WO2018053988A1

WO2018053988A1 - Secure input system and method, intelligent terminal, and storage medium

Info

Publication number: WO2018053988A1
Application number: PCT/CN2017/073033
Authority: WO
Inventors: 姚均营
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-09-21
Filing date: 2017-02-07
Publication date: 2018-03-29
Also published as: CN107844717A

Abstract

Provided are a secure input system and method, an intelligent terminal, and a storage medium. The system comprises: an input driving module (110) used to write a user input event to a device input node file; an interference event insertion module (120) used to generate an input event for interference and to write the same to the device input node file upon detecting writing of an input event to the device input node file; an input event processing module (130) used to read the input event in the device input node file and to transmit the same to an input method application; and a secure input processing module (140) used to receive characters generated by the input method application according to the input event, to delete interference characters corresponding to the input event for interference from the received characters, and to transmit the remaining characters to a target application.

Description

Safety input system, method and intelligent terminal, storage medium

Technical field

The present invention relates to communication technologies, and in particular, to a security input system input system and method, and an intelligent terminal and a storage medium.

Background technique

With the rapid popularization of smart phones, services such as mobile payment have experienced rapid growth in the service of mobile terminals, and the subsequent theft of information and the loss of funds have become a major security threat for ordinary users. For example, a privacy-threatening virus, the "black keyboard", has been popular overseas. The virus is packaged into the well-known mobile phone input method SwiftKey KeyBoard, which can directly monitor the user's keyboard input, upload and leak the user account password information, and even include credit cards. Online banking and other payment materials, the virus is very serious.

Although the existing solutions solve the problem of security input to a certain extent, it can also be seen that the above solutions all have the problem that the input method is easily invaded and the information input by the user is easily stolen.

Summary of the invention

The embodiments of the present invention provide a security input system, a method, and an intelligent terminal, which are used to solve the problem that the input method is easily hacked in the related art, and the information input by the user is easily stolen.

According to an aspect of an embodiment of the present invention, a security input system is provided, including:

An input driver module configured to write a user input event to a device input node file;

The interference event insertion module is configured to generate an input event for interference when the device input node file is detected to have an input event, and write the input event to the device input node file;

An input event processing module configured to read an input event in the device input node file and pass it to an input method program;

a security input processing module configured to receive a character generated according to the input event sent by the input method program, and remove the interference character corresponding to the input event for interference from the received character, and The culled characters are sent to the target program.

According to another aspect of an embodiment of the present invention, a secure input device is provided, including a memory and a processor, wherein the memory stores executable instructions for causing the processor to perform operations including the following :

When it is detected that the input driver writes the user's input event to the device input node file, generates an input event for interference, and writes the input event to the device input node file;

Passing an input event in the device input node file to an input method program;

Receiving a character generated according to the input event sent by the input method program, and culling the interference character corresponding to the input event for interference from the received character, and transmitting the unremoved character to the target program .

According to another aspect of an embodiment of the present invention, an intelligent terminal is provided, including: the security input device of the present invention.

According to another aspect of the present invention, a security input method is also provided, including:

According to another aspect of the present invention, a storage medium is provided, where executable instructions are stored, and the executable instructions are used to perform security provided by an embodiment of the present invention. Input method.

The beneficial effects of the embodiments of the present invention are as follows:

The security input system and method and the intelligent terminal and the storage medium provided by the embodiment of the present invention insert an interference input event when an input event is input on the user side, and when the character obtained by the input method program is sent to the target program, the character is interfered according to the interference The character obtained by the input event is culled, so that in the case that the input method program is maliciously invaded, the malicious program cannot accurately collect the real content input by the user, thereby achieving the purpose of safe input.

It can be seen that the solution according to the embodiment of the present invention can improve the input of the common input method program on the basis of the existing input system, reduce the security risk caused by the input method itself, and greatly improve the safety factor of the product. .

DRAWINGS

1 is a structural block diagram of a security input system according to a first embodiment of the present invention;

2 is a schematic diagram of an input system framework when a smart terminal does not adopt a security input system according to a second embodiment of the present invention;

3 is a schematic diagram of an input system framework when a smart terminal adopts a security input system according to a second embodiment of the present invention;

4 is a flow chart of a security input system framework of a smart terminal according to a second embodiment of the present invention;

FIG. 5 is a flowchart of implementing a character security input by a smart terminal application security input system according to a second embodiment of the present invention; FIG.

FIG. 6 is a flowchart of a security input method according to a third embodiment of the present invention.

detailed description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While the embodiments of the present invention have been shown in the drawings, the embodiments Instead, these embodiments are provided to enable The disclosure is to be thoroughly understood and the scope of the disclosure may be fully conveyed to those skilled in the art.

At present, the security risks of smart terminal keyboard input can be summarized as follows:

1. The malicious program obtains the input content of the target program through the process injection technology. Process injection is simply a technique that copies a piece of code to a target process and then lets the target process execute the code. Through the process injection technology, a part of the input box can be run in the target program or injected into the input method to obtain the input content.

2, through the operating system underlying keyboard events to obtain records, that is, by obtaining the input value of the keyboard input, and then converting the encoded value into keyboard characters, such as in a Linux-based mobile terminal can be recorded by the /dev/input path Enter the device content, get the user input, and complete the intrusion.

3. Get the keyboard input content through the input method. The content input of various programs on the smart terminal must be completed by the input method, so as long as the user's important information input is called to the input method, it is possible to steal the input information to the user. Malicious program intrusion input method program does not require special permissions, is confusing and difficult. If a normal user downloads an input method that contains malicious code, or a normal input method on the terminal is invaded by a malicious program, the user is exposed to the security risk of the information being stolen. For example, the "keyboard black hand" mentioned above is a keyboard input stealing using a packaged foreign mobile phone input method SwiftKey KeyBoard.

For the security risks of obtaining keyboard input through input methods, the existing solutions are:

Regarding the method of intelligent terminal security input, there are already some solutions, such as:

Solution 1: Touching the terminal security transaction method, the method is installed on the touch terminal by installing the input method, and the installed input method is bound to the transaction program, and the binding input method is used in the transaction program and the switch to the ordinary input method is prohibited. Unsafe input method can be avoided to steal user sensitive information, which reduces the possibility of data being stolen when inputting sensitive data.

Scheme 2: A method and terminal for implementing a secure input, the method being applied to a display having a terminal, the terminal comprising a first application, comprising: obtaining an input initial input character, displaying the initial input character in an input box; identifying an input mode of inputting the initial input character; and based on the input mode and a predetermined instruction security policy determining a valid input character corresponding to the initial input character; providing the valid input character to the first application. The instruction security policy identifies and converts the input initial input characters into effective instructions, so that the user can safely input various private information and security information on the terminal without having to worry about the observer in a complicated environment. The security of private and security information is guaranteed.

Although the existing scheme solves the problem of security input to a certain extent, it also has some drawbacks, mainly as follows:

For the first solution, it is completely safe input by means of a dedicated input method program, and it does not work for the ordinary input method. In many cases, when the user uses the terminal, the input is completed using the ordinary input method program. Therefore, the coverage of such a scheme is not wide;

For scheme 2, the purpose of safe input is achieved by converting the initial input characters into preset valid characters. This scheme requires the conversion correspondence of the user preset characters, and the user may forget the correspondence of the characters when using. Therefore, this program has certain drawbacks in application promotion.

The embodiment of the invention provides a security input system and method, an intelligent terminal and a storage medium. When a user inputs character information through an input method, the system automatically adds an interference input event, and after the input method generates a character, the system deletes the system. The interfering characters are automatically added, and then the system process passes the remaining user-entered characters to the target program. In this way, the input method program cannot accurately obtain the real content input by the user, and realizes the safe input of the content.

The implementation process of the embodiment of the present invention is described in detail below.

In a first embodiment of the present invention, a security input system is provided. As shown in FIG. 1, the system includes: an input driving module 110, an interference event insertion module 120, and an input event processing module. Block 130 and secure input processing module 140.

The above module is a division of the architecture of the security input system at the functional level. In actual applications, some modules may be merged or some modules may be further split, which can be easily changed by those skilled in the art based on FIG.

For the above modules, from the hardware implementation level, it can be implemented by a processor (CPU), a microprocessor (MCU) / an application specific integrated circuit (ASIC) or a logic programmable gate array (FPGA).

The input driving module 110 is configured to write a user input event to the device input node file; that is, when the user has an input operation, the device input node file records the coordinates of the corresponding character of the user input operation, for example, in a Linux-based intelligent system. The coordinate information is recorded in the device input node file /dev/input/event*.

The interference event insertion module 120 is configured to generate an input event for interference when the device input node file is detected to have an input event, and write the input event to the device input node file;

The input event processing module 130 is configured to read an input event in the device input node file and pass it to the input method program;

The security input processing module 140 is configured to receive a character generated according to the input event sent by the input method program, and remove the interference character corresponding to the input event for interference from the received character, and The culled characters are sent to the target program.

The target program may be, but is not limited to, a software application that requires high input security, such as mobile banking software.

In an embodiment of the present invention, the interference event insertion module 120 parses the layout information of the current input interface, acquires the center position coordinates of each character in the input interface, and extracts coordinates of several characters in the input interface according to the setting extraction mechanism, and An input event for interference is generated based on the coordinates of the extracted character.

In still another embodiment of the present invention, the interference event insertion module 120 writes the generated input event for interference into the device input node file according to the set interference event insertion rule.

For the interference event insertion rule, a person skilled in the art can flexibly configure, for example, it can be configured to insert an interference input event after each input event written by the input driving module 110, and write each input in the input driving module 110. Inserting a plurality of interference input events after the input event, inserting an interference input event after the input drive module 110 writes the plurality of input events, or inserting a plurality of interference input events after the input drive module 110 writes the plurality of input events, and many more.

Preferably, in the embodiment of the present invention, the manner in which the security input processing module 140 determines whether the character sent by the input method program is a disturbing character includes but is not limited to:

method one:

The interference event insertion module 120 sends an interference notification to the security input processing module 140 when the input event for interference is written into the device input node file;

The security input processing module 140 determines an interference character corresponding to the input event for interference according to the received interference notification, and performs an interference character culling operation according to the determined interference character.

An implementation manner in which the security input processing module 140 can determine the interference character according to the interference notification is that the interference notification sent by the interference event insertion module 120 carries the character information corresponding to the input event for the interference. Of course, there are other implementation forms. For example, the security input processing module 140 can retrieve the input interface information. At this time, the interference event insertion module can send the inserted input event information to the secure input processing module through the notification, and is processed by the security input. The module 140 determines the interference character based on the input interface information and the input event information. The present invention does not limit the implementation form of the interference notification, and it is within the scope of the protection idea of the present invention that the security input processing module 140 can determine the interference character by the interference notification.

In this embodiment, optionally, the interference event insertion module 120 inserts an input for interference. The character corresponding to the event should be distinguished from the character corresponding to the monitored user's input event.

Method 2:

The interference event insertion module 120 writes the generated input event for interference into the device input node file according to the set interference event insertion rule. At this time, the security input processing module 140 may retrieve the interference event insertion rule, and according to the interference event insertion rule, determine the interference character corresponding to the input event for the interference, and perform the interference character according to the determined interference character. Eliminate the operation.

For example, the insertion rule of the interference event insertion module 120 inserting the interference event is to insert an interference input event after each input event written by the input driving module 110, then the character recognized by the corresponding input method program is: true character pseudo character true character The order of the pseudo-characters..., therefore, the secure input processing module 140 can automatically determine that the even-numbered characters are inserted interfering characters and need to be culled.

In summary, in the security input system according to the embodiment of the present invention, when the user clicks on the character in the input keyboard, the input coordinates are generated, and when the input coordinates are written into the device input node file /dev/input/event* The system generates single or multiple interference coordinates and writes them to the device input node file /dev/input/event*. When the input method program responds to these input coordinates in the input node file of the device, multiple characters are sequentially generated, which include the normal characters input by the user and the interfering characters added by the system, and the system is responsible for deleting the interfering characters and The remaining characters entered by the remaining user are passed to the target program. In this way, even in the case that the input method program is maliciously invaded, the malicious program cannot accurately collect the real content input by the user, thereby achieving the purpose of safe input.

In the second embodiment of the present invention, an intelligent terminal is provided. The input system frame diagram when the smart terminal does not adopt the security input system described in the first embodiment is as shown in FIG. 2, and the input system framework is known from the figure. It includes three parts: target program, system process, and input method process.

When target programs, such as social software and mobile banking software, need to input character content, first The system process requests to open the input method program. When the system process receives the application, it binds the input box and displays the input method. For example, in an Android-based system terminal, a target program, a system process, and an input method process cooperatively interact through InputMethodManager, InputMethodManagerService, and InputMethodService, respectively.

After binding the input box and displaying the input method, the user clicks on the touch screen, the input method generates a character, and the character is transmitted to the target program, and after the target program receives the character, it is displayed on the corresponding control. The input security of such an input system relies on an input method program, and there is an input security risk when the input method is not trusted.

As shown in FIG. 3, it is an input system framework diagram of the smart terminal according to the embodiment of the present invention after applying the security input system according to the first embodiment. In the input system framework, a custom input management service is added to the system process (that is, the functions of the interference event insertion module 120 and the security input processing module 140 in the first embodiment are added on the basis of the original input management service). Used to complete the insertion of interference events and the elimination of interfering characters.

This embodiment implements optimization and improvement of the character input process by adding a custom input server in the system process. For example, when the user has an input operation, the input event corresponding to the input operation is recorded, and the interference input event is automatically added. After the input method program generates a character according to the input event, the character content is not directly transmitted to the target program, but the interference character is to be The culling saves only the normal characters entered by the user, and then the system process passes the normal characters to the target program.

In the framework of the intelligent terminal security input system, the input method program cannot accurately obtain the character content input by the user, and the security risk caused by the input method program can be avoided.

As shown in FIG. 4, it is a flowchart of a security input system framework of an intelligent terminal according to an embodiment of the present invention, and the process is as follows:

The user performs an input operation through a touch screen or a physical button of the smart terminal;

The system kernel layer touch screen of the smart terminal, the physical button and the like (corresponding to the input driver module) convert the physical signal into an input event according to an event rule defined by the multi-touch protocol, and Write to the device input node file; for example, in a smart terminal based on the Linux operating system, the input device node file is in the /dev/input/ directory.

The input event processing thread (corresponding to the input event processing module) of the system framework layer is responsible for reading the input events in the input device node file and passing them to the upper application. For example, when a user invokes an input method program to input a character, the input event processing thread passes the user's input event to the input method program, and then the input method program generates a character based on the incoming input event.

In the secure input system, in addition to completing the normal input event reading, the system framework layer also writes an interference event in the input device node file through the interference event insertion thread (corresponding to the interference event insertion module).

The interference event insertion thread communicates with the security input processing thread (corresponding to the security input processing module) to notify the character corresponding to the interference event inserted by the security input processing thread when the interference event is inserted, and the security input processing thread inputs the information according to the obtained information. The result characters generated by the method are processed, the interfering characters are deleted, and only the normal characters input by the user are retained.

Finally, the secure input processing thread passes the normal characters obtained after processing to the target program.

As shown in FIG. 5, a flowchart of implementing a character security input by a smart terminal application security input system according to an embodiment of the present invention includes the following steps:

S502. The user clicks on a character on the keyboard of the screen input method, such as the letter a.

S504: The touch screen driver responds to the click action, obtains coordinates of the click position, generates an input event, and reports the coordinate content to the intelligent terminal input subsystem.

S506. The input device node file receives an input event.

Specifically, the touch screen driver writes input events to the input device node file. For example, in a Linux-based intelligent system, the input device file is in the /dev/input/ directory.

S508. The input event processing thread of the smart terminal monitors the content change in the input device node file, and encapsulates the original coordinate information, and sends the original coordinate information to the upper application (ie, the input method program) by inputting an event.

S510. The input method program generates a character, such as the letter a, in response to the input event.

S512. The smart terminal security input processing thread receives and caches characters sent by the input method program, such as the letter a.

S514, the smart terminal interference event insertion thread generates interference coordinates, writes to the /dev/input input device node file, and notifies the security input processing thread of the interference character information corresponding to the interference coordinate;

In detail, the rule for generating the interference coordinates is to obtain the coordinates of the center position of each letter control by parsing the layout information of the current input interface, and then randomly take out some of the letter coordinates of the letter as the interference coordinates.

S516. The input event processing thread of the smart terminal monitors the inserted interference coordinate information in the input device node file, and performs encapsulation, and sends an interference input event to the input method program.

S518. The input method program generates an interference character, such as the letter b, in response to the input event.

S520. The smart terminal security input processing thread caches all characters, such as ab.

S522. The smart terminal security input processing thread deletes the interference character, and only retains the user input character, for example, changes ab to a.

S524. The smart terminal security input processing thread sends the final character to the target program, for example, sending the letter a to the target program.

S526, the target program displays characters input by the user, such as displaying the letter a.

The above process steps complete the safe input of characters. In this process, when the user performs input, the system automatically generates interference coordinates automatically, and generates interference characters through the input method, and then the system process restores the input content containing the interference characters to the user. The characters entered.

In a third embodiment of the present invention, a security input method is provided, as shown in FIG. 6, including:

Step S601, when it is detected that the input driver writes the input event of the user to the device input node file, generates an input event for interference, and writes the input event to the input node of the device. Piece

In this embodiment, an input event for interference is generated, including:

Parsing the layout information of the current input interface, and obtaining the coordinates of the center position of each character in the input interface;

According to the setting extraction mechanism, coordinates of several characters are extracted in the input interface, and an input event for interference is generated according to the coordinates of the extracted characters.

Preferably, in this embodiment, when the input driver is detected to write the input event of the user to the device input node file, the generated input event for interference is written into the device input according to the set interference event insertion rule. Node file.

Step S602, the input event in the device input node file is transmitted to the input method program;

Step S603, receiving a character generated according to the input event sent by the input method program, and culling the interference character corresponding to the input event for interference from the received character, and sending the unremoved character To the target program.

In this embodiment, the manner of determining whether the character sent by the input method program is a disturbing character includes but is not limited to:

Manner 1: When generating an input event for interference, record the character corresponding to the input event for interference. In this way, after receiving the character generated according to the input event sent by the input method program, the interference character corresponding to the input event for interference can be determined according to the recorded character to perform the culling operation of the interference character.

Manner 2: After receiving the character generated according to the input event sent by the input method program, determining, according to the interference event insertion rule, the interference character corresponding to the input event for interference, to perform the interference character culling operation.

In summary, when there is an input event on the user side, the interference input event is inserted, and when the character obtained by the input method program is sent to the target program, the character obtained according to the interference input event in the character is removed, so that the input method is In the case of malicious intrusion, malicious programs cannot be accurately received. The real content of the user input is collected to achieve the purpose of safe input.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) including computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Industrial applicability

The embodiment of the invention discloses a security input system and method, and an intelligent terminal and a storage medium. The system includes: an input driving module configured to write a user input event to a device input node file; and an interference event insertion module configured to After detecting that the device input node file has an input event write, generating an input event for interference and writing to the device input node file; inputting an event processing module configured to read an input event in the device input node file and Passed to the input method program; the secure input processing module is configured to receive the character generated according to the input event sent by the input method program, and remove the interference character corresponding to the input event for interference from the received character, and the unremoved character Characters are sent to the target program. The invention can safely improve the input of the common input method program on the basis of the existing input system, reduce the security risk caused by the input method program itself, and greatly improve the safety factor of the product.

Claims

A safety input system that includes:

An input driver module configured to write a user input event to a device input node file;

The interference event insertion module is configured to generate an input event for interference when the device input node file is detected to have an input event, and write the input event to the device input node file;

An input event processing module configured to read an input event in the device input node file and pass the input event to an input method program;

a security input processing module configured to receive a character generated according to the input event sent by the input method program, and remove the interference character corresponding to the input event for interference from the received character, and The culled characters are sent to the target program.
The system of claim 1, wherein the interference event insertion module is further configured to parse the layout information of the input interface, obtain the center position coordinates of each character in the input interface, and press the setting extraction mechanism at the input. The coordinates of several characters are extracted from the interface, and an input event for interference is generated according to the coordinates of the extracted characters.
The system of claim 1 wherein said interference event insertion module is further configured to write the generated input event for interference to said device input node file in accordance with a set interference event insertion rule.
A system according to any one of claims 1 to 3, wherein

The interference event insertion module is further configured to: when the input event for interference is written into the device input node file, send an interference notification to the security input processing module;

The security input processing module is further configured to determine, according to the received interference notification, an interference character corresponding to an input event for interference, and perform an interference character culling operation according to the determined interference character.
The system of claim 4 wherein said interference event insertion module is further configured The character information corresponding to the input event for interference is sent to the secure input processing module as the content of the notification.
The system of claim 3, wherein the security input processing module is further configured to retrieve the interference event insertion rule and determine interference corresponding to an input event for interference according to the interference event insertion rule. Characters, and perform interference character culling operations based on the determined interference characters.
A secure input device includes a memory and a processor, the memory storing executable instructions for causing the processor to perform operations including:

When it is detected that the input driver writes the user's input event to the device input node file, generates an input event for interference, and writes the input event to the device input node file;

Passing an input event in the device input node file to an input method program;

Receiving a character generated according to the input event sent by the input method program, and culling the interference character corresponding to the input event for interference from the received character, and transmitting the unremoved character to the target program .
An intelligent terminal comprising the secure input device of claim 7.
A safe input method, including:

When it is detected that the input driver writes the user's input event to the device input node file, generates an input event for interference, and writes the input event to the device input node file;

Passing an input event in the device input node file to an input method program;

Receiving a character generated according to the input event sent by the input method program, and culling the interference character corresponding to the input event for interference from the received character, and transmitting the unremoved character to the target program .
The method of claim 9 wherein said generating an input event for interference comprises:

Parsing the layout information of the input interface, and obtaining the coordinates of the center position of each character in the input interface;

According to the setting extraction mechanism, coordinates of several characters are extracted in the input interface, and an input event for interference is generated according to the coordinates of the extracted characters.
The method of claim 9 wherein said writing said input event to said device input node file comprises:

When it is detected that the input driver writes the user's input event to the device input node file, the generated input event for interference is written to the device input node file according to the set interference event insertion rule.
The method of any one of claims 9 to 11, further comprising:

When generating an input event for interference, recording a character corresponding to the input event for interference;

After receiving the character generated according to the input event sent by the input method program, determining the interference character corresponding to the input event for interference according to the recorded character, and performing the culling operation of the interference character.
The method of claim 9 further comprising:

After receiving the character generated according to the input event sent by the input method program, determining, according to the interference event insertion rule, an interference character corresponding to an input event for interference, and performing an interference character culling operation.
A storage medium storing executable instructions for performing the secure input method of any one of claims 9 to 13.