KR101822119B1 - Method and apparatus for screen security of display - Google Patents

Abstract

A security method and apparatus for a screen output from a display are disclosed. The security method for a screen output from the display includes a step of outputting a security information input screen in which a user device is set to a set contrast and a step of the user device receiving security information through a security information input screen, May be determined based on the center of the user of the device and the cognitive abilities near the center.

Description

METHOD AND APPARATUS FOR SCREEN SECURITY OF DISPLAY [0002]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security method and system, and more particularly, to a security method and apparatus for a screen output from a display.

Generally, a user apparatus such as a PC (personal computer) and a smart phone processes input from a user through a keyboard, a mouse, a touch pad, a touch screen, etc., and outputs a result of the input through a monitor, .

In particular, the screen information output through the monitor is not limited to simply providing input results, but the function is now expanding to include a virtual keyboard and an image-based password to compensate for the weak points of various input devices including the keyboard .

However, such a technique secures the safety on the assumption that the screen information output to the monitor is secure, but there is a problem that sensitive screen information output to the monitor is stolen recently for authentication.

In addition, since the screen information outputted due to the characteristics of the monitor is exposed to others in the same space, the security can not be ensured.

As a representative attack on the social engineering technique, there is an attack over the shoulder, and the attack over the shoulder is known as the act of peeping the screen information outputted from the monitor behind the user's shoulder. In other words, when a device is used in an office, a shopping mall, an airport, a coffee shop, etc., there is a problem that sensitive information such as authentication information is exposed while the user is not aware of it.

A more serious problem is that it is classified as a powerful attack technique because it directly exploits information even if it does not utilize the high level of hacking technology that an attacker must master.

To cope with these problems, various countermeasures have been suggested. Typically, image-based passwords, security films, and polarizing filters are used, but their effectiveness is low.

Korean Patent Application No. 10-2004-0085794 filed on October 26, 2014, entitled "Monitor Security Device and Method"

One aspect of the present invention provides a security method for a screen displayed on a display.

Another aspect of the present invention provides an apparatus for performing a security method on a screen output from a display.

According to an aspect of the present invention, there is provided a security method for a screen displayed on a display, the method comprising: outputting a security information input screen in which a user apparatus is set to a set contrast level; and receiving the security information through the security information input screen Wherein the set contrast can be determined based on the center of the user of the user device and the perceived ability of the user in the vicinity of the center point.

According to another aspect of the present invention, there is provided a user device for securing a screen output from a display, the user device including a processor, the processor outputting a security information input screen set to a set contrast, The set contrast can be determined based on the center of the user and the perceived ability of the user around the center.

In the above feature, the set contrast ratio may be set to 6%.

Wherein the value of the set contrast is set to a larger value or a smaller value from the value of the initial contrast based on the cognitive abilities of the center parietal region and the center parietal region in at least one step And the initial contrast value may be set in consideration of the age of the user.

Also, the information on the security information input screen may include information about a position where the security information input portion receiving the security information is output on the display, and the setting of the screen based on the setting contrast may be the security information It can be applied only to the input part.

The information on the security information input screen may further include information on whether the security information input portion is output on the security information input screen.

According to the display security method and apparatus according to this aspect, security based on the method using the contrast and / or the communication process between the head mounted display (HMD) Can be improved.

1 is a conceptual diagram illustrating a screen displayed on a display according to an embodiment of the present invention.
2 is a conceptual diagram illustrating a method of communicating output information in an HMD device according to an embodiment of the present invention
FIG. 3 is a conceptual diagram illustrating a method for improving security for an output screen on a display according to an embodiment of the present invention. Referring to FIG.
4 is a conceptual diagram illustrating a method of outputting a security information input screen according to an embodiment of the present invention.
5 is a conceptual diagram illustrating a method of transmitting a security screen between a user device and an HMD according to an embodiment of the present invention.

The following detailed description of the invention refers to the accompanying drawings, which illustrate, by way of illustration, specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It should be understood that the various embodiments of the present invention are different, but need not be mutually exclusive. For example, certain features, structures, and characteristics described herein may be implemented in other embodiments without departing from the spirit and scope of the invention in connection with an embodiment. It is also to be understood that the position or arrangement of the individual components within each disclosed embodiment may be varied without departing from the spirit and scope of the invention. The following detailed description is, therefore, not to be taken in a limiting sense, and the scope of the present invention is to be limited only by the appended claims, along with the full scope of equivalents to which such claims are entitled, if properly explained. In the drawings, like reference numerals refer to the same or similar functions throughout the several views.

Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the drawings.

The screen output from the display of the user device has a characteristic that it is disclosed to not only an authenticated or authorized user but also anyone. Due to the display characteristics of such displays, there is a threat that sensitive information input by the user, such as a password, is exposed. In order to cope with such a problem, the information to be exposed to the monitor can be protected by outputting a specific symbol, for example, a '*'

 However, recently, as the possibility of attack against shoulder surfing attack has emerged, the security of the screen displayed on the display is recognized as a serious problem. An attack over the shoulder is an act of peeping out sensitive information that is input / output from a specific device used by a user. These over-the-shoulder attacks can be characterized as stronger than traditional attack techniques because they do not require high-level skills. Therefore, security experts have conducted various researches to cope with these threats. Typical methods include image-based passwords, monitor security films, and technologies using polarizing filters.

Image-based passwords have been proposed to overcome the problem of exposing existing text-based passwords, and image-based passwords can be used instead of text-based passwords.

An authentication method using an image-based password can be classified into a recognition-based method of selecting one of a plurality of images and a memory-based method of combining a plurality of selections when a plurality of images are displayed on a screen on a display. The memory-based method can be classified into a method that depends only on the user's memory and a method that provides a clue to facilitate the memory.

Therefore, through these various methods, exposure of sensitive information is reduced and high security can be provided compared with existing text based passwords. Despite these advantages, however, there is a problem in that confidential information of image-based information is exposed because it is possible to attack over the shoulder according to suitability of images used as confidential information, memory difficulty of images, and monitor angle.

If this image - based password is a software - based response for security, there is a hardware countermeasure for security. As a typical example, a security film can be attached to a display, so that a screen displayed on the display can be viewed differently depending on the angle, thereby securing safety. The security film uses micro-louver technology, and when the security film is used, the screen looks clear at the front, but at an angle of 30 degrees or more, the screen may look dark. However, when a security film is used, there is a problem that a screen displayed on a monitor is exposed when an attack is attempted from the same angle as a user, such as an attack over a shoulder.

In addition to this method, a secure display utilizing a polarizing filter may be used. An LCD (liquid crystal display) display can be operated by a polarizing filter to filter the light output from the backlight and output a screen. Personal information can be protected by removing the polarizing filter attached to the monitor and attaching the polarizing filter to the glasses of a specific user utilizing the principle of the LCD display. Since the white image is displayed on the screen where the polarizing filter of the display that controls the light is removed, it is possible to protect the screen even in the open place. However, there is a problem that the user can not see a normal screen. If a user attaches a polarizing filter to specific glasses owned by the user, only the user who owns the glasses with the polarizing filter can view the screen displayed on the display safe.

In spite of this advantage, since the polarizing filter itself can not guarantee uniqueness, there is a problem in that the screen displayed on the display is exposed if the polarizing filter is attached to glasses or any object that can be seen.

Therefore, to overcome the limitations of the security method for the display, the embodiment of the present invention proposes a contrast-based readability prevention technique and a method for improving security in an output device capable of communicating with the device .

The determinants of readability of a display can be broadly divided into resolution, contrast, and mood, among which contrast is the most important factor in determining the readability of the display. In order for the user to read the letters printed on the display, there must be sufficient contrast between the letters and the background surrounding the letters. If there is not enough contrast, the letters and the background are not separated, which makes it difficult to recognize the letters correctly. In terms of human cognitive ability, the response to contrast is related to the capacity of the optic nerve. The retina is a thin nervous tissue attached to the inner wall of the back of the eyeball. It forms an image on the retina through the cornea and lens when the light enters the eye. The central part of the retina (macula) is the concave part of the central retina responsible for color and object distinction and visual acuity, and is mainly responsible for the perception of color.

The area with the highest level of cognitive ability for human contrast is the central area. When letters and pictures are composed with low contrast of about 6%, characters can be recognized only in the center and the periphery, and only about 30% of characters can be recognized even at low contrast. However, in the area near the center of the eye, the cognitive ability to contrast is significantly lowered. Only letters with a contrast of 48% or more are recognized, and when the area exceeds this area, the character can not be recognized at all.

In an embodiment of the present invention, a method of improving security for a display using contrast based on cognitive abilities near the center and center is disclosed.

The contrast-based display security method can adjust the contrast between letters displayed on the display and areas on which characters are based to be difficult to recognize. Based on such adjustment of the business cards, the outflow of characters to the outside can be prevented. It is hard to recognize the letters when the contrast ratio is 6% in the center with the highest cognitive ability for contrast. Accordingly, exposure of a screen displayed on the display to a person other than the user or a person who is away from the user by a predetermined distance or more can be prevented.

However, when the contrast is set to a low value, it is difficult for the user to recognize the text and the image on the display. Therefore, according to the embodiment of the present invention, a method for enhancing the recognition degree of the user's character through the glasses or the special apparatus for increasing the contrast can be used.

1 is a conceptual diagram illustrating a screen displayed on a display according to an embodiment of the present invention.

In FIG. 1, a screen displayed on the display is started for each actual contrast.

Referring to FIG. 1, a screen on the display of 70% (100), 50% (110), 10% (120) and 6% (130) of contrast is started. The higher the contrast, the higher the degree of discrimination between the screen and the text. When the contrast is 6%, the recognition degree of the text displayed on the display is remarkably lowered. If the contrast is 6% (130), only the user of the user device located at the center of the display can recognize the text / image displayed on the display.

Specifically, experiments were conducted on the character recognition ability in a text and contrast 4% environment using a character size of 20pt as a general title size and 10pt as a general text size. As a result, at 20pt, there was an experimenter who recognized the character at 4% contrast, and an experimenter who was not recognized. At 10pt, most of the experimenter was hardly recognizable. At 6% (130) When not located, it was concluded that the recognition of the text is difficult.

Such a contrast-based readability prevention technique may degrade the readability of the text displayed on the display to a person other than the user himself / herself.

2 is a conceptual diagram illustrating a method of communicating output information in an HMD device according to an embodiment of the present invention

In the case of a general user device (for example, a PC (personal computer), a smart phone, etc.) 200, a device for outputting a screen is configured to be mounted, but an output device for augmented reality or virtual reality technology And a head-mounted display (HMD) device 250 of FIG. According to this trend, the HMD device 250 requires user authentication and communication security.

A user is registered with the host and the HMD device 250. When the user registration is completed, the host and the device can share a key for configuring the secure channel. Thereafter, the screen is encrypted based on the key shared by the host and transmitted to the HMD device 250, and the HMD device 250 can receive the normal screen by decrypting the received information based on the shared key. In this process, even if an attacker hijacks the screen in the middle, it is safe because encrypted screen information is exposed.

Additionally, biometric authentication may be utilized as a method for the HMD device 250 to authenticate the user. It is possible to prevent the screen from being exposed to a person who is not the owner by authenticating the user based on information such as fingerprint or iris for activation of the device. That is, since the screen information is encrypted and transmitted based on the shared key, the existing fundamental problem of exposing information can be solved.

FIG. 3 is a conceptual diagram illustrating a method for improving security for an output screen on a display according to an embodiment of the present invention. Referring to FIG.

FIG. 3 discloses a method for adaptively adjusting the contrast of an output screen of a display according to a user.

Referring to FIG. 3, when information (for example, ID, password information, etc.) (hereinafter referred to as security information) requiring security is inputted by the user, the contrast can be adaptively adjusted so as to be visible to the user.

For example, a security information input screen in which contrast is first set to the first value 300 may be output to the user on the display. When the user can recognize the security information input screen in which contrast is set by the first value 300, the user can input security information (for example, ID, password, resident registration number, etc.) through the security information input screen have. When the security information is inputted through the security information input screen in which the contrast is set by the user as the first value 300, the user device sets the contrast of the security information input screen, 300). ≪ / RTI > Through this method, the contrast of the security information input screen that can be recognized by the user can be set to the minimum value in the recognizable range of the user.

If the user can recognize the security information input screen in which the contrast is set to the second value, the user can input the security information through the corresponding security information input screen. In this case, the user device may set the contrast of the security information input screen for inputting the security information to a third value smaller than the second value. On the contrary, if the user can not recognize the security information input screen in which the contrast is set to the second value, the user device can set the contrast of the security information input screen for inputting the security information thereafter to the second value.

On the other hand, if the user can not recognize the security information input screen in which the contrast value is set to the first value 300, the user device sets the contrast value of the security information input screen, To a fourth value that is a larger value. If the user can not recognize the security information input screen in which the contrast value is set to the fourth value, the user device sets the contrast value of the security information input screen for inputting the security information to the fifth value .

In this manner, the user device can determine the optimal contrast value (the setting contrast value 350) for the user and output the security information input screen having the optimal contrast value for the user.

The initial contrast value (first value 300) for determining the contrast provided to this user can be adjusted according to the user. For example, in consideration of the age of the user, the first value 300 may be adjusted to be relatively smaller as the age of the user is relatively smaller, and the first value 300 may be relatively ≪ / RTI >

4 is a conceptual diagram illustrating a method of outputting a security information input screen according to an embodiment of the present invention.

4, a method of outputting the security information input screen 400 is disclosed.

Referring to FIG. 4, the contrast can be adjusted only for a portion (security information input portion 420) for inputting security information from the security information input screen output from the display.

For example, only the security information input part 420 for inputting security information (ID / password) of the user among the security information input screen 400 is recognized and the contrast can be adjusted only for the corresponding part.

The output page (for example, a web page) may include information indicating whether information on the security information input part 420 exists and information indicating an output position of the security information input part 420. [

If there is information about the security information input portion on the output page, the user device can adjust the contrast of the security information input portion 420 based on the information indicating the output position of the security information input portion 420 .

When this method is used, only the security information input part 420 is displayed in a different contrast so that only the user who views the user device can confirm the information on the corresponding part.

5 is a conceptual diagram illustrating a method of transmitting a security screen between a user device and an HMD according to an embodiment of the present invention.

5, a method for changing information on a secret key shared between the user device 500 and the HMD 520 is disclosed.

Referring to FIG. 5, the secret key between the user device 500 and the HMD 520 may be changeable. The modification of the secret key may be determined based on the existence of the user device 500 and the other device located around the HMD 520 and the change period of the secret key may be determined based on the user device 500 and the other May be determined based on the number of devices.

When another device exists around the user device 500 and the HMD 520, it is determined that a deception can be performed on the secret key, so that a change to the secret key can be performed.

Also, when the number of other devices located nearby is relatively large, the change period for the secret key may be set to be relatively short. For example, the user device 500 and the HMD device 520 may detect signals from the surroundings and determine the number of other devices located in the vicinity. If the number of other apparatuses is in the first range, the period of changing the secret key in the first period can be determined, and if the number of the other apparatuses is in the second range, the period of changing the secret key in the second period can be determined. That is, the change period of the secret key may be set differently according to the number of other devices, so that the information can be prevented from being stolen by other devices located nearby by changing the secret key.

The security method for the screen output from the display can be performed based on the processor. In addition, such a front traffic signal display method may be implemented in an application or in the form of program instructions that can be executed through various computer components, and may be recorded in a computer-readable recording medium. The computer-readable recording medium may include program commands, data files, data structures, and the like, alone or in combination.

The program instructions recorded on the computer-readable recording medium may be those specially designed and configured for the present invention and may be those known and used by those skilled in the computer software arts.

Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape, optical recording media such as CD-ROMs and DVDs, magneto-optical media such as floptical disks, media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like.

Examples of program instructions include machine language code such as those generated by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules for performing the processing according to the present invention, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it will be understood by those skilled in the art that various changes and modifications may be made therein without departing from the spirit and scope of the invention as defined in the appended claims. It will be possible.

Claims (10)

A step of outputting a security information input screen in which the user apparatus is set to a setting contrast level, and
Receiving the security information through the security information input screen
Lt; / RTI >
Wherein the set contrast is determined based on a center of a user of the user device and a cognitive ability near the center of the user device,
Wherein the information on the security information input screen includes information on a position where the security information input portion receiving the security information is output on the display,
The setting of the screen based on the set contrast is applied only to the security information input portion
Security method for the screen output from the display. The method of claim 1,
Wherein the set contrast is set to 6%. The method of claim 1,
Wherein the value of the set contrast is calculated based on the cognitive abilities of the center line and the center line in order to change sequentially from a value of the initial contrast value to a larger value or to a smaller value through at least one step Is set to a minimum value,
The initial contrast value is set in consideration of the age of the user
Security method for the screen output from the display. delete The method of claim 1,
Wherein the information on the security information input screen further includes information on whether the security information input portion is output on the security information input screen. The user device includes a processor,
The processor outputs a security information input screen set in contrast contrast,
The security information is input through the security information input screen,
Wherein the set contrast is determined based on a center of a user of the user device and a cognitive ability near the center of the user device,
Wherein the information on the security information input screen includes information on a position where the security information input portion receiving the security information is output on the display,
The setting of the screen based on the set contrast is applied only to the security information input portion
User device. The method of claim 6,
Wherein the set contrast is set to 6%. The method of claim 6,
Wherein the value of the set contrast is calculated based on the cognitive abilities of the center line and the center line in order to change sequentially from a value of the initial contrast value to a larger value or to a smaller value through at least one step Is set to a minimum value,
Wherein the initial contrast value is set in consideration of the age of the user. delete The method of claim 6,
Wherein the information on the security information input screen further includes information on whether the security information input portion is output on the security information input screen.

Images