WO2014094389A1

WO2014094389A1 - Password security system and password security method

Info

Publication number: WO2014094389A1
Application number: PCT/CN2013/072392
Authority: WO
Inventors: 凯斯里·杰弗里·特伦斯; 伊文思·朱利安·卢埃林·赛弗里德; 程平
Original assignee: 北京网秦天下科技有限公司
Priority date: 2012-12-21
Filing date: 2013-03-11
Publication date: 2014-06-26
Also published as: CN102970307B; CN102970307A

Abstract

The present invention provides a password security system (3000), which comprises a server (300) and a terminal (500), wherein the terminal (500) is used for receiving password information and an image input by a user, processing the image, integrating the password information to data of the image in a way that does not affect image use, and returning a processed image. The server (300) is used for receiving the processed user-input image, processing the processed user-input image, extracting the password information integrated to the processed user-input image in the way that does not affect the image use, and returning the password information that is extracted. The present invention also provides a password security method.

Description

Password security system and password security method

The present invention relates to the field of information security, and more particularly to a cryptographic security system and a cryptographic security method. Background technique

Many applications currently require users to set passwords, such as chat software, email, and so on. Usually, these applications also allow the user to set the password to retrieve the password, for example, to set the answer prompt question, after the answer, directly send the password to the pre-designated mailbox; or, after the correct answer, directly send the password reset Links, etc.

However, this way of password retrieval is easily exploited by familiar people, resulting in the disclosure of security information. Moreover, sometimes the user may forget the answer to the prompt question set by himself, and eventually the password cannot be retrieved, which seriously affects the user's use. Summary of the invention

The present invention provides a password security system and a password security method. By using the invention, the user's memory is greatly facilitated by using images (pictures, photos, etc.), so that the user does not have to memorize the answers to the complicated prompt questions; at the same time, since only the user knows the unique password image, the user password is greatly reduced. possibility. While improving the convenience of password retrieval, the security of the password is also improved. Specifically, according to a first aspect of the present invention, a password security system is provided, including: a server and a terminal, wherein the terminal is configured to receive password information and an image input by a user; processing the image, The password information is integrated into the data of the image in a manner that does not affect the use of the image; and returns the processed image, the server is configured to receive the processed image input by the user; and perform the processed image input by the user Processing, extracting password information integrated into the processed image input by the user in a manner that does not affect image usage; and returning the extracted password information.

According to a second aspect of the present invention, a password security system is provided, including: a server And a terminal, wherein the server is configured to receive password information and an image input by a user; processing the image, integrating the password information into data of the image in a manner that does not affect use of the image; and returning The processed image, the terminal is configured to receive the processed image input by the user; and process the processed image input by the user, and extract the processed image into the processed image input by the user without affecting the image usage. Password information; and return the extracted password information.

According to a third aspect of the present invention, a password security system is provided, including: a server and a terminal, wherein the server is configured to receive password information and an image input by a user; and process the image, and the password information is a method of not affecting the use of the image is integrated into the data of the image; and returning the processed image, the server is further configured to receive the processed image input by the user; and process the processed image input by the user, Extracting password information integrated into the processed image input by the user in a manner that does not affect image usage; and returning the extracted password information.

According to a fourth aspect of the present invention, a password security system is provided, including: a server and a terminal, wherein the terminal is configured to receive password information and an image input by a user; and process the image, and the password information is Integrating into the data of the image without affecting the use of the image; and returning the processed image, the terminal is further configured to receive the processed image input by the user; and process the processed image input by the user, Extracting password information integrated into the processed image input by the user in a manner that does not affect image usage; and returning the extracted password information.

According to a fifth aspect of the present invention, a password security method is provided, comprising: a password concealment process and a password retrieval process. The password concealment process includes: receiving password information and an image input by a user; processing the image, integrating the password information into data of the image without affecting use of the image; and returning to processing Image. The password retrieval process includes: receiving a processed image input by a user; processing the processed image input by the user, and extracting password information integrated into the processed image input by the user in a manner that does not affect image usage; ; and return the extracted password information.

In the first to fifth aspects of the invention, the image is an image that the user has specified or photographed in real time.

In the first to fifth aspects of the present invention, the processed image input by the user is the use An image selected from a plurality of randomly provided images, or an image designated by itself.

In the first to fifth aspects of the invention, the password information is integrated into the data of the image in a manner that is not easily identifiable. For example, the password information is encrypted, and the encrypted password information is integrated into the data of the image. The cryptographic information can be encrypted using one of the following encryption techniques: RSA, DES, AES. Accordingly, the password information is integrated into the data of the processed image input by the user in an unrecognizable manner. For example, the password information is decrypted and the decrypted password information is returned. The cryptographic information can be decrypted using one of the following decryption techniques: RSA, DES, AES.

Alternatively, in the first to fifth aspects of the present invention, the cryptographic information is integrated into the data of the image using a digital watermark technique. Accordingly, the password information is extracted using digital watermarking techniques.

Alternatively, in the first to fifth aspects of the invention, the password information is integrated into the exchangeable image file (EXIF) data of the image. Accordingly, the password information is extracted from the exchangeable image file (EXIF) data of the image.

In the first to fifth aspects of the invention, the processed image is stored at the server or stored at the terminal. With the present invention, the user can hide the password in an image (picture, photo, etc.) that he or she is familiar with or like, which is convenient for the user to remember. Moreover, even a person who is very familiar with the user can hardly know which image (picture, photo, etc.) the user has used as the password to retrieve the image, and therefore, the security of the password can be improved. At the same time, the password concealment of the present invention does not affect the normal use of the image (and/or is not easily recognized), and can effectively hide the password and effectively use the image. DRAWINGS

The above and other objects, features and advantages of the present invention will become more apparent from

FIG. 1 is a schematic diagram showing an application scenario of the mobile communication system 3000 of the present invention. 2 is a diagram showing the operation of the cryptographic security system 3000 in accordance with a first embodiment of the present invention. Timing diagram 1100.

3 is a timing diagram 1200 showing the operation of cryptographic security system 3000 in accordance with a second embodiment of the present invention.

4 is a timing diagram 1 300 showing the operation of cryptographic security system 3000 in accordance with a third embodiment of the present invention.

Figure 5 is a timing diagram 1400 showing the operation of cryptographic security system 3000 in accordance with a fourth embodiment of the present invention.

FIG. 6 is a flow chart showing a password concealment method 100 in accordance with an embodiment of the present invention. FIG. 7 is a block diagram showing a cryptographic concealment apparatus 1000 in accordance with an embodiment of the present invention. FIG. 8 is a flow chart showing a password retrieval method 200 in accordance with an embodiment of the present invention. FIG. 9 is a block diagram showing a password retrieval device 2000 in accordance with an embodiment of the present invention. In all the drawings of the present invention, the same or similar structures are identified by the same or similar reference numerals. detailed description

The preferred embodiments of the present invention are described in detail below with reference to the accompanying drawings, and the details and functions that are not necessary for the present invention are omitted in the description to avoid confusion of the understanding of the present invention. Hereinafter, the present invention will be described in detail by taking the scenario in which the present invention is applied to a wireless mobile communication system as an example. However, the present invention is not limited thereto, and the present invention can also be applied to a fixed communication system, a wired communication system, or an arbitrary hybrid structure of a fixed communication system, a wired communication system, a wireless mobile communication system, or the like. In the case of a mobile communication system, the present invention is not limited to a specific mobile communication protocol, and may include, but is not limited to, 2G, 3G, 4G, 5G networks, WCDMA, CDMA2000, TD-SCDMA systems, etc., different mobile terminals may use the same The communication protocol can also use different communication protocols. The present invention is not limited to a specific operating system of a mobile terminal, and may include, but is not limited to, iOS, Windows Mobile, Symbian, Andro id, etc. Different mobile terminals may use the same operating system or may use different operations. system. In addition, the present invention is not limited to a specific image format and may include, but is not limited to, JPEG, JPEG2000, TIFF, RIFF, PNG.

FIG. 1 is a schematic diagram showing an application scenario of the mobile communication system 3000 of the present invention. As shown in FIG. 1, the application scenario 3000 may include a server 300 and a mobile terminal 500. In order For clarity, only one mobile terminal 500 is shown in the figure, but the present invention is not limited thereto and may include two or more mobile terminals. The mobile terminal 500 can be operated by the user A. The mobile terminal 500 can be connected to the server 300 via the communication network 400. Examples of communication network 400 may include, but are not limited to: the Internet, a mobile communication network. The communication link between server 300 and mobile terminal 500 may be secure or encrypted to ensure that User A's account and password information is not compromised.

The mobile terminal 500 can include a password security client (not shown) installed therein. The password security client can be installed in the mobile terminal 500 by the user A in the form of software, or can be installed in the mobile terminal 500 in the form of hardware or firmware by the mobile terminal manufacturer.

User A accesses server 300 through mobile terminal 500, and can register or set account and password 520 to server 300, for example, via a web page or a password secure client installed on mobile terminal 500. After User A registers or sets account and password 520, server 300 or mobile terminal 500 (Password Security Client) can prompt User A to set a password retrieval operation (described in more detail later in connection with Figures 2-5). After User A completes the password retrieval operation setting, once User A forgets the password 520, User A can retrieve the previously set password 520 through the server 300 or the mobile terminal 500 (Password Security Client). 2 is a timing diagram 1100 showing the operation of cryptographic security system 3000 in accordance with a first embodiment of the present invention.

As shown in FIG. 2, the mobile terminal 500 (Password Security Client) completes the processing of the covert password information 520, and the server 300 completes the process of retrieving the password information 520.

Next, the user A selects the setting password retrieval operation, and in step S110, the mobile terminal 500 (password security client) receives the password information 520 and the image 510. For the case of accessing the server 300 through the webpage, when the user A selects the setting password retrieval operation, the server 300 notifies the mobile terminal 500 (password security client) of the password retrieval operation setting request of the user A (which may include the password A of the user A 520). (S1105)), the mobile terminal 500 prompts the user A to provide the image 510. For the case where the server 300 is accessed through the password security client (known user A's password 520) installed on the mobile terminal 500, when the user A selects the setup password retrieval operation, the mobile terminal 500 (password security client) can directly Prompt user A to provide Image 510. For example, user A may locally select a stored image 510 from mobile terminal 500 or capture an image 510 in real time.

In step S120, the mobile terminal 500 (password security client) processes the image 510 selected by the user A, integrates the password information 520 into the data of the image 510 in a manner that does not affect the use of the image 510, and generates the processed image 510. '. For example, as an example of an operation that does not affect the use of the image 510, the mobile terminal 500 can integrate the password information 520 into the EXIF data of the image 510 to generate a processed image 510'. As another example of an operation that does not affect the use of the image 510, the mobile terminal 500 can integrate the password information 520 into the data of the image 510 using a digital watermarking technique to generate a processed image 510'. In addition, the mobile terminal 500 may encrypt the password information 520 before integrating the password information 520 into the data of the image 510, thereby integrating the encrypted password information (not easily recognized) into the data of the image 510 as an encryption technique. Examples may include, but are not limited to, RSA, DES, AES, and the like.

At step S130, the mobile terminal 500 (password security client) returns the processed image 510'. For the generated image 510', the mobile terminal 500 can prompt the user A to upload to the server 300, save it locally to the mobile terminal 5GG, or both to the server 300 and to the mobile terminal 500. User A can save the generated image 510' to any location, including but not limited to mobile terminal 500, server 300, user A's portable storage device (SD card, USB flash drive, mobile hard drive, etc.). For example, as shown in FIG. 2, according to the selection of the user A, the mobile terminal 500 uploads the generated image 510' to the server 300 for saving in step S1115 (the server 300 may store the image 510' in association with the account of the user A. ).

When the user A forgets the password, the user A can perform the password retrieval operation through the mobile terminal 500 (or other mobile terminal or fixed terminal as long as the server 300 can be accessed and the image 510 can be obtained). User A provides the registered account to server 300 and chooses to retrieve the password graphically. At step S210, the server 300 receives the image 510'. The server 300 can prompt the user A whether to select from the images provided by the system or upload the images themselves. If user A chooses to upload the image by itself, server 300 may obtain image 510' from any location specified by user A, including but not limited to mobile terminal 500, server 300, user A's portable storage device (SD card, USB flash drive, mobile hard disk). Wait). For example, as shown in FIG. 2, the server 300 receives an image uploaded by the user A from the mobile terminal 500 (S1125I. If the user A selects to select from the images provided by the system, the server 300 provides a plurality of images (for example, 20) Image) (which contains the image 510' saved to the server 300 by the user A) (other images in the multiple images may be added by the server 300 or added before the user A), by the user A select. After user A uploads or selects the correct image 510', in step S220, server 300 processes image 510' to extract cryptographic information 520 that is integrated into image 510' in a manner that does not affect the use of image 510'. At step S230, the server 300 returns the password information 520. The server 300 can directly return the password information 520 to the mobile terminal 500 (S1135) for display, or return the password information 520 to the location (e.g., email address, mobile number, etc.) previously designated by the user A. In addition, it can be stipulated that User A can only try (including image uploading and image selection) a limited number of times, for example, 3 times. If 3 times fail, it can't be tried again, but can only be retrieved by other means (for example, carrying The ID card is retrieved from the operator. It can also be set to clear all the contents of the account when it fails three times. 3 is a timing diagram 1200 showing the operation of cryptographic security system 3000 in accordance with a second embodiment of the present invention.

As shown in FIG. 3, the server 300 completes the processing of the covert password information 520, and the mobile terminal 500 (password security client) completes the process of retrieving the password information 520.

Next, the user A selects the setup password retrieval operation, and the server 300 receives the password information 520 and the image 510 in step S110. The password information 520 can be obtained at the server 300, and the image 510 can be uploaded by the user A to the server 300 via the mobile terminal 500 (Password Security Client) (S1205). Server 300 can prompt user A to provide image 510 via a web page or a password security client. For example, user A can locally select a stored image 510 from mobile terminal 500 or capture an image 510 in real time.

In step S120, the server 300 processes the image 510 selected by the user A, integrates the password information 520 into the data of the image 510 in a manner that does not affect the use of the image 510, and generates a processed image 510'. For example, as an example of an operation that does not affect the use of image 510, server 300 may integrate cryptographic information 520 into EXIF data of image 510 to generate processed image 510'. As another example of an operation that does not affect the use of image 510, server 300 may utilize digital watermarking techniques to integrate cryptographic information 520 into the data of image 510 to generate processed image 510'. In addition, the server 300 can integrate the password information 520 Prior to the data in the image 510, the password information 520 is encrypted, thereby integrating the encrypted password information (not easily identifiable) into the data of the image 510, as an example of the encryption technique, which may include, but is not limited to, RSA, DES, AES Wait.

At step S130, the server 300 returns the processed image 510'. For the generated image 510', the server 300 can prompt the user A via the webpage or password security client to upload to the server 300, save it locally to the mobile terminal 500, or both to the server 300 and to the mobile terminal 500. User A can store the generated image 510' in any location, including but not limited to mobile terminal 500, server 300, user A's portable storage device (SD card, USB flash drive, mobile hard drive, etc.). For example, as shown in FIG. 3, according to the selection of the user A, the server 300 transmits the generated image 510' to the mobile terminal 500 (Password Security Client) for saving in step S1215.

When the user A forgets the password, the user A can perform a password retrieval operation through the mobile terminal 500 (password security client). At step S210, the mobile terminal 500 (password security client) receives the image 510'. The mobile terminal 500 (Password Security Client) can prompt the user A whether to select from the images provided by the system or to select images by themselves. If user A chooses to select the image by himself, mobile terminal 500 (password security client) may obtain image 510' from any location specified by user A, including but not limited to mobile terminal 500, server 300, user A's portable storage device (SD) Card, USB flash drive, mobile hard drive, etc.). If the user A chooses to select from the images provided by the system, the mobile terminal 500 (password security client) provides a plurality of images (for example, 20 images) (including the image 510' previously saved by the user A), by the user A. select. The other images in the plurality of images may be added by the mobile terminal 500 (Password Security Client)/Server 300, or may be added before User A. For example, as shown in FIG. 3, the mobile terminal 500 (password security client) can receive the image 510' from the server 300 (S1125) (at this time, the account information of the user A needs to be provided to the server 300), and the server 300 can return only the image. 510' may also return multiple images including the image 510'. After the user A selects the correct image 510', in step S220, the mobile terminal 500 (password security client) processes the image 510', extracting the image into the image 510' in a manner that does not affect the use of the image 510'. Password information 520. At step S230, the mobile terminal 500 (password security client) returns the password information 520. The mobile terminal 500 (password security client) can directly display the password information 520 or return the password information 520 to The location previously specified by User A (eg, email address, mobile number, etc.). In addition, it can be stipulated that User A can only try (select images) a limited number of times, for example, 3 times. If 3 times fail, it can't be tried again, but can only be retrieved by other means (for example, carrying an ID card to operate If you get back, you can also set all the contents of the account to be cleared when all three times fail. 4 is a timing diagram 1300 showing the operation of cryptographic security system 3000 in accordance with a third embodiment of the present invention.

As shown in FIG. 4, the server 300 performs both the processing of the covert password information 520 and the process of retrieving the password information 520.

Next, the user A selects the setup password retrieval operation, and the server 300 receives the password information 520 and the image 510 in step S110. The password information 520 can be obtained at the server 300, and the image 510 can be uploaded by the user A to the server 300 via the mobile terminal 500 (password security client) (S1305). Server 300 can prompt user A to provide image 510 via a web page or a password security client. For example, user A can locally select a stored image 510 from mobile terminal 500 or capture an image 510 in real time.

In step S120, the server 300 processes the image 510 selected by the user A, integrates the password information 520 into the data of the image 510 in a manner that does not affect the use of the image 510, and generates a processed image 510'. For example, as an example of an operation that does not affect the use of image 510, server 300 can integrate cryptographic information 520 into the EXIF data of image 510 to generate processed image 510'. As another example of an operation that does not affect the use of image 510, server 300 may utilize digital watermarking techniques to integrate cryptographic information 520 into the data of image 510 to generate processed image 510'. Further, the server 300 may encrypt the password information 520 before integrating the password information 520 into the data of the image 510, thereby integrating the encrypted password information (not easily recognized) into the data of the image 510 as an example of the encryption technique. , may include but is not limited to RSA, DES, AES, and the like.

At step S130, the server 300 returns the processed image 510'. For the generated image 510', the server 300 can prompt the user A to upload to the server 300, save it to the mobile terminal 500, or both to the server 300 and to the mobile terminal 500 locally through the webpage or password security client. User A can save the generated image 510' to any location, including but not limited to mobile terminal 500, server 300, user A's portable storage device. Ready (SD card, U disk, mobile hard disk, etc.). For example, as shown in FIG. 4, according to the selection of the user A, the server 300 transmits the generated image 510' to the mobile terminal 500 (password security client) for saving in step S1215.

When the user A forgets the password, the user A can perform the password retrieval operation through the mobile terminal 500 (or other mobile terminal or fixed terminal as long as the server 300 can be accessed and the image 510 can be obtained). User A provides the registered account to server 300 and chooses to retrieve the password graphically. At step S210, the server 300 receives the image 510'. The server 300 can prompt the user A whether to select from the images provided by the system or upload the images themselves. If user A chooses to upload the image by itself, server 300 may obtain image 510' from any location specified by user A, including but not limited to mobile terminal 500, server 300, user A's portable storage device (SD card, USB flash drive, mobile hard disk). Wait). For example, as shown, if the server 300 for the user A selects 4 from the image (S1325) 500 receives the mobile user terminal A ₀ uploaded image supplied from the system's choice, the server 300 provides a plurality of images (e.g., image 20 ) (which includes the image 510' previously saved by the user A to the server 300) (other images in the plurality of images may be added by the server 300 or added before the user A), and are selected by the user A. After user A uploads or selects the correct image 510', in step S220, server 300 processes image 510' to extract cryptographic information 520 that is integrated into image 510' in a manner that does not affect the use of image 510'. At step S230, the server 300 returns the password information 520. The server 300 can directly return the password information 520 to the mobile terminal 500 (S1335) for display, or return the password information 520 to the location (e.g., email address, mobile number, etc.) previously designated by the user A. In addition, it can be stipulated that User A can only try (including image uploading and image selection) a limited number of times, for example, 3 times. If 3 times fail, it can't be tried again, but can only be retrieved by other means (for example, carrying The ID card is retrieved from the operator. It can also be set to clear all the contents of the account when it fails three times. FIG. 5 is a timing diagram 1400 showing the operation of cryptographic security system 3000 in accordance with a fourth embodiment of the present invention.

As shown in FIG. 5, the mobile terminal 500 (Password Security Client) performs both the processing of the covert password information 520 and the process of retrieving the password information 520. Next, the user A selects the setting password retrieval operation, and in step S110, the mobile terminal 500 (password security client) receives the password information 520 and the image 510. For the case of accessing the server 300 through the webpage, when the user A selects the setting password retrieval operation, the server 300 notifies the mobile terminal 500 (password security client) of the password retrieval operation setting request of the user A (which may include the password A of the user A 520). (S1405)), the mobile terminal 500 prompts the user A to provide the image 510. For the case where the server 300 is accessed through the password security client (known user A's password 520) installed on the mobile terminal 500, when the user A selects the setup password retrieval operation, the mobile terminal 500 (password security client) can directly User A is prompted to provide image 510. For example, user A may locally select a stored image 510 from mobile terminal 500 or capture an image 510 in real time.

At step S130, the mobile terminal 500 (password security client) returns the processed image 510'. For the generated image 510', the mobile terminal 500 can prompt the user A to upload to the server 300, save it locally to the mobile terminal 5GG, or both to the server 300 and to the mobile terminal 500. User A can save the generated image 510' to any location, including but not limited to mobile terminal 500, server 300, user A's portable storage device (SD card, USB flash drive, mobile hard drive, etc.). For example, as shown in FIG. 5, according to the selection of the user A, the mobile terminal 500 uploads the generated image 510' to the server 300 for saving in step S1415 (the server 300 may store the image 510' in association with the account of the user A. ).

When the user A forgets the password, the user A can perform a password retrieval operation through the mobile terminal 500 (password security client). In step S210, the mobile terminal 500 (password security client) End) receiving image 510'. The mobile terminal 500 (Password Security Client) can prompt the user A whether to select from the images provided by the system or to select images by themselves. If user A chooses to select the image by himself, mobile terminal 500 (password security client) may obtain image 510' from any location specified by user A, including but not limited to mobile terminal 500, server 300, user A's portable storage device (SD) Card, USB flash drive, mobile hard drive, etc.). If the user A chooses to select from the images provided by the system, the mobile terminal 500 (password security client) provides a plurality of images (for example, 20 images) (including the image 510' previously saved by the user A), by the user A. select. The other images in the plurality of images may be added by the mobile terminal 500 (Password Security Client)/Server 300, or may be added before User A. For example, as shown in FIG. 5, the mobile terminal 500 (password security client) can receive the image 510' from the server 300 (S1425) (at this time, the account information of the user A needs to be provided to the server 300), and the server 300 can return only the image. 510' may also return multiple images including the image 510'. After the user A selects the correct image 510', in step S220, the mobile terminal 500

(Password Security Client) processes image 510' to extract cryptographic information 520 that is integrated into image 510' in a manner that does not affect the use of image 510'. At step S230, the mobile terminal 500

(Password Security Client) returns password information 520. The mobile terminal 500 (Password Security Client) may directly display the password information 520 or return the password information 520 to a location (e.g., email address, mobile number, etc.) previously designated by the user A. In addition, it can be stipulated that User A can only try (select images) a limited number of times, for example, 3 times. If it fails 3 times, it can't be tried again, but can only be retrieved by other means (for example, carrying an ID card to operate You can also clear all the contents of the account when it fails three times. FIG. 6 is a flow chart showing a password concealment method 100 in accordance with an embodiment of the present invention. As shown in FIG. 6, the password concealment method 100 may include steps S110, S120, and S130. FIG. 7 is a block diagram showing a cryptographic concealment apparatus 1000 in accordance with an embodiment of the present invention. As shown in FIG. 7, the password masking apparatus 100 may include an input unit 1100, an image processing unit 1200, and an output unit 1300. The input unit 1100 is configured to receive password information and an image input by a user. The image processing unit 1200 is configured to process the image, and integrate the password information into data of the image in a manner that does not affect the use of the image. Output unit 1300 Used to return the processed image. The cryptographic concealing method 100 and the cryptographic concealing apparatus 1000 according to an embodiment of the present invention will be described in detail below with reference to FIGS. 1-7. It should be noted that the password concealment method 100 and the cryptographic concealment apparatus 1000 of the embodiments of the present invention may be implemented in the server 300 shown in FIG. 1 to FIG. 5, or may be implemented in the mobile terminal 500 shown in FIG. Not limited to this. In step S110, the input unit 1100 of the password concealing device 1000 receives the password information 520 and the image 510 input by the user A. For example, image 510 is an image that User A specifies or captures in real time.

In step S120, the image processing unit 1200 of the cryptographic concealing apparatus 1000 processes the image 510, integrates the cryptographic information 520 into the data of the image 510 in a manner that does not affect the use of the image 510, and generates a processed image 510'. For example, as an example of an operation that does not affect the use of image 510, image processing unit 1200 can integrate cryptographic information 520 into the EXIF data of image 510 to generate processed image 510'. As another example of an operation that does not affect the use of image 510, image processing unit 1200 can utilize digital watermarking techniques to integrate cryptographic information 520 into the data of image 510 to generate processed image 510'. In addition, the image processing unit 1200 may encrypt the password information 520 before integrating the password information 520 into the data of the image 510, thereby integrating the encrypted password information (not easily recognized) into the data of the image 510 as an encryption technique. Examples may include, but are not limited to, RSA, DES, AES, and the like.

Finally, in step S130, the output unit 1300 of the cryptographic concealment device 1000 returns the processed image 510'. The image 510' may be stored by the user A at any location, including but not limited to the mobile terminal 500, the server 300, the portable storage device of the user A (SD card, USB flash drive, mobile hard disk, etc.). FIG. 8 is a flow chart showing a password retrieval method 200 in accordance with an embodiment of the present invention. As shown in FIG. 8, the password retrieval method 200 may include steps S202, S204, S210, S220, and S230. It should be noted that steps S202 and S204 are optional steps. FIG. 9 is a block diagram showing a password retrieval device 2000 in accordance with an embodiment of the present invention. As shown in FIG. 9, the password masking apparatus 200 may include an input unit 2100, an image processing unit 2200, and an output unit 2300. The input unit 2100 is for receiving an image input by a user. The image processing unit 2200 is configured to process the image to extract cryptographic information integrated into the image in a manner that does not affect the use of the image. The output unit 2300 is configured to return the extracted password information. The password retrieval method 200 and the password retrieval device 2000 according to an embodiment of the present invention will be described in detail below with reference to FIGS. 1 to 5, 8, and 9. It should be noted that the password retrieval method 200 and the password retrieval device 2000 of the embodiment of the present invention may be implemented in the server 300 shown in FIG. 1 to FIG. 5 or in the mobile terminal 500 shown in FIG. The invention is not limited to this. In step S202, the password retrieval device 2000 (for example, the input unit 21 00 or the output unit 2300) prompts the user A to select an image.

At step S210, the input unit 2100 of the password retrieval device 2000 receives the image 510' input by the user A. For example, the image 510' is an image selected by the user A from a plurality of randomly provided images, or an image designated by himself. The image 510' may be specified by the user A from any location, including but not limited to the mobile terminal 500, the server 300, the portable storage device of the user A (SD card, USB flash drive, mobile hard disk, etc.).

In step S220, the image processing unit 2200 of the password retrieval device 2000 processes the image 510' to extract the password information 520 integrated into the image 510' in a manner that does not affect the use of the image 510'. For example, as an example of an operation that does not affect the use of the image 51 0', the password information 520 may be integrated into the EXIF data of the image 510', and the image processing unit 2200 extracts the password information 520 from the EXIF data of the image 510'. As another example of an operation that does not affect the use of image 510', cryptographic information 520 may be integrated into data of image 510 using digital watermarking techniques, and image processing unit 2200 extracts cryptographic information 520 using digital watermarking techniques. In addition, the password information 520 may be encrypted (not easily recognized) before being integrated into the data of the image 510', and the image processing unit 2200 decrypts the password information extracted from the image 510' to obtain the password information 520 as decryption. Examples of technology, which may include but are not limited In RSA, DES, AES, etc.

In step S204, the password retrieval device 2000 (the image processing unit 2200 or the output unit 2300) judges whether or not the selected image is correct (i.e., whether the correct password information 520 is extracted (e.g., not empty)). If it is determined that the correct password information 520 is extracted (step S204: YES), step S230 is performed. If it is determined that the correct password information 520 has not been extracted (step S204: NO), it returns to step S202 to prompt the user A to reselect the image. The loop of step S204 to step S202 can be limited to a predetermined limited number of times, for example, 3 times. If all 3 times fail, it cannot be tried again, but can only be retrieved by other means (for example, carrying an identity document to retrieve from the operator) ), you can also set to clear all the contents of the account when all 3 failures.

Finally, in step S230, the output unit 2300 of the password retrieval device 2000 returns the extracted password information 520. The password information 520 can be displayed directly on the screen of the mobile terminal 500, or the password information 520 can be returned to the location (e.g., email address, mobile number, etc.) previously designated by the user A.

The invention has thus far been described in connection with the preferred embodiments. It will be appreciated that various other changes, substitutions and additions may be made by those skilled in the art without departing from the spirit and scope of the invention. Therefore, the scope of the invention is not limited to the specific embodiments described above, but by the appended claims.

Claims

Rights request

A password security system (3000) comprising: a server (300) and a terminal (500), the terminal (500) being used for

Receiving password information and images input by the user;

Processing the image to integrate the cryptographic information into data of the image in a manner that does not affect the use of the image;

Return the processed image,

The server (300) is used for

Receiving a processed image input by a user;

Processing the processed image input by the user, extracting the password information integrated into the processed image input by the user in a manner that does not affect the use of the image;

Returns the extracted password information.

2. A password security system (3000) comprising: a server (300) and a terminal (500), wherein the server (300) is used for

Receiving password information and images input by the user;

Return the processed image,

The terminal (500) is used for

Receiving a processed image input by a user;

Returns the extracted password information.

3. A password security system (3000) comprising: a server (300) and a terminal (500), The server (300) is used for

Receiving password information and images input by the user;

Return the processed image,

The server (300) is also used for

Receiving a processed image input by a user;

Returns the extracted password information.

4. A password security system (3000) comprising: a server (300) and a terminal (500), wherein

The terminal (500) is used for

Receiving password information and images input by the user;

Return the processed image,

The terminal (500) is also used for

Receiving a processed image input by a user;

Returns the extracted password information.

The cryptographic security system (3000) according to any one of claims 1 to 4, wherein the image is an image that the user specifies or captures in real time.

6. A cryptographic security system (3000) according to any one of claims 1 to 5, wherein the cryptographic information is integrated into the data of the image in an unrecognizable manner.

7. The cryptographic security system (3000) of claim 6, wherein the cryptographic information is encrypted and the encrypted cryptographic information is integrated into the data of the image.

8. The cryptographic security system (3000) of claim 7, wherein the cryptographic information is encrypted using one of the following encryption techniques: RSA, DES, AES.

9. A cryptographic security system (3000) according to any one of claims 1 to 8, wherein the cryptographic information is integrated into the data of the image using digital watermarking techniques.

10. The cryptographic security system (3000) according to any one of claims 1 to 8, wherein the cryptographic information is integrated into exchangeable image file (EXIF) data of the image.

The cryptographic security system (3000) according to any one of claims 1 to 10, wherein the processed image is stored at the server (300) or stored at the terminal

(500).

The cryptographic security system (3000) according to any one of claims 1 to 11, wherein the processed image input by the user is an image selected by the user from a plurality of randomly provided images, or is specified by itself. An image of one.

13. The cryptographic security system (3000) according to claim 6, wherein the cryptographic information is integrated into data of the processed image input by the user in a manner that is not easily identifiable.

14. The cryptographic security system (3000) of claim 7, wherein the cryptographic information is decrypted and the decrypted cryptographic information is returned.

15. The cryptographic security system (3000) of claim 8, wherein the cryptographic information is decrypted using one of the following decryption techniques: RSA, DES, AES.

16. The cryptographic security system (3000) of claim 9, wherein the cryptographic information is extracted using a digital watermarking technique.

17. The cryptographic security system (3000) of claim 10, wherein the cryptographic information is extracted from exchangeable image file (EXIF) data of the image.

18. A method of password security, comprising: a password concealment process (100) and a password retrieval process (200), wherein

The password concealment process (100) includes:

Receiving password information and an image input by the user (S110);

Processing the image, integrating the password information into data of the image in a manner that does not affect the use of the image (S120); and returning the processed image (S130),

The password retrieval process (200) includes: Receiving a processed image input by the user (S210);

Processing the processed image input by the user, extracting password information integrated into the processed image input by the user in a manner that does not affect the use of the image (S220);

The extracted password information is returned (S230).

19. The cryptographic security method of claim 18, wherein the image is an image that is specified by the user or captured in real time.

20. A cryptographic security method according to claim 18 or 19, wherein the cryptographic information is integrated into the data of the image in an unrecognizable manner.

21. The cryptographic security method of claim 20, wherein the cryptographic information is encrypted and the encrypted cryptographic information is integrated into the data of the image.

22. The cryptographic security method of claim 21, wherein the cryptographic information is encrypted using one of the following encryption techniques: RSA, DES, AES.

23. A cryptographic security method according to any one of claims 18 to 22, wherein the cryptographic information is integrated into the data of the image using a digital watermarking technique.

The cryptographic security method according to any one of claims 18 to 22, wherein said cryptographic information is integrated into exchangeable image file (EXIF) data of said image.

The cryptographic security method according to any one of claims 18 to 24, wherein the processed image is stored at a server or stored in a memory local to the user.

The cryptographic security method according to any one of claims 18 to 25, wherein the processed image input by the user is an image selected by the user from a plurality of randomly provided images, or a self-designated image image.

27. The cryptographic security method according to claim 20, wherein the cryptographic information is integrated into data of the processed image input by the user in a manner that is not easily identifiable.

28. The cryptographic security method of claim 21, wherein the cryptographic information is decrypted and the decrypted cryptographic information is returned.

29. The cryptographic security method of claim 22, wherein the cryptographic information is decrypted using one of the following decryption techniques: RSA, DES, AES.

30. The cryptographic security method of claim 23, wherein the cryptographic information is extracted using a digital watermarking technique.

31. The cryptographic security method of claim 24, wherein the cryptographic information is extracted from exchangeable image file (EXIF) data of the image.