad W can be more visually confirmed.

10 shows another configuration example of the circular interface, which shows a secret channel interface configuration for specifying a current password position. It can be seen that the first drawing inputs the second digit of the password and the second drawing inputs the third digit of the password.

FIG. 11 is an embodiment showing that an operation pad can be used as an input interface for increasing or decreasing a number. In the example of Fig. 11, the secret channel interface is an example implemented as a dial pad, and current temporary secret information, "4" is presented through the area specified by the guide. The input interface provided at the bottom is for increasing or decreasing the provisional secret information provided through the dial operation or the touch operation in the curved direction.

FIG. 12 shows an example in which one temporary secret information shown in the secret channel interface, in which the number is incremented or decremented, is selected. In the secret channel interface of the example, a number for the current password is displayed. By incrementing or decrementing the number, the user inputs the password for each digit by matching the password.

13 shows input of the first password '1' among the passwords '1234'.

First, the first drawing is the initial screen, and the second drawing is the screen on which the secret channel interface is activated. The number '4' is temporary secret information presented through the secret channel interface.

The third figure shows the way of decreasing the number '4' through the lower operating pad, namely the wheel W. For example, you can drag the wheel down to decrease the number, drag up to increase the number, or reverse to work. You can also increase or decrease the number by dragging it clockwise or counterclockwise, or dragging it to the right or left.

In the fourth drawing, the touch operation is canceled and the password '1' is input when the number displayed in the slot S coincides with '1' which is the first position of the password. After entering the one-digit password, proceed to the next step.

The numbers, which are temporary secret information provided for the first password entry, are configured randomly. The remaining digits (after the second digit) except for the first password The number provided for entering the password may be randomly configured, or may consist of the previously entered password. In the latter case, when the first password is '1', the initial number in the password value transfer interface for inputting the second password is '1'.

13 is presented as an example of using a scheme in which the secret number in the secret input interface increases or decreases as it moves in a certain direction, rather than in place. Through this method, the process of increasing or decreasing the number can be visually confirmed, thereby allowing a more accurate input of the password.

FIG. 14 shows an example of an interface configuration in which all four digits are displayed on the secret channel interface as temporary secret information.

Each slot number is distinguished by using a slot S in which a space is divided, and additionally shows values before and after the corresponding number. In the illustrated embodiment, the number is increased or decreased by dragging up or down on the operation pad W. The interface can see the input process for the four digits of the password at once, and when the password is input, the corresponding digit is displayed as '*'

Figs. 15-17 illustrate various embodiments of the slot of Fig.

The numbers before and after the numbers displayed in the slots may be indicated together with the divided spaces as shown in FIG. 15, or the divided spaces may be shown without being shown in FIG. 16, or the numbers before and after the divided space May not be shown.

Also, the increase or decrease in the number displayed in the slot may be made in place as shown in FIG. 15 or may be performed while moving as shown in FIGS. 16 and 17.

In the above embodiment, the temporary secret information is increased or decreased, and the selected temporary secret information is processed as a password to be input by the user.

According to another embodiment of the present invention, the input interface can be implemented to provide a numeric keypad in which passwords for inputting a password are listed. The presented numeric keypad can change, increase or decrease the numbers displayed on the keypad through the scroll touch operation. In particular, the numeric keypad can be implemented so that the password can be easily manipulated through a slotted operation. The numeric keys listed in the numeric keypad may be implemented such that the numbers are increased or decreased, respectively, or the numbers are increased or decreased according to the rows / columns.

In this case, the input of the password can be completed by matching the provisional secret information presented through the secret channel with the numbers listed in the numeric keypad. Here, the provisional secret information and the key in which the secret numbers are listed are associated with each other, for example, by arranging the keypad in which the temporary secret information is arranged and the keypad in which the password is arranged in the same or similar manner, And to manipulate and position the user's password at the location of the provisional secret information specified on the keypad.

Here, the keypad in which the temporary secret information is arranged and the keypad in which the password is arranged may be configured differently. For example, if four temporary keypads of "red, blue, gray, And a keypad in which a password is arranged may be implemented to provide numbers from 0 to 9 and an input interface that assigns different colors to the corresponding numeric keys. At this time, the user can input the password by increasing or decreasing the number of the keypad on which the presented colors are located through a scroll operation or the like.

One embodiment of the present invention may also be embodied in the form of a recording medium including instructions executable by a computer, such as program modules, being executed by a computer. Computer readable media can be any available media that can be accessed by a computer and includes both volatile and nonvolatile media, removable and non-removable media. In addition, the computer-readable medium may include both computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Communication media typically includes any information delivery media, including computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave, or other transport mechanism.

It will be understood by those of ordinary skill in the art that the foregoing description of the embodiments is for the purpose of illustration and that those skilled in the art will readily understand that various changes may be made without departing from the spirit and scope of the invention. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive. For example, each component described as a single entity may be distributed and implemented, and components described as being distributed may also be implemented in a combined form.

The scope of the present invention is defined by the appended claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included within the scope of the present invention.

Claims (17)

In the password input method,
Wherein the sensor included in the device for inputting the password detects a user's operation related to inputting the password;
Determining whether an operation of the detected user corresponds to a condition for providing temporary secret information, and providing the temporary secret information when the detected operation corresponds to the condition; And
Providing a user password to be input for user authentication or an input interface for manipulating and selecting the temporary secret information,
Wherein the judging means judges whether the detected user's operation is an operation for concealing the temporary secret information when the temporary secret information is displayed on the device. The method according to claim 1,
Wherein the input interface is a touch input interface for sensing a touch operation of the user,
Wherein the control of the user secret number or the temporary secret information comprises increasing or decreasing the user secret number or the temporary secret information presented at the time of the touch operation as an input of the touch input interface according to the touch operation Password input method. delete The method according to claim 1,
Further comprising the step of providing a guide defining an area for sensing the operation of the user,
Wherein it is determined that the condition corresponds to the condition when the region defined by the guide and the region where the detected user's operation is located match the predetermined reference or more, Password input method. The method according to claim 1,
Wherein the temporary secret information is provided through a secret channel interface distinct from the input interface,
The input interface may be a scroll-type interface for touch operation in the vertical or horizontal direction,
And a round type interface for a touch operation in a curved direction. 3. The method of claim 2,
Further comprising the step of determining whether the user password or the temporary secret information controlled in accordance with the touch operation on the input interface coincides with the already registered user password. 5. The method of claim 4,
When the area defined by the guide and the area where the detected user's action is located do not match more than a predetermined reference,
Further comprising the step of deactivating a secret channel providing the temporary secret information. The method according to claim 1,
Further comprising the step of providing an error correction button for correcting at least a part of the user password or temporary password selected and input in the operation interface. The method according to claim 1,
Wherein the temporary secret information is a one-time password (OTP). A computer-readable recording medium having recorded thereon a program for performing a password inputting method according to any one of claims 1 to 4 or 9 to 9 on a computer. A user password input device comprising:
A sensing unit for sensing an operation of a user associated with the input of the password;
Determining whether the detected operation of the user corresponds to a condition for providing temporary secret information, and if the detected operation corresponds to the condition, activating a secret channel for providing the temporary secret information A channel control unit; And
And an input interface providing unit for providing a user password to be input for user authentication or an input interface for selecting and operating the temporary secret information,
Wherein it is determined whether the operation of the detected user is an operation for concealing the temporary secret information when the secret secret information is displayed on the apparatus, Password input device. 12. The method of claim 11,
Further comprising a determination unit for determining whether the user password or the temporary secret information controlled according to the touch operation on the input interface coincides with an already registered user password. 12. The method of claim 11,
Wherein the input interface providing unit provides a touch input interface for sensing a touch operation of the user as the input interface,
Wherein the control of the user secret number or the temporary secret information increases or decreases the user secret number or the temporary secret information presented at a time when the touch operation is present on the touch input interface according to the touch operation Password input device. delete 12. The method of claim 11,
Further comprising a guide providing unit for providing a guide for defining an area in which the temporary secret information is displayed,
The determining whether or not the secret channel control unit satisfies the condition corresponds to the condition when the region defined by the guide and the region where the detected user's action is located coincide with a predetermined reference or more Wherein the password input device is a password input device. 12. The method of claim 11,
Wherein the secret channel control unit provides the temporary secret information through a secret channel interface distinct from the input interface,
The input interface may be a scroll-type interface for touching up or down or left or right, or
And a round type interface for a touch operation in a curved direction. 16. The method of claim 15,
When the area defined by the guide and the area where the detected user's action is located do not match more than a predetermined reference,
Wherein the secret channel controller hides the user password or the temporary secret information so that the user password or the temporary secret information can not be visually recognized outside the apparatus.

Images