CN102063589A

CN102063589A - Electronic signature tool and safety control method thereof

Info

Publication number: CN102063589A
Application number: CN2010106087852A
Authority: CN
Inventors: 李东声
Original assignee: Beijing Tendyron Technology Co Ltd
Current assignee: Beijing Tendyron Technology Co Ltd
Priority date: 2010-12-17
Filing date: 2010-12-17
Publication date: 2011-05-18
Also published as: CN102509222A; CN102509222B

Abstract

The invention discloses an electronic signature tool and a safety control method thereof. The method comprises the steps of: A, carrying out line row feed or line feed display operation on transaction information to be confirmed on the electronic signature tool before the last part of content of the transaction information to be confirmed, of current transaction, is displayed on the electronic signature tool and after the electronic signature tool acquires a fingerprint input by a user; B, after the last part of content of the transaction information to be confirmed is displayed, displaying confirmation prompt information on the electronic signature tool so as to prompt the user to confirm the current transaction through fingerprint input; and C, after the fingerprint of the user is acquired, executing the safety operation treatment on the current transaction by the electronic signature tool. By adopting the electronic signature tool and the safety control method in the invention, the transaction information can be browsed and the transaction information can be confirmed on the electronic signature tool, without setting page-turning keys/direction keys and a confirmation key on the electronic signature tool.

Description

A kind of method of controlling security of electric signing tools and electric signing tools

Technical field

The present invention relates to the application of electronic technology field, relate in particular to a kind of method of controlling security and electric signing tools of electric signing tools.

Background technology

At present, the application of electric signing tools more and more widely, particularly in the financial field, for the security that guarantees to conclude the business, the user of Web bank uses electric signing tools more and more, for example, and by USB (Universal Serial Bus, USB (universal serial bus)) USB Key of linking to each other with transaction terminal (being generally personal computer) of interface etc. is as the instrument of authentication and transaction authentication.

In order further to ensure the security of electronic transaction, the electric signing tools of a new generation has Presentation Function usually, some important Transaction Informations that are about in the current transaction are shown to the user with written form by the display screen that is arranged on the electric signing tools, carry out reference for the user before this transaction is confirmed.

Use the concrete grammar of electric signing tools to be: the user links to each other electric signing tools with personal computer (PC), PC receives the trading instruction and the Transaction Information of user's input, and generate corresponding transaction message according to Transaction Information, send it to electric signing tools; Electric signing tools extracts specific Transaction Information (can be called Transaction Information to be confirmed) from the transaction message that receives, and is presented on the display screen with written form; If Transaction Information can't show all that on display screen the user can also use page turning key/directionkeys to carry out page turn over operation.So far, the user can judge whether the Transaction Information that shows on the electric signing tools is accurate, if Transaction Information is accurate, then carry out the safe calculation process such as electronic signature (being also referred to as digital signature) generation, electron underwriting authentication, encryption and deciphering that this exchange needs by the affirmation button startup electric signing tools that is arranged on the electric signing tools, and result sent to PC, so that finish corresponding electronic transaction.

In addition, stolen after losing in order to prevent electric signing tools, fingerprint identification module can also be set on electric signing tools, by gathering user's fingerprint, and by with the fingerprint of the validated user of storage in advance to recently carrying out fingerprint matching authentication, so that the active user of electric signing tools is carried out authentication.

According to above description as can be known, in order to realize the security of electronic transaction, the functional modules such as button that display screen, fingerprint identification module need be set and carry out trade confirmation and page turn over operation usually on the electric signing tools.But, carry for the ease of the user, the size of electric signing tools is less usually, the above-mentioned functions module is set on electric signing tools must need to reduce the size of each functional module, this can increase the difficulty of operation electric signing tools, especially for the relatively poor user of eyesight, the size that the size that reduces button still reduces display screen all can reduce the availability of electric signing tools.

Summary of the invention

Technical matters to be solved by this invention is, overcome the deficiencies in the prior art, provide a kind of and need not to be provided with turnover key and confirm that button can realize the electric signing tools of corresponding function, and do not use turnover key and confirm button carries out security control to electric signing tools method.

In order to address the above problem, the invention provides a kind of method of controlling security of electric signing tools, this method comprises:

A: the last part content of the Transaction Information to be confirmed of this transaction is before showing on the described electric signing tools, after described electric signing tools collects the fingerprint of user input, on described electric signing tools, described Transaction Information to be confirmed is entered a new line or change the row display operation;

B: after the last part content of described Transaction Information to be confirmed shows, on described electric signing tools, show and confirm information, by the input fingerprint this transaction is confirmed with the prompting user;

C: after collecting the fingerprint of user's input, described electric signing tools is carried out the safe calculation process of this transaction;

In steps A and/or step C, described electric signing tools also carries out the fingerprint matching authentication processing to the fingerprint of user's input.

In addition, in the steps A, described electric signing tools carries out once described line feed or changes the row display operation after whenever collecting the fingerprint of user's input; Or

In the steps A, after described electric signing tools collects the fingerprint of user input, carry out described line feed automatically or change the row display operation with the time interval that sets in advance.

In addition, before described steps A, also comprise the steps:

Steps A 0: after described electric signing tools receives the Transaction Information of this transaction that coupled transaction terminal sends, on described electric signing tools, show first's content of the described Transaction Information to be confirmed that wherein comprises; Or

Steps A 1: after described electric signing tools receives the Transaction Information of this transaction that coupled transaction terminal sends, on described electric signing tools, show the Transaction Information information, start the demonstration of described Transaction Information to be confirmed with the prompting user by the input fingerprint.

In addition, among the described step B, after the last part content of described Transaction Information to be confirmed shows, show described affirmation information before, also comprise following steps:

Step B1: described electric signing tools is gathered the fingerprint of user's input.

In addition, described line feed display operation is line feed demonstration backward; The described row display operation that changes shows for changing row backward.

The present invention also provides a kind of electric signing tools, comprises: display module, and safe computing module, described electric signing tools also comprises: control module and fingerprint identification module; Wherein:

Described control module is used for to described display module sending controling instruction, to control described display module described Transaction Information to be confirmed is shown; When the last part content of described Transaction Information to be confirmed before showing on the described display module, after knowing the fingerprint that collects user's input according to the fingerprint collecting result of described fingerprint identification module output, to described display module sending controling instruction, described Transaction Information to be confirmed is entered a new line or change row and show to control described display module;

Described control module also is used for after the last part content of described Transaction Information to be confirmed shows on described display module, to described display module sending controling instruction, shows the affirmation information to control described display module; Described affirmation information is used to point out the user by the input fingerprint this transaction to be confirmed;

Described control module also is used for after showing described affirmation information, receive the fingerprint collecting result of described fingerprint identification module output, and after knowing the fingerprint that collects user input according to described fingerprint collecting result, to described safe computing module sending controling instruction, carry out the safe calculation process of this transaction to control described safe computing module;

Before the last part content of described Transaction Information to be confirmed shows, and/or after the demonstration of described affirmation information, described fingerprint identification module also is used for the fingerprint of user's input is carried out the fingerprint matching authentication processing.

In addition, when the last part content of described Transaction Information to be confirmed before showing on the described display module, described control module whenever receives once described fingerprint collecting result, then send a steering order, described Transaction Information to be confirmed is carried out once described line feed or change row showing to control described display module to described display module; Or

When the last part content of described Transaction Information to be confirmed before showing on the described display module, after described control module receives described fingerprint collecting result, with time interval of setting in advance to described display module sending controling instruction repeatedly, described Transaction Information to be confirmed is carried out repeatedly described line feed or changes row showing to control described display module.

In addition, described electric signing tools also comprises: data transmission module, be used for linking to each other with transaction terminal, and receive the Transaction Information of the described transaction of described transaction terminal transmission, and export it to described control module;

Described control module also is used for behind the described Transaction Information that receives described data transmission module output, to described display module sending controling instruction, first's content of the described Transaction Information to be confirmed that comprises in the described Transaction Information is shown to control described display module; Or

Described control module also is used for behind the described Transaction Information that receives described data transmission module output, to described display module sending controling instruction, shows the Transaction Information information to control described display module; Described Transaction Information information is used to point out the user by importing the demonstration that fingerprint starts described Transaction Information to be confirmed.

In addition, after the last part content of described Transaction Information to be confirmed shows, before described affirmation information showed, described control module also was used to receive the fingerprint collecting result who is used to indicate the fingerprint that has collected user's input of described fingerprint identification module output.

The present invention also provides a kind of method of controlling security of electric signing tools, and this method comprises:

A: the last part content of the Transaction Information to be confirmed of this transaction is before showing on the described electric signing tools, after described electric signing tools collects the fingerprint of user input, the Transaction Information described to be confirmed that shows on the described electric signing tools is entered a new line or changes the row display operation;

B: after the last part content of described Transaction Information to be confirmed shows, on described electric signing tools, show and confirm information; Comprise confirmation code in the described affirmation information or comprise and be used for the confirmation code generation information that assisted user is known confirmation code;

C: described electric signing tools verifies that to described confirmation code the safe calculation process of this transaction is carried out in checking by the back after receiving the confirmation code of the transaction terminal input of user by linking to each other with described electric signing tools.

In addition, described step C is divided into following substep:

C11: described transaction terminal sends it to described electric signing tools after receiving the confirmation code of user's input;

C12: after receiving described confirmation code, described electric signing tools verifies that to it the safe calculation process of this transaction is carried out in checking by the back.

In addition, among the described step B, after the last part content of described Transaction Information to be confirmed showed, described electric signing tools also showed soft keyboard, and cursor;

Described step C is divided into following substep:

C21: after described transaction terminal receives the soft keyboard operation instruction of user's input, described soft keyboard operation instruction is sent to described electric signing tools; Described electric signing tools is according to the character on the described soft keyboard of described soft keyboard operation Instruction Selection, and the synthetic described confirmation code of each character group that will select;

C22: described electric signing tools verifies that to described confirmation code the safe calculation process of this transaction is carried out in checking by the back;

Wherein, described soft keyboard operation instruction comprises: be used for moving the cursor move of described cursor, and the soft keyboard character selection instruction that is used for the selected pairing soft keyboard character of described cursor current location.

In addition, in the described steps A, described electric signing tools carries out once described line feed or changes the row display operation after whenever collecting the fingerprint of user's input; Or

In the described steps A, after described electric signing tools collects the fingerprint of user input, carry out described line feed automatically or change the row display operation with the time interval that sets in advance.

In addition, before described steps A, also comprise the steps:

Steps A 0: after described electric signing tools receives the Transaction Information of this transaction that described transaction terminal sends, on described electric signing tools, show first's content of the described Transaction Information to be confirmed that wherein comprises; Or

Steps A 1: after described electric signing tools receives the Transaction Information of this transaction that described transaction terminal sends, on described electric signing tools, show the Transaction Information information, start the demonstration of described Transaction Information to be confirmed with the prompting user by the input fingerprint.

The present invention also provides a kind of electric signing tools, comprises: display module, and safe computing module, data transmission module, described electric signing tools also comprises: control module and fingerprint identification module; Wherein:

Described control module also is used for after the last part content of described Transaction Information to be confirmed shows on described display module, to described display module sending controling instruction, shows the affirmation information to control described display module; Comprise confirmation code in the described affirmation information or comprise and be used for the confirmation code generation information that assisted user is known confirmation code;

Described data transmission module is used for linking to each other with transaction terminal, receives the user and is used for confirmation code input instruction to described electric signing tools input validation sign indicating number by what described transaction terminal sent, and export it to described control module;

Described control module also is used for after receiving described confirmation code input instruction, confirmation code to user's input is verified, checking to described safe computing module sending controling instruction, is carried out the safe calculation process of this transaction to control described safe computing module by the back.

In addition, comprise the confirmation code that the user imports in the described confirmation code input instruction in described transaction terminal; Described control module is carried out described checking to the confirmation code that extraction obtains extract the confirmation code that wherein comprises from described confirmation code input instruction after.

In addition, after the last part content of described Transaction Information to be confirmed showed, described control module also was used for to described display module sending controling instruction, showed soft keyboard to control described display module, and cursor;

Comprise the soft keyboard operation instruction that the user imports in the described confirmation code input instruction in described transaction terminal;

After receiving described soft keyboard operation instruction, described control module also is used for according to the character on the described soft keyboard of described soft keyboard operation Instruction Selection, and the synthetic described confirmation code of each character group that will select, and it is carried out described checking;

In addition, described data transmission module also is used to receive the Transaction Information of the described transaction that described transaction terminal sends, and exports it to described control module;

In sum, adopt method provided by the invention and electric signing tools, need not on electric signing tools, to realize the affirmation of browsing of Transaction Information and Transaction Information in that page turning key/directionkeys and acknowledgement key are set on the electric signing tools; Under the prerequisite of not sacrificing transaction security, but save the operating space on the electric signing tools, reduced the manufacturing cost of electric signing tools, improved the operability of electric signing tools, increased the portability of electric signing tools.

Description of drawings

Fig. 1 is the process flow diagram of method of controlling security first embodiment of electric signing tools of the present invention;

Fig. 2 is the process flow diagram of method of controlling security second embodiment of electric signing tools of the present invention;

Fig. 3 is the process flow diagram of method of controlling security the 3rd embodiment of electric signing tools of the present invention;

Fig. 4 is the process flow diagram of method of controlling security the 4th embodiment of electric signing tools of the present invention;

Fig. 5 is the structural representation of electric signing tools of the present invention.

Embodiment

Core of the present invention is, the user (for example controls the roll display of Transaction Information to be confirmed on display screen by fingerprint identification module, page turning shows, line feed shows etc.), and after the full content of Transaction Information to be confirmed showed finish (showing once on the display screen at least), whether the prompting user correctly confirmed this transaction or cancels this transaction according to Transaction Information to be confirmed; The user can confirm this transaction at least in the following way:

Import fingerprint once more; Or

The confirmation code that shows on the display screen according to electric signing tools is imported this confirmation code by transaction terminal to electric signing tools.

Describe the present invention below in conjunction with drawings and Examples.

The first method embodiment

Fig. 1 is the process flow diagram of method of controlling security first embodiment of electric signing tools of the present invention.In the present embodiment, the user use fingerprint identification module control Transaction Information to be confirmed show at the line feed on the display screen/change row (promptly the subsequent rows that shows Transaction Information to be confirmed on the display screen or before continue or subsequent column or preceding continuous row), after the full content of Transaction Information to be confirmed showed finish (full content that is Transaction Information to be confirmed was showing once on the display screen at least), the user reused fingerprint identification module and confirms this transaction.As shown in Figure 1, this method comprises the steps:

Step 101: the user goes up the Transaction Information of input electronic transaction at transaction terminal (being generally PC), and transaction terminal is sent to coupled electric signing tools (for example, USB Key) with all or part of Transaction Information;

Above-mentioned Transaction Information can comprise: type of transaction information, bank identifier information, account information, amount information, temporal information, kind of currencies information, trading password information etc.; Wherein:

Type of transaction can comprise: transfer accounts, inquiry etc.;

Can comprise in the bank identifier information: produce bank and/or change the identification information of bank over to;

Can comprise in the account information: information such as the number of the account of the side of producing and/or the side of changing over to, account;

Amount information is the concrete amount of money of this transaction;

Temporal information is the concrete time of this transaction;

Kind of currencies information is the kind of currencies of this transaction;

The password that trading password information needs for this exchange.

Step 102: on the display screen of electric signing tools, show the Transaction Information to be confirmed that comprises in the Transaction Information;

Transaction Information to be confirmed can be in the above-mentioned Transaction Information partly or entirely.For example, when the user transferred accounts, Transaction Information to be confirmed can be amount information and the other side's account information.

Step 103: do not finish if Transaction Information to be confirmed all shows, wait for that then the user is by being arranged on the fingerprint identification module input fingerprint on the electric signing tools; After finishing fingerprint collecting, electric signing tools once enters a new line to Transaction Information to be confirmed on display screen and shows or change the row display operation;

As mentioned above, because the size of electric signing tools is less, so display screen can't once show all Transaction Informations to be confirmed usually.In the present embodiment, fingerprint identification module as page turning key/line feed key/change row key/use, can be provided with page turning key/line feed key/change the row key, so that save limited operating space on the electric signing tools like this on electric signing tools.

Above-mentioned line feed shows and changes the row display operation can be that move up on display screen delegation or multirow of Transaction Information to be confirmed (is equivalent to enter a new line backward, the subsequent rows that is about to Transaction Information to be confirmed is presented on the display screen), moving down delegation or multirow (is equivalent to enter a new line forward, the row the preceding that is about to Transaction Information to be confirmed is presented on the display screen), be moved to the left one row or multiple row (be equivalent to change backward row, the subsequent column that is about to Transaction Information to be confirmed is presented on the display screen), or row or the multiple row (be equivalent to change forward row, the row the preceding that are about to Transaction Information to be confirmed are presented on the display screen) that move right.The page turning that people know, turn over screen operation be exactly carry out that the line feed of multirow shows or multiple row change the row display operation.

Fingerprint identification module can be divided into two kinds of push type and slidingtypes.When using the push type fingerprint identification module, the user presses finger and promptly finishes a fingerprint input (being that fingerprint identification module/electric signing tools is finished fingerprint collecting one time) on the sensor of fingerprint identification module; When using the slide fingerprint identification module, the user finishes a fingerprint input operation (being that fingerprint identification module/electric signing tools is finished fingerprint collecting one time) by the finger that slides on the sensor of fingerprint identification module.

In addition, push type and slide fingerprint identification module can identify the direction (promptly can identify the direction of fingerprint input) that the user points slip usually.In the present embodiment, can be according to the direction that the user points slip determine to enter a new line/the change direction of row.For example, the user enters a new line when lower slider is pointed (for example, the information that current display screen second row is shown is presented at first row) backward, user's enter a new line forward when upwards sliding finger (for example, the information that current display screen first row is shown is presented at second row); Perhaps, the user changes row left and (also can be described as and change row backward when lower slider is pointed, be that character is moved to the left, for example, the information that current display screen is shown from left number secondary series is presented at first row), the user changes row to the right when upwards sliding finger, and (also can be described as and change row forward, promptly character moves right, for example, the current display screen information that several first row show from a left side is presented at secondary series).Certainly, for can discerning the finger fingerprint identification module of four glide directions up and down, the user can come control display screen to carry out that front and back line feed shows and front and back are changed and are listed as demonstration by the finger that slides on the four direction of fingerprint identification module.

If do not consider the input direction of fingerprint, can set in advance (can be provided with) action type (comprise line feed and change row), sequence of operation and direction of operating by transaction terminal, when the user finishes the input of fingerprint, according to the row operation that once enters a new line/change of preset operation type, sequence of operation and direction of operating.For example:

When finishing a fingerprint collecting, operation backward once enters a new line; Perhaps

Sequence of operation is set to change earlier row backs line feed, and wherein, the direction of changing row is for backward, and the direction of line feed is for backward; When importing fingerprint for the first time, the user changes the row operation backward, the operation that enters a new line backward when importing fingerprint for the second time, and the rest may be inferred.

Step 104: electric signing tools is judged whether the full content of Transaction Information to be confirmed has shown and is finished: if shown and finish then execution in step 105, otherwise jump to step 103;

In the present embodiment, can judge whether the full content of Transaction Information to be confirmed has shown and finish by judging the current last part content (that is, last column or multirow or last row or multiple row) that whether is showing Transaction Information to be confirmed of display screen..

In addition, can also adopt following method to judge whether the full content of Transaction Information to be confirmed has shown finishes: the head office/total columns that calculates Transaction Information to be confirmed in advance, and then draw the user since the first row/row line feed that only need carry out of delegation/classify as to the end/the change number of operations (note is made N) of row, when the number of times of importing fingerprint as the user on fingerprint identification module reached N, the full content of then judging Transaction Information to be confirmed had shown and has finished.

Step 105: wait for that the user imports fingerprint (promptly wait for user once enter a new line/change row operation) by fingerprint identification module; After finishing fingerprint collecting, electric signing tools shows on display screen confirms information;

In the present embodiment, confirm that information can be following Word message: " the Transaction Information demonstration finishes, and please import the fingerprint identification transaction ".In addition, confirm that information also can show (for example, the white space at display screen shows an icon) to scheme sheet mode.In addition, confirm that information also can be shown to the user in the modes such as show state that change on the current display screen, for example, the font of change literal or color etc.

Step 106: the user is according to confirming that information knows that the full content of Transaction Information to be confirmed has shown and finish, electric signing tools is current to be entered (being in) and can confirm state, therefore whether correctly determine whether confirming this transaction according to the previous Transaction Information to be confirmed that shows, confirm trading instruction if send to electric signing tools correctly then by input fingerprint on fingerprint identification module;

If the Transaction Information to be confirmed that shows is wrong, the user can import the cancellation instruction to cancel this transaction on transaction terminal.Certainly, the user also can not carry out subsequent operation, and electric signing tools Cancels Transaction automatically behind the trade confirmation timer expiry that wait starts in advance.Above-mentioned trade confirmation timer can be started in step 102 or step 105 by electric signing tools.

Step 107: after being in the fingerprint (being the affirmation trading instruction that the user imports) that the electric signing tools that can confirm state collects user input, fingerprint is mated authentication (being carried out by the fingerprint identification module of electric signing tools usually), authentication is carried out the safe calculation process such as electronic signature generation, electron underwriting authentication, encryption and deciphering that this exchange needs by the back, to finish this transaction.

If the authentication of the fingerprint matching in this step is not passed through, then electric signing tools can indicate transaction terminal to cancel this transaction, perhaps do not carry out any operation (promptly not carrying out safe calculation process), this is concluded the business by timeout treatment program control by-pass in the transaction terminal, or sends the instruction that Cancels Transaction by the user in transaction terminal.

More than first embodiment of the invention is described in detail.According to ultimate principle of the present invention, can also carry out as down conversion the first embodiment of the present invention:

(1.1) in the first embodiment of the present invention, electric signing tools has shown at the full content of judging Transaction Information to be confirmed and (has for example finished the back, the current last part content that is showing Transaction Information to be confirmed of display screen), need to wait for that the user imports fingerprint once more and just shows and confirm information (promptly need the user to enter a new line once more/change just show after the row operation confirm information); In this case, confirm that information can be presented at separately on the display screen, also can together be presented on the display screen with the last part content of Transaction Information to be confirmed;

In other embodiments of the invention, electric signing tools has shown at the full content of judging Transaction Information to be confirmed and (has for example finished the back, the current last part content that is showing Transaction Information to be confirmed of display screen), need not to wait for that the user imports fingerprint once more, directly show and confirm information (correspondingly, this moment electric signing tools enter to confirm state) at the white space of current screen.

(1.2) in the first embodiment of the present invention, when electric signing tools enter can the affirmation state after, when the user imports fingerprint, need mate authentication (step 107), so that improve the security of transaction to the fingerprint of this input;

In other embodiments of the invention, the fingerprint of the when operation row input of also can entering a new line to the user/change mates authentication, and the fingerprint of importing when need not that the user carried out trade confirmation mates authentication; The fingerprint of when operation row input is by the coupling authentication if the user enters a new line/changes, the row operation that then do not enter a new line/change, and then electric signing tools also can't enter and can confirm state, the affirmation that can't conclude the business can ensure the security of transaction equally.

Certainly, also can after collecting fingerprint, all mate authentication (this is the default mode of operation of existing most of type fingerprint identification modules) at every turn.

(1.3) in the first embodiment of the present invention, electric signing tools need not the user and imports the demonstration (the first's content that promptly shows Transaction Information to be confirmed) that fingerprint promptly carries out the Transaction Information to be confirmed first time behind the Transaction Information that receives the transaction terminal transmission;

In other embodiments of the invention, electric signing tools can be behind the Transaction Information that receives the transaction terminal transmission, show the Transaction Information information, by importing the demonstration that fingerprint starts Transaction Information to be confirmed, after importing fingerprint, the user carries out the demonstration of Transaction Information to be confirmed with the prompting user;

Above-mentioned Transaction Information information can be following Word message: " please import fingerprint to show Transaction Information ".

The second method embodiment

Fig. 2 is the process flow diagram of method of controlling security second embodiment of electric signing tools of the present invention.The key distinction of the present embodiment and first embodiment is: after collecting the fingerprint of user's input, electric signing tools carries out the roll display of Transaction Information to be confirmed at a certain time interval automatically.As shown in Figure 2, this method comprises the steps:

Step 201: the user imports the Transaction Information of electronic transaction on transaction terminal, transaction terminal is sent to coupled electric signing tools with all or part of Transaction Information.

Step 202: electric signing tools shows the Transaction Information information on display screen, shows (also can be described as automatic line feed/change row to show) with the prompting user by the automatic rolling that the input fingerprint starts Transaction Information to be confirmed;

Above-mentioned Transaction Information information can be following Word message: " please import fingerprint to start the demonstration of Transaction Information ".

Step 203: wait for that the user shows with the automatic rolling that starts Transaction Information by fingerprint identification module input fingerprint; After finishing fingerprint collecting, electric signing tools carries out automatic rolling display operation to Transaction Information to be confirmed with the time interval that sets in advance on display screen, shows until the full content of Transaction Information to be confirmed to finish;

Above-mentioned automatic rolling display operation can be that line feed shows or move certainly the row display operation automatically.

Step 204: after the full content demonstration of Transaction Information to be confirmed finished, electric signing tools shows on display screen confirmed information.

Step 205: the user is according to confirming that information knows that the full content of Transaction Information to be confirmed has shown and finish, current having entered of electric signing tools can be confirmed state, therefore whether correctly determine whether confirming this transaction according to the previous Transaction Information to be confirmed that shows, confirm trading instruction if send to electric signing tools correctly then by input fingerprint on fingerprint identification module.

Step 206: after being in the fingerprint that the electric signing tools that can confirm state collects user input, fingerprint is mated authentication, authentication by after carry out the safe calculation process such as electronic signature generation, electron underwriting authentication, encryption and deciphering that this exchange needs, to finish this transaction.

More than second embodiment of the invention is described in detail.According to ultimate principle of the present invention, can also carry out as down conversion the second embodiment of the present invention:

(2.1) in the second embodiment of the present invention, when electric signing tools enter can the affirmation state after, when the user imports fingerprint, need mate authentication (step 206) to this time input fingerprint, so that improve the security of concluding the business;

In other embodiments of the invention, also can mate authentication, and the fingerprint of importing when need not that the user carried out trade confirmation mates authentication at the fingerprint (step 203) that the user starts the demonstration of Transaction Information/input when entering a new line/changing row; If starting the fingerprint of the demonstration/input when entering a new line/changing row of Transaction Information, the user do not authenticate by coupling, then not carrying out the demonstration/row that enter a new line/change of Transaction Information operates, and then electric signing tools also can't enter and can confirm state, the affirmation that can't conclude the business equally also can ensure the security of transaction.

(2.2) in the second embodiment of the present invention, before the user imports the automatic rolling demonstration of fingerprint with the startup Transaction Information, show Transaction Information information (as described in step 202) on the display screen of electronic transaction instrument;

In other embodiments, before the user imports the automatic rolling demonstration of fingerprint with the startup Transaction Information, first's content that can show Transaction Information to be confirmed on the display screen of electronic transaction instrument, the user begins to carry out the automatic rolling display operation after importing the automatic rolling demonstration of fingerprint with the startup Transaction Information.

Third party's method embodiment

Fig. 3 is the process flow diagram of method of controlling security the 3rd embodiment of electric signing tools of the present invention.In the present embodiment, the user uses fingerprint identification module to control the line feed of Transaction Information to be confirmed on display screen/change row to show, after the full content demonstration of Transaction Information to be confirmed finishes, on display screen, show and (for example confirm information, the information that comprises confirmation code), the user according to confirm information on transaction terminal the input validation sign indicating number to confirm this transaction.As shown in Figure 3, this method comprises the steps:

Step 301: the user imports the Transaction Information of electronic transaction on transaction terminal, transaction terminal is sent to coupled electric signing tools with all or part of Transaction Information.

Step 302: on the display screen of electric signing tools, show the Transaction Information to be confirmed that comprises in the Transaction Information.

Step 303: do not finish if Transaction Information to be confirmed all shows, wait for that then the user imports fingerprint by fingerprint identification module; After finishing fingerprint collecting, electric signing tools once enters a new line to Transaction Information to be confirmed on display screen and shows or change the row display operation.

Step 304: electric signing tools is judged whether the full content of Transaction Information to be confirmed has shown and is finished: if shown and finish then execution in step 305, otherwise jump to step 303.

Step 305: the full content of Transaction Information to be confirmed shows the back that finishes (be electric signing tools enter can the affirmation state after), waits for that the user imports fingerprint by fingerprint identification module; After finishing fingerprint collecting, electric signing tools shows on display screen confirms information;

In the present embodiment, confirm that information can be the Word message that comprises confirmation code.

Confirmation code can be the character string that electric signing tools generates at random, also can be in a plurality of passwords of setting in advance in electric signing tools of user.For example, confirm that information can be following Word message: " please import following numeral to confirm transaction: 654321 ".Wherein, " 654321 " are exactly confirmation code.

Step 306: if judge that Transaction Information to be confirmed is correct, the user is according to confirming that information is at transaction terminal input validation sign indicating number, to confirm this transaction; Transaction terminal sends to electric signing tools with the confirmation code of user's input.

Step 307: electric signing tools is verified the confirmation code that transaction terminal sends, and if the verification passes, then carries out the safe calculation process such as electronic signature generation, electron underwriting authentication, encryption and deciphering that this exchange needs, to finish this transaction.

If the checking of the confirmation code of this step is not passed through, then electric signing tools can indicate transaction terminal to cancel this transaction, does not perhaps carry out any operation (promptly not carrying out safe calculation process).

In addition, after occurring confirmation code in this step and verifying unsanctioned situation, electric signing tools can also be taked out-of-work mode in a period of time, prevents that the dangerous program in the transaction terminal from initiating password attack (promptly sending different confirmation codes to electric signing tools attempts) to electric signing tools.

More than third embodiment of the invention is described in detail.According to ultimate principle of the present invention, can also carry out as down conversion the third embodiment of the present invention:

(3.1) in the third embodiment of the present invention, electric signing tools the full content of judging Transaction Information to be confirmed shown finish after, need the user to import fingerprint once more and just show the affirmation information that comprises confirmation code;

In other embodiments of the invention, electric signing tools the full content of judging Transaction Information to be confirmed shown finish after, need not to wait for that the user imports fingerprint once more, directly show the affirmation information that comprises confirmation code (correspondingly, this moment electric signing tools enter to confirm state) at the blank position of current screen.

(3.2) in other embodiments of the invention, confirm that information can also be to be used for assisted user to know that the confirmation code of confirmation code generates information.For example, it can be following Word message that confirmation code generates information: " is the answer that please import following problem to confirm transaction: 123456+654321=? ", obviously, generate information according to this confirmation code and can generate confirmation code " 777777 ".

Cubic method embodiment

Fig. 4 is the process flow diagram of method of controlling security the 4th embodiment of electric signing tools of the present invention.The key distinction of present embodiment and the 3rd embodiment is: after collecting the fingerprint of user's input, electric signing tools carries out the roll display of Transaction Information to be confirmed at a certain time interval automatically.As shown in Figure 4, this method comprises the steps:

Step 401: the user imports the Transaction Information of electronic transaction on transaction terminal, transaction terminal is sent to coupled electric signing tools with all or part of Transaction Information.

Step 402: electric signing tools shows the Transaction Information information on display screen, shows by the automatic rolling that the input fingerprint starts Transaction Information to be confirmed with the prompting user.

Step 403: wait for that the user shows with the automatic rolling that starts Transaction Information by fingerprint identification module input fingerprint; After finishing fingerprint collecting, electric signing tools carries out automatic rolling display operation to Transaction Information to be confirmed with the time interval that sets in advance on display screen, shows until the full content of Transaction Information to be confirmed to finish.

Step 404: the full content of Transaction Information to be confirmed shows the back that finishes (be electric signing tools enter can the affirmation state after), and electric signing tools shows the affirmation information on display screen.

Equally, in the present embodiment, confirm that information can be the Word message that comprises confirmation code; Also can be the confirmation code generation information that is used to generate confirmation code.

Step 405: if judge that Transaction Information to be confirmed is correct, the user is according to confirming that information is at transaction terminal input validation sign indicating number, to confirm this transaction; Transaction terminal sends to electric signing tools with the confirmation code of user's input.

Step 406: electric signing tools is verified the confirmation code that transaction terminal sends, and if the verification passes, then carries out the safe calculation process such as electronic signature generation, electron underwriting authentication, encryption and deciphering that this exchange needs, to finish this transaction.

Identical with the 3rd embodiment, if the checking of the confirmation code of this step is not passed through, then electric signing tools can indicate transaction terminal to cancel this transaction, does not perhaps carry out any operation (promptly not carrying out safe calculation process).

More than fourth embodiment of the invention is described in detail.According to ultimate principle of the present invention, can also carry out as down conversion the fourth embodiment of the present invention:

(4.1) in the fourth embodiment of the present invention, before the user imports the automatic rolling demonstration of fingerprint with the startup Transaction Information, show Transaction Information information (as described in step 402) on the display screen of electronic transaction instrument;

Identical with the mapping mode (2.2) of second embodiment, in other embodiments, before the user imports the automatic rolling demonstration of fingerprint with the startup Transaction Information, first's content that can show Transaction Information to be confirmed on the display screen of electronic transaction instrument, the user begins to carry out the automatic rolling display operation after importing the automatic rolling demonstration of fingerprint with the startup Transaction Information.

(4.2) in third and fourth embodiment of the present invention, after the display screen of electric signing tools showed confirmation code, the user was by confirming transaction at transaction terminal input validation sign indicating number;

In other embodiments of the invention, the display screen of electric signing tools also shows soft keyboard and removable cursor after showing confirmation code; The user can operate the cursor on the mobile electronic signature instrument by the directionkeys (upper and lower, left and right key) to transaction terminal, and uses the definite key (for example, enter key) on the transaction terminal to select the pairing character of current cursor position; By repeating above-mentioned moving cursor and selecting the operation of character to come the input validation sign indicating number.That is to say that the user can send soft keyboard operation instruction (comprising: cursor move and soft keyboard character selection instruction) to transaction terminal, transaction terminal sends to electric signing tools with the soft keyboard operation instruction that receives; Electric signing tools is according to the character on the soft keyboard operation Instruction Selection soft keyboard, and the synthetic confirmation code of each character group that will select.

More than the method for controlling security to electric signing tools provided by the invention is described in detail, below will the structure and the annexation of the functional module of above-mentioned electric signing tools be described in detail.The content of introducing in detail hereinafter repeats no more hereinbefore.

The first device embodiment

Fig. 5 is the structural representation of electric signing tools of the present invention.As shown in Figure 5, this electric signing tools comprises: display module (being above-mentioned display screen), safe computing module, data transmission module, control module and fingerprint identification module.Wherein:

Data transmission module, being used for linking to each other with transaction terminal links to each other with control module, carries out the transmission of data and instruction between transaction terminal and control module.

Control module is used for to the display module sending controling instruction, with the control display module Transaction Information to be confirmed is shown; When the last part content of Transaction Information to be confirmed before showing on the display module, after knowing the fingerprint that collects user's input according to the fingerprint collecting result of fingerprint identification module output, to the display module sending controling instruction, Transaction Information to be confirmed being entered a new line or change row with the control display module shows;

Control module also is used for after the last part content of Transaction Information to be confirmed shows on display module, to the display module sending controling instruction, shows the affirmation information with the control display module; Confirm that information is used to point out the user by the input fingerprint this transaction to be confirmed;

Control module also is used for after showing the affirmation information, receive the fingerprint collecting result of fingerprint identification module output, and after knowing the fingerprint that collects user input according to the fingerprint collecting result, to safety computing module sending controling instruction, carry out the safe calculation process of this transaction to control safe computing module;

Before the last part content of Transaction Information to be confirmed shows, and/or after confirming that information shows, fingerprint identification module also is used for the fingerprint of user's input is carried out the fingerprint matching authentication processing.Specifically, when (or before) or affirmation information showed when control module showed in the last part content of Transaction Information to be confirmed (or afterwards), can pass through to the fingerprint identification module sending controling instruction, open or close the fingerprint matching authentication processing function of fingerprint identification module, so that open fingerprint matching authentication processing function where necessary, improve transaction security; And when inessential, close fingerprint matching authentication processing function, improve the processing speed (for example, improving the processing speed of user's page turn over operation) of fingerprint input/identification.

In addition, when the last part content of Transaction Information to be confirmed before showing on the display module, control module whenever receives the fingerprint collecting result one time, then sends a steering order to display module, and Transaction Information to be confirmed once being entered a new line or change row with the control display module shows; Or

When the last part content of Transaction Information to be confirmed before showing on the display module, after control module receives the fingerprint collecting result, with time interval of setting in advance to display module sending controling instruction repeatedly, Transaction Information to be confirmed repeatedly being entered a new line or change row with the control display module shows.

In addition, control module also is used for after receiving the Transaction Information of data transmission module output, to the display module sending controling instruction, shows with first's content of control display module to the Transaction Information to be confirmed that comprises in the Transaction Information; Or

Control module also is used for behind the Transaction Information that receives data transmission module output, to the display module sending controling instruction, shows the Transaction Information information with the control display module; The Transaction Information information is used to point out the user by importing the demonstration that fingerprint starts Transaction Information to be confirmed.

In addition, after the last part content of Transaction Information to be confirmed shows, confirm before the information demonstration that control module also is used to receive the fingerprint collecting result who is used to indicate the fingerprint that has collected user's input of fingerprint identification module output.

The second device embodiment

The functional module of the second device embodiment of the present invention and annexation thereof and first embodiment are basic identical, and difference only is that the data of transmitting between the functional module are different with instruction.Below with reference to Fig. 5 the present invention second device embodiment is described.The electric signing tools of the present invention second device embodiment comprises: display module, safe computing module, data transmission module, control module and fingerprint identification module.Wherein:

Control module also is used for after the last part content of Transaction Information to be confirmed shows on display module, to the display module sending controling instruction, shows the affirmation information with the control display module; Confirm to comprise confirmation code in the information or comprise to be used for the confirmation code generation information that assisted user is known confirmation code;

Data transmission module is used for linking to each other with transaction terminal, receives the confirmation code input instruction that is used for the input validation sign indicating number that the user sends by transaction terminal, and exports it to control module;

Control module also is used for after receiving the confirmation yard input instruction, and the confirmation code of user's input is verified that checking to safety computing module sending controling instruction, is carried out the safe calculation process of this transaction to control safe computing module by the back.

In addition, comprise the confirmation code that the user imports in the confirmation code input instruction in transaction terminal; Control module is verified the confirmation code that extraction obtains extract the confirmation code that wherein comprises from the confirmation code input instruction after.Or

After the last part content of Transaction Information to be confirmed showed, control module also was used for to the display module sending controling instruction, showed soft keyboard with the control display module, and cursor;

Comprise the soft keyboard operation instruction that the user imports in the confirmation code input instruction in transaction terminal;

After receiving the soft keyboard operation instruction, control module also is used for according to the character on the soft keyboard operation Instruction Selection soft keyboard, and the synthetic confirmation code of each character group that will select, and it is verified;

Wherein, the soft keyboard operation instruction comprises: be used for the cursor move of moving cursor, and the soft keyboard character selection instruction that is used for the pairing soft keyboard character of selection cursor current location.

Claims

1. the method for controlling security of an electric signing tools is characterized in that, this method comprises:

2. the method for claim 1 is characterized in that,

In the steps A, described electric signing tools carries out once described line feed or changes the row display operation after whenever collecting the fingerprint of user's input; Or

3. method as claimed in claim 1 or 2 is characterized in that,

Before described steps A, also comprise the steps:

4. the method for claim 1 is characterized in that,

Among the described step B, after the last part content of described Transaction Information to be confirmed shows, show described affirmation information before, also comprise following steps:

5. method as claimed in claim 1 or 2 is characterized in that,

Described line feed display operation is line feed demonstration backward; The described row display operation that changes shows for changing row backward.

6. electric signing tools comprises: display module, and safe computing module is characterized in that, described electric signing tools also comprises: control module and fingerprint identification module; Wherein:

7. electric signing tools as claimed in claim 6 is characterized in that,

When the last part content of described Transaction Information to be confirmed before showing on the described display module, described control module whenever receives once described fingerprint collecting result, then send a steering order, described Transaction Information to be confirmed is carried out once described line feed or change row showing to control described display module to described display module; Or

8. as claim 6 or 7 described electric signing tools, it is characterized in that described electric signing tools also comprises: data transmission module is used for linking to each other with transaction terminal, receive the Transaction Information of the described transaction of described transaction terminal transmission, and export it to described control module;

9. electric signing tools as claimed in claim 6 is characterized in that,

After the last part content of described Transaction Information to be confirmed showed, before described affirmation information showed, described control module also was used to receive the fingerprint collecting result who is used to indicate the fingerprint that has collected user's input of described fingerprint identification module output.

10. the method for controlling security of an electric signing tools is characterized in that, this method comprises:

11. method as claimed in claim 10 is characterized in that,

Described step C is divided into following substep:

12. method as claimed in claim 10 is characterized in that,

Among the described step B, after the last part content of described Transaction Information to be confirmed showed, described electric signing tools also showed soft keyboard, and cursor;

Described step C is divided into following substep:

13. method as claimed in claim 10 is characterized in that,

In the described steps A, described electric signing tools carries out once described line feed or changes the row display operation after whenever collecting the fingerprint of user's input; Or

14. as claim 10 or 13 described methods, it is characterized in that,

Before described steps A, also comprise the steps:

15. method as claimed in claim 10 is characterized in that,

16. as claim 10 or 13 described methods, it is characterized in that,

17. an electric signing tools comprises: display module, safe computing module, data transmission module is characterized in that, described electric signing tools also comprises: control module and fingerprint identification module; Wherein:

18. electric signing tools as claimed in claim 17 is characterized in that,

Comprise the confirmation code that the user imports in the described confirmation code input instruction in described transaction terminal; Described control module is carried out described checking to the confirmation code that extraction obtains extract the confirmation code that wherein comprises from described confirmation code input instruction after.

19. electric signing tools as claimed in claim 17 is characterized in that,

After the last part content of described Transaction Information to be confirmed showed, described control module also was used for to described display module sending controling instruction, showed soft keyboard to control described display module, and cursor;

20. electric signing tools as claimed in claim 17 is characterized in that,

21., it is characterized in that described data transmission module also is used to receive the Transaction Information of the described transaction that described transaction terminal sends as claim 17 or 20 described electric signing tools, and export it to described control module;

22. electric signing tools as claimed in claim 17 is characterized in that,