WO2017101706A1

WO2017101706A1 - Method and apparatus for preventing human-machine interaction interface from being hijacked

Info

Publication number: WO2017101706A1
Application number: PCT/CN2016/108656
Authority: WO
Inventors: 王旸; 杨阳; 朱浩然; 陈舟; 华锦芝
Original assignee: 中国银联股份有限公司
Priority date: 2015-12-15
Filing date: 2016-12-06
Publication date: 2017-06-22
Also published as: CN105933269A; CN105933269B

Abstract

Disclosed in the present invention are a method and apparatus for preventing a human-machine interaction interface from being hijacked. The method comprises: when an application program is started, reading customized information of the application program, the customized information being special information set for the application program when the application program is installed; and when the human-machine interaction interface of the application program is displayed, prompting the security status of the application program according to the customized information, so as to resolve the security holes existing in the interface display processing method in the prior art.

Description

Method and device for preventing human-computer interaction interface hijacking

This application claims the priority of the Chinese patent application filed on December 15, 2015, submitted to the Intellectual Property Office of the People's Republic of China, application number 201510937599.6, and the invention name is "a method and device for preventing human-computer interaction interface hijacking". The content is incorporated herein by reference.

Technical field

The present invention relates to the field of network security technologies, and in particular, to a method and apparatus for preventing hijacking of a human-computer interaction interface.

Background technique

In recent years, banks, e-commerce, and payment applications have been scattered in various small and medium-sized electronic markets. Once the user login interface of these applications is hijacked and counterfeited by phishing websites, user account leakage and capital loss may occur. Phishing refers to an attack method that illegally directs users to a phishing website that is very similar to the official website, allowing users to enter sensitive information in the application interface provided by the phishing website, thereby stealing sensitive information.

In order to ensure the security of the sensitive information input by the user in the application interface, the browser detects the webpage address of the application interface when the application interface is displayed, and determines whether it is a webpage address in the malicious address database; when the detection result is malicious When the webpage address in the address library is used, it is determined that the application interface is an interface provided by the phishing website, intercepting the access or issuing a warning message; and if the detection result is not the webpage address in the malicious address library, the normal display is performed. However, when the web address in the malicious address database is updated slowly, or the content of the included web address is not comprehensive enough, the user may still display the content of the phishing website that has not been intercepted, thereby revealing the sensitive information of the user and causing the user loss.

Therefore, the existing interface display processing method has a security vulnerability and cannot effectively prevent illegal attacks on phishing websites.

Summary of the invention

The embodiment of the invention provides a method and a device for preventing hijacking of a human-computer interaction interface, which are used to solve the security vulnerabilities existing in the interface display processing method in the prior art.

In a first aspect, the method of the present invention includes a method for preventing hijacking of a human-machine interface, the method comprising: reading personalized information of the application when launching an application, the personalized information being installed for the application Dedicated information set for the application; when the human-computer interaction interface of the application is displayed, the security status of the application is prompted according to the personalized information.

Further, before the personalization information in the application is read when the application is launched, the method further includes:

Obtaining an installation package of the application from an application server;

In the process of installing the installation package of the application, the personalized information is written into the application or the personalized information is written into the startup program of the application.

Further, in the process of installing the installation package of the application, writing the personalized information to the application or writing the personalized information to the startup program of the application includes:

Sending a personalized information request message;

Receiving the personalized information input by the user, and storing the personalized information in a local secure storage area;

Setting an access right of the secure storage area to cause the application to read the personalized information from the secure storage area upon startup.

Further, when the human-computer interaction interface of the application is displayed, the security status of the application is prompted according to the personalized information, including:

When the human-computer interaction interface of the application is displayed, the security status of the user account is prompted according to the personalized information, including:

Displaying the personalized information in a login interface of the application;

Or,

Generating a security mark based on the personalized information;

The security flag is displayed in a login interface of the application.

In a second aspect, based on the same inventive concept, an embodiment of the present invention further provides an apparatus for preventing hijacking of a human-computer interaction interface, the apparatus comprising: a reading unit, configured to read the application when launching an application Personalized information, the personalized information is dedicated information set for the application when the application is installed; and a display unit, configured to display the human-computer interaction interface of the application, according to the personalized information prompt The security status of the application.

Further, the device further includes: a personalized information processing unit, configured to acquire an installation package of the application from an application server;

Further, the personalized information processing unit is specifically configured to: send a personalized information request message;

Further, the display unit is specifically configured to: display the personalized information in a login interface of the application;

Alternatively, a security flag is generated according to the personalized information, and the security flag is displayed in a login interface of the application.

In a third aspect, an embodiment of the present application provides an electronic device, including: a processor and a display;

The processor is configured to read personalized information of the application when launching an application, where the personalized information is dedicated information set for the application when the application is installed;

The display, when used to display the human-computer interaction interface of the application, prompts the security status of the application according to the personalized information.

Further, the processor is further configured to: acquire the security of the application from an application server. Packing; writing the personalized information to the application or writing the personalized information to the launching program of the application during installation of the installation package of the application.

Further, the electronic device further includes a transceiver and a memory; the transceiver is configured to: send a personalized information request message; and receive the personalized information input by the user;

The memory is configured to store the personalized information in a local secure storage area;

The processor is further configured to set an access right of the secure storage area, so that the application reads the personalized information from the secure storage area at startup.

Further, the display is specifically configured to: display the personalized information in a login interface of the application;

The personalized information includes at least one of the following information: a user's identity; a user's avatar information; a user's personalized signature; a user's iris; a user's voiceprint; a user's fingerprint; Last communication information before; the last access information before the application was started.

In a fourth aspect, an embodiment of the present invention provides a non-transitory computer readable storage medium, where the non-transitory computer readable storage medium stores computer instructions, where the computer instructions are used to cause the computer to execute any of the above The method for preventing hijacking of human-computer interaction interface.

In a fifth aspect, an embodiment of the present invention provides a computer program product, the computer program product comprising a computing program stored on a non-transitory computer readable storage medium, the computer program comprising program instructions, when the program instruction is When the computer executes, the computer is caused to perform the method for preventing hijacking of the human-machine interface according to any of the above.

The embodiment of the present invention sets personalized information, and the personalized information is specific information set for the application when the application is installed, and the personalized information of the application is read and displayed when the application is started. In the human-computer interaction interface of the application. When the terminal is correct When reading and displaying, it is determined that the website currently accessed by the terminal is secure, otherwise, it is regarded as an illegal website, and an alarm or interception is performed. It can be seen that because of the particularity and unique characteristics of personalized information, phishing websites cannot display interfaces with personalized information, which can effectively prevent the possibility of hijacking of human-computer interface by phishing websites, and ensure sensitive information of users. The security of mobile terminal transactions.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those skilled in the art can also obtain other drawings based on these drawings without paying for inventive labor.

FIG. 1 is a schematic flowchart of a method for preventing hijacking of a human-machine interface according to an embodiment of the present invention;

FIG. 2 is a schematic diagram of a method for preventing hijacking of a human-machine interaction interface according to an embodiment of the present invention; FIG.

FIG. 3 is a schematic diagram of a method for preventing hijacking of a human-machine interaction interface according to an embodiment of the present invention; FIG.

FIG. 4 is a schematic diagram of a method for preventing hijacking of a human-computer interaction interface according to an embodiment of the present invention; FIG.

FIG. 5 is a schematic diagram of a method for preventing hijacking of a human-machine interaction interface according to an embodiment of the present invention; FIG.

FIG. 6 is a schematic flowchart of an apparatus for preventing hijacking of a human-machine interface according to an embodiment of the present invention;

FIG. 7 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.

detailed description

In order to make the objects, technical solutions and advantages of the present invention more clear, the following will be The invention is further described in detail, and it is apparent that the described embodiments are only a part of the embodiments of the invention, rather than all embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In the following embodiments of the present invention, a terminal, a device that provides voice and/or data connectivity to a user, includes a wireless terminal or a wired terminal. The wireless terminal may be a handheld device having a wireless connection function, for example, the wireless terminal may be a mobile phone (or "cellular" phone) and a computer with a mobile terminal. As another example, the wireless terminal can also be a portable, pocket, handheld, computer built-in or in-vehicle mobile device.

As shown in FIG. 1 , an embodiment of the present invention provides a schematic flowchart of a method for preventing hijacking of a human-computer interaction interface, and specifically implementing the method includes:

Step S101: Read personalized information of the application when the application is started, and the personalized information is dedicated information set for the application when the application is installed.

Step S102: When displaying the human-computer interaction interface of the application, prompting the security status of the application according to the personalized information.

In the above embodiment, since different personalized information is set for the application, when the user uses the application, the application displays the personalized information or the identifier information associated with the personalized information, so that the user can Determine if the application being used is a secure application and prevent interference from the phishing program.

The so-called personalized information refers to the user-specific information of the mobile terminal, and the information has a unique feature. Generally, the personalized information includes at least one of the following information: the identity of the user; the avatar information of the user; Personality signature; user's voiceprint; user's fingerprint; last communication information before the application is launched; last access information before the application is started.

The user identity may be the user's ID information or passport information. In addition, the last communication information before the application is started generally refers to the user's order information or transaction information, etc.; The last access information before startup usually refers to the user's Posting information, user access footprint and other information.

In particular, the personalized information may be determined at the time of application installation. Obtaining, before step S101, an installation package of the application from an application server; writing the personalized information to the application or the personalization during installation according to the installation package of the application The information is written to the application's launcher. The application's installation package is generally stored on a more secure application server, so the installation package of the application downloaded from the application server is generally secure.

It should be noted that the personalized information in the embodiment of the present invention may be information stored locally by the mobile terminal, or may be information obtained from a server corresponding to another website, because the locally saved personalized information may be extracted quickly. Moreover, the local personalized information is stored in the set secure storage area, so that the efficiency of the mobile terminal to obtain personalized information can be improved, and the security of the personalized information is also ensured, and the embodiment of the present invention is personalized. The specific method of obtaining information is not limited.

In order to prevent the personalized information from being obtained by the phishing website, the embodiment of the present invention further stores the personalized information by using the secure storage area of the mobile terminal. Specifically, the mobile terminal first sends the personalized information request message when the user pays or logs in. And then receiving the personalized information input by the user, and storing the personalized information in a local secure storage area; finally setting access rights of the secure storage area, so that the application starts from The secure storage area reads the personalized information.

In the embodiment of the present invention, after obtaining the personalized information from the external server, the personalized information is saved in the secure storage area, and the access right of the secure storage area is set, and the access right ensures that the illegal website cannot obtain the personality from the mobile terminal. Information, when paying or logging in, request to obtain the use right of using personalized information in the application interface, and use the personalized information after obtaining the use right, for example, for the mobile terminal, through the security in the mobile terminal An application such as a guard saves the above personalized information and sets access rights to the personalized information. This ensures the security of the personalized information of the user account, and thus can play the role of identification in the subsequent interface display.

Based on the above-mentioned writing of personalized information, when the application is started, it can be directly displayed on the interface. The personalization information may be generated, and of course, the security flag may be generated based on the personalized information, indicating that the current interface belongs to the normal interface, and is not hijacked by the illegal website, specifically, displayed in the login interface of the application. The personalized information; or, generating a security mark according to the personalized information; displaying the security mark in a login interface of the application.

The so-called security sign can be a kind of prompting security icon, or it can be a pop-up box floating on the display interface. When the personalized information is image information, after the login interface is displayed, there will be insufficient display space in the remaining interfaces. Therefore, the use of security signs instead of image information, regardless of the type of security mark, is intended to give the user the purpose of making the current visit page a secure website.

In order to describe the above method for preventing human-computer interaction interface hijacking in more detail, the embodiment of the present invention further exemplifies according to different personalized information.

scene one:

As shown in FIG. 2, because the iris of the eye has the unique feature of the fingerprint, the embodiment of the present invention uses the iris to describe the example. For example, the user prompts the user to scan the iris of the eye before making a payment or logging in. When the scan is successful, Then you can do the next step, otherwise return the alarm information, or directly intercept the payment URL. Of course, the mobile terminal side needs to pre-accord the eye iris scanning system, and store the iris sample of the user of the mobile terminal in the mobile terminal for use in verification.

Scene 2:

As shown in FIG. 3, for example, the user binds his own photo with the user account, and when the user requests payment or login using the user account, when the user photo is correctly displayed on the human-computer interaction interface to be paid, the mobile terminal The user can identify whether the information is correct. If the information is found to be incorrect, the access can be stopped. Of course, if the mobile terminal side finds that the photo is failed to be read, the alarm information can also be returned, or the payment website can be directly intercepted.

Scene 3:

As shown in Figure 4, based on modern scientific research, the voiceprint is not only specific, but also relatively stable. After adulthood, the human voice can remain relatively stable for a long time. Experiments prove that whether the speaker deliberately imitates the voice and tone of others, or whispers softly, even if imitated Miao Weixiao, its voiceprints are always different. The user's voiceprint information is bound to the user account. When entering the payment phase or the login phase, the voiceprint authentication interface is first entered, and the problem is displayed on the authenticated human-computer interaction interface, and the user answers the question through the microphone of the mobile terminal. After receiving the voice information of the user, the voiceprint is judged to determine whether the voiceprint meets the requirements. In the embodiment of the present invention, the user's favorite animal is taken as an example, and the user's voice information is collected through the mobile terminal microphone. Of course, before the voiceprint authentication is performed, the voiceprint sample of the user of the mobile terminal needs to be saved on the mobile terminal side for comparison for subsequent verification.

If the user answers the voice message of the question through the microphone of the mobile terminal to satisfy the determination request, the login is granted, otherwise the failure message is given.

Scene 4:

As shown in FIG. 5, for example, the user binds his fingerprint to the user account, and when the user requests payment by using the user account, the user is prompted to input a fingerprint to authenticate by authenticating the human-computer interaction interface. If the verification is successful, the user is granted the subsequent Operation, otherwise give a warning message. Of course, before performing fingerprint authentication, the fingerprint information of the user needs to be entered as a sample through the sensor on the mobile terminal for use in subsequent authentication. As for fingerprint input, it can be entered through a sensor or a camera on the mobile terminal, and the specific entry method is not limited.

If the fingerprint information scanned by the user through the sensor of the mobile terminal satisfies the determination request, the login is granted, otherwise the failure information is given.

In summary, the method for preventing hijacking of the human-computer interaction interface provided in this embodiment solves the problem that the interface display method provided by the prior art may cause the user to be in the illegal interface by acquiring the personalized information for receiving the user account. The problem that the input sensitive information is stolen by the phishing website achieves the effect of avoiding the theft of sensitive information of the user account.

Based on the same technical concept, an embodiment of the present invention further provides an apparatus that can perform the foregoing method embodiments. As shown in FIG. 6, the apparatus provided by the embodiment of the present invention includes: a reading unit 201 and a display unit 202, wherein:

The reading unit 201 is configured to read personalized information of the application when the application is started, where the personalized information is dedicated information set for the application when the application is installed;

The display unit 202 is configured to prompt the security status of the application according to the personalized information when displaying the human-computer interaction interface of the application. In the above embodiment, since different personalized information is set for the application, when the user uses the application, the application displays the personalized information or the identifier information associated with the personalized information, so that the user can Determine if the application being used is a secure application and prevent interference from the phishing program.

The user identity may be the user's ID information or passport information. In addition, the last communication information before the application is started generally refers to the user's order information or transaction information, etc.; The last access information before startup usually refers to the user's posting information, the user's access footprint and other information.

In particular, the personalized information may be determined at the time of application installation. Further, before the reading unit 201 reads the personalized information, the personalized information processing unit 203 is required to acquire the personalized information, which is written into the application, and the personalized information processing unit 203 is configured to use the application server. Obtaining an installation package of the application; writing the personalized information to the application or writing the personalized information to the application during installation according to the installation package of the application; starting program.

In order to prevent personalized information from being acquired by a phishing website, the embodiment of the present invention further uses mobile The personal information is stored in the secure storage area of the terminal. Specifically, the personalized information processing unit 203 is specifically configured to: send a personalized information request message; receive the personalized information input by the user, and The information is stored in a local secure storage area; the access rights of the secure storage area are set such that the application reads the personalized information from the secure storage area at startup.

The personalized information may be directly displayed on the interface when the application is started, and the security information may be generated based on the personalized information to indicate that the current interface belongs to the normal interface. The display unit 202 is specifically configured to: display the personalized information in a login interface of the application; or generate a security flag according to the personalized information; The security flag is displayed in the login interface of the application.

In order to describe in more detail the implementation process of the device for preventing hijacking of the human-computer interaction interface, the embodiment of the present invention further exemplifies according to different personalized information.

scene one:

As shown in FIG. 2, since the iris of the eye has the unique feature of the fingerprint, the embodiment of the present invention uses the iris to describe the example, for example, the user reads the unit before making payment or logging in. 201 prompts the user to perform scanning of the iris of the eye. When the scanning is successful, the display unit 202 displays the scanning result, and then the next operation may be performed, otherwise the alarm information is returned, or the payment website is directly intercepted. Of course, the mobile terminal side needs to pre-accord the eye iris scanning system, and store the iris sample of the user of the mobile terminal in the mobile terminal for use in verification.

Scene 2:

As shown in FIG. 3, for example, the user binds his/her own photo with the user account, and when the user requests payment or login using the user account, when the user interacts with the interface, the reading unit 201 reads the user. Photo information, when the display unit 202 correctly displays the user photo, the user of the mobile terminal can identify whether the information is correct. If the information is found to be incorrect, the access can be stopped. Of course, if the mobile terminal side finds that the reading of the photo fails, the same is true. You can return an alert message or directly intercept the payment URL.

Scene 3:

As shown in Figure 4, based on modern scientific research, the voiceprint is not only specific, but also relatively stable. After adulthood, the human voice can remain relatively stable for a long time. Experiments have shown that no matter whether the speaker deliberately imitates the voice and tone of others, or whispers softly speaking, even if the imitation is vivid, the voiceprint is always different. The user's voiceprint information is bound to the user account. When entering the payment phase or the login phase, the voiceprint authentication interface is first entered, and the problem is displayed on the authenticated human-computer interaction interface, and the user answers the question through the microphone of the mobile terminal. After receiving the voice information of the user, the voiceprint is judged to determine whether the voiceprint meets the requirements. In the embodiment of the present invention, the display unit 202 asks the user's favorite animal as an example, and the reading unit 201 collects the user's voice information through the mobile terminal microphone. Of course, before the voiceprint authentication is performed, the voiceprint sample of the user of the mobile terminal needs to be saved on the mobile terminal side for comparison for subsequent verification.

Scene 4:

As shown in FIG. 5, for example, the user binds his fingerprint to the user account, and when the user requests payment by using the user account, the display unit 202 displays through the interface, and then inputs through the rear sensor. In the manner of the fingerprint, the user indication is given, and the reading unit 201 prompts the user to input the fingerprint for verification by the authentication human-computer interaction interface. If the verification is successful, the subsequent operation is granted, otherwise the warning information is given. Of course, before performing fingerprint authentication, the fingerprint information of the user needs to be entered as a sample through the sensor on the mobile terminal for use in subsequent authentication. As for fingerprint input, it can be entered through a sensor or a camera on the mobile terminal, and the specific entry method is not limited.

In summary, the embodiment of the present invention sets personalization information, which is specific information set for the application when the application is installed, and reads the personality of the application when the application is started. Information is displayed and displayed in the human-computer interaction interface of the application. When the terminal can correctly read and display, it is determined that the website currently accessed by the terminal is secure, otherwise, it is regarded as an illegal website, and an alarm or interception is performed. It can be seen that because of the particularity and unique characteristics of personalized information, phishing websites cannot display interfaces with personalized information, which can effectively prevent the possibility of hijacking of human-computer interface by phishing websites, and ensure sensitive information of users. The security of mobile terminal transactions.

Based on the same technical concept, the embodiment of the present application provides another electronic device. 7 is a schematic structural diagram of an electronic device provided by the present invention, the electronic device 500 includes: a transceiver 501, a processor 502, a memory 503, a bus system 504, and a display 505;

The memory 503 is used to store a program. In particular, the program can include program code, the program code including computer operating instructions. The memory 503 may be a random access memory (RAM) or a non-volatile memory, such as at least one disk storage. Only one memory is shown in the figure, of course, the memory can also be set to a plurality as needed. Memory 503 can also be a memory in processor 502.

The memory 503 stores the following elements, executable modules or data structures, or a subset thereof, or an extended set thereof:

Operation instructions: include various operation instructions for implementing various operations.

Operating system: includes various system programs for implementing various basic services and processing based on hard The task of the piece.

The method disclosed in the above embodiments of the present application may be applied to the processor 502 and the display 505, or implemented by the processor 502 and the display 505. Processor 502 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware in the processor 502 or an instruction in a form of software. The processor 502 described above may be a general purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, a discrete gate or transistor logic device, or discrete hardware. Component. The methods, steps, and logical block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general purpose processor may be a microprocessor or the processor or any conventional processor or the like. The steps of the method disclosed in the embodiments of the present application may be directly implemented by the hardware decoding processor, or may be performed by a combination of hardware and software modules in the decoding processor. The software module can be located in a conventional storage medium such as random access memory, flash memory, read only memory, programmable read only memory or electrically erasable programmable memory, registers, and the like. The storage medium is located in the memory 503, and the processor 502 reads the information in the memory 503 and performs the following steps in conjunction with its hardware:

The transceiver 501 is configured to send a personalized information request message; and receive the personalized information input by a user;

The memory 503 is configured to store the personalized information in a local secure storage area;

The processor 502 is configured to read personalized information of the application when the application is started, where the personalized information is dedicated information set for the application when the application is installed;

The display 505 is configured to prompt the security status of the application according to the personalized information when displaying the human-computer interaction interface of the application.

Optionally, the processor 502 is further configured to: obtain an installation package of the application from an application server;

Optionally, the processor 502 is further configured to set an access right of the secure storage area, so that the application reads the personalized information from the secure storage area at startup.

Further, the display 505 is specifically configured to: display the personalized information in a login interface of the application;

The personalized information includes at least one of the following information: an identity of the user;

User's avatar information; user's personalized signature; user's iris;

User's voiceprint; user's fingerprint; last communication information before the application is launched;

The last access information before the application was launched.

The electronic device of the embodiment of the invention exists in various forms, including but not limited to:

(1) Mobile communication devices: These devices are characterized by mobile communication functions and are mainly aimed at providing voice and data communication. Such devices include: smart phones (such as iPhone), multimedia phones, functional phones, and low-end phones.

(2) Ultra-mobile personal computer equipment: This type of equipment belongs to the category of personal computers, has computing and processing functions, and generally has mobile Internet access. Such terminals include: PDAs, MIDs, and UMPC devices, such as the iPad.

(3) Portable entertainment devices: These devices can display and play multimedia content. Such devices include: audio, video players (such as iPod), handheld game consoles, e-books, and smart toys and portable car navigation devices.

(4) Server: A device that provides computing services. The server consists of a processor, a hard disk, a memory, a system bus, etc. The server is similar to a general-purpose computer architecture, but because of the need to provide highly reliable services, processing power and stability High reliability in terms of reliability, security, scalability, and manageability.

(5) Other electronic devices with data interaction functions.

Those skilled in the art can understand that all or part of the steps in implementing the above embodiments may be completed by a program instructing related hardware, and the program is stored in a storage medium, including The instructions are used to cause a device (which may be a microcontroller, chip, etc.) or a processor to perform all or part of the steps of the various embodiments of the present application. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like. .

Further, the present invention provides a non-transitory computer readable storage medium storing computer instructions for causing the computer to perform the prevention described in any of the above Human-computer interaction interface hijacking method.

Additionally, the present invention also provides a computer program product comprising a computing program stored on a non-transitory computer readable storage medium, the computer program comprising program instructions, when the program instructions are executed by a computer And causing the computer to perform the human-computer interaction interface hijacking method according to any one of the above.

While the preferred embodiment of the invention has been described, it will be understood that Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and the modifications and

It is apparent that those skilled in the art can make various modifications and variations to the invention without departing from the spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and modifications of the invention

Claims

A method for preventing hijacking of a human-computer interaction interface, characterized in that the method comprises:

Reading personalization information of the application when launching the application, the personalized information being dedicated information set for the application when the application is installed;

When the human-computer interaction interface of the application is displayed, the security status of the application is prompted according to the personalized information.
The method according to claim 1, wherein the reading of the personalized information in the application when the application is launched further comprises:

Obtaining an installation package of the application from an application server;

In the process of installing the installation package of the application, the personalized information is written into the application or the personalized information is written into the startup program of the application.
The method of claim 2, wherein said personalization information is written to said application or said personalized information is written to said installation package during installation of said application The application's launcher, including:

Sending a personalized information request message;

Receiving the personalized information input by the user, and storing the personalized information in a local secure storage area;

Setting an access right of the secure storage area to cause the application to read the personalized information from the secure storage area upon startup.
The method according to claim 1, wherein when the human-machine interaction interface of the application is displayed, the security status of the application is prompted according to the personalized information, including:

When the human-computer interaction interface of the application is displayed, the security status of the user account is prompted according to the personalized information, including:

Displaying the personalized information in a login interface of the application;

or,

Generating a security mark based on the personalized information;

The security flag is displayed in a login interface of the application.
The method according to any one of claims 1 to 4, wherein the personalized information comprises at least one of the following information:

User's identity;

User's avatar information;

User's signature;

User's iris;

User's voiceprint;

User's fingerprint;

The last communication message before the application was started;

The last access information before the application was launched.
A device for preventing hijacking of a human-computer interaction interface, characterized in that the device comprises:

a reading unit, configured to read personalized information of the application when launching an application, where the personalized information is dedicated information set for the application when the application is installed;

And a display unit, configured to: when the human-computer interaction interface of the application is displayed, prompt the security status of the application according to the personalized information.
The device of claim 6 further comprising:

a personalized information processing unit, configured to obtain an installation package of the application from an application server;

In the process of installing the installation package of the application, the personalized information is written into the application or the personalized information is written into the startup program of the application.
The device according to claim 7, wherein the personalized information processing unit is specifically configured to:

Sending a personalized information request message;

Receiving the personalized information input by the user, and storing the personalized information in a local secure storage area;

Setting an access right of the secure storage area to cause the application to read the personalized information from the secure storage area upon startup.
The device according to claim 6, wherein the display unit is specifically configured to:

Displaying the personalized information in a login interface of the application;

or,

Generating a security mark based on the personalized information;

The security flag is displayed in a login interface of the application.
The apparatus according to any one of claims 6 to 9, wherein the personalized information comprises at least one of the following information:

User's identity;

User's avatar information;

User's signature;

User's iris;

User's voiceprint;

User's fingerprint;

The last communication message before the application was started;

The last access information before the application was launched.
An electronic device, comprising: a processor and a display;

The processor is configured to read personalized information of the application when launching an application, where the personalized information is dedicated information set for the application when the application is installed;

The display, when used to display the human-computer interaction interface of the application, prompts the security status of the application according to the personalized information.
The electronic device according to claim 11, wherein the processor is further configured to:

Obtaining an installation package of the application from an application server;

In the process of installing the installation package of the application, the personalized information is written into the application or the personalized information is written into the startup program of the application.
The electronic device according to claim 12, wherein the electronic device further comprises a transceiver and a memory;

The transceiver is configured to: send a personalized information request message; and receive the user input Sexualized information;

The memory is configured to store the personalized information in a local secure storage area;

The processor is further configured to set an access right of the secure storage area, so that the application reads the personalized information from the secure storage area at startup.
The electronic device according to claim 11, wherein the display is specifically configured to:

Displaying the personalized information in a login interface of the application;

Alternatively, a security flag is generated according to the personalized information, and the security flag is displayed in a login interface of the application.
The electronic device according to any one of claims 11 to 14, wherein the personalized information comprises at least one of the following information:

User's identity;

User's avatar information;

User's signature;

User's iris;

User's voiceprint;

User's fingerprint;

The last communication message before the application was started;

The last access information before the application was launched.
A non-transitory computer storage medium, characterized in that the non-transitory computer readable storage medium stores computer executable instructions for causing the computer to perform any of claims 1 to 5 The method described in the item.
A computer program product, comprising: a computing program stored on a non-transitory computer readable storage medium, the computer program comprising the computer executable instructions, when the computer executable instructions When executed by a computer, the computer is caused to perform the method of any one of claims 1 to 5.