TW201616381A - Identification barcode generating and login method - Google Patents

Abstract

A identification barcode generating method is adapted for operating in a server, and for a client. The barcode generating method includes: generating an original barcode, hiding the account into the original barcode for generating an account barcode, and generating a verification datum at least according to a password and the account barcode. A login method using barcode includes: sending an account barcode and at lease one user key to a server, the server obtaining an account from the account barcode by using a server key, the server obtaining a password from the verification datum by using the account barcode and the at least one user key, and logging the server by the obtained account and password.

Description

Identification barcode generation and login method

The invention relates to an identification barcode generation and login method, in particular to a barcode generation and login method for hiding information from a QR (Quick Response) code.

Due to the development of the Internet age, more and more Internet services have emerged, providing a more convenient life for modern people. However, because of this, the average user often has multiple sets of website accounts and passwords due to different network services, which causes memory and security problems of managing accounts and passwords. For the convenience of the average user, the account and password of multiple websites are often set to the same group or personal information that is easy to remember. As a result, it is easy for others to know or steal. Others may use the same group of account passwords. Log in to a personal related website. In addition, if the account password is recorded in the memo of the notebook or device, it may also pose a security risk due to loss or theft.

In view of the above problems, the present invention discloses a method for generating a barcode, which is applied to a client and a server. The method for generating a barcode includes: generating an original barcode and hiding an account of the client into the original barcode. To generate an account barcode, and at least generate a password according to the account barcode and the client. A verification message.

Corresponding to the foregoing method for generating an identification barcode, the present invention also discloses a login method using an identification barcode. The login method includes: transmitting an account barcode and at least one user key from a client to a server. The server obtains an account by using the account barcode. The server obtains a password by using an account barcode, a verification information, and at least one user key. And log in to the server by using the obtained account and password.

The above description of the present invention and the following description of the embodiments of the present invention are intended to illustrate and explain the spirit and principles of the invention.

1‧‧‧Client

2‧‧‧ server

11‧‧‧ Account barcode

12‧‧‧User Key

21‧‧‧Verification information

S201-S205‧‧‧Steps

31‧‧‧ original barcode

32‧‧‧ account barcode

33‧‧‧ Password Information

34‧‧‧Verification information

S401-S407‧‧‧Steps

1 is an architectural diagram in accordance with an embodiment of the present invention.

2 is a flow chart of a bar code generation method according to an embodiment of the present invention.

Figure 3 is a schematic diagram showing the generation of verification information in accordance with an embodiment of the present invention.

Figure 4 is a flow chart of a login method in accordance with an embodiment of the present invention.

Figure 5 is a schematic diagram of a login method in accordance with an embodiment of the present invention.

The detailed features and advantages of the present invention are set forth in the Detailed Description of the Detailed Description of the <RTIgt; </ RTI> <RTIgt; </ RTI> </ RTI> </ RTI> <RTIgt; The objects and advantages associated with the present invention can be readily understood by those skilled in the art. The following examples are intended to further illustrate the aspects of the invention, but not any The views limit the scope of the invention.

See Figure 1. 1 is an architectural diagram in accordance with an embodiment of the present invention. As shown in FIG. 1, the architecture of the present invention includes a client 1 and a server 2, the client 1 has an account barcode 11 and a user key 12, and the server 2 has authentication information 21. The traditional login method is that when the client 1 wants to log in to the server 2 to use the service provided by the client 2, the user account and password are usually input through the login system interface of the server 2, and the server 2 is verified by the client information in the database. The password of the received account is correct. If it is correct, the client 1 is allowed to log in. If it is incorrect, the client 1 is denied login. However, the traditional user identification login system reduces the convenience of the user because the user needs to memorize multiple sets of accounts and passwords. Therefore, in the architecture of the present invention, when the client 1 wants to log in to the server 2, the account barcode 11 and the key 12 of the client 1 need to be transmitted to the server 2 without any account and password. The server 2 reuses the stored verification information 21, and with the received account barcode 11 and the user key 12, the account and password corresponding to the client 1 are obtained and the identification login is completed. The following details will be described in detail. content.

See Figure 2. 2 is a flow chart of a method for generating an identification barcode according to an embodiment of the present invention. As shown in FIG. 2, the account barcode and the verification information of the present invention are generated in the following three steps: step S201 is to generate an original barcode, and step S203 is to hide the account of the client into the original barcode to generate an account barcode, and step S205 is at least Generate a verification message based on the account barcode and password.

In step S201, an original barcode is generated, which may be generated by any barcode generator, and the barcode content may be any information of the server. The client only needs to The device scans and can be connected to the server. For example, the client can scan the original barcode using any scanning device or application to connect to the service website or service application. Therefore, the server information may be information of a website of the server or other server, and the present invention is not limited thereto.

In step S203, after the original barcode has been generated by step S201, the server further hides the account of the client into the original barcode to generate an account barcode, and provides the account barcode to the client for later login. For example, when the original QR code is generated by the step S201, the server hides the account of the user terminal into the original server QR code to generate the account QR code, and then transmits the account QR code to the client. The client receives and stores the QR code of the account, and then can log in to the server with the account QR code, eliminating the trouble of memorizing the server account.

The above technique for hiding an account to a barcode is to write at least one information to be hidden into the original server barcode. Taking a two-dimensional barcode as an example, the barcode can conform to specifications such as a Quick Response code, a Data Matrix, or a Portable Data File 417 (PDF417). The two-dimensional barcode can include multiple module positions, and the module position refers to a space in the barcode that can be filled with any bar code data or error correction code, and can be square, strip or circle. When the barcode is obtained, the bits are recorded one by one at these module locations. Taking black and white bar codes as an example, the module position can be filled (black) or blank depending on the filled bits. The fault-tolerant interval of the bar code provides a fault-tolerant mechanism, and the information on the bar code can be correctly restored even if the bar code is not recognized or the bar code is defaced. In addition, the fault tolerance interval is also Can be used to hide information from it. Therefore, the technology of hiding the account to the barcode uses the fault tolerance interval of the barcode itself, so that the barcode is modified to still completely carry the barcode data encoded at the time of generation. The length of the information to be hidden cannot generally exceed the error correction capacity of the barcode, or even less than a custom upper limit.

For example, in one embodiment, the present invention utilizes the error correction capacity in the QR code to modify its original content in certain pixels on the black and white bar code (eg, changing the original pixel value from 0 to 1, or It is changed from 1 to 0). Since the encrypted account number and password can also be represented by a series of 0s or 1s in the digits, they can be hidden into the error correction capacity of the original QR code. The new account QR code and password QR code generated after the modification differs from the original QR code only in the difference of some pixels, but the original server information has not changed. That is to say, the original QR code, the account QR code and the password QR code can also be scanned by the device, and can be connected to the server without affecting the use of the QR code by the client or the server.

In addition, when the account is to be hidden to the bar code, the steganography is often associated with the encryption of the key, so that the hidden information is not easily parsed out of the original content even if it is intercepted, and the process is more secure. Therefore, the account can be encrypted by the key and then hidden in the original QR code. Whether the account is encrypted or not can be determined according to system requirements, and the present invention is not limited thereto. In addition, the number of keys may be at least one or more according to requirements, for example, two encryptions are used to encrypt the two keys, thereby improving security.

In step S205, the server performs an operation process according to the account barcode generated in step S203 and the password of the client to generate verification information. Among them For the method of verifying information, please refer to Figure 3. Figure 3 is a schematic diagram showing the generation of verification information in accordance with an embodiment of the present invention. As shown in FIG. 3, first, the account number is hidden into the original barcode 31 to generate the account barcode 32 (ie, step S203). Then, the user password can be operated to generate the password information 33, wherein the password information 33 can be a single code, or other information that can include the password, and the invention is not limited thereto. Subsequently, the account barcode 32 and the password information 33 are processed to obtain the verification information 34. The purpose of the arithmetic processing is to integrate the account barcode and the password information into a verification information, which is stored in the server, and the operation processing can be any operation, such as an operation characteristic using an exclusive or operation (XOR) operation, and the present invention does not limit.

As described above, the exclusive OR operation assumes that XOR(A, B) = C holds, and XOR(B, C) = A and XOR(A, C) = B both hold. Among them, A, B and C are three operands, and XOR is an XOR operator. In other words, any two of the above three operands are XORed to obtain a third party. For example, if A represents an account barcode, B represents password information, and C represents verification information. As described in step S205, the account bar code and the password information are subjected to XOR operation to obtain verification information (XOR(A, B)=C), and the account bar code is stored in the user end, and the verification information is stored in the server. Then, when the subsequent user needs to log in, the account barcode is transmitted to the server. Although the server does not store the password information, the password information can be obtained by XOR the account barcode and the verification information (XOR(A, C). ) = B). In this way, the client and the server only need to store the account barcode and the verification information separately, and the related password information can be obtained through the exclusive OR operation.

In an embodiment, the XOR operation is for the binarization of the QR code. Graphics (black and white bar code), executed at each pixel on the graph. For example, assume that the generated QR code and password QR code have a graphic length and width of 64 pixels, that is, two 64x64 square graphics. When the QR code is to be generated, the pixel corresponding to the error correction capacity in the account QR code and the password QR code is checked one by one, and the truth value table according to the exclusive OR operation (XOR(0,0)=0, XOR( 0,1)=1, XOR(1,0)=1, XOR(1,1)=0) The two corresponding pixels are operated. For example, assuming that the pixel of the coordinate (10, 10) in the account QR code belongs to the error correction capacity and the pixel value is 0, and the pixel value of the coordinate (10, 10) in the password QR code is 1, the pixel value of the QR code is verified. It is 1 (XOR(0,1)=1), so that the final verified QR code can be obtained.

As described above, the generation of the password information 33 may be the original user password or encrypted using at least one cryptographic method. The password method may be that the original password is used directly, the password is encrypted by a key, or the password is encrypted by the key and then hidden in the barcode. The invention is not limited thereto. For example, in the method of concealing a password into a barcode after encrypting the password, the steganography is often associated with the encryption of the key, so that the hidden information is not easily parsed out of the original content even if intercepted. The process is safer. Therefore, the password is first encrypted by the key, hidden in the original QR code, and further XORed with the account QR code to generate the verification QR code. Whether the password is encrypted or not can be determined according to system requirements, and the present invention is not limited thereto.

See Figure 4. Figure 4 is a flow chart of a login method in accordance with an embodiment of the present invention. As shown in FIG. 4, the login method of the present invention is based on the following steps: Step S401 is to transfer an account barcode and at least one user key from the client to Server. In step S403, the server obtains an account by using an account barcode. In step S405, the server obtains the password by using the account barcode, the verification information, and the at least one user key. Step S407 is to log in to the server by using the obtained account and password.

In step S401, the client transmits an account barcode and at least one user key to log in to the server. For example, when the user wants to use the service provided by the server, the account QR code and the user key stored on the mobile device can be transmitted to the server to log in to the server. It is worth mentioning that, in an embodiment, the user key may be a string set by the user, or a Subscriber Identity Module (SIM) code attached to the mobile device, or any other The identification code may have a unique identity recognition function, and the present invention is not limited thereto.

There are two main functions of the user key, one is to be transmitted to the server for subsequent decryption. Second, to ensure the security of the client. If the account barcode is lost or stolen, even if the illegal user owns the account barcode and transmits it to the server, the server cannot be logged in without the user key. Therefore, in addition to improving the convenience of the client, the combination of the account barcode and the user key can still ensure the security of its use. For example, suppose the user key is the mobile phone user identity module code of the user end. If the QR code of the client's account is spread due to leakage, but the mobile phone is not lost, the illegal user has the QR code of the client's account, but When logging in to the server, it will still be denied login due to incorrect user key (user identity module code). In this way, the security of the client can be greatly ensured.

In step S403, after receiving the account barcode transmitted by the client, the server can obtain the account from the account barcode. For example, when the client transmits the account QR code to the server, the server can obtain the account from the account QR code. In step S405, after receiving the account barcode transmitted by the client and the at least one user key, the server decrypts the verification information stored in the server to obtain the password information, wherein the password information may be a code, or other The information including the password is not limited to the present invention. For example, when the user wants to log in to the server, the server decrypts the stored verification QR code, the user's transmitted account barcode and the user key, and decrypts the password of the user. In another embodiment, the account number, password, and key of the present invention are defined in a broad sense, and the user terminal can also transmit the password information to the server to obtain an account. The present invention is not limited thereto.

In step S407, the server can obtain the account number and password of the client by the above steps. If the account password of the client in the server verification database is correct, the client can log in to the server system. For the method of obtaining the password of the user account in step S403 and step S405, please refer to FIG. 5 together. Figure 5 is a schematic diagram of a login method in accordance with an embodiment of the present invention. As shown in FIG. 5, when the user wants to log in to the server to use the system, the client transmits the account QR code 11 and the user key 12 to the server 2. After receiving the server 2, the server 2 is divided into two steps to solve the account and password of the client.

As described above, after the server obtains the account QR code 11, the server receives the account number of the client with the account QR code 11 (step S403). Subsequently, the account QR code 11 is XORed with the verification QR code 21 stored at the server to obtain a password QR code. 33 (step S405), and the password QR code 33 is decoded by the user key 12 to obtain a password. In this way, the server 2 can obtain the account number and password of the client, further verifying the correctness and determining whether the user can legally log in.

In summary, the present invention utilizes the special encryption feature of the barcode and the advantage of decoding convenience, and stores the complicated and troublesome account and password in a barcode manner, so that the user can log in to the server more conveniently. Therefore, the present invention can be widely used for identity verification purposes in addition to improving convenience.

Although the present invention has been disclosed above in the foregoing embodiments, it is not intended to limit the invention. It is within the scope of the invention to be modified and modified without departing from the spirit and scope of the invention. Please refer to the attached patent application for the scope of protection defined by the present invention.

31‧‧‧ original barcode

32‧‧‧ account barcode

33‧‧‧ Password Information

34‧‧‧Verification information

Claims (11)

A method for generating a barcode is applied to a client and a server. The method for generating a barcode includes: generating an original barcode; hiding an account of the client into the original barcode to generate an account barcode; and at least A verification message is generated according to the account barcode and a password of the client. The method for generating an identification barcode according to claim 1, wherein in the step of generating the account barcode, the account is written into at least one fault tolerance interval of the original barcode to obtain the account barcode. The method for generating an identification barcode according to claim 1, wherein in the step of generating the account barcode, the account barcode is generated and stored in the client. The method for generating an identification barcode according to claim 1, wherein in the step of generating the verification information, the verification information is generated and stored in the server. The method for generating an identification barcode according to claim 1, wherein the step of generating the verification information comprises: generating a password information according to the password; and generating, according to the password information, the account barcode and the at least one user key processing The verification information. The method for generating an identification barcode according to claim 5, wherein in the step of generating the password information, the password of the client is encrypted by using the password to generate the password information. A login method using an identification barcode, the login method includes: transmitting an account barcode and at least one user key from a client to a server; the server obtains an account by using the account barcode; the server Obtaining a password by using the account barcode, a verification information, and the at least one user key; and logging in to the server by using the obtained account and the password. The login method of claim 7, wherein the account barcode is generated by hiding the account in at least one fault tolerance interval of the original barcode, and the content of the original barcode is the connection information of the server. The login method of claim 7, wherein the verification information is generated based at least on the password and the account barcode. The login method of claim 7, wherein the at least one user key is used for encryption or decryption of the login process. The login method of claim 7, wherein in the step of obtaining the password of the user terminal by using the account barcode, the verification information, and the at least one user key, the password is via the account barcode and the verification information. After the operation, a password information is obtained, and the password information is decrypted by using the at least one user key to obtain the password of the user end.