KR20150067813A - Method and apparatus for inputting password, and recording medium for storing program using the same - Google Patents

Abstract

The present invention provides a method and an apparatus for inputting a password and a recording medium using the same. The method for inputting the password according to the present invention comprises the steps of: providing a temporary secret value configured to be different from the password in the case of satisfying a preset activation condition; providing an input interface for selecting the temporary secret value in response to the password or selecting the password in response to the temporary secret value; and receiving the temporary secret value or the password selected via the input interface. The present invention enables a safe password input in a mobile device like a smartphone.

Description

[0001] The present invention relates to a method and apparatus for inputting a password and a recording medium storing a program using the method and apparatus,

The present invention relates to a password input method and apparatus, and a recording medium using the same. More particularly, the present invention relates to a method and apparatus for securely entering a password using a mobile smart computing device such as a smart phone.

As mobile smart computing devices, such as smartphones, tablet computers, or tabletop computers, are increasing, the input of information that requires security in open places is increasing.

For example, in recent years, many people use smart phones to process sensitive and secure information such as personal information, business information, financial information, password input, etc. in open places such as streets, subways, buses and buildings do.

The input of information that requires security in such an open place is required for the shoulder surfing attack, which is an attack in which another person observes the user interface directly over the shoulder and acquires personal information, and the recording attack by hidden camera, camera of smart device, Threats are increasing.

Japanese Laid-Open Patent Publication No. 2012-181716 discloses a method in which an authentication server provides a color code corresponding to a user identifier code to a user terminal and performs user authentication using a color password generated by a user according to a color code There is a bar. In this case, there is a restriction that network communication between the user terminal and the authentication server is required.

Therefore, it is necessary to have an effective technique for preventing information leakage to the user's password by a simple method that can be secure and secure even in an open place.

An object of the present invention is to provide a password input device and method that can provide a secret value to a user only when a preset condition is satisfied and securely input a password using the provided secret value.

It is another object of the present invention to provide a password input device and method capable of providing a user interface capable of inputting a password by using a secret value only when the predetermined condition is satisfied .

The technical objects of the present invention are not limited to the above-mentioned technical problems, and other technical subjects not mentioned can be clearly understood by those skilled in the art from the following description.

According to another aspect of the present invention, there is provided a method of inputting a password to a device of the present invention,

Providing a temporary secret value configured differently from the password if the predetermined activation condition is satisfied; Providing an input interface for selecting the temporary secret value corresponding to the password or for selecting the password corresponding to the temporary secret value; And inputting the temporary secret value or the password selected through the input interface.

The temporary secret value is arbitrarily provided so as to be different from the password in kind or order (the temporary secret value is randomly generated, so that it may be provided with the same value as the password by chance) Can be determined arbitrarily before or when satisfied.

The method of inputting a password of the present invention may include determining whether a password corresponding to the selected temporary secret value or the selected password matches a predetermined password.

Here, the predetermined activation condition may be,

A condition relating to a tilted angle of the device, a touch input area condition in which a touch is to be input, or a proximity sensor recognition condition,

It may be a condition for preventing the information related to the temporary secret value or the password from being leaked to the outside.

The provision of the provisional secret value according to the present invention, when the predefined activation condition is satisfied, activates the procedure for inputting the password and provides a provisional secret value different from the password. The present invention may include an operation of deactivating the password input procedure when it is determined that satisfaction of a predetermined activation condition is not maintained before the activated input procedure is completed.

Wherein the temporary secret value is any one of a color, a number, a character and a shape, the input interface includes an arrangement of a temporary secret value array in which a key for selecting the temporary secret value is arranged and a password array . ≪ / RTI >

The input interface may be configured such that the temporary secret value array and the password secret are superimposed on each other, or the respective keys included in the array correspond to each other.

By moving at least a part of the arrangement of the temporary secret values or the arrangement of the passwords in the presented input interface so as to match the password to be input by the user with the provisional secret value or to input the provisional secret value to the user And matching the password with the password. The receiving step may be a step of receiving the temporary secret value or the password selected by the matching step.

In addition, a touch area for receiving a touch input is further displayed on a part of the screen of the device, and the predetermined activation condition may be a condition for receiving a touch input in the touch area. Providing the temporary secret value may be configured to provide the temporal secret value differently according to a position at which the touch input is received in the touch area.

According to another aspect of the present invention, there is provided a method for providing a temporary secret value, the temporary secret value being configured differently from the password when the predetermined activation condition is satisfied; Providing an input interface for selecting the temporary secret value corresponding to the password or for selecting the password corresponding to the temporary secret value; And inputting the temporary secret value or the password selected through the input interface. The computer readable recording medium records a program on which a password input method is performed.

According to another aspect of the present invention, there is provided an apparatus for inputting a password, comprising: a condition determination unit for determining whether a predetermined activation condition is satisfied; A secret value providing unit for providing a temporary secret value different from the password when the activation condition is satisfied; An interface providing unit for providing the input interface for selecting the temporary secret value corresponding to the password or for selecting the password corresponding to the temporary secret value; And an input unit for receiving the temporary secret value or the password selected through the input interface.

In addition, the password input device of the present invention may further include a control unit for recognizing the inputted temporary secret value or the password as a valid password input when the inputted temporary secret value or the password matches the predetermined password.

The predetermined activation condition may be implemented to be at least one of a condition related to the tilted angle of the device, a touch input area condition in which a touch is input, or a proximity sensor recognition condition. A condition for preventing information related to selecting the temporary secret value or the password from being leaked to the outside.

Wherein the temporary secret value is one of a color, a number, and a character,

The interface unit may provide an input interface including an arrangement of temporary secret values in which keys are arranged for selecting the temporary secret value and a password arrangement in which keys for selecting the password are arranged.

In addition, the interface unit may provide an input interface in which the temporary secret value array and the password array are overlapped with each other, or the respective keys included in the array correspond to each other.

The interface may also provide, at the presented input interface, an input interface in a form that enables moving at least a portion of the temporary secret value arrangement or the password arrangement. The input interface may be configured to match a password to be input by the user with the provisional secret value or to match the provided provisional secret value with a password to be input by the user. The input unit may receive the temporary secret value or the password selected by the matching operation.

The interface unit may further provide a touch area for receiving a touch input on a part of a screen of the device, and the secret value providing unit may provide the temporary secret value differently according to a position at which the touch input is received in the touch area can do.

According to the present invention as described above, a password can be securely input even in an open space.

That is, even when the same password is input, the secret value used to input the password may be different from the present invention, so that it can be safe from theft, shoulder surfing and recording attacks.

In addition, since the user can set the conditions for confirming the secret value, it is not easy for others to confirm the secret value.

Further, according to the present invention, when the user operates to satisfy the condition for confirming the secret value, a state in which it is not easy for another person to confirm the secret value in the open space is naturally formed, and information of the secret value is leaked to the outside Can be prevented.

In addition, the present invention enhances security compared to existing input methods for improving security, and shortens the execution time for authentication, thereby reducing inconvenience to the user.

1 is a diagram for explaining an embodiment of a method for inputting a password disclosed in the present specification.
2 is a diagram for explaining an embodiment of a password input device disclosed in this specification.
3 is a diagram for explaining an embodiment of secret value input disclosed in this specification.
4 is a diagram for explaining another embodiment of the temporary secret value input disclosed in the present specification.
5 is a diagram for explaining one embodiment of the predetermined conditions disclosed in this specification.
FIG. 6 is a diagram for explaining the second step shown in FIG.
7 is a diagram for explaining an embodiment of a method of providing a temporary secret value.
FIG. 8 is a diagram for explaining FIG. 7 (a) in detail.
FIG. 9 is a diagram for explaining FIG. 7 (b) in detail.
FIG. 10 is a diagram for explaining an embodiment of provision of a temporary secret value and an input interface.

The following merely illustrates the principles of the invention. Therefore, those skilled in the art will be able to devise various apparatuses which, although not explicitly described or shown herein, embody the principles of the invention and are included in the concept and scope of the invention. It is also to be understood that all conditional terms and examples recited in this specification are, in principle, expressly intended for the purpose of enabling the inventive concept to be understood and are not to be construed as limited to such specifically recited embodiments and conditions do.

It is also to be understood that the detailed description, as well as the principles, aspects and embodiments of the invention, as well as specific embodiments thereof, are intended to cover structural and functional equivalents thereof. It is also to be understood that such equivalents include all elements contemplated to perform the same function irrespective of the currently known equivalents as well as the equivalents to be developed in the future, i.e., the structure.

In the claims of the present specification, the elements represented as means for performing the functions described in the detailed description may include, for example, a combination of circuit elements performing the function or any type of software including firmware / And is coupled with appropriate circuitry for executing the software to perform the function. It is to be understood that the invention as defined by the appended claims is not to be interpreted as limiting the scope of the invention as defined by the appended claims, as the functions provided by the various enumerated means are combined and combined with the manner in which the claims require. .

It is to be understood that when an element is referred to as being connected or connected to another element, it may be directly connected or connected to the other element, although other elements may be present in between. On the other hand, when it is mentioned that an element is directly connected or directly connected to another element, it should be understood that no other element exists in between.

Unless defined otherwise, all terms (including technical and scientific terms) used herein may be used in a sense commonly understood by one of ordinary skill in the art to which this invention belongs. Also, commonly used predefined terms are not ideally or excessively interpreted unless explicitly defined otherwise.

In this specification, a singular form may include plural forms unless specifically stated in the phrase. It is noted that the terms "comprises" and / or "comprising" used in the specification are intended to be inclusive in a manner similar to the components, steps, operations, and / Or additions.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: . In the following description, a detailed description of known technologies related to the present invention will be omitted when it is determined that the gist of the present invention may be unnecessarily blurred. Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

This specification discloses a secure password entry method using a mobile smart computing device such as a smart phone. According to the inventions disclosed in this specification, a password can be safely and easily input by inputting a password using only a secret value that can be confirmed only by a user. A secret value for a password may be input by using a slot number arranged in an input interface to input a secret number so that a secret value that can be confirmed only by a user is matched with a number in the corresponding slot. For this purpose, it is possible to input the password safely and easily by using the increasing and decreasing number operation method using the control pad. Meanwhile, a special sensor such as a touch sensor and a motion sensor mounted on the device can be used as a secret value transfer interface.

Hereinafter, the present invention will be described in detail with reference to the drawings.

1 is a diagram for explaining an embodiment of a method for inputting a password disclosed in the present specification.

The flow shown in FIG. 1 includes the following steps, which are performed in a time-series manner in the password input device 200. Referring to FIG. 1, a method of inputting a password to a device includes activating a password input procedure when a preset activation condition is satisfied (S101), generating a temporary secret value configured differently from a password, A step S102 of providing an input interface for selecting a temporary secret value corresponding to a password or selecting a password corresponding to a temporary secret value, receiving a temporary secret value or a password selected through the input interface S103 ); And a step (S104) of determining whether the inputted information matches a predetermined password.

First, the condition determination unit 201 determines whether the predetermined active condition is satisfied by using the information sensed through the device.

Here, the device is a device that includes the password input device 200 as one component, for example, a mobile terminal such as a smart phone. The password may be an array of numbers, or a form of a permutation, and the password input device may be configured to already know the password. Of course, a separate user authentication server may be implemented to maintain and manage information about the user's password.

The predetermined activation condition means a condition for activating a procedure for inputting a password, and may be a condition for simply turning on the device or a condition such as touching the touch screen by a predetermined number of times.

Alternatively, such an activation condition may be set to a more complex form, for example, the predetermined activation condition may include at least one of a condition about a tilted angle of the device, a touch input area condition in which a touch is to be input, The above conditions may be included. On the other hand, the activation condition may be set so that the operation of the user is a form in which information about the secret value is not leaked to the other person.

Meanwhile, the password input method may further include determining whether the predetermined activation condition is satisfied before the activated input procedure is completed, and stopping or deactivating the input procedure if satisfaction is not maintained.

Next, the secret value providing unit 202 generates a temporary secret value configured differently from the actual user secret, and the interface providing unit 203 provides an input interface for selecting a temporary secret value or a secret (S102).

 However, even if the procedure for inputting the password is activated at first because the active condition described above is satisfied, the process of inputting the password may be interrupted or deactivated if the active condition is not maintained during the input of the password. Depending on the implementation example, only the part providing the temporary secret value may be deactivated.

The temporary secret value corresponds to the password, and may include at least one of color, number, and character. If the temporary secret value is presented as a number, the interface provider may display a numeric array of numeric keys, or a numeric keypad on the screen.

The temporary secret value may be a one-time password that is only available in the authentication session. Since the password is already known by the user, the temporary secret value further encrypts the password. For example, if the password is '1' and the corresponding temporary secret value is '2', the user inputs a password by locating the temporary secret value '2' where the password '1' should be input. Alternatively, the password can be input by placing the password '1' which the user has to input at the position of the temporary secret value '2'.

Since the device possessed by the user already knows the correspondence relationship between the secret value and the password, the user interprets '2' inputted by the user as the password '1' at the place where the password '1' should be inputted.

The temporary secret value may be predefined prior to activation, or may be a value that is set arbitrarily when activated. When the normal password input procedure is activated, the temporary secret value is provided to the user, but the secret value may be provided to the user according to the predetermined output condition depending on the implementation.

For example, when a plurality of temporary secret values are provided to a user, all the temporary secret values may be provided at one time, or a secret corresponding to a part of the temporary secret value or the number of passwords designated by the user, The output condition may be set to provide only the value. Or provision of the temporary secret value may use the previously set active condition as an output condition.

The input interface provided by the interface providing unit 203 may include an interface through which the user can determine the input of the temporary secret value so that the temporary secret value corresponds to the password in inputting the password. Such an input interface for inputting the temporary secret value can be adjusted by using a button mounted on the device or by using a screen touch of the user in the case of the touch screen.

In the case of a touch screen, a scroll wheel or a circular wheel pad can be used. Or the determination of the input of the secret value may be implemented by a special sensor of the device. For example, it may be controlled by the inclination information of the device, and a direction sensor, a gyro sensor, a gravity sensor, or the like may be used for this purpose.

The input unit 204 receives the temporary secret value or the password selected by the user through the input interface (S103).

The control unit 205 determines whether the input information matches the predetermined password (S104). Here, the authentication of the input information can be performed not only at the initial stage of the authentication procedure, but also at the intermediate stage of authentication. The control unit checks whether the temporary secret value or the password selected and inputted by the user through the operation such as scrolling matches the password of the predetermined user, and if a discrepancy occurs, Lt; / RTI >

According to the above-described method, when the user inputs a temporary secret value given at random instead of inputting the password, the inputted temporary secret value and the password are not exposed to a third party. Also, when a user's password is located at a position specified by a random temporary secret value, there is an advantage in improving security when compared with the conventional input methods.

2 is a diagram for explaining an embodiment of a password input device disclosed in this specification.

Referring to FIG. 2, the password input device 200 includes a condition determination unit 201 for activating a password input procedure when a preset activation condition is satisfied, a secret for generating a temporary secret value and displaying it on the screen of the device An input unit 204 for inputting a temporary secret value or a password selected by a user, an input unit 204 for receiving a temporary secret value or a password selected by the user, And a control unit 205 which recognizes whether the secret value or the password is valid.

Here, the temporary secret value is preset before activation or can be arbitrarily set at the time of activation. The temporary secret value may include at least one of color, number, and character. The predetermined activation condition may include at least one of a condition related to an inclined angle of the device, a touch input area condition in which a touch is to be input, or a proximity sensor recognition condition.

The condition determination unit 201 determines whether the satisfaction of the predetermined activation condition is maintained before the activated input procedure is completed, and may stop or deactivate the input procedure if the satisfaction is not maintained.

The temporary secret value may be provided to the user according to a predetermined output condition, and the input interface may include an interface through which the user can determine the input of the secret value so that the secret value corresponds to the password. The determination of inputting the secret value at the input interface can be controlled by the password input device 200 or the inclination information of the device itself.

The input interface can be implemented by superimposing a temporary secret value array and a password array. Also, the keys included in the temporary secret value array and the keys included in the password array may be implemented within a predetermined distance or in association with each other in a predetermined arrangement. Here, the relation on the array is such that, for example, when each of the keys is represented by a matrix of the same size, the keys having the same position in the matrix correspond to each other.

A detailed description of the confidential information input device will be omitted here for duplicating the description of the confidential information input method of FIG.

Hereinafter, specific examples of the password input method and the password input device will be described in detail with reference to the drawings.

3 is a diagram for explaining an embodiment of secret information input disclosed in this specification.

3, numeral pads 302 are arranged in the input interface 300, and slots 303 are located in the numeric pads 302. [

In this embodiment, the numeric pad 302 is an example of an arrangement of passwords, and the numerals in the form of a slot 303 implemented to move within a numeric pad are examples of an arrangement of temporary secret values.

And a provisional secret value providing space 301 in which a temporary secret value is output to the user is arranged at the upper part. When the password input procedure is activated, a temporary secret value is temporarily given, where the temporary secret value may be a random temporary secret value given differently according to the trial. The user can input a given temporary secret value instead of the password through the input interface.

In the embodiment of FIG. 3, the secret value is input to the slot of the numeric pad 302 matching the secret number. The numbers in the slot 303 are provided in an arbitrary order or in a specific order, and the secret value is input by increasing / decreasing the number.

Here, the number of the number pad 302 in which the corresponding slot 303 is located is the password of the user, and the number to be input to the corresponding slot 303 is the temporary secret value. The temporary secret value can be variously configured by color, number, letter, etc. The temporary secret value can be used as a preset value by the user, and a value arbitrarily provided by the system can be used.

3, when the operation pad 304 in the shape of a lock lock is dragged clockwise or counterclockwise at the lower end, the number of the slot 303 below the number of the number pad 302 Temporary secret values) are shifted to the left and right. These numbers are incremented or decremented to match the corresponding secret values, and a secret value is entered to perform password authentication.

3 (a) to 3 (d) illustrate an input process in which the first secret number is '1' and the first secret number is set to '2'. Drag the bottom operating pad 304 counterclockwise to increase the number below the slot 303 number to two. As shown in FIG. 3 (d), when the numeral 2 is input into the slot 303 of the numeral pad 302 of the first numeral, the first password is inputted by touching the numeral 2.

The example of FIG. 3 shows an example in which the input of the password is completed by fixing the arrangement of the password and placing the temporary secret value at the position of the fixed password. However, conversely, it is also possible to fix the arrangement of the temporary secret values and move the password of the user to be input at the position of the presented temporary secret value, thereby completing the input of the password. In addition to increasing or decreasing the number in the form of a slot, in addition to locating a corresponding number, a provisional secret value arrangement and a password arrangement are separately provided in an image form that can be moved through a touch operation, It is also possible to implement such that the password is input by placing the same password in the same place.

4 is a diagram for explaining another embodiment of the password input disclosed in this specification.

Figure 4 is the same as Figure 3, showing an interface using the tilt of the device for an increment / decrement operation on a number in a slot.

If the device is tilted in a specific direction, as shown in Fig. 4 (a) and 4 (b), the numbers can be increased / decreased. In Fig. 4 (b), the number is increased by tilting the device to the left. As you continue to tilt your device in a certain direction, the numbers will continue to increase / decrease. When the number is matched with the number corresponding to the password, the password is input by touching the screen.

5 is a diagram for explaining one embodiment of the predetermined conditions disclosed in this specification. These predetermined conditions can be utilized as the above-described active condition and output condition.

When a password input procedure is activated or a temporary secret value is provided to a user, the user may execute a certain condition if the condition is satisfied and may not execute if any of the conditions is not satisfied. Here, the specific condition may be set so that the device is tilted by a predetermined angle, then the device screen is touched with the other hand, and the proximity sensor (not shown) recognizes the condition. The specific conditions for activating the password entry procedure or providing the secret value to the user can be variously set according to the application of the sensor or interface included in the device.

Referring to FIG. 5 (a), the first step is shown as an example of a specific condition. The device is tilted by a predetermined angle (or more). If this condition is satisfied, the system can notify that the condition is satisfied by the vibration, and the region 501 to be touched can be displayed in a specific portion of the screen as shown in FIG. 5 (b).

The touch area 501 is located near the proximity sensor, and may be changed depending on the device or interface configuration. 5 (b) shows a screen in which the device is tilted to the left, and a touch area is located on the left side of the screen. If the tilting degree of the device in the middle does not satisfy the specific condition, the touch region 501 can be made to disappear again. The tilting direction and tilting degree of the device may be different depending on the setting, and thus the area to be touched can be changed.

In the second step, the touch area 501 shown in the state of FIG. 5 (b) is touched, and at the same time, the upper end of the device is covered by the user's hand and recognized by the proximity sensor. The order of recognition of the hand by the touch sensor and the proximity sensor is irrelevant, but only if both conditions are satisfied, it can be activated.

FIG. 6 is a diagram for explaining the second step shown in FIG.

Referring to FIG. 6, if the conditions of the second step are satisfied as shown in FIGS. 6A and 6B, a temporary secret value is stored in the secret value output area 601 as shown in FIG. 6C . The temporary secret value shown in (c) of FIG. 6 is four digits. Even if a secret value is output satisfying all of the above-described specific conditions, it is possible to prevent the secret value from being displayed when the inclination, the touch recognition, and the proximity sensor recognition conditions are not satisfied. If all of these conditions are satisfied, it can be switched back to the activated state.

7 is a diagram for explaining an embodiment of a method of providing a temporary secret value.

7A illustrates a method of generating a space 701 by touching a specific area of the device screen to provide a temporary secret value. It can be confirmed that it is generated at a different position as compared with FIG. 6 (b). 7B is a diagram showing a combination of FIG. 6B and FIG. 7A. However, the temporary secret value is provided at the same position as FIG. 6B, A temporary secret value is provided.

FIG. 8 is a diagram for explaining FIG. 7 (a) in detail.

Referring to FIG. 8, when a user touches a part of the touch area 801, a temporary secret value of the corresponding position is provided. The provisional secret value provided at this time may be provided through the upper window of the keypad, and may also be provided through some space of the touch area.

In FIG. 8A, when the left end of the touch area 801 is touched, the first secret value '4' is displayed in the corresponding area. When the hand is moved while being dragged to the right, a temporary secret value located in the touched area is displayed . In FIG. 8B, '3' is shown, and in FIG. 8C, '9' is shown on the rightmost side.

 According to this method, it is possible to operate such that the temporary secret value is covered by the hand while touching, and a temporary secret value is displayed by slightly touching the right portion in the corresponding area. The touch area 801 may be one of right, left, top, and bottom of the neighborhood showing the temporary secret value according to the applied method.

FIG. 9 is a diagram for explaining FIG. 7 (b) in detail.

FIG. 9A illustrates that when a specific area located in the right middle of the touch area 901 is touched and dragged to the right, the numbers from the left side of the secret value to the corresponding position in the area 902 where the temporary secret value is provided And FIG. 9B shows only the temporal secret value of the corresponding place of the touched portion in the touch region 901 through the region 902. In FIG.

FIG. 10 is a diagram for explaining an embodiment of provision of a temporary secret value and an input interface.

10, (a) of FIG. 10 shows a configuration in which the lower operation pad shown in FIG. 6 (a) is turned clockwise or counterclockwise using a circular image, Mode can be used.

FIG. 10 (b) is the same as FIG. 6 (a) but shows a difference in the format for displaying the temporary secret value. These interfaces can be configured variously according to the implementation.

Meanwhile, the above-described method of inputting a password can be implemented as a computer-readable recording medium.

A computer-readable recording medium includes all kinds of recording media in which data that can be read by a computer system is stored. Examples of the computer-readable recording medium include a RAM, a ROM, a CD-ROM, a magnetic tape, an optical data storage device, a floppy disk, and the like.

In addition, the computer-readable recording medium may be distributed over network-connected computer systems so that computer readable codes can be stored and executed in a distributed manner. And, functional programs, codes, and code segments for implementing the recording method can be easily deduced by programmers in the technical field to which the present invention belongs.

A computer-readable recording medium for implementing a password input method includes a step of activating a password input procedure when a preset activation condition is satisfied, a secret value corresponding to a password is generated and provided to a user, Receiving a secret value corresponding to the password through the input interface from the user, and recognizing the input as a valid password input when the secret value corresponds to the password . Here, the secret value is preset before activation or may be arbitrarily set upon activation.

The predetermined activation condition may be at least one of a condition regarding a tilted angle of the device, a touch input area condition in which a touch is to be input, or a proximity sensor recognition condition. According to the implementation, the password input method may further include determining whether a predetermined condition is satisfied before the activated input procedure is completed, and stopping or deactivating the input procedure if satisfaction is not maintained.

The apparatus and method for inputting a password according to an embodiment of the present invention can securely input a password even in an open space.

Currently, OTP technology is being used to enhance security for user authentication in financial services. Although it is not used frequently due to the inconvenience of having a separate OTP device in the past, it is expected that the demand will increase as a method that can be used in smart computing devices has recently been developed. The inventions disclosed in this specification can be widely used to securely transmit an OTP in a smart computing device, and provide a password input method based on the OTP to securely transmit a secret value of a user even in an open environment. In addition, the proposed technology does not require any additional hardware, and since it has improved security even by simple software modification and modification, it does not require much effort in commercialization and is cost effective.

That is, even if the same password is input, the secret information input device and method according to the embodiment of the present invention may be different from the secret value used for inputting the password, and may be safe from theft, shoulder surfing and recording attacks .

In addition, the apparatus and method for inputting a password according to an embodiment of the present invention can set a condition for confirming a secret value, so that it may not be easy for others to confirm the secret value.

In addition, the apparatus and method for inputting a password according to an embodiment of the present invention allow a state in which it is not easy for another person to check a secret value in an open space when a user operates to satisfy a condition for checking a secret value, Thus, it is possible to prevent information of the secret value from being leaked to the outside.

In addition, the apparatus and method for inputting a password according to an embodiment of the present invention are more secure than existing input methods for improving security, and at the same time, the execution time for authentication is shortened, Can be reduced.

Each component in FIG. 1 may refer to software or hardware such as a field-programmable gate array (FPGA) or an application-specific integrated circuit (ASIC). However, the components are not limited to software or hardware, and may be configured to be in an addressable storage medium and configured to execute one or more processors. The functions provided in the components may be implemented by a more detailed component or may be implemented by a single component that performs a specific function by combining a plurality of components.

While the present invention has been described in connection with what is presently considered to be practical exemplary embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, You will understand. It is therefore to be understood that the above-described embodiments are illustrative in all aspects and not restrictive.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is clearly understood that the same is by way of illustration and example only and is not to be taken by way of illustration, It will be understood that various modifications and applications are possible. For example, each component specifically shown in the embodiments can be modified and implemented. It is to be understood that the present invention may be embodied in many other specific forms without departing from the spirit or essential characteristics thereof.

201: Condition judging unit
202:
203: Interface offering
204:
205:

Claims (18)

In a method for entering a password into a device,
Providing a temporary secret value configured differently from the password if the predetermined activation condition is satisfied;
Providing an input interface for selecting the temporary secret value corresponding to the password or for selecting the password corresponding to the temporary secret value; And
And inputting the temporary secret value or the password selected through the input interface. The method according to claim 1,
Wherein the temporary secret value is arbitrarily provided so as to be different from the password in kind or order, and the temporary secret value is arbitrarily determined before or after the activation condition is satisfied. The method according to claim 1,
And determining whether the password corresponding to the selected temporary secret value or the selected password matches a preset password. The method according to claim 1,
The predetermined activation condition is
A condition relating to a tilted angle of the device, a touch input area condition in which a touch is to be input, or a proximity sensor recognition condition,
Wherein the temporary secret value is a condition for preventing information related to the temporary secret value or the password from being leaked to the outside. The method according to claim 1,
Providing the temporary secret value may comprise:
Activating the password input procedure and providing a temporary secret value different from the password when the predetermined activation condition is satisfied,
And deactivating the password entry procedure if it is determined that satisfaction of a predetermined activation condition is not maintained before the activated input procedure is completed. The method according to claim 1,
Wherein the temporary secret value is one of a color, a number, and a character,
Wherein the input interface includes an arrangement of temporary secret values in which keys are arranged for selection of the temporary secret value, and a password arrangement in which keys for selecting the password are arranged. The method according to claim 6,
The input interface
Wherein the temporary secret value array and the password array are superimposed on each other or the respective keys included in the array correspond to each other. 8. The method of claim 7,
In the presented input interface, by moving at least a portion of the temporary secret value array or the password sequence,
Matching the password to be input by the user with the provided provisional secret value or matching the provided provisional secret value with the password to be input by the user; Further comprising:
The method of claim 1,
And inputting the temporary secret value or the password selected by the matching step. The method according to claim 1,
Wherein a touch area for receiving a touch input is further displayed on a part of the screen of the device, and the predetermined activation condition is a condition for receiving a touch input in the touch area. 10. The method of claim 9,
Providing the temporary secret value may comprise:
Wherein the temporary secret value is provided differently according to a position at which the touch input is received in the touch area. Providing a temporary secret value configured differently from the password if the predetermined activation condition is satisfied; Providing an input interface for selecting the temporary secret value corresponding to the password or for selecting the password corresponding to the temporary secret value; And inputting the temporary secret value or the password selected through the input interface. A computer-readable recording medium having recorded thereon a program for executing a password input method. A password input device for inputting a password to a device,
A condition judging unit for judging whether or not the preset activation condition is satisfied;
A secret value providing unit for providing a temporary secret value different from the password when the activation condition is satisfied;
An interface providing unit for providing the input interface for selecting the temporary secret value corresponding to the password or for selecting the password corresponding to the temporary secret value; And
And an input unit for inputting the temporary secret value or the password selected through the input interface. 13. The method of claim 12,
And recognizing the input temporary secret value or the password as a valid password input when the inputted temporary secret value or the password matches the predetermined password. 13. The method of claim 12,
A condition relating to a tilted angle of the device, a touch input area condition in which a touch is to be input, or a proximity sensor recognition condition,
Is a condition for preventing information related to selecting the temporary secret value or the password from being leaked to the outside. 13. The method of claim 12,
Wherein the temporary secret value is one of a color, a number, and a character,
Wherein the interface unit provides an input interface including an arrangement of temporary secret values in which keys are arranged for selecting the temporary secret value and a password arrangement in which keys for selecting the password are arranged. 16. The method of claim 15,
The interface unit
Wherein the temporary secret value arrangement and the password arrangement are superimposed on each other or each of the keys included in the arrangement corresponds to each other. 17. The method of claim 16,
The interface unit
In the presented input interface, by moving at least a portion of the temporary secret value array or the password sequence,
And provides an input interface capable of matching a password to be input by a user with the provided provisional secret value or matching the provided provisional secret value with a password to be input by the user,
Wherein the input unit receives the temporary secret value or the password selected by the matching operation. 13. The method of claim 12,
Wherein the interface unit further provides a touch area for receiving a touch input on a part of the screen of the device,
Wherein the preset activation condition is a condition that a touch input is received in the touch area,
Wherein the secret value providing unit provides the temporary secret value differently according to a position at which the touch input is received in the touch area.

Images