KR20150072536A - method and apparatus for inputting user authentication information - Google Patents

Abstract

Disclosed are a method and an apparatus for inputting user authentication information. The disclosed method for inputting user authentication information comprises the steps of: displaying multiple pointers on key arrangement consisting of multiple keys; moving the pointers according to touch input of a user; deciding user input according to the position of the key arrangement of a secret pointer which is one pointer among the pointers; recognizing predefined movement of the user; and displaying the secret pointer if the user movement is recognized. According to the present invention, security can be improved when inputting secret information through installation of software which performs simple algorithm to a computing device such as a mobile terminal or the like.

Description

[0001] The present invention relates to a method and apparatus for inputting user authentication information,

The present invention relates to a method and apparatus for inputting user authentication information. More particularly, the present invention relates to a method for inputting a user's password through a mobile computing device such as a smart phone.

As mobile smart computing devices such as smart phones, tablet computers, and tabletop computers are increasing in number, sensitive information processing such as personal information, work related information, and financial information is greatly increasing. In particular, the input of information requiring security in the open space is increasing, and the sensitive information input through the smart device can be detected by the shoulder surfing attack and the hidden camera or smart device Increases the threat of a recording attack attempting to observe using a camera.

Traditional authentication techniques are not secure against shoulder surfing, recording attacks, and can not resist spyware attacks. In addition, the proposed authentication schemes have a disadvantage in that their security is weak in actual use and the execution time for authentication is too long in consideration of safety.

Japanese Laid-Open Patent Publication No. 2012-181716 discloses a method in which an authentication server provides a color code corresponding to a user identifier code to a user terminal and performs user authentication using a color password generated by a user according to a color code There is a bar. In this case, there is a restriction that network communication between the user terminal and the authentication server is required.

Therefore, it is necessary to have an effective technique for preventing information leakage to the user's password by a simple method that can be secure and secure even in an open place.

In this specification, an object of the present invention is to provide a user authentication information input method and apparatus which can securely input authentication information such as a password and a password but does not burden the user in using the same.

The user authentication information input method disclosed in this specification includes the steps of: displaying a plurality of pointers on a key arrangement comprising a plurality of keys; Moving the plurality of pointers according to a touch input of a user; And determining a user input according to a position on the key arrangement of the secret pointer, which is a pointer of any one of the plurality of pointers.

Recognizing a predefined user action; And displaying the secret pointer when the user operation is recognized.

And the user operation is an operation of covering at least a part of the area in which the secret pointer is displayed.

The recognition of the user operation may be performed through proximity sensors or touch recognition.

And the secret pointer is displayed only while the recognized user's operation is recognized.

At least some of the plurality of pointers may have different shapes or different colors. And may include a direction pointed by the pointer or a direction in which the pointer rotates.

The plurality of pointers may be dynamic images.

And at least a part of the plurality of pointers may be different in the form of change.

The touch operation of the user may include a drag, and the plurality of pointers may be moved in the same direction by the drag operation.

The plurality of pointers may be displayed in the opposite display area which is symmetrical with the moving direction when there is no more space to move.

The key arrangement may be such that keys correspond to two or more different letters, numbers or symbols.

The determining of the user input may determine the character, number, or symbol corresponding to the key where the secret pointer is located as the user input.

The authentication information may be a letter, number, or symbol previously designated for authentication of the user.

The user authentication information input device disclosed in this specification includes a display unit that displays a plurality of pointers on a key arrangement including a plurality of keys and moves the plurality of pointers according to a touch input of a user; And an input unit for determining a user input according to a position on the key arrangement of the secret pointer, which is a pointer of any one of the plurality of pointers.

The display unit may further display the secret pointer separately from the plurality of pointers when a predefined user action is recognized.

And the user operation is an operation of covering at least a part of the area in which the secret pointer is displayed.

The recognition of the user operation may be performed through proximity sensors or touch recognition.

And the secret pointer is displayed only while the user operation is recognized.

The touch operation of the user may include a drag, and the plurality of pointers may be moved in the same direction by the drag operation.

The determining of the user input may determine the character, number, or symbol corresponding to the key where the secret pointer is located as the user input.

The method for inputting user authentication information disclosed in this specification includes: recognizing a predefined user action; If the user operation is recognized, displaying a key arrangement comprising a plurality of keys and at least one pointer on the key arrangement; And determining a user input according to the position of the pointer on the key arrangement.

Therefore, the user authentication information input method and apparatus of the present invention can safely input authentication information such as a password and a password through the installation of software that performs a simple algorithm on a computing device such as a mobile terminal, It is possible to increase user convenience by not imposing a burden.

FIG. 1 is a diagram for explaining an embodiment of a user authentication information input method disclosed in the present specification.
2 is a block diagram illustrating a user authentication information input device disclosed in this specification.
FIG. 3 is a view for explaining a process of displaying a secret pointer by recognizing a user operation and an embodiment of pointers having different shapes.
4 is a view for explaining a process of displaying a secret pointer by recognizing a user's operation and an embodiment of pointers of different colors.
5 is a view for explaining an embodiment in which pointers on a number pad are dynamic images;
6 is a diagram for explaining an embodiment of various patterns in which pointers of a dynamic image on a number pad are changed.

The following merely illustrates the principles of the invention. Therefore, those skilled in the art will be able to devise various apparatuses which, although not explicitly described or shown herein, embody the principles of the invention and are included in the concept and scope of the invention. It is also to be understood that all conditional terms and examples recited in this specification are, in principle, expressly intended for the purpose of enabling the inventive concept to be understood and are not to be construed as limited to such specifically recited embodiments and conditions do.

It is also to be understood that the detailed description, as well as the principles, aspects and embodiments of the invention, as well as specific embodiments thereof, are intended to cover structural and functional equivalents thereof. It is also to be understood that such equivalents include all elements contemplated to perform the same function irrespective of the currently known equivalents as well as the equivalents to be developed in the future, i.e., the structure.

In the claims of the present specification, the elements represented as means for performing the functions described in the detailed description may include, for example, a combination of circuit elements performing the function or any type of software including firmware / And is coupled with appropriate circuitry for executing the software to perform the function. It is to be understood that the invention as defined by the appended claims is not to be interpreted as limiting the scope of the invention as defined by the appended claims, as the functions provided by the various enumerated means are combined and combined with the manner in which the claims require. .

It is to be understood that when an element is referred to as being connected or connected to another element, it may be directly connected or connected to the other element, although other elements may be present in between. On the other hand, when it is mentioned that an element is directly connected or directly connected to another element, it should be understood that no other element exists in between.

Unless defined otherwise, all terms (including technical and scientific terms) used herein may be used in a sense commonly understood by one of ordinary skill in the art to which this invention belongs. Also, commonly used predefined terms are not ideally or excessively interpreted unless explicitly defined otherwise.

In this specification, a singular form may include plural forms unless specifically stated in the phrase. It is noted that the terms "comprises" and / or "comprising" used in the specification are intended to be inclusive in a manner similar to the components, steps, operations, and / Or additions.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: . In the following description, a detailed description of known technologies related to the present invention will be omitted when it is determined that the gist of the present invention may be unnecessarily blurred. Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

The present disclosure discloses a method and apparatus for securely inputting authentication information that can be configured in various forms such as a password and a password in various computing devices such as a smart phone, a tablet computer, or a tabletop computer. To this end, the invention disclosed in the present specification is configured to display a pointer to a user, which presents a method of inputting authentication information, and then input authentication information to an input interface according to a pointer presented by the user. Particularly, by recognizing the user's action and activating or deactivating the display of the pointer, the user can input the authentication information after creating an environment in which the third party can hardly observe the input of the user's authentication information, such as shoulder surfing or recording attack .

1 is a flowchart illustrating an embodiment of a user authentication information input method disclosed in the present specification.

Referring to FIG. 1, the user authentication information input method of the present embodiment is performed in the following manner, which is performed in a time-series manner in a user authentication information input device, for example, a mobile computing device equipped with software for inputting authentication information.

The method for inputting user authentication information according to the present embodiment includes the steps of recognizing the operation of a user (S101), displaying a secret pointer for presenting an input method of authentication information when the operation of the user is recognized (S102) (S103) of displaying a plurality of pointers on a key arrangement (hereinafter referred to as a numeral pad) composed of a plurality of keys for inputting authentication information of a user, (S104), determining the value of the numeric pad in which the secret pointer is displayed in step S102 (S105), determining whether all the authentication information is input (S106), if all the authentication information is input, Determining whether or not the inputted authentication information matches the preset authentication information (S107), and confirming whether or not the authentication information is matched (S108).

Steps S101 to S104 are not necessarily performed in order, and step S101 may be started or step S103 may be started first. Or may be started at the same time. Steps S104 to S106 are repeated until all authentication information is input.

The step of moving the pointers and inputting the authentication information according to the user touch operation may be performed in the user authentication information input device, but the movement of the pointers and the input of the authentication information are performed in the separately provided input device And the scope of rights of the present invention should be construed to include the case where user authentication is performed separately.

In step S107, the authentication determination step may be performed in the user authentication information input device, but the separately provided authentication device may be implemented to perform user authentication, and the scope of the present invention may include a case where the user authentication is performed separately Should be construed as including.

In this embodiment, the user authentication information input device 201 may include a sensor 202, a display unit 203, an input unit 204, and an authentication unit 205. The user authentication information input device 201 is, for example, a mobile communication terminal such as a smart phone or a tablet computer. The user authentication information input device 201 may be implemented to directly determine whether the input authentication information matches the previously registered authentication information or to request authentication from another authentication server and to receive only the authentication result .

Referring to FIG. 2, the user authentication information input device 201 includes a sensor 202 for recognizing the user's operation, a secret pointer for suggesting an input method of authentication information according to the operation of the recognized user, A display unit 203 for displaying a key array including a plurality of pointers, an input unit 204 for inputting authentication information in accordance with a position on the key arrangement of the secret pointer, And an authentication unit 205 for performing authentication.

The sensor 202 may include all sensors capable of recognizing the operation of the user (S101). It is also possible to use a motion sensor including a simple type motion sensor such as a proximity sensor so as to be able to specifically discriminate the operation of the user. Alternatively, other types of sensors, such as an illuminance sensor, may be used to recognize the user's actions.

For example, when the user's hand approaches the illuminance sensor of the computing device, the illuminance is lowered, and the user may recognize that the user is preparing to input the authentication information. In some cases, a proximity sensor is incorporated in a smartphone, and in this case, a proximity sensor already built in may be used.

Receives a signal sensed by the sensor, and recognizes the operation of the user. Here, the user's operation is a predefined operation with respect to user recognition. The user operation is an operation defined for the initiation of a user recognition procedure, for example, proximity or touch operation to a part of the display portion of the smartphone. Also, the operation of the predetermined user may be an operation for blocking viewing from the outside. With this operation, information leakage can be prevented when a password is input.

The step S101 of recognizing the user's operation to prevent an error in the process of recognizing the action of the user may further include a step of receiving an input of a pre-command for inputting authentication information from the user to execute the input of the authentication information . For example, if the user touches the touch screen of the computing device twice in succession, the user may be allowed to recognize the user operation for inputting the authentication information.

Preferably, the operation of the user is set to be performed in an area where the secret pointer is displayed or within a predetermined distance from the area. The area in which the secret pointer is displayed does not strictly mean only the corresponding area of the output device (for example, the display screen of the computing device), but may also include an area in the vicinity of where the secret pointer is displayed. This operation of the user is intended to prevent a secret pointer presented in principle from being exposed to others. When the operation of the user is performed in an area in which a secret pointer is displayed (in the vicinity) Do not let them.

When the user inputs the authentication information on the touch screen, the display unit 203 displays a plurality of pointers on the key arrangement made up of the plurality of keys (S103), displays a plurality of pointers that are moved in accordance with the touch input of the user S104), and displays a secret pointer for reference of input of authentication information (S102). Here, it is desirable that the secret pointer is presented in a random form that is generated differently, for example, every time a user recognition operation is performed. The random shape may include shapes, colors, or dynamic images.

Although the method of displaying the secret pointer according to the computing device may be various, the description will be made based on what is displayed on the display screen in the present specification. The secret pointer is used as a criterion for inputting the authentication information of the user and can be presented in various forms.

For example, when the actual user authentication information is composed of a permutation (password), the display unit 203 can present the secret pointer to the user according to the recognition of the user's action. After locating the position of the presented secret pointer among a plurality of pointers on the key arrangement, the user moves the secret pointer through the touch operation (S104) and inputs a password to be actually input (S105). Therefore, it is preferable that the secret pointer is implemented so that the user does not understand the authentication information even if the key arrangement is exposed to the other person when the user inputs the authentication information.

On the other hand, it is desirable that the secret pointer be presented while the user's intention to input the authentication information is predicted. The operation of the user includes an operation of covering the pointer with a finger or the like in order to prevent the pointer from being exposed to the other person. The secret pointer may be designed to be displayed while the operation of this user is maintained, in which case the presented secret pointer may not be exposed even if the user temporarily performs another operation. Accordingly, in this case, the operation of the recognized user is removed, and while the user is inputting the authentication information, the display of the secret pointer may become inactive.

When the key arrangement including the secret pointer and the plurality of pointers is performed on a single touch screen, the area in which the secret pointer is displayed and the area in which the key arrangement is implemented are displayed separately from each other, It is also possible.

The input unit 204 can determine the input of the user authentication information according to the secret pointer. For example, a plurality of pointers are displayed on the touch screen on a key arrangement including a plurality of keys. A plurality of pointers on the key arrangement are moved according to the user's touch input. The user input (S105) is determined according to the key of the number pad corresponding to the position of the secret pointer among the plurality of moved pointers. When all of the authentication information is input (S106), the input unit 204 repeats the necessary number of pieces of authentication information.

Finally, the authentication unit 205 determines whether the input authentication information matches the preset authentication information (S107). For example, if the preset authentication information is '1', the secret pointer is displayed through the user's motion recognition, and the corresponding secret pointer is located at 5 of the numeric pad, If the user moves to the number 1 and releases the touch operation or clicks the touch operation after releasing the touch operation, it is regarded that the preset authentication information '1' is inputted.

If the input information is determined to correspond to the authentication information of the predetermined user by repeating the above operation, the authentication is completed. If not, the authentication information input procedure may be restarted. (S108) In this embodiment, Although an authentication procedure is included, the authentication procedure can be performed by a separate authentication means, so this step can be omitted.

Hereinafter, a specific embodiment of the user authentication information input method will be described with reference to the drawings.

3 is a view for explaining an embodiment of a process of displaying the secret pointer 303 and a method of inputting user authentication information by recognizing the operation of the user.

3, the computing device 301 includes a touch screen 310 and a proximity sensor 302. The touch screen 310 includes an area 308 in which a secret pointer 303 is displayed, A numeral pad-shaped area 305 is set. Pointers of different shapes are displayed on the numeric pad.

The example of FIG. 3 is an example of a user authentication information input method using pointers having different shapes. A plurality of pointers move according to the user's touch operation 306 and a number on the numeric pad where the secret pointer indicated by the user's action recognition is located is determined. Here, the numeric pad can be replaced with a keypad including keys of different characters or symbols. Hereinafter, this will be described in more detail.

3 (a) shows a user authentication information input device, for example, a sensor 302 for recognizing a user's operation in the mobile computing device 301, a touch screen screen 310 and a number pad 305 for inputting a password, FIG. In the present embodiment, the sensor 302 is preferably a proximity sensor, and the sensor 302 can recognize the operation of the user through sensing of proximity. The sensor 302 may be located directly above the touch screen 310, as shown in FIG. 3 (a), and may be located in other portions of the computing device, depending on the implementation.

The operation of the user is based on covering at least a part of the area 308 in which the secret pointer 303 appears with the hand 304 shaped like a circle. This operation is performed so that the secret pointer 303 is not exposed to others. The activation of the secret pointer 303 is performed in such a manner that the user touches the area 308 at which the secret pointer 303 appears or near the area 308 or uses the proximity sensor located at the upper end of the device. If the condition of one of the touch and the proximity operation is not satisfied, the secret pointer 303 may be deactivated so that it can not be seen by others. Basically, the secret pointer is displayed only when both the touch operation and the proximity operation are satisfied. However, even if only one of the two operations is performed according to the embodiment, the secret pointer can be displayed.

 The operation of the user can be variously set according to an interface application such as a device or a motion sensor, and the area where the secret pointer appears can be changed according to the configuration of the device.

The number pad 305 is displayed together with the start of the authentication information input procedure. However, the number pad 305 may be displayed on the touch screen 310 after the secret pointer 303 is displayed. Here, the number pad 305 may include a keypad shape using different characters or symbols.

3B shows that the secret pointer 303 is displayed when the user operation 304 is recognized and pointers 307 of different shapes are displayed on the numeric pad 309, (c) show that pointers having different directions are displayed on the numeric pad 309. Fig.

In FIG. 3 (b), the secret pointer 303 indicated by the user's operation 304 is in the form of an arrow. When the user authentication information is input, when the authentication information is 1234 as an example, the secret pointer 303 shown in FIG. 3 (b) is located at 3 on the number pad. Therefore, when the user inputs the actual authentication information, the user moves the pointers on the numeric pad and places the secret pointer in the place of 1. This operation is repeated to input the authentication number 1234.

At this time, the user's operation 304 is an operation of approaching the area 308 where the secret pointer 303 appears or the vicinity thereof, to cover the area where the secret pointer appears with the hand, and hand- . Such an operation can enhance security.

The secret pointer 303 is shown here in the form of an arrow, but other shapes are possible. Also, the secret pointer 303 appears on the number pad and is a factor for deciding the password input. The password input is determined depending on where the secret pointer 303 is located on the numeric pad.

The numeric pad may include a keypad of a type that includes different characters or symbols. The characters or symbols should be user authentication information.

The pointers on the number pad are different shapes. The different shapes are for the purpose of preventing the user from knowing the pointer to be input when viewed from the outside. This is a factor that enhances security.

Drag 306 is an operation to move pointers on the number pad. All pointers are moved by dragging. If you move the pointers by dragging and there is no more space to move, the pointers appear on the opposite side of the touch screen which is symmetrical with the direction of movement.

It is also possible to input the user authentication information while the secret pointer 303 is being displayed or while the authentication information is input, the display of the secret pointer 303 is deactivated so that the four-digit position is input at once .

One or more secret pointers to be used for user authentication can be configured. For example, if one secret pointer is used, all passwords are input with the corresponding secret pointer. If four secret pointers are used, secret pointers are used for each secret number. It is also possible to display one or more secret pointers at the same time when displaying a specific area through a hand operation to cover the secret pointer. Also, the activation of the secret pointer can be confirmed by covering the area around the secret pointer display area by hand while inputting the password.

FIG. 3 (c) shows pointers having different directions on the number pad. Thus, it is possible to use various types of pointers. Depending on the user's preference, the form can be changed at any time. The user authentication information input method for FIG. 3 (c) is the same as that described above with reference to FIG. 3 (b).

4 is a view for explaining an embodiment in which pointers 407 of different colors are displayed on the touch screen 410 by being displayed on the number pad 409. [

4, the computing device 401 includes a touch screen 410 and a proximity sensor 402. The touch screen 410 includes an area where a secret pointer 403 is displayed and an area where a number pad is displayed 405) are set. In this embodiment, the number pad 405 is exemplified as the touch screen area 410.

4A shows that the secret pointer 403 is displayed when the user operation 404 is recognized and pointers 407 of different colors are displayed on the numeric pad 409, 4B is a view showing the number pad area 405 when the recognition of the user operation 404 is removed.

The secret pointer 403 shown in FIG. 4A has a circular shape including a color. In the case where the authentication information is 1234, for example, the pointer on the numeric pad, such as the color of the secret pointer 403 shown in FIG. 4A, is located in the numeric pad 3. Therefore, when the user intends to input the actual authentication information, the pointer of the same color as the secret pointer 403 among the pointers 407 of different colors on the number pad 405 is dragged (406) When the operation is canceled or the touch operation is canceled, the number 1 is inputted.

At this time, the pointer to be moved and the other pointers move together. For example, the pointer located at 3 is located at 1 after the above operation, and the pointer moves two spaces to the left on the touch screen. Accordingly, pointers other than the pointer also move leftward by two spaces, and when there is no space to move further, the pointers appear on the screen opposite to the moving direction.

4B is a diagram showing a state in which the secret pointer is inactivated by releasing the recognition operation of the user after the display of the secret pointer is activated.

The input of the authentication information through the number pad 409 can be performed while the secret pointer 403 is being displayed or while the authentication information is being input, the display of the secret pointer 403 is deactivated, It is also possible to input.

One or more secret pointers to be used for user authentication can be configured. For example, if one secret pointer is used, all passwords are input with the corresponding secret pointer. If four secret pointers are used, secret pointers are used for each secret number. It is also possible to display one or more secret pointers at the same time when displaying a specific area through a hand operation to cover the secret pointer. Activation of the secret pointer can also be confirmed by covering the area around the secret pointer display area with the hand while inputting the password.

For example, when the user recognizes the already displayed secret pointer 403, the display of the secret pointer 403 disappears when the user's motion recognition is canceled. At this time, a pointer of the same color as the secret pointer 403 necessary for the input of the user remains on the number pad 409. Therefore, the user authentication information can be input even if there is no subsequent user action recognition.

5 is a diagram for explaining an embodiment in which a plurality of pointers are dynamic images. FIG. 5A is a diagram showing a numeral pad 501 required for inputting authentication information, and FIG. 5B is a diagram showing arrangement of pointers as dynamic images in the form of arrows. 5C is a diagram showing a state in which pointers, which are dynamic images in the form of arrows, are displayed on a number pad.

Referring to (c) of FIG. 5, in order to input authentication information by utilizing dynamic images of pointers, pointers which show different changes are needed. For example, a pointer 503 (hereinafter referred to as an input pointer) required for inputting an authentication number includes a bar-shaped figure moving in the upward direction, and a pointer 504 (hereinafter referred to as a false pointer) And may include a bar-shaped figure moving in the direction of the arrow.

If the pointer required for inputting the user authentication information is the input pointer 503, it can be distinguished from the false pointers 504 because the change form is different. this? The user can input the desired number by moving the input pointer 503 showing the change from the false pointer 504 to the authentication number of the number pad.

In other words, among the pointers of the dynamic image, the criterion for distinguishing the input pointer 503 from the false pointer 504 is that it is not important that the moving direction is upward or downward with respect to the moving direction, A pointer to the only dynamic image other than the state in which the pointers change is the input pointer. However, exceptions may include pointers to dynamic images that exhibit two or more different changes.

 Accordingly, among the pointers of the dynamic image displayed on the numeric pad, the pointer corresponding to the input pointer corresponds to the pointer of the dynamic image corresponding to the input pointer so that the user can easily grasp the direction in which the pointer of the dynamic image moves It is preferable that the number is one, two, or three prime numbers.

 In order for the information input apparatus 201 according to the embodiment of the present invention to prevent information leakage through continuous screen capture using spyware, one pointer of the dynamic image corresponding to the input pointer may be sufficient, A pointer to a dynamic image corresponding to two or three input pointers 503 may exist. However, this does not mean that the pointers of the dynamic image corresponding to the input pointers 503 among the pointers of the dynamic image provided on the touch screen are not applied. That is, the present invention can be applied to a case where the pointer of the dynamic image corresponding to the input pointer 503 occupies less than half of the number of pointers of the dynamic image provided on the touch screen.

6 is a diagram for explaining one embodiment of various forms of pointers of a dynamic image. 6 (a) is an embodiment of pointers including a bar-shaped figure moving in the inside as described with reference to FIG. 5, and FIG. 6 (b) is an example of pointers rotating clockwise or counterclockwise to be. 6 (c) is an embodiment in which the pointer-shaped pointers arranged in the divided areas of the number pad move clockwise or counterclockwise in the limited space.

The pointers of FIG. 6 (C) may be implemented to further include a large point and a small point located therein. In this example, it is also possible to construct the pointer in such a manner that small points located within a large point are rotated clockwise or counterclockwise within a large point.

6 (a) illustrates a diagram in which pointers of a dynamic image are displayed on a number pad. In FIG. 6 (a), the pointers of the dynamic image include moving bar-shaped graphics. FIG. 6A is a diagram for comparison with FIG. 6B and FIG. 6C, which is described in FIG. 5 and is omitted here.

FIG. 6B is a diagram showing the pointer 602 in the form of an arrow, which is a dynamic image, displayed on the number pad. The pointers 602 of the dynamic image rotate clockwise or counterclockwise. If the pointer rotating in the clockwise direction is an input pointer, the remaining pointers are false pointers rotating counterclockwise. It is only necessary for the user to visually recognize the type of change of the pointers. The input pointer is a pointer for inputting the user's authentication information, and the false pointer is a pointer that is not related to the user's authentication information.

The user drags the input pointer to the desired number. At this time, the touch operation is canceled, or when the touch operation is canceled, the number is inputted. The user repeats this operation and inputs desired authentication information. When the user moves the input pointer, the false pointers also move in the same direction in conjunction with the actual pointer. If there is no space to move, it may appear on the screen opposite to the direction of movement.

FIG. 6C is a diagram showing a point image pointer 602, which is a dynamic image, displayed on the number pad. The pointers of the dynamic image are in the shape of a dot and move clockwise or counterclockwise in a delimited limited space of the number pad. If the point-shaped key moving in the clockwise direction is an input pointer, the remaining pointers are false pointers moving in the counterclockwise direction. The input pointer is a pointer to input the user's authentication information, and the remaining pointers are false pointers that are not related to the user's authentication information. The authentication information input method is to allow the user to drag an input pointer and place it at a desired number. At this time, the touch operation is canceled, or when the touch operation is canceled, the number is inputted. The user repeats this operation and inputs desired authentication information. When the user moves the input pointer, the false pointer moves in the same direction with the actual pointer. If there is no space to move, it may appear on the opposite display that is symmetrical to the direction of movement.

FIG. 7 is a diagram in which a numeric pad 706 appears instead of the secret pointer indicated by the user recognition operation 704. FIG. A number pad 706 is displayed on the touch screen 701 and one pointer 707 is displayed on the number pad 706 when the user action 704 is recognized.

 In the embodiment of FIG. 7, the user action 706 causes the number pad to appear on the touch screen and one pointer 707 appears thereon. The numeric pad may comprise keys of different characters or symbols. In addition, the numeric pads can appear in order by default, but they can also display numbers at random. Recognition of the user's action is performed through a proximity sensor or touch recognition, and the user can move the pointer in a drag operation on the touch screen while the user recognition operation is in progress. However, not only the drag operation moves the pointer, but other touch operations may be possible. The pointer moved by the user's operation is placed on the number pad, and the number on the number pad on which the pointer is located is input. At this time, the password can be input by clicking after releasing the touch operation or releasing the touch operation after dragging. Drag operation 705 may be performed on input screen 702 on touch screen 701. However, only the input pad can not be used for user operation input. Depending on the embodiment, user input may be possible in other areas as well as the input pad.

The user authentication information input method disclosed in this specification does not require any additional hardware, and since it has improved security even by simple software modification and modification, it does not require much effort in commercialization and is cost effective. Also, the user authentication information input device disclosed in this specification can be implemented without any additional hardware.

Meanwhile, since the inventions disclosed in this specification can be applied to various devices having the features of openness and portability like a smart phone, they can be actively used in mobile devices and smart devices which are now widely used. In addition, it can be applied to a wide range of applications such as smart phones, tablet computers, and ATM devices, depending on the configuration of various interface applications and secret information values.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims. It can be understood that the modification and application of the present invention are possible. For example, each component specifically shown in the embodiments can be modified and implemented. It is to be understood that the present invention may be embodied in many other specific forms without departing from the spirit or essential characteristics thereof.

201: user authentication information input device 202: sensor
203: Display section 204: Input section
205: authentication unit 206:

Claims (21)

Displaying a plurality of pointers on a key arrangement comprising a plurality of keys;
Moving the plurality of pointers according to a touch input of a user; And
And determining a user input according to a position on the key arrangement of the secret pointer, which is a pointer of any one of the plurality of pointers. 2. The method of claim 1, further comprising: recognizing a predefined user action; And
And if the user operation is recognized, displaying the secret pointer. 3. The method of claim 2, wherein the user operation is an operation of covering at least a part of an area in which the secret pointer is displayed. The method of claim 3, wherein the recognition of the user action is performed through proximity sensor or touch recognition. 5. The method of claim 4, wherein the secret pointer is displayed only while the recognized user's operation is recognized. The method of claim 1, wherein at least some of the plurality of pointers are of different shapes or colors. The method of claim 1, wherein the plurality of pointers are dynamic images. 8. The method of claim 7, wherein at least some of the plurality of pointers have different forms of change. 2. The method of claim 1, wherein the touch operation of the user includes a drag, and the plurality of pointers are moved in the same direction by being interlocked with each other by the drag operation. 10. The method of claim 9, wherein the plurality of pointers are displayed in a display area opposite to the moving direction, when there is no more space to move. The method of claim 1, wherein the key arrangement corresponds to keys of two or more different letters, numbers, or symbols. 12. The method of claim 11, wherein the step of determining user input determines a character, a number, or a symbol corresponding to a key in which the secret pointer is located as the user input. The method of claim 1, wherein the authentication information is a character, a number, or a symbol previously designated for authentication of the user. A display unit that displays a plurality of pointers on a key arrangement including a plurality of keys and moves the plurality of pointers according to a touch input of a user; And
And an input unit for determining a user input according to a position on the key arrangement of the secret pointer, which is a pointer of any one of the plurality of pointers. 15. The apparatus of claim 14, wherein the display unit further displays the secret pointer separately from the plurality of pointers when a predefined user action is recognized. 16. The user authentication information input device of claim 15, wherein the user operation is an operation of covering at least a part of an area in which the secret pointer is displayed. 17. The apparatus of claim 16, wherein the recognition of the user action is performed through proximity sensor or touch recognition. 18. The apparatus of claim 17, wherein the secret pointer is displayed only while the user operation is recognized. 15. The user authentication information input device of claim 14, wherein the touch operation of the user includes a drag, and the plurality of pointers are moved in the same direction by the drag operation. 15. The apparatus of claim 14, wherein the step of determining user input determines a character, a number, or a symbol corresponding to a key in which the secret pointer is located as the user input. Recognizing a predefined user action;
If the user operation is recognized, displaying a key arrangement comprising a plurality of keys and at least one pointer on the key arrangement; And
And determining a user input according to the position of the pointer on the key arrangement.

Images