TWI669625B - Method for protecting PIN code of touch screen and information processing device using same - Google Patents

Abstract

A touch screen PIN code protection method includes the following steps: displaying a dynamic security keyboard on a touch screen for a user to perform a PIN code input operation; using a touch integrated circuit to detect the PIN code At least one touch point coordinate generated by an input operation; converting the at least one touch point coordinate into a PIN code in the touch integrated circuit according to a character and coordinate correspondence table of a character of the dynamic security keyboard; and in the touch product The body circuit performs a PIN code verification procedure on the PIN code according to a pre-stored registration PIN code.

Description

Method for protecting PIN code of touch screen and information processing device using same

The invention relates to a method for protecting a PIN (Personal Identification Number) code, in particular to a method for protecting a touch screen PIN code.

With the development of various smart terminals, the screen has become the center of human-computer interaction, and the display has also integrated more and more functions, such as from the most basic display and touch to pressure sensing, fingerprint sensing, and voiceprint sensing. And iris acquisition and more. Some of this sensing information is not related to security, while others are related to personal privacy and even payment security. If the collection, transmission, processing, and storage of information is not well protected, there will be very large security risks. That is to say, when the screen gradually becomes the collection or interaction center of information input and output, the screen is equivalent to a large integrated sensor, so its integrated circuit under the screen needs to provide high input and output information. Quality, stable and secure information management and control to provide basic guarantees for the secure collection and safe transmission of information.

Please refer to FIG. 1, which is a system block diagram of a conventional smart terminal. As shown in FIG. 1, the conventional smart terminal has a display module 10 and an application processor (AP) 20, wherein the display module 10 has a panel 11 and a control circuit 12, and The application processor 20 includes a tag data packaging module 21 and a touch information analysis module 22. In addition, the panel 11 has a display unit 11a and a touch unit 11b; and the control circuit 12 has a target determination unit 12a and a target data transmission unit 12b.

During operation, the panel 11 transmits the sensing data detected by the touch unit 11b to the control circuit 12, the coordinate determining unit 12a determines at least one touch point coordinate according to the sensing data, and the coordinate data transmitting unit 12b The coordinates of the at least one touch point are directly transmitted to the application processor 20. After the coordinates of the at least one touch point are packaged by the coordinate data packaging module 21, they are processed by the touch information analysis module 22 to parse out information corresponding to a touch operation.

However, since the touch point coordinate information of the display module 10 is directly passed to the application processor 20 for processing, for some financial applications' PIN (Personal Identification Number) code verification, the touch location information is actually related to PIN codes correspond one-on-one. Once intercepted by malware in an open environment, it will have an irreversible impact on transaction security.

In order to solve the above problems, a new PIN code protection method for a touch screen is urgently needed in the art.

An object of the present invention is to disclose a PIN code protection method for a touch screen, which can perform a registered PIN code storage operation and a PIN code verification operation inside a touch integrated circuit to ensure the registered PIN code and The PIN code will not flow out of the touch integrated circuit.

Another object of the present invention is to disclose a PIN code protection method for a touch screen, which can strengthen a registered PIN code storage operation and a PIN code verification by providing a dynamic or time-varying security keyboard on a touch screen. Information security of the operation.

Another object of the present invention is to disclose a PIN code protection method for a touch screen, which can provide a PIN code protection mechanism by performing a registered PIN code storage operation and a PIN code verification operation in a touch integrated circuit. And a revocability mechanism to greatly reduce the requirements for a safe operating environment of the PIN code, thereby providing a secure PIN code cross-device authentication environment and improving the flexibility of identity authentication.

In order to achieve the aforementioned purpose, a PIN code protection method for a touch screen is proposed, which includes the following steps:

Displaying a dynamic security keyboard on a touch screen for a user to perform a PIN code input operation;

Using a touch integrated circuit to detect at least one touch point coordinate generated by the PIN code input operation;

Converting the coordinates of the at least one touch point into a PIN code in the touch integrated circuit according to a character and coordinate correspondence table of the dynamic security keyboard;

A PIN code verification procedure is performed on the PIN code in the touch integrated circuit based on a pre-stored registration PIN code.

In one embodiment, the dynamic security keyboard is generated by an application processor.

In one embodiment, the correspondence table of characters and coordinates of the dynamic security keyboard is generated by the application processor.

In one embodiment, the touch integrated circuit executes the PIN code verification program according to a PIN code verification request signal of the application processor, and notifies the application processor of the result of the PIN code verification program.

To achieve the foregoing object, the present invention further provides an information processing device, which provides a PIN code verification function by using the PIN code protection method of the touch screen as described above.

In order to enable your reviewers to further understand the structure, characteristics, and purpose of the present invention, drawings and detailed descriptions of the preferred embodiments are attached below.

Please refer to FIG. 2, which is a block diagram of an information processing device to which the method of the present invention is applied. The information processing device may be a smart phone. As shown in FIG. 2, the information processing device includes a touch screen module 100 and an application processor 200, wherein the touch screen module 100 has a panel 110 and a touch integrated circuit 120, and application processing The device 200 includes a dynamic secure keyboard generating module 210, a dynamic secure keyboard character and coordinate mapping table storage unit 220, and an application identity authentication management module 230. In addition, the panel 110 has a display unit 110a and a touch unit 110b; and the touch integrated circuit 120 has a target determination unit 120a, a PIN code information analysis unit 120b, a registered PIN code storage unit 120c, and a PIN code verification Unit 120d.

During a registration PIN code storage operation, the panel 110 displays a dynamic security keyboard on the display unit 110a for a user to perform a registration PIN input operation, and the dynamic security keyboard is trusted by the application processor 200 according to a trusted A time-varying keyboard generated by an application program; the coordinate determining unit 120a of the touch integrated circuit 120 generates at least one touch point coordinate according to the PIN code registration input operation detected by the touch unit 110b; the touch integrated circuit 120 The PIN code information parsing unit 120b converts the at least one touch point coordinate into a registered PIN code according to a character and coordinate correspondence table DKBDTBL of the dynamic security keyboard and stores it in the registered PIN code storage unit 120c.

During a PIN code verification operation, the panel 110 displays the dynamic security keyboard on the display unit 110a for a user to perform a PIN code input operation. The dynamic security keyboard is controlled by the application processor 200 according to the trusted application. Generated; the coordinate determining unit 120a of the touch integrated circuit 120 generates at least one touch point coordinate according to the PIN code input operation detected by the touch unit 110b; the PIN code information parsing unit 120b of the touch integrated circuit 120 The at least one touch point coordinate is converted into a PIN code according to the character and coordinate correspondence table DKBDTBL of the dynamic security keyboard; and the PIN code verification unit 120d of the touch integrated circuit 120 is based on the application identity of the application processor 200 A verification request signal VRQST generated by the authentication management module 230 executes a PIN code verification procedure, and generates a verification result signal VRSLT according to the verification result of the PIN code verification procedure to notify the application identity authentication management module 230, wherein the PIN code The verification procedure compares the PIN code according to the registration PIN code pre-stored in the registration PIN code storage unit 120c to confirm the correctness of the PIN code.

That is, by performing a registered PIN code storage operation and a PIN code verification operation inside the touch integrated circuit 120, the present invention can ensure that the registered PIN and the PIN code do not flow out of the touch integrated circuit. . In addition, by providing a dynamic or time-varying security keyboard on the display unit 110a, the present invention can also enhance the information security of the registered PIN code storage operation and the PIN code verification operation.

In addition, the touch integrated circuit 120 may further provide a registered PIN code revocation mechanism to cancel a registered PIN code after a predetermined number of consecutive verification failures occur in the PIN code verification operation, so as to prevent people from using the stolen PIN. The code passes the authentication procedure of a resource system. In other words, the technical solution of the present invention can greatly reduce the requirements for a safe operating environment of the PIN code, thereby providing a secure PIN code cross-device authentication environment and improving the flexibility of identity authentication.

According to the above description, the present invention provides a PIN code protection method for a touch screen. For a flowchart of an embodiment, please refer to FIG. 3. As shown in FIG. 3, the method mainly includes: displaying a dynamic security keyboard on a touch screen for a user to perform a PIN code input operation (step a); detecting the PIN code using a touch integrated circuit At least one touch point coordinate generated by the input operation (step b); the at least one touch point coordinate is converted into a PIN code in the touch integrated circuit according to a character and coordinate correspondence table of the dynamic security keyboard (step c) ); And performing a PIN code verification procedure on the PIN code according to a pre-stored registration PIN code in the touch integrated circuit (step d).

Since the input of the PIN code is performed on a dynamic or time-varying secure keyboard, and the registration and verification operations of the PIN code are performed in the touch integrated circuit of the touch screen, the technical solution of the present invention has a high degree of Security can be used for cross-device authentication.

In addition, according to the above principle, the present invention can apply the method flow of FIG. 3 to an information processing device, so that a user can complete a secure and trusted PIN with a local device through the information processing device. Code authentication process, or complete a secure and trusted PIN code authentication process by connecting to a remote device via the network. In addition, the information processing device of the present invention may also set a revocation mechanism to revoke a registered PIN code data when the number of failures of the PIN code authentication process reaches a predetermined number.

With the design disclosed above, the present invention can provide the following advantages:

1. The PIN code protection method of the touch screen of the present invention can ensure that the registered PIN code and the PIN code will not pass through a registered PIN code storage operation and a PIN code verification operation inside a touch integrated circuit. Flow out of the touch integrated circuit.

2. The PIN code protection method of the touch screen of the present invention can enhance the information security of a registered PIN code storage operation and a PIN code verification operation by providing a dynamic or time-varying security keyboard on a touch screen.

3. The PIN code protection method of the touch screen of the present invention can provide a PIN code protection mechanism and a revocability mechanism by performing a registered PIN code storage operation and a PIN code verification operation in a touch integrated circuit. In order to greatly reduce the requirements of the safe operating environment of the PIN code, thereby providing a secure PIN code cross-device authentication environment and improving the flexibility of identity authentication.

What is disclosed in this case is a preferred embodiment. For example, those who have partial changes or modifications that are derived from the technical ideas of this case and are easily inferred by those skilled in the art, do not depart from the scope of patent rights in this case.

To sum up, regardless of the purpose, method and effect, this case is showing its technical characteristics that are quite different from the conventional ones, and its first invention is practical, and it is also in line with the patent requirements of the invention. Granting patents at an early date will benefit society and feel good.

Display module 10 Panel 11, 110 Display unit 11a, 110a Touch unit 11b, 110b Control circuit 12 Coordinate determination unit 12a, 120a Coordinate data transmission unit 12b Application processor 20, 200 Coordinate data packaging module 21 Touch information analysis module Group 22 Touch screen module 100 Touch integrated circuit 120 PIN code information analysis unit 120b Registered PIN code storage unit 120c PIN code verification unit 120d Dynamic security keyboard generation module 210 Dynamic security keyboard character and coordinate correspondence table storage unit 220 Application The identity authentication management module 230 displays a dynamic security keyboard on a touch screen for a user to perform a PIN code input operation--step a uses a touch integrated circuit to detect at least the generated PIN code input operation. A touch point coordinate-step b converts the at least one touch point coordinate into a PIN code in the touch integrated circuit according to a character and coordinate correspondence table of the dynamic security keyboard-step c in the touch integrated circuit Perform a PIN code verification procedure on the PIN code according to a pre-stored registration PIN code in the circuit-step d

FIG. 1 is a system block diagram of a conventional smart terminal. FIG. 2 is a block diagram of an information processing apparatus to which the method of the present invention is applied. 3 is a flowchart of an embodiment of a PIN code protection method for a touch screen of the present invention.

Claims (4)

A touch screen PIN code protection method includes the following steps: displaying a dynamic security keyboard generated by an application processor external to the touch screen on a touch screen for a user to perform a PIN code input operation ; Using a touch integrated circuit in the touch screen to detect at least one touch point coordinate generated by the PIN code input operation; in the touch integrated circuit according to a character and coordinate correspondence table of the dynamic security keyboard Converting the coordinates of the at least one touch point into a PIN code; and performing a PIN code verification procedure on the PIN code according to a pre-stored registration PIN code in the touch integrated circuit. The touch screen PIN code protection method according to item 1 of the patent application, wherein the character and coordinate correspondence table of the dynamic security keyboard is generated by the application processor. The method for protecting a PIN code of a touch screen according to item 2 of the scope of patent application, wherein the touch integrated circuit executes the PIN code verification procedure according to a PIN code verification request signal of the application processor, and sends the PIN The result of the code verification procedure informs the application processor. An information processing device is provided with a PIN code verification function by using a PIN code protection method of a touch screen as described in any one of claims 1-3.