KR100623684B1 - Method for inputting and interpreting secret information - Google Patents

Abstract

The present invention improves the password input and interpretation method in the "secret information input device and password input and interpretation method" introduced in the Republic of Korea Patent Application No. 2005-16338 (filed February 28, 2005) of the applicant.

In the secret information input and interpretation method according to the present invention, the preparation step (S110) of reading the source password of the user ID stored in the memory by the SPU, and the display unit displaying the shift transformation value of the matrix in a matrix form (S120). And the step of receiving the virtual password through the input unit through the SPU (S130), and comparing the virtual password inputted through the input unit with the virtual password calculated from the source password obtained by the SPU in step S110, whether the virtual password matches. It is characterized in that it comprises a step (S140) of determining.

Description

Method for inputting and interpreting secret information}

1 is a screen sequence sequentially displayed by a display unit in a secret information input and interpretation method according to a first embodiment of the present invention.

2 to 5 are examples of a table and a virtual password input method showing shift modification values applied to the secret information input and interpretation method according to the first embodiment of the present invention.

6 is an example of a screen of a display unit and a one-time password input method for inputting a one-time password (token value) in a secret information input and interpretation method according to a second embodiment of the present invention;

7 is a sequence of virtual password input screens displayed randomly by the display unit in the secret information input and interpretation method according to the second embodiment of the present invention.

8 is a screen of a display unit and a screen of a virtual password input unit sent from the authentication server to generate a one-time password (token value) in the secret information input and interpretation method according to the second embodiment of the present invention.

9 is a token value selection condition address for determining whether to use an index table and a one-time password (token value) for generating a one-time password (token value) applied to a secret information input and interpretation method according to a second embodiment of the present invention. An example of a virtual password generation method using a source password index table consisting of random values of and ten non-overlapping random numbers
10 is a block diagram showing a secret information input device

The present invention improves the password input and interpretation method in the "secret information input device and password input and interpretation method" introduced in the Republic of Korea Patent Application No. 2005-16338 (filed February 28, 2005) of the applicant.

The "secret information input device and password input and interpretation method" introduced in the applicant's Korean Patent Application No. 2005-16338 (filed February 28, 2005) is introduced.

The password input device includes an input unit for inputting a password, a display unit for randomly displaying ten digits at respective designated addresses to induce a user to input a virtual password into the input unit, and a random with the display unit. It is composed of SPU which provides numerical data, inverts the virtual password inputted from the input unit, interprets the source password, and stores the source password of the user, so that any number randomly written in a plurality of addresses is displayed on the display unit. When it is displayed, the virtual password processed by the user is inputted to the input unit by calculating the number of the corresponding address displayed on the display unit and the password stored by the user using the promised operator. By analyzing the source password by receiving the numeric data of the corresponding address displayed on the display unit from the SPU's secret information request unit, reading the promised operator from the SPU's secret information management unit, and performing the inversion. It is characterized by determining whether the password matches the interpreted password.

In the password input and interpretation method, the display unit randomly displays a random number at each address, and the user uses the promised operator to display the number of the corresponding address displayed on the display unit and the password that the user remembers. Calculating, inputting the virtual password calculated by the user to the input device, and interpreting the source password by inverting the number of the corresponding address displayed on the display unit and the input virtual password using the promised operator. The SPU may be configured to determine whether the stored password matches the interpreted password.

However, the password input method may further improve the password input method which can prevent the password from being exposed to the outside by hacking or the like.

Accordingly, an object of the present invention is to provide a password input and interpretation method in which a random number is randomly displayed in a matrix form so that a third party cannot steal the input number.

Another object of the present invention is to combine the concept of One Time Password (OTP), the user sets a one-time password (token value) each time or create a one-time password (token value) every time from a random value sent by the authentication server original password It has the same effect as changing the password every time, providing a password input and interpretation method that can ensure the security of the keyboard input, screen peeking, replay hacking, as well as the notification of fraud even in threatening situations. will be.

Preferred embodiments of the present invention for achieving the above object will be described in detail with reference to the drawings.

Referring to FIG. 10, a password input device for explaining a password input and interpretation method of the present invention may include an input unit 10 that receives a password from a user, and a user may input a virtual password into the input unit 10. A display unit 20 for displaying a number at each designated address to induce a number to be provided, and providing the numeric data to the display unit, storing the source password of the corresponding user, and inverting the virtual password received through the input unit. It consists of an SPU (30; secret process unit).

The password input and interpretation method according to the first embodiment of the present invention is configured as follows.

When the user enters the ID, the SPU (secret process unit) is prepared to read the source password of the ID stored in the memory (S110),

Displaying, by the display unit, the shift transformation value of the column in matrix form (S120);

Receiving the virtual password by the SPU through an input unit (S130);

Comparing the virtual password input through the input unit and the analysis virtual password calculated from the source password obtained in the step S110 and SPU is determined whether or not the virtual password matches (S140).

The source password is composed of a password / shadow, such as 4582/1639, and the password and the shadow are composed of n numbers, requiring n virtual passwords to be input.

Although the number of the password and the shadow of the source password is expressed as four above, this is arbitrarily determined to explain the idea of the present invention, and the present invention is not limited thereto, and the number of passwords and shadows of the password may be changed differently. have.

In step S120, the shift deformation value is filled in the matrix table of the secret process unit (SPU), as shown in FIG. 2, in order for the display unit to display the shift deformation value in a matrix form. In the table, the password of the source password is designated by the row and the shadow by the column. In addition, the shift modification value of the table is randomly changed to a new value every time a virtual password is input. Therefore, in FIG. 2, different shift deformation values are respectively filled in the first table, the second table, the third table, and the fourth table.

In step S120, the first table of FIG. 2 is displayed in the screen order as shown in FIG. 1 on the display unit. That is, as shown in Figure 1, the number of rows on the screen of the display unit is fixedly displayed, and sequentially displayed at predetermined time intervals (for example, 1 second to 3 seconds), such as (a) screen to (j) screen The number and shift deformation values of the columns are indicated by the table values in FIG. 2.

In step S130, the SPU receives a virtual password through an input unit,

The virtual password may be a shift variation value displayed in a row and a column of the corresponding source password in a matrix form.

Therefore, the user may look at the screen displayed in step S120 and then input the shift variation value displayed in the row and column of the corresponding password in the input unit. In this way, the display and the number input may be repeated to repeat the virtual password. You can complete the input.

For example, if the password is 4582/1639, the password's password and the first value of shadow are 4 and 1, respectively. In the process of the display unit sequentially displaying the screens (a) to (j) as shown in FIG. 1, the user inputs the shift deformation value 6 shown in (b) screen 4, row 1 and column of the screens through the input unit. do. In this way, when the user's first virtual password is input, the shift modification value of the second table of FIG. 2 is displayed in the same manner as in FIG. By repeating until, the input of the virtual password 6347 is completed.

Alternatively, the virtual password may be a value obtained by adding a number arbitrarily determined by the user to a shift modification value of an address corresponding to the user's password from numbers displayed in a matrix form.

For example, when the password is 4582/1639, and when the screens are displayed in the display unit as shown in Fig. 1, the user adds the shift number 6 in the 4th row and 1st column to the random number 3 set by the user himself, and adds 9 to 9. (See FIG. 3). Enter the values 6, 7, 0 corresponding to the remaining virtual passwords in this way.

When the input is completed, the SPU determines whether the interpreted value (virtual password) interpreted by the user and the input value (virtual password) matched from the password obtained through the ID in step S110. At this time, the SPU inverts the first input value 9 and the shift shift value 6 of the table to recognize the user as an arbitrary number 3. Then, the shift modification value and the input value of the remaining addresses are inverted to determine whether the user's password input is correct. In other words, compare the input value input by the user with the shift variation value 3 of the 2nd table and the arbitrary number 3, and compare the 3rd and 4th input values in this way, and input the virtual password correctly. Judge.

In another alternative, the virtual password is a new row in which the shift modification value of the address corresponding to the user's password is a new row of the matrix, and the sum of the password value and the shadow value of the password is a new column. May be the corresponding shift strain value of the overheat.

For example, if the screens of (a) to (j) are sequentially displayed as shown in FIG. 1, the user may shift shifts corresponding to the first address 4 of the password and the first address 1 of the shadow in his password 4582/1639. On the screens of (a) to (j), the value 6 is recognized as a new row, the value 5 plus the first address 4 of the password and the first address 1 of the shadow is displayed as columns, and the screens 6 and 5 of (g) Enter 7's shift deformation value. In this way, the user enters the remaining virtual passwords 4, 4, and 3 (see FIG. 4).

As another alternative, the virtual password is obtained by setting the shift modification value of the address corresponding to the user's password as a new row of the matrix and the sum of the password value and the shadow value of the password as a new column. It may be a value obtained by adding a random number to shift shift values of rows and columns.

For example, if the screens of (a) to (j) are sequentially displayed as shown in FIG. 1, the user may shift shifts corresponding to the first address 4 of the password and the first address 1 of the shadow in his password 4582/1639. On the screens of (a) to (j), the value 6 is recognized as a new row, and the value 5 plus the first address 4 of the password and the first address 1 of the shadow is displayed as a column. Enter a value of 0 plus a shift value of 7, which is a user-specified number. In this way, the user enters the remaining virtual passwords 7, 7, 6 (see FIG. 5).

Secret information input and interpretation method according to a second embodiment of the present invention is a method combining the concept of OTP (one time password) as follows.

 SPU (secret process unit) is a preparatory step (S210) for reading the password (token key value) defined for the generation of the source password and one-time password (token value) of the corresponding ID stored in the memory,

Displaying (S220) the display unit displaying ten randomly modified values;

 Enter the one-time password (token value) and secret information through the input unit (S230) or create a one-time password with the information sent by the server (S231) or one-time password (token key value) to create a fixed one-time password like the original password Replacing with a password (232),

 Displaying, by the display unit, a new random value that is not duplicated in the address window matching the selection condition address of the one-time password (token value) and the password (S240);

Inputting a virtual password through an input unit (S250);

The SPU determines that the virtual password interpreted from the one-time password (token value) and the virtual password input through the input unit match (S260).

As an example, a method of inputting and interpreting secret information according to the second embodiment of the present invention configured as described above is applied to an internet banking system.

In step S210, when a user logs in by inputting a password and a password into a corresponding site, the SPU recognizes the source password of the logged-in user.

Thereafter, when the user inputs information necessary for internet banking (withdrawal account, deposit bank, deposit account number, deposit amount, client, etc.) and clicks a confirmation icon, the process proceeds to step S120 of FIG. 6.

As shown in FIG. 6, for example, when the source password known only by the user and the SPU is 1122, and a random non-overlapping variation value is randomly displayed on the screen of the display unit, the user may randomly change the source password. In addition to the 4-digit one-time password (token value) arbitrarily determined by the user himself to enter. That is, when the random variation value is displayed as shown in FIG. 6, 7867 is input by adding the one-time password 1234 arbitrarily set by the user to the random or shift variation value 6633 of the displayed source password. At this time, the input value is not displayed on the screen.

When such a one-time password is input, the SPU may calculate a one-time password (token value) 1234 arbitrarily determined by the user by inverting the shift random or modified value 6633 and the input value 7867.

Thereafter, steps S240 and S250 are repeated four times. That is, when a random number that is not duplicated is displayed as shown in FIG. 7A, the SPU may display a value higher than the condition value in the center of the display window, which is an address where the user indicates whether the token value is used or not. If it is not large (token value = selection condition value: 1 = 1) and it is recognized as inputting a random value 2 that matches 1 of the source password without operation, and is displayed as shown in (b) of FIG. A random value that matches one of the original passwords as the one-time password (token value) is greater than the condition value in the center of the display window, which is an address indicating whether the token value is used (token value> selection condition value: 1> 0). Recognizing that 8 is inputted by adding the one-time password (token value) 2 to FIG. 7 (c), the SPU displays the one-time password 3 at a random value 9 that matches 2 of the source passwords. If one value (token value> selected condition value: 2> 1) is inputted and 2 is displayed as shown in (d) of FIG. 7, the user selects a random value 4 (token value <selected condition value: 4 <6) Recognized as entered.

In this way, if the one-time passwords (token values) are randomly modified values (virtual passwords) 2824 inputted into the matching values of the source passwords, the SPU interprets the user's one-time passwords from operation S260 in step S260. The virtual password entered and the virtual password inputted through the input unit match.

In another alternative, in the method of generating the one-time password (token value), the user does not randomly create a one-time password, but matches by indexing the password (token key value) for generating the one-time password registered with the original password at the time of registration. Write the value as a one-time password (token value), and input the virtual password by adding the source password matching value and the result value after the operation, as in the first embodiment, according to the condition value. It is.

 As shown in FIGS. 8 and 9, for example, when the source password known only by the user and the SPU is 1234, and the password (token key value) used for generating the one-time password is 5, 10 random variations on the screen of the display unit When the value is displayed, the SPU recognizes that the user has used the token key value as an index and used the matched value as a one-time password (token key). That is, the first digit calculation is a one-time password value 7 matching the password (token key value) 5 for the one-time password generation, and this one-time password is greater than the condition value 5 to determine whether it is used (token value> optional condition value). : 7> 5) A random value 1 that matches 1 of the source passwords plus 7 plus 8 a random number 3 is entered as the virtual password, and the second digit is the value that matches the token key value 5. 7 becomes a one-time password, and this one-time password is smaller than the condition value 9 to determine whether it is used (token value <selection condition value: 7 <9), and thus a random number 2 that matches 2 of the source passwords without operation. Enter 3 as the result, 5. In the third digit calculation, the value 9 corresponding to the password 5 for the one-time password generation becomes the one-time password, and the one-time password is larger than the condition value 1 for determining whether to use it (token value> selected condition value: 9> 1). ) The value 3, which matches the source password 3, plus the one-time password 9, plus the random number 3, is entered.The fourth digit is calculated using the value 2 that matches the password 5 for the one-time password generation. This one-time password is less than the condition value 4 to determine whether it is used or not (token value <selection condition value: 2 <4). You will enter the value 8.

As in the case where the user randomly creates a one-time password, the same method of generating and inputting the virtual password is used.If the virtual password is input as many as the source password, the SPU is the same as the user side. Create a one-time password 7792 with 5, and generate 1558 by performing an inversion with a random number added to the first password and the condition value of the display window, which is an address indicating whether the token value is used. In this way, in step S260 the SPU determines whether the operation of the one-time password of the user and the virtual password interpreted as an arbitrary number and the virtual password input through the input unit is identical.

Alternatively, an arbitrary number can be added to the source password instead of adding it to a value that matches the source password. That is, in the above example, when creating a virtual password corresponding to the first source password, (one-time password 7 + source password 1 matching value 1 + any number 3 = virtual password 1) instead of (one-time password 7 + source password (1 +3) can be used in such a way that matching value 0 = 7 + 0 = virtual password 7).

As shown in the above examples, steps S250 and S260 are the same principle, but a little different depending on whether a one-time password on the user side (S230) or a one-time password on the server side (S231). . How to create a virtual password and a one-time password can also be conveniently applied in several combinations. That is, in the second case of the second embodiment of the present invention, for example, in generating the one-time password (token value), the one-time password (token key value) value for creating the original one-time password without using the index value sent by the server is used. Can be replaced with a password (token value). In the virtual password generation, the value matched to the source password index and the one-time password (token value) are not generated by adding a random number after calculation, but the matching value and the one-time password (token value) of the source password value The result obtained by the operation of can be generated as a virtual password. As shown in the above case, there are other useful combinations of methods.

In addition, "secret information input device and password input and interpretation method" introduced in Patent Application No. 2005-16338 (filed Feb. 28, 2005) and secret information input according to the first and second embodiments of the present invention. And in the interpretation method, when the virtual password value generated by randomly changing the digit array of the remaining password except the first digit of the source password is input, the authentication server recognizes that the user is fraudulent due to personal threats, Along with the security operation according to the procedure, the authentication process of the password has a fraudulent notification function to make it normal. This case has various applicability to the function implementation depending on the application field.

As described above, the password input and interpretation method according to the present invention randomly displays an arbitrary number in a matrix form, thereby making it difficult for a third party to steal the input number and incorporating the concept of a one time passward. By having the effect of changing the source password every time, keyboard input, screen peeking, replay hacking, as well as the function of notifying the use of fraud in the case of a new threat situation is more effective to ensure the safety.

Claims (13)

delete An input unit 10 for receiving a password from a user, a display unit 20 for displaying a number at each designated address to induce a user to input a virtual password into the input unit 10, and the display In the password input device composed of SPU (30; secret process unit) for providing numeric data to the unit, storing the source password of the user, and inverting the virtual password received through the input unit, A preparation step (S110) in which the SPU reads the source password of the user ID stored in the memory; Displaying, by the display unit, the shift transformation value of the column in matrix form (S120); Receiving, by the SPU, the virtual password, which is a shift modification value displayed in the row and column of the corresponding source password in a matrix form (S130), Password input and characterized in that it comprises a step (S140) of comparing the virtual password input through the input unit and the virtual password calculated from the source password obtained in the preparation step (S110) (S140). How to interpret. An input unit 10 for receiving a password from a user, a display unit 20 for displaying a number at each designated address to induce a user to input a virtual password into the input unit 10, and the display In the password input device composed of SPU (30; secret process unit) for providing numeric data to the unit, storing the source password of the user, and inverting the virtual password received through the input unit, A preparation step (S110) in which the SPU reads the source password of the user ID stored in the memory; Displaying, by the display unit, the shift transformation value of the column in matrix form (S120); Receiving, by the SPU, a virtual password, which is a value obtained by adding a shift arbitration value of an address corresponding to a user's password from numbers displayed in a matrix form through an input unit (S130); Password input and characterized in that it comprises a step (S140) of comparing the virtual password input through the input unit and the virtual password calculated from the source password obtained in the preparation step (S110) (S140). How to interpret. An input unit 10 for receiving a password from a user, a display unit 20 for displaying a number at each designated address to induce a user to input a virtual password into the input unit 10, and the display In the password input device composed of SPU (30; secret process unit) for providing numeric data to the unit, storing the source password of the user, and inverting the virtual password received through the input unit, A preparation step (S110) in which the SPU reads the source password of the user ID stored in the memory; Displaying, by the display unit, the shift transformation value of the column in matrix form (S120); From the numbers displayed in the matrix form, the shift variation of the address corresponding to the password of the user is set as a new row of the matrix, and the sum of the password value and the shadow value of the password is set as the new column. Receiving the password by the SPU through an input unit (S130); Password input and characterized in that it comprises a step (S140) of comparing the virtual password input through the input unit and the virtual password calculated from the source password obtained in the preparation step (S110) (S140). How to interpret. An input unit 10 for receiving a password from a user, a display unit 20 for displaying a number at each designated address to induce a user to input a virtual password into the input unit 10, and the display In the password input device composed of SPU (30; secret process unit) for providing numeric data to the unit, storing the source password of the user, and inverting the virtual password received through the input unit, A preparation step (S110) in which the SPU reads the source password of the user ID stored in the memory; Displaying, by the display unit, the shift transformation value of the column in matrix form (S120); From the numbers displayed in the matrix form, the shift variation of the address corresponding to the password of the user is set as a new row of the matrix, and the sum of the password value and the shadow value of the password is set as the new column. Receiving the password by the SPU through an input unit (S130); Password input and characterized in that it comprises a step (S140) of comparing the virtual password input through the input unit and the virtual password calculated from the source password obtained in the preparation step (S110) (S140). How to interpret. The password input device includes an input unit 10 for receiving a password from a user and a display unit 20 for displaying a number at each designated address to induce a user to input a virtual password into the input unit 10. And a password input device configured to provide numerical data to the display unit, store a source password of the corresponding user, and invert a virtual password inputted through an input unit. SPU (secret process unit) is a preparatory step (S210) for reading the password (token key value) defined for the generation of the source password and one-time password (token value) of the corresponding ID stored in the memory, Displaying (S220) the display unit displaying ten randomly modified values; Enter a one-time password (token value) and secret information through the input unit (S230), create a one-time password with the information sent by the server (S231), or a password (token key value) to create a one-time password, such as a source password Replacing with a one-time password (232), Displaying, by the display unit, a new random value that is not duplicated in an address window matching the selection condition address of the one-time password (token value) and the source password (S240); Receiving a virtual password through an input unit (S250); And (S260) determining, by the SPU, whether the virtual password interpreted from the one-time password (token value) and the virtual password input through the input unit are matched (S260). The method of claim 6, In step S220, the display unit displays ten randomly modified values and inputs a one-time password (token value) and secret information through the input unit (S230). When random values that are not duplicated on the screen of the display unit are randomly displayed, when a predetermined number of random number of one-time passwords and secret information are input to the matching values using the source password as an index table, the SPU is randomized. Secret information input and analysis method characterized by calculating the one-time password and secret information arbitrarily determined by the user by inverting the modified value and the input value. The method of claim 6, In step S220 of displaying randomly modified values of the display unit and generating a one-time password using the information sent from the server, in step S231, When the non-overlapping deformation values are randomly displayed on the screen of the display unit, the SPU calculates a matching value as a one-time password (token value) by indexing the password (token key value) for creating a one-time password as a source password. Secret information input and analysis method characterized in that the recognition. The method of claim 6, In the step (S220) in which the display unit displays ten randomly modified values, and in step 232, replacing the password (token key value) for creating a one-time password, such as a source password, with a one-time password, SPU is a secret information input and interpretation method characterized in that it recognizes that the password (token key value) itself to be used as a one-time password (token value) to create a fixed one-time password like the source password. The method of claim 6, The display unit displays ten randomly modified values (S220), and the display unit displays a new random value that is not duplicated in an address window matching the selection condition address and source password of the one-time password (token value). Step S240, If the authentication server displays a random condition value in the address for selecting the one-time password (token value) included in the display unit window separately, is the SPU using a one-time password (token value) by comparing the condition with the one-time password? Secret information input and interpretation method characterized in that. The method of claim 6, The display unit displaying a new random value that is not duplicated in an address window that matches the selection condition address of the one-time password (token value) and the source password (S240); and receiving a virtual password through the input unit (S250). in, When the display unit displays a new random value that is not duplicated in the address window corresponding to the source password, the SPU adds a random number to the result value obtained by calculating a virtual password as a one-time password and a matching value with the source password as an index. Secret information input and interpretation method, characterized in that recognized by the value. The method of claim 6, The display unit displaying a new random value that is not duplicated in an address window that matches the selection condition address of the one-time password (token value) and the source password (S240); and receiving a virtual password through the input unit (S250). in, When the display unit displays a new random value that is not duplicated in the address window that matches the source password, the SPU matches the virtual password with the one-time password (token value) and the source password value with an arbitrary number as an index. Secret information input and analysis method characterized in that the recognition as a result obtained by the operation of. The method according to any one of claims 2 to 6,      When the virtual password value generated by randomly changing the digit array of passwords except the first digit of the source password is input, the authentication server recognizes that it is fraudulent due to the user's personal threat, Secret information input and interpretation method characterized by the fraud notification function to ensure that the password authentication process is performed in a normal state.

Images