JP5587401B2 - Keyboard input data security system and method - Google Patents

Description

  The present invention relates to a security system and method for keyboard input data, and more particularly to a security system and method capable of accurately performing special key processing even when keyboard input data is input at high speed.

  Keyboards are most commonly used as computer input. Such a keyboard is convenient for direct input of instructions to be executed, and includes a plurality of character keys set to English and Korean or other native characters, a space key for entering blanks, and 0-9. Numeric keys, function keys (F1 to F12) capable of performing functions designated by each program, special control keys (for example, shift (shift) key, control (Ctrl) key, ortho (Alt) key, caps lock (Caps Lock) Key)), cursor movement keys. When a keyboard key is operated, the key code is sequentially processed in the kernel area and user area of the computer.

  On the other hand, with the widespread use of the Internet, users use services such as Internet banking and online shopping. During such Internet banking and online shopping, the user inputs various personal information (password for connecting to the website, card number, resident number, etc.) to the corresponding website. This personal information is usually set to input a character key and a numeric key, and it is allowed to input a character key and a numeric key while pressing a special control key. Further, a character key and a numeric key that are input while pressing the special control key are distinguished from a character key and a numeric key that are input without pressing the special control key. For example, if only the numeric key “2” is pressed, the number “2” is recognized, but if the shift key and the numeric key “2” are simultaneously pressed, the special character “@” is recognized. If only the character key “a” is pressed, the lowercase letter “a” is recognized, but if the shift key and the letter key “a” are simultaneously pressed, the uppercase letter “a” is recognized.

  The client system is provided with a security program that prevents personal information input by the user from being hacked by an information infringing tool when communicating with the service providing website. The process in which the security program installed in the user client processes the keyboard input data is as follows. The security program usually includes a keyboard security driver that operates in the kernel area of the computer and a security controller that operates in the user area.

FIG. 1 is an operation flowchart showing a method for securing keyboard input data of a conventional security program.
If there is a keyboard key input (S11), the keyboard security driver determines whether the input key is a general character / number key or a special control key (S12). In step S12, if the input key is a special control key, the input is ignored, and the process returns to step S11 to wait for the next key input. In step S12, if the input key is not a special control key but a general character / number key, the character / number key data is encrypted and stored in the shared memory (S13).

  The security controller in the user area reads the character / numeric key data stored in the shared memory (S14), and checks the state of the special control key using an API function supported by the window operating system (OS) (S15). If the special control key is pressed (ON), the special control key and character / numeric key data are combined (S16), and the character or special character corresponding to the combination is recognized (S17). On the other hand, in step S15, if the special control key is not pressed (OFF), the number or character corresponding to the character / number key data is recognized (S17). The application program can display the recognized characters and numbers on the screen as they are, and can also display specific special characters (for example, *) that are not related to the data input by the user.

  When the user sequentially inputs “1234! @ # $”, The security driver that is the kernel area processes the numeric key input value “13411234” and the security controller restores the original data to the application program. In the process of transmission, it is processed as “1234! @ # $” In accordance with the state where the shift key is pressed (ON / OFF). Whether or not the shift key is pressed can be obtained by using the GetKeyState API function. Such a conventional key input data security method can accurately recognize and recognize characters, numbers or special characters input by the user when the user directly inputs the keyboard.

  On the other hand, recently, using a hardware-based high-speed data input device such as an RF card reader, a fingerprint recognizer, a magnetic stripe reader (MSR) or a software-based high-speed data input device such as a macro function in a computer, Data that requires security such as a password is entered. Such a high-speed data input device may be configured integrally with the keyboard or may be configured separately, but usually, a scan code is input to a keyboard port of a computer using a keyboard interface. Normally, keyboard input consists of key-down (↓) and key-up (↑), and processing for the corresponding key data is performed during key-down or key-up. As with normal keyboard input, data consisting of key-down (↓) and key-up (↑) is also input in the high-speed data input device.

  For example, in the case of “1234! @ # $”, “1 ↓, 1 ↑, 2 ↓, 2 ↑, 3 ↓, 3 ↑, 4 ↓, 4 ↑, SHIFT ↓, 1 ↓, 1 ↑, SHIFT ↑ , SHIFT ↓, 2 ↓, 2 ↑, SHIFT ↑, SHIFT ↓, 3 ↓, 3 ↑, SHIFT ↑, SHIFT ↓, 4 ↓, 4 ↑, SHIFT ↑ ”or“ 1 ↓, 1 ↑ 2 ↓, 2 ↑, 3 ↓, 3 ↑, 4 ↓, 4 ↑, SHIFT ↓, 1 ↓, 1 ↑, 2 ↓, 2 ↑, 3 ↓, 3 ↑, 4 ↓, 4 ↑, SHIFT ↑ ” Entered.

Since data input through such a high-speed data input device has a very high speed, an error occurs when the high-speed input data is secured by a conventional security program.
That is, the conventional security program encrypts and secures character / number key input data via a security driver, and supports it by the window operating system (OS) in the process of decrypting the original data. Check if a special control key is set using a function. As described above, the process of processing the character / number key is different from the process of processing the special character key in the related art, and the time for the security controller to read the state of the API function is compared with the time for processing the character / number key. Somewhat late. For this reason, there is a time deviation in which the state of the API function is not changed even though the special control key is already pressed (from key-up to key-down or from key-down to key-up). For example, when the user sequentially inputs “1234! @ # $” As in the above example, the GetKeyState API function that indicates the state of the shift key is still used until “! @” Is processed in the security program. The key is set not to be keyed down, and finally “123412 # $” is input to the application program.

  As described above, when a special character is input from a high-speed data input device, the conventional security program cannot process it normally and an error occurs. Therefore, all the security programs currently on the market have high-speed data input. Do not secure data entered through the device. That is, conventionally, there is a problem that data input from the high-speed data input device cannot be secured.

  The object of the present invention derived to solve the above-mentioned problems of the prior art is to provide a keyboard input data security system and method that can be applied to the security of data input at high speed from a high-speed data input device. There is to do.

  A keyboard input data security system according to the present invention includes a character / numeric key input extraction unit for extracting key down and key up information of a character / numeric key from a scan code input to a keyboard port, and special control from the scan code. A special control key input extraction unit for extracting key down and key up information of a key, and combining the key down or key up information of the character / numeric key with the key down and key up information of the special control key And input data recognition means for recognizing special characters.

  The keyboard input data security method according to the present invention includes a first step in which a security driver extracts key down and key up information of character / numeric keys and special control keys input to a keyboard port; A second step of setting the state of the API function on / off according to the key down and key up information of the extracted special control key, and the security controller key down or key up of the extracted character / number key And a third step of recognizing characters, numbers or special characters using the on / off state of the API function set in the second step.

  According to the present invention, since it can be applied to the security of high-speed input data that is input mechanically fast, including general keyboard input data, there is an effect that can contribute to the activation of various industries using the Internet. .

It is an operation | movement flowchart which shows the security method of the keyboard input data of the conventional security program. It is a functional block diagram showing a keyboard input data security system according to an embodiment of the present invention. 5 is an operation flowchart illustrating a keyboard input data security method according to an exemplary embodiment of the present invention.

The keyboard input data security system according to the present invention includes a security driver driven in the kernel area and a security controller driven in the user area.
The security driver includes a character / numeric key input extraction unit that extracts key down / key up information of a character / numeric key from a scan code input to a keyboard port, and a key down / key up of a special control key from the scan code. Special control key input extraction unit for extracting information, key down value or key up value of the character / numeric key extracted by the character / number key input extraction unit, and key down value and key up value of the special control key And an encryption unit for sequentially encrypting the.

  The security controller decrypts the key-down value or key-up value of the character / numeric key and the key-down value and key-up value of the special control key that are input after being encrypted by the encryption unit of the security driver. A special control key state storage unit configured to store the special control key state on or off according to the key down value and key up value of the special control key decrypted by the decryption unit, A combination of a key down value or key up value of the character / numeric key decrypted by the decryption unit and on / off information of the special control key state stored in the special control key state storage unit, And an input data recognition unit for recognizing special characters.

Hereinafter, a keyboard input data security system and method according to an embodiment of the present invention will be described in more detail with reference to the accompanying drawings.
FIG. 2 is a functional block diagram illustrating a keyboard input data security system according to an embodiment of the present invention.

  The keyboard input data security system according to the present invention includes a security driver 220 operating in the kernel area and a security controller 240 operating in the user area. The security driver encrypts the keyboard input and stores it in the shared memory, and the security controller recognizes the keyboard input value after decrypting the encrypted data from the shared memory.

  The security driver 220 includes a character / numeric key input extraction unit 221 that extracts key / numeric key key-down and key-up information from a scan code input to the keyboard port 210; Special control key input extraction unit 222 for extracting key-up information, key down / key up information of the character / numeric key, and key down / key up information of the special control key are sequentially encrypted and stored in shared memory 240. An encryption unit 223, a decryption unit 241 for decrypting encrypted information stored in the shared memory 240, and key down and key up information of the special control key decrypted by the decryption unit 241. In response, a special control key state storage unit 242 for setting the state of the API function, and the special control key An input data recognition unit 243 for recognizing characters and / or numbers using the API function set in the state storage unit 242 and the key down or key up information of the character / number key decrypted by the decryption unit; Including.

  The present invention encrypts all key down and key up information of all keys (character key / number key / special control key) input to the keyboard port in the kernel area and sequentially transmits them to the user area. After setting the state of the API function using the key down and key up information of the special control key, the characters and / or numbers are recognized using the set API function.

FIG. 3 is an operational flowchart illustrating a keyboard input data security method according to an embodiment of the present invention.
If the scan code is input to the keyboard port (S31), the security driver in the kernel area encrypts the scan code including the input key information and the key up / key down information of the input key and stores it in the shared memory (S32). .

  The security controller in the user area reads and decrypts the encrypted scan code from the shared memory (S33), and determines whether or not the decrypted scan code is a key down of the special control key (S34). If the judgment result of step S34 is a key down of the special control key, the API function for displaying the key down of the corresponding special control key is set to ON (S35), the judgment result of step S34, the special control key If the key is not down, it is determined whether or not the special control key is up (S35). If the result of the determination in step S35 is a special control key key up, the API function is set to OFF (S37). If the result of the determination in step S35 is not a special control key key up, the API function is turned on. Recognize numbers, characters, or special characters using the character / numeric key information entered with / off status. Steps S33 to S39 are repeatedly executed until all input keys are recognized (S39).

Communication between the kernel domain security driver and the user domain security controller follows a normal operating system.
The technical idea of the present invention has been described with reference to the accompanying drawings. However, this is merely illustrative of the best embodiment of the present invention and does not limit the present invention. It is obvious that any person having ordinary knowledge in this technical field can make various modifications and imitations without departing from the scope of the technical idea of the present invention.

Claims (4)

A security driver that drives in the kernel area and a security controller that drives in the user area,
The security driver is
A character / number key input extraction unit that extracts key down or key up information of a character / number key from a scan code input to a keyboard port;
A special control key input extraction unit that extracts key down and key up information of the special control key from the scan code;
A key down value or key up value of the letter / number key extracted by the letter / number key input extraction unit and an encryption unit for sequentially encrypting the key down value and key up value of the special control key;
The security controller is
A decryption unit for decrypting the key-down value or key-up value of the character / numeric key and the key-down value and key-up value of the special control key that are input after being encrypted by the encryption unit of the security driver;
A special control key state storage unit configured to set the special control key state to ON or OFF according to the key down value and key up value of the special control key decrypted by the decryption unit; and
A combination of a key down value or key up value of the character / numeric key decrypted by the decryption unit and on / off information of the special control key state stored in the special control key state storage unit, only it contains the input data recognition unit recognizes the special characters,
A shared memory for storing the key-down value or key-up value of the character / numeric key encrypted by the encryption unit and the key-down value and key-up value of the special control key, and providing to the decryption unit security system of keyboard input data, characterized in containing Mukoto.   The special control key state storage unit sets the key-down special control key state to ON if the scan code decrypted by the decryption unit is a key down of the special control key, and the special control key 2. The keyboard input data security system according to claim 1, wherein the key-up special control key state is set to OFF. A character / number key input extraction step in which a security driver in the kernel area extracts key down or key up information of a character / number key from a scan code input to a keyboard port;
A special control key input extraction step in which the security driver extracts key down and key up information of a special control key from the scan code;
A key down value or key up value of the letter / number key extracted by the security driver in the letter / number key input extraction step, a key down value of the special control key extracted in the special control key input extraction step, and An encryption step for sequentially encrypting the key-up values;
A decryption step in which a security controller of a user area decrypts the key down value or key up value of the character / number key encrypted in the encryption step and the key down value and key up value of the special control key;
A special control key state storing step in which the security controller sets the special control key state to ON or OFF according to the key down value and key up value of the special control key decrypted in the decrypting step; and
A combination of the key-down value or key-up value of the letter / number key decrypted in the decryption step and the on / off information of the special control key state stored in the special control key state storage step only contains the input data recognition step that recognizes the special characters,
The security driver stores a key down or key up value of the character / numeric key encrypted in the encryption step and a key down and key up value of the special control key in a shared memory. How to secure input data. In the special control key state storage step, if the scan code decrypted in the decryption step is a key down of the special control key, the special control key state of the key down is set to ON, 4. The method of securing keyboard input data according to claim 3 , wherein if the key is up, the state of the key-up special control key is set to OFF.

Images