KR100617540B1 - Password inputting method with enhanced safety - Google Patents

Abstract

The present invention relates to a password input method, comprising: an initial input process of allowing only 4-6 digits of the set 8-16 password digits to be activated and the rest appearing in an inactive state; A re-entry process for initializing the active window and increasing the number of at least one active window digit to input the password when the password inputted to the active window is wrong; A repetitive input process of repeating the re-entry process until all of the set 8-16 password digits are activated when an input password including an increased active window is wrong; If the password is incorrect even after the last input is made including the termination process to terminate the password input mode.

According to the present invention, the convenience for the user himself is increased and the security is sharply improved, while the probability of matching the malicious user is drastically reduced.

Security, password, input method, user, malicious user

Description

Password entry method with enhanced security {PASSWORD INPUTTING METHOD WITH ENHANCED SAFETY}

1 is an exemplary flowchart showing a user's password input process according to the present invention input method;

2 is an exemplary flowchart illustrating a process of inputting a password by a malicious user according to an input method of the present invention;

The present invention relates to a password input method, and more particularly, to a password input method having improved security to reinforce a password input method of inputting a predetermined number of digits used in a mobile communication terminal to prevent leakage of a password. It is about.

In general, most devices and devices, such as banks' ATMs, safe openers, and passwords for mobile communication terminals, including computers, can be entered using numeric keys. The system is adopted.

Most password input method using this button key is set by inputting 4 digit number. In this case, the 4 digit password is probable that it is perfect even though there is a supplementary function that prevents the user from entering the password more than a few times. It is true that it is not secure.

That is, the four-digit number can be easily recognized and memorized by the user who was watching the user when the user inputs the password, and the password can be easily extracted by combining random numbers several times.

In particular, mobile communication terminals, which have recently been exploding in popularity, have various additional functions in addition to their native call functions, such as a phone book function, an electronic notebook, internet access, games, music playback functions, etc. In the case of a telephone book or an electronic notebook, a password is set so that the information cannot be read; In addition, user information or voice playback is required to set a password, in which case the exposure of the password causes a very serious problem, such as invasion of personal privacy.

On the other hand, you can increase the number of digits to 8 digits to increase the security of the password, but in this case, the security aspect is strengthened, but the number is long, so it is not easy to memorize all of them and often forgets it. Doing bother itself is bothersome.

Therefore, new demands for the password input method which is close to the existing 4-digit input method while increasing the security have been exploded.

The present invention was created to meet the necessity of the improvement as described above, in order to enhance the security of the password, not only increase the number of digits of the unwritten password, but also increase the number of digits so that the input method is simple but not easily accessible. It is an object of the present invention to provide a password input method having such a strong security that the security is dramatically improved.

In order to achieve the above technical problem, the first input process to make only a predetermined 4-6 digits of the set 8-16 password digits are activated and the rest appear in an inactive state; A re-entry process for initializing the active window and increasing the number of at least one active window digit to input the password when the password inputted to the active window is wrong; A repetitive input process of repeating the re-entry process until all of the set 8-16 password digits are activated when an input password including an increased active window is wrong; It is characterized by providing a security-enhanced password input method that includes a termination process for terminating the password input mode if the password is incorrect even after the last input.

Hereinafter, the present invention will be described in more detail with reference to the accompanying drawings.

First, the password input method of the present invention may be utilized in various security devices, but for convenience, it will be described as an embodiment by limiting it to a mobile communication terminal.

In the present invention, the number to be used as a password, that is, the number of digits of the password is greatly increased by 8 to 16 digits, thereby enhancing security, and by increasing the number of digits to be input by one or two more when performing the verification process in case of an error. In addition, it is possible to at the same time enhance the convenience of input.

For example, if the user selects the corresponding function to use the phone book function, the electronic organizer function or the voice playback function of the mobile communication terminal, the user is prompted to enter a password. Although it is different, the initial number is entered as 4, 5, 6 digits, and if the entered number is correct, the next verification step is regarded as a legitimate user to authenticate the corresponding password; In case of an input error, one or two more numbers may be input, and then the above-described process may be repeatedly performed by checking the input number.

This greatly increases the security of the password, and at the same time, even if the password is increased, the user does not have to enter all the numbers in the input, thereby increasing the convenience of the input.

After all, you can take the first set of digits, if it is 4 digits, and if it is wrong, then try to set 5 digits for the next attempt, and if you are wrong, you can set 6 digits for the next attempt. If you do it wrong every time, the probability of hitting is lowered by that much.

Hereinafter, a detailed input method will be described with reference to FIGS. 1 and 2.

In order to use the input method of the present invention, a password setting mode should be installed in software in a normal function of a mobile communication terminal. Since such software can be sufficiently described by a known technique, here, a method aspect related to setting thereof I will explain only.

The embodiment described here has 8 digits, for example, 1,2,3,4,5,6,7,8 as passwords, and in the case of an input error, one more number is entered in steps. For example, the description may be made by way of example that the initial input is software processed to have 4 numbers.

First, a case in which the user inputs as in the case of FIG. 1 will be described.

The first window for entering a password will look like A.

In other words, the first four digits of the eight-digit input column is empty to input, and the remaining four digits are hidden by displaying such as "*" or "#".

In this state, the user must enter the first four digits of "1234" among the eight digits (1, 2, 3, 4, 5, 6, 7, 8).

However, if the wrong input, such as "1235" by mistake, as in B, the input field is initialized and one input field is prepared in an increased form.

In other words, as in C, input fields are increased to five and the remaining three spaces are displayed as characters such as "*" or "#".

Then, the user enters "12345", which is a valid five-digit password, as D, so that the password can be recognized as a legitimate user and authenticated so that the user can immediately use the corresponding mode or function; More preferably, other internal authentication procedures may be used to permit the use.

FIG. 2 shows an example in which a malicious user arbitrarily manipulates a number, and an initial screen is the same as A ', which is equivalent to that of A of FIG. 1.

In other words, the first four digits are blank and the last four digits are filled with "*" or "#".

If a malicious user enters a random number (takes it), for example, enters "4235" as in B ', the input window is initialized because it is different from "1234", which is the first four digits of the valid password "12345678". At the same time, as in C ', one more space is added.

As a result, the probability of matching by an increased position decreases.

Subsequently, when the malicious user inputs "32356" as illustrated in D ', the input window is re-initialized as in E', increasing one more digit and inducing a new input attempt.

In this case, all 8 spaces may be initialized to appear empty to continue entering all 8 digits, but in this case, it is inefficient and at least 3 or 4 times wrong, the user is very likely to be a malicious user. You can also set it to limit it appropriately.

In this way, a password input method having a simple numeric input form may enable a new type of password input method that increases usability and more convenience in security devices.

 As described in detail above, the present invention provides the following effects.

First, the user's convenience of use is increased and the security is drastically improved.

Second, the probability of hitting a malicious user is drastically reduced.

Claims (2)

An initial input process of enabling only the predetermined 4-6 digits of the set 8-16 password digits to be activated and the rest to be inactivated; A re-entry process for initializing the active window and increasing the number of at least one active window digit to input the password when the password inputted to the active window is wrong; A repetitive input process of repeating the re-entry process until all of the set 8-16 password digits are activated when an input password including an increased active window is wrong; Security input password enhanced method comprising the step of terminating the password input mode if the password is incorrect even after the last input. The method according to claim 1, The repeated input process is limited to perform only a predetermined number of times password input method characterized in that the user.

Images