CN101359987A

CN101359987A - Algorithm cipher

Info

Publication number: CN101359987A
Application number: CNA2007101412259A
Authority: CN
Inventors: 郝远新
Original assignee: Individual
Current assignee: Individual
Priority date: 2007-08-02
Filing date: 2007-08-02
Publication date: 2009-02-04

Abstract

The invention is used in the occasions such as web banks, online games, and the like, which solves the problem that Trojan horses steal accounts and passwords, so that a user is not afraid of peep by someone else. A password is replaced by calculation, and the method for approving the true identity of the user is a calculation method in stead of a group of fixed numbers or symbols. The preset account of the user is abc, the password is a number which is obtained by adding 2 to a random number generated by a system. In a login interface, the server (system) generates a random number 3, and the user carries out the calculation that 3 plus 2 is 5; and the user inputs the account abc, and inputs password 5. The server receives the account abc and the password 5, then searches a preset password of adding 2 to a random number, and finally determines that the user inputting the password 5 is the true user according to the account abc. Thus, as for the random number 3, the user who has the account abc and password 5 is the true user. When the random number 3 changes, the password to be input is changed accordingly.

Description

Algorithm cipher

Affiliated technical field

Be mainly used in Web bank, online game etc. and need use the place of account number and password authentification user real identification.Can solve wooden horse and steal the problem of account number and password, accomplish that the account number of input and password be not afraid of others and see.

Background technology

At present, virus overflowing on the Internet, especially trojan horse cause various types of account numbers and password to be stolen, and cause very big loss, in order to address this problem a lot of methods, roughly can be divided into two classes:

The one, prevent that account number and password are stolen, think that exactly the whole bag of tricks allows you can't obtain my account number and password.For example antivirus software, anti-Trojan software etc.What he guaranteed is: give the environment of a safety of client, this is the method for the strick precaution of main flow.

The 2nd, when confirming user identity, except common account number and password, also need to import disposable additional identification sign indicating number, this additional identification sign indicating number was used once and had just been lost efficacy, and it is by generations such as SMS, cryptoguard card, phone checkings.The purpose of this method is that you obtain account number and password is also otiose, and just become next time.Even under unsafe environment, also can avoid loss.

These two kinds of methods have his own strong points, and one is that I make great efforts not allow you obtain, and one is to try every possible means to allow you obtain also there is not what usefulness.It is also otiose that this method belongs to account number and password that you obtain to input.

Summary of the invention

Replace password with algorithm, what prove user real identification is a kind of computational methods, and no longer is one group of fixing numeral or symbol.Server (system) and user utilize with a kind of computational methods, identical random number are calculated the same legitimacy that just proves the user of result.

The account number that the user stays the own identity of proof is abc, and password is: the random number that system is produced adds 2, and at login interface, server (system) generates a random number 3, and the user adds 2 computings to this random number, obtains result 5.The user imports abc in account number, import 5 in password.After server (system) receives user's account number abc and password 5, search for its reserving cipher according to account number abc and be: the random number that system is produced adds 2.Calculate the real user that is of cryptopart input 5.Like this for random number 3, account number abc, the user of password 5 is only real user.When random number 3 has changed, password also changes.The password that wooden horse is stolen account number and importation is without any being worth.

User's password no longer is a series of fixed character, but a kind of algorithm carries out computing to the random number that system gives exactly, and algorithm is freely selected by the user.The numeral that can verify own identity of user's input is that wooden horse has obtained also useless because of random number changes.

Description of drawings

Figure one is a matrix diagram.

Figure two is log-in interface figure.

Figure three initial passwords are provided with surface chart.

Specific embodiments

How the main interpreting user of this paper is provided with " algorithm cipher ", and the work that this method is applied in Web bank, the online game is finished according to this paper by the programmer." algorithm cipher " of proof user real identification is an expression formula and a selectable drop-down menu.

One, expression formula part

(A5+3) * (B7+5) this is the expression formula of a standard, and his implication is as follows:

A5, B7 are used for peeking, and on user's log-in interface, system produces one 10 * 10 matrix, produce numeral between the 10-1000 at random by system in each grid of matrix, have 100 random numbers.See Figure of description figure one:

In the expression formula implication of A5 be exactly in the matrix abscissa be A, ordinate is several 456 in the 5 corresponding grid, the implication of B7 be exactly in the matrix abscissa be B, ordinate is several 786 in the 7 corresponding grid.After having got numeral, perform mathematical calculations according to expression formula.

(456+3) * (786+5)=363069 obtain operation result 363069

To different users, the variation of expression formula part is embodied in the password:

1, selects in to the choosing of random number in the matrix, abscissa is at A---select among the J, ordinate is 1---10.Can select two, also can select one.

2, a back number of add operation is to change, and is freely chosen by the user.

3, the form of expression formula also can become.The version of expression formula is as follows:

(C6)×5、(D7)×(B9+12)

Two, selectable drop-down menu part

Operation result to expression formula suitably intercepts, and promptly casts out some numeral, makes computing irreversible.Mode with drop-down menu is expressed, and the user only needs to select, and remembers the selection of oneself.

The selection of supposing the user is: remove preceding 1.The A in the option in the following table just removes first bit digital of the operation result 363096 of expression formula part and obtains 63096, and input 63069 is exactly a legal users.Be that menu option is partly tabulated below:

A removes preceding 1 (the gained numeral from the front number, is removed first digit, imported remaining)

That B removes is preceding 2 (with the gained numeral from the front, second is removed, import remaining)

C removes preceding 1 and preceding 2 (with the gained numeral from the front, first and second are removed simultaneously, import remaining)

D removes back 1 (the gained numeral is seen from behind, first digit is removed, import remaining)

E removes back 2 (the gained numeral is seen from behind, second digit is removed, import remaining)

F removes back 1 and back 2 (the gained numeral is seen, first is removed simultaneously with second, import remaining) backmost

G removes preceding 1 and afterwards 1 (the gained numeral from the front, is removed first, seen from behind simultaneously, remove first, import remaining)

H removes preceding 1 and afterwards 2 (the gained numeral from the front, is removed first, seen from behind simultaneously, remove second, import remaining)

I removes preceding 2 and back 1 (with the gained numeral from the front, second is removed, see from behind simultaneously, remove first, import remaining)

J removes preceding 2 and back 2 (with the gained numeral from the front, second is removed, see from behind simultaneously, remove second, import remaining)

User's password by the option of an expression formula and a menu form.The password that previous example is complete is: (A5+3) * (B7+5) remove preceding 1.The user remembers account number and the password of oneself, carries out computing according to the matrix of giving when landing, and result's input is just passable.

The algorithm cipher that common fixed password and variation can be set in specific implementation process as required exists simultaneously.Account number abc, fixed password 123, algorithm cipher is: (A5+3) * (B7+5) removes preceding 1.Log-in interface is referring to figure two, and initial password is provided with the interface referring to figure three.Need a cutline literal equally to numerous users of service and client.Can be with reference to hereinafter:

On user's log-in interface, system produces one 10 * 10 matrix, as figure one, produces 100 random numbers at random by system in each grid of matrix.(A5+3) * (B7+5) is the expression formula of a standard, and A5, B7 are the numbers that is used for getting in the matrix, and the implication of A5 is A with abscissa in the matrix exactly, and ordinate is that the number in the 5 corresponding grid is chosen, and is 456.What B7 chose is 786.After having got numeral, perform mathematical calculations according to expression formula.

(456+3) * (786+5)=363069 obtains operation result 363069

The variation of expression formula part is embodied in the algorithm cipher:

2, a back numeral of add operation is to change, and is freely chosen by the user.

(C6)*5、(D7)*(B9+12)

The drop-down menu of selection algorithm password is exactly that operation result to expression formula suitably intercepts, and promptly casts out some numeral, makes computing irreversible.User's selection is: remove preceding 1.First bit digital of the operation result 363096 of expression formula removed obtain 63096, just import 63069 and prove it oneself is validated user.

Some explanation:

One, wanting to crack this algorithm cipher in theory needs repeatedly to obtain the numeral of input and intercept the random number battle array simultaneously.In fact really can prevent password be stolen still to lean on the country law.

Two, for the understanding of novelty.

1, do not need other physical hardwares.Additive method all needs physical hardware.

2, this method is that user's heart is remembered which numeral in the random number that input system gives.Additive method is which numeral that needs on the system prompt input physical hardware.

3, there is calculation process in algorithm cipher.

Claims

Under the prerequisite that does not need other physical hardwares, need the user to input account number, password, additional identification sign indicating number, be used for proving or confirm own true identity that all different each time method all is tied.

Method is embodied in following 2 points:

1,, comprises selection to random number series to the selection of random number.System or server provide a series of numerals, it is incomplete the same that the part of user input and system produce, but select according to certain rule, what are regardless of this rule, all are a kind of embodiments of the different passwords of different user correspondence.

2, to the computing of random number, exactly the random number that system gives is performed mathematical calculations, no matter random number is carried out other still more complicated computings of simple add operation, all regard as the thought of this paper is extended.

Judge that by input additional identification sign indicating number manually input still is that the Automatic Program operation does not then belong to this paper content.Because the effect of this additional identification sign indicating number is not used for identifying user identity, and he is that system shows that what what user imports, and do not make any change.